diff --git a/.gitignore b/.gitignore
index dd153be..36ad0b6 100644
--- a/.gitignore
+++ b/.gitignore
@@ -16,3 +16,6 @@ scripts/secrets.sh
 # IDE
 .trae/
 .vscode/
+
+# OS
+*.DS_Store
diff --git a/AGENTS.md b/AGENTS.md
new file mode 100644
index 0000000..5aee721
--- /dev/null
+++ b/AGENTS.md
@@ -0,0 +1,67 @@
+# AGENTS.md
+
+## 项目概述
+
+SnapGo 是一个常驻菜单栏的轻量截图工具：全局快捷键唤起选区截图，确认后自动上传到 S3 兼容对象存储（或通过 SSH/SCP 保存到远端），并把可分享链接复制到剪贴板。目前主要打磨 macOS 体验。
+
+技术栈：**Wails v2**（Go 后端 + WebView 前端）+ **Vue 3 / TypeScript / Vite** 前端。Go 后端遵循分层架构（domain → application → infrastructure），macOS 上截图选区使用原生 AppKit overlay，其它平台回退到 Wails 透明窗口 overlay。
+
+### 分层架构（`internal/`）
+
+- `domain/`：核心业务类型与接口，**不依赖任何第三方 SDK 或 OS API**（仅标准库）。如 `OSSProvider` 接口、`AppConfig`/`S3Config`/`SSHConfig`、`Screenshot`/`UploadResult`。
+- `application/`：用例编排（capture → upload/save → clipboard → notify）。**只依赖 domain 接口**，具体适配器从 `main.go`/`app.go` 注入，便于单测。如 `CaptureAndUploadService`、`CaptureActionsService`、`CaptureAndSSHService`、`ApplyAnnotations`。
+- `infrastructure/`：对接外部世界的适配器实现 —— `oss/`(S3)、`ssh/`(内置 Go client + Kerberos 委托系统 ssh)、`clipboard/`、`config/`(JSON 文件存储)、`screencapture/`、`display/`、`cursor/`、`hotkey/`、`tray/`(菜单栏)、`logging/`。
+
+### 顶层文件（`main` 包，根目录）
+
+- `main.go`：Wails 启动入口，embed `frontend/dist`，装配 tray 与 `App`。
+- `app.go`：`App` 结构体，通过 Wails `Bind` 暴露给前端的方法（RPC），编排截图/上传/保存流程与 overlay 窗口生命周期。
+- `*_darwin.go` / `*_other.go`：平台分离的 overlay、dock 图标、激活策略、帧刷新等实现。`native_overlay_darwin.go` 使用 cgo + AppKit。
+
+### 关键约定
+
+- 前端通过 Wails 自动生成的 `frontend/wailsjs/go/main/App.js` 调用后端 `App` 的导出方法；后端通过 `wruntime.EventsEmit` 向前端推事件（如 `upload:success`、`upload:failure`、`hotkey:ready`、`capture:overlay`）。
+- 新增 OSS provider 只需在 `infrastructure/oss/` 加适配器并实现 `domain.OSSProvider`，无需改 application 层。
+- S3 与 SSH 走独立 pipeline（`runUploadPipeline` vs `runSaveRemotePipeline`），避免 provider 分支泄漏进彼此。
+
+## 构建与命令
+
+依赖前置：Go 1.23+、Node/npm、`wails` CLI（`go install github.com/wailsapp/wails/v2/cmd/wails@latest`）。
+
+- `go mod tidy`：同步 Go 依赖。
+- `wails dev`：开发模式（热重载前端 + 后端），日志可直接在终端看到。
+- `wails build -platform darwin/arm64 -clean`：构建 `.app`（产物在 `build/bin/`）。
+- `./scripts/create-dev-cert.sh`：首次创建本地自签开发证书（保证 macOS TCC 权限不被反复重置）。
+- `./scripts/dev-build.sh`：本地迭代用 —— 构建 + 稳定证书重签名 + 同步到 `/Applications` + 打开。优先用它而非裸 `wails build`。
+- `./scripts/release.sh`：一键 build → sign → DMG → notarize（notarize 需 `NOTARIZE=1` 与凭证，默认跳过）。`ARCH=universal` 可出 fat binary。
+- 前端单独命令（`frontend/`）：`npm run dev` / `npm run build`（`vue-tsc --noEmit && vite build`）/ `npm run preview`。
+
+## 代码风格
+
+- **Go**：标准 `gofmt`（tab 缩进）。包级 doc 注释说明“设计动机/rationale”是本仓库的强约定，注释解释“为什么”而非“是什么”。导出标识符必须有注释。错误用 `fmt.Errorf("...: %w", err)` 包装。日志统一用 `log/slog`（结构化 kv，如 `slog.Info("...", "host", h)`）。
+- **平台分离**：用 `_darwin.go` / `_other.go` 文件名后缀或 `//go:build` 标签隔离平台代码，保持跨平台编译通过。
+- **TypeScript/Vue**：Vue 3 `<script setup>` + Composition API；2 空格缩进。视图在 `frontend/src/views/`，组件在 `components/`。
+- 注释中可使用中文（部分 infra 包如 logging 已用中文 rationale），与现有文件保持一致即可。
+- 不要手改 `frontend/wailsjs/` 下文件，它们由 Wails 生成。
+
+## 测试
+
+- 框架：Go 标准 `testing` 包（无第三方断言库）。运行：`go test ./...`。
+- 现有测试集中在 `internal/application/`（如 `capture_actions_test.go`、`annotation_test.go`）。
+- 约定：application 层依赖 domain 接口，测试用手写 fake 实现（如 `fakeClipboard`、`fakeNotifier`）注入，不触碰真实 OS/网络。文件 IO 测试使用 `t.TempDir()`。
+- infrastructure 适配器（S3/SSH/screencapture 等）依赖真实环境，通常不写单测；SSH 连通性可借助 `cmd/sshdiag/` 诊断工具与设置页的 “Test connection” 按钮验证。
+
+## 安全
+
+- **凭证落盘**：配置（含 S3 access key、SSH 密码）以 JSON 存于 `os.UserConfigDir()/SnapGo/config.json`，文件权限 `0600`、目录 `0700`。尚未接入 OS keychain（后续计划），改动配置存储时务必保持严格权限并避免把密钥写入日志。
+- **日志**：写入 `~/Library/Logs/SnapGo/snapgo.log`（大小滚动，5MiB×2 备份）。记录连接信息时只记 host/user/port 等非敏感字段，**切勿记录密码/密钥**（参考 `app.go` 中的 `slog` 用法）。
+- **SSH**：`StrictHostKey=false` 时使用 `InsecureIgnoreHostKey()`（牺牲安全换首启可用性，仅限个人 LAN）；Kerberos 模式委托系统 `/usr/bin/ssh` 复用 `kinit` 凭证缓存。`PathPrefix` 相对远端 `$HOME`，会剥离前导 `/` 和 `~` 防止逃逸。
+- **上传兜底**：上传失败时把 PNG 落地到 `~/Pictures/SnapGo` 并复制本地路径，保证不丢截图。
+- macOS 需 Screen Recording / Accessibility（TCC）权限；稳定的代码签名身份与安装路径是权限保持的关键（见 `dev-build.sh` 注释）。
+
+## 配置
+
+- Wails 项目配置：`wails.json`（产物名、frontend install/build/dev 命令、应用元信息）。
+- 运行时配置：首启写入默认值（`domain.DefaultAppConfig()`：快捷键 `cmd+shift+a`、S3 `pathPrefix=snapgo/`、SSH port 22 / timeout 10s）。原子写入（temp + rename）。
+- 环境变量：`SNAPGO_LOG_LEVEL=debug|info|warn|error`（默认 debug）。Release 相关：`ARCH`、`NOTARIZE`、`SIGN_MODE`、`DEVELOPER_ID_APPLICATION`、`KEYCHAIN_PROFILE`、`APPLE_ID`/`APPLE_TEAM_ID`/`APPLE_APP_SPECIFIC_PASSWORD`。
+- S3 兼容性：`UsePathStyle` 默认 true（适配 MinIO/R2）；`PublicURLBase` 可选用于 CDN/自定义域名，否则回退 `{Endpoint}/{Bucket}/{Key}`。
diff --git a/Introduction.md b/Introduction.md
new file mode 100644
index 0000000..2d9c625
--- /dev/null
+++ b/Introduction.md
@@ -0,0 +1,36 @@
+# SnapGo
+
+SnapGo 是一个以 macOS 为核心体验的截图上传工具，面向“截图后立刻分享链接”的高频场景。它常驻于菜单栏，支持全局快捷键唤起截图覆盖层，在完成区域选择后自动将图片上传到兼容 S3 协议的对象存储，并把最终公开链接写入剪贴板，尽可能减少“截图、保存、上传、复制链接”之间的手动切换成本。
+
+项目当前基于 `Wails + Go + Vue 3` 构建，桌面端负责截图、热键、托盘与系统集成，前端负责设置页与截图交互界面。整体设计围绕“轻量常驻、快速触发、上传即复制”展开，适合作为个人图床工作流中的本地入口工具。
+
+## 核心功能
+
+- 全局快捷键截图：支持通过全局快捷键在任意应用中快速唤起截图流程。
+- 区域选择覆盖层：提供接近原生体验的截图选区交互，优先针对 macOS 做了透明覆盖层与窗口层级优化。
+- 自动上传到 S3 兼容存储：支持 AWS S3、MinIO、Cloudflare R2、Backblaze B2 及其他兼容 S3 API 的对象存储。
+- 自动复制公开链接：上传成功后自动将图片 URL 写入剪贴板，方便直接粘贴到 IM、文档或工单系统。
+- 菜单栏常驻与设置面板：通过托盘菜单进入设置，配置热键、存储参数，并测试连接可用性。
+- 上传失败兜底：当上传失败时，会将截图落盘到本地临时目录，避免截图结果丢失。
+
+## 典型使用流程
+
+1. 首次启动后，在设置页中填写 S3 兼容对象存储的连接信息。
+2. 保存配置并测试连通性，确认目标 Bucket 可写。
+3. 使用默认快捷键 `cmd+shift+a`，或自定义快捷键，随时发起截图。
+4. 选择需要截取的区域并确认。
+5. 应用自动上传截图，并将生成的公开链接复制到剪贴板。
+
+## 项目定位
+
+SnapGo 当前更偏向一个面向个人使用的高效工具，而不是“大而全”的截图平台。它的重点不在复杂标注或云端管理能力，而在于把“截图并生成可分享链接”这条链路压缩到尽可能短，尤其适合开发者、产品、测试或需要频繁在聊天工具中分享截图的用户。
+
+虽然工程结构中保留了跨平台方向的设计，但现阶段的核心交互与系统集成主要围绕 macOS 打磨，包括菜单栏形态、原生覆盖层、窗口透明化处理以及与系统截图能力的衔接。因此，如果你希望获得完整体验，macOS 是当前最合适的运行平台。
+
+## 技术实现概览
+
+- 桌面壳与应用编排：Go + Wails
+- 设置界面与截图覆盖层：Vue 3 + TypeScript + Vite
+- 全局快捷键：`golang.design/x/hotkey`
+- 对象存储接入：AWS SDK for Go v2（S3 兼容实现）
+- macOS 截图与窗口控制：系统 `screencapture` 命令 + AppKit 原生能力
diff --git a/README.md b/README.md
index 02e8d69..a0b50ab 100644
--- a/README.md
+++ b/README.md
@@ -1,10 +1,10 @@
-# SnipPicGo
+# SnapGo
 
-SnipPicGo 是一个为“截完图马上发链接”而做的轻量截图工具。
+SnapGo 是一个为“截完图马上发链接”而做的轻量截图工具。
 
 它常驻菜单栏，通过全局快捷键一键唤起截图，选区确认后自动上传到你自己的 S3 兼容对象存储，并把图片链接直接复制到剪贴板。你不需要再经历“截图 -> 保存本地 -> 打开图床 -> 上传 -> 复制链接”这串繁琐操作。
 
-如果你经常在聊天工具、工单、文档、Issue 或 PR 里发截图，SnipPicGo 的目标就是把这件事变成一次动作。
+如果你经常在聊天工具、工单、文档、Issue 或 PR 里发截图，SnapGo 的目标就是把这件事变成一次动作。
 
 ## 它适合谁
 
@@ -21,6 +21,7 @@ SnipPicGo 是一个为“截完图马上发链接”而做的轻量截图工具
 - 全局快捷键触发：无论当前在什么应用里，都能快速发起截图
 - 菜单栏常驻：随用随取，不打断主流程
 - 支持 S3 兼容存储：可接入 AWS S3、MinIO、Cloudflare R2、Backblaze B2 等
+- 支持 FTP / SFTP：可通过独立截图操作上传到文件服务器，并复制远端路径
 - 支持自定义公开地址：可配合 CDN 或自定义域名使用
 - 上传失败自动兜底：至少保住截图文件，不会白截
 
@@ -31,14 +32,38 @@ SnipPicGo 是一个为“截完图马上发链接”而做的轻量截图工具
 - 更可控：图片上传到你自己的对象存储，而不是托管在陌生服务上
 - 更适合高频工作：特别适合要反复发截图沟通的人
 
+# 测试版安装
+
+## MacOS
+1. 进入项目目录
+- `cd /path/of/project`
+
+2. 安装 go 项目依赖
+- `go mod tidy & go install github.com/wailsapp/wails/v2/cmd/wails@latest`
+
+3. 生成 macos 应用开发证书(首次安装前执行)
+- `./scripts/create-dev-cert.sh`
+
+4. 检查证书(首次安装前执行)
+- `security find-identity -v -p codesigning`
+你应当能看到类似下面的显示(一条或两条)
+  ```bash
+    2) XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX "SnapGo Dev Cert"
+    3) XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX "SnapGo Dev Cert"
+  ```
+
+5. 安装 & 打开应用
+- `./scripts/dev-build.sh`
+然后你就可以在应用列表里看到它了
+
 ## 使用方式
 
-1. 打开应用，填写你的 S3 兼容对象存储配置
+1. 打开应用，填写 S3、FTP / SFTP 或 SSH 远端配置
 2. 保存并测试连接
 3. 按下默认快捷键 `cmd+shift+a`
 4. 框选截图区域
-5. 直接粘贴刚刚自动复制好的图片链接
+5. 点击目标上传按钮，直接粘贴自动复制的图片链接或远端路径
 
 ## 当前体验
 
-SnipPicGo 当前主要围绕 macOS 打磨体验。如果你希望获得完整、顺滑的截图上传工作流，macOS 是目前最推荐的使用平台。
+SnapGo 当前主要围绕 macOS 打磨体验。如果你希望获得完整、顺滑的截图上传工作流，macOS 是目前最推荐的使用平台。
diff --git a/activation_policy_darwin.go b/activation_policy_darwin.go
new file mode 100644
index 0000000..11726be
--- /dev/null
+++ b/activation_policy_darwin.go
@@ -0,0 +1,77 @@
+//go:build darwin
+
+package main
+
+/*
+#cgo CFLAGS: -x objective-c -fobjc-arc
+#cgo LDFLAGS: -framework AppKit
+// Silence the "ignoring duplicate libraries: '-lobjc'" note emitted by the
+// Xcode 15+ linker (ld-prime): cgo links -lobjc for our Objective-C code and
+// the Go darwin runtime pulls it in as well, which the new linker flags as a
+// duplicate. Suppressing it here keeps the build output clean; the flag is a
+// no-op on the legacy ld64 path.
+#cgo LDFLAGS: -Wl,-no_warn_duplicate_libraries
+#include <dispatch/dispatch.h>
+#import <AppKit/AppKit.h>
+
+static id snipDidHideObserver = nil;
+
+static void snipSetActivationPolicy(bool regular, bool activate) {
+    void (^work)(void) = ^{
+        [NSApp setActivationPolicy: regular
+            ? NSApplicationActivationPolicyRegular
+            : NSApplicationActivationPolicyAccessory];
+        if (activate) {
+            [NSApp unhide:nil];
+            [NSApp activateIgnoringOtherApps:YES];
+        }
+    };
+
+    if ([NSThread isMainThread]) {
+        work();
+    } else {
+        dispatch_sync(dispatch_get_main_queue(), work);
+    }
+}
+
+static void snipInstallActivationPolicyHooks(void) {
+    void (^work)(void) = ^{
+        if (snipDidHideObserver != nil) {
+            return;
+        }
+        snipDidHideObserver = [[NSNotificationCenter defaultCenter]
+            addObserverForName:NSApplicationDidHideNotification
+                        object:NSApp
+                         queue:[NSOperationQueue mainQueue]
+                    usingBlock:^(__unused NSNotification *note) {
+                        [NSApp setActivationPolicy:NSApplicationActivationPolicyAccessory];
+                    }];
+    };
+
+    if ([NSThread isMainThread]) {
+        work();
+    } else {
+        dispatch_sync(dispatch_get_main_queue(), work);
+    }
+}
+*/
+import "C"
+
+// installActivationPolicyHooks observes the native hide path used by Wails'
+// HideWindowOnClose on macOS. Closing Settings calls `[NSApp hide:nil]`,
+// which does not reliably pass through Wails' Go OnBeforeClose hook.
+func installActivationPolicyHooks() {
+	C.snipInstallActivationPolicyHooks()
+}
+
+// showDockIcon makes the app behave like a normal foreground macOS app while
+// Settings is visible.
+func showDockIcon(activate bool) {
+	C.snipSetActivationPolicy(true, C.bool(activate))
+}
+
+// hideDockIcon returns the app to menu-bar-agent mode: no persistent Dock
+// icon, while the status-bar item remains available.
+func hideDockIcon() {
+	C.snipSetActivationPolicy(false, false)
+}
diff --git a/activation_policy_other.go b/activation_policy_other.go
new file mode 100644
index 0000000..158169d
--- /dev/null
+++ b/activation_policy_other.go
@@ -0,0 +1,12 @@
+//go:build !darwin
+
+package main
+
+// installActivationPolicyHooks is only meaningful on macOS.
+func installActivationPolicyHooks() {}
+
+// showDockIcon is only meaningful on macOS.
+func showDockIcon(_ bool) {}
+
+// hideDockIcon is only meaningful on macOS.
+func hideDockIcon() {}
diff --git a/app.go b/app.go
new file mode 100644
index 0000000..53e67ab
--- /dev/null
+++ b/app.go
@@ -0,0 +1,1281 @@
+// app.go wires the application service stack together and exposes
+// frontend-callable methods through Wails bindings.
+package main
+
+import (
+	"bytes"
+	"context"
+	"encoding/json"
+	"fmt"
+	"image"
+	"image/png"
+	"log/slog"
+	"os"
+	"path/filepath"
+	"strings"
+	"sync"
+	"sync/atomic"
+	"time"
+
+	wruntime "github.com/wailsapp/wails/v2/pkg/runtime"
+
+	"github.com/mmmy/snapgo/internal/application"
+	"github.com/mmmy/snapgo/internal/domain"
+	"github.com/mmmy/snapgo/internal/infrastructure/clipboard"
+	"github.com/mmmy/snapgo/internal/infrastructure/config"
+	"github.com/mmmy/snapgo/internal/infrastructure/display"
+	ftppkg "github.com/mmmy/snapgo/internal/infrastructure/ftp"
+	"github.com/mmmy/snapgo/internal/infrastructure/hotkey"
+	llmpkg "github.com/mmmy/snapgo/internal/infrastructure/llm"
+	ocrpkg "github.com/mmmy/snapgo/internal/infrastructure/ocr"
+	"github.com/mmmy/snapgo/internal/infrastructure/oss"
+	"github.com/mmmy/snapgo/internal/infrastructure/screencapture"
+	sshpkg "github.com/mmmy/snapgo/internal/infrastructure/ssh"
+)
+
+// App is the struct exposed to the Wails frontend through Bind.
+//
+// We deliberately keep this struct small: it owns long-lived collaborators
+// (config store, hotkey manager, capturer, clipboard) but delegates the
+// real work to application services constructed on demand for the selected
+// storage destination.
+type App struct {
+	ctx context.Context
+
+	mu         sync.RWMutex
+	cfg        domain.AppConfig
+	configFile *config.FileStore
+	hotkeyMgr  *hotkey.Manager
+	capturer   screencapture.Capturer
+	clip       clipboard.Writer
+
+	// capturing prevents re-entrant capture sessions when the user mashes
+	// the hotkey while a previous one is still running. It stays true for
+	// the entire lifecycle of one capture: from overlay start until the
+	// overlay is either confirmed (ConfirmRegion) or discarded (CancelRegion).
+	capturing atomic.Bool
+
+	// pendingMu guards `pending`. We keep this separate from `mu` so that
+	// frontend-triggered RPC handlers (which may run concurrently with the
+	// capture goroutine) can take it cheaply.
+	pendingMu sync.Mutex
+	pending   *pendingCapture
+}
+
+// pendingCapture holds the OSS provider chosen when capture started.
+// Keeping the provider here prevents a config edit
+// between "snap" and "confirm" from silently retargeting the upload.
+type pendingCapture struct {
+	Provider domain.OSSProvider
+	Display  display.Info
+}
+
+// OverlayPayload is the JSON the Go side emits so the WebView can build the
+// Snipaste-style overlay. It deliberately does not contain screenshot bytes:
+// the window is transparent and the mask sits over the live desktop.
+type OverlayPayload struct {
+	CSSWidth  int     `json:"cssWidth"`
+	CSSHeight int     `json:"cssHeight"`
+	Scale     float64 `json:"scale"`
+}
+
+// RegionRect is the CSS-pixel selection rectangle the WebView reports.
+// Origin is the top-left of the primary display.
+type RegionRect struct {
+	X int `json:"x"`
+	Y int `json:"y"`
+	W int `json:"w"`
+	H int `json:"h"`
+}
+
+// CaptureResult is returned by the overlay with the final selection and any
+// annotations drawn inside the selected area.
+type CaptureResult struct {
+	Rect        RegionRect               `json:"rect"`
+	Annotations []application.Annotation `json:"annotations"`
+}
+
+// CaptureActionResult tells the frontend whether an action was completed or
+// the user cancelled a secondary choice such as the save destination dialog.
+type CaptureActionResult struct {
+	Completed bool   `json:"completed"`
+	Path      string `json:"path,omitempty"`
+}
+
+// OperationStatusPayload drives the frontend status HUD and mirrors the
+// native macOS HUD state.
+type OperationStatusPayload struct {
+	Operation string `json:"operation"`
+	Phase     string `json:"phase"`
+	Message   string `json:"message"`
+	State     string `json:"state"`
+}
+
+// NewApp creates a new App with collaborators already initialised.
+func NewApp() *App {
+	store, err := config.NewFileStore()
+	if err != nil {
+		slog.Error("config store init", "err", err)
+	}
+	cfg := domain.DefaultAppConfig()
+	if store != nil {
+		if loaded, lerr := store.Load(); lerr == nil {
+			cfg = loaded
+		} else {
+			slog.Warn("config load failed, using defaults", "err", lerr)
+		}
+	}
+	cfg.Normalize()
+	return &App{
+		cfg:        cfg,
+		configFile: store,
+		hotkeyMgr:  hotkey.NewManager(),
+		capturer:   screencapture.New(),
+		clip:       clipboard.New(),
+	}
+}
+
+// startup is invoked by Wails once the runtime is available.
+func (a *App) startup(ctx context.Context) {
+	a.ctx = ctx
+	if err := a.registerHotkey(a.cfg.Hotkey); err != nil {
+		slog.Warn("register hotkey failed", "err", err)
+		wruntime.EventsEmit(a.ctx, "hotkey:error", err.Error())
+	} else {
+		wruntime.EventsEmit(a.ctx, "hotkey:ready", a.cfg.Hotkey)
+	}
+}
+
+// shutdown releases OS resources.
+func (a *App) shutdown(_ context.Context) {
+	a.hotkeyMgr.Unregister()
+}
+
+// ---------------------------------------------------------------------------
+// Hotkey management
+// ---------------------------------------------------------------------------
+
+func (a *App) registerHotkey(spec string) error {
+	if spec == "" {
+		spec = "cmd+shift+a"
+	}
+	return a.hotkeyMgr.Register(spec, func() {
+		a.runInteractiveCapture()
+	})
+}
+
+// runInteractiveCapture is the unified entry point for the global hotkey
+// and the in-app "Capture now" button. The new flow is:
+//
+//  1. Hide the main window so it never flashes over the desktop.
+//  2. Re-show it as a transparent, high-level overlay that paints only a
+//     dimming mask plus selection chrome over the live screen.
+//  3. Wait — the user finishes selecting in the WebView, which calls
+//     ConfirmRegion(rect) or CancelRegion() back into us.
+//
+// We deliberately do NOT block the goroutine on a channel here: the
+// "wait" is implicit. capturing stays true until the frontend resolves it.
+func (a *App) runInteractiveCapture() {
+	if a.ctx == nil {
+		return
+	}
+	if !a.capturing.CompareAndSwap(false, true) {
+		return
+	}
+	releaseOnExit := true
+	defer func() {
+		if releaseOnExit {
+			a.capturing.Store(false)
+		}
+	}()
+
+	a.mu.RLock()
+	cfg := a.cfg
+	a.mu.RUnlock()
+
+	var provider domain.OSSProvider
+	if cfg.IsS3Configured() {
+		var err error
+		provider, err = oss.NewS3Provider(cfg.S3)
+		if err != nil {
+			wruntime.EventsEmit(a.ctx, "upload:failure", err.Error())
+		}
+	}
+
+	// Hide the settings window before transforming it into an overlay, so
+	// the user only sees the final transparent mask state.
+	wruntime.WindowHide(a.ctx)
+	hideDockIcon()
+	flushFrame()
+	wruntime.EventsEmit(a.ctx, "capture:start", nil)
+
+	info := display.Primary()
+
+	// Park the provider and morph the window into a transparent overlay.
+	a.pendingMu.Lock()
+	a.pending = &pendingCapture{
+		Provider: provider,
+		Display:  info,
+	}
+	a.pendingMu.Unlock()
+
+	if showNativeCaptureOverlay(a, info) {
+		releaseOnExit = false // ownership passes to the native overlay callbacks
+		return
+	}
+
+	payload := OverlayPayload{
+		CSSWidth:  info.CSSWidth,
+		CSSHeight: info.CSSHeight,
+		Scale:     info.Scale,
+	}
+	a.showOverlayWindow(info)
+	wruntime.EventsEmit(a.ctx, "capture:overlay", payload)
+	flushFrame()
+	wruntime.WindowShow(a.ctx)
+	configureOverlayWindow()
+
+	releaseOnExit = false // ownership of `capturing` passes to the overlay lifecycle
+}
+
+// ---------------------------------------------------------------------------
+// Overlay window helpers
+// ---------------------------------------------------------------------------
+
+const (
+	settingsWidth  = 1000
+	settingsHeight = 820
+)
+
+// showOverlayWindow prepares the hidden main window as a borderless,
+// always-on-top, transparent full-primary-display window. The caller emits
+// the overlay event and only then shows it, avoiding an opaque grey flash.
+func (a *App) showOverlayWindow(info display.Info) {
+	if a.ctx == nil {
+		return
+	}
+	wruntime.WindowSetBackgroundColour(a.ctx, 0, 0, 0, 0)
+	wruntime.WindowSetAlwaysOnTop(a.ctx, true)
+	wruntime.WindowSetSize(a.ctx, info.CSSWidth, info.CSSHeight)
+	wruntime.WindowSetPosition(a.ctx, 0, 0)
+	configureOverlayWindow()
+}
+
+// restoreSettingsWindow flips the window back from overlay form to its
+// normal Settings size and unpins it. We do NOT call Show here — callers
+// decide whether the user actually wanted Settings to appear.
+func (a *App) restoreSettingsWindow() {
+	if a.ctx == nil {
+		return
+	}
+	restoreOverlayWindow()
+	wruntime.WindowSetBackgroundColour(a.ctx, 246, 247, 250, 255)
+	wruntime.WindowSetAlwaysOnTop(a.ctx, false)
+	wruntime.WindowSetSize(a.ctx, settingsWidth, settingsHeight)
+	wruntime.WindowCenter(a.ctx)
+}
+
+// surfaceWindow brings the main window back from a hidden state regardless
+// of which mechanism we used to suppress it.
+func (a *App) surfaceWindow() {
+	if a.ctx == nil {
+		return
+	}
+	showDockIcon(true)
+	a.restoreSettingsWindow()
+	wruntime.WindowUnminimise(a.ctx)
+	wruntime.WindowShow(a.ctx)
+}
+
+// dismissOverlay hides the overlay window and shrinks/centres it back to
+// the Settings dimensions so a future ShowWindow lands in the right place.
+func (a *App) dismissOverlay() {
+	if a.ctx == nil {
+		return
+	}
+	wruntime.WindowHide(a.ctx)
+	hideDockIcon()
+	a.restoreSettingsWindow()
+}
+
+// runUploadPipeline is the post-capture half of the workflow. Shared by
+// the hotkey path and the explicit "Upload now" RPC.
+func (a *App) runUploadPipeline(provider domain.OSSProvider, pngBytes []byte) error {
+	a.mu.RLock()
+	cfg := a.cfg
+	a.mu.RUnlock()
+
+	svc := &application.CaptureAndUploadService{
+		Capturer:    a.capturer,
+		Provider:    provider,
+		Clipboard:   a.clip,
+		Notifier:    &runtimeNotifier{ctx: a.ctx},
+		FallbackDir: filepath.Join(userPicturesDir(), "SnapGo"),
+		PathPrefix:  cfg.S3.PathPrefix,
+	}
+	a.emitOperationStatus("upload", "上传中", "正在上传截图到 S3", "running")
+	if err := svc.ExecuteWithBytes(a.ctx, pngBytes); err != nil {
+		a.emitOperationStatus("upload", "上传失败", err.Error(), "error")
+		return err
+	}
+	a.emitOperationStatus("upload", "上传完成", "链接已复制到剪贴板", "success")
+	return nil
+}
+
+func (a *App) runCopyImagePipeline(pngBytes []byte) error {
+	svc := &application.CaptureActionsService{
+		Clipboard: a.clip,
+	}
+	a.emitOperationStatus("copy", "复制中", "正在把截图复制到剪贴板", "running")
+	if err := svc.CopyImage(a.ctx, pngBytes); err != nil {
+		a.emitOperationStatus("copy", "复制失败", err.Error(), "error")
+		wruntime.EventsEmit(a.ctx, "upload:failure", err.Error())
+		return err
+	}
+	a.emitOperationStatus("copy", "复制完成", "截图已复制到剪贴板", "success")
+	wruntime.EventsEmit(a.ctx, "upload:success", "image copied to clipboard")
+	return nil
+}
+
+func (a *App) runSaveImagePipeline(pngBytes []byte, dir string) (string, error) {
+	svc := &application.CaptureActionsService{
+		Clipboard: a.clip,
+	}
+	a.emitOperationStatus("save", "保存中", "正在保存截图到本地", "running")
+	path, err := svc.SaveImage(a.ctx, pngBytes, dir)
+	if err != nil {
+		a.emitOperationStatus("save", "保存失败", err.Error(), "error")
+		wruntime.EventsEmit(a.ctx, "upload:failure", err.Error())
+		return "", err
+	}
+	a.emitOperationStatus("save", "保存完成", "文件路径已复制到剪贴板："+path, "success")
+	wruntime.EventsEmit(a.ctx, "upload:success", path)
+	return path, nil
+}
+
+// runSaveRemotePipeline uploads the captured PNG to the configured SSH host
+// via SCP and copies a sharable reference (URL or "user@host:~/path") to
+// the clipboard.
+//
+// Why a dedicated method (vs. extending CaptureAndUploadService): SSH and
+// S3 have different config + clipboard semantics, so keeping them separate
+// avoids leaking provider-specific branches into the OSS pipeline.
+func (a *App) runSaveRemotePipeline(pngBytes []byte) error {
+	a.mu.RLock()
+	cfg := a.cfg
+	a.mu.RUnlock()
+
+	if !cfg.IsSSHConfigured() {
+		err := fmt.Errorf("SSH host/user is not configured")
+		slog.Warn("save-remote rejected: ssh not configured",
+			"host", cfg.SSH.Host, "user", cfg.SSH.User)
+		a.emitOperationStatus("save-remote", "需要配置 SSH", err.Error(), "error")
+		wruntime.EventsEmit(a.ctx, "upload:failure", err.Error())
+		return err
+	}
+	slog.Info("save-remote dispatch",
+		"host", cfg.SSH.Host, "user", cfg.SSH.User, "port", cfg.SSH.Port,
+		"auth_method", cfg.SSH.AuthMethod, "png_size", len(pngBytes))
+
+	// Select the uploader by auth method: Kerberos delegates to the system
+	// ssh/scp binaries (reusing the kinit credential cache), while builtin
+	// uses the in-process Go SSH client.
+	var uploader application.SSHUploader
+	if cfg.SSH.IsKerberos() {
+		uploader = sshpkg.NewKerberosUploader(cfg.SSH)
+	} else {
+		uploader = sshpkg.NewUploader(cfg.SSH)
+	}
+
+	svc := &application.CaptureAndSSHService{
+		Uploader:  uploader,
+		Clipboard: a.clip,
+		Notifier:  &runtimeNotifier{ctx: a.ctx},
+		Cfg:       cfg.SSH,
+	}
+	a.emitOperationStatus("save-remote", "保存中", "正在保存截图到远端 SSH", "running")
+	if err := svc.ExecuteWithBytes(a.ctx, pngBytes); err != nil {
+		a.emitOperationStatus("save-remote", "保存失败", err.Error(), "error")
+		return err
+	}
+	a.emitOperationStatus("save-remote", "保存完成", "远端路径已复制到剪贴板", "success")
+	return nil
+}
+
+// runFTPUploadPipeline uploads through the protocol selected in FTPConfig and
+// copies the resulting remote path. FTP/SFTP remains separate from both S3
+// (public URL semantics) and SSH/SCP (a distinct toolbar destination).
+func (a *App) runFTPUploadPipeline(pngBytes []byte) error {
+	a.mu.RLock()
+	cfg := a.cfg
+	a.mu.RUnlock()
+
+	if !cfg.IsFTPConfigured() {
+		err := fmt.Errorf("FTP/SFTP host/user is not configured")
+		a.emitOperationStatus("ftp-upload", "需要配置 FTP/SFTP", err.Error(), "error")
+		wruntime.EventsEmit(a.ctx, "upload:failure", err.Error())
+		return err
+	}
+
+	uploader, err := ftppkg.NewUploader(cfg.FTP)
+	if err != nil {
+		a.emitOperationStatus("ftp-upload", "FTP/SFTP 配置错误", err.Error(), "error")
+		wruntime.EventsEmit(a.ctx, "upload:failure", err.Error())
+		return err
+	}
+	slog.Info("FTP/SFTP upload dispatch",
+		"protocol", cfg.FTP.Protocol,
+		"host", cfg.FTP.Host,
+		"user", cfg.FTP.User,
+		"port", cfg.FTP.Port,
+		"auth_method", cfg.FTP.AuthMethod,
+		"strict_host_key", cfg.FTP.StrictHostKey,
+		"has_password", cfg.FTP.Password != "",
+		"png_size", len(pngBytes))
+
+	svc := &application.CaptureAndFTPService{
+		Uploader:  uploader,
+		Clipboard: a.clip,
+		Notifier:  &runtimeNotifier{ctx: a.ctx},
+		Cfg:       cfg.FTP,
+	}
+	protocolLabel := strings.ToUpper(cfg.FTP.Protocol)
+	if protocolLabel == "" {
+		protocolLabel = "FTP"
+	}
+	a.emitOperationStatus("ftp-upload", "上传中", "正在上传截图到 "+protocolLabel, "running")
+	if err := svc.ExecuteWithBytes(a.ctx, pngBytes); err != nil {
+		a.emitOperationStatus("ftp-upload", "上传失败", err.Error(), "error")
+		return err
+	}
+	a.emitOperationStatus("ftp-upload", "上传完成", "远端路径已复制到剪贴板", "success")
+	return nil
+}
+
+func (a *App) runSummaryPipeline(pngBytes []byte) error {
+	a.mu.RLock()
+	cfg := a.cfg
+	a.mu.RUnlock()
+
+	if !cfg.IsLLMConfigured() {
+		err := fmt.Errorf("请先在 LLM 配置页填写 API Key 和模型")
+		a.emitOperationStatus("summary", "需要配置 LLM", err.Error(), "error")
+		wruntime.EventsEmit(a.ctx, "upload:failure", err.Error())
+		return err
+	}
+
+	providerID, llmCfg, _ := cfg.ActiveLLMProvider()
+	visionClient, err := llmpkg.NewVisionClient(providerID, llmCfg)
+	if err != nil {
+		a.emitOperationStatus("summary", "LLM 配置错误", err.Error(), "error")
+		wruntime.EventsEmit(a.ctx, "upload:failure", err.Error())
+		return err
+	}
+
+	svc := &application.CaptureSummaryService{
+		Summarizer:     visionClient,
+		Clipboard:      a.clip,
+		Prompt:         cfg.LLM.Prompt,
+		PathPrefix:     cfg.S3.PathPrefix,
+		MaxInlineBytes: llmCfg.MaxInlineBytes,
+	}
+
+	// Preferred path: send the screenshot inline as a base64 data URL so the
+	// summary never depends on S3 being configured or publicly reachable.
+	if svc.CanInline(pngBytes) {
+		a.emitOperationStatus("summary", "识别中", "正在请求多模态模型（本地内联图片）", "running")
+		summary, err := svc.Summarize(a.ctx, svc.InlineDataURL(pngBytes))
+		if err != nil {
+			a.emitOperationStatus("summary", "识别失败", err.Error(), "error")
+			wruntime.EventsEmit(a.ctx, "upload:failure", err.Error())
+			return err
+		}
+		return a.finishSummary(svc, summary)
+	}
+
+	// Oversized image: fall back to uploading to S3 and passing a public URL.
+	if !cfg.IsS3Configured() {
+		err := fmt.Errorf("截图尺寸超过内联上限（%d 字节），请缩小截图区域，或在 S3 配置页填写公网可达的对象存储后重试", llmCfg.MaxInlineBytes)
+		a.emitOperationStatus("summary", "尺寸超限", err.Error(), "error")
+		wruntime.EventsEmit(a.ctx, "upload:failure", err.Error())
+		return err
+	}
+
+	s3Provider, err := oss.NewS3Provider(cfg.S3)
+	if err != nil {
+		a.emitOperationStatus("summary", "S3 配置错误", err.Error(), "error")
+		wruntime.EventsEmit(a.ctx, "upload:failure", err.Error())
+		return err
+	}
+	svc.Provider = s3Provider
+
+	a.emitOperationStatus("summary", "上传中", "截图较大，正在上传供模型读取", "running")
+	uploaded, err := svc.UploadImage(a.ctx, pngBytes)
+	if err != nil {
+		a.emitOperationStatus("summary", "上传失败", err.Error(), "error")
+		wruntime.EventsEmit(a.ctx, "upload:failure", err.Error())
+		return err
+	}
+
+	// The remote model fetches the URL itself, so verify it is reachable and
+	// clean up the temporary object once we are done with it either way.
+	defer func() {
+		if derr := svc.DeleteUploaded(a.ctx, uploaded.Key); derr != nil {
+			slog.Warn("summary: failed to delete temporary object", "key", uploaded.Key, "err", derr)
+		}
+	}()
+
+	if err := svc.EnsureReachable(a.ctx, uploaded.URL); err != nil {
+		a.emitOperationStatus("summary", "链接不可达", err.Error(), "error")
+		wruntime.EventsEmit(a.ctx, "upload:failure", err.Error())
+		return err
+	}
+
+	a.emitOperationStatus("summary", "识别中", "图片已上传，正在请求多模态模型", "running")
+	summary, err := svc.Summarize(a.ctx, uploaded.URL)
+	if err != nil {
+		a.emitOperationStatus("summary", "识别失败", err.Error(), "error")
+		wruntime.EventsEmit(a.ctx, "upload:failure", err.Error())
+		return err
+	}
+	return a.finishSummary(svc, summary)
+}
+
+// finishSummary copies the summary to the clipboard and emits the terminal
+// success/failure UI state shared by the inline and S3 paths.
+func (a *App) finishSummary(svc *application.CaptureSummaryService, summary string) error {
+	if err := svc.CopySummary(a.ctx, summary); err != nil {
+		a.emitOperationStatus("summary", "复制失败", err.Error(), "error")
+		wruntime.EventsEmit(a.ctx, "upload:failure", err.Error())
+		return err
+	}
+	a.emitOperationStatus("summary", "识别完成", "总结已复制到剪贴板", "success")
+	wruntime.EventsEmit(a.ctx, "upload:success", "summary copied to clipboard")
+	return nil
+}
+
+func (a *App) runOCRPipeline(pngBytes []byte) error {
+	a.mu.RLock()
+	cfg := a.cfg
+	a.mu.RUnlock()
+
+	if !cfg.IsOCRConfigured() {
+		err := fmt.Errorf("请先在文字提取配置页填写 OCR Provider 的 AccessKey ID 和 AccessKey Secret")
+		a.emitOperationStatus("ocr", "需要配置 OCR", err.Error(), "error")
+		wruntime.EventsEmit(a.ctx, "upload:failure", err.Error())
+		return err
+	}
+
+	providerID, ocrCfg, _ := cfg.ActiveOCRProvider()
+	recognizer, err := ocrpkg.NewClient(providerID, ocrCfg)
+	if err != nil {
+		a.emitOperationStatus("ocr", "OCR 配置错误", err.Error(), "error")
+		wruntime.EventsEmit(a.ctx, "upload:failure", err.Error())
+		return err
+	}
+
+	svc := &application.CaptureOCRService{
+		Recognizer: recognizer,
+		Clipboard:  a.clip,
+	}
+
+	a.emitOperationStatus("ocr", "识别中", "正在提取截图文字", "running")
+	text, err := svc.Recognize(a.ctx, pngBytes)
+	if err != nil {
+		a.emitOperationStatus("ocr", "识别失败", err.Error(), "error")
+		wruntime.EventsEmit(a.ctx, "upload:failure", err.Error())
+		return err
+	}
+	if err := svc.CopyText(a.ctx, text); err != nil {
+		a.emitOperationStatus("ocr", "复制失败", err.Error(), "error")
+		wruntime.EventsEmit(a.ctx, "upload:failure", err.Error())
+		return err
+	}
+	a.emitOperationStatus("ocr", "提取完成", "文字已复制到剪贴板", "success")
+	wruntime.EventsEmit(a.ctx, "upload:success", "ocr text copied to clipboard")
+	return nil
+}
+
+func (a *App) consumePendingCapture() (*pendingCapture, error) {
+	a.pendingMu.Lock()
+	pc := a.pending
+	a.pending = nil
+	a.pendingMu.Unlock()
+
+	if pc == nil {
+		return nil, fmt.Errorf("no pending capture")
+	}
+	return pc, nil
+}
+
+func (a *App) captureSelectedPNG(result CaptureResult, pc *pendingCapture) ([]byte, error) {
+	rect := result.Rect
+	captureRect := image.Rect(rect.X, rect.Y, rect.X+rect.W, rect.Y+rect.H)
+	cropped, err := a.capturer.CaptureRegion(captureRect)
+	if err != nil {
+		return nil, err
+	}
+	if len(result.Annotations) > 0 {
+		scaleX, scaleY := annotationScalesForCapture(cropped, rect, pc.Display.Scale)
+		cropped, err = application.ApplyAnnotationsWithScale(cropped, result.Annotations, scaleX, scaleY)
+		if err != nil {
+			return nil, err
+		}
+	}
+	return cropped, nil
+}
+
+func annotationScalesForCapture(pngBytes []byte, rect RegionRect, fallback float64) (float64, float64) {
+	if fallback <= 0 {
+		fallback = 1
+	}
+	scaleX := fallback
+	scaleY := fallback
+
+	cfg, err := png.DecodeConfig(bytes.NewReader(pngBytes))
+	if err != nil {
+		return scaleX, scaleY
+	}
+	if rect.W > 0 && cfg.Width > 0 {
+		scaleX = saneAnnotationScale(float64(cfg.Width)/float64(rect.W), fallback)
+	}
+	if rect.H > 0 && cfg.Height > 0 {
+		scaleY = saneAnnotationScale(float64(cfg.Height)/float64(rect.H), fallback)
+	}
+	return scaleX, scaleY
+}
+
+func saneAnnotationScale(scale, fallback float64) float64 {
+	if scale >= 0.25 && scale <= 8 {
+		return scale
+	}
+	return fallback
+}
+
+func (a *App) chooseSaveDirectory() (string, error) {
+	return wruntime.OpenDirectoryDialog(a.ctx, wruntime.OpenDialogOptions{
+		Title:                "Save screenshot to folder",
+		DefaultDirectory:     userPicturesDir(),
+		CanCreateDirectories: true,
+	})
+}
+
+// ---------------------------------------------------------------------------
+// Bound methods (called from the frontend via Wails)
+// ---------------------------------------------------------------------------
+
+// GetConfig returns the current persisted configuration.
+func (a *App) GetConfig() domain.AppConfig {
+	a.mu.RLock()
+	defer a.mu.RUnlock()
+	return a.cfg
+}
+
+// SaveConfig persists the supplied configuration and re-registers the hotkey
+// if it changed.
+func (a *App) SaveConfig(cfg domain.AppConfig) error {
+	cfg.Normalize()
+	a.mu.Lock()
+	prev := a.cfg
+	a.cfg = cfg
+	a.mu.Unlock()
+
+	if a.configFile != nil {
+		if err := a.configFile.Save(cfg); err != nil {
+			return err
+		}
+	}
+	if cfg.Hotkey != prev.Hotkey {
+		if err := a.registerHotkey(cfg.Hotkey); err != nil {
+			wruntime.EventsEmit(a.ctx, "hotkey:error", err.Error())
+			return fmt.Errorf("register new hotkey: %w", err)
+		}
+		wruntime.EventsEmit(a.ctx, "hotkey:ready", cfg.Hotkey)
+	}
+	return nil
+}
+
+// RetryRegisterHotkey re-registers the configured hotkey on demand.
+func (a *App) RetryRegisterHotkey() error {
+	a.mu.RLock()
+	spec := a.cfg.Hotkey
+	a.mu.RUnlock()
+	if err := a.registerHotkey(spec); err != nil {
+		wruntime.EventsEmit(a.ctx, "hotkey:error", err.Error())
+		return err
+	}
+	wruntime.EventsEmit(a.ctx, "hotkey:ready", spec)
+	return nil
+}
+
+// TestConnection performs a put+delete probe against the supplied S3 config.
+func (a *App) TestConnection(cfg domain.S3Config) error {
+	provider, err := oss.NewS3Provider(cfg)
+	if err != nil {
+		return err
+	}
+	return provider.TestConnection(a.ctx)
+}
+
+// TestSSHConnection performs a minimal SSH handshake probe against the
+// supplied configuration so the SettingsView's "Test connection" button
+// can give the user immediate feedback.
+func (a *App) TestSSHConnection(cfg domain.SSHConfig) error {
+	slog.Info("RPC TestSSHConnection",
+		"host", cfg.Host, "user", cfg.User, "port", cfg.Port,
+		"auth_method", cfg.AuthMethod,
+		"strict_host_key", cfg.StrictHostKey, "has_password", cfg.Password != "")
+	// Kerberos auth delegates to the system ssh binary (see KerberosUploader)
+	// so its probe path differs from the in-process client.
+	if cfg.IsKerberos() {
+		if err := sshpkg.TestKerberosConnection(a.ctx, cfg); err != nil {
+			slog.Error("RPC TestSSHConnection (kerberos) failed", "err", err)
+			return err
+		}
+		return nil
+	}
+	if err := sshpkg.TestConnection(a.ctx, cfg); err != nil {
+		slog.Error("RPC TestSSHConnection failed", "err", err)
+		return err
+	}
+	return nil
+}
+
+// TestFTPConnection performs a write/delete probe with the supplied FTP or
+// SFTP configuration so Settings can verify both authentication and remote
+// directory permissions before saving.
+func (a *App) TestFTPConnection(cfg domain.FTPConfig) error {
+	slog.Info("RPC TestFTPConnection",
+		"protocol", cfg.Protocol,
+		"host", cfg.Host,
+		"user", cfg.User,
+		"port", cfg.Port,
+		"auth_method", cfg.AuthMethod,
+		"strict_host_key", cfg.StrictHostKey,
+		"has_password", cfg.Password != "")
+	uploader, err := ftppkg.NewUploader(cfg)
+	if err != nil {
+		return err
+	}
+	if err := uploader.TestConnection(a.ctx); err != nil {
+		slog.Error("RPC TestFTPConnection failed",
+			"protocol", cfg.Protocol,
+			"host", cfg.Host,
+			"user", cfg.User,
+			"err", err)
+		return err
+	}
+	return nil
+}
+
+// CaptureNow is the in-app trigger.
+func (a *App) CaptureNow() {
+	go a.runInteractiveCapture()
+}
+
+// ConfirmRegion is invoked by the overlay UI when the user clicks
+// "Upload & copy". The overlay is transparent and sits over the live
+// desktop, so we hide it first, then ask the OS to capture the selected
+// logical screen rectangle directly.
+//
+// Returning the error to the frontend lets the overlay decide whether to
+// keep showing the screenshot (e.g. for a retry) — currently it just
+// dismisses regardless and surfaces the error via the upload:failure toast.
+func (a *App) ConfirmRegion(result CaptureResult) error {
+	pc, err := a.consumePendingCapture()
+	if err != nil {
+		return err
+	}
+	defer func() {
+		a.capturing.Store(false)
+		a.dismissOverlay()
+	}()
+
+	a.dismissOverlay()
+	flushFrame()
+
+	cropped, err := a.captureSelectedPNG(result, pc)
+	if err != nil {
+		wruntime.EventsEmit(a.ctx, "upload:failure", err.Error())
+		return err
+	}
+	if err := a.runUploadPipeline(pc.Provider, cropped); err != nil {
+		return err
+	}
+	return nil
+}
+
+// CopyRegionImage is invoked by the fallback Wails overlay when the user
+// double-clicks the selected area.
+func (a *App) CopyRegionImage(result CaptureResult) error {
+	pc, err := a.consumePendingCapture()
+	if err != nil {
+		return err
+	}
+	defer func() {
+		a.capturing.Store(false)
+		a.dismissOverlay()
+	}()
+
+	a.dismissOverlay()
+	flushFrame()
+
+	cropped, err := a.captureSelectedPNG(result, pc)
+	if err != nil {
+		wruntime.EventsEmit(a.ctx, "upload:failure", err.Error())
+		return err
+	}
+	return a.runCopyImagePipeline(cropped)
+}
+
+// SaveRegionImage lets the fallback Wails overlay pick a native destination
+// folder and writes the selected screenshot PNG there.
+func (a *App) SaveRegionImage(result CaptureResult) (CaptureActionResult, error) {
+	pc, err := a.consumePendingCapture()
+	if err != nil {
+		return CaptureActionResult{}, err
+	}
+
+	a.dismissOverlay()
+	flushFrame()
+
+	cropped, err := a.captureSelectedPNG(result, pc)
+	if err != nil {
+		a.capturing.Store(false)
+		wruntime.EventsEmit(a.ctx, "upload:failure", err.Error())
+		return CaptureActionResult{}, err
+	}
+
+	dir, err := a.chooseSaveDirectory()
+	if err != nil {
+		a.capturing.Store(false)
+		wruntime.EventsEmit(a.ctx, "upload:failure", err.Error())
+		return CaptureActionResult{}, err
+	}
+	if dir == "" {
+		a.capturing.Store(false)
+		a.dismissOverlay()
+		return CaptureActionResult{Completed: false}, nil
+	}
+
+	path, err := a.runSaveImagePipeline(cropped, dir)
+	a.capturing.Store(false)
+	a.dismissOverlay()
+	if err != nil {
+		return CaptureActionResult{}, err
+	}
+	return CaptureActionResult{Completed: true, Path: path}, nil
+}
+
+// ConfirmNativeRegion mirrors ConfirmRegion for the macOS native overlay.
+// The native AppKit panel has already been closed by the time this method is
+// called, so we must not dismiss/restore the Wails overlay window here.
+func (a *App) ConfirmNativeRegion(result CaptureResult) error {
+	pc, err := a.consumePendingCapture()
+	if err != nil {
+		return err
+	}
+	defer func() {
+		a.capturing.Store(false)
+		hideDockIcon()
+	}()
+
+	flushFrame()
+	cropped, err := a.captureSelectedPNG(result, pc)
+	if err != nil {
+		wruntime.EventsEmit(a.ctx, "upload:failure", err.Error())
+		return err
+	}
+	return a.runUploadPipeline(pc.Provider, cropped)
+}
+
+func (a *App) CopyNativeRegionImage(result CaptureResult) error {
+	pc, err := a.consumePendingCapture()
+	if err != nil {
+		return err
+	}
+	defer func() {
+		a.capturing.Store(false)
+		hideDockIcon()
+	}()
+
+	flushFrame()
+	cropped, err := a.captureSelectedPNG(result, pc)
+	if err != nil {
+		wruntime.EventsEmit(a.ctx, "upload:failure", err.Error())
+		return err
+	}
+	return a.runCopyImagePipeline(cropped)
+}
+
+func (a *App) SaveNativeRegionImage(result CaptureResult) (CaptureActionResult, error) {
+	pc, err := a.consumePendingCapture()
+	if err != nil {
+		return CaptureActionResult{}, err
+	}
+	defer func() {
+		a.capturing.Store(false)
+		hideDockIcon()
+	}()
+
+	flushFrame()
+	cropped, err := a.captureSelectedPNG(result, pc)
+	if err != nil {
+		wruntime.EventsEmit(a.ctx, "upload:failure", err.Error())
+		return CaptureActionResult{}, err
+	}
+	dir, err := a.chooseSaveDirectory()
+	if err != nil {
+		wruntime.EventsEmit(a.ctx, "upload:failure", err.Error())
+		return CaptureActionResult{}, err
+	}
+	if dir == "" {
+		return CaptureActionResult{Completed: false}, nil
+	}
+	path, err := a.runSaveImagePipeline(cropped, dir)
+	if err != nil {
+		return CaptureActionResult{}, err
+	}
+	return CaptureActionResult{Completed: true, Path: path}, nil
+}
+
+func (a *App) SaveNativeRegionImageToDir(result CaptureResult, dir string) (CaptureActionResult, error) {
+	pc, err := a.consumePendingCapture()
+	if err != nil {
+		return CaptureActionResult{}, err
+	}
+	defer func() {
+		a.capturing.Store(false)
+		hideDockIcon()
+	}()
+
+	if dir == "" {
+		return CaptureActionResult{Completed: false}, nil
+	}
+	flushFrame()
+	cropped, err := a.captureSelectedPNG(result, pc)
+	if err != nil {
+		wruntime.EventsEmit(a.ctx, "upload:failure", err.Error())
+		return CaptureActionResult{}, err
+	}
+	path, err := a.runSaveImagePipeline(cropped, dir)
+	if err != nil {
+		return CaptureActionResult{}, err
+	}
+	return CaptureActionResult{Completed: true, Path: path}, nil
+}
+
+// SaveRegionToRemote uploads the user-selected region via SCP to the
+// configured SSH host. Driven by the Wails overlay's "save remote" button.
+//
+// The flow mirrors ConfirmRegion (S3 upload) but routes through
+// runSaveRemotePipeline instead. We dismiss the overlay first so the
+// upload progress (and any error toast) shows over the regular settings UI.
+func (a *App) SaveRegionToRemote(result CaptureResult) error {
+	pc, err := a.consumePendingCapture()
+	if err != nil {
+		slog.Warn("SaveRegionToRemote: no pending capture", "err", err)
+		return err
+	}
+	defer func() {
+		a.capturing.Store(false)
+		a.dismissOverlay()
+	}()
+
+	a.dismissOverlay()
+	flushFrame()
+
+	slog.Info("SaveRegionToRemote: capturing region",
+		"x", result.Rect.X, "y", result.Rect.Y,
+		"w", result.Rect.W, "h", result.Rect.H,
+		"annotations", len(result.Annotations))
+	cropped, err := a.captureSelectedPNG(result, pc)
+	if err != nil {
+		slog.Error("SaveRegionToRemote: capture failed", "err", err)
+		wruntime.EventsEmit(a.ctx, "upload:failure", err.Error())
+		return err
+	}
+	slog.Debug("SaveRegionToRemote: capture ok", "png_bytes", len(cropped))
+	return a.runSaveRemotePipeline(cropped)
+}
+
+// UploadRegionToFTP uploads the selected region through the configured FTP or
+// SFTP destination. This is the non-macOS Wails overlay action.
+func (a *App) UploadRegionToFTP(result CaptureResult) error {
+	pc, err := a.consumePendingCapture()
+	if err != nil {
+		slog.Warn("UploadRegionToFTP: no pending capture", "err", err)
+		return err
+	}
+	defer func() {
+		a.capturing.Store(false)
+		a.dismissOverlay()
+	}()
+
+	a.dismissOverlay()
+	flushFrame()
+	cropped, err := a.captureSelectedPNG(result, pc)
+	if err != nil {
+		slog.Error("UploadRegionToFTP: capture failed", "err", err)
+		wruntime.EventsEmit(a.ctx, "upload:failure", err.Error())
+		return err
+	}
+	return a.runFTPUploadPipeline(cropped)
+}
+
+// SummarizeRegion uploads the selected screenshot to S3, sends the public URL
+// to the configured multimodal LLM, and copies the resulting summary.
+func (a *App) SummarizeRegion(result CaptureResult) error {
+	pc, err := a.consumePendingCapture()
+	if err != nil {
+		slog.Warn("SummarizeRegion: no pending capture", "err", err)
+		return err
+	}
+	defer func() {
+		a.capturing.Store(false)
+		a.dismissOverlay()
+	}()
+
+	a.dismissOverlay()
+	flushFrame()
+
+	slog.Info("SummarizeRegion: capturing region",
+		"x", result.Rect.X, "y", result.Rect.Y,
+		"w", result.Rect.W, "h", result.Rect.H,
+		"annotations", len(result.Annotations))
+	cropped, err := a.captureSelectedPNG(result, pc)
+	if err != nil {
+		slog.Error("SummarizeRegion: capture failed", "err", err)
+		wruntime.EventsEmit(a.ctx, "upload:failure", err.Error())
+		return err
+	}
+	return a.runSummaryPipeline(cropped)
+}
+
+// ExtractTextRegion sends the selected screenshot to the configured OCR
+// provider and copies the extracted text to the clipboard.
+func (a *App) ExtractTextRegion(result CaptureResult) error {
+	pc, err := a.consumePendingCapture()
+	if err != nil {
+		slog.Warn("ExtractTextRegion: no pending capture", "err", err)
+		return err
+	}
+	defer func() {
+		a.capturing.Store(false)
+		a.dismissOverlay()
+	}()
+
+	a.dismissOverlay()
+	flushFrame()
+
+	slog.Info("ExtractTextRegion: capturing region",
+		"x", result.Rect.X, "y", result.Rect.Y,
+		"w", result.Rect.W, "h", result.Rect.H,
+		"annotations", len(result.Annotations))
+	cropped, err := a.captureSelectedPNG(result, pc)
+	if err != nil {
+		slog.Error("ExtractTextRegion: capture failed", "err", err)
+		wruntime.EventsEmit(a.ctx, "upload:failure", err.Error())
+		return err
+	}
+	return a.runOCRPipeline(cropped)
+}
+
+// SaveNativeRegionToRemote is the macOS-native overlay equivalent of
+// SaveRegionToRemote. The AppKit panel is already closed by the time this
+// runs (see saveRemoteSelection in native_overlay_darwin.go), so we only
+// have to release the dock icon afterwards.
+func (a *App) SaveNativeRegionToRemote(result CaptureResult) error {
+	pc, err := a.consumePendingCapture()
+	if err != nil {
+		slog.Warn("SaveNativeRegionToRemote: no pending capture", "err", err)
+		return err
+	}
+	defer func() {
+		a.capturing.Store(false)
+		hideDockIcon()
+	}()
+
+	flushFrame()
+	slog.Info("SaveNativeRegionToRemote: capturing region",
+		"x", result.Rect.X, "y", result.Rect.Y,
+		"w", result.Rect.W, "h", result.Rect.H,
+		"annotations", len(result.Annotations))
+	cropped, err := a.captureSelectedPNG(result, pc)
+	if err != nil {
+		slog.Error("SaveNativeRegionToRemote: capture failed", "err", err)
+		wruntime.EventsEmit(a.ctx, "upload:failure", err.Error())
+		return err
+	}
+	slog.Debug("SaveNativeRegionToRemote: capture ok", "png_bytes", len(cropped))
+	return a.runSaveRemotePipeline(cropped)
+}
+
+// UploadNativeRegionToFTP is the macOS AppKit overlay equivalent of
+// UploadRegionToFTP. The native panel has already closed when this runs.
+func (a *App) UploadNativeRegionToFTP(result CaptureResult) error {
+	pc, err := a.consumePendingCapture()
+	if err != nil {
+		slog.Warn("UploadNativeRegionToFTP: no pending capture", "err", err)
+		return err
+	}
+	defer func() {
+		a.capturing.Store(false)
+		hideDockIcon()
+	}()
+
+	flushFrame()
+	cropped, err := a.captureSelectedPNG(result, pc)
+	if err != nil {
+		slog.Error("UploadNativeRegionToFTP: capture failed", "err", err)
+		wruntime.EventsEmit(a.ctx, "upload:failure", err.Error())
+		return err
+	}
+	return a.runFTPUploadPipeline(cropped)
+}
+
+// SummarizeNativeRegion is the macOS-native overlay equivalent of
+// SummarizeRegion. The AppKit panel is already closed before this runs.
+func (a *App) SummarizeNativeRegion(result CaptureResult) error {
+	pc, err := a.consumePendingCapture()
+	if err != nil {
+		slog.Warn("SummarizeNativeRegion: no pending capture", "err", err)
+		return err
+	}
+	defer func() {
+		a.capturing.Store(false)
+		hideDockIcon()
+	}()
+
+	flushFrame()
+	slog.Info("SummarizeNativeRegion: capturing region",
+		"x", result.Rect.X, "y", result.Rect.Y,
+		"w", result.Rect.W, "h", result.Rect.H,
+		"annotations", len(result.Annotations))
+	cropped, err := a.captureSelectedPNG(result, pc)
+	if err != nil {
+		slog.Error("SummarizeNativeRegion: capture failed", "err", err)
+		wruntime.EventsEmit(a.ctx, "upload:failure", err.Error())
+		return err
+	}
+	return a.runSummaryPipeline(cropped)
+}
+
+// ExtractTextNativeRegion is the macOS-native overlay equivalent of
+// ExtractTextRegion. The AppKit panel is already closed before this runs.
+func (a *App) ExtractTextNativeRegion(result CaptureResult) error {
+	pc, err := a.consumePendingCapture()
+	if err != nil {
+		slog.Warn("ExtractTextNativeRegion: no pending capture", "err", err)
+		return err
+	}
+	defer func() {
+		a.capturing.Store(false)
+		hideDockIcon()
+	}()
+
+	flushFrame()
+	slog.Info("ExtractTextNativeRegion: capturing region",
+		"x", result.Rect.X, "y", result.Rect.Y,
+		"w", result.Rect.W, "h", result.Rect.H,
+		"annotations", len(result.Annotations))
+	cropped, err := a.captureSelectedPNG(result, pc)
+	if err != nil {
+		slog.Error("ExtractTextNativeRegion: capture failed", "err", err)
+		wruntime.EventsEmit(a.ctx, "upload:failure", err.Error())
+		return err
+	}
+	return a.runOCRPipeline(cropped)
+}
+
+func parseNativeAnnotations(raw string) []application.Annotation {
+	if raw == "" {
+		return nil
+	}
+	var annotations []application.Annotation
+	if err := json.Unmarshal([]byte(raw), &annotations); err != nil {
+		slog.Warn("parse native annotations failed", "err", err)
+		return nil
+	}
+	return annotations
+}
+
+// CancelRegion is invoked when the user dismisses the overlay (Esc /
+// Cancel button / right-click). Frees the pending PNG, releases the
+// capture lock, and hides the overlay.
+func (a *App) CancelRegion() {
+	a.pendingMu.Lock()
+	a.pending = nil
+	a.pendingMu.Unlock()
+	a.capturing.Store(false)
+	a.dismissOverlay()
+	a.emitOperationStatus("capture", "已取消", "本次截图已取消", "success")
+}
+
+// CancelNativeRegion releases native-overlay state without touching the
+// hidden Wails settings window.
+func (a *App) CancelNativeRegion() {
+	a.pendingMu.Lock()
+	a.pending = nil
+	a.pendingMu.Unlock()
+	a.capturing.Store(false)
+	hideDockIcon()
+	a.emitOperationStatus("capture", "已取消", "本次截图已取消", "success")
+}
+
+// ShowWindow brings the main window back to the foreground in its normal
+// Settings shape. Used by the tray "Settings…" menu item.
+func (a *App) ShowWindow() {
+	a.surfaceWindow()
+	time.Sleep(20 * time.Millisecond)
+}
+
+// QuitApp terminates the entire process. Wired to the tray "Quit" menu.
+func (a *App) QuitApp() {
+	if a.ctx != nil {
+		wruntime.Quit(a.ctx)
+		return
+	}
+	os.Exit(0)
+}
+
+func (a *App) emitOperationStatus(operation, phase, message, state string) {
+	if a.ctx != nil {
+		wruntime.EventsEmit(a.ctx, "operation:status", OperationStatusPayload{
+			Operation: operation,
+			Phase:     phase,
+			Message:   message,
+			State:     state,
+		})
+	}
+	switch state {
+	case "success":
+		showOperationStatus(phase, message, operationStatusSuccess)
+		hideOperationStatusAfter(1400 * time.Millisecond)
+	case "error":
+		showOperationStatus(phase, message, operationStatusError)
+		hideOperationStatusAfter(2600 * time.Millisecond)
+	default:
+		showOperationStatus(phase, message, operationStatusRunning)
+	}
+}
+
+// runtimeNotifier emits success / failure events via the Wails runtime.
+type runtimeNotifier struct{ ctx context.Context }
+
+func (n *runtimeNotifier) NotifySuccess(url string) {
+	wruntime.EventsEmit(n.ctx, "upload:success", url)
+}
+
+func (n *runtimeNotifier) NotifyFailure(reason string) {
+	wruntime.EventsEmit(n.ctx, "upload:failure", reason)
+}
+
+// userPicturesDir returns ~/Pictures (or HOME if unavailable).
+func userPicturesDir() string {
+	home, err := os.UserHomeDir()
+	if err != nil {
+		return os.TempDir()
+	}
+	return filepath.Join(home, "Pictures")
+}
diff --git a/build/README.md b/build/README.md
new file mode 100644
index 0000000..1ae2f67
--- /dev/null
+++ b/build/README.md
@@ -0,0 +1,35 @@
+# Build Directory
+
+The build directory is used to house all the build files and assets for your application. 
+
+The structure is:
+
+* bin - Output directory
+* darwin - macOS specific files
+* windows - Windows specific files
+
+## Mac
+
+The `darwin` directory holds files specific to Mac builds.
+These may be customised and used as part of the build. To return these files to the default state, simply delete them
+and
+build with `wails build`.
+
+The directory contains the following files:
+
+- `Info.plist` - the main plist file used for Mac builds. It is used when building using `wails build`.
+- `Info.dev.plist` - same as the main plist file but used when building using `wails dev`.
+
+## Windows
+
+The `windows` directory contains the manifest and rc files used when building with `wails build`.
+These may be customised for your application. To return these files to the default state, simply delete them and
+build with `wails build`.
+
+- `icon.ico` - The icon used for the application. This is used when building using `wails build`. If you wish to
+  use a different icon, simply replace this file with your own. If it is missing, a new `icon.ico` file
+  will be created using the `appicon.png` file in the build directory.
+- `installer/*` - The files used to create the Windows installer. These are used when building using `wails build`.
+- `info.json` - Application details used for Windows builds. The data here will be used by the Windows installer,
+  as well as the application itself (right click the exe -> properties -> details)
+- `wails.exe.manifest` - The main application manifest file.
\ No newline at end of file
diff --git a/build/appicon.png b/build/appicon.png
new file mode 100644
index 0000000..dc728e3
Binary files /dev/null and b/build/appicon.png differ
diff --git a/build/darwin/Info.dev.plist b/build/darwin/Info.dev.plist
new file mode 100644
index 0000000..41f0990
--- /dev/null
+++ b/build/darwin/Info.dev.plist
@@ -0,0 +1,74 @@
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+    <dict>
+        <key>CFBundlePackageType</key>
+        <string>APPL</string>
+        <key>CFBundleName</key>
+        <string>{{.Info.ProductName}}</string>
+        <key>CFBundleExecutable</key>
+        <string>{{.OutputFilename}}</string>
+        <key>CFBundleIdentifier</key>
+        <string>io.snapgo.app</string>
+        <key>CFBundleVersion</key>
+        <string>{{.Info.ProductVersion}}</string>
+        <key>CFBundleGetInfoString</key>
+        <string>{{.Info.Comments}}</string>
+        <key>CFBundleShortVersionString</key>
+        <string>{{.Info.ProductVersion}}</string>
+        <key>CFBundleIconFile</key>
+        <string>iconfile</string>
+        <key>LSMinimumSystemVersion</key>
+        <string>11.0.0</string>
+        <key>NSHighResolutionCapable</key>
+        <string>true</string>
+        <key>LSUIElement</key>
+        <true/>
+        <key>NSAppleEventsUsageDescription</key>
+        <string>SnapGo needs Apple Events access to capture the active window.</string>
+        <key>NSScreenCaptureUsageDescription</key>
+        <string>SnapGo needs screen recording permission to capture screenshots.</string>
+        <key>NSHumanReadableCopyright</key>
+        <string>{{.Info.Copyright}}</string>
+        {{if .Info.FileAssociations}}
+        <key>CFBundleDocumentTypes</key>
+        <array>
+          {{range .Info.FileAssociations}}
+          <dict>
+            <key>CFBundleTypeExtensions</key>
+            <array>
+              <string>{{.Ext}}</string>
+            </array>
+            <key>CFBundleTypeName</key>
+            <string>{{.Name}}</string>
+            <key>CFBundleTypeRole</key>
+            <string>{{.Role}}</string>
+            <key>CFBundleTypeIconFile</key>
+            <string>{{.IconName}}</string>
+          </dict>
+          {{end}}
+        </array>
+        {{end}}
+        {{if .Info.Protocols}}
+        <key>CFBundleURLTypes</key>
+        <array>
+          {{range .Info.Protocols}}
+            <dict>
+                <key>CFBundleURLName</key>
+                <string>com.wails.{{.Scheme}}</string>
+                <key>CFBundleURLSchemes</key>
+                <array>
+                    <string>{{.Scheme}}</string>
+                </array>
+                <key>CFBundleTypeRole</key>
+                <string>{{.Role}}</string>
+            </dict>
+          {{end}}
+        </array>
+        {{end}}
+        <key>NSAppTransportSecurity</key>
+        <dict>
+            <key>NSAllowsLocalNetworking</key>
+            <true/>
+        </dict>
+    </dict>
+</plist>
diff --git a/build/darwin/Info.plist b/build/darwin/Info.plist
new file mode 100644
index 0000000..5c7dd30
--- /dev/null
+++ b/build/darwin/Info.plist
@@ -0,0 +1,75 @@
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+    <dict>
+        <key>CFBundlePackageType</key>
+        <string>APPL</string>
+        <key>CFBundleName</key>
+        <string>{{.Info.ProductName}}</string>
+        <key>CFBundleExecutable</key>
+        <string>{{.OutputFilename}}</string>
+        <key>CFBundleIdentifier</key>
+        <string>io.snapgo.app</string>
+        <key>CFBundleVersion</key>
+        <string>{{.Info.ProductVersion}}</string>
+        <key>CFBundleGetInfoString</key>
+        <string>{{.Info.Comments}}</string>
+        <key>CFBundleShortVersionString</key>
+        <string>{{.Info.ProductVersion}}</string>
+        <key>CFBundleIconFile</key>
+        <string>iconfile</string>
+        <key>LSMinimumSystemVersion</key>
+        <string>11.0.0</string>
+        <key>NSHighResolutionCapable</key>
+        <string>true</string>
+        <!--
+            LSUIElement=true turns the app into a "menu-bar agent": it does
+            NOT show up in the Dock, has no application menu, and is driven
+            entirely from a menu-bar icon. Mirrors apps like Snipaste,
+            Bartender, Itsycal, etc.
+        -->
+        <key>LSUIElement</key>
+        <true/>
+        <key>NSAppleEventsUsageDescription</key>
+        <string>SnapGo needs Apple Events access to capture the active window.</string>
+        <key>NSScreenCaptureUsageDescription</key>
+        <string>SnapGo needs screen recording permission to capture screenshots.</string>
+        <key>NSHumanReadableCopyright</key>
+        <string>{{.Info.Copyright}}</string>
+        {{if .Info.FileAssociations}}
+        <key>CFBundleDocumentTypes</key>
+        <array>
+          {{range .Info.FileAssociations}}
+          <dict>
+            <key>CFBundleTypeExtensions</key>
+            <array>
+              <string>{{.Ext}}</string>
+            </array>
+            <key>CFBundleTypeName</key>
+            <string>{{.Name}}</string>
+            <key>CFBundleTypeRole</key>
+            <string>{{.Role}}</string>
+            <key>CFBundleTypeIconFile</key>
+            <string>{{.IconName}}</string>
+          </dict>
+          {{end}}
+        </array>
+        {{end}}
+        {{if .Info.Protocols}}
+        <key>CFBundleURLTypes</key>
+        <array>
+          {{range .Info.Protocols}}
+            <dict>
+                <key>CFBundleURLName</key>
+                <string>com.wails.{{.Scheme}}</string>
+                <key>CFBundleURLSchemes</key>
+                <array>
+                    <string>{{.Scheme}}</string>
+                </array>
+                <key>CFBundleTypeRole</key>
+                <string>{{.Role}}</string>
+            </dict>
+          {{end}}
+        </array>
+        {{end}}
+    </dict>
+</plist>
diff --git a/build/darwin/entitlements.plist b/build/darwin/entitlements.plist
new file mode 100644
index 0000000..aeb9388
--- /dev/null
+++ b/build/darwin/entitlements.plist
@@ -0,0 +1,42 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  Hardened Runtime entitlements for SnapGo on macOS.
+
+  Design rationale:
+  - Hardened Runtime is REQUIRED for notarization (Apple Notary Service).
+  - We deliberately keep entitlements MINIMAL: only what the screenshot tool
+    actually needs. Granting more increases attack surface and slows review.
+  - JIT / unsigned-executable-memory is enabled because the embedded WebView
+    (WKWebView via wails) needs JS JIT.
+  - We do NOT enable App Sandbox: the app uses /usr/sbin/screencapture and a
+    global hotkey that requires non-sandboxed access. (App Sandbox + screen
+    recording requires extra plumbing not in MVP scope.)
+-->
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+    <!-- Allow JIT for WKWebView JavaScript engine -->
+    <key>com.apple.security.cs.allow-jit</key>
+    <true/>
+
+    <!-- Allow unsigned executable memory pages used by JIT -->
+    <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
+    <true/>
+
+    <!-- Allow loading dylibs not signed by the same team (Wails runtime needs this on some setups) -->
+    <key>com.apple.security.cs.disable-library-validation</key>
+    <true/>
+
+    <!-- Outbound network for S3 / OSS uploads -->
+    <key>com.apple.security.network.client</key>
+    <true/>
+
+    <!--
+        Apple Events: required to invoke /usr/sbin/screencapture and to query
+        display info via system_profiler. Combined with NSAppleEventsUsageDescription
+        in Info.plist, this triggers the standard TCC prompt.
+    -->
+    <key>com.apple.security.automation.apple-events</key>
+    <true/>
+</dict>
+</plist>
diff --git a/build/windows/icon.ico b/build/windows/icon.ico
new file mode 100644
index 0000000..f334798
Binary files /dev/null and b/build/windows/icon.ico differ
diff --git a/build/windows/info.json b/build/windows/info.json
new file mode 100644
index 0000000..9727946
--- /dev/null
+++ b/build/windows/info.json
@@ -0,0 +1,15 @@
+{
+	"fixed": {
+		"file_version": "{{.Info.ProductVersion}}"
+	},
+	"info": {
+		"0000": {
+			"ProductVersion": "{{.Info.ProductVersion}}",
+			"CompanyName": "{{.Info.CompanyName}}",
+			"FileDescription": "{{.Info.ProductName}}",
+			"LegalCopyright": "{{.Info.Copyright}}",
+			"ProductName": "{{.Info.ProductName}}",
+			"Comments": "{{.Info.Comments}}"
+		}
+	}
+}
\ No newline at end of file
diff --git a/build/windows/installer/project.nsi b/build/windows/installer/project.nsi
new file mode 100644
index 0000000..654ae2e
--- /dev/null
+++ b/build/windows/installer/project.nsi
@@ -0,0 +1,114 @@
+Unicode true
+
+####
+## Please note: Template replacements don't work in this file. They are provided with default defines like
+## mentioned underneath.
+## If the keyword is not defined, "wails_tools.nsh" will populate them with the values from ProjectInfo.
+## If they are defined here, "wails_tools.nsh" will not touch them. This allows to use this project.nsi manually
+## from outside of Wails for debugging and development of the installer.
+##
+## For development first make a wails nsis build to populate the "wails_tools.nsh":
+## > wails build --target windows/amd64 --nsis
+## Then you can call makensis on this file with specifying the path to your binary:
+## For a AMD64 only installer:
+## > makensis -DARG_WAILS_AMD64_BINARY=..\..\bin\app.exe
+## For a ARM64 only installer:
+## > makensis -DARG_WAILS_ARM64_BINARY=..\..\bin\app.exe
+## For a installer with both architectures:
+## > makensis -DARG_WAILS_AMD64_BINARY=..\..\bin\app-amd64.exe -DARG_WAILS_ARM64_BINARY=..\..\bin\app-arm64.exe
+####
+## The following information is taken from the ProjectInfo file, but they can be overwritten here.
+####
+## !define INFO_PROJECTNAME    "MyProject" # Default "{{.Name}}"
+## !define INFO_COMPANYNAME    "MyCompany" # Default "{{.Info.CompanyName}}"
+## !define INFO_PRODUCTNAME    "MyProduct" # Default "{{.Info.ProductName}}"
+## !define INFO_PRODUCTVERSION "1.0.0"     # Default "{{.Info.ProductVersion}}"
+## !define INFO_COPYRIGHT      "Copyright" # Default "{{.Info.Copyright}}"
+###
+## !define PRODUCT_EXECUTABLE  "Application.exe"      # Default "${INFO_PROJECTNAME}.exe"
+## !define UNINST_KEY_NAME     "UninstKeyInRegistry"  # Default "${INFO_COMPANYNAME}${INFO_PRODUCTNAME}"
+####
+## !define REQUEST_EXECUTION_LEVEL "admin"            # Default "admin"  see also https://nsis.sourceforge.io/Docs/Chapter4.html
+####
+## Include the wails tools
+####
+!include "wails_tools.nsh"
+
+# The version information for this two must consist of 4 parts
+VIProductVersion "${INFO_PRODUCTVERSION}.0"
+VIFileVersion    "${INFO_PRODUCTVERSION}.0"
+
+VIAddVersionKey "CompanyName"     "${INFO_COMPANYNAME}"
+VIAddVersionKey "FileDescription" "${INFO_PRODUCTNAME} Installer"
+VIAddVersionKey "ProductVersion"  "${INFO_PRODUCTVERSION}"
+VIAddVersionKey "FileVersion"     "${INFO_PRODUCTVERSION}"
+VIAddVersionKey "LegalCopyright"  "${INFO_COPYRIGHT}"
+VIAddVersionKey "ProductName"     "${INFO_PRODUCTNAME}"
+
+# Enable HiDPI support. https://nsis.sourceforge.io/Reference/ManifestDPIAware
+ManifestDPIAware true
+
+!include "MUI.nsh"
+
+!define MUI_ICON "..\icon.ico"
+!define MUI_UNICON "..\icon.ico"
+# !define MUI_WELCOMEFINISHPAGE_BITMAP "resources\leftimage.bmp" #Include this to add a bitmap on the left side of the Welcome Page. Must be a size of 164x314
+!define MUI_FINISHPAGE_NOAUTOCLOSE # Wait on the INSTFILES page so the user can take a look into the details of the installation steps
+!define MUI_ABORTWARNING # This will warn the user if they exit from the installer.
+
+!insertmacro MUI_PAGE_WELCOME # Welcome to the installer page.
+# !insertmacro MUI_PAGE_LICENSE "resources\eula.txt" # Adds a EULA page to the installer
+!insertmacro MUI_PAGE_DIRECTORY # In which folder install page.
+!insertmacro MUI_PAGE_INSTFILES # Installing page.
+!insertmacro MUI_PAGE_FINISH # Finished installation page.
+
+!insertmacro MUI_UNPAGE_INSTFILES # Uinstalling page
+
+!insertmacro MUI_LANGUAGE "English" # Set the Language of the installer
+
+## The following two statements can be used to sign the installer and the uninstaller. The path to the binaries are provided in %1
+#!uninstfinalize 'signtool --file "%1"'
+#!finalize 'signtool --file "%1"'
+
+Name "${INFO_PRODUCTNAME}"
+OutFile "..\..\bin\${INFO_PROJECTNAME}-${ARCH}-installer.exe" # Name of the installer's file.
+InstallDir "$PROGRAMFILES64\${INFO_COMPANYNAME}\${INFO_PRODUCTNAME}" # Default installing folder ($PROGRAMFILES is Program Files folder).
+ShowInstDetails show # This will always show the installation details.
+
+Function .onInit
+   !insertmacro wails.checkArchitecture
+FunctionEnd
+
+Section
+    !insertmacro wails.setShellContext
+
+    !insertmacro wails.webview2runtime
+
+    SetOutPath $INSTDIR
+
+    !insertmacro wails.files
+
+    CreateShortcut "$SMPROGRAMS\${INFO_PRODUCTNAME}.lnk" "$INSTDIR\${PRODUCT_EXECUTABLE}"
+    CreateShortCut "$DESKTOP\${INFO_PRODUCTNAME}.lnk" "$INSTDIR\${PRODUCT_EXECUTABLE}"
+
+    !insertmacro wails.associateFiles
+    !insertmacro wails.associateCustomProtocols
+
+    !insertmacro wails.writeUninstaller
+SectionEnd
+
+Section "uninstall"
+    !insertmacro wails.setShellContext
+
+    RMDir /r "$AppData\${PRODUCT_EXECUTABLE}" # Remove the WebView2 DataPath
+
+    RMDir /r $INSTDIR
+
+    Delete "$SMPROGRAMS\${INFO_PRODUCTNAME}.lnk"
+    Delete "$DESKTOP\${INFO_PRODUCTNAME}.lnk"
+
+    !insertmacro wails.unassociateFiles
+    !insertmacro wails.unassociateCustomProtocols
+
+    !insertmacro wails.deleteUninstaller
+SectionEnd
diff --git a/build/windows/installer/wails_tools.nsh b/build/windows/installer/wails_tools.nsh
new file mode 100644
index 0000000..2f6d321
--- /dev/null
+++ b/build/windows/installer/wails_tools.nsh
@@ -0,0 +1,249 @@
+# DO NOT EDIT - Generated automatically by `wails build`
+
+!include "x64.nsh"
+!include "WinVer.nsh"
+!include "FileFunc.nsh"
+
+!ifndef INFO_PROJECTNAME
+    !define INFO_PROJECTNAME "{{.Name}}"
+!endif
+!ifndef INFO_COMPANYNAME
+    !define INFO_COMPANYNAME "{{.Info.CompanyName}}"
+!endif
+!ifndef INFO_PRODUCTNAME
+    !define INFO_PRODUCTNAME "{{.Info.ProductName}}"
+!endif
+!ifndef INFO_PRODUCTVERSION
+    !define INFO_PRODUCTVERSION "{{.Info.ProductVersion}}"
+!endif
+!ifndef INFO_COPYRIGHT
+    !define INFO_COPYRIGHT "{{.Info.Copyright}}"
+!endif
+!ifndef PRODUCT_EXECUTABLE
+    !define PRODUCT_EXECUTABLE "${INFO_PROJECTNAME}.exe"
+!endif
+!ifndef UNINST_KEY_NAME
+    !define UNINST_KEY_NAME "${INFO_COMPANYNAME}${INFO_PRODUCTNAME}"
+!endif
+!define UNINST_KEY "Software\Microsoft\Windows\CurrentVersion\Uninstall\${UNINST_KEY_NAME}"
+
+!ifndef REQUEST_EXECUTION_LEVEL
+    !define REQUEST_EXECUTION_LEVEL "admin"
+!endif
+
+RequestExecutionLevel "${REQUEST_EXECUTION_LEVEL}"
+
+!ifdef ARG_WAILS_AMD64_BINARY
+    !define SUPPORTS_AMD64
+!endif
+
+!ifdef ARG_WAILS_ARM64_BINARY
+    !define SUPPORTS_ARM64
+!endif
+
+!ifdef SUPPORTS_AMD64
+    !ifdef SUPPORTS_ARM64
+        !define ARCH "amd64_arm64"
+    !else
+        !define ARCH "amd64"
+    !endif
+!else
+    !ifdef SUPPORTS_ARM64
+        !define ARCH "arm64"
+    !else
+        !error "Wails: Undefined ARCH, please provide at least one of ARG_WAILS_AMD64_BINARY or ARG_WAILS_ARM64_BINARY"
+    !endif
+!endif
+
+!macro wails.checkArchitecture
+    !ifndef WAILS_WIN10_REQUIRED
+        !define WAILS_WIN10_REQUIRED "This product is only supported on Windows 10 (Server 2016) and later."
+    !endif
+
+    !ifndef WAILS_ARCHITECTURE_NOT_SUPPORTED
+        !define WAILS_ARCHITECTURE_NOT_SUPPORTED "This product can't be installed on the current Windows architecture. Supports: ${ARCH}"
+    !endif
+
+    ${If} ${AtLeastWin10}
+        !ifdef SUPPORTS_AMD64
+            ${if} ${IsNativeAMD64}
+                Goto ok
+            ${EndIf}
+        !endif
+
+        !ifdef SUPPORTS_ARM64
+            ${if} ${IsNativeARM64}
+                Goto ok
+            ${EndIf}
+        !endif
+
+        IfSilent silentArch notSilentArch
+        silentArch:
+            SetErrorLevel 65
+            Abort
+        notSilentArch:
+            MessageBox MB_OK "${WAILS_ARCHITECTURE_NOT_SUPPORTED}"
+            Quit
+    ${else}
+        IfSilent silentWin notSilentWin
+        silentWin:
+            SetErrorLevel 64
+            Abort
+        notSilentWin:
+            MessageBox MB_OK "${WAILS_WIN10_REQUIRED}"
+            Quit
+    ${EndIf}
+
+    ok:
+!macroend
+
+!macro wails.files
+    !ifdef SUPPORTS_AMD64
+        ${if} ${IsNativeAMD64}
+            File "/oname=${PRODUCT_EXECUTABLE}" "${ARG_WAILS_AMD64_BINARY}"
+        ${EndIf}
+    !endif
+
+    !ifdef SUPPORTS_ARM64
+        ${if} ${IsNativeARM64}
+            File "/oname=${PRODUCT_EXECUTABLE}" "${ARG_WAILS_ARM64_BINARY}"
+        ${EndIf}
+    !endif
+!macroend
+
+!macro wails.writeUninstaller
+    WriteUninstaller "$INSTDIR\uninstall.exe"
+
+    SetRegView 64
+    WriteRegStr HKLM "${UNINST_KEY}" "Publisher" "${INFO_COMPANYNAME}"
+    WriteRegStr HKLM "${UNINST_KEY}" "DisplayName" "${INFO_PRODUCTNAME}"
+    WriteRegStr HKLM "${UNINST_KEY}" "DisplayVersion" "${INFO_PRODUCTVERSION}"
+    WriteRegStr HKLM "${UNINST_KEY}" "DisplayIcon" "$INSTDIR\${PRODUCT_EXECUTABLE}"
+    WriteRegStr HKLM "${UNINST_KEY}" "UninstallString" "$\"$INSTDIR\uninstall.exe$\""
+    WriteRegStr HKLM "${UNINST_KEY}" "QuietUninstallString" "$\"$INSTDIR\uninstall.exe$\" /S"
+
+    ${GetSize} "$INSTDIR" "/S=0K" $0 $1 $2
+    IntFmt $0 "0x%08X" $0
+    WriteRegDWORD HKLM "${UNINST_KEY}" "EstimatedSize" "$0"
+!macroend
+
+!macro wails.deleteUninstaller
+    Delete "$INSTDIR\uninstall.exe"
+
+    SetRegView 64
+    DeleteRegKey HKLM "${UNINST_KEY}"
+!macroend
+
+!macro wails.setShellContext
+    ${If} ${REQUEST_EXECUTION_LEVEL} == "admin"
+        SetShellVarContext all
+    ${else}
+        SetShellVarContext current
+    ${EndIf}
+!macroend
+
+# Install webview2 by launching the bootstrapper
+# See https://docs.microsoft.com/en-us/microsoft-edge/webview2/concepts/distribution#online-only-deployment
+!macro wails.webview2runtime
+    !ifndef WAILS_INSTALL_WEBVIEW_DETAILPRINT
+        !define WAILS_INSTALL_WEBVIEW_DETAILPRINT "Installing: WebView2 Runtime"
+    !endif
+
+    SetRegView 64
+	# If the admin key exists and is not empty then webview2 is already installed
+	ReadRegStr $0 HKLM "SOFTWARE\WOW6432Node\Microsoft\EdgeUpdate\Clients\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}" "pv"
+    ${If} $0 != ""
+        Goto ok
+    ${EndIf}
+
+    ${If} ${REQUEST_EXECUTION_LEVEL} == "user"
+        # If the installer is run in user level, check the user specific key exists and is not empty then webview2 is already installed
+	    ReadRegStr $0 HKCU "Software\Microsoft\EdgeUpdate\Clients\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}" "pv"
+        ${If} $0 != ""
+            Goto ok
+        ${EndIf}
+     ${EndIf}
+
+	SetDetailsPrint both
+    DetailPrint "${WAILS_INSTALL_WEBVIEW_DETAILPRINT}"
+    SetDetailsPrint listonly
+
+    InitPluginsDir
+    CreateDirectory "$pluginsdir\webview2bootstrapper"
+    SetOutPath "$pluginsdir\webview2bootstrapper"
+    File "tmp\MicrosoftEdgeWebview2Setup.exe"
+    ExecWait '"$pluginsdir\webview2bootstrapper\MicrosoftEdgeWebview2Setup.exe" /silent /install'
+
+    SetDetailsPrint both
+    ok:
+!macroend
+
+# Copy of APP_ASSOCIATE and APP_UNASSOCIATE macros from here https://gist.github.com/nikku/281d0ef126dbc215dd58bfd5b3a5cd5b
+!macro APP_ASSOCIATE EXT FILECLASS DESCRIPTION ICON COMMANDTEXT COMMAND
+  ; Backup the previously associated file class
+  ReadRegStr $R0 SHELL_CONTEXT "Software\Classes\.${EXT}" ""
+  WriteRegStr SHELL_CONTEXT "Software\Classes\.${EXT}" "${FILECLASS}_backup" "$R0"
+
+  WriteRegStr SHELL_CONTEXT "Software\Classes\.${EXT}" "" "${FILECLASS}"
+
+  WriteRegStr SHELL_CONTEXT "Software\Classes\${FILECLASS}" "" `${DESCRIPTION}`
+  WriteRegStr SHELL_CONTEXT "Software\Classes\${FILECLASS}\DefaultIcon" "" `${ICON}`
+  WriteRegStr SHELL_CONTEXT "Software\Classes\${FILECLASS}\shell" "" "open"
+  WriteRegStr SHELL_CONTEXT "Software\Classes\${FILECLASS}\shell\open" "" `${COMMANDTEXT}`
+  WriteRegStr SHELL_CONTEXT "Software\Classes\${FILECLASS}\shell\open\command" "" `${COMMAND}`
+!macroend
+
+!macro APP_UNASSOCIATE EXT FILECLASS
+  ; Backup the previously associated file class
+  ReadRegStr $R0 SHELL_CONTEXT "Software\Classes\.${EXT}" `${FILECLASS}_backup`
+  WriteRegStr SHELL_CONTEXT "Software\Classes\.${EXT}" "" "$R0"
+
+  DeleteRegKey SHELL_CONTEXT `Software\Classes\${FILECLASS}`
+!macroend
+
+!macro wails.associateFiles
+    ; Create file associations
+    {{range .Info.FileAssociations}}
+      !insertmacro APP_ASSOCIATE "{{.Ext}}" "{{.Name}}" "{{.Description}}" "$INSTDIR\{{.IconName}}.ico" "Open with ${INFO_PRODUCTNAME}" "$INSTDIR\${PRODUCT_EXECUTABLE} $\"%1$\""
+
+      File "..\{{.IconName}}.ico"
+    {{end}}
+!macroend
+
+!macro wails.unassociateFiles
+    ; Delete app associations
+    {{range .Info.FileAssociations}}
+      !insertmacro APP_UNASSOCIATE "{{.Ext}}" "{{.Name}}"
+
+      Delete "$INSTDIR\{{.IconName}}.ico"
+    {{end}}
+!macroend
+
+!macro CUSTOM_PROTOCOL_ASSOCIATE PROTOCOL DESCRIPTION ICON COMMAND
+  DeleteRegKey SHELL_CONTEXT "Software\Classes\${PROTOCOL}"
+  WriteRegStr SHELL_CONTEXT "Software\Classes\${PROTOCOL}" "" "${DESCRIPTION}"
+  WriteRegStr SHELL_CONTEXT "Software\Classes\${PROTOCOL}" "URL Protocol" ""
+  WriteRegStr SHELL_CONTEXT "Software\Classes\${PROTOCOL}\DefaultIcon" "" "${ICON}"
+  WriteRegStr SHELL_CONTEXT "Software\Classes\${PROTOCOL}\shell" "" ""
+  WriteRegStr SHELL_CONTEXT "Software\Classes\${PROTOCOL}\shell\open" "" ""
+  WriteRegStr SHELL_CONTEXT "Software\Classes\${PROTOCOL}\shell\open\command" "" "${COMMAND}"
+!macroend
+
+!macro CUSTOM_PROTOCOL_UNASSOCIATE PROTOCOL
+  DeleteRegKey SHELL_CONTEXT "Software\Classes\${PROTOCOL}"
+!macroend
+
+!macro wails.associateCustomProtocols
+    ; Create custom protocols associations
+    {{range .Info.Protocols}}
+      !insertmacro CUSTOM_PROTOCOL_ASSOCIATE "{{.Scheme}}" "{{.Description}}" "$INSTDIR\${PRODUCT_EXECUTABLE},0" "$INSTDIR\${PRODUCT_EXECUTABLE} $\"%1$\""
+
+    {{end}}
+!macroend
+
+!macro wails.unassociateCustomProtocols
+    ; Delete app custom protocol associations
+    {{range .Info.Protocols}}
+      !insertmacro CUSTOM_PROTOCOL_UNASSOCIATE "{{.Scheme}}"
+    {{end}}
+!macroend
diff --git a/build/windows/wails.exe.manifest b/build/windows/wails.exe.manifest
new file mode 100644
index 0000000..17e1a23
--- /dev/null
+++ b/build/windows/wails.exe.manifest
@@ -0,0 +1,15 @@
+<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
+<assembly manifestVersion="1.0" xmlns="urn:schemas-microsoft-com:asm.v1" xmlns:asmv3="urn:schemas-microsoft-com:asm.v3">
+    <assemblyIdentity type="win32" name="com.wails.{{.Name}}" version="{{.Info.ProductVersion}}.0" processorArchitecture="*"/>
+    <dependency>
+        <dependentAssembly>
+            <assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*"/>
+        </dependentAssembly>
+    </dependency>
+    <asmv3:application>
+        <asmv3:windowsSettings>
+            <dpiAware xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">true/pm</dpiAware> <!-- fallback for Windows 7 and 8 -->
+            <dpiAwareness xmlns="http://schemas.microsoft.com/SMI/2016/WindowsSettings">permonitorv2,permonitor</dpiAwareness> <!-- falls back to per-monitor if per-monitor v2 is not supported -->
+        </asmv3:windowsSettings>
+    </asmv3:application>
+</assembly>
\ No newline at end of file
diff --git a/flush_frame.go b/flush_frame.go
new file mode 100644
index 0000000..10727bc
--- /dev/null
+++ b/flush_frame.go
@@ -0,0 +1,14 @@
+// flush_frame.go provides a tiny helper that yields the current goroutine
+// long enough for the OS compositor to redraw after WindowHide / Unfullscreen.
+//
+// Without this, the screenshot can include the just-hidden overlay window
+// because Cocoa hasn't redrawn yet by the time we ask for the pixels.
+package main
+
+import "time"
+
+func flushFrame() {
+	// 80ms is empirically enough on Apple Silicon at 120Hz; on slower devices
+	// the worst case is a single redraw delay, still imperceptible to the user.
+	time.Sleep(80 * time.Millisecond)
+}
diff --git a/frontend/README.md b/frontend/README.md
new file mode 100644
index 0000000..98f4a52
--- /dev/null
+++ b/frontend/README.md
@@ -0,0 +1,23 @@
+# Vue 3 + TypeScript + Vite
+
+This template should help get you started developing with Vue 3 and TypeScript in Vite. The template uses Vue
+3 `<script setup>` SFCs, check out
+the [script setup docs](https://v3.vuejs.org/api/sfc-script-setup.html#sfc-script-setup) to learn more.
+
+## Recommended IDE Setup
+
+- [VS Code](https://code.visualstudio.com/) + [Volar](https://marketplace.visualstudio.com/items?itemName=Vue.volar)
+
+## Type Support For `.vue` Imports in TS
+
+Since TypeScript cannot handle type information for `.vue` imports, they are shimmed to be a generic Vue component type
+by default. In most cases this is fine if you don't really care about component prop types outside of templates.
+However, if you wish to get actual prop types in `.vue` imports (for example to get props validation when using
+manual `h(...)` calls), you can enable Volar's Take Over mode by following these steps:
+
+1. Run `Extensions: Show Built-in Extensions` from VS Code's command palette, look
+   for `TypeScript and JavaScript Language Features`, then right click and select `Disable (Workspace)`. By default,
+   Take Over mode will enable itself if the default TypeScript extension is disabled.
+2. Reload the VS Code window by running `Developer: Reload Window` from the command palette.
+
+You can learn more about Take Over mode [here](https://github.com/johnsoncodehk/volar/discussions/471).
diff --git a/frontend/index.html b/frontend/index.html
new file mode 100644
index 0000000..a0a3a8c
--- /dev/null
+++ b/frontend/index.html
@@ -0,0 +1,12 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8"/>
+    <meta content="width=device-width, initial-scale=1.0" name="viewport"/>
+    <title>SnapGo</title>
+</head>
+<body>
+<div id="app"></div>
+<script src="./src/main.ts" type="module"></script>
+</body>
+</html>
diff --git a/frontend/package-lock.json b/frontend/package-lock.json
new file mode 100644
index 0000000..51fcd57
--- /dev/null
+++ b/frontend/package-lock.json
@@ -0,0 +1,1071 @@
+{
+  "name": "frontend",
+  "version": "0.0.0",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "frontend",
+      "version": "0.0.0",
+      "dependencies": {
+        "vue": "^3.2.37"
+      },
+      "devDependencies": {
+        "@babel/types": "^7.18.10",
+        "@vitejs/plugin-vue": "^3.0.3",
+        "typescript": "^4.6.4",
+        "vite": "^3.0.7",
+        "vue-tsc": "^1.8.27"
+      }
+    },
+    "node_modules/@babel/helper-string-parser": {
+      "version": "7.27.1",
+      "resolved": "https://registry.npmmirror.com/@babel/helper-string-parser/-/helper-string-parser-7.27.1.tgz",
+      "integrity": "sha512-qMlSxKbpRlAridDExk92nSobyDdpPijUq2DW6oDnUqd0iOGxmQjyqhMIihI9+zv4LPyZdRje2cavWPbCbWm3eA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=6.9.0"
+      }
+    },
+    "node_modules/@babel/helper-validator-identifier": {
+      "version": "7.28.5",
+      "resolved": "https://registry.npmmirror.com/@babel/helper-validator-identifier/-/helper-validator-identifier-7.28.5.tgz",
+      "integrity": "sha512-qSs4ifwzKJSV39ucNjsvc6WVHs6b7S03sOh2OcHF9UHfVPqWWALUsNUVzhSBiItjRZoLHx7nIarVjqKVusUZ1Q==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=6.9.0"
+      }
+    },
+    "node_modules/@babel/parser": {
+      "version": "7.29.3",
+      "resolved": "https://registry.npmmirror.com/@babel/parser/-/parser-7.29.3.tgz",
+      "integrity": "sha512-b3ctpQwp+PROvU/cttc4OYl4MzfJUWy6FZg+PMXfzmt/+39iHVF0sDfqay8TQM3JA2EUOyKcFZt75jWriQijsA==",
+      "license": "MIT",
+      "dependencies": {
+        "@babel/types": "^7.29.0"
+      },
+      "bin": {
+        "parser": "bin/babel-parser.js"
+      },
+      "engines": {
+        "node": ">=6.0.0"
+      }
+    },
+    "node_modules/@babel/types": {
+      "version": "7.29.0",
+      "resolved": "https://registry.npmmirror.com/@babel/types/-/types-7.29.0.tgz",
+      "integrity": "sha512-LwdZHpScM4Qz8Xw2iKSzS+cfglZzJGvofQICy7W7v4caru4EaAmyUuO6BGrbyQ2mYV11W0U8j5mBhd14dd3B0A==",
+      "license": "MIT",
+      "dependencies": {
+        "@babel/helper-string-parser": "^7.27.1",
+        "@babel/helper-validator-identifier": "^7.28.5"
+      },
+      "engines": {
+        "node": ">=6.9.0"
+      }
+    },
+    "node_modules/@esbuild/android-arm": {
+      "version": "0.15.18",
+      "resolved": "https://registry.npmmirror.com/@esbuild/android-arm/-/android-arm-0.15.18.tgz",
+      "integrity": "sha512-5GT+kcs2WVGjVs7+boataCkO5Fg0y4kCjzkB5bAip7H4jfnOS3dA6KPiww9W1OEKTKeAcUVhdZGvgI65OXmUnw==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild/linux-loong64": {
+      "version": "0.15.18",
+      "resolved": "https://registry.npmmirror.com/@esbuild/linux-loong64/-/linux-loong64-0.15.18.tgz",
+      "integrity": "sha512-L4jVKS82XVhw2nvzLg/19ClLWg0y27ulRwuP7lcyL6AbUWB5aPglXY3M21mauDQMDfRLs8cQmeT03r/+X3cZYQ==",
+      "cpu": [
+        "loong64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@jridgewell/sourcemap-codec": {
+      "version": "1.5.5",
+      "resolved": "https://registry.npmmirror.com/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.5.5.tgz",
+      "integrity": "sha512-cYQ9310grqxueWbl+WuIUIaiUaDcj7WOq5fVhEljNVgRfOUhY9fy2zTvfoqWsnebh8Sl70VScFbICvJnLKB0Og==",
+      "license": "MIT"
+    },
+    "node_modules/@vitejs/plugin-vue": {
+      "version": "3.2.0",
+      "resolved": "https://registry.npmmirror.com/@vitejs/plugin-vue/-/plugin-vue-3.2.0.tgz",
+      "integrity": "sha512-E0tnaL4fr+qkdCNxJ+Xd0yM31UwMkQje76fsDVBBUCoGOUPexu2VDUYHL8P4CwV+zMvWw6nlRw19OnRKmYAJpw==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": "^14.18.0 || >=16.0.0"
+      },
+      "peerDependencies": {
+        "vite": "^3.0.0",
+        "vue": "^3.2.25"
+      }
+    },
+    "node_modules/@volar/language-core": {
+      "version": "1.11.1",
+      "resolved": "https://registry.npmmirror.com/@volar/language-core/-/language-core-1.11.1.tgz",
+      "integrity": "sha512-dOcNn3i9GgZAcJt43wuaEykSluAuOkQgzni1cuxLxTV0nJKanQztp7FxyswdRILaKH+P2XZMPRp2S4MV/pElCw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@volar/source-map": "1.11.1"
+      }
+    },
+    "node_modules/@volar/source-map": {
+      "version": "1.11.1",
+      "resolved": "https://registry.npmmirror.com/@volar/source-map/-/source-map-1.11.1.tgz",
+      "integrity": "sha512-hJnOnwZ4+WT5iupLRnuzbULZ42L7BWWPMmruzwtLhJfpDVoZLjNBxHDi2sY2bgZXCKlpU5XcsMFoYrsQmPhfZg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "muggle-string": "^0.3.1"
+      }
+    },
+    "node_modules/@volar/typescript": {
+      "version": "1.11.1",
+      "resolved": "https://registry.npmmirror.com/@volar/typescript/-/typescript-1.11.1.tgz",
+      "integrity": "sha512-iU+t2mas/4lYierSnoFOeRFQUhAEMgsFuQxoxvwn5EdQopw43j+J27a4lt9LMInx1gLJBC6qL14WYGlgymaSMQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@volar/language-core": "1.11.1",
+        "path-browserify": "^1.0.1"
+      }
+    },
+    "node_modules/@vue/compiler-core": {
+      "version": "3.5.34",
+      "resolved": "https://registry.npmmirror.com/@vue/compiler-core/-/compiler-core-3.5.34.tgz",
+      "integrity": "sha512-s9cLyK5mLcvZ4Agva5QgRsQyLKvts9WbU9DB6NqiZkkGEdwmcEiylj5Jbwkp680drF/NNCV8OlAJSe+yMLxaJw==",
+      "license": "MIT",
+      "dependencies": {
+        "@babel/parser": "^7.29.3",
+        "@vue/shared": "3.5.34",
+        "entities": "^7.0.1",
+        "estree-walker": "^2.0.2",
+        "source-map-js": "^1.2.1"
+      }
+    },
+    "node_modules/@vue/compiler-dom": {
+      "version": "3.5.34",
+      "resolved": "https://registry.npmmirror.com/@vue/compiler-dom/-/compiler-dom-3.5.34.tgz",
+      "integrity": "sha512-EbF/T++k0e2MMZlJsBhzK8Sgwt0HcIPOhzn1CTB/lv6sQcyk+OWf8YeiLxZp3ro7MbbLcAfAJ6sEvjFWuNgUCw==",
+      "license": "MIT",
+      "dependencies": {
+        "@vue/compiler-core": "3.5.34",
+        "@vue/shared": "3.5.34"
+      }
+    },
+    "node_modules/@vue/compiler-sfc": {
+      "version": "3.5.34",
+      "resolved": "https://registry.npmmirror.com/@vue/compiler-sfc/-/compiler-sfc-3.5.34.tgz",
+      "integrity": "sha512-D/ihr6uZeIt6r+pVZf46RWT1fAsLFMbUP7k8G1VkiiWexriED9GrX3echHd4Abbt17zjlfiFJ8z7a3BxZOPNjg==",
+      "license": "MIT",
+      "dependencies": {
+        "@babel/parser": "^7.29.3",
+        "@vue/compiler-core": "3.5.34",
+        "@vue/compiler-dom": "3.5.34",
+        "@vue/compiler-ssr": "3.5.34",
+        "@vue/shared": "3.5.34",
+        "estree-walker": "^2.0.2",
+        "magic-string": "^0.30.21",
+        "postcss": "^8.5.14",
+        "source-map-js": "^1.2.1"
+      }
+    },
+    "node_modules/@vue/compiler-ssr": {
+      "version": "3.5.34",
+      "resolved": "https://registry.npmmirror.com/@vue/compiler-ssr/-/compiler-ssr-3.5.34.tgz",
+      "integrity": "sha512-cDtTHKibkThKGHH1SP+WdccquNRYQDFH6rRjQCqT9G2ltFAfoR5pUftpab/z+aM5mW9HLLVQW7hfKKQe/1GBeQ==",
+      "license": "MIT",
+      "dependencies": {
+        "@vue/compiler-dom": "3.5.34",
+        "@vue/shared": "3.5.34"
+      }
+    },
+    "node_modules/@vue/language-core": {
+      "version": "1.8.27",
+      "resolved": "https://registry.npmmirror.com/@vue/language-core/-/language-core-1.8.27.tgz",
+      "integrity": "sha512-L8Kc27VdQserNaCUNiSFdDl9LWT24ly8Hpwf1ECy3aFb9m6bDhBGQYOujDm21N7EW3moKIOKEanQwe1q5BK+mA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@volar/language-core": "~1.11.1",
+        "@volar/source-map": "~1.11.1",
+        "@vue/compiler-dom": "^3.3.0",
+        "@vue/shared": "^3.3.0",
+        "computeds": "^0.0.1",
+        "minimatch": "^9.0.3",
+        "muggle-string": "^0.3.1",
+        "path-browserify": "^1.0.1",
+        "vue-template-compiler": "^2.7.14"
+      },
+      "peerDependencies": {
+        "typescript": "*"
+      },
+      "peerDependenciesMeta": {
+        "typescript": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/@vue/reactivity": {
+      "version": "3.5.34",
+      "resolved": "https://registry.npmmirror.com/@vue/reactivity/-/reactivity-3.5.34.tgz",
+      "integrity": "sha512-y9XDjCEuBp+98k+UL5dbYkh57AHU4o6cxZedOPXw3bmrZZYLQsVHguGurq7hVrPCSrQtrnz1f9dssyFr+dMXfQ==",
+      "license": "MIT",
+      "dependencies": {
+        "@vue/shared": "3.5.34"
+      }
+    },
+    "node_modules/@vue/runtime-core": {
+      "version": "3.5.34",
+      "resolved": "https://registry.npmmirror.com/@vue/runtime-core/-/runtime-core-3.5.34.tgz",
+      "integrity": "sha512-mKeBYvu8tcMSLhypAHBmriUFfWXKTCF/23Z4jiCoYK3UtWepkliViNLuR90V9XOyD62mUxs9p1jsrpK3CCGIzw==",
+      "license": "MIT",
+      "dependencies": {
+        "@vue/reactivity": "3.5.34",
+        "@vue/shared": "3.5.34"
+      }
+    },
+    "node_modules/@vue/runtime-dom": {
+      "version": "3.5.34",
+      "resolved": "https://registry.npmmirror.com/@vue/runtime-dom/-/runtime-dom-3.5.34.tgz",
+      "integrity": "sha512-e8kZzERmCwUnBRVsgSQlAfrfU2rGoy0FFKPBXSlfEjc/O3KfA7QP0t1/2ZylrbchjmIKB4dPTd07A6WPr0eOrg==",
+      "license": "MIT",
+      "dependencies": {
+        "@vue/reactivity": "3.5.34",
+        "@vue/runtime-core": "3.5.34",
+        "@vue/shared": "3.5.34",
+        "csstype": "^3.2.3"
+      }
+    },
+    "node_modules/@vue/server-renderer": {
+      "version": "3.5.34",
+      "resolved": "https://registry.npmmirror.com/@vue/server-renderer/-/server-renderer-3.5.34.tgz",
+      "integrity": "sha512-nHxmJoTrKsmrkbILRhkC9gY1G3moZbJTqCzDd7DOOzG5KH9oeJ0Unqrff5f9v0pW//jES05ZkJcNtfE8JjOIew==",
+      "license": "MIT",
+      "dependencies": {
+        "@vue/compiler-ssr": "3.5.34",
+        "@vue/shared": "3.5.34"
+      },
+      "peerDependencies": {
+        "vue": "3.5.34"
+      }
+    },
+    "node_modules/@vue/shared": {
+      "version": "3.5.34",
+      "resolved": "https://registry.npmmirror.com/@vue/shared/-/shared-3.5.34.tgz",
+      "integrity": "sha512-24uqU4OIiX29ryC3MeWid/Xf2fa2EFRUVLb77nRhk+UrTVrh/XiGtFAFmJBAtBRbjwNdsPRP+jj/OL27Eg1NDA==",
+      "license": "MIT"
+    },
+    "node_modules/balanced-match": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmmirror.com/balanced-match/-/balanced-match-1.0.2.tgz",
+      "integrity": "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/brace-expansion": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmmirror.com/brace-expansion/-/brace-expansion-2.1.0.tgz",
+      "integrity": "sha512-TN1kCZAgdgweJhWWpgKYrQaMNHcDULHkWwQIspdtjV4Y5aurRdZpjAqn6yX3FPqTA9ngHCc4hJxMAMgGfve85w==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "balanced-match": "^1.0.0"
+      }
+    },
+    "node_modules/computeds": {
+      "version": "0.0.1",
+      "resolved": "https://registry.npmmirror.com/computeds/-/computeds-0.0.1.tgz",
+      "integrity": "sha512-7CEBgcMjVmitjYo5q8JTJVra6X5mQ20uTThdK+0kR7UEaDrAWEQcRiBtWJzga4eRpP6afNwwLsX2SET2JhVB1Q==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/csstype": {
+      "version": "3.2.3",
+      "resolved": "https://registry.npmmirror.com/csstype/-/csstype-3.2.3.tgz",
+      "integrity": "sha512-z1HGKcYy2xA8AGQfwrn0PAy+PB7X/GSj3UVJW9qKyn43xWa+gl5nXmU4qqLMRzWVLFC8KusUX8T/0kCiOYpAIQ==",
+      "license": "MIT"
+    },
+    "node_modules/de-indent": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmmirror.com/de-indent/-/de-indent-1.0.2.tgz",
+      "integrity": "sha512-e/1zu3xH5MQryN2zdVaF0OrdNLUbvWxzMbi+iNA6Bky7l1RoP8a2fIbRocyHclXt/arDrrR6lL3TqFD9pMQTsg==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/entities": {
+      "version": "7.0.1",
+      "resolved": "https://registry.npmmirror.com/entities/-/entities-7.0.1.tgz",
+      "integrity": "sha512-TWrgLOFUQTH994YUyl1yT4uyavY5nNB5muff+RtWaqNVCAK408b5ZnnbNAUEWLTCpum9w6arT70i1XdQ4UeOPA==",
+      "license": "BSD-2-Clause",
+      "engines": {
+        "node": ">=0.12"
+      },
+      "funding": {
+        "url": "https://github.com/fb55/entities?sponsor=1"
+      }
+    },
+    "node_modules/es-errors": {
+      "version": "1.3.0",
+      "resolved": "https://registry.npmmirror.com/es-errors/-/es-errors-1.3.0.tgz",
+      "integrity": "sha512-Zf5H2Kxt2xjTvbJvP2ZWLEICxA6j+hAmMzIlypy4xcBg1vKVnx89Wy0GbS+kf5cwCVFFzdCFh2XSCFNULS6csw==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/esbuild": {
+      "version": "0.15.18",
+      "resolved": "https://registry.npmmirror.com/esbuild/-/esbuild-0.15.18.tgz",
+      "integrity": "sha512-x/R72SmW3sSFRm5zrrIjAhCeQSAWoni3CmHEqfQrZIQTM3lVCdehdwuIqaOtfC2slvpdlLa62GYoN8SxT23m6Q==",
+      "dev": true,
+      "hasInstallScript": true,
+      "license": "MIT",
+      "bin": {
+        "esbuild": "bin/esbuild"
+      },
+      "engines": {
+        "node": ">=12"
+      },
+      "optionalDependencies": {
+        "@esbuild/android-arm": "0.15.18",
+        "@esbuild/linux-loong64": "0.15.18",
+        "esbuild-android-64": "0.15.18",
+        "esbuild-android-arm64": "0.15.18",
+        "esbuild-darwin-64": "0.15.18",
+        "esbuild-darwin-arm64": "0.15.18",
+        "esbuild-freebsd-64": "0.15.18",
+        "esbuild-freebsd-arm64": "0.15.18",
+        "esbuild-linux-32": "0.15.18",
+        "esbuild-linux-64": "0.15.18",
+        "esbuild-linux-arm": "0.15.18",
+        "esbuild-linux-arm64": "0.15.18",
+        "esbuild-linux-mips64le": "0.15.18",
+        "esbuild-linux-ppc64le": "0.15.18",
+        "esbuild-linux-riscv64": "0.15.18",
+        "esbuild-linux-s390x": "0.15.18",
+        "esbuild-netbsd-64": "0.15.18",
+        "esbuild-openbsd-64": "0.15.18",
+        "esbuild-sunos-64": "0.15.18",
+        "esbuild-windows-32": "0.15.18",
+        "esbuild-windows-64": "0.15.18",
+        "esbuild-windows-arm64": "0.15.18"
+      }
+    },
+    "node_modules/esbuild-android-64": {
+      "version": "0.15.18",
+      "resolved": "https://registry.npmmirror.com/esbuild-android-64/-/esbuild-android-64-0.15.18.tgz",
+      "integrity": "sha512-wnpt3OXRhcjfIDSZu9bnzT4/TNTDsOUvip0foZOUBG7QbSt//w3QV4FInVJxNhKc/ErhUxc5z4QjHtMi7/TbgA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/esbuild-android-arm64": {
+      "version": "0.15.18",
+      "resolved": "https://registry.npmmirror.com/esbuild-android-arm64/-/esbuild-android-arm64-0.15.18.tgz",
+      "integrity": "sha512-G4xu89B8FCzav9XU8EjsXacCKSG2FT7wW9J6hOc18soEHJdtWu03L3TQDGf0geNxfLTtxENKBzMSq9LlbjS8OQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/esbuild-darwin-64": {
+      "version": "0.15.18",
+      "resolved": "https://registry.npmmirror.com/esbuild-darwin-64/-/esbuild-darwin-64-0.15.18.tgz",
+      "integrity": "sha512-2WAvs95uPnVJPuYKP0Eqx+Dl/jaYseZEUUT1sjg97TJa4oBtbAKnPnl3b5M9l51/nbx7+QAEtuummJZW0sBEmg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/esbuild-darwin-arm64": {
+      "version": "0.15.18",
+      "resolved": "https://registry.npmmirror.com/esbuild-darwin-arm64/-/esbuild-darwin-arm64-0.15.18.tgz",
+      "integrity": "sha512-tKPSxcTJ5OmNb1btVikATJ8NftlyNlc8BVNtyT/UAr62JFOhwHlnoPrhYWz09akBLHI9nElFVfWSTSRsrZiDUA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/esbuild-freebsd-64": {
+      "version": "0.15.18",
+      "resolved": "https://registry.npmmirror.com/esbuild-freebsd-64/-/esbuild-freebsd-64-0.15.18.tgz",
+      "integrity": "sha512-TT3uBUxkteAjR1QbsmvSsjpKjOX6UkCstr8nMr+q7zi3NuZ1oIpa8U41Y8I8dJH2fJgdC3Dj3CXO5biLQpfdZA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/esbuild-freebsd-arm64": {
+      "version": "0.15.18",
+      "resolved": "https://registry.npmmirror.com/esbuild-freebsd-arm64/-/esbuild-freebsd-arm64-0.15.18.tgz",
+      "integrity": "sha512-R/oVr+X3Tkh+S0+tL41wRMbdWtpWB8hEAMsOXDumSSa6qJR89U0S/PpLXrGF7Wk/JykfpWNokERUpCeHDl47wA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/esbuild-linux-32": {
+      "version": "0.15.18",
+      "resolved": "https://registry.npmmirror.com/esbuild-linux-32/-/esbuild-linux-32-0.15.18.tgz",
+      "integrity": "sha512-lphF3HiCSYtaa9p1DtXndiQEeQDKPl9eN/XNoBf2amEghugNuqXNZA/ZovthNE2aa4EN43WroO0B85xVSjYkbg==",
+      "cpu": [
+        "ia32"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/esbuild-linux-64": {
+      "version": "0.15.18",
+      "resolved": "https://registry.npmmirror.com/esbuild-linux-64/-/esbuild-linux-64-0.15.18.tgz",
+      "integrity": "sha512-hNSeP97IviD7oxLKFuii5sDPJ+QHeiFTFLoLm7NZQligur8poNOWGIgpQ7Qf8Balb69hptMZzyOBIPtY09GZYw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/esbuild-linux-arm": {
+      "version": "0.15.18",
+      "resolved": "https://registry.npmmirror.com/esbuild-linux-arm/-/esbuild-linux-arm-0.15.18.tgz",
+      "integrity": "sha512-UH779gstRblS4aoS2qpMl3wjg7U0j+ygu3GjIeTonCcN79ZvpPee12Qun3vcdxX+37O5LFxz39XeW2I9bybMVA==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/esbuild-linux-arm64": {
+      "version": "0.15.18",
+      "resolved": "https://registry.npmmirror.com/esbuild-linux-arm64/-/esbuild-linux-arm64-0.15.18.tgz",
+      "integrity": "sha512-54qr8kg/6ilcxd+0V3h9rjT4qmjc0CccMVWrjOEM/pEcUzt8X62HfBSeZfT2ECpM7104mk4yfQXkosY8Quptug==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/esbuild-linux-mips64le": {
+      "version": "0.15.18",
+      "resolved": "https://registry.npmmirror.com/esbuild-linux-mips64le/-/esbuild-linux-mips64le-0.15.18.tgz",
+      "integrity": "sha512-Mk6Ppwzzz3YbMl/ZZL2P0q1tnYqh/trYZ1VfNP47C31yT0K8t9s7Z077QrDA/guU60tGNp2GOwCQnp+DYv7bxQ==",
+      "cpu": [
+        "mips64el"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/esbuild-linux-ppc64le": {
+      "version": "0.15.18",
+      "resolved": "https://registry.npmmirror.com/esbuild-linux-ppc64le/-/esbuild-linux-ppc64le-0.15.18.tgz",
+      "integrity": "sha512-b0XkN4pL9WUulPTa/VKHx2wLCgvIAbgwABGnKMY19WhKZPT+8BxhZdqz6EgkqCLld7X5qiCY2F/bfpUUlnFZ9w==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/esbuild-linux-riscv64": {
+      "version": "0.15.18",
+      "resolved": "https://registry.npmmirror.com/esbuild-linux-riscv64/-/esbuild-linux-riscv64-0.15.18.tgz",
+      "integrity": "sha512-ba2COaoF5wL6VLZWn04k+ACZjZ6NYniMSQStodFKH/Pu6RxzQqzsmjR1t9QC89VYJxBeyVPTaHuBMCejl3O/xg==",
+      "cpu": [
+        "riscv64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/esbuild-linux-s390x": {
+      "version": "0.15.18",
+      "resolved": "https://registry.npmmirror.com/esbuild-linux-s390x/-/esbuild-linux-s390x-0.15.18.tgz",
+      "integrity": "sha512-VbpGuXEl5FCs1wDVp93O8UIzl3ZrglgnSQ+Hu79g7hZu6te6/YHgVJxCM2SqfIila0J3k0csfnf8VD2W7u2kzQ==",
+      "cpu": [
+        "s390x"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/esbuild-netbsd-64": {
+      "version": "0.15.18",
+      "resolved": "https://registry.npmmirror.com/esbuild-netbsd-64/-/esbuild-netbsd-64-0.15.18.tgz",
+      "integrity": "sha512-98ukeCdvdX7wr1vUYQzKo4kQ0N2p27H7I11maINv73fVEXt2kyh4K4m9f35U1K43Xc2QGXlzAw0K9yoU7JUjOg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "netbsd"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/esbuild-openbsd-64": {
+      "version": "0.15.18",
+      "resolved": "https://registry.npmmirror.com/esbuild-openbsd-64/-/esbuild-openbsd-64-0.15.18.tgz",
+      "integrity": "sha512-yK5NCcH31Uae076AyQAXeJzt/vxIo9+omZRKj1pauhk3ITuADzuOx5N2fdHrAKPxN+zH3w96uFKlY7yIn490xQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openbsd"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/esbuild-sunos-64": {
+      "version": "0.15.18",
+      "resolved": "https://registry.npmmirror.com/esbuild-sunos-64/-/esbuild-sunos-64-0.15.18.tgz",
+      "integrity": "sha512-On22LLFlBeLNj/YF3FT+cXcyKPEI263nflYlAhz5crxtp3yRG1Ugfr7ITyxmCmjm4vbN/dGrb/B7w7U8yJR9yw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "sunos"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/esbuild-windows-32": {
+      "version": "0.15.18",
+      "resolved": "https://registry.npmmirror.com/esbuild-windows-32/-/esbuild-windows-32-0.15.18.tgz",
+      "integrity": "sha512-o+eyLu2MjVny/nt+E0uPnBxYuJHBvho8vWsC2lV61A7wwTWC3jkN2w36jtA+yv1UgYkHRihPuQsL23hsCYGcOQ==",
+      "cpu": [
+        "ia32"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/esbuild-windows-64": {
+      "version": "0.15.18",
+      "resolved": "https://registry.npmmirror.com/esbuild-windows-64/-/esbuild-windows-64-0.15.18.tgz",
+      "integrity": "sha512-qinug1iTTaIIrCorAUjR0fcBk24fjzEedFYhhispP8Oc7SFvs+XeW3YpAKiKp8dRpizl4YYAhxMjlftAMJiaUw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/esbuild-windows-arm64": {
+      "version": "0.15.18",
+      "resolved": "https://registry.npmmirror.com/esbuild-windows-arm64/-/esbuild-windows-arm64-0.15.18.tgz",
+      "integrity": "sha512-q9bsYzegpZcLziq0zgUi5KqGVtfhjxGbnksaBFYmWLxeV/S1fK4OLdq2DFYnXcLMjlZw2L0jLsk1eGoB522WXQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/estree-walker": {
+      "version": "2.0.2",
+      "resolved": "https://registry.npmmirror.com/estree-walker/-/estree-walker-2.0.2.tgz",
+      "integrity": "sha512-Rfkk/Mp/DL7JVje3u18FxFujQlTNR2q6QfMSMB7AvCBx91NGj/ba3kCfza0f6dVDbw7YlRf/nDrn7pQrCCyQ/w==",
+      "license": "MIT"
+    },
+    "node_modules/fsevents": {
+      "version": "2.3.3",
+      "resolved": "https://registry.npmmirror.com/fsevents/-/fsevents-2.3.3.tgz",
+      "integrity": "sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==",
+      "dev": true,
+      "hasInstallScript": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": "^8.16.0 || ^10.6.0 || >=11.0.0"
+      }
+    },
+    "node_modules/function-bind": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmmirror.com/function-bind/-/function-bind-1.1.2.tgz",
+      "integrity": "sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA==",
+      "dev": true,
+      "license": "MIT",
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/hasown": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmmirror.com/hasown/-/hasown-2.0.3.tgz",
+      "integrity": "sha512-ej4AhfhfL2Q2zpMmLo7U1Uv9+PyhIZpgQLGT1F9miIGmiCJIoCgSmczFdrc97mWT4kVY72KA+WnnhJ5pghSvSg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "function-bind": "^1.1.2"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/he": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmmirror.com/he/-/he-1.2.0.tgz",
+      "integrity": "sha512-F/1DnUGPopORZi0ni+CvrCgHQ5FyEAHRLSApuYWMmrbSwoN2Mn/7k+Gl38gJnR7yyDZk6WLXwiGod1JOWNDKGw==",
+      "dev": true,
+      "license": "MIT",
+      "bin": {
+        "he": "bin/he"
+      }
+    },
+    "node_modules/is-core-module": {
+      "version": "2.16.2",
+      "resolved": "https://registry.npmmirror.com/is-core-module/-/is-core-module-2.16.2.tgz",
+      "integrity": "sha512-evOr8xfXKxE6qSR0hSXL2r3sd7ALj8+7jQEUvPYcm5sgZFdJ+AYzT6yNmJenvIYQBgIGwfwz08sL8zoL7yq2BA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "hasown": "^2.0.3"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/magic-string": {
+      "version": "0.30.21",
+      "resolved": "https://registry.npmmirror.com/magic-string/-/magic-string-0.30.21.tgz",
+      "integrity": "sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ==",
+      "license": "MIT",
+      "dependencies": {
+        "@jridgewell/sourcemap-codec": "^1.5.5"
+      }
+    },
+    "node_modules/minimatch": {
+      "version": "9.0.9",
+      "resolved": "https://registry.npmmirror.com/minimatch/-/minimatch-9.0.9.tgz",
+      "integrity": "sha512-OBwBN9AL4dqmETlpS2zasx+vTeWclWzkblfZk7KTA5j3jeOONz/tRCnZomUyvNg83wL5Zv9Ss6HMJXAgL8R2Yg==",
+      "dev": true,
+      "license": "ISC",
+      "dependencies": {
+        "brace-expansion": "^2.0.2"
+      },
+      "engines": {
+        "node": ">=16 || 14 >=14.17"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/isaacs"
+      }
+    },
+    "node_modules/muggle-string": {
+      "version": "0.3.1",
+      "resolved": "https://registry.npmmirror.com/muggle-string/-/muggle-string-0.3.1.tgz",
+      "integrity": "sha512-ckmWDJjphvd/FvZawgygcUeQCxzvohjFO5RxTjj4eq8kw359gFF3E1brjfI+viLMxss5JrHTDRHZvu2/tuy0Qg==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/nanoid": {
+      "version": "3.3.12",
+      "resolved": "https://registry.npmmirror.com/nanoid/-/nanoid-3.3.12.tgz",
+      "integrity": "sha512-ZB9RH/39qpq5Vu6Y+NmUaFhQR6pp+M2Xt76XBnEwDaGcVAqhlvxrl3B2bKS5D3NH3QR76v3aSrKaF/Kiy7lEtQ==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "license": "MIT",
+      "bin": {
+        "nanoid": "bin/nanoid.cjs"
+      },
+      "engines": {
+        "node": "^10 || ^12 || ^13.7 || ^14 || >=15.0.1"
+      }
+    },
+    "node_modules/path-browserify": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmmirror.com/path-browserify/-/path-browserify-1.0.1.tgz",
+      "integrity": "sha512-b7uo2UCUOYZcnF/3ID0lulOJi/bafxa1xPe7ZPsammBSpjSWQkjNxlt635YGS2MiR9GjvuXCtz2emr3jbsz98g==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/path-parse": {
+      "version": "1.0.7",
+      "resolved": "https://registry.npmmirror.com/path-parse/-/path-parse-1.0.7.tgz",
+      "integrity": "sha512-LDJzPVEEEPR+y48z93A0Ed0yXb8pAByGWo/k5YYdYgpY2/2EsOsksJrq7lOHxryrVOn1ejG6oAp8ahvOIQD8sw==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/picocolors": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmmirror.com/picocolors/-/picocolors-1.1.1.tgz",
+      "integrity": "sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==",
+      "license": "ISC"
+    },
+    "node_modules/postcss": {
+      "version": "8.5.14",
+      "resolved": "https://registry.npmmirror.com/postcss/-/postcss-8.5.14.tgz",
+      "integrity": "sha512-SoSL4+OSEtR99LHFZQiJLkT59C5B1amGO1NzTwj7TT1qCUgUO6hxOvzkOYxD+vMrXBM3XJIKzokoERdqQq/Zmg==",
+      "funding": [
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/postcss/"
+        },
+        {
+          "type": "tidelift",
+          "url": "https://tidelift.com/funding/github/npm/postcss"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "nanoid": "^3.3.11",
+        "picocolors": "^1.1.1",
+        "source-map-js": "^1.2.1"
+      },
+      "engines": {
+        "node": "^10 || ^12 || >=14"
+      }
+    },
+    "node_modules/resolve": {
+      "version": "1.22.12",
+      "resolved": "https://registry.npmmirror.com/resolve/-/resolve-1.22.12.tgz",
+      "integrity": "sha512-TyeJ1zif53BPfHootBGwPRYT1RUt6oGWsaQr8UyZW/eAm9bKoijtvruSDEmZHm92CwS9nj7/fWttqPCgzep8CA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "es-errors": "^1.3.0",
+        "is-core-module": "^2.16.1",
+        "path-parse": "^1.0.7",
+        "supports-preserve-symlinks-flag": "^1.0.0"
+      },
+      "bin": {
+        "resolve": "bin/resolve"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/rollup": {
+      "version": "2.80.0",
+      "resolved": "https://registry.npmmirror.com/rollup/-/rollup-2.80.0.tgz",
+      "integrity": "sha512-cIFJOD1DESzpjOBl763Kp1AH7UE/0fcdHe6rZXUdQ9c50uvgigvW97u3IcSeBwOkgqL/PXPBktBCh0KEu5L8XQ==",
+      "dev": true,
+      "license": "MIT",
+      "bin": {
+        "rollup": "dist/bin/rollup"
+      },
+      "engines": {
+        "node": ">=10.0.0"
+      },
+      "optionalDependencies": {
+        "fsevents": "~2.3.2"
+      }
+    },
+    "node_modules/semver": {
+      "version": "7.8.0",
+      "resolved": "https://registry.npmmirror.com/semver/-/semver-7.8.0.tgz",
+      "integrity": "sha512-AcM7dV/5ul4EekoQ29Agm5vri8JNqRyj39o0qpX6vDF2GZrtutZl5RwgD1XnZjiTAfncsJhMI48QQH3sN87YNA==",
+      "dev": true,
+      "license": "ISC",
+      "bin": {
+        "semver": "bin/semver.js"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/source-map-js": {
+      "version": "1.2.1",
+      "resolved": "https://registry.npmmirror.com/source-map-js/-/source-map-js-1.2.1.tgz",
+      "integrity": "sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==",
+      "license": "BSD-3-Clause",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/supports-preserve-symlinks-flag": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmmirror.com/supports-preserve-symlinks-flag/-/supports-preserve-symlinks-flag-1.0.0.tgz",
+      "integrity": "sha512-ot0WnXS9fgdkgIcePe6RHNk1WA8+muPa6cSjeR3V8K27q9BB1rTE3R1p7Hv0z1ZyAc8s6Vvv8DIyWf681MAt0w==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/typescript": {
+      "version": "4.9.5",
+      "resolved": "https://registry.npmmirror.com/typescript/-/typescript-4.9.5.tgz",
+      "integrity": "sha512-1FXk9E2Hm+QzZQ7z+McJiHL4NW1F2EzMu9Nq9i3zAaGqibafqYwCVU6WyWAuyQRRzOlxou8xZSyXLEN8oKj24g==",
+      "devOptional": true,
+      "license": "Apache-2.0",
+      "bin": {
+        "tsc": "bin/tsc",
+        "tsserver": "bin/tsserver"
+      },
+      "engines": {
+        "node": ">=4.2.0"
+      }
+    },
+    "node_modules/vite": {
+      "version": "3.2.11",
+      "resolved": "https://registry.npmmirror.com/vite/-/vite-3.2.11.tgz",
+      "integrity": "sha512-K/jGKL/PgbIgKCiJo5QbASQhFiV02X9Jh+Qq0AKCRCRKZtOTVi4t6wh75FDpGf2N9rYOnzH87OEFQNaFy6pdxQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "esbuild": "^0.15.9",
+        "postcss": "^8.4.18",
+        "resolve": "^1.22.1",
+        "rollup": "^2.79.1"
+      },
+      "bin": {
+        "vite": "bin/vite.js"
+      },
+      "engines": {
+        "node": "^14.18.0 || >=16.0.0"
+      },
+      "optionalDependencies": {
+        "fsevents": "~2.3.2"
+      },
+      "peerDependencies": {
+        "@types/node": ">= 14",
+        "less": "*",
+        "sass": "*",
+        "stylus": "*",
+        "sugarss": "*",
+        "terser": "^5.4.0"
+      },
+      "peerDependenciesMeta": {
+        "@types/node": {
+          "optional": true
+        },
+        "less": {
+          "optional": true
+        },
+        "sass": {
+          "optional": true
+        },
+        "stylus": {
+          "optional": true
+        },
+        "sugarss": {
+          "optional": true
+        },
+        "terser": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/vue": {
+      "version": "3.5.34",
+      "resolved": "https://registry.npmmirror.com/vue/-/vue-3.5.34.tgz",
+      "integrity": "sha512-WdLBG9gm02OgJIG9axd5Hpx0TFLdzVgfG2evFFu8Rur5O/IoGc5cMjnjh3tPL6GnRGsYvUhBSKVPYVcxRKpMCA==",
+      "license": "MIT",
+      "dependencies": {
+        "@vue/compiler-dom": "3.5.34",
+        "@vue/compiler-sfc": "3.5.34",
+        "@vue/runtime-dom": "3.5.34",
+        "@vue/server-renderer": "3.5.34",
+        "@vue/shared": "3.5.34"
+      },
+      "peerDependencies": {
+        "typescript": "*"
+      },
+      "peerDependenciesMeta": {
+        "typescript": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/vue-template-compiler": {
+      "version": "2.7.16",
+      "resolved": "https://registry.npmmirror.com/vue-template-compiler/-/vue-template-compiler-2.7.16.tgz",
+      "integrity": "sha512-AYbUWAJHLGGQM7+cNTELw+KsOG9nl2CnSv467WobS5Cv9uk3wFcnr1Etsz2sEIHEZvw1U+o9mRlEO6QbZvUPGQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "de-indent": "^1.0.2",
+        "he": "^1.2.0"
+      }
+    },
+    "node_modules/vue-tsc": {
+      "version": "1.8.27",
+      "resolved": "https://registry.npmmirror.com/vue-tsc/-/vue-tsc-1.8.27.tgz",
+      "integrity": "sha512-WesKCAZCRAbmmhuGl3+VrdWItEvfoFIPXOvUJkjULi+x+6G/Dy69yO3TBRJDr9eUlmsNAwVmxsNZxvHKzbkKdg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@volar/typescript": "~1.11.1",
+        "@vue/language-core": "1.8.27",
+        "semver": "^7.5.4"
+      },
+      "bin": {
+        "vue-tsc": "bin/vue-tsc.js"
+      },
+      "peerDependencies": {
+        "typescript": "*"
+      }
+    }
+  }
+}
diff --git a/frontend/package.json b/frontend/package.json
new file mode 100644
index 0000000..339bbb5
--- /dev/null
+++ b/frontend/package.json
@@ -0,0 +1,22 @@
+{
+  "name": "frontend",
+  "private": true,
+  "version": "0.0.0",
+  "type": "module",
+  "scripts": {
+    "dev": "vite",
+    "build": "vue-tsc --noEmit && vite build",
+    "test": "node --test tests/*.test.ts",
+    "preview": "vite preview"
+  },
+  "dependencies": {
+    "vue": "^3.2.37"
+  },
+  "devDependencies": {
+    "@vitejs/plugin-vue": "^3.0.3",
+    "typescript": "^4.6.4",
+    "vite": "^3.0.7",
+    "vue-tsc": "^1.8.27",
+    "@babel/types": "^7.18.10"
+  }
+}
diff --git a/frontend/package.json.md5 b/frontend/package.json.md5
new file mode 100755
index 0000000..098328d
--- /dev/null
+++ b/frontend/package.json.md5
@@ -0,0 +1 @@
+e2d56b98c3c8ae5968db0bbb461b5615
\ No newline at end of file
diff --git a/frontend/src/App.vue b/frontend/src/App.vue
new file mode 100644
index 0000000..2c1b008
--- /dev/null
+++ b/frontend/src/App.vue
@@ -0,0 +1,585 @@
+<script setup lang="ts">
+/*
+ * App shell — switches between two distinct UI modes that share the same
+ * Wails window:
+ *
+ *   • "settings" : full settings UI (native title bar + sidebar + form).
+ *   • "overlay"  : Snipaste-style region picker that fills the whole
+ *                  primary display.
+ *
+ * The Go side resizes/positions/flag-flips the window for each mode and
+ * emits a `capture:overlay` event with the screenshot payload so the
+ * frontend knows when (and what) to render.
+ */
+import { computed, onMounted, onUnmounted, ref } from 'vue'
+import SettingsView from './views/SettingsView.vue'
+import Toast from './components/Toast.vue'
+import CaptureOverlay from './views/CaptureOverlay.vue'
+import { EventsOn, EventsOff } from '../wailsjs/runtime/runtime'
+import {
+  RetryRegisterHotkey,
+  ConfirmRegion,
+  CopyRegionImage,
+  SaveRegionImage,
+  SaveRegionToRemote,
+  UploadRegionToFTP,
+  SummarizeRegion,
+  ExtractTextRegion,
+  CancelRegion,
+  GetConfig,
+} from '../wailsjs/go/main/App'
+
+type HotkeyStatus =
+  | { state: 'unknown' }
+  | { state: 'ok'; spec: string }
+  | { state: 'error'; reason: string }
+const hotkeyStatus = ref<HotkeyStatus>({ state: 'unknown' })
+
+type Mode = 'settings' | 'overlay'
+const mode = ref<Mode>('settings')
+
+type ThemeMode = 'auto' | 'light' | 'dark'
+const themeMode = ref<ThemeMode>('auto')
+const appThemeClass = computed(() => `theme-${themeMode.value}`)
+
+function normalizeTheme(theme: unknown): ThemeMode {
+  return theme === 'light' || theme === 'dark' || theme === 'auto'
+    ? theme
+    : 'auto'
+}
+
+async function loadThemePreference() {
+  try {
+    const cfg = await GetConfig()
+    themeMode.value = normalizeTheme((cfg as any)?.theme)
+  } catch {
+    themeMode.value = 'auto'
+  }
+}
+
+// `SettingsTab` is hoisted to the App shell so the sidebar (which lives
+// here) and the inner SettingsView (which renders the matching card) can
+// share a single source of truth without an event bus.
+type SettingsTab = 'general' | 's3' | 'ftp' | 'ssh' | 'llm' | 'ocr'
+const activeTab = ref<SettingsTab>('general')
+
+// Sidebar entries are declarative so adding a destination type later is
+// a one-line change. The label values match the user-facing tab names.
+const sidebarItems: Array<{ id: SettingsTab; label: string }> = [
+  { id: 'general', label: '通用设置' },
+  { id: 's3', label: '对象存储' },
+  { id: 'ftp', label: '文件服务' },
+  { id: 'ssh', label: '远程主机' },
+  { id: 'llm', label: '智能识图' },
+  { id: 'ocr', label: '文字提取' },
+]
+
+interface OverlayPayload {
+  cssWidth: number
+  cssHeight: number
+  scale: number
+}
+const overlayPayload = ref<OverlayPayload | null>(null)
+
+interface OverlayAnnotation {
+  tool: string
+  color: string
+  points: Array<{ x: number; y: number }>
+  text?: string
+  strokeWidth?: number
+  fontSize?: number
+}
+
+interface OverlayResult {
+  rect: {
+    x: number
+    y: number
+    w: number
+    h: number
+  }
+  annotations: OverlayAnnotation[]
+}
+
+const capturing = ref(false)
+
+const toast = ref<{ kind: 'success' | 'error'; text: string } | null>(null)
+let toastTimer: number | undefined
+
+const operationStatus = ref<{
+  operation: string
+  phase: string
+  message: string
+  state: 'running' | 'success' | 'error'
+} | null>(null)
+let operationTimer: number | undefined
+
+function showToast(kind: 'success' | 'error', text: string) {
+  toast.value = { kind, text }
+  window.clearTimeout(toastTimer)
+  toastTimer = window.setTimeout(() => {
+    toast.value = null
+  }, 3000)
+}
+
+function updateOperationStatus(payload: {
+  operation: string
+  phase: string
+  message: string
+  state: 'running' | 'success' | 'error'
+}) {
+  operationStatus.value = payload
+  window.clearTimeout(operationTimer)
+  if (payload.state !== 'running') {
+    operationTimer = window.setTimeout(() => {
+      operationStatus.value = null
+    }, payload.state === 'success' ? 1600 : 3200)
+  }
+}
+
+async function retryHotkey() {
+  try {
+    await RetryRegisterHotkey()
+  } catch {
+    /* Surfaced via hotkey:error */
+  }
+}
+
+async function onOverlayConfirm(rect: OverlayResult) {
+  // Optimistically swap back so the window does not visually lag the
+  // Go-side hide. If upload fails, the toast surfaces the reason.
+  mode.value = 'settings'
+  overlayPayload.value = null
+  try {
+    await ConfirmRegion(rect as any)
+  } catch {
+    /* Surfaced via upload:failure */
+  }
+}
+
+async function onOverlayCopy(rect: OverlayResult) {
+  mode.value = 'settings'
+  overlayPayload.value = null
+  try {
+    await CopyRegionImage(rect as any)
+  } catch {
+    /* Surfaced via upload:failure */
+  }
+}
+
+async function onOverlaySave(rect: OverlayResult) {
+  mode.value = 'settings'
+  overlayPayload.value = null
+  try {
+    await SaveRegionImage(rect as any)
+  } catch {
+    /* Surfaced via upload:failure */
+  }
+}
+
+async function onOverlaySaveRemote(rect: OverlayResult) {
+  mode.value = 'settings'
+  overlayPayload.value = null
+  try {
+    await SaveRegionToRemote(rect as any)
+  } catch {
+    /* Surfaced via upload:failure */
+  }
+}
+
+async function onOverlayUploadFTP(rect: OverlayResult) {
+  mode.value = 'settings'
+  overlayPayload.value = null
+  try {
+    await UploadRegionToFTP(rect as any)
+  } catch {
+    /* Surfaced via upload:failure */
+  }
+}
+
+async function onOverlaySummarize(rect: OverlayResult) {
+  mode.value = 'settings'
+  overlayPayload.value = null
+  try {
+    await SummarizeRegion(rect as any)
+  } catch {
+    /* Surfaced via upload:failure */
+  }
+}
+
+async function onOverlayOCR(rect: OverlayResult) {
+  mode.value = 'settings'
+  overlayPayload.value = null
+  try {
+    await ExtractTextRegion(rect as any)
+  } catch {
+    /* Surfaced via upload:failure */
+  }
+}
+
+async function onOverlayCancel() {
+  mode.value = 'settings'
+  overlayPayload.value = null
+  try {
+    await CancelRegion()
+  } catch {
+    /* Best-effort */
+  }
+}
+
+onMounted(() => {
+  void loadThemePreference()
+  EventsOn('capture:start', () => {
+    capturing.value = true
+  })
+  EventsOn('capture:end', () => {
+    capturing.value = false
+  })
+  EventsOn('capture:cancelled', () => {
+    capturing.value = false
+  })
+  EventsOn('capture:overlay', (payload: OverlayPayload) => {
+    overlayPayload.value = payload
+    mode.value = 'overlay'
+    capturing.value = false
+  })
+  EventsOn('upload:success', (url: string) => {
+    showToast(
+      'success',
+      url === 'summary copied to clipboard'
+        ? 'Summary copied to clipboard'
+        : url === 'ocr text copied to clipboard'
+          ? 'OCR text copied to clipboard'
+        : `Copied: ${url}`
+    )
+  })
+  EventsOn('upload:failure', (reason: string) => {
+    showToast('error', reason)
+  })
+  EventsOn('hotkey:ready', (spec: string) => {
+    hotkeyStatus.value = { state: 'ok', spec }
+  })
+  EventsOn('hotkey:error', (reason: string) => {
+    hotkeyStatus.value = { state: 'error', reason }
+  })
+  EventsOn('operation:status', updateOperationStatus)
+})
+
+onUnmounted(() => {
+  EventsOff('capture:start')
+  EventsOff('capture:end')
+  EventsOff('capture:cancelled')
+  EventsOff('capture:overlay')
+  EventsOff('upload:success')
+  EventsOff('upload:failure')
+  EventsOff('hotkey:ready')
+  EventsOff('hotkey:error')
+  EventsOff('operation:status')
+})
+</script>
+
+<template>
+  <!-- Overlay mode: full-screen Snipaste-style picker. -->
+  <CaptureOverlay
+    v-if="mode === 'overlay' && overlayPayload"
+    :width="overlayPayload.cssWidth"
+    :height="overlayPayload.cssHeight"
+    @confirm="onOverlayConfirm"
+    @copy="onOverlayCopy"
+    @save="onOverlaySave"
+    @save-remote="onOverlaySaveRemote"
+    @upload-ftp="onOverlayUploadFTP"
+    @summarize="onOverlaySummarize"
+    @ocr="onOverlayOCR"
+    @cancel="onOverlayCancel"
+  />
+
+  <!-- Settings mode: standard desktop window; macOS title bar is native. -->
+  <div v-else class="app-root" :class="appThemeClass">
+    <div v-if="hotkeyStatus.state === 'error'" class="permission-banner">
+      <div>
+        <strong>Global hotkey is not active.</strong>
+        Reason: {{ hotkeyStatus.reason }}
+        <br />
+        On macOS open
+        <em>System Settings → Privacy &amp; Security → Accessibility</em>,
+        enable <strong>SnapGo</strong>, then click "Retry".
+      </div>
+      <button class="btn" @click="retryHotkey">Retry</button>
+    </div>
+
+    <main class="main">
+      <aside class="sidebar">
+        <div
+          v-for="item in sidebarItems"
+          :key="item.id"
+          class="sidebar-item"
+          :class="{ active: activeTab === item.id }"
+          @click="activeTab = item.id"
+        >
+          <span class="dot" /> {{ item.label }}
+        </div>
+      </aside>
+      <section class="content">
+        <SettingsView
+          :tab="activeTab"
+          :theme="themeMode"
+          @theme-change="themeMode = normalizeTheme($event)"
+        />
+      </section>
+    </main>
+
+    <Toast v-if="toast" :kind="toast.kind" :text="toast.text" />
+    <div
+      v-if="operationStatus"
+      class="operation-hud"
+      :class="operationStatus.state"
+    >
+      <span v-if="operationStatus.state === 'running'" class="spinner" />
+      <span v-else class="status-mark">
+        {{ operationStatus.state === 'success' ? 'OK' : '!' }}
+      </span>
+      <div>
+        <strong>{{ operationStatus.phase }}</strong>
+        <p>{{ operationStatus.message }}</p>
+      </div>
+    </div>
+  </div>
+</template>
+
+<style scoped>
+.app-root {
+  display: flex;
+  flex-direction: column;
+  height: 100%;
+  width: 100%;
+  background: #f6f7fa;
+  color: #111827;
+  font-size: 13px;
+}
+.app-root.theme-light {
+  color-scheme: light;
+}
+.app-root.theme-dark {
+  color-scheme: dark;
+}
+.app-root.theme-auto {
+  color-scheme: light dark;
+}
+
+.status-pill {
+  font-size: 11px;
+  padding: 3px 9px;
+  border-radius: 999px;
+  font-weight: 500;
+}
+.status-pill.ok {
+  color: #047857;
+  background: rgba(16, 185, 129, 0.12);
+}
+.status-pill.err {
+  color: #b91c1c;
+  background: rgba(239, 68, 68, 0.14);
+  cursor: help;
+}
+.status-pill.muted {
+  color: #6b7280;
+  background: rgba(107, 114, 128, 0.14);
+}
+
+.permission-banner {
+  display: flex;
+  gap: 12px;
+  align-items: flex-start;
+  margin: 12px 16px 0;
+  padding: 10px 14px;
+  background: #fff7ed;
+  border: 1px solid #fdba74;
+  border-radius: 8px;
+  color: #7c2d12;
+  font-size: 12px;
+  line-height: 1.55;
+}
+.permission-banner em {
+  font-style: normal;
+  background: rgba(124, 45, 18, 0.08);
+  padding: 0 4px;
+  border-radius: 3px;
+}
+.permission-banner .btn {
+  flex: 0 0 auto;
+  border: 1px solid #fdba74;
+  background: #fff;
+  color: #7c2d12;
+  border-radius: 6px;
+  padding: 6px 12px;
+  font-size: 12px;
+  cursor: pointer;
+}
+.permission-banner .btn:hover {
+  background: #fed7aa;
+}
+
+.main {
+  flex: 1;
+  display: grid;
+  grid-template-columns: 180px 1fr;
+  min-height: 0;
+}
+.sidebar {
+  border-right: 1px solid #e5e7eb;
+  padding: 14px 8px;
+  background: rgba(255, 255, 255, 0.4);
+}
+.sidebar-item {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  padding: 7px 12px;
+  border-radius: 6px;
+  font-size: 13px;
+  color: #374151;
+  cursor: pointer;
+}
+.sidebar-item:hover:not(.active) {
+  background: rgba(0, 0, 0, 0.04);
+}
+.sidebar-item.active {
+  background: rgba(59, 130, 246, 0.12);
+  color: #1d4ed8;
+  font-weight: 500;
+}
+.sidebar-item .dot {
+  width: 6px;
+  height: 6px;
+  border-radius: 50%;
+  background: currentColor;
+}
+.content {
+  overflow-y: auto;
+  min-width: 0;
+}
+
+.operation-hud {
+  position: fixed;
+  right: 18px;
+  bottom: 18px;
+  z-index: 20;
+  display: flex;
+  align-items: center;
+  gap: 12px;
+  min-width: 260px;
+  max-width: 360px;
+  padding: 12px 14px;
+  color: #f9fafb;
+  background: rgba(17, 24, 39, 0.94);
+  border-radius: 8px;
+  box-shadow: 0 12px 34px rgba(15, 23, 42, 0.28);
+}
+.operation-hud strong {
+  display: block;
+  margin-bottom: 2px;
+  font-size: 13px;
+}
+.operation-hud p {
+  margin: 0;
+  color: #d1d5db;
+  font-size: 12px;
+  line-height: 1.35;
+}
+.spinner {
+  width: 20px;
+  height: 20px;
+  border: 2px solid rgba(255, 255, 255, 0.25);
+  border-top-color: #60a5fa;
+  border-radius: 50%;
+  animation: spin 0.75s linear infinite;
+  flex: 0 0 auto;
+}
+.status-mark {
+  display: grid;
+  place-items: center;
+  width: 24px;
+  height: 24px;
+  border-radius: 50%;
+  font-size: 11px;
+  font-weight: 700;
+  flex: 0 0 auto;
+}
+.operation-hud.success .status-mark {
+  color: #052e16;
+  background: #86efac;
+}
+.operation-hud.error .status-mark {
+  color: #450a0a;
+  background: #fca5a5;
+}
+@keyframes spin {
+  to {
+    transform: rotate(360deg);
+  }
+}
+
+.app-root.theme-dark {
+  background: #1c1d22;
+  color: #e5e7eb;
+}
+.app-root.theme-dark .titlebar {
+  background: rgba(28, 29, 34, 0.7);
+  border-bottom-color: #2c2f36;
+}
+.app-root.theme-dark .titlebar-title {
+  color: #f3f4f6;
+}
+.app-root.theme-dark .sidebar {
+  background: rgba(0, 0, 0, 0.15);
+  border-right-color: #2c2f36;
+}
+.app-root.theme-dark .sidebar-item {
+  color: #d1d5db;
+}
+.app-root.theme-dark .sidebar-item:hover:not(.active) {
+  background: rgba(255, 255, 255, 0.05);
+}
+.app-root.theme-dark .sidebar-item.active {
+  background: rgba(59, 130, 246, 0.18);
+  color: #93c5fd;
+}
+.app-root.theme-dark .permission-banner {
+  background: rgba(120, 53, 15, 0.3);
+  border-color: rgba(253, 186, 116, 0.4);
+  color: #fed7aa;
+}
+
+@media (prefers-color-scheme: dark) {
+  .app-root.theme-auto {
+    background: #1c1d22;
+    color: #e5e7eb;
+  }
+  .app-root.theme-auto .titlebar {
+    background: rgba(28, 29, 34, 0.7);
+    border-bottom-color: #2c2f36;
+  }
+  .app-root.theme-auto .titlebar-title {
+    color: #f3f4f6;
+  }
+  .app-root.theme-auto .sidebar {
+    background: rgba(0, 0, 0, 0.15);
+    border-right-color: #2c2f36;
+  }
+  .app-root.theme-auto .sidebar-item {
+    color: #d1d5db;
+  }
+  .app-root.theme-auto .sidebar-item:hover:not(.active) {
+    background: rgba(255, 255, 255, 0.05);
+  }
+  .app-root.theme-auto .sidebar-item.active {
+    background: rgba(59, 130, 246, 0.18);
+    color: #93c5fd;
+  }
+  .app-root.theme-auto .permission-banner {
+    background: rgba(120, 53, 15, 0.3);
+    border-color: rgba(253, 186, 116, 0.4);
+    color: #fed7aa;
+  }
+}
+</style>
diff --git a/frontend/src/assets/fonts/OFL.txt b/frontend/src/assets/fonts/OFL.txt
new file mode 100644
index 0000000..9cac04c
--- /dev/null
+++ b/frontend/src/assets/fonts/OFL.txt
@@ -0,0 +1,93 @@
+Copyright 2016 The Nunito Project Authors (contact@sansoxygen.com),
+
+This Font Software is licensed under the SIL Open Font License, Version 1.1.
+This license is copied below, and is also available with a FAQ at:
+http://scripts.sil.org/OFL
+
+
+-----------------------------------------------------------
+SIL OPEN FONT LICENSE Version 1.1 - 26 February 2007
+-----------------------------------------------------------
+
+PREAMBLE
+The goals of the Open Font License (OFL) are to stimulate worldwide
+development of collaborative font projects, to support the font creation
+efforts of academic and linguistic communities, and to provide a free and
+open framework in which fonts may be shared and improved in partnership
+with others.
+
+The OFL allows the licensed fonts to be used, studied, modified and
+redistributed freely as long as they are not sold by themselves. The
+fonts, including any derivative works, can be bundled, embedded, 
+redistributed and/or sold with any software provided that any reserved
+names are not used by derivative works. The fonts and derivatives,
+however, cannot be released under any other type of license. The
+requirement for fonts to remain under this license does not apply
+to any document created using the fonts or their derivatives.
+
+DEFINITIONS
+"Font Software" refers to the set of files released by the Copyright
+Holder(s) under this license and clearly marked as such. This may
+include source files, build scripts and documentation.
+
+"Reserved Font Name" refers to any names specified as such after the
+copyright statement(s).
+
+"Original Version" refers to the collection of Font Software components as
+distributed by the Copyright Holder(s).
+
+"Modified Version" refers to any derivative made by adding to, deleting,
+or substituting -- in part or in whole -- any of the components of the
+Original Version, by changing formats or by porting the Font Software to a
+new environment.
+
+"Author" refers to any designer, engineer, programmer, technical
+writer or other person who contributed to the Font Software.
+
+PERMISSION & CONDITIONS
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of the Font Software, to use, study, copy, merge, embed, modify,
+redistribute, and sell modified and unmodified copies of the Font
+Software, subject to the following conditions:
+
+1) Neither the Font Software nor any of its individual components,
+in Original or Modified Versions, may be sold by itself.
+
+2) Original or Modified Versions of the Font Software may be bundled,
+redistributed and/or sold with any software, provided that each copy
+contains the above copyright notice and this license. These can be
+included either as stand-alone text files, human-readable headers or
+in the appropriate machine-readable metadata fields within text or
+binary files as long as those fields can be easily viewed by the user.
+
+3) No Modified Version of the Font Software may use the Reserved Font
+Name(s) unless explicit written permission is granted by the corresponding
+Copyright Holder. This restriction only applies to the primary font name as
+presented to the users.
+
+4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font
+Software shall not be used to promote, endorse or advertise any
+Modified Version, except to acknowledge the contribution(s) of the
+Copyright Holder(s) and the Author(s) or with their explicit written
+permission.
+
+5) The Font Software, modified or unmodified, in part or in whole,
+must be distributed entirely under this license, and must not be
+distributed under any other license. The requirement for fonts to
+remain under this license does not apply to any document created
+using the Font Software.
+
+TERMINATION
+This license becomes null and void if any of the above conditions are
+not met.
+
+DISCLAIMER
+THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT
+OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE
+COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
+DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM
+OTHER DEALINGS IN THE FONT SOFTWARE.
diff --git a/frontend/src/assets/fonts/nunito-v16-latin-regular.woff2 b/frontend/src/assets/fonts/nunito-v16-latin-regular.woff2
new file mode 100644
index 0000000..2f9cc59
Binary files /dev/null and b/frontend/src/assets/fonts/nunito-v16-latin-regular.woff2 differ
diff --git a/frontend/src/assets/icons/cancel.svg b/frontend/src/assets/icons/cancel.svg
new file mode 100644
index 0000000..187ebc8
--- /dev/null
+++ b/frontend/src/assets/icons/cancel.svg
@@ -0,0 +1 @@
+<svg viewBox="0 0 1024 1024" xmlns="http://www.w3.org/2000/svg"><path d="M512 85.333333c235.648 0 426.666667 191.018667 426.666667 426.666667s-191.018667 426.666667-426.666667 426.666667S85.333333 747.648 85.333333 512 276.352 85.333333 512 85.333333zM170.666667 512a341.333333 341.333333 0 0 0 550.613333 269.653333L242.304 302.762667A339.84 339.84 0 0 0 170.666667 512z m341.333333-341.333333c-78.848 0-151.466667 26.752-209.28 71.68l478.976 478.933333A341.333333 341.333333 0 0 0 512 170.666667z" fill="currentColor"></path></svg>
diff --git a/frontend/src/assets/icons/copy.svg b/frontend/src/assets/icons/copy.svg
new file mode 100644
index 0000000..661c635
--- /dev/null
+++ b/frontend/src/assets/icons/copy.svg
@@ -0,0 +1 @@
+<svg viewBox="0 0 1024 1024" xmlns="http://www.w3.org/2000/svg"><path d="M768 256a85.333333 85.333333 0 0 1 85.333333 85.333333v512a85.333333 85.333333 0 0 1-85.333333 85.333334h-341.333333a85.333333 85.333333 0 0 1-85.333334-85.333334V341.333333a85.333333 85.333333 0 0 1 85.333334-85.333333h341.333333z m0 85.333333h-341.333333v512h341.333333V341.333333z m-128-256a42.666667 42.666667 0 0 1 42.666667 42.666667l-0.042667 42.666667H256l-0.042667 597.333333H213.333333a42.666667 42.666667 0 0 1-42.666666-42.666667V170.666667a85.333333 85.333333 0 0 1 85.333333-85.333334h384z" fill="currentColor"></path></svg>
diff --git a/frontend/src/assets/icons/ftp.svg b/frontend/src/assets/icons/ftp.svg
new file mode 100644
index 0000000..3f41f61
--- /dev/null
+++ b/frontend/src/assets/icons/ftp.svg
@@ -0,0 +1 @@
+<svg viewBox="0 0 1024 1024" xmlns="http://www.w3.org/2000/svg"><path d="M128 128h768v256H128V128zm64 64v128h640V192H192zm64 48h64v32h-64v-32zM128 448h416v64H192v192h352v64H128V448zm560-32 160 160-45.248 45.248L720 538.496V832h-64V538.496l-82.752 82.752L528 576l160-160z" fill="currentColor"></path></svg>
diff --git a/frontend/src/assets/icons/save-local.svg b/frontend/src/assets/icons/save-local.svg
new file mode 100644
index 0000000..a3e0b2e
--- /dev/null
+++ b/frontend/src/assets/icons/save-local.svg
@@ -0,0 +1 @@
+<svg viewBox="0 0 1024 1024" xmlns="http://www.w3.org/2000/svg"><path d="M896 810.666667a85.333333 85.333333 0 0 1-85.333333 85.333333H213.333333a85.333333 85.333333 0 0 1-85.333333-85.333333V213.333333a85.333333 85.333333 0 0 1 85.333333-85.333333h250.368a85.333333 85.333333 0 0 1 73.173334 41.429333L563.2 213.333333H810.666667a85.333333 85.333333 0 0 1 85.333333 85.333334v512z m-85.333333-341.333334H213.333333v341.333334h597.333334v-341.333334z m-346.965334-256H213.333333v170.666667h597.333334V298.666667h-271.616a42.666667 42.666667 0 0 1-36.608-20.736L463.701333 213.333333z" fill="currentColor"></path></svg>
diff --git a/frontend/src/assets/icons/save-remote.svg b/frontend/src/assets/icons/save-remote.svg
new file mode 100644
index 0000000..dc9bfe6
--- /dev/null
+++ b/frontend/src/assets/icons/save-remote.svg
@@ -0,0 +1 @@
+<svg viewBox="0 0 1024 1024" xmlns="http://www.w3.org/2000/svg"><path d="M481.749333 353.792c16.682667-16.64 43.690667-16.64 60.373334 0l120.917333 120.832 3.541333 4.010667a42.666667 42.666667 0 0 1-63.872 56.32L554.666667 486.954667V896a42.666667 42.666667 0 0 1-85.333334 0v-409.173333l-48.170666 48.128a42.666667 42.666667 0 0 1-60.330667 0l-3.541333-4.010667a42.666667 42.666667 0 0 1 3.541333-56.32zM512 85.333333c122.538667 0 227.84 73.813333 273.92 179.370667A213.333333 213.333333 0 0 1 725.333333 682.666667a42.666667 42.666667 0 0 1-4.992-85.034667L725.333333 597.333333a128 128 0 0 0 36.394667-250.794666l-38.144-11.264-15.914667-36.437334a213.376 213.376 0 0 0-407.296 58.026667l-7.381333 58.368-57.173333 13.824A85.418667 85.418667 0 0 0 256 597.333333h42.666667a42.666667 42.666667 0 0 1 0 85.333334H256a170.666667 170.666667 0 0 1-40.277333-336.554667A298.709333 298.709333 0 0 1 512 85.333333z" fill="currentColor"></path></svg>
diff --git a/frontend/src/assets/icons/upload.svg b/frontend/src/assets/icons/upload.svg
new file mode 100644
index 0000000..4a36ad3
--- /dev/null
+++ b/frontend/src/assets/icons/upload.svg
@@ -0,0 +1 @@
+<svg viewBox="0 0 1024 1024" xmlns="http://www.w3.org/2000/svg"><path d="M550.528 544.128L640 539.776V678.4l178.005333-178.005333L640 322.389333v129.024l-72.618667 10.922667c-155.52 23.424-251.733333 73.557333-312.874666 164.437333 84.906667-50.602667 178.261333-76.928 296.021333-82.645333zM554.666667 629.376c-27.392 1.322667-53.034667 3.968-77.141334 7.808l-8.192 1.365333c-136.704 23.637333-224.810667 87.168-310.954666 176.128-26.154667 27.008-51.882667 59.648-51.882667 59.648-14.848 18.176-24.021333 14.037333-20.352-9.173333 0 0 4.394667-31.402667 11.690667-65.792C144.938667 577.066667 250.581333 423.68 554.666667 377.941333V209.066667a38.4 38.4 0 0 1 65.536-27.136l291.328 291.285333a38.4 38.4 0 0 1 0 54.314667l-291.328 291.285333A38.4 38.4 0 0 1 554.666667 791.637333v-162.261333z" fill="currentColor" p-id="2487"></path></svg>
diff --git a/frontend/src/assets/images/logo-universal.png b/frontend/src/assets/images/logo-universal.png
new file mode 100644
index 0000000..d63303b
Binary files /dev/null and b/frontend/src/assets/images/logo-universal.png differ
diff --git a/frontend/src/components/Toast.vue b/frontend/src/components/Toast.vue
new file mode 100644
index 0000000..a35d6f7
--- /dev/null
+++ b/frontend/src/components/Toast.vue
@@ -0,0 +1,48 @@
+<script setup lang="ts">
+/*
+ * Toast — bottom-right transient notification used for upload success /
+ * failure messages. Self-managed lifecycle is owned by the parent App.vue,
+ * which simply hides this component after a delay.
+ */
+defineProps<{
+  kind: 'success' | 'error'
+  text: string
+}>()
+</script>
+
+<template>
+  <div class="toast" :class="kind">{{ text }}</div>
+</template>
+
+<style scoped>
+.toast {
+  position: fixed;
+  right: 18px;
+  bottom: 18px;
+  max-width: 380px;
+  padding: 10px 14px;
+  border-radius: 6px;
+  font-size: 12.5px;
+  color: #fff;
+  box-shadow: 0 8px 24px rgba(15, 23, 42, 0.18);
+  white-space: pre-wrap;
+  word-break: break-all;
+  animation: toast-in 0.18s ease-out;
+}
+.toast.success {
+  background: #10b981;
+}
+.toast.error {
+  background: #ef4444;
+}
+@keyframes toast-in {
+  from {
+    opacity: 0;
+    transform: translateY(8px);
+  }
+  to {
+    opacity: 1;
+    transform: translateY(0);
+  }
+}
+</style>
diff --git a/frontend/src/main.ts b/frontend/src/main.ts
new file mode 100644
index 0000000..f9754fe
--- /dev/null
+++ b/frontend/src/main.ts
@@ -0,0 +1,5 @@
+import {createApp} from 'vue'
+import App from './App.vue'
+import './style.css';
+
+createApp(App).mount('#app')
diff --git a/frontend/src/style.css b/frontend/src/style.css
new file mode 100644
index 0000000..94bb0fb
--- /dev/null
+++ b/frontend/src/style.css
@@ -0,0 +1,42 @@
+/*
+ * Global styles for SnapGo.
+ *
+ * Design rationale:
+ * - The native window/webview is transparent so the capture overlay can show
+ *   the live desktop through its selection cut-out.
+ * - SettingsView remains opaque because App.vue paints `.app-root` across
+ *   the whole window.
+ */
+:root {
+  color-scheme: light dark;
+  font-family: -apple-system, BlinkMacSystemFont, "SF Pro Text",
+    "Segoe UI Variable", "Inter", sans-serif;
+  font-size: 14px;
+}
+
+html,
+body {
+  margin: 0;
+  padding: 0;
+  height: 100%;
+  background: transparent;
+  color: #111827;
+  -webkit-user-select: none;
+  user-select: none;
+}
+
+@media (prefers-color-scheme: dark) {
+  html,
+  body {
+    background: transparent;
+    color: #e5e7eb;
+  }
+}
+
+#app {
+  height: 100%;
+}
+
+button {
+  font-family: inherit;
+}
diff --git a/frontend/src/utils/annotationGeometry.ts b/frontend/src/utils/annotationGeometry.ts
new file mode 100644
index 0000000..b55655d
--- /dev/null
+++ b/frontend/src/utils/annotationGeometry.ts
@@ -0,0 +1,28 @@
+export interface AnnotationPoint {
+  x: number
+  y: number
+}
+
+interface PointCollection {
+  points: AnnotationPoint[]
+}
+
+// Annotations are stored relative to the selection origin. Resizing from the
+// top or left moves that origin, so offset the local points in the opposite
+// direction to keep them attached to the same screen pixels.
+export function preserveAnnotationScreenPositions(
+  annotations: PointCollection[],
+  previousOrigin: AnnotationPoint,
+  nextOrigin: AnnotationPoint
+) {
+  const dx = previousOrigin.x - nextOrigin.x
+  const dy = previousOrigin.y - nextOrigin.y
+  if (dx === 0 && dy === 0) return
+
+  for (const annotation of annotations) {
+    for (const point of annotation.points) {
+      point.x += dx
+      point.y += dy
+    }
+  }
+}
diff --git a/frontend/src/views/CaptureOverlay.vue b/frontend/src/views/CaptureOverlay.vue
new file mode 100644
index 0000000..fd26c77
--- /dev/null
+++ b/frontend/src/views/CaptureOverlay.vue
@@ -0,0 +1,1631 @@
+<script setup lang="ts">
+import { computed, nextTick, onMounted, onUnmounted, ref } from 'vue'
+// Inline SVG markup imported as raw strings via Vite's `?raw` suffix.
+// Rationale: rendering through v-html lets the icon inherit `currentColor`
+// from the toolbar button, so styling stays in CSS without bundling extra
+// SVG-as-component plugins.
+import cancelIcon from '../assets/icons/cancel.svg?raw'
+import copyIcon from '../assets/icons/copy.svg?raw'
+import saveIcon from '../assets/icons/save-local.svg?raw'
+import saveRemoteIcon from '../assets/icons/save-remote.svg?raw'
+import ftpIcon from '../assets/icons/ftp.svg?raw'
+import uploadIcon from '../assets/icons/upload.svg?raw'
+import { preserveAnnotationScreenPositions } from '../utils/annotationGeometry'
+
+interface Props {
+  width: number
+  height: number
+}
+const props = defineProps<Props>()
+
+interface Rect {
+  x: number
+  y: number
+  w: number
+  h: number
+}
+
+type Tool = 'pen' | 'line' | 'arrow' | 'rect' | 'ellipse' | 'text' | 'mosaic-brush' | 'mosaic-rect'
+type MosaicMode = 'brush' | 'rect'
+interface Point {
+  x: number
+  y: number
+}
+interface Annotation {
+  tool: Tool
+  color: string
+  points: Point[]
+  text?: string
+  strokeWidth?: number
+  fontSize?: number
+}
+
+const emit = defineEmits<{
+  (
+    e: 'confirm',
+    payload: { rect: Rect; annotations: Annotation[] }
+  ): void
+  (
+    e: 'copy',
+    payload: { rect: Rect; annotations: Annotation[] }
+  ): void
+  (
+    e: 'save',
+    payload: { rect: Rect; annotations: Annotation[] }
+  ): void
+  (
+    e: 'save-remote',
+    payload: { rect: Rect; annotations: Annotation[] }
+  ): void
+  (
+    e: 'upload-ftp',
+    payload: { rect: Rect; annotations: Annotation[] }
+  ): void
+  (
+    e: 'summarize',
+    payload: { rect: Rect; annotations: Annotation[] }
+  ): void
+  (
+    e: 'ocr',
+    payload: { rect: Rect; annotations: Annotation[] }
+  ): void
+  (e: 'cancel'): void
+}>()
+
+const rect = ref<Rect | null>(null)
+const annotations = ref<Annotation[]>([])
+const draftAnnotation = ref<Annotation | null>(null)
+const activeTool = ref<Tool>('pen')
+const activeColor = ref('#ef4444')
+const activeStrokeWidth = ref(3)
+const activeFontSize = ref(20)
+const mosaicMode = ref<MosaicMode>('brush')
+const mosaicBrushWidth = ref(24)
+const textDraft = ref<{
+  point: Point
+  value: string
+  color: string
+  fontSize: number
+  index: number | null
+} | null>(null)
+const textInputRef = ref<HTMLInputElement | null>(null)
+const selectedTextIndex = ref<number | null>(null)
+
+type ResizeHandle = 'n' | 's' | 'e' | 'w' | 'nw' | 'ne' | 'sw' | 'se'
+type DragMode =
+  | 'idle'
+  | 'creating'
+  | 'moving'
+  | 'resizing'
+  | 'annotating'
+  | 'moving-text'
+const dragMode = ref<DragMode>('idle')
+const resizeHandle = ref<ResizeHandle | null>(null)
+const dragAnchor = ref({ x: 0, y: 0 })
+const startRect = ref<Rect | null>(null)
+const textDragStartPoint = ref<Point | null>(null)
+const textDragOriginalPoint = ref<Point | null>(null)
+
+const DEFAULT_TEXT_FONT_SIZE = 20
+const STROKE_WIDTHS = [2, 4, 6]
+const MOSAIC_WIDTHS = [16, 24, 36, 52]
+const FONT_SIZES = [16, 20, 28, 36]
+
+const colors = [
+  '#ef4444',
+  '#facc15',
+  '#22c55e',
+  '#3b82f6',
+  '#111827',
+  '#9ca3af',
+  '#ffffff',
+]
+
+const maskPath = computed(() => {
+  const outer = `M0 0 H${props.width} V${props.height} H0 Z`
+  if (!rect.value) return outer
+  const r = rect.value
+  const inner = `M${r.x} ${r.y} H${r.x + r.w} V${r.y + r.h} H${r.x} Z`
+  return outer + ' ' + inner
+})
+
+const allAnnotations = computed(() => {
+  return draftAnnotation.value
+    ? [...annotations.value, draftAnnotation.value]
+    : annotations.value
+})
+
+const selectionAnnotations = computed(() => {
+  if (!rect.value) return []
+  return allAnnotations.value.map((annotation) => ({
+    ...annotation,
+    points: annotation.points.map((point) => ({
+      x: rect.value!.x + point.x,
+      y: rect.value!.y + point.y,
+    })),
+  }))
+})
+
+const sizeLabel = computed(() => {
+  if (!rect.value) return ''
+  return `${Math.round(rect.value.w)} × ${Math.round(rect.value.h)}`
+})
+
+const MARK_TOOLBAR_W = 280
+const ACTION_TOOLBAR_W = 288
+const TOOLBAR_GROUP_GAP = 8
+
+const toolOrder: Tool[] = ['pen', 'line', 'arrow', 'rect', 'ellipse', 'text', 'mosaic-brush', 'mosaic-rect']
+
+const toolSettingsPos = computed(() => {
+  if (!leftToolbarPos.value || !rect.value || !activeTool.value) return null
+  const isMosaic = activeTool.value.startsWith('mosaic-')
+  const menuW = isMosaic ? (mosaicMode.value === 'brush' ? 328 : 112) : activeTool.value === 'text' ? 462 : 398
+  const menuH = 58
+  const buttonIndex = isMosaic ? 6 : toolOrder.indexOf(activeTool.value)
+  const buttonCenter = 4 + buttonIndex * 34 + 14
+  let x = leftToolbarPos.value.x
+  let y = leftToolbarPos.value.y + 44
+  if (y + menuH > props.height) {
+    y = leftToolbarPos.value.y - menuH - 8
+  }
+  x = clamp(x, 8, Math.max(8, props.width - menuW - 8))
+  return {
+    x,
+    y,
+    w: menuW,
+    arrowX: clamp(leftToolbarPos.value.x + buttonCenter - x, 18, menuW - 18),
+  }
+})
+
+const rightToolbarPos = computed(() => {
+  if (!rect.value) return null
+  return placeToolbar(rect.value, ACTION_TOOLBAR_W, 40, 'right')
+})
+
+const leftToolbarPos = computed(() => {
+  if (!rect.value || !rightToolbarPos.value) return null
+  // 标记组与操作组合并到右侧，紧贴在操作组左侧，中间保留间隔
+  const x = clamp(
+    rightToolbarPos.value.x - TOOLBAR_GROUP_GAP - MARK_TOOLBAR_W,
+    0,
+    props.width - MARK_TOOLBAR_W
+  )
+  return { x, y: rightToolbarPos.value.y }
+})
+
+const handles = computed(() => {
+  if (!rect.value) return []
+  const r = rect.value
+  const cx = r.x + r.w / 2
+  const cy = r.y + r.h / 2
+  return [
+    { name: 'nw', x: r.x, y: r.y },
+    { name: 'n', x: cx, y: r.y },
+    { name: 'ne', x: r.x + r.w, y: r.y },
+    { name: 'e', x: r.x + r.w, y: cy },
+    { name: 'se', x: r.x + r.w, y: r.y + r.h },
+    { name: 's', x: cx, y: r.y + r.h },
+    { name: 'sw', x: r.x, y: r.y + r.h },
+    { name: 'w', x: r.x, y: cy },
+  ] as Array<{ name: ResizeHandle; x: number; y: number }>
+})
+
+function placeToolbar(
+  r: Rect,
+  toolbarW: number,
+  toolbarH: number,
+  side: 'left' | 'right'
+) {
+  const gap = 8
+  let x =
+    side === 'right'
+      ? r.x + r.w - toolbarW
+      : r.x
+  let y = r.y + r.h + gap
+  if (y + toolbarH > props.height) {
+    y = r.y + r.h - toolbarH - gap
+  }
+  x = clamp(x, 0, props.width - toolbarW)
+  return { x, y }
+}
+
+function clamp(value: number, min: number, max: number) {
+  return Math.max(min, Math.min(value, max))
+}
+
+function normalizeRect(a: Point, b: Point): Rect {
+  return {
+    x: clamp(Math.min(a.x, b.x), 0, props.width),
+    y: clamp(Math.min(a.y, b.y), 0, props.height),
+    w: Math.abs(b.x - a.x),
+    h: Math.abs(b.y - a.y),
+  }
+}
+
+function pointFromEvent(e: MouseEvent): Point {
+  return {
+    x: clamp(e.clientX, 0, props.width),
+    y: clamp(e.clientY, 0, props.height),
+  }
+}
+
+function localPoint(p: Point) {
+  if (!rect.value) return p
+  return {
+    x: clamp(p.x - rect.value.x, 0, rect.value.w),
+    y: clamp(p.y - rect.value.y, 0, rect.value.h),
+  }
+}
+
+function insideRect(p: Point, r: Rect | null) {
+  if (!r) return false
+  return p.x >= r.x && p.x <= r.x + r.w && p.y >= r.y && p.y <= r.y + r.h
+}
+
+let measureCanvas: HTMLCanvasElement | null = null
+
+function textFont(fontSize = DEFAULT_TEXT_FONT_SIZE) {
+  return `600 ${fontSize}px -apple-system, BlinkMacSystemFont, "SF Pro Text", sans-serif`
+}
+
+function textSize(annotation: Pick<Annotation, 'text' | 'fontSize'>) {
+  const fontSize = annotation.fontSize || DEFAULT_TEXT_FONT_SIZE
+  const lines = (annotation.text || ' ').split('\n')
+  if (typeof document === 'undefined') {
+    return {
+      w: Math.max(1, ...lines.map((line) => line.length * fontSize)),
+      h: Math.max(fontSize * 1.2, lines.length * fontSize * 1.2),
+    }
+  }
+  measureCanvas ||= document.createElement('canvas')
+  const ctx = measureCanvas.getContext('2d')
+  if (!ctx) {
+    return {
+      w: Math.max(1, ...lines.map((line) => line.length * fontSize)),
+      h: Math.max(fontSize * 1.2, lines.length * fontSize * 1.2),
+    }
+  }
+  ctx.font = textFont(fontSize)
+  return {
+    w: Math.ceil(Math.max(1, ...lines.map((line) => ctx.measureText(line || ' ').width))),
+    h: Math.ceil(Math.max(fontSize * 1.2, lines.length * fontSize * 1.2)),
+  }
+}
+
+function textEditorSize(draft: { value: string; fontSize: number }) {
+  const size = textSize({
+    text: draft.value || ' ',
+    fontSize: draft.fontSize,
+  })
+  return {
+    width: Math.max(180, Math.min(420, size.w + 28)),
+    height: Math.max(30, Math.ceil(draft.fontSize * 1.6)),
+    lineHeight: Math.ceil(draft.fontSize * 1.25),
+  }
+}
+
+function textRenderBox(annotation: Annotation) {
+  const point = annotation.points[0] || { x: 0, y: 0 }
+  const size = textSize(annotation)
+  return {
+    x: point.x - 4,
+    y: point.y - 3,
+    w: size.w + 8,
+    h: size.h + 6,
+  }
+}
+
+function arrowHeadPoints(annotation: Annotation) {
+  if (annotation.points.length < 2) return ''
+  const start = annotation.points[0]
+  const end = annotation.points[annotation.points.length - 1]
+  const dx = end.x - start.x
+  const dy = end.y - start.y
+  const length = Math.hypot(dx, dy)
+  if (length < 1) return ''
+  const headLength = Math.min(length * 0.45, Math.max(10, (annotation.strokeWidth || 3) * 4))
+  const angle = Math.atan2(dy, dx)
+  const spread = Math.PI / 6
+  const left = {
+    x: end.x - headLength * Math.cos(angle - spread),
+    y: end.y - headLength * Math.sin(angle - spread),
+  }
+  const right = {
+    x: end.x - headLength * Math.cos(angle + spread),
+    y: end.y - headLength * Math.sin(angle + spread),
+  }
+  return `${left.x},${left.y} ${end.x},${end.y} ${right.x},${right.y}`
+}
+
+function textAnnotationIndexAtPoint(p: Point) {
+  if (!rect.value) return null
+  for (let i = annotations.value.length - 1; i >= 0; i--) {
+    const annotation = annotations.value[i]
+    if (annotation.tool !== 'text' || annotation.points.length === 0) continue
+    const point = annotation.points[0]
+    const size = textSize(annotation)
+    const x = rect.value.x + point.x
+    const y = rect.value.y + point.y
+    if (
+      p.x >= x - 6 &&
+      p.x <= x + size.w + 6 &&
+      p.y >= y - 6 &&
+      p.y <= y + size.h + 6
+    ) {
+      return i
+    }
+  }
+  return null
+}
+
+function clampTextLocalPoint(point: Point, annotation: Pick<Annotation, 'text' | 'fontSize'>) {
+  if (!rect.value) return point
+  const size = textSize(annotation)
+  return {
+    x: clamp(point.x, 0, Math.max(0, rect.value.w - size.w)),
+    y: clamp(point.y, 0, Math.max(0, rect.value.h - size.h)),
+  }
+}
+
+function hitHandle(p: Point): ResizeHandle | null {
+  if (!rect.value) return null
+  const tolerance = 9
+  for (const handle of handles.value) {
+    if (
+      Math.abs(p.x - handle.x) <= tolerance &&
+      Math.abs(p.y - handle.y) <= tolerance
+    ) {
+      return handle.name
+    }
+  }
+  const r = rect.value
+  const nearX = p.x >= r.x - tolerance && p.x <= r.x + r.w + tolerance
+  const nearY = p.y >= r.y - tolerance && p.y <= r.y + r.h + tolerance
+  if (nearX && Math.abs(p.y - r.y) <= tolerance) return 'n'
+  if (nearX && Math.abs(p.y - (r.y + r.h)) <= tolerance) return 's'
+  if (nearY && Math.abs(p.x - r.x) <= tolerance) return 'w'
+  if (nearY && Math.abs(p.x - (r.x + r.w)) <= tolerance) return 'e'
+  return null
+}
+
+function onMouseDown(e: MouseEvent) {
+  if (e.button !== 0) return
+  commitTextDraft()
+  textDragStartPoint.value = null
+  textDragOriginalPoint.value = null
+  const p = pointFromEvent(e)
+  const handle = hitHandle(p)
+  if (handle && rect.value) {
+    dragMode.value = 'resizing'
+    resizeHandle.value = handle
+    dragAnchor.value = p
+    startRect.value = { ...rect.value }
+    return
+  }
+  if (rect.value && insideRect(p, rect.value)) {
+    dragMode.value = 'moving'
+    dragAnchor.value = { x: p.x - rect.value.x, y: p.y - rect.value.y }
+    return
+  }
+  dragMode.value = 'creating'
+  dragAnchor.value = p
+  rect.value = { x: p.x, y: p.y, w: 0, h: 0 }
+  annotations.value = []
+  selectedTextIndex.value = null
+  draftAnnotation.value = null
+}
+
+function onSelectionMouseDown(e: MouseEvent) {
+  if (e.button !== 0 || !rect.value) return
+  e.stopPropagation()
+  commitTextDraft()
+  const p = pointFromEvent(e)
+  const hitTextIndex = textAnnotationIndexAtPoint(p)
+  if (hitTextIndex !== null) {
+    selectedTextIndex.value = hitTextIndex
+    const annotation = annotations.value[hitTextIndex]
+    activeTool.value = 'text'
+    activeColor.value = annotation.color
+    activeFontSize.value = annotation.fontSize || DEFAULT_TEXT_FONT_SIZE
+    if (e.detail >= 2) {
+      beginTextAnnotation(annotation.points[0], hitTextIndex)
+      return
+    }
+    dragMode.value = 'moving-text'
+    textDragStartPoint.value = localPoint(p)
+    textDragOriginalPoint.value = { ...annotation.points[0] }
+    return
+  }
+  selectedTextIndex.value = null
+  if (activeTool.value === 'text') {
+    beginTextAnnotation(localPoint(p))
+    return
+  }
+  if (e.detail >= 2) {
+    removeSinglePointAnnotation()
+    onCopy()
+    return
+  }
+  const handle = hitHandle(p)
+  if (handle) {
+    dragMode.value = 'resizing'
+    resizeHandle.value = handle
+    dragAnchor.value = p
+    startRect.value = { ...rect.value }
+    return
+  }
+  dragMode.value = 'annotating'
+  const local = localPoint(p)
+  draftAnnotation.value = {
+    tool: activeTool.value,
+    color: activeColor.value,
+    strokeWidth: activeTool.value === 'mosaic-brush' ? mosaicBrushWidth.value : activeStrokeWidth.value,
+    points: [local],
+  }
+}
+
+function onMouseMove(e: MouseEvent) {
+  if (dragMode.value === 'idle') return
+  const p = pointFromEvent(e)
+  if (dragMode.value === 'creating') {
+    rect.value = normalizeRect(dragAnchor.value, p)
+  } else if (dragMode.value === 'moving' && rect.value) {
+    rect.value = {
+      ...rect.value,
+      x: clamp(p.x - dragAnchor.value.x, 0, props.width - rect.value.w),
+      y: clamp(p.y - dragAnchor.value.y, 0, props.height - rect.value.h),
+    }
+  } else if (dragMode.value === 'resizing') {
+    resizeSelection(p)
+  } else if (
+    dragMode.value === 'moving-text' &&
+    selectedTextIndex.value !== null &&
+    textDragStartPoint.value &&
+    textDragOriginalPoint.value
+  ) {
+    const annotation = annotations.value[selectedTextIndex.value]
+    if (annotation?.tool === 'text') {
+      const local = localPoint(p)
+      const next = {
+        x: textDragOriginalPoint.value.x + local.x - textDragStartPoint.value.x,
+        y: textDragOriginalPoint.value.y + local.y - textDragStartPoint.value.y,
+      }
+      annotation.points[0] = clampTextLocalPoint(next, annotation)
+    }
+  } else if (dragMode.value === 'annotating' && draftAnnotation.value) {
+    if (activeTool.value === 'pen' || activeTool.value === 'mosaic-brush') {
+      draftAnnotation.value.points.push(localPoint(p))
+    } else {
+      draftAnnotation.value.points = [
+        draftAnnotation.value.points[0],
+        localPoint(p),
+      ]
+    }
+  }
+}
+
+function onMouseUp() {
+  if (dragMode.value === 'creating' && rect.value) {
+    if (rect.value.w < 4 || rect.value.h < 4) {
+      rect.value = null
+    }
+  }
+  if (dragMode.value === 'annotating' && draftAnnotation.value) {
+    if (draftAnnotation.value.points.length > 0) {
+      annotations.value.push(draftAnnotation.value)
+    }
+    draftAnnotation.value = null
+  }
+  dragMode.value = 'idle'
+  resizeHandle.value = null
+  startRect.value = null
+  textDragStartPoint.value = null
+  textDragOriginalPoint.value = null
+}
+
+function resizeSelection(p: Point) {
+  if (!startRect.value || !resizeHandle.value) return
+  const r = startRect.value
+  let left = r.x
+  let top = r.y
+  let right = r.x + r.w
+  let bottom = r.y + r.h
+  if (resizeHandle.value.includes('w')) left = p.x
+  if (resizeHandle.value.includes('e')) right = p.x
+  if (resizeHandle.value.includes('n')) top = p.y
+  if (resizeHandle.value.includes('s')) bottom = p.y
+
+  left = clamp(left, 0, props.width)
+  right = clamp(right, 0, props.width)
+  top = clamp(top, 0, props.height)
+  bottom = clamp(bottom, 0, props.height)
+  const nextRect = {
+    x: Math.min(left, right),
+    y: Math.min(top, bottom),
+    w: Math.abs(right - left),
+    h: Math.abs(bottom - top),
+  }
+  if (rect.value) {
+    preserveAnnotationScreenPositions(annotations.value, rect.value, nextRect)
+  }
+  rect.value = nextRect
+}
+
+function selectTool(tool: Tool) {
+  activeTool.value = tool
+}
+
+function selectMosaic() {
+  activeTool.value = mosaicMode.value === 'brush' ? 'mosaic-brush' : 'mosaic-rect'
+}
+
+function chooseMosaicMode(mode: MosaicMode) {
+  mosaicMode.value = mode
+  selectMosaic()
+}
+
+function chooseMosaicWidth(width: number) {
+  mosaicBrushWidth.value = width
+}
+
+function chooseColor(color: string) {
+  activeColor.value = color
+  if (textDraft.value) {
+    textDraft.value.color = color
+  } else if (
+    activeTool.value === 'text' &&
+    selectedTextIndex.value !== null &&
+    annotations.value[selectedTextIndex.value]?.tool === 'text'
+  ) {
+    annotations.value[selectedTextIndex.value].color = color
+  }
+}
+
+function chooseStrokeWidth(width: number) {
+  activeStrokeWidth.value = width
+}
+
+function chooseFontSize(size: number) {
+  activeFontSize.value = size
+  if (textDraft.value) {
+    textDraft.value.fontSize = size
+    textDraft.value.point = clampTextLocalPoint(textDraft.value.point, {
+      text: textDraft.value.value,
+      fontSize: size,
+    })
+  } else if (
+    activeTool.value === 'text' &&
+    selectedTextIndex.value !== null &&
+    annotations.value[selectedTextIndex.value]?.tool === 'text'
+  ) {
+    const annotation = annotations.value[selectedTextIndex.value]
+    annotation.fontSize = size
+    annotation.points[0] = clampTextLocalPoint(annotation.points[0], annotation)
+  }
+}
+
+function onConfirm() {
+  emitAction('confirm')
+}
+
+function onCopy() {
+  emitAction('copy')
+}
+
+function onSave() {
+  emitAction('save')
+}
+
+function onSaveRemote() {
+  emitAction('save-remote')
+}
+
+function onUploadFTP() {
+  emitAction('upload-ftp')
+}
+
+function onSummarize() {
+  emitAction('summarize')
+}
+
+function onOCR() {
+  emitAction('ocr')
+}
+
+function emitAction(
+  action:
+    | 'confirm'
+    | 'copy'
+    | 'save'
+    | 'save-remote'
+    | 'upload-ftp'
+    | 'summarize'
+    | 'ocr'
+) {
+  if (!rect.value) return
+  commitTextDraft()
+  const payload = {
+    rect: { ...rect.value },
+    annotations: annotations.value,
+  }
+  if (action === 'confirm') emit('confirm', payload)
+  if (action === 'copy') emit('copy', payload)
+  if (action === 'save') emit('save', payload)
+  if (action === 'save-remote') emit('save-remote', payload)
+  if (action === 'upload-ftp') emit('upload-ftp', payload)
+  if (action === 'summarize') emit('summarize', payload)
+  if (action === 'ocr') emit('ocr', payload)
+}
+
+function onCancel() {
+  emit('cancel')
+}
+
+function onKeydown(e: KeyboardEvent) {
+  if (textDraft.value) {
+    if (e.key === 'Escape') {
+      e.preventDefault()
+      cancelTextDraft()
+    }
+    return
+  }
+  if (e.key === 'Escape') {
+    e.preventDefault()
+    onCancel()
+  } else if (e.key === 'Enter' && rect.value) {
+    e.preventDefault()
+    onConfirm()
+  }
+}
+
+function undoAnnotation() {
+  if (!textDraft.value && annotations.value.length === 0) return
+  cancelTextDraft()
+  if (annotations.value.length === 0) return
+  annotations.value.pop()
+  if (
+    selectedTextIndex.value !== null &&
+    selectedTextIndex.value >= annotations.value.length
+  ) {
+    selectedTextIndex.value = null
+  }
+}
+
+function removeSinglePointAnnotation() {
+  const last = annotations.value[annotations.value.length - 1]
+  if (last && last.tool === activeTool.value && last.points.length <= 1) {
+    annotations.value.pop()
+  }
+}
+
+function beginTextAnnotation(point: Point, index: number | null = null) {
+  commitTextDraft()
+  dragMode.value = 'idle'
+  draftAnnotation.value = null
+  const existing = index !== null ? annotations.value[index] : null
+  const color = existing?.color || activeColor.value
+  const fontSize = existing?.fontSize || activeFontSize.value
+  if (existing) {
+    activeColor.value = color
+    activeFontSize.value = fontSize
+  }
+  textDraft.value = {
+    point: clampTextLocalPoint(point, existing || { text: '', fontSize }),
+    value: existing?.text || '',
+    color,
+    fontSize,
+    index,
+  }
+  void nextTick(() => {
+    textInputRef.value?.focus()
+    textInputRef.value?.select()
+  })
+}
+
+function commitTextDraft() {
+  if (!textDraft.value) return
+  const text = textDraft.value.value.trim()
+  const draft = textDraft.value
+  if (draft.index !== null) {
+    const target = annotations.value[draft.index]
+    if (target?.tool === 'text') {
+      if (text !== '') {
+        target.points = [clampTextLocalPoint(draft.point, { text, fontSize: draft.fontSize })]
+        target.text = text
+        target.color = draft.color
+        target.fontSize = draft.fontSize
+        selectedTextIndex.value = draft.index
+      } else {
+        annotations.value.splice(draft.index, 1)
+        selectedTextIndex.value = null
+      }
+    }
+  } else if (text !== '') {
+    const point = clampTextLocalPoint(draft.point, { text, fontSize: draft.fontSize })
+    annotations.value.push({
+      tool: 'text',
+      color: draft.color,
+      points: [point],
+      text,
+      fontSize: draft.fontSize,
+    })
+    selectedTextIndex.value = annotations.value.length - 1
+  }
+  textDraft.value = null
+}
+
+function cancelTextDraft() {
+  textDraft.value = null
+}
+
+function onTextDraftKeydown(e: KeyboardEvent) {
+  if (e.key === 'Enter') {
+    e.preventDefault()
+    commitTextDraft()
+  } else if (e.key === 'Escape') {
+    e.preventDefault()
+    cancelTextDraft()
+  }
+}
+
+onMounted(() => {
+  window.addEventListener('keydown', onKeydown)
+})
+onUnmounted(() => {
+  window.removeEventListener('keydown', onKeydown)
+})
+</script>
+
+<template>
+  <div
+    class="overlay-root"
+    :style="{ width: width + 'px', height: height + 'px' }"
+    @mousedown="onMouseDown"
+    @mousemove="onMouseMove"
+    @mouseup="onMouseUp"
+    @contextmenu.prevent="onCancel"
+  >
+    <svg
+      class="mask"
+      :width="width"
+      :height="height"
+      :viewBox="`0 0 ${width} ${height}`"
+      preserveAspectRatio="none"
+    >
+      <defs>
+        <pattern id="mosaic-preview" width="10" height="10" patternUnits="userSpaceOnUse">
+          <rect width="10" height="10" fill="rgba(71,85,105,.82)" />
+          <rect width="5" height="5" fill="rgba(203,213,225,.82)" />
+          <rect x="5" y="5" width="5" height="5" fill="rgba(148,163,184,.82)" />
+        </pattern>
+      </defs>
+      <path :d="maskPath" fill="rgba(0,0,0,0.45)" fill-rule="evenodd" />
+      <rect
+        v-if="rect"
+        :x="rect.x"
+        :y="rect.y"
+        :width="rect.w"
+        :height="rect.h"
+        fill="transparent"
+        stroke="#3b82f6"
+        stroke-width="1.5"
+        vector-effect="non-scaling-stroke"
+      />
+      <g v-for="(annotation, index) in selectionAnnotations" :key="index">
+        <polyline
+          v-if="annotation.tool === 'pen'"
+          :points="annotation.points.map((p) => `${p.x},${p.y}`).join(' ')"
+          :stroke="annotation.color"
+          :stroke-width="annotation.strokeWidth || 3"
+          stroke-linecap="round"
+          stroke-linejoin="round"
+          fill="none"
+        />
+        <line
+          v-else-if="annotation.tool === 'line' && annotation.points.length >= 2"
+          :x1="annotation.points[0].x"
+          :y1="annotation.points[0].y"
+          :x2="annotation.points[annotation.points.length - 1].x"
+          :y2="annotation.points[annotation.points.length - 1].y"
+          :stroke="annotation.color"
+          :stroke-width="annotation.strokeWidth || 3"
+          stroke-linecap="round"
+        />
+        <g v-else-if="annotation.tool === 'arrow' && annotation.points.length >= 2">
+          <line
+            :x1="annotation.points[0].x"
+            :y1="annotation.points[0].y"
+            :x2="annotation.points[annotation.points.length - 1].x"
+            :y2="annotation.points[annotation.points.length - 1].y"
+            :stroke="annotation.color"
+            :stroke-width="annotation.strokeWidth || 3"
+            stroke-linecap="round"
+          />
+          <polyline
+            :points="arrowHeadPoints(annotation)"
+            :stroke="annotation.color"
+            :stroke-width="annotation.strokeWidth || 3"
+            stroke-linecap="round"
+            stroke-linejoin="round"
+            fill="none"
+          />
+        </g>
+        <rect
+          v-else-if="annotation.tool === 'rect' && annotation.points.length >= 2"
+          :x="Math.min(annotation.points[0].x, annotation.points[1].x)"
+          :y="Math.min(annotation.points[0].y, annotation.points[1].y)"
+          :width="Math.abs(annotation.points[1].x - annotation.points[0].x)"
+          :height="Math.abs(annotation.points[1].y - annotation.points[0].y)"
+          :stroke="annotation.color"
+          :stroke-width="annotation.strokeWidth || 3"
+          fill="none"
+        />
+        <ellipse
+          v-else-if="annotation.tool === 'ellipse' && annotation.points.length >= 2"
+          :cx="(annotation.points[0].x + annotation.points[1].x) / 2"
+          :cy="(annotation.points[0].y + annotation.points[1].y) / 2"
+          :rx="Math.abs(annotation.points[1].x - annotation.points[0].x) / 2"
+          :ry="Math.abs(annotation.points[1].y - annotation.points[0].y) / 2"
+          :stroke="annotation.color"
+          :stroke-width="annotation.strokeWidth || 3"
+          fill="none"
+        />
+        <template v-else-if="annotation.tool === 'text' && annotation.points.length >= 1">
+          <rect
+            v-if="selectedTextIndex === index && index < annotations.length"
+            class="text-selection-box"
+            :x="textRenderBox(annotation).x"
+            :y="textRenderBox(annotation).y"
+            :width="textRenderBox(annotation).w"
+            :height="textRenderBox(annotation).h"
+          />
+          <text
+            class="annotation-text"
+            :x="annotation.points[0].x"
+            :y="annotation.points[0].y"
+            :fill="annotation.color"
+            :font-size="annotation.fontSize || DEFAULT_TEXT_FONT_SIZE"
+            font-weight="600"
+            dominant-baseline="hanging"
+          >
+            {{ annotation.text }}
+          </text>
+        </template>
+        <polyline
+          v-else-if="annotation.tool === 'mosaic-brush'"
+          :points="annotation.points.map((p) => `${p.x},${p.y}`).join(' ')"
+          stroke="url(#mosaic-preview)"
+          :stroke-width="annotation.strokeWidth || 24"
+          stroke-linecap="round"
+          stroke-linejoin="round"
+          fill="none"
+        />
+        <rect
+          v-else-if="annotation.tool === 'mosaic-rect' && annotation.points.length >= 2"
+          :x="Math.min(annotation.points[0].x, annotation.points[1].x)"
+          :y="Math.min(annotation.points[0].y, annotation.points[1].y)"
+          :width="Math.abs(annotation.points[1].x - annotation.points[0].x)"
+          :height="Math.abs(annotation.points[1].y - annotation.points[0].y)"
+          fill="url(#mosaic-preview)"
+          stroke="rgba(255,255,255,.8)"
+          stroke-width="1"
+        />
+      </g>
+    </svg>
+
+    <div
+      v-if="rect"
+      class="selection-hit-area"
+      :style="{
+        left: rect.x + 'px',
+        top: rect.y + 'px',
+        width: rect.w + 'px',
+        height: rect.h + 'px',
+      }"
+      @mousedown="onSelectionMouseDown"
+    />
+
+    <input
+      v-if="rect && textDraft"
+      ref="textInputRef"
+      v-model="textDraft.value"
+      class="text-editor"
+      :style="{
+        left: rect.x + textDraft.point.x + 'px',
+        top: rect.y + textDraft.point.y + 'px',
+        color: textDraft.color,
+        fontSize: textDraft.fontSize + 'px',
+        width: textEditorSize(textDraft).width + 'px',
+        height: textEditorSize(textDraft).height + 'px',
+        lineHeight: textEditorSize(textDraft).lineHeight + 'px',
+      }"
+      spellcheck="false"
+      @mousedown.stop
+      @keydown.stop="onTextDraftKeydown"
+      @blur="commitTextDraft"
+    />
+
+    <div
+      v-for="handle in handles"
+      :key="handle.name"
+      class="resize-handle"
+      :class="`handle-${handle.name}`"
+      :style="{ left: handle.x + 'px', top: handle.y + 'px' }"
+      @mousedown.stop="
+        (event) => {
+          dragMode = 'resizing'
+          resizeHandle = handle.name
+          dragAnchor = pointFromEvent(event)
+          startRect = rect ? { ...rect } : null
+        }
+      "
+    />
+
+    <div
+      v-if="rect && rect.w > 0 && rect.h > 0"
+      class="size-pill"
+      :style="{
+        left: rect.x + 'px',
+        top: Math.max(0, rect.y - 26) + 'px',
+      }"
+    >
+      {{ sizeLabel }}
+    </div>
+
+    <div
+      v-if="leftToolbarPos && rect && rect.w >= 4 && rect.h >= 4"
+      class="toolbar mark-toolbar"
+      :style="{ left: leftToolbarPos.x + 'px', top: leftToolbarPos.y + 'px' }"
+      @mousedown.stop
+    >
+      <button
+        class="icon-btn"
+        :class="{ active: activeTool === 'pen' }"
+        title="画笔标记"
+        aria-label="画笔标记"
+        @click="selectTool('pen')"
+      >
+        <svg viewBox="0 0 24 24" aria-hidden="true">
+          <path d="m14.5 5.5 4-4 4 4-4 4" />
+          <path d="m17.5 8.5-7.8 7.8" />
+          <path d="M11 14.8c.8 2.8-.7 5.5-3.7 6.3-1.8.5-3.7.1-5.3-.9 2.1-.4 2.8-1.5 3.1-3.3.4-2.5 3.3-3.8 5.9-2.1Z" />
+        </svg>
+      </button>
+      <button
+        class="icon-btn"
+        :class="{ active: activeTool === 'line' }"
+        title="直线标记"
+        aria-label="直线标记"
+        @click="selectTool('line')"
+      >
+        <svg viewBox="0 0 24 24" aria-hidden="true">
+          <path d="M5 19 19 5" />
+        </svg>
+      </button>
+      <button
+        class="icon-btn"
+        :class="{ active: activeTool === 'arrow' }"
+        title="箭头标记"
+        aria-label="箭头标记"
+        @click="selectTool('arrow')"
+      >
+        <svg viewBox="0 0 24 24" aria-hidden="true">
+          <path d="M5 19 19 5" />
+          <path d="M11 5h8v8" />
+        </svg>
+      </button>
+      <button
+        class="icon-btn"
+        :class="{ active: activeTool === 'rect' }"
+        title="矩形标记"
+        @click="selectTool('rect')"
+      >
+        <svg viewBox="0 0 24 24" aria-hidden="true">
+          <rect x="5" y="6" width="14" height="12" rx="1.5" />
+        </svg>
+      </button>
+      <button
+        class="icon-btn"
+        :class="{ active: activeTool === 'ellipse' }"
+        title="圆形标记"
+        @click="selectTool('ellipse')"
+      >
+        <svg viewBox="0 0 24 24" aria-hidden="true">
+          <circle cx="12" cy="12" r="7" />
+        </svg>
+      </button>
+      <button
+        class="icon-btn"
+        :class="{ active: activeTool === 'text' }"
+        title="文字标记"
+        @click="selectTool('text')"
+      >
+        <svg viewBox="0 0 24 24" aria-hidden="true">
+          <path d="M5 5h14" />
+          <path d="M12 5v14" />
+          <path d="M9 19h6" />
+        </svg>
+      </button>
+      <button
+        class="icon-btn"
+        :class="{ active: activeTool.startsWith('mosaic-') }"
+        title="马赛克标记"
+        aria-label="马赛克标记"
+        :aria-expanded="activeTool.startsWith('mosaic-')"
+        @click="selectMosaic"
+      >
+        <svg viewBox="0 0 24 24" aria-hidden="true">
+          <rect x="4" y="4" width="6" height="6" />
+          <rect x="14" y="4" width="6" height="6" />
+          <rect x="4" y="14" width="6" height="6" />
+          <rect x="14" y="14" width="6" height="6" />
+        </svg>
+      </button>
+      <button
+        class="icon-btn"
+        :class="{ muted: annotations.length === 0 }"
+        :aria-disabled="annotations.length === 0"
+        title="撤销上一处标记"
+        @click="undoAnnotation"
+      >
+        <svg viewBox="0 0 24 24" aria-hidden="true">
+          <path d="M9 7H4v5" />
+          <path d="M4 7c3-3 8-4 12-1 4 3 4 9 0 12-2 1-4 2-7 1" />
+        </svg>
+      </button>
+    </div>
+
+    <div
+      v-if="toolSettingsPos && rect && rect.w >= 4 && rect.h >= 4"
+      class="tool-settings-menu"
+      :style="{
+        left: toolSettingsPos.x + 'px',
+        top: toolSettingsPos.y + 'px',
+        width: toolSettingsPos.w + 'px',
+        '--arrow-x': toolSettingsPos.arrowX + 'px',
+      }"
+      @mousedown.stop
+    >
+      <template v-if="activeTool.startsWith('mosaic-')">
+        <div class="setting-group mosaic-mode-group" role="group" aria-label="马赛克标记方式">
+          <button
+            class="mode-choice"
+            :class="{ active: mosaicMode === 'brush' }"
+            title="涂抹"
+            aria-label="涂抹马赛克"
+            :aria-pressed="mosaicMode === 'brush'"
+            @click="chooseMosaicMode('brush')"
+          >
+            <svg viewBox="0 0 24 24" aria-hidden="true">
+              <path d="M9 11V5.5a2 2 0 0 1 4 0V10" />
+              <path d="M13 10V8a2 2 0 0 1 4 0v3" />
+              <path d="M17 10a2 2 0 0 1 4 0v4.5c0 4-2.5 6.5-6.5 6.5h-1.2a6 6 0 0 1-4.7-2.3L4 13.2a1.9 1.9 0 0 1 2.8-2.5L9 12.5" />
+            </svg>
+          </button>
+          <button
+            class="mode-choice"
+            :class="{ active: mosaicMode === 'rect' }"
+            title="框选"
+            aria-label="框选马赛克"
+            :aria-pressed="mosaicMode === 'rect'"
+            @click="chooseMosaicMode('rect')"
+          >
+            <svg viewBox="0 0 24 24" aria-hidden="true">
+              <rect x="2.5" y="2.5" width="19" height="19" rx="2" />
+              <rect class="pixel-block" x="6" y="6" width="4" height="4" rx=".5" />
+              <rect class="pixel-block" x="14" y="6" width="4" height="4" rx=".5" />
+              <rect class="pixel-block" x="6" y="14" width="4" height="4" rx=".5" />
+              <rect class="pixel-block" x="14" y="14" width="4" height="4" rx=".5" />
+            </svg>
+          </button>
+        </div>
+        <template v-if="mosaicMode === 'brush'">
+          <div class="settings-divider" />
+          <span class="setting-label">粗细</span>
+          <div class="setting-group stroke-group">
+            <button
+              v-for="widthValue in MOSAIC_WIDTHS"
+              :key="widthValue"
+              class="stroke-choice"
+              :class="{ active: mosaicBrushWidth === widthValue }"
+              :title="`${widthValue}px`"
+              @click="chooseMosaicWidth(widthValue)"
+            ><span :style="{ width: Math.min(22, widthValue / 2) + 'px', height: Math.min(22, widthValue / 2) + 'px' }" /></button>
+          </div>
+        </template>
+      </template>
+      <div v-else-if="activeTool !== 'text'" class="setting-group stroke-group">
+        <button
+          v-for="widthValue in STROKE_WIDTHS"
+          :key="widthValue"
+          class="stroke-choice"
+          :class="{ active: activeStrokeWidth === widthValue }"
+          :title="`${widthValue}px`"
+          @click="chooseStrokeWidth(widthValue)"
+        >
+          <span :style="{ width: widthValue * 4 + 'px', height: widthValue * 4 + 'px' }" />
+        </button>
+      </div>
+      <div v-else class="setting-group font-group">
+        <button
+          v-for="size in FONT_SIZES"
+          :key="size"
+          class="font-choice"
+          :class="{ active: activeFontSize === size }"
+          :title="`${size}px`"
+          @click="chooseFontSize(size)"
+        >
+          {{ size }}
+        </button>
+      </div>
+      <div v-if="!activeTool.startsWith('mosaic-')" class="settings-divider" />
+      <div v-if="!activeTool.startsWith('mosaic-')" class="setting-group color-group">
+        <button
+          v-for="color in colors"
+          :key="color"
+          class="swatch"
+          :class="{ selected: color === activeColor }"
+          :style="{ background: color }"
+          :title="color"
+          @click="chooseColor(color)"
+        />
+      </div>
+    </div>
+
+    <div
+      v-if="rightToolbarPos && rect && rect.w >= 4 && rect.h >= 4"
+      class="toolbar action-toolbar"
+      :style="{ left: rightToolbarPos.x + 'px', top: rightToolbarPos.y + 'px' }"
+      @mousedown.stop
+    >
+      <button
+        class="action-btn cancel"
+        data-tip="取消截图"
+        aria-label="取消截图"
+        @click="onCancel"
+        v-html="cancelIcon"
+      />
+      <button
+        class="action-btn"
+        data-tip="复制图片"
+        aria-label="复制图片"
+        @click="onCopy"
+        v-html="copyIcon"
+      />
+      <button
+        class="action-btn"
+        data-tip="保存本地"
+        aria-label="保存本地"
+        @click="onSave"
+        v-html="saveIcon"
+      />
+      <button
+        class="action-btn"
+        data-tip="上传 SSH/SCP"
+        aria-label="上传 SSH/SCP"
+        @click="onSaveRemote"
+        v-html="saveRemoteIcon"
+      />
+      <button
+        class="action-btn"
+        data-tip="上传 FTP/SFTP"
+        aria-label="上传 FTP/SFTP"
+        @click="onUploadFTP"
+        v-html="ftpIcon"
+      />
+      <button
+        class="action-btn"
+        data-tip="提取文字"
+        aria-label="提取文字"
+        @click="onOCR"
+      >
+        <svg viewBox="0 0 24 24" aria-hidden="true">
+          <path d="M5 8V5h3" />
+          <path d="M16 5h3v3" />
+          <path d="M19 16v3h-3" />
+          <path d="M8 19H5v-3" />
+          <path d="M9 15l3-7 3 7" />
+          <path d="M10 13h4" />
+        </svg>
+      </button>
+      <button
+        class="action-btn"
+        data-tip="复制总结"
+        aria-label="复制总结"
+        @click="onSummarize"
+      >
+        <svg viewBox="0 0 24 24" aria-hidden="true">
+          <path d="M6 3h8l4 4v14H6z" />
+          <path d="M14 3v5h4" />
+          <path d="M9 12h6" />
+          <path d="M9 16h5" />
+        </svg>
+      </button>
+      <button
+        class="action-btn primary"
+        data-tip="上传 S3"
+        aria-label="上传 S3"
+        @click="onConfirm"
+        v-html="uploadIcon"
+      />
+    </div>
+
+    <div v-if="!rect" class="hint">
+      Drag to select an area &nbsp;·&nbsp; Esc to cancel
+    </div>
+  </div>
+</template>
+
+<style scoped>
+.overlay-root {
+  position: fixed;
+  inset: 0;
+  user-select: none;
+  cursor: crosshair;
+  background: transparent;
+  overflow: hidden;
+}
+
+.mask {
+  position: absolute;
+  left: 0;
+  top: 0;
+  pointer-events: none;
+}
+
+.annotation-text {
+  font-family: -apple-system, BlinkMacSystemFont, "SF Pro Text", sans-serif;
+}
+
+.text-selection-box {
+  fill: transparent;
+  stroke: #3b82f6;
+  stroke-width: 1.5;
+  stroke-dasharray: 4 3;
+}
+
+.selection-hit-area {
+  position: absolute;
+  cursor: crosshair;
+}
+
+.text-editor {
+  position: absolute;
+  z-index: 6;
+  box-sizing: border-box;
+  min-width: 120px;
+  max-width: 420px;
+  padding: 0 10px;
+  border: 1px solid currentColor;
+  border-radius: 4px;
+  outline: none;
+  background: rgba(15, 23, 42, 0.72);
+  box-shadow: 0 4px 18px rgba(0, 0, 0, 0.35);
+  font: 600 20px/1.2 -apple-system, BlinkMacSystemFont, "SF Pro Text", sans-serif;
+}
+
+.resize-handle {
+  position: absolute;
+  width: 10px;
+  height: 10px;
+  transform: translate(-50%, -50%);
+  border: 1px solid #fff;
+  background: #3b82f6;
+  box-shadow: 0 1px 5px rgba(0, 0, 0, 0.35);
+  z-index: 3;
+}
+.handle-n,
+.handle-s {
+  cursor: ns-resize;
+}
+.handle-e,
+.handle-w {
+  cursor: ew-resize;
+}
+.handle-nw,
+.handle-se {
+  cursor: nwse-resize;
+}
+.handle-ne,
+.handle-sw {
+  cursor: nesw-resize;
+}
+
+.size-pill {
+  position: absolute;
+  padding: 2px 8px;
+  font-size: 12px;
+  font-weight: 500;
+  color: #fff;
+  background: rgba(15, 23, 42, 0.78);
+  border-radius: 4px;
+  pointer-events: none;
+  font-variant-numeric: tabular-nums;
+}
+
+.toolbar {
+  position: absolute;
+  display: flex;
+  gap: 6px;
+  align-items: center;
+  height: 32px;
+  padding: 4px;
+  background: rgba(28, 28, 32, 0.94);
+  border-radius: 8px;
+  box-shadow: 0 6px 22px rgba(0, 0, 0, 0.4);
+  cursor: default;
+  z-index: 4;
+}
+
+.mark-toolbar {
+  width: 280px;
+}
+.action-toolbar {
+  box-sizing: border-box;
+  width: 288px;
+  gap: 8px;
+}
+
+.icon-btn,
+.action-btn,
+.swatch,
+.stroke-choice,
+.font-choice,
+.mode-choice {
+  font-family: inherit;
+}
+
+/*
+ * .action-btn — Square SVG icon button used in the bottom-right action toolbar.
+ *
+ * Design rationale:
+ * - Mirrors .icon-btn sizing (32px square) so the action toolbar is visually
+ *   balanced with the annotation toolbar.
+ * - Uses `currentColor` so each instance can override its own hue (e.g. the
+ *   primary upload button is blue) while sharing one base set of rules.
+ * - The native CSS tooltip is rendered through `::after` driven by the
+ *   `data-tip` attribute. This avoids the system `title` tooltip's slow show
+ *   delay and lets us style/position the bubble consistently.
+ */
+.action-btn {
+  position: relative;
+  display: grid;
+  place-items: center;
+  width: 28px;
+  height: 28px;
+  border: 0;
+  border-radius: 5px;
+  color: #d1d5db;
+  background: transparent;
+  cursor: pointer;
+  padding: 0;
+}
+.action-btn:hover {
+  color: #fff;
+  background: rgba(255, 255, 255, 0.12);
+}
+.action-btn.cancel:hover {
+  color: #fca5a5;
+  background: rgba(239, 68, 68, 0.18);
+}
+.action-btn.primary {
+  color: #60a5fa;
+}
+.action-btn.primary:hover {
+  color: #fff;
+  background: #2563eb;
+}
+.action-btn :deep(svg) {
+  width: 18px;
+  height: 18px;
+  display: block;
+  fill: currentColor;
+  pointer-events: none;
+}
+.action-btn > svg {
+  width: 18px;
+  height: 18px;
+  fill: none;
+  stroke: currentColor;
+  stroke-width: 2;
+  stroke-linecap: round;
+  stroke-linejoin: round;
+  pointer-events: none;
+}
+.action-btn::after {
+  content: attr(data-tip);
+  position: absolute;
+  bottom: calc(100% + 6px);
+  left: 50%;
+  transform: translateX(-50%);
+  padding: 3px 8px;
+  font-size: 12px;
+  color: #fff;
+  background: rgba(15, 23, 42, 0.92);
+  border-radius: 4px;
+  white-space: nowrap;
+  pointer-events: none;
+  opacity: 0;
+  transition: opacity 0.12s ease 0.05s;
+  z-index: 5;
+}
+.action-btn:hover::after {
+  opacity: 1;
+}
+
+.icon-btn {
+  display: grid;
+  place-items: center;
+  width: 28px;
+  height: 28px;
+  border: 0;
+  border-radius: 5px;
+  color: #d1d5db;
+  background: transparent;
+  cursor: pointer;
+}
+.icon-btn:hover:not(.muted),
+.icon-btn.active {
+  color: #fff;
+  background: rgba(255, 255, 255, 0.12);
+}
+.icon-btn.muted {
+  opacity: 0.35;
+  cursor: default;
+}
+.icon-btn svg {
+  width: 18px;
+  height: 18px;
+  fill: none;
+  stroke: currentColor;
+  stroke-width: 2;
+  stroke-linecap: round;
+  stroke-linejoin: round;
+}
+
+.tool-settings-menu {
+  position: absolute;
+  z-index: 5;
+  box-sizing: border-box;
+  display: flex;
+  align-items: center;
+  gap: 12px;
+  min-height: 42px;
+  padding: 8px 14px;
+  color: #1f2937;
+  background: rgba(255, 255, 255, 0.96);
+  border-radius: 8px;
+  box-shadow: 0 12px 30px rgba(0, 0, 0, 0.26);
+  cursor: default;
+}
+.tool-settings-menu::before {
+  content: '';
+  position: absolute;
+  left: var(--arrow-x);
+  top: -8px;
+  transform: translateX(-50%) rotate(45deg);
+  width: 16px;
+  height: 16px;
+  background: rgba(255, 255, 255, 0.96);
+  border-radius: 3px;
+}
+.setting-group {
+  position: relative;
+  z-index: 1;
+  display: flex;
+  align-items: center;
+  gap: 10px;
+}
+.stroke-choice,
+.font-choice {
+  display: grid;
+  place-items: center;
+  width: 32px;
+  height: 32px;
+  padding: 0;
+  border: 0;
+  border-radius: 6px;
+  color: #1f2937;
+  background: transparent;
+  cursor: pointer;
+}
+.mosaic-mode-group {
+  gap: 0;
+  padding: 2px;
+  border-radius: 7px;
+  background: #e5e7eb;
+}
+.mode-choice {
+  display: grid;
+  place-items: center;
+  width: 36px;
+  min-width: 36px;
+  height: 30px;
+  padding: 0;
+  border: 0;
+  border-radius: 5px;
+  color: #475569;
+  background: transparent;
+  font-size: 13px;
+  font-weight: 600;
+  cursor: pointer;
+}
+.mode-choice svg {
+  width: 19px;
+  height: 19px;
+  fill: none;
+  stroke: currentColor;
+  stroke-width: 1.8;
+  stroke-linecap: round;
+  stroke-linejoin: round;
+}
+.mode-choice svg .pixel-block {
+  fill: currentColor;
+  stroke: none;
+}
+.mode-choice:hover,
+.mode-choice.active {
+  color: #1d4ed8;
+  background: #fff;
+  box-shadow: 0 1px 3px rgba(15, 23, 42, 0.14);
+}
+.setting-label {
+  position: relative;
+  z-index: 1;
+  color: #64748b;
+  font-size: 12px;
+  white-space: nowrap;
+}
+.stroke-choice:hover,
+.stroke-choice.active,
+.font-choice:hover,
+.font-choice.active {
+  color: #2563eb;
+  background: #eaf1ff;
+}
+.stroke-choice span {
+  display: block;
+  border-radius: 999px;
+  background: currentColor;
+}
+.font-choice {
+  min-width: 40px;
+  width: auto;
+  padding: 0 8px;
+  font-size: 14px;
+  font-weight: 700;
+}
+.settings-divider {
+  position: relative;
+  z-index: 1;
+  width: 1px;
+  height: 26px;
+  background: #d1d5db;
+}
+.swatch {
+  width: 22px;
+  height: 22px;
+  padding: 0;
+  border: 1px solid rgba(17, 24, 39, 0.18);
+  border-radius: 4px;
+  cursor: pointer;
+}
+.swatch.selected {
+  outline: 2px solid #2563eb;
+  outline-offset: 2px;
+}
+
+.hint {
+  position: absolute;
+  left: 50%;
+  top: 24px;
+  transform: translateX(-50%);
+  padding: 6px 14px;
+  font-size: 12px;
+  color: #f3f4f6;
+  background: rgba(0, 0, 0, 0.5);
+  border-radius: 999px;
+  pointer-events: none;
+}
+</style>
diff --git a/frontend/src/views/SettingsView.vue b/frontend/src/views/SettingsView.vue
new file mode 100644
index 0000000..a217860
--- /dev/null
+++ b/frontend/src/views/SettingsView.vue
@@ -0,0 +1,1305 @@
+<script setup lang="ts">
+/*
+ * SettingsView — the home screen of SnapGo before the user triggers a
+ * capture. The active configuration section is selected by the App-shell
+ * sidebar and passed in via the `tab` prop, so this view only owns the
+ * card content for the currently selected destination type:
+ *
+ *   • "general" — the global hotkey / capture parameters.
+ *   • "s3"      — S3-compatible object-storage credentials.
+ *   • "ftp"     — FTP/SFTP file-transfer destination.
+ *   • "ssh"     — SSH/SCP destination for the "save remote" button.
+ *   • "llm"     — multimodal screenshot summary provider settings.
+ *   • "ocr"     — cloud OCR provider settings for text extraction.
+ *
+ * State flow: load() pulls config from Go on mount, save() pushes back.
+ */
+import { computed, onMounted, ref, watch } from 'vue'
+import {
+  GetConfig,
+  SaveConfig,
+  TestConnection,
+  TestFTPConnection,
+  TestSSHConnection,
+  CaptureNow,
+} from '../../wailsjs/go/main/App'
+
+// Tab discriminator shared with the App shell. Kept as a string union so
+// the parent can pass the value without importing a type from this view.
+type TabId = 'general' | 's3' | 'ftp' | 'ssh' | 'llm' | 'ocr'
+type ThemeMode = 'auto' | 'light' | 'dark'
+type FTPProtocol = 'ftp' | 'sftp'
+
+const props = defineProps<{
+  tab: TabId
+  theme: ThemeMode
+}>()
+
+const emit = defineEmits<{
+  (event: 'theme-change', theme: ThemeMode): void
+}>()
+
+interface S3Config {
+  endpoint: string
+  region: string
+  bucket: string
+  accessKeyId: string
+  secretAccessKey: string
+  pathPrefix: string
+  publicUrlBase: string
+  usePathStyle: boolean
+}
+
+interface SSHConfig {
+  host: string
+  port: number
+  user: string
+  authMethod: string
+  password: string
+  pathPrefix: string
+  strictHostKey: boolean
+  knownHostsPath: string
+  connectTimeoutSecs: number
+}
+
+interface FTPConfig {
+  protocol: FTPProtocol
+  host: string
+  port: number
+  user: string
+  authMethod: 'password' | 'key'
+  password: string
+  rootDirectory: string
+  pathPrefix: string
+  strictHostKey: boolean
+  knownHostsPath: string
+  connectTimeoutSecs: number
+}
+
+interface LLMProviderConfig {
+  label: string
+  baseUrl: string
+  apiKey: string
+  model: string
+  maxTokens: number
+  temperature: number
+  timeoutSecs: number
+}
+
+interface LLMConfig {
+  activeProvider: string
+  prompt: string
+  providers: Record<string, LLMProviderConfig>
+}
+
+interface OCRProviderConfig {
+  label: string
+  endpoint: string
+  accessKeyId: string
+  accessKeySecret: string
+  region: string
+  service: string
+  action: string
+  version: string
+  timeoutSecs: number
+}
+
+interface OCRConfig {
+  activeProvider: string
+  providers: Record<string, OCRProviderConfig>
+}
+
+interface AppConfig {
+  hotkey: string
+  theme: ThemeMode
+  s3: S3Config
+  ssh: SSHConfig
+  ftp: FTPConfig
+  llm: LLMConfig
+  ocr: OCRConfig
+}
+
+const llmProviderOptions = [
+  { id: 'qwen', label: '阿里千问多模态' },
+  { id: 'doubao', label: '火山方舟豆包多模态' },
+  { id: 'openai', label: 'ChatGPT / OpenAI-compatible' },
+]
+
+const ocrProviderOptions = [
+  { id: 'aliyun', label: '阿里云文字识别' },
+  { id: 'volcengine', label: '火山引擎文字识别' },
+]
+
+const themeOptions: Array<{ id: ThemeMode; label: string }> = [
+  { id: 'light', label: '浅色' },
+  { id: 'dark', label: '深色' },
+  { id: 'auto', label: '自动' },
+]
+
+const DEFAULT_SUMMARY_PROMPT = `你是一个截图内容总结助手。请阅读截图，并用中文输出一段适合直接粘贴到聊天、工单、Issue 或 PR 中的说明。
+
+要求：
+- 先说明截图中最重要的信息和用户可能想表达的意图。
+- 如果截图包含报错、异常状态、表格、代码、界面控件或关键数字，请准确提取。
+- 如果截图内容不足以判断，不要编造；直接说明不确定点。
+- 输出尽量简洁，默认 3 到 6 条要点。
+- 不要输出 Markdown 标题，不要寒暄。`
+
+// `defaultConfig` keeps the initial render in sync with the Go-side
+// DefaultAppConfig so the UI never flashes empty fields before load()
+// completes. Centralising the defaults also avoids subtle drift between
+// frontend and backend.
+function defaultConfig(): AppConfig {
+  return {
+    hotkey: 'cmd+shift+a',
+    theme: 'auto',
+    s3: {
+      endpoint: '',
+      region: 'us-east-1',
+      bucket: '',
+      accessKeyId: '',
+      secretAccessKey: '',
+      pathPrefix: 'snapgo/',
+      publicUrlBase: '',
+      usePathStyle: true,
+    },
+    ftp: {
+      protocol: 'ftp',
+      host: '',
+      port: 21,
+      user: '',
+      authMethod: 'password',
+      password: '',
+      rootDirectory: '/',
+      pathPrefix: 'snapgo/',
+      strictHostKey: false,
+      knownHostsPath: '',
+      connectTimeoutSecs: 10,
+    },
+    ssh: {
+      host: '',
+      port: 22,
+      user: '',
+      authMethod: 'password',
+      password: '',
+      pathPrefix: 'snapgo/',
+      strictHostKey: false,
+      knownHostsPath: '',
+      connectTimeoutSecs: 10,
+    },
+    llm: {
+      activeProvider: 'openai',
+      prompt: DEFAULT_SUMMARY_PROMPT,
+      providers: {
+        qwen: {
+          label: '阿里千问多模态',
+          baseUrl: 'https://dashscope.aliyuncs.com/compatible-mode/v1',
+          apiKey: '',
+          model: 'qwen-vl-plus',
+          maxTokens: 600,
+          temperature: 0.2,
+          timeoutSecs: 60,
+        },
+        doubao: {
+          label: '火山方舟豆包多模态',
+          baseUrl: 'https://ark.cn-beijing.volces.com/api/v3',
+          apiKey: '',
+          model: '',
+          maxTokens: 600,
+          temperature: 0.2,
+          timeoutSecs: 60,
+        },
+        openai: {
+          label: 'ChatGPT / OpenAI-compatible',
+          baseUrl: 'https://api.openai.com/v1',
+          apiKey: '',
+          model: 'gpt-5.5',
+          maxTokens: 600,
+          temperature: 0.2,
+          timeoutSecs: 60,
+        },
+      },
+    },
+    ocr: {
+      activeProvider: 'aliyun',
+      providers: {
+        aliyun: {
+          label: '阿里云文字识别',
+          endpoint: 'https://ocr-api.cn-hangzhou.aliyuncs.com',
+          accessKeyId: '',
+          accessKeySecret: '',
+          region: '',
+          service: '',
+          action: 'RecognizeGeneral',
+          version: '2021-07-07',
+          timeoutSecs: 30,
+        },
+        volcengine: {
+          label: '火山引擎文字识别',
+          endpoint: 'https://visual.volcengineapi.com',
+          accessKeyId: '',
+          accessKeySecret: '',
+          region: 'cn-north-1',
+          service: 'cv',
+          action: 'OCRNormal',
+          version: '2020-08-26',
+          timeoutSecs: 30,
+        },
+      },
+    },
+  }
+}
+
+const config = ref<AppConfig>(defaultConfig())
+
+const saving = ref(false)
+const testing = ref(false)
+const testingFTP = ref(false)
+const testingSSH = ref(false)
+const message = ref<{ kind: 'ok' | 'err'; text: string } | null>(null)
+
+// The "remote path" in the UI is shown as "~/<pathPrefix>" so the user
+// understands that everything is rooted at the remote home directory.
+// We strip leading slashes / tilde here defensively in case someone pastes
+// a full path.
+const sshPathDisplay = computed({
+  get: () => config.value.ssh.pathPrefix,
+  set: (raw: string) => {
+    let cleaned = raw.trim()
+    cleaned = cleaned.replace(/^~/, '')
+    cleaned = cleaned.replace(/^\/+/, '')
+    config.value.ssh.pathPrefix = cleaned
+  },
+})
+
+// FTP and SFTP both upload relative to the authenticated login directory.
+// RootDirectory is display-only: it is prepended to the uploaded relative path
+// when that path is copied, without changing where the file is uploaded.
+const ftpPathDisplay = computed({
+  get: () => config.value.ftp.pathPrefix,
+  set: (raw: string) => {
+    let cleaned = raw.trim()
+    cleaned = cleaned.replace(/^~/, '')
+    cleaned = cleaned.replace(/^\/+/, '')
+    config.value.ftp.pathPrefix = cleaned
+  },
+})
+
+const ftpCopiedPathPreview = computed(() => {
+  const root = config.value.ftp.rootDirectory.trim().replace(/\/+$/, '')
+  const remote = config.value.ftp.pathPrefix
+    .trim()
+    .replace(/^\/+|\/+$/g, '')
+  const remotePrefix = remote ? `${remote}/` : ''
+  return `${root || (config.value.ftp.protocol === 'sftp' ? '~' : '')}/${remotePrefix}2026/07/20260713-110413-18lnbx.png`
+})
+
+function changeFTPProtocol(event: Event) {
+  const next = (event.target as HTMLSelectElement).value as FTPProtocol
+  const previous = config.value.ftp.protocol
+  const previousDefault = previous === 'sftp' ? 22 : 21
+  const previousRootDefault = previous === 'sftp' ? '~/' : '/'
+  if (config.value.ftp.port === previousDefault) {
+    config.value.ftp.port = next === 'sftp' ? 22 : 21
+  }
+  if (config.value.ftp.rootDirectory === previousRootDefault) {
+    config.value.ftp.rootDirectory = next === 'sftp' ? '~/' : '/'
+  }
+  config.value.ftp.protocol = next
+}
+
+function changeFTPAuthMethod(event: Event) {
+  config.value.ftp.authMethod = (event.target as HTMLSelectElement).value as
+    | 'password'
+    | 'key'
+}
+
+const activeLLMProvider = computed(() => {
+  const id = config.value.llm.activeProvider || 'openai'
+  if (!config.value.llm.providers[id]) {
+    config.value.llm.activeProvider = 'openai'
+    return config.value.llm.providers.openai
+  }
+  return config.value.llm.providers[id]
+})
+
+const activeOCRProvider = computed(() => {
+  const id = config.value.ocr.activeProvider || 'aliyun'
+  if (!config.value.ocr.providers[id]) {
+    config.value.ocr.activeProvider = 'aliyun'
+    return config.value.ocr.providers.aliyun
+  }
+  return config.value.ocr.providers[id]
+})
+
+function normalizeTheme(theme: unknown): ThemeMode {
+  return theme === 'light' || theme === 'dark' || theme === 'auto'
+    ? theme
+    : 'auto'
+}
+
+function flash(kind: 'ok' | 'err', text: string) {
+  message.value = { kind, text }
+  window.setTimeout(() => {
+    if (message.value?.text === text) message.value = null
+  }, 4000)
+}
+
+async function load() {
+  const cfg = await GetConfig()
+  if (cfg) {
+    // Merge with defaults so a config file written before SSH support
+    // existed does not leave ssh fields undefined.
+    const merged = defaultConfig()
+    Object.assign(merged, cfg)
+    merged.s3 = { ...merged.s3, ...(cfg as any).s3 }
+    merged.ssh = { ...merged.ssh, ...(cfg as any).ssh }
+    merged.ftp = { ...merged.ftp, ...(cfg as any).ftp }
+    merged.llm = { ...merged.llm, ...(cfg as any).llm }
+    merged.llm.providers = {
+      ...defaultConfig().llm.providers,
+      ...((cfg as any).llm?.providers ?? {}),
+    }
+    merged.ocr = { ...merged.ocr, ...(cfg as any).ocr }
+    merged.ocr.providers = {
+      ...defaultConfig().ocr.providers,
+      ...((cfg as any).ocr?.providers ?? {}),
+    }
+    merged.theme = normalizeTheme((cfg as any).theme)
+    config.value = merged
+    emit('theme-change', config.value.theme)
+  }
+}
+
+async function save() {
+  saving.value = true
+  try {
+    await SaveConfig(config.value as any)
+    flash('ok', 'Settings saved')
+  } catch (err: any) {
+    flash('err', `Save failed: ${err?.message ?? err}`)
+  } finally {
+    saving.value = false
+  }
+}
+
+async function test() {
+  testing.value = true
+  try {
+    await TestConnection(config.value.s3 as any)
+    flash('ok', 'S3 connection OK — bucket is writable')
+  } catch (err: any) {
+    flash('err', `Test failed: ${err?.message ?? err}`)
+  } finally {
+    testing.value = false
+  }
+}
+
+async function testFTP() {
+  testingFTP.value = true
+  try {
+    await TestFTPConnection(config.value.ftp as any)
+    flash(
+      'ok',
+      `${config.value.ftp.protocol.toUpperCase()} connection OK — remote directory is writable`
+    )
+  } catch (err: any) {
+    flash('err', `FTP/SFTP test failed: ${err?.message ?? err}`)
+  } finally {
+    testingFTP.value = false
+  }
+}
+
+async function testSSH() {
+  testingSSH.value = true
+  try {
+    await TestSSHConnection(config.value.ssh as any)
+    flash('ok', 'SSH connection OK')
+  } catch (err: any) {
+    flash('err', `SSH test failed: ${err?.message ?? err}`)
+  } finally {
+    testingSSH.value = false
+  }
+}
+
+async function manualCapture() {
+  await CaptureNow()
+}
+
+watch(
+  () => config.value.theme,
+  (theme) => emit('theme-change', normalizeTheme(theme))
+)
+
+onMounted(load)
+</script>
+
+<template>
+  <div class="settings" :class="`theme-${props.theme}`">
+    <header class="hero">
+      <div>
+        <h1>SnapGo</h1>
+        <p class="subtitle">
+          Press <kbd>{{ config.hotkey }}</kbd> anywhere to capture, upload, and
+          copy the URL to your clipboard.
+        </p>
+      </div>
+      <button class="btn primary" @click="manualCapture">Capture now</button>
+    </header>
+
+    <!-- General tab — shortcut and appearance configuration. -->
+    <section v-if="props.tab === 'general'" class="card">
+      <h2>General</h2>
+      <div class="grid">
+        <label class="field">
+          <span>Global hotkey</span>
+          <input
+            v-model="config.hotkey"
+            placeholder="cmd+shift+a"
+            spellcheck="false"
+          />
+        </label>
+        <label class="field">
+          <span>主题选择</span>
+          <select v-model="config.theme">
+            <option
+              v-for="themeOption in themeOptions"
+              :key="themeOption.id"
+              :value="themeOption.id"
+            >
+              {{ themeOption.label }}
+            </option>
+          </select>
+        </label>
+      </div>
+      <p class="hint">
+        Tokens (case-insensitive, "+"-separated): cmd / ctrl / option / shift +
+        a–z or 0–9. Example: <code>cmd+shift+a</code>.
+      </p>
+      <div class="actions">
+        <button class="btn primary" :disabled="saving" @click="save">
+          {{ saving ? 'Saving…' : 'Save' }}
+        </button>
+      </div>
+    </section>
+
+    <!-- S3-Conf tab — unchanged content, moved out of General. -->
+    <section v-if="props.tab === 's3'" class="card">
+      <h2>S3-compatible storage</h2>
+      <div class="grid">
+        <label class="field">
+          <span>Endpoint *</span>
+          <input
+            v-model="config.s3.endpoint"
+            placeholder="https://s3.us-east-005.backblazeb2.com"
+          />
+        </label>
+        <label class="field">
+          <span>Region</span>
+          <input v-model="config.s3.region" placeholder="us-east-1 / auto" />
+        </label>
+        <label class="field">
+          <span>Bucket *</span>
+          <input v-model="config.s3.bucket" placeholder="my-screenshots" />
+        </label>
+        <label class="field">
+          <span>Access Key ID *</span>
+          <input v-model="config.s3.accessKeyId" />
+        </label>
+        <label class="field">
+          <span>Secret Access Key *</span>
+          <input v-model="config.s3.secretAccessKey" type="password" />
+        </label>
+        <label class="field">
+          <span>Path prefix</span>
+          <input v-model="config.s3.pathPrefix" placeholder="snapgo/" />
+        </label>
+        <label class="field full">
+          <span>Public URL base (optional, e.g. CDN)</span>
+          <input
+            v-model="config.s3.publicUrlBase"
+            placeholder="https://cdn.example.com/screenshots"
+          />
+        </label>
+        <label class="field checkbox">
+          <input type="checkbox" v-model="config.s3.usePathStyle" />
+          <span
+            >Use path-style addressing (recommended for MinIO, R2, custom
+            domains)</span
+          >
+        </label>
+      </div>
+
+      <div class="actions">
+        <button class="btn" :disabled="testing" @click="test">
+          {{ testing ? 'Testing…' : 'Test connection' }}
+        </button>
+        <button class="btn primary" :disabled="saving" @click="save">
+          {{ saving ? 'Saving…' : 'Save' }}
+        </button>
+      </div>
+    </section>
+
+    <!-- FTP/SFTP tab — file-transfer destination for its toolbar action. -->
+    <section v-if="props.tab === 'ftp'" class="card">
+      <h2>文件服务</h2>
+      <div class="grid">
+        <label class="field">
+          <span>Protocol</span>
+          <select :value="config.ftp.protocol" @change="changeFTPProtocol">
+            <option value="ftp">FTP</option>
+            <option value="sftp">SFTP (SSH File Transfer Protocol)</option>
+          </select>
+        </label>
+        <label class="field">
+          <span>Port</span>
+          <input
+            v-model.number="config.ftp.port"
+            type="number"
+            min="1"
+            max="65535"
+            :placeholder="config.ftp.protocol === 'sftp' ? '22' : '21'"
+          />
+        </label>
+        <label class="field">
+          <span>Host (IP or domain) *</span>
+          <input v-model.trim="config.ftp.host" placeholder="files.example.com" />
+        </label>
+        <label class="field">
+          <span>User *</span>
+          <input v-model.trim="config.ftp.user" placeholder="snapgo" />
+        </label>
+        <label
+          v-if="config.ftp.protocol === 'sftp'"
+          key="sftp-auth-method"
+          class="field"
+        >
+          <span>Auth method</span>
+          <select
+            :value="config.ftp.authMethod"
+            @change="changeFTPAuthMethod"
+          >
+            <option value="password">Password</option>
+            <option value="key">SSH-Key</option>
+          </select>
+        </label>
+        <label
+          v-if="config.ftp.protocol === 'ftp' || config.ftp.authMethod === 'password'"
+          :key="`${config.ftp.protocol}-password`"
+          class="field"
+        >
+          <span>Password</span>
+          <input v-model="config.ftp.password" type="password" />
+        </label>
+        <label class="field full">
+          <span>根目录（仅用于拼接复制路径）</span>
+          <input
+            v-model.trim="config.ftp.rootDirectory"
+            :placeholder="config.ftp.protocol === 'sftp' ? '~/' : '/'"
+            spellcheck="false"
+          />
+        </label>
+        <label class="field full">
+          <span>Remote directory（登录目录下的上传目录）</span>
+          <input
+            v-model="ftpPathDisplay"
+            placeholder="snapgo/"
+            spellcheck="false"
+          />
+        </label>
+        <label class="field">
+          <span>Connect timeout (sec)</span>
+          <input
+            v-model.number="config.ftp.connectTimeoutSecs"
+            type="number"
+            min="1"
+            max="120"
+            placeholder="10"
+          />
+        </label>
+        <label v-if="config.ftp.protocol === 'sftp'" class="field">
+          <span>Known hosts path</span>
+          <input
+            v-model="config.ftp.knownHostsPath"
+            placeholder="~/.ssh/known_hosts"
+            :disabled="!config.ftp.strictHostKey"
+          />
+        </label>
+        <label v-if="config.ftp.protocol === 'sftp'" class="field checkbox">
+          <input type="checkbox" v-model="config.ftp.strictHostKey" />
+          <span>Strict host key checking (recommended)</span>
+        </label>
+      </div>
+
+      <p class="hint">
+        复制路径示例：<code>{{ ftpCopiedPathPreview }}</code>
+      </p>
+
+      <p v-if="config.ftp.protocol === 'ftp'" class="hint warn">
+        FTP sends the username, password, and screenshot without encryption.
+        Prefer SFTP on networks you do not fully trust. SFTP is not FTPS.
+      </p>
+      <p
+        v-else-if="config.ftp.authMethod === 'key'"
+        class="hint"
+      >
+        SSH-Key mode uses your <code>ssh-agent</code> and
+        <code>~/.ssh/id_*</code> keys.
+      </p>
+      <p
+        v-else-if="!config.ftp.strictHostKey"
+        class="hint warn"
+      >
+        Host key checking is disabled. Enable it for production servers to
+        detect server impersonation.
+      </p>
+
+      <div class="actions">
+        <button class="btn" :disabled="testingFTP" @click="testFTP">
+          {{ testingFTP ? 'Testing…' : 'Test connection' }}
+        </button>
+        <button class="btn primary" :disabled="saving" @click="save">
+          {{ saving ? 'Saving…' : 'Save' }}
+        </button>
+      </div>
+    </section>
+
+    <!-- SSH-Conf tab — destination for the save-remote action. -->
+    <section v-if="props.tab === 'ssh'" class="card">
+      <h2>SSH / SCP destination</h2>
+      <div class="grid">
+        <label class="field">
+          <span>Host (IP or domain) *</span>
+          <input v-model="config.ssh.host" placeholder="192.168.1.10" />
+        </label>
+        <label class="field">
+          <span>Port</span>
+          <input
+            v-model.number="config.ssh.port"
+            type="number"
+            min="1"
+            max="65535"
+            placeholder="22"
+          />
+        </label>
+        <div class="field-row auth-row">
+          <label class="field">
+            <span>Auth method</span>
+            <select v-model="config.ssh.authMethod">
+              <option value="password">Password</option>
+              <option value="key">SSH-Key</option>
+              <option value="kerberos">Kerberos</option>
+            </select>
+          </label>
+          <label class="field">
+            <span>User *</span>
+            <input v-model="config.ssh.user" placeholder="ubuntu" />
+          </label>
+          <label
+            v-if="config.ssh.authMethod === 'password'"
+            class="field"
+          >
+            <span>Password</span>
+            <input v-model="config.ssh.password" type="password" />
+          </label>
+        </div>
+        <label class="field full">
+          <span>Remote path (under home)</span>
+          <div class="prefixed-input">
+            <span class="input-prefix">~/</span>
+            <input
+              v-model="sshPathDisplay"
+              placeholder="snapgo/"
+              spellcheck="false"
+            />
+          </div>
+        </label>
+        <label class="field">
+          <span>Connect timeout (sec)</span>
+          <input
+            v-model.number="config.ssh.connectTimeoutSecs"
+            type="number"
+            min="1"
+            max="120"
+            placeholder="10"
+          />
+        </label>
+        <label class="field">
+          <span>Known hosts path</span>
+          <input
+            v-model="config.ssh.knownHostsPath"
+            placeholder="~/.ssh/known_hosts"
+            :disabled="!config.ssh.strictHostKey"
+          />
+        </label>
+        <label class="field checkbox">
+          <input type="checkbox" v-model="config.ssh.strictHostKey" />
+          <span>
+            Strict host key checking (recommended for production hosts)
+          </span>
+        </label>
+      </div>
+      <p v-if="config.ssh.authMethod === 'kerberos'" class="hint">
+        Kerberos mode delegates to the system <code>ssh</code>/<code>scp</code>.
+        Run <code>kinit your.name@BYTEDANCE.COM</code> in a terminal first; tickets
+        expire (typically every 10–24h), so re-run <code>kinit</code> if uploads
+        start failing. Verify with <code>klist</code>.
+      </p>
+      <p v-else-if="config.ssh.authMethod === 'key'" class="hint">
+        SSH-Key mode uses your <code>ssh-agent</code> and <code>~/.ssh/id_*</code>
+        keys. Make sure password-less login already works (e.g. via
+        <code>ssh-copy-id</code>).
+      </p>
+      <p
+        v-else-if="config.ssh.authMethod === 'password' && !config.ssh.password"
+        class="hint warn"
+      >
+        Password is empty — enter the remote login password, or switch the auth
+        method to SSH-Key.
+      </p>
+
+      <div class="actions">
+        <button class="btn" :disabled="testingSSH" @click="testSSH">
+          {{ testingSSH ? 'Testing…' : 'Test connection' }}
+        </button>
+        <button class="btn primary" :disabled="saving" @click="save">
+          {{ saving ? 'Saving…' : 'Save' }}
+        </button>
+      </div>
+    </section>
+
+    <!-- LLM tab — multimodal screenshot summary provider settings. -->
+    <section v-if="props.tab === 'llm'" class="card">
+      <h2>LLM screenshot summary</h2>
+      <div class="grid">
+        <label class="field full">
+          <span>Provider</span>
+          <select v-model="config.llm.activeProvider">
+            <option
+              v-for="provider in llmProviderOptions"
+              :key="provider.id"
+              :value="provider.id"
+            >
+              {{ provider.label }}
+            </option>
+          </select>
+        </label>
+        <label class="field full">
+          <span>Base URL *</span>
+          <input
+            v-model="activeLLMProvider.baseUrl"
+            placeholder="https://api.openai.com/v1"
+            spellcheck="false"
+          />
+        </label>
+        <label class="field">
+          <span>API Key *</span>
+          <input v-model="activeLLMProvider.apiKey" type="password" />
+        </label>
+        <label class="field">
+          <span>Model *</span>
+          <input
+            v-model="activeLLMProvider.model"
+            placeholder="gpt-5.5 / qwen-vl-plus / Ark endpoint ID"
+            spellcheck="false"
+          />
+        </label>
+        <label class="field">
+          <span>Max tokens</span>
+          <input
+            v-model.number="activeLLMProvider.maxTokens"
+            type="number"
+            min="64"
+            max="4096"
+            placeholder="600"
+          />
+        </label>
+        <label class="field">
+          <span>Temperature</span>
+          <input
+            v-model.number="activeLLMProvider.temperature"
+            type="number"
+            min="0"
+            max="2"
+            step="0.1"
+            placeholder="0.2"
+          />
+        </label>
+        <label class="field">
+          <span>Timeout (sec)</span>
+          <input
+            v-model.number="activeLLMProvider.timeoutSecs"
+            type="number"
+            min="10"
+            max="300"
+            placeholder="60"
+          />
+        </label>
+        <label class="field full">
+          <span>Prompt</span>
+          <textarea
+            v-model="config.llm.prompt"
+            class="prompt-textarea"
+            spellcheck="false"
+          />
+        </label>
+      </div>
+      <p class="hint">
+        The "copy summary" screenshot action first uploads the image through the
+        S3 configuration, then sends the public image URL to this multimodal
+        provider. Keep S3 configured before using it.
+      </p>
+      <p v-if="config.llm.activeProvider === 'doubao'" class="hint">
+        Volcengine Ark usually uses the inference endpoint ID as the model
+        value; paste the endpoint/model identifier from your Ark console.
+      </p>
+      <p v-else-if="config.llm.activeProvider === 'qwen'" class="hint">
+        DashScope OpenAI-compatible mode is used here. If your workspace uses a
+        regional endpoint, replace Base URL with that compatible-mode URL.
+      </p>
+
+      <div class="actions">
+        <button class="btn primary" :disabled="saving" @click="save">
+          {{ saving ? 'Saving…' : 'Save' }}
+        </button>
+      </div>
+    </section>
+
+    <!-- OCR tab — cloud OCR provider settings for screenshot text extraction. -->
+    <section v-if="props.tab === 'ocr'" class="card">
+      <h2>文字提取</h2>
+      <div class="grid">
+        <label class="field full">
+          <span>Provider</span>
+          <select v-model="config.ocr.activeProvider">
+            <option
+              v-for="provider in ocrProviderOptions"
+              :key="provider.id"
+              :value="provider.id"
+            >
+              {{ provider.label }}
+            </option>
+          </select>
+        </label>
+        <label class="field full">
+          <span>Endpoint *</span>
+          <input
+            v-model="activeOCRProvider.endpoint"
+            placeholder="https://ocr-api.cn-hangzhou.aliyuncs.com"
+            spellcheck="false"
+          />
+        </label>
+        <label class="field">
+          <span>AccessKey ID *</span>
+          <input v-model="activeOCRProvider.accessKeyId" spellcheck="false" />
+        </label>
+        <label class="field">
+          <span>AccessKey Secret *</span>
+          <input v-model="activeOCRProvider.accessKeySecret" type="password" />
+        </label>
+        <label
+          v-if="config.ocr.activeProvider === 'volcengine'"
+          class="field"
+        >
+          <span>Region *</span>
+          <input
+            v-model="activeOCRProvider.region"
+            placeholder="cn-north-1"
+            spellcheck="false"
+          />
+        </label>
+        <label
+          v-if="config.ocr.activeProvider === 'volcengine'"
+          class="field"
+        >
+          <span>Service *</span>
+          <input
+            v-model="activeOCRProvider.service"
+            placeholder="cv"
+            spellcheck="false"
+          />
+        </label>
+        <label class="field">
+          <span>Action *</span>
+          <input
+            v-model="activeOCRProvider.action"
+            placeholder="RecognizeGeneral / OCRNormal"
+            spellcheck="false"
+          />
+        </label>
+        <label class="field">
+          <span>Version *</span>
+          <input
+            v-model="activeOCRProvider.version"
+            placeholder="2021-07-07 / 2020-08-26"
+            spellcheck="false"
+          />
+        </label>
+        <label class="field">
+          <span>Timeout (sec)</span>
+          <input
+            v-model.number="activeOCRProvider.timeoutSecs"
+            type="number"
+            min="5"
+            max="120"
+            placeholder="30"
+          />
+        </label>
+      </div>
+      <p v-if="config.ocr.activeProvider === 'aliyun'" class="hint">
+        阿里云默认使用 OCR API 的 <code>RecognizeGeneral</code>，请求体为截图
+        PNG 原始数据，并使用 ACS3-HMAC-SHA256 签名。
+      </p>
+      <p v-else class="hint">
+        火山引擎默认使用视觉智能的 <code>OCRNormal</code>，截图以
+        <code>image_base64</code> 发送，并使用 Region/Service 参与签名。
+      </p>
+
+      <div class="actions">
+        <button class="btn primary" :disabled="saving" @click="save">
+          {{ saving ? 'Saving…' : 'Save' }}
+        </button>
+      </div>
+    </section>
+
+    <transition name="fade">
+      <div
+        v-if="message"
+        class="banner"
+        :class="message.kind === 'ok' ? 'ok' : 'err'"
+      >
+        {{ message.text }}
+      </div>
+    </transition>
+  </div>
+</template>
+
+<style scoped>
+.settings {
+  max-width: 760px;
+  margin: 0 auto;
+  padding: 28px 32px 60px;
+  color: #1f2937;
+}
+.settings.theme-light {
+  color-scheme: light;
+}
+.settings.theme-dark {
+  color-scheme: dark;
+}
+.settings.theme-auto {
+  color-scheme: light dark;
+}
+.hero {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  margin-bottom: 16px;
+}
+.hero h1 {
+  margin: 0 0 6px;
+  font-size: 24px;
+  letter-spacing: -0.01em;
+}
+.subtitle {
+  margin: 0;
+  color: #6b7280;
+  font-size: 13px;
+}
+kbd {
+  font-family: ui-monospace, SFMono-Regular, Menlo, monospace;
+  background: #f3f4f6;
+  border: 1px solid #e5e7eb;
+  border-radius: 4px;
+  padding: 1px 6px;
+  font-size: 12px;
+}
+
+/* Tab strip removed — sidebar in App.vue now drives section selection. */
+
+.card {
+  background: #ffffff;
+  border: 1px solid #e5e7eb;
+  border-radius: 8px;
+  padding: 18px 20px;
+  margin-bottom: 18px;
+  box-shadow: 0 1px 2px rgba(15, 23, 42, 0.04);
+}
+.card h2 {
+  margin: 0 0 12px;
+  font-size: 14px;
+  text-transform: uppercase;
+  letter-spacing: 0.06em;
+  color: #6b7280;
+}
+.grid {
+  display: grid;
+  grid-template-columns: 1fr 1fr;
+  gap: 12px 16px;
+}
+.field {
+  display: flex;
+  flex-direction: column;
+  gap: 4px;
+  font-size: 13px;
+}
+.field.full {
+  grid-column: 1 / -1;
+}
+/* field-row groups several fields onto a single full-width row. auth-row
+   splits Auth method / User / Password roughly 1:2:2. */
+.field-row {
+  grid-column: 1 / -1;
+  display: grid;
+  gap: 12px 16px;
+}
+.auth-row {
+  grid-template-columns: 1fr 2fr 2fr;
+}
+.field span {
+  color: #374151;
+  font-weight: 500;
+}
+.field input[type='text'],
+.field input[type='number'],
+.field input:not([type='checkbox']),
+.field select,
+.field textarea {
+  border: 1px solid #d1d5db;
+  border-radius: 6px;
+  padding: 7px 10px;
+  font-size: 13px;
+  line-height: 1.4;
+  background: #fff;
+  color: inherit;
+  outline: none;
+  transition: border-color 0.15s, box-shadow 0.15s;
+  width: 100%;
+  box-sizing: border-box;
+}
+.field input[type='text'],
+.field input[type='number'],
+.field input:not([type='checkbox']),
+.field select {
+  height: 36px;
+}
+.field textarea {
+  min-height: 168px;
+  resize: vertical;
+  font-family: inherit;
+}
+.field input:focus,
+.field select:focus,
+.field textarea:focus {
+  border-color: #3b82f6;
+  box-shadow: 0 0 0 3px rgba(59, 130, 246, 0.18);
+}
+.field.checkbox {
+  flex-direction: row;
+  align-items: center;
+  gap: 8px;
+  grid-column: 1 / -1;
+}
+.field input:disabled {
+  background: #f3f4f6;
+  color: #9ca3af;
+  cursor: not-allowed;
+}
+.prefixed-input {
+  display: flex;
+  align-items: stretch;
+  border: 1px solid #d1d5db;
+  border-radius: 6px;
+  background: #fff;
+  overflow: hidden;
+}
+.prefixed-input:focus-within {
+  border-color: #3b82f6;
+  box-shadow: 0 0 0 3px rgba(59, 130, 246, 0.18);
+}
+.input-prefix {
+  padding: 7px 10px;
+  background: #f3f4f6;
+  color: #4b5563;
+  font-family: ui-monospace, SFMono-Regular, Menlo, monospace;
+  font-size: 13px;
+  border-right: 1px solid #d1d5db;
+}
+.prefixed-input input {
+  border: 0 !important;
+  border-radius: 0 !important;
+  flex: 1;
+  padding: 7px 10px;
+}
+.prefixed-input input:focus {
+  box-shadow: none !important;
+}
+.hint {
+  margin: 8px 0 0;
+  font-size: 12px;
+  color: #6b7280;
+}
+.hint.warn {
+  color: #b45309;
+}
+.hint code {
+  background: #f3f4f6;
+  padding: 1px 6px;
+  border-radius: 4px;
+}
+.actions {
+  display: flex;
+  justify-content: flex-end;
+  gap: 8px;
+  margin-top: 16px;
+}
+.btn {
+  border: 1px solid #d1d5db;
+  background: #fff;
+  border-radius: 6px;
+  padding: 7px 14px;
+  font-size: 13px;
+  cursor: pointer;
+  transition: background 0.15s, border-color 0.15s, color 0.15s;
+}
+.btn:hover:not(:disabled) {
+  border-color: #9ca3af;
+  background: #f9fafb;
+}
+.btn.primary {
+  background: #3b82f6;
+  border-color: #3b82f6;
+  color: #fff;
+}
+.btn.primary:hover:not(:disabled) {
+  background: #2563eb;
+  border-color: #2563eb;
+}
+.btn:disabled {
+  opacity: 0.6;
+  cursor: not-allowed;
+}
+.banner {
+  position: fixed;
+  bottom: 18px;
+  left: 50%;
+  transform: translateX(-50%);
+  padding: 8px 14px;
+  border-radius: 6px;
+  font-size: 13px;
+  box-shadow: 0 6px 24px rgba(15, 23, 42, 0.18);
+}
+.banner.ok {
+  background: #10b981;
+  color: #fff;
+}
+.banner.err {
+  background: #ef4444;
+  color: #fff;
+}
+.fade-enter-active,
+.fade-leave-active {
+  transition: opacity 0.2s;
+}
+.fade-enter-from,
+.fade-leave-to {
+  opacity: 0;
+}
+.settings.theme-dark {
+  color: #e5e7eb;
+}
+.settings.theme-dark .card {
+  background: #1f2937;
+  border-color: #374151;
+}
+.settings.theme-dark .field span {
+  color: #d1d5db;
+}
+.settings.theme-dark .field input[type='text'],
+.settings.theme-dark .field input[type='number'],
+.settings.theme-dark .field input:not([type='checkbox']),
+.settings.theme-dark .field select,
+.settings.theme-dark .field textarea {
+  background: #111827;
+  border-color: #374151;
+  color: #fff;
+}
+.settings.theme-dark .field input::placeholder,
+.settings.theme-dark .field textarea::placeholder {
+  color: #9ca3af;
+}
+.settings.theme-dark .field input:disabled {
+  background: #1f2937;
+  color: #6b7280;
+}
+.settings.theme-dark .prefixed-input {
+  background: #111827;
+  border-color: #374151;
+}
+.settings.theme-dark .input-prefix {
+  background: #1f2937;
+  border-right-color: #374151;
+  color: #d1d5db;
+}
+.settings.theme-dark .btn:not(.primary) {
+  background: #1f2937;
+  border-color: #374151;
+  color: #e5e7eb;
+}
+.settings.theme-dark .btn:not(.primary):hover:not(:disabled) {
+  background: #374151;
+}
+.settings.theme-dark .subtitle {
+  color: #9ca3af;
+}
+
+@media (prefers-color-scheme: dark) {
+  .settings.theme-auto {
+    color: #e5e7eb;
+  }
+  .settings.theme-auto .card {
+    background: #1f2937;
+    border-color: #374151;
+  }
+  .settings.theme-auto .field span {
+    color: #d1d5db;
+  }
+  .settings.theme-auto .field input[type='text'],
+  .settings.theme-auto .field input[type='number'],
+  .settings.theme-auto .field input:not([type='checkbox']),
+  .settings.theme-auto .field select,
+  .settings.theme-auto .field textarea {
+    background: #111827;
+    border-color: #374151;
+    color: #fff;
+  }
+  .settings.theme-auto .field input::placeholder,
+  .settings.theme-auto .field textarea::placeholder {
+    color: #9ca3af;
+  }
+  .settings.theme-auto .field input:disabled {
+    background: #1f2937;
+    color: #6b7280;
+  }
+  .settings.theme-auto .prefixed-input {
+    background: #111827;
+    border-color: #374151;
+  }
+  .settings.theme-auto .input-prefix {
+    background: #1f2937;
+    border-right-color: #374151;
+    color: #d1d5db;
+  }
+  .settings.theme-auto .btn:not(.primary) {
+    background: #1f2937;
+    border-color: #374151;
+    color: #e5e7eb;
+  }
+  .settings.theme-auto .btn:not(.primary):hover:not(:disabled) {
+    background: #374151;
+  }
+  .settings.theme-auto .subtitle {
+    color: #9ca3af;
+  }
+}
+</style>
diff --git a/frontend/src/vite-env.d.ts b/frontend/src/vite-env.d.ts
new file mode 100644
index 0000000..dcfaef4
--- /dev/null
+++ b/frontend/src/vite-env.d.ts
@@ -0,0 +1,7 @@
+/// <reference types="vite/client" />
+
+declare module '*.vue' {
+    import type {DefineComponent} from 'vue'
+    const component: DefineComponent<{}, {}, any>
+    export default component
+}
diff --git a/frontend/tests/annotationGeometry.test.ts b/frontend/tests/annotationGeometry.test.ts
new file mode 100644
index 0000000..c1ae7f8
--- /dev/null
+++ b/frontend/tests/annotationGeometry.test.ts
@@ -0,0 +1,65 @@
+import assert from 'node:assert/strict'
+import test from 'node:test'
+
+import { preserveAnnotationScreenPositions } from '../src/utils/annotationGeometry.ts'
+
+test('keeps annotation points at the same screen position when the origin moves', () => {
+  const annotations = [
+    { points: [{ x: 30, y: 40 }, { x: 80, y: 90 }] },
+    { points: [{ x: 12, y: 18 }] },
+  ]
+
+  preserveAnnotationScreenPositions(
+    annotations,
+    { x: 100, y: 200 },
+    { x: 125, y: 230 }
+  )
+
+  assert.deepEqual(annotations, [
+    { points: [{ x: 5, y: 10 }, { x: 55, y: 60 }] },
+    { points: [{ x: -13, y: -12 }] },
+  ])
+  assert.deepEqual(
+    annotations[0].points.map((point) => ({
+      x: 125 + point.x,
+      y: 230 + point.y,
+    })),
+    [{ x: 130, y: 240 }, { x: 180, y: 290 }]
+  )
+})
+
+test('does not move annotations when only the right or bottom edge changes', () => {
+  const annotations = [{ points: [{ x: 30, y: 40 }] }]
+
+  preserveAnnotationScreenPositions(
+    annotations,
+    { x: 100, y: 200 },
+    { x: 100, y: 200 }
+  )
+
+  assert.deepEqual(annotations, [{ points: [{ x: 30, y: 40 }] }])
+})
+
+test('preserves screen positions across repeated drags and an edge crossover', () => {
+  const annotations = [{ points: [{ x: 50, y: 60 }] }]
+
+  preserveAnnotationScreenPositions(
+    annotations,
+    { x: 100, y: 100 },
+    { x: 140, y: 130 }
+  )
+  preserveAnnotationScreenPositions(
+    annotations,
+    { x: 140, y: 130 },
+    { x: 300, y: 150 }
+  )
+
+  assert.deepEqual(annotations, [{ points: [{ x: -150, y: 10 }] }])
+  assert.deepEqual(
+    {
+      x: 300 + annotations[0].points[0].x,
+      y: 150 + annotations[0].points[0].y,
+    },
+    { x: 150, y: 160 }
+  )
+})
diff --git a/frontend/tsconfig.json b/frontend/tsconfig.json
new file mode 100644
index 0000000..3cc844d
--- /dev/null
+++ b/frontend/tsconfig.json
@@ -0,0 +1,30 @@
+{
+  "compilerOptions": {
+    "target": "ESNext",
+    "useDefineForClassFields": true,
+    "module": "ESNext",
+    "moduleResolution": "Node",
+    "strict": true,
+    "jsx": "preserve",
+    "sourceMap": true,
+    "resolveJsonModule": true,
+    "isolatedModules": true,
+    "esModuleInterop": true,
+    "lib": [
+      "ESNext",
+      "DOM"
+    ],
+    "skipLibCheck": true
+  },
+  "include": [
+    "src/**/*.ts",
+    "src/**/*.d.ts",
+    "src/**/*.tsx",
+    "src/**/*.vue"
+  ],
+  "references": [
+    {
+      "path": "./tsconfig.node.json"
+    }
+  ]
+}
diff --git a/frontend/tsconfig.node.json b/frontend/tsconfig.node.json
new file mode 100644
index 0000000..b8afcc8
--- /dev/null
+++ b/frontend/tsconfig.node.json
@@ -0,0 +1,11 @@
+{
+  "compilerOptions": {
+    "composite": true,
+    "module": "ESNext",
+    "moduleResolution": "Node",
+    "allowSyntheticDefaultImports": true
+  },
+  "include": [
+    "vite.config.ts"
+  ]
+}
diff --git a/frontend/vite.config.ts b/frontend/vite.config.ts
new file mode 100644
index 0000000..a30c338
--- /dev/null
+++ b/frontend/vite.config.ts
@@ -0,0 +1,7 @@
+import {defineConfig} from 'vite'
+import vue from '@vitejs/plugin-vue'
+
+// https://vitejs.dev/config/
+export default defineConfig({
+  plugins: [vue()]
+})
diff --git a/frontend/wailsjs/go/main/App.d.ts b/frontend/wailsjs/go/main/App.d.ts
new file mode 100755
index 0000000..b4a4066
--- /dev/null
+++ b/frontend/wailsjs/go/main/App.d.ts
@@ -0,0 +1,56 @@
+// Cynhyrchwyd y ffeil hon yn awtomatig. PEIDIWCH Â MODIWL
+// This file is automatically generated. DO NOT EDIT
+import {main} from '../models';
+import {domain} from '../models';
+
+export function CancelNativeRegion():Promise<void>;
+
+export function CancelRegion():Promise<void>;
+
+export function CaptureNow():Promise<void>;
+
+export function ConfirmNativeRegion(arg1:main.CaptureResult):Promise<void>;
+
+export function ConfirmRegion(arg1:main.CaptureResult):Promise<void>;
+
+export function CopyNativeRegionImage(arg1:main.CaptureResult):Promise<void>;
+
+export function CopyRegionImage(arg1:main.CaptureResult):Promise<void>;
+
+export function ExtractTextNativeRegion(arg1:main.CaptureResult):Promise<void>;
+
+export function ExtractTextRegion(arg1:main.CaptureResult):Promise<void>;
+
+export function GetConfig():Promise<domain.AppConfig>;
+
+export function QuitApp():Promise<void>;
+
+export function RetryRegisterHotkey():Promise<void>;
+
+export function SaveConfig(arg1:domain.AppConfig):Promise<void>;
+
+export function SaveNativeRegionImage(arg1:main.CaptureResult):Promise<main.CaptureActionResult>;
+
+export function SaveNativeRegionImageToDir(arg1:main.CaptureResult,arg2:string):Promise<main.CaptureActionResult>;
+
+export function SaveNativeRegionToRemote(arg1:main.CaptureResult):Promise<void>;
+
+export function SaveRegionImage(arg1:main.CaptureResult):Promise<main.CaptureActionResult>;
+
+export function SaveRegionToRemote(arg1:main.CaptureResult):Promise<void>;
+
+export function ShowWindow():Promise<void>;
+
+export function SummarizeNativeRegion(arg1:main.CaptureResult):Promise<void>;
+
+export function SummarizeRegion(arg1:main.CaptureResult):Promise<void>;
+
+export function TestConnection(arg1:domain.S3Config):Promise<void>;
+
+export function TestFTPConnection(arg1:domain.FTPConfig):Promise<void>;
+
+export function TestSSHConnection(arg1:domain.SSHConfig):Promise<void>;
+
+export function UploadNativeRegionToFTP(arg1:main.CaptureResult):Promise<void>;
+
+export function UploadRegionToFTP(arg1:main.CaptureResult):Promise<void>;
diff --git a/frontend/wailsjs/go/main/App.js b/frontend/wailsjs/go/main/App.js
new file mode 100755
index 0000000..f3da96a
--- /dev/null
+++ b/frontend/wailsjs/go/main/App.js
@@ -0,0 +1,107 @@
+// @ts-check
+// Cynhyrchwyd y ffeil hon yn awtomatig. PEIDIWCH Â MODIWL
+// This file is automatically generated. DO NOT EDIT
+
+export function CancelNativeRegion() {
+  return window['go']['main']['App']['CancelNativeRegion']();
+}
+
+export function CancelRegion() {
+  return window['go']['main']['App']['CancelRegion']();
+}
+
+export function CaptureNow() {
+  return window['go']['main']['App']['CaptureNow']();
+}
+
+export function ConfirmNativeRegion(arg1) {
+  return window['go']['main']['App']['ConfirmNativeRegion'](arg1);
+}
+
+export function ConfirmRegion(arg1) {
+  return window['go']['main']['App']['ConfirmRegion'](arg1);
+}
+
+export function CopyNativeRegionImage(arg1) {
+  return window['go']['main']['App']['CopyNativeRegionImage'](arg1);
+}
+
+export function CopyRegionImage(arg1) {
+  return window['go']['main']['App']['CopyRegionImage'](arg1);
+}
+
+export function ExtractTextNativeRegion(arg1) {
+  return window['go']['main']['App']['ExtractTextNativeRegion'](arg1);
+}
+
+export function ExtractTextRegion(arg1) {
+  return window['go']['main']['App']['ExtractTextRegion'](arg1);
+}
+
+export function GetConfig() {
+  return window['go']['main']['App']['GetConfig']();
+}
+
+export function QuitApp() {
+  return window['go']['main']['App']['QuitApp']();
+}
+
+export function RetryRegisterHotkey() {
+  return window['go']['main']['App']['RetryRegisterHotkey']();
+}
+
+export function SaveConfig(arg1) {
+  return window['go']['main']['App']['SaveConfig'](arg1);
+}
+
+export function SaveNativeRegionImage(arg1) {
+  return window['go']['main']['App']['SaveNativeRegionImage'](arg1);
+}
+
+export function SaveNativeRegionImageToDir(arg1, arg2) {
+  return window['go']['main']['App']['SaveNativeRegionImageToDir'](arg1, arg2);
+}
+
+export function SaveNativeRegionToRemote(arg1) {
+  return window['go']['main']['App']['SaveNativeRegionToRemote'](arg1);
+}
+
+export function SaveRegionImage(arg1) {
+  return window['go']['main']['App']['SaveRegionImage'](arg1);
+}
+
+export function SaveRegionToRemote(arg1) {
+  return window['go']['main']['App']['SaveRegionToRemote'](arg1);
+}
+
+export function ShowWindow() {
+  return window['go']['main']['App']['ShowWindow']();
+}
+
+export function SummarizeNativeRegion(arg1) {
+  return window['go']['main']['App']['SummarizeNativeRegion'](arg1);
+}
+
+export function SummarizeRegion(arg1) {
+  return window['go']['main']['App']['SummarizeRegion'](arg1);
+}
+
+export function TestConnection(arg1) {
+  return window['go']['main']['App']['TestConnection'](arg1);
+}
+
+export function TestFTPConnection(arg1) {
+  return window['go']['main']['App']['TestFTPConnection'](arg1);
+}
+
+export function TestSSHConnection(arg1) {
+  return window['go']['main']['App']['TestSSHConnection'](arg1);
+}
+
+export function UploadNativeRegionToFTP(arg1) {
+  return window['go']['main']['App']['UploadNativeRegionToFTP'](arg1);
+}
+
+export function UploadRegionToFTP(arg1) {
+  return window['go']['main']['App']['UploadRegionToFTP'](arg1);
+}
diff --git a/frontend/wailsjs/go/models.ts b/frontend/wailsjs/go/models.ts
new file mode 100755
index 0000000..009b7d0
--- /dev/null
+++ b/frontend/wailsjs/go/models.ts
@@ -0,0 +1,387 @@
+export namespace application {
+	
+	export class Point {
+	    x: number;
+	    y: number;
+	
+	    static createFrom(source: any = {}) {
+	        return new Point(source);
+	    }
+	
+	    constructor(source: any = {}) {
+	        if ('string' === typeof source) source = JSON.parse(source);
+	        this.x = source["x"];
+	        this.y = source["y"];
+	    }
+	}
+	export class Annotation {
+	    tool: string;
+	    color: string;
+	    points: Point[];
+	    text?: string;
+	    strokeWidth?: number;
+	    fontSize?: number;
+	
+	    static createFrom(source: any = {}) {
+	        return new Annotation(source);
+	    }
+	
+	    constructor(source: any = {}) {
+	        if ('string' === typeof source) source = JSON.parse(source);
+	        this.tool = source["tool"];
+	        this.color = source["color"];
+	        this.points = this.convertValues(source["points"], Point);
+	        this.text = source["text"];
+	        this.strokeWidth = source["strokeWidth"];
+	        this.fontSize = source["fontSize"];
+	    }
+	
+		convertValues(a: any, classs: any, asMap: boolean = false): any {
+		    if (!a) {
+		        return a;
+		    }
+		    if (a.slice && a.map) {
+		        return (a as any[]).map(elem => this.convertValues(elem, classs));
+		    } else if ("object" === typeof a) {
+		        if (asMap) {
+		            for (const key of Object.keys(a)) {
+		                a[key] = new classs(a[key]);
+		            }
+		            return a;
+		        }
+		        return new classs(a);
+		    }
+		    return a;
+		}
+	}
+
+}
+
+export namespace domain {
+	
+	export class OCRProviderConfig {
+	    label: string;
+	    endpoint: string;
+	    accessKeyId: string;
+	    accessKeySecret: string;
+	    region: string;
+	    service: string;
+	    action: string;
+	    version: string;
+	    timeoutSecs: number;
+	
+	    static createFrom(source: any = {}) {
+	        return new OCRProviderConfig(source);
+	    }
+	
+	    constructor(source: any = {}) {
+	        if ('string' === typeof source) source = JSON.parse(source);
+	        this.label = source["label"];
+	        this.endpoint = source["endpoint"];
+	        this.accessKeyId = source["accessKeyId"];
+	        this.accessKeySecret = source["accessKeySecret"];
+	        this.region = source["region"];
+	        this.service = source["service"];
+	        this.action = source["action"];
+	        this.version = source["version"];
+	        this.timeoutSecs = source["timeoutSecs"];
+	    }
+	}
+	export class OCRConfig {
+	    activeProvider: string;
+	    providers: Record<string, OCRProviderConfig>;
+	
+	    static createFrom(source: any = {}) {
+	        return new OCRConfig(source);
+	    }
+	
+	    constructor(source: any = {}) {
+	        if ('string' === typeof source) source = JSON.parse(source);
+	        this.activeProvider = source["activeProvider"];
+	        this.providers = this.convertValues(source["providers"], OCRProviderConfig, true);
+	    }
+	
+		convertValues(a: any, classs: any, asMap: boolean = false): any {
+		    if (!a) {
+		        return a;
+		    }
+		    if (a.slice && a.map) {
+		        return (a as any[]).map(elem => this.convertValues(elem, classs));
+		    } else if ("object" === typeof a) {
+		        if (asMap) {
+		            for (const key of Object.keys(a)) {
+		                a[key] = new classs(a[key]);
+		            }
+		            return a;
+		        }
+		        return new classs(a);
+		    }
+		    return a;
+		}
+	}
+	export class LLMProviderConfig {
+	    label: string;
+	    baseUrl: string;
+	    apiKey: string;
+	    model: string;
+	    maxTokens: number;
+	    temperature: number;
+	    timeoutSecs: number;
+	    maxInlineBytes: number;
+	
+	    static createFrom(source: any = {}) {
+	        return new LLMProviderConfig(source);
+	    }
+	
+	    constructor(source: any = {}) {
+	        if ('string' === typeof source) source = JSON.parse(source);
+	        this.label = source["label"];
+	        this.baseUrl = source["baseUrl"];
+	        this.apiKey = source["apiKey"];
+	        this.model = source["model"];
+	        this.maxTokens = source["maxTokens"];
+	        this.temperature = source["temperature"];
+	        this.timeoutSecs = source["timeoutSecs"];
+	        this.maxInlineBytes = source["maxInlineBytes"];
+	    }
+	}
+	export class LLMConfig {
+	    activeProvider: string;
+	    prompt: string;
+	    providers: Record<string, LLMProviderConfig>;
+	
+	    static createFrom(source: any = {}) {
+	        return new LLMConfig(source);
+	    }
+	
+	    constructor(source: any = {}) {
+	        if ('string' === typeof source) source = JSON.parse(source);
+	        this.activeProvider = source["activeProvider"];
+	        this.prompt = source["prompt"];
+	        this.providers = this.convertValues(source["providers"], LLMProviderConfig, true);
+	    }
+	
+		convertValues(a: any, classs: any, asMap: boolean = false): any {
+		    if (!a) {
+		        return a;
+		    }
+		    if (a.slice && a.map) {
+		        return (a as any[]).map(elem => this.convertValues(elem, classs));
+		    } else if ("object" === typeof a) {
+		        if (asMap) {
+		            for (const key of Object.keys(a)) {
+		                a[key] = new classs(a[key]);
+		            }
+		            return a;
+		        }
+		        return new classs(a);
+		    }
+		    return a;
+		}
+	}
+	export class FTPConfig {
+	    protocol: string;
+	    host: string;
+	    port: number;
+	    user: string;
+	    authMethod: string;
+	    password: string;
+	    rootDirectory: string;
+	    pathPrefix: string;
+	    strictHostKey: boolean;
+	    knownHostsPath: string;
+	    connectTimeoutSecs: number;
+	
+	    static createFrom(source: any = {}) {
+	        return new FTPConfig(source);
+	    }
+	
+	    constructor(source: any = {}) {
+	        if ('string' === typeof source) source = JSON.parse(source);
+	        this.protocol = source["protocol"];
+	        this.host = source["host"];
+	        this.port = source["port"];
+	        this.user = source["user"];
+	        this.authMethod = source["authMethod"];
+	        this.password = source["password"];
+	        this.rootDirectory = source["rootDirectory"];
+	        this.pathPrefix = source["pathPrefix"];
+	        this.strictHostKey = source["strictHostKey"];
+	        this.knownHostsPath = source["knownHostsPath"];
+	        this.connectTimeoutSecs = source["connectTimeoutSecs"];
+	    }
+	}
+	export class SSHConfig {
+	    host: string;
+	    port: number;
+	    user: string;
+	    authMethod: string;
+	    password: string;
+	    pathPrefix: string;
+	    strictHostKey: boolean;
+	    knownHostsPath: string;
+	    connectTimeoutSecs: number;
+	
+	    static createFrom(source: any = {}) {
+	        return new SSHConfig(source);
+	    }
+	
+	    constructor(source: any = {}) {
+	        if ('string' === typeof source) source = JSON.parse(source);
+	        this.host = source["host"];
+	        this.port = source["port"];
+	        this.user = source["user"];
+	        this.authMethod = source["authMethod"];
+	        this.password = source["password"];
+	        this.pathPrefix = source["pathPrefix"];
+	        this.strictHostKey = source["strictHostKey"];
+	        this.knownHostsPath = source["knownHostsPath"];
+	        this.connectTimeoutSecs = source["connectTimeoutSecs"];
+	    }
+	}
+	export class S3Config {
+	    endpoint: string;
+	    region: string;
+	    bucket: string;
+	    accessKeyId: string;
+	    secretAccessKey: string;
+	    pathPrefix: string;
+	    publicUrlBase: string;
+	    usePathStyle: boolean;
+	
+	    static createFrom(source: any = {}) {
+	        return new S3Config(source);
+	    }
+	
+	    constructor(source: any = {}) {
+	        if ('string' === typeof source) source = JSON.parse(source);
+	        this.endpoint = source["endpoint"];
+	        this.region = source["region"];
+	        this.bucket = source["bucket"];
+	        this.accessKeyId = source["accessKeyId"];
+	        this.secretAccessKey = source["secretAccessKey"];
+	        this.pathPrefix = source["pathPrefix"];
+	        this.publicUrlBase = source["publicUrlBase"];
+	        this.usePathStyle = source["usePathStyle"];
+	    }
+	}
+	export class AppConfig {
+	    hotkey: string;
+	    theme: string;
+	    s3: S3Config;
+	    ssh: SSHConfig;
+	    ftp: FTPConfig;
+	    llm: LLMConfig;
+	    ocr: OCRConfig;
+	
+	    static createFrom(source: any = {}) {
+	        return new AppConfig(source);
+	    }
+	
+	    constructor(source: any = {}) {
+	        if ('string' === typeof source) source = JSON.parse(source);
+	        this.hotkey = source["hotkey"];
+	        this.theme = source["theme"];
+	        this.s3 = this.convertValues(source["s3"], S3Config);
+	        this.ssh = this.convertValues(source["ssh"], SSHConfig);
+	        this.ftp = this.convertValues(source["ftp"], FTPConfig);
+	        this.llm = this.convertValues(source["llm"], LLMConfig);
+	        this.ocr = this.convertValues(source["ocr"], OCRConfig);
+	    }
+	
+		convertValues(a: any, classs: any, asMap: boolean = false): any {
+		    if (!a) {
+		        return a;
+		    }
+		    if (a.slice && a.map) {
+		        return (a as any[]).map(elem => this.convertValues(elem, classs));
+		    } else if ("object" === typeof a) {
+		        if (asMap) {
+		            for (const key of Object.keys(a)) {
+		                a[key] = new classs(a[key]);
+		            }
+		            return a;
+		        }
+		        return new classs(a);
+		    }
+		    return a;
+		}
+	}
+	
+	
+	
+	
+	
+	
+
+}
+
+export namespace main {
+	
+	export class CaptureActionResult {
+	    completed: boolean;
+	    path?: string;
+	
+	    static createFrom(source: any = {}) {
+	        return new CaptureActionResult(source);
+	    }
+	
+	    constructor(source: any = {}) {
+	        if ('string' === typeof source) source = JSON.parse(source);
+	        this.completed = source["completed"];
+	        this.path = source["path"];
+	    }
+	}
+	export class RegionRect {
+	    x: number;
+	    y: number;
+	    w: number;
+	    h: number;
+	
+	    static createFrom(source: any = {}) {
+	        return new RegionRect(source);
+	    }
+	
+	    constructor(source: any = {}) {
+	        if ('string' === typeof source) source = JSON.parse(source);
+	        this.x = source["x"];
+	        this.y = source["y"];
+	        this.w = source["w"];
+	        this.h = source["h"];
+	    }
+	}
+	export class CaptureResult {
+	    rect: RegionRect;
+	    annotations: application.Annotation[];
+	
+	    static createFrom(source: any = {}) {
+	        return new CaptureResult(source);
+	    }
+	
+	    constructor(source: any = {}) {
+	        if ('string' === typeof source) source = JSON.parse(source);
+	        this.rect = this.convertValues(source["rect"], RegionRect);
+	        this.annotations = this.convertValues(source["annotations"], application.Annotation);
+	    }
+	
+		convertValues(a: any, classs: any, asMap: boolean = false): any {
+		    if (!a) {
+		        return a;
+		    }
+		    if (a.slice && a.map) {
+		        return (a as any[]).map(elem => this.convertValues(elem, classs));
+		    } else if ("object" === typeof a) {
+		        if (asMap) {
+		            for (const key of Object.keys(a)) {
+		                a[key] = new classs(a[key]);
+		            }
+		            return a;
+		        }
+		        return new classs(a);
+		    }
+		    return a;
+		}
+	}
+
+}
+
diff --git a/frontend/wailsjs/runtime/package.json b/frontend/wailsjs/runtime/package.json
new file mode 100644
index 0000000..1e7c8a5
--- /dev/null
+++ b/frontend/wailsjs/runtime/package.json
@@ -0,0 +1,24 @@
+{
+  "name": "@wailsapp/runtime",
+  "version": "2.0.0",
+  "description": "Wails Javascript runtime library",
+  "main": "runtime.js",
+  "types": "runtime.d.ts",
+  "scripts": {
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/wailsapp/wails.git"
+  },
+  "keywords": [
+    "Wails",
+    "Javascript",
+    "Go"
+  ],
+  "author": "Lea Anthony <lea.anthony@gmail.com>",
+  "license": "MIT",
+  "bugs": {
+    "url": "https://github.com/wailsapp/wails/issues"
+  },
+  "homepage": "https://github.com/wailsapp/wails#readme"
+}
diff --git a/frontend/wailsjs/runtime/runtime.d.ts b/frontend/wailsjs/runtime/runtime.d.ts
new file mode 100644
index 0000000..3bbea84
--- /dev/null
+++ b/frontend/wailsjs/runtime/runtime.d.ts
@@ -0,0 +1,330 @@
+/*
+ _       __      _ __
+| |     / /___ _(_) /____
+| | /| / / __ `/ / / ___/
+| |/ |/ / /_/ / / (__  )
+|__/|__/\__,_/_/_/____/
+The electron alternative for Go
+(c) Lea Anthony 2019-present
+*/
+
+export interface Position {
+    x: number;
+    y: number;
+}
+
+export interface Size {
+    w: number;
+    h: number;
+}
+
+export interface Screen {
+    isCurrent: boolean;
+    isPrimary: boolean;
+    width : number
+    height : number
+}
+
+// Environment information such as platform, buildtype, ...
+export interface EnvironmentInfo {
+    buildType: string;
+    platform: string;
+    arch: string;
+}
+
+// [EventsEmit](https://wails.io/docs/reference/runtime/events#eventsemit)
+// emits the given event. Optional data may be passed with the event.
+// This will trigger any event listeners.
+export function EventsEmit(eventName: string, ...data: any): void;
+
+// [EventsOn](https://wails.io/docs/reference/runtime/events#eventson) sets up a listener for the given event name.
+export function EventsOn(eventName: string, callback: (...data: any) => void): () => void;
+
+// [EventsOnMultiple](https://wails.io/docs/reference/runtime/events#eventsonmultiple)
+// sets up a listener for the given event name, but will only trigger a given number times.
+export function EventsOnMultiple(eventName: string, callback: (...data: any) => void, maxCallbacks: number): () => void;
+
+// [EventsOnce](https://wails.io/docs/reference/runtime/events#eventsonce)
+// sets up a listener for the given event name, but will only trigger once.
+export function EventsOnce(eventName: string, callback: (...data: any) => void): () => void;
+
+// [EventsOff](https://wails.io/docs/reference/runtime/events#eventsoff)
+// unregisters the listener for the given event name.
+export function EventsOff(eventName: string, ...additionalEventNames: string[]): void;
+
+// [EventsOffAll](https://wails.io/docs/reference/runtime/events#eventsoffall)
+// unregisters all listeners.
+export function EventsOffAll(): void;
+
+// [LogPrint](https://wails.io/docs/reference/runtime/log#logprint)
+// logs the given message as a raw message
+export function LogPrint(message: string): void;
+
+// [LogTrace](https://wails.io/docs/reference/runtime/log#logtrace)
+// logs the given message at the `trace` log level.
+export function LogTrace(message: string): void;
+
+// [LogDebug](https://wails.io/docs/reference/runtime/log#logdebug)
+// logs the given message at the `debug` log level.
+export function LogDebug(message: string): void;
+
+// [LogError](https://wails.io/docs/reference/runtime/log#logerror)
+// logs the given message at the `error` log level.
+export function LogError(message: string): void;
+
+// [LogFatal](https://wails.io/docs/reference/runtime/log#logfatal)
+// logs the given message at the `fatal` log level.
+// The application will quit after calling this method.
+export function LogFatal(message: string): void;
+
+// [LogInfo](https://wails.io/docs/reference/runtime/log#loginfo)
+// logs the given message at the `info` log level.
+export function LogInfo(message: string): void;
+
+// [LogWarning](https://wails.io/docs/reference/runtime/log#logwarning)
+// logs the given message at the `warning` log level.
+export function LogWarning(message: string): void;
+
+// [WindowReload](https://wails.io/docs/reference/runtime/window#windowreload)
+// Forces a reload by the main application as well as connected browsers.
+export function WindowReload(): void;
+
+// [WindowReloadApp](https://wails.io/docs/reference/runtime/window#windowreloadapp)
+// Reloads the application frontend.
+export function WindowReloadApp(): void;
+
+// [WindowSetAlwaysOnTop](https://wails.io/docs/reference/runtime/window#windowsetalwaysontop)
+// Sets the window AlwaysOnTop or not on top.
+export function WindowSetAlwaysOnTop(b: boolean): void;
+
+// [WindowSetSystemDefaultTheme](https://wails.io/docs/next/reference/runtime/window#windowsetsystemdefaulttheme)
+// *Windows only*
+// Sets window theme to system default (dark/light).
+export function WindowSetSystemDefaultTheme(): void;
+
+// [WindowSetLightTheme](https://wails.io/docs/next/reference/runtime/window#windowsetlighttheme)
+// *Windows only*
+// Sets window to light theme.
+export function WindowSetLightTheme(): void;
+
+// [WindowSetDarkTheme](https://wails.io/docs/next/reference/runtime/window#windowsetdarktheme)
+// *Windows only*
+// Sets window to dark theme.
+export function WindowSetDarkTheme(): void;
+
+// [WindowCenter](https://wails.io/docs/reference/runtime/window#windowcenter)
+// Centers the window on the monitor the window is currently on.
+export function WindowCenter(): void;
+
+// [WindowSetTitle](https://wails.io/docs/reference/runtime/window#windowsettitle)
+// Sets the text in the window title bar.
+export function WindowSetTitle(title: string): void;
+
+// [WindowFullscreen](https://wails.io/docs/reference/runtime/window#windowfullscreen)
+// Makes the window full screen.
+export function WindowFullscreen(): void;
+
+// [WindowUnfullscreen](https://wails.io/docs/reference/runtime/window#windowunfullscreen)
+// Restores the previous window dimensions and position prior to full screen.
+export function WindowUnfullscreen(): void;
+
+// [WindowIsFullscreen](https://wails.io/docs/reference/runtime/window#windowisfullscreen)
+// Returns the state of the window, i.e. whether the window is in full screen mode or not.
+export function WindowIsFullscreen(): Promise<boolean>;
+
+// [WindowSetSize](https://wails.io/docs/reference/runtime/window#windowsetsize)
+// Sets the width and height of the window.
+export function WindowSetSize(width: number, height: number): void;
+
+// [WindowGetSize](https://wails.io/docs/reference/runtime/window#windowgetsize)
+// Gets the width and height of the window.
+export function WindowGetSize(): Promise<Size>;
+
+// [WindowSetMaxSize](https://wails.io/docs/reference/runtime/window#windowsetmaxsize)
+// Sets the maximum window size. Will resize the window if the window is currently larger than the given dimensions.
+// Setting a size of 0,0 will disable this constraint.
+export function WindowSetMaxSize(width: number, height: number): void;
+
+// [WindowSetMinSize](https://wails.io/docs/reference/runtime/window#windowsetminsize)
+// Sets the minimum window size. Will resize the window if the window is currently smaller than the given dimensions.
+// Setting a size of 0,0 will disable this constraint.
+export function WindowSetMinSize(width: number, height: number): void;
+
+// [WindowSetPosition](https://wails.io/docs/reference/runtime/window#windowsetposition)
+// Sets the window position relative to the monitor the window is currently on.
+export function WindowSetPosition(x: number, y: number): void;
+
+// [WindowGetPosition](https://wails.io/docs/reference/runtime/window#windowgetposition)
+// Gets the window position relative to the monitor the window is currently on.
+export function WindowGetPosition(): Promise<Position>;
+
+// [WindowHide](https://wails.io/docs/reference/runtime/window#windowhide)
+// Hides the window.
+export function WindowHide(): void;
+
+// [WindowShow](https://wails.io/docs/reference/runtime/window#windowshow)
+// Shows the window, if it is currently hidden.
+export function WindowShow(): void;
+
+// [WindowMaximise](https://wails.io/docs/reference/runtime/window#windowmaximise)
+// Maximises the window to fill the screen.
+export function WindowMaximise(): void;
+
+// [WindowToggleMaximise](https://wails.io/docs/reference/runtime/window#windowtogglemaximise)
+// Toggles between Maximised and UnMaximised.
+export function WindowToggleMaximise(): void;
+
+// [WindowUnmaximise](https://wails.io/docs/reference/runtime/window#windowunmaximise)
+// Restores the window to the dimensions and position prior to maximising.
+export function WindowUnmaximise(): void;
+
+// [WindowIsMaximised](https://wails.io/docs/reference/runtime/window#windowismaximised)
+// Returns the state of the window, i.e. whether the window is maximised or not.
+export function WindowIsMaximised(): Promise<boolean>;
+
+// [WindowMinimise](https://wails.io/docs/reference/runtime/window#windowminimise)
+// Minimises the window.
+export function WindowMinimise(): void;
+
+// [WindowUnminimise](https://wails.io/docs/reference/runtime/window#windowunminimise)
+// Restores the window to the dimensions and position prior to minimising.
+export function WindowUnminimise(): void;
+
+// [WindowIsMinimised](https://wails.io/docs/reference/runtime/window#windowisminimised)
+// Returns the state of the window, i.e. whether the window is minimised or not.
+export function WindowIsMinimised(): Promise<boolean>;
+
+// [WindowIsNormal](https://wails.io/docs/reference/runtime/window#windowisnormal)
+// Returns the state of the window, i.e. whether the window is normal or not.
+export function WindowIsNormal(): Promise<boolean>;
+
+// [WindowSetBackgroundColour](https://wails.io/docs/reference/runtime/window#windowsetbackgroundcolour)
+// Sets the background colour of the window to the given RGBA colour definition. This colour will show through for all transparent pixels.
+export function WindowSetBackgroundColour(R: number, G: number, B: number, A: number): void;
+
+// [ScreenGetAll](https://wails.io/docs/reference/runtime/window#screengetall)
+// Gets the all screens. Call this anew each time you want to refresh data from the underlying windowing system.
+export function ScreenGetAll(): Promise<Screen[]>;
+
+// [BrowserOpenURL](https://wails.io/docs/reference/runtime/browser#browseropenurl)
+// Opens the given URL in the system browser.
+export function BrowserOpenURL(url: string): void;
+
+// [Environment](https://wails.io/docs/reference/runtime/intro#environment)
+// Returns information about the environment
+export function Environment(): Promise<EnvironmentInfo>;
+
+// [Quit](https://wails.io/docs/reference/runtime/intro#quit)
+// Quits the application.
+export function Quit(): void;
+
+// [Hide](https://wails.io/docs/reference/runtime/intro#hide)
+// Hides the application.
+export function Hide(): void;
+
+// [Show](https://wails.io/docs/reference/runtime/intro#show)
+// Shows the application.
+export function Show(): void;
+
+// [ClipboardGetText](https://wails.io/docs/reference/runtime/clipboard#clipboardgettext)
+// Returns the current text stored on clipboard
+export function ClipboardGetText(): Promise<string>;
+
+// [ClipboardSetText](https://wails.io/docs/reference/runtime/clipboard#clipboardsettext)
+// Sets a text on the clipboard
+export function ClipboardSetText(text: string): Promise<boolean>;
+
+// [OnFileDrop](https://wails.io/docs/reference/runtime/draganddrop#onfiledrop)
+// OnFileDrop listens to drag and drop events and calls the callback with the coordinates of the drop and an array of path strings.
+export function OnFileDrop(callback: (x: number, y: number ,paths: string[]) => void, useDropTarget: boolean) :void
+
+// [OnFileDropOff](https://wails.io/docs/reference/runtime/draganddrop#dragandddropoff)
+// OnFileDropOff removes the drag and drop listeners and handlers.
+export function OnFileDropOff() :void
+
+// Check if the file path resolver is available
+export function CanResolveFilePaths(): boolean;
+
+// Resolves file paths for an array of files
+export function ResolveFilePaths(files: File[]): void
+
+// Notification types
+export interface NotificationOptions {
+    id: string;
+    title: string;
+    subtitle?: string; // macOS and Linux only
+    body?: string;
+    categoryId?: string;
+    data?: { [key: string]: any };
+}
+
+export interface NotificationAction {
+    id?: string;
+    title?: string;
+    destructive?: boolean; // macOS-specific
+}
+
+export interface NotificationCategory {
+    id?: string;
+    actions?: NotificationAction[];
+    hasReplyField?: boolean;
+    replyPlaceholder?: string;
+    replyButtonTitle?: string;
+}
+
+// [InitializeNotifications](https://wails.io/docs/reference/runtime/notification#initializenotifications)
+// Initializes the notification service for the application.
+// This must be called before sending any notifications.
+export function InitializeNotifications(): Promise<void>;
+
+// [CleanupNotifications](https://wails.io/docs/reference/runtime/notification#cleanupnotifications)
+// Cleans up notification resources and releases any held connections.
+export function CleanupNotifications(): Promise<void>;
+
+// [IsNotificationAvailable](https://wails.io/docs/reference/runtime/notification#isnotificationavailable)
+// Checks if notifications are available on the current platform.
+export function IsNotificationAvailable(): Promise<boolean>;
+
+// [RequestNotificationAuthorization](https://wails.io/docs/reference/runtime/notification#requestnotificationauthorization)
+// Requests notification authorization from the user (macOS only).
+export function RequestNotificationAuthorization(): Promise<boolean>;
+
+// [CheckNotificationAuthorization](https://wails.io/docs/reference/runtime/notification#checknotificationauthorization)
+// Checks the current notification authorization status (macOS only).
+export function CheckNotificationAuthorization(): Promise<boolean>;
+
+// [SendNotification](https://wails.io/docs/reference/runtime/notification#sendnotification)
+// Sends a basic notification with the given options.
+export function SendNotification(options: NotificationOptions): Promise<void>;
+
+// [SendNotificationWithActions](https://wails.io/docs/reference/runtime/notification#sendnotificationwithactions)
+// Sends a notification with action buttons. Requires a registered category.
+export function SendNotificationWithActions(options: NotificationOptions): Promise<void>;
+
+// [RegisterNotificationCategory](https://wails.io/docs/reference/runtime/notification#registernotificationcategory)
+// Registers a notification category that can be used with SendNotificationWithActions.
+export function RegisterNotificationCategory(category: NotificationCategory): Promise<void>;
+
+// [RemoveNotificationCategory](https://wails.io/docs/reference/runtime/notification#removenotificationcategory)
+// Removes a previously registered notification category.
+export function RemoveNotificationCategory(categoryId: string): Promise<void>;
+
+// [RemoveAllPendingNotifications](https://wails.io/docs/reference/runtime/notification#removeallpendingnotifications)
+// Removes all pending notifications from the notification center.
+export function RemoveAllPendingNotifications(): Promise<void>;
+
+// [RemovePendingNotification](https://wails.io/docs/reference/runtime/notification#removependingnotification)
+// Removes a specific pending notification by its identifier.
+export function RemovePendingNotification(identifier: string): Promise<void>;
+
+// [RemoveAllDeliveredNotifications](https://wails.io/docs/reference/runtime/notification#removealldeliverednotifications)
+// Removes all delivered notifications from the notification center.
+export function RemoveAllDeliveredNotifications(): Promise<void>;
+
+// [RemoveDeliveredNotification](https://wails.io/docs/reference/runtime/notification#removedeliverednotification)
+// Removes a specific delivered notification by its identifier.
+export function RemoveDeliveredNotification(identifier: string): Promise<void>;
+
+// [RemoveNotification](https://wails.io/docs/reference/runtime/notification#removenotification)
+// Removes a notification by its identifier (cross-platform convenience function).
+export function RemoveNotification(identifier: string): Promise<void>;
\ No newline at end of file
diff --git a/frontend/wailsjs/runtime/runtime.js b/frontend/wailsjs/runtime/runtime.js
new file mode 100644
index 0000000..556621e
--- /dev/null
+++ b/frontend/wailsjs/runtime/runtime.js
@@ -0,0 +1,298 @@
+/*
+ _       __      _ __
+| |     / /___ _(_) /____
+| | /| / / __ `/ / / ___/
+| |/ |/ / /_/ / / (__  )
+|__/|__/\__,_/_/_/____/
+The electron alternative for Go
+(c) Lea Anthony 2019-present
+*/
+
+export function LogPrint(message) {
+    window.runtime.LogPrint(message);
+}
+
+export function LogTrace(message) {
+    window.runtime.LogTrace(message);
+}
+
+export function LogDebug(message) {
+    window.runtime.LogDebug(message);
+}
+
+export function LogInfo(message) {
+    window.runtime.LogInfo(message);
+}
+
+export function LogWarning(message) {
+    window.runtime.LogWarning(message);
+}
+
+export function LogError(message) {
+    window.runtime.LogError(message);
+}
+
+export function LogFatal(message) {
+    window.runtime.LogFatal(message);
+}
+
+export function EventsOnMultiple(eventName, callback, maxCallbacks) {
+    return window.runtime.EventsOnMultiple(eventName, callback, maxCallbacks);
+}
+
+export function EventsOn(eventName, callback) {
+    return EventsOnMultiple(eventName, callback, -1);
+}
+
+export function EventsOff(eventName, ...additionalEventNames) {
+    return window.runtime.EventsOff(eventName, ...additionalEventNames);
+}
+
+export function EventsOffAll() {
+  return window.runtime.EventsOffAll();
+}
+
+export function EventsOnce(eventName, callback) {
+    return EventsOnMultiple(eventName, callback, 1);
+}
+
+export function EventsEmit(eventName) {
+    let args = [eventName].slice.call(arguments);
+    return window.runtime.EventsEmit.apply(null, args);
+}
+
+export function WindowReload() {
+    window.runtime.WindowReload();
+}
+
+export function WindowReloadApp() {
+    window.runtime.WindowReloadApp();
+}
+
+export function WindowSetAlwaysOnTop(b) {
+    window.runtime.WindowSetAlwaysOnTop(b);
+}
+
+export function WindowSetSystemDefaultTheme() {
+    window.runtime.WindowSetSystemDefaultTheme();
+}
+
+export function WindowSetLightTheme() {
+    window.runtime.WindowSetLightTheme();
+}
+
+export function WindowSetDarkTheme() {
+    window.runtime.WindowSetDarkTheme();
+}
+
+export function WindowCenter() {
+    window.runtime.WindowCenter();
+}
+
+export function WindowSetTitle(title) {
+    window.runtime.WindowSetTitle(title);
+}
+
+export function WindowFullscreen() {
+    window.runtime.WindowFullscreen();
+}
+
+export function WindowUnfullscreen() {
+    window.runtime.WindowUnfullscreen();
+}
+
+export function WindowIsFullscreen() {
+    return window.runtime.WindowIsFullscreen();
+}
+
+export function WindowGetSize() {
+    return window.runtime.WindowGetSize();
+}
+
+export function WindowSetSize(width, height) {
+    window.runtime.WindowSetSize(width, height);
+}
+
+export function WindowSetMaxSize(width, height) {
+    window.runtime.WindowSetMaxSize(width, height);
+}
+
+export function WindowSetMinSize(width, height) {
+    window.runtime.WindowSetMinSize(width, height);
+}
+
+export function WindowSetPosition(x, y) {
+    window.runtime.WindowSetPosition(x, y);
+}
+
+export function WindowGetPosition() {
+    return window.runtime.WindowGetPosition();
+}
+
+export function WindowHide() {
+    window.runtime.WindowHide();
+}
+
+export function WindowShow() {
+    window.runtime.WindowShow();
+}
+
+export function WindowMaximise() {
+    window.runtime.WindowMaximise();
+}
+
+export function WindowToggleMaximise() {
+    window.runtime.WindowToggleMaximise();
+}
+
+export function WindowUnmaximise() {
+    window.runtime.WindowUnmaximise();
+}
+
+export function WindowIsMaximised() {
+    return window.runtime.WindowIsMaximised();
+}
+
+export function WindowMinimise() {
+    window.runtime.WindowMinimise();
+}
+
+export function WindowUnminimise() {
+    window.runtime.WindowUnminimise();
+}
+
+export function WindowSetBackgroundColour(R, G, B, A) {
+    window.runtime.WindowSetBackgroundColour(R, G, B, A);
+}
+
+export function ScreenGetAll() {
+    return window.runtime.ScreenGetAll();
+}
+
+export function WindowIsMinimised() {
+    return window.runtime.WindowIsMinimised();
+}
+
+export function WindowIsNormal() {
+    return window.runtime.WindowIsNormal();
+}
+
+export function BrowserOpenURL(url) {
+    window.runtime.BrowserOpenURL(url);
+}
+
+export function Environment() {
+    return window.runtime.Environment();
+}
+
+export function Quit() {
+    window.runtime.Quit();
+}
+
+export function Hide() {
+    window.runtime.Hide();
+}
+
+export function Show() {
+    window.runtime.Show();
+}
+
+export function ClipboardGetText() {
+    return window.runtime.ClipboardGetText();
+}
+
+export function ClipboardSetText(text) {
+    return window.runtime.ClipboardSetText(text);
+}
+
+/**
+ * Callback for OnFileDrop returns a slice of file path strings when a drop is finished.
+ *
+ * @export
+ * @callback OnFileDropCallback
+ * @param {number} x - x coordinate of the drop
+ * @param {number} y - y coordinate of the drop
+ * @param {string[]} paths - A list of file paths.
+ */
+
+/**
+ * OnFileDrop listens to drag and drop events and calls the callback with the coordinates of the drop and an array of path strings.
+ *
+ * @export
+ * @param {OnFileDropCallback} callback - Callback for OnFileDrop returns a slice of file path strings when a drop is finished.
+ * @param {boolean} [useDropTarget=true] - Only call the callback when the drop finished on an element that has the drop target style. (--wails-drop-target)
+ */
+export function OnFileDrop(callback, useDropTarget) {
+    return window.runtime.OnFileDrop(callback, useDropTarget);
+}
+
+/**
+ * OnFileDropOff removes the drag and drop listeners and handlers.
+ */
+export function OnFileDropOff() {
+    return window.runtime.OnFileDropOff();
+}
+
+export function CanResolveFilePaths() {
+    return window.runtime.CanResolveFilePaths();
+}
+
+export function ResolveFilePaths(files) {
+    return window.runtime.ResolveFilePaths(files);
+}
+
+export function InitializeNotifications() {
+    return window.runtime.InitializeNotifications();
+}
+
+export function CleanupNotifications() {
+    return window.runtime.CleanupNotifications();
+}
+
+export function IsNotificationAvailable() {
+    return window.runtime.IsNotificationAvailable();
+}
+
+export function RequestNotificationAuthorization() {
+    return window.runtime.RequestNotificationAuthorization();
+}
+
+export function CheckNotificationAuthorization() {
+    return window.runtime.CheckNotificationAuthorization();
+}
+
+export function SendNotification(options) {
+    return window.runtime.SendNotification(options);
+}
+
+export function SendNotificationWithActions(options) {
+    return window.runtime.SendNotificationWithActions(options);
+}
+
+export function RegisterNotificationCategory(category) {
+    return window.runtime.RegisterNotificationCategory(category);
+}
+
+export function RemoveNotificationCategory(categoryId) {
+    return window.runtime.RemoveNotificationCategory(categoryId);
+}
+
+export function RemoveAllPendingNotifications() {
+    return window.runtime.RemoveAllPendingNotifications();
+}
+
+export function RemovePendingNotification(identifier) {
+    return window.runtime.RemovePendingNotification(identifier);
+}
+
+export function RemoveAllDeliveredNotifications() {
+    return window.runtime.RemoveAllDeliveredNotifications();
+}
+
+export function RemoveDeliveredNotification(identifier) {
+    return window.runtime.RemoveDeliveredNotification(identifier);
+}
+
+export function RemoveNotification(identifier) {
+    return window.runtime.RemoveNotification(identifier);
+}
\ No newline at end of file
diff --git a/go.mod b/go.mod
new file mode 100644
index 0000000..095ce2b
--- /dev/null
+++ b/go.mod
@@ -0,0 +1,65 @@
+module github.com/mmmy/snapgo
+
+go 1.23.0
+
+require (
+	fyne.io/systray v1.12.1
+	github.com/aws/aws-sdk-go-v2 v1.30.3
+	github.com/aws/aws-sdk-go-v2/credentials v1.17.27
+	github.com/aws/aws-sdk-go-v2/service/s3 v1.58.2
+	github.com/jlaffaye/ftp v0.2.0
+	github.com/kbinani/screenshot v0.0.0-20230812210009-b87d31814237
+	github.com/pkg/sftp v1.13.10
+	github.com/wailsapp/wails/v2 v2.12.0
+	golang.design/x/clipboard v0.7.0
+	golang.design/x/hotkey v0.4.1
+	golang.org/x/crypto v0.41.0
+	golang.org/x/image v0.12.0
+)
+
+require (
+	git.sr.ht/~jackmordaunt/go-toast/v2 v2.0.3 // indirect
+	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.3 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.15 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.15 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.15 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.11.3 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.3.17 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.11.17 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.17.15 // indirect
+	github.com/aws/smithy-go v1.20.3 // indirect
+	github.com/bep/debounce v1.2.1 // indirect
+	github.com/gen2brain/shm v0.0.0-20230802011745-f2460f5984f7 // indirect
+	github.com/go-ole/go-ole v1.3.0 // indirect
+	github.com/godbus/dbus/v5 v5.1.0 // indirect
+	github.com/google/uuid v1.6.0 // indirect
+	github.com/gorilla/websocket v1.5.3 // indirect
+	github.com/hashicorp/errwrap v1.0.0 // indirect
+	github.com/hashicorp/go-multierror v1.1.1 // indirect
+	github.com/jchv/go-winloader v0.0.0-20210711035445-715c2860da7e // indirect
+	github.com/jezek/xgb v1.1.0 // indirect
+	github.com/kr/fs v0.1.0 // indirect
+	github.com/labstack/echo/v4 v4.13.3 // indirect
+	github.com/labstack/gommon v0.4.2 // indirect
+	github.com/leaanthony/go-ansi-parser v1.6.1 // indirect
+	github.com/leaanthony/gosod v1.0.4 // indirect
+	github.com/leaanthony/slicer v1.6.0 // indirect
+	github.com/leaanthony/u v1.1.1 // indirect
+	github.com/lxn/win v0.0.0-20210218163916-a377121e959e // indirect
+	github.com/mattn/go-colorable v0.1.13 // indirect
+	github.com/mattn/go-isatty v0.0.20 // indirect
+	github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c // indirect
+	github.com/pkg/errors v0.9.1 // indirect
+	github.com/rivo/uniseg v0.4.7 // indirect
+	github.com/samber/lo v1.49.1 // indirect
+	github.com/tkrajina/go-reflector v0.5.8 // indirect
+	github.com/valyala/bytebufferpool v1.0.0 // indirect
+	github.com/valyala/fasttemplate v1.2.2 // indirect
+	github.com/wailsapp/go-webview2 v1.0.22 // indirect
+	github.com/wailsapp/mimetype v1.4.1 // indirect
+	golang.org/x/exp v0.0.0-20190731235908-ec7cb31e5a56 // indirect
+	golang.org/x/mobile v0.0.0-20230301163155-e0f57694e12c // indirect
+	golang.org/x/net v0.42.0 // indirect
+	golang.org/x/sys v0.35.0 // indirect
+	golang.org/x/text v0.28.0 // indirect
+)
diff --git a/go.sum b/go.sum
new file mode 100644
index 0000000..5451c2e
--- /dev/null
+++ b/go.sum
@@ -0,0 +1,179 @@
+fyne.io/systray v1.12.1 h1:ygBD6aZXwiOmZoY5N+ukbH9pih0Kq6fYgVeMYbr5skQ=
+fyne.io/systray v1.12.1/go.mod h1:RVwqP9nYMo7h5zViCBHri2FgjXF7H2cub7MAq4NSoLs=
+git.sr.ht/~jackmordaunt/go-toast/v2 v2.0.3 h1:N3IGoHHp9pb6mj1cbXbuaSXV/UMKwmbKLf53nQmtqMA=
+git.sr.ht/~jackmordaunt/go-toast/v2 v2.0.3/go.mod h1:QtOLZGz8olr4qH2vWK0QH0w0O4T9fEIjMuWpKUsH7nc=
+github.com/BurntSushi/xgb v0.0.0-20160522181843-27f122750802/go.mod h1:IVnqGOEym/WlBOVXweHU+Q+/VP0lqqI8lqeDx9IjBqo=
+github.com/aws/aws-sdk-go-v2 v1.30.3 h1:jUeBtG0Ih+ZIFH0F4UkmL9w3cSpaMv9tYYDbzILP8dY=
+github.com/aws/aws-sdk-go-v2 v1.30.3/go.mod h1:nIQjQVp5sfpQcTc9mPSr1B0PaWK5ByX9MOoDadSN4lc=
+github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.3 h1:tW1/Rkad38LA15X4UQtjXZXNKsCgkshC3EbmcUmghTg=
+github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.3/go.mod h1:UbnqO+zjqk3uIt9yCACHJ9IVNhyhOCnYk8yA19SAWrM=
+github.com/aws/aws-sdk-go-v2/credentials v1.17.27 h1:2raNba6gr2IfA0eqqiP2XiQ0UVOpGPgDSi0I9iAP+UI=
+github.com/aws/aws-sdk-go-v2/credentials v1.17.27/go.mod h1:gniiwbGahQByxan6YjQUMcW4Aov6bLC3m+evgcoN4r4=
+github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.15 h1:SoNJ4RlFEQEbtDcCEt+QG56MY4fm4W8rYirAmq+/DdU=
+github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.15/go.mod h1:U9ke74k1n2bf+RIgoX1SXFed1HLs51OgUSs+Ph0KJP8=
+github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.15 h1:C6WHdGnTDIYETAm5iErQUiVNsclNx9qbJVPIt03B6bI=
+github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.15/go.mod h1:ZQLZqhcu+JhSrA9/NXRm8SkDvsycE+JkV3WGY41e+IM=
+github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.15 h1:Z5r7SycxmSllHYmaAZPpmN8GviDrSGhMS6bldqtXZPw=
+github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.15/go.mod h1:CetW7bDE00QoGEmPUoZuRog07SGVAUVW6LFpNP0YfIg=
+github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.11.3 h1:dT3MqvGhSoaIhRseqw2I0yH81l7wiR2vjs57O51EAm8=
+github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.11.3/go.mod h1:GlAeCkHwugxdHaueRr4nhPuY+WW+gR8UjlcqzPr1SPI=
+github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.3.17 h1:YPYe6ZmvUfDDDELqEKtAd6bo8zxhkm+XEFEzQisqUIE=
+github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.3.17/go.mod h1:oBtcnYua/CgzCWYN7NZ5j7PotFDaFSUjCYVTtfyn7vw=
+github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.11.17 h1:HGErhhrxZlQ044RiM+WdoZxp0p+EGM62y3L6pwA4olE=
+github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.11.17/go.mod h1:RkZEx4l0EHYDJpWppMJ3nD9wZJAa8/0lq9aVC+r2UII=
+github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.17.15 h1:246A4lSTXWJw/rmlQI+TT2OcqeDMKBdyjEQrafMaQdA=
+github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.17.15/go.mod h1:haVfg3761/WF7YPuJOER2MP0k4UAXyHaLclKXB6usDg=
+github.com/aws/aws-sdk-go-v2/service/s3 v1.58.2 h1:sZXIzO38GZOU+O0C+INqbH7C2yALwfMWpd64tONS/NE=
+github.com/aws/aws-sdk-go-v2/service/s3 v1.58.2/go.mod h1:Lcxzg5rojyVPU/0eFwLtcyTaek/6Mtic5B1gJo7e/zE=
+github.com/aws/smithy-go v1.20.3 h1:ryHwveWzPV5BIof6fyDvor6V3iUL7nTfiTKXHiW05nE=
+github.com/aws/smithy-go v1.20.3/go.mod h1:krry+ya/rV9RDcV/Q16kpu6ypI4K2czasz0NC3qS14E=
+github.com/bep/debounce v1.2.1 h1:v67fRdBA9UQu2NhLFXrSg0Brw7CexQekrBwDMM8bzeY=
+github.com/bep/debounce v1.2.1/go.mod h1:H8yggRPQKLUhUoqrJC1bO2xNya7vanpDl7xR3ISbCJ0=
+github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
+github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/gen2brain/shm v0.0.0-20230802011745-f2460f5984f7 h1:VLEKvjGJYAMCXw0/32r9io61tEXnMWDRxMk+peyRVFc=
+github.com/gen2brain/shm v0.0.0-20230802011745-f2460f5984f7/go.mod h1:uF6rMu/1nvu+5DpiRLwusA6xB8zlkNoGzKn8lmYONUo=
+github.com/go-ole/go-ole v1.3.0 h1:Dt6ye7+vXGIKZ7Xtk4s6/xVdGDQynvom7xCFEdWr6uE=
+github.com/go-ole/go-ole v1.3.0/go.mod h1:5LS6F96DhAwUc7C+1HLexzMXY1xGRSryjyPPKW6zv78=
+github.com/godbus/dbus/v5 v5.1.0 h1:4KLkAxT3aOY8Li4FRJe/KvhoNFFxo0m6fNuFUO8QJUk=
+github.com/godbus/dbus/v5 v5.1.0/go.mod h1:xhWf0FNVPg57R7Z0UbKHbJfkEywrmjJnf7w5xrFpKfA=
+github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
+github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
+github.com/gorilla/websocket v1.5.3 h1:saDtZ6Pbx/0u+bgYQ3q96pZgCzfhKXGPqt7kZ72aNNg=
+github.com/gorilla/websocket v1.5.3/go.mod h1:YR8l580nyteQvAITg2hZ9XVh4b55+EU/adAjf1fMHhE=
+github.com/hashicorp/errwrap v1.0.0 h1:hLrqtEDnRye3+sgx6z4qVLNuviH3MR5aQ0ykNJa/UYA=
+github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=
+github.com/hashicorp/go-multierror v1.1.1 h1:H5DkEtf6CXdFp0N0Em5UCwQpXMWke8IA0+lD48awMYo=
+github.com/hashicorp/go-multierror v1.1.1/go.mod h1:iw975J/qwKPdAO1clOe2L8331t/9/fmwbPZ6JB6eMoM=
+github.com/jchv/go-winloader v0.0.0-20210711035445-715c2860da7e h1:Q3+PugElBCf4PFpxhErSzU3/PY5sFL5Z6rfv4AbGAck=
+github.com/jchv/go-winloader v0.0.0-20210711035445-715c2860da7e/go.mod h1:alcuEEnZsY1WQsagKhZDsoPCRoOijYqhZvPwLG0kzVs=
+github.com/jezek/xgb v1.1.0 h1:wnpxJzP1+rkbGclEkmwpVFQWpuE2PUGNUzP8SbfFobk=
+github.com/jezek/xgb v1.1.0/go.mod h1:nrhwO0FX/enq75I7Y7G8iN1ubpSGZEiA3v9e9GyRFlk=
+github.com/jlaffaye/ftp v0.2.0 h1:lXNvW7cBu7R/68bknOX3MrRIIqZ61zELs1P2RAiA3lg=
+github.com/jlaffaye/ftp v0.2.0/go.mod h1:is2Ds5qkhceAPy2xD6RLI6hmp/qysSoymZ+Z2uTnspI=
+github.com/kbinani/screenshot v0.0.0-20230812210009-b87d31814237 h1:YOp8St+CM/AQ9Vp4XYm4272E77MptJDHkwypQHIRl9Q=
+github.com/kbinani/screenshot v0.0.0-20230812210009-b87d31814237/go.mod h1:e7qQlOY68wOz4b82D7n+DdaptZAi+SHW0+yKiWZzEYE=
+github.com/kr/fs v0.1.0 h1:Jskdu9ieNAYnjxsi0LbQp1ulIKZV1LAFgK1tWhpZgl8=
+github.com/kr/fs v0.1.0/go.mod h1:FFnZGqtBN9Gxj7eW1uZ42v5BccTP0vu6NEaFoC2HwRg=
+github.com/labstack/echo/v4 v4.13.3 h1:pwhpCPrTl5qry5HRdM5FwdXnhXSLSY+WE+YQSeCaafY=
+github.com/labstack/echo/v4 v4.13.3/go.mod h1:o90YNEeQWjDozo584l7AwhJMHN0bOC4tAfg+Xox9q5g=
+github.com/labstack/gommon v0.4.2 h1:F8qTUNXgG1+6WQmqoUWnz8WiEU60mXVVw0P4ht1WRA0=
+github.com/labstack/gommon v0.4.2/go.mod h1:QlUFxVM+SNXhDL/Z7YhocGIBYOiwB0mXm1+1bAPHPyU=
+github.com/leaanthony/debme v1.2.1 h1:9Tgwf+kjcrbMQ4WnPcEIUcQuIZYqdWftzZkBr+i/oOc=
+github.com/leaanthony/debme v1.2.1/go.mod h1:3V+sCm5tYAgQymvSOfYQ5Xx2JCr+OXiD9Jkw3otUjiA=
+github.com/leaanthony/go-ansi-parser v1.6.1 h1:xd8bzARK3dErqkPFtoF9F3/HgN8UQk0ed1YDKpEz01A=
+github.com/leaanthony/go-ansi-parser v1.6.1/go.mod h1:+vva/2y4alzVmmIEpk9QDhA7vLC5zKDTRwfZGOp3IWU=
+github.com/leaanthony/gosod v1.0.4 h1:YLAbVyd591MRffDgxUOU1NwLhT9T1/YiwjKZpkNFeaI=
+github.com/leaanthony/gosod v1.0.4/go.mod h1:GKuIL0zzPj3O1SdWQOdgURSuhkF+Urizzxh26t9f1cw=
+github.com/leaanthony/slicer v1.6.0 h1:1RFP5uiPJvT93TAHi+ipd3NACobkW53yUiBqZheE/Js=
+github.com/leaanthony/slicer v1.6.0/go.mod h1:o/Iz29g7LN0GqH3aMjWAe90381nyZlDNquK+mtH2Fj8=
+github.com/leaanthony/u v1.1.1 h1:TUFjwDGlNX+WuwVEzDqQwC2lOv0P4uhTQw7CMFdiK7M=
+github.com/leaanthony/u v1.1.1/go.mod h1:9+o6hejoRljvZ3BzdYlVL0JYCwtnAsVuN9pVTQcaRfI=
+github.com/lxn/win v0.0.0-20210218163916-a377121e959e h1:H+t6A/QJMbhCSEH5rAuRxh+CtW96g0Or0Fxa9IKr4uc=
+github.com/lxn/win v0.0.0-20210218163916-a377121e959e/go.mod h1:KxxjdtRkfNoYDCUP5ryK7XJJNTnpC8atvtmTheChOtk=
+github.com/matryer/is v1.4.0/go.mod h1:8I/i5uYgLzgsgEloJE1U6xx5HkBQpAZvepWuujKwMRU=
+github.com/matryer/is v1.4.1 h1:55ehd8zaGABKLXQUe2awZ99BD/PTc2ls+KV/dXphgEQ=
+github.com/matryer/is v1.4.1/go.mod h1:8I/i5uYgLzgsgEloJE1U6xx5HkBQpAZvepWuujKwMRU=
+github.com/mattn/go-colorable v0.1.13 h1:fFA4WZxdEF4tXPZVKMLwD8oUnCTTo08duU7wxecdEvA=
+github.com/mattn/go-colorable v0.1.13/go.mod h1:7S9/ev0klgBDR4GtXTXX8a3vIGJpMovkB8vQcUbaXHg=
+github.com/mattn/go-isatty v0.0.16/go.mod h1:kYGgaQfpe5nmfYZH+SKPsOc2e4SrIfOl2e/yFXSvRLM=
+github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWEY=
+github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
+github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c h1:+mdjkGKdHQG3305AYmdv1U2eRNDiU2ErMBj1gwrq8eQ=
+github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c/go.mod h1:7rwL4CYBLnjLxUqIJNnCWiEdr3bn6IUYi15bNlnbCCU=
+github.com/pkg/errors v0.9.1 h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4=
+github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
+github.com/pkg/sftp v1.13.10 h1:+5FbKNTe5Z9aspU88DPIKJ9z2KZoaGCu6Sr6kKR/5mU=
+github.com/pkg/sftp v1.13.10/go.mod h1:bJ1a7uDhrX/4OII+agvy28lzRvQrmIQuaHrcI1HbeGA=
+github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
+github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/rivo/uniseg v0.2.0/go.mod h1:J6wj4VEh+S6ZtnVlnTBMWIodfgj8LQOQFoIToxlJtxc=
+github.com/rivo/uniseg v0.4.7 h1:WUdvkW8uEhrYfLC4ZzdpI2ztxP1I582+49Oc5Mq64VQ=
+github.com/rivo/uniseg v0.4.7/go.mod h1:FN3SvrM+Zdj16jyLfmOkMNblXMcoc8DfTHruCPUcx88=
+github.com/samber/lo v1.49.1 h1:4BIFyVfuQSEpluc7Fua+j1NolZHiEHEpaSEKdsH0tew=
+github.com/samber/lo v1.49.1/go.mod h1:dO6KHFzUKXgP8LDhU0oI8d2hekjXnGOu0DB8Jecxd6o=
+github.com/stretchr/testify v1.10.0 h1:Xv5erBjTwe/5IxqUQTdXv5kgmIvbHo3QQyRwhJsOfJA=
+github.com/stretchr/testify v1.10.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY=
+github.com/tkrajina/go-reflector v0.5.8 h1:yPADHrwmUbMq4RGEyaOUpz2H90sRsETNVpjzo3DLVQQ=
+github.com/tkrajina/go-reflector v0.5.8/go.mod h1:ECbqLgccecY5kPmPmXg1MrHW585yMcDkVl6IvJe64T4=
+github.com/valyala/bytebufferpool v1.0.0 h1:GqA5TC/0021Y/b9FG4Oi9Mr3q7XYx6KllzawFIhcdPw=
+github.com/valyala/bytebufferpool v1.0.0/go.mod h1:6bBcMArwyJ5K/AmCkWv1jt77kVWyCJ6HpOuEn7z0Csc=
+github.com/valyala/fasttemplate v1.2.2 h1:lxLXG0uE3Qnshl9QyaK6XJxMXlQZELvChBOCmQD0Loo=
+github.com/valyala/fasttemplate v1.2.2/go.mod h1:KHLXt3tVN2HBp8eijSv/kGJopbvo7S+qRAEEKiv+SiQ=
+github.com/wailsapp/go-webview2 v1.0.22 h1:YT61F5lj+GGaat5OB96Aa3b4QA+mybD0Ggq6NZijQ58=
+github.com/wailsapp/go-webview2 v1.0.22/go.mod h1:qJmWAmAmaniuKGZPWwne+uor3AHMB5PFhqiK0Bbj8kc=
+github.com/wailsapp/mimetype v1.4.1 h1:pQN9ycO7uo4vsUUuPeHEYoUkLVkaRntMnHJxVwYhwHs=
+github.com/wailsapp/mimetype v1.4.1/go.mod h1:9aV5k31bBOv5z6u+QP8TltzvNGJPmNJD4XlAL3U+j3o=
+github.com/wailsapp/wails/v2 v2.12.0 h1:BHO/kLNWFHYjCzucxbzAYZWUjub1Tvb4cSguQozHn5c=
+github.com/wailsapp/wails/v2 v2.12.0/go.mod h1:mo1bzK1DEJrobt7YrBjgxvb5Sihb1mhAY09hppbibQg=
+github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
+golang.design/x/clipboard v0.7.0 h1:4Je8M/ys9AJumVnl8m+rZnIvstSnYj1fvzqYrU3TXvo=
+golang.design/x/clipboard v0.7.0/go.mod h1:PQIvqYO9GP29yINEfsEn5zSQKAz3UgXmZKzDA6dnq2E=
+golang.design/x/hotkey v0.4.1 h1:zLP/2Pztl4WjyxURdW84GoZ5LUrr6hr69CzJFJ5U1go=
+golang.design/x/hotkey v0.4.1/go.mod h1:M8SGcwFYHnKRa83FpTFQoZvPO5vVT+kWPztFqTQKmXA=
+golang.design/x/mainthread v0.3.0 h1:UwFus0lcPodNpMOGoQMe87jSFwbSsEY//CA7yVmu4j8=
+golang.design/x/mainthread v0.3.0/go.mod h1:vYX7cF2b3pTJMGM/hc13NmN6kblKnf4/IyvHeu259L0=
+golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
+golang.org/x/crypto v0.0.0-20190510104115-cbcb75029529/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
+golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
+golang.org/x/crypto v0.41.0 h1:WKYxWedPGCTVVl5+WHSSrOBT0O8lx32+zxmHxijgXp4=
+golang.org/x/crypto v0.41.0/go.mod h1:pO5AFd7FA68rFak7rOAGVuygIISepHftHnr8dr6+sUc=
+golang.org/x/exp v0.0.0-20190731235908-ec7cb31e5a56 h1:estk1glOnSVeJ9tdEZZc5mAMDZk5lNJNyJ6DvrBkTEU=
+golang.org/x/exp v0.0.0-20190731235908-ec7cb31e5a56/go.mod h1:JhuoJpWY28nO4Vef9tZUw9qufEGTyX1+7lmHxV5q5G4=
+golang.org/x/image v0.0.0-20190227222117-0694c2d4d067/go.mod h1:kZ7UVZpmo3dzQBMxlp+ypCbDeSB+sBbTgSJuh5dn5js=
+golang.org/x/image v0.12.0 h1:w13vZbU4o5rKOFFR8y7M+c4A5jXDC0uXTdHYRP8X2DQ=
+golang.org/x/image v0.12.0/go.mod h1:Lu90jvHG7GfemOIcldsh9A2hS01ocl6oNO7ype5mEnk=
+golang.org/x/mobile v0.0.0-20190312151609-d3739f865fa6/go.mod h1:z+o9i4GpDbdi3rU15maQ/Ox0txvL9dWGYEHz965HBQE=
+golang.org/x/mobile v0.0.0-20230301163155-e0f57694e12c h1:Gk61ECugwEHL6IiyyNLXNzmu8XslmRP2dS0xjIYhbb4=
+golang.org/x/mobile v0.0.0-20230301163155-e0f57694e12c/go.mod h1:aAjjkJNdrh3PMckS4B10TGS2nag27cbKR1y2BpUxsiY=
+golang.org/x/mod v0.1.0/go.mod h1:0QHyrYULN0/3qlju5TqG8bIK38QM8yzMo5ekMj3DlcY=
+golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
+golang.org/x/mod v0.8.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
+golang.org/x/net v0.0.0-20190311183353-d8887717615a/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
+golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
+golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
+golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
+golang.org/x/net v0.0.0-20210505024714-0287a6fb4125/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
+golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
+golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
+golang.org/x/net v0.42.0 h1:jzkYrhi3YQWD6MLBJcsklgQsoAcw89EcZbJw8Z614hs=
+golang.org/x/net v0.42.0/go.mod h1:FF1RA5d3u7nAYA4z2TkclSCKh68eSXtiFwcWQpPXdt8=
+golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
+golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20200810151505-1b9f1253b3ed/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20201018230417-eeed37f84f13/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20210615035016-665e8c7367d1/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.0.0-20220520151302-bc2c85ada10a/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.1.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.35.0 h1:vz1N37gP5bs89s7He8XuIYXpyY0+QlsKmzipCbUtyxI=
+golang.org/x/sys v0.35.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k=
+golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
+golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
+golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
+golang.org/x/term v0.34.0 h1:O/2T7POpk0ZZ7MAzMeWFSg6S5IpWd/RXDlM9hgM3DR4=
+golang.org/x/term v0.34.0/go.mod h1:5jC53AEywhIVebHgPVeg0mj8OD3VO9OzclacVrqpaAw=
+golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
+golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
+golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
+golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
+golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
+golang.org/x/text v0.13.0/go.mod h1:TvPlkZtksWOMsz7fbANvkp4WM8x/WCo/om8BMLbz+aE=
+golang.org/x/text v0.28.0 h1:rhazDwis8INMIwQ4tpjLDzUhx6RlXqZNPEM0huQojng=
+golang.org/x/text v0.28.0/go.mod h1:U8nCwOR8jO/marOQ0QbDiOngZVEBB7MAiitBuMjXiNU=
+golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
+golang.org/x/tools v0.0.0-20190312151545-0bb0c0a6e846/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs=
+golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
+golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
+golang.org/x/tools v0.6.0/go.mod h1:Xwgl3UAJ/d3gWutnCtw505GrjyAbvKui8lOU390QaIU=
+golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
+gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
+gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
diff --git a/internal/application/annotation.go b/internal/application/annotation.go
new file mode 100644
index 0000000..c244858
--- /dev/null
+++ b/internal/application/annotation.go
@@ -0,0 +1,422 @@
+package application
+
+import (
+	"bytes"
+	"fmt"
+	"image"
+	"image/color"
+	"image/draw"
+	"image/png"
+	"math"
+	"os"
+	"strconv"
+	"strings"
+	"sync"
+
+	xfont "golang.org/x/image/font"
+	"golang.org/x/image/font/basicfont"
+	"golang.org/x/image/font/opentype"
+	"golang.org/x/image/math/fixed"
+)
+
+// Annotation describes a user-drawn mark relative to the selected screenshot.
+// Coordinates are logical pixels in the same coordinate system as the overlay.
+type Annotation struct {
+	Tool        string  `json:"tool"`
+	Color       string  `json:"color"`
+	Points      []Point `json:"points"`
+	Text        string  `json:"text,omitempty"`
+	StrokeWidth float64 `json:"strokeWidth,omitempty"`
+	FontSize    float64 `json:"fontSize,omitempty"`
+}
+
+type Point struct {
+	X float64 `json:"x"`
+	Y float64 `json:"y"`
+}
+
+// ApplyAnnotations decodes a PNG, draws all annotations, and re-encodes it.
+func ApplyAnnotations(pngBytes []byte, annotations []Annotation, scale float64) ([]byte, error) {
+	return ApplyAnnotationsWithScale(pngBytes, annotations, scale, scale)
+}
+
+// ApplyAnnotationsWithScale decodes a PNG, draws all annotations using the
+// actual device-pixel scale of the captured image, and re-encodes it.
+func ApplyAnnotationsWithScale(pngBytes []byte, annotations []Annotation, scaleX, scaleY float64) ([]byte, error) {
+	if len(annotations) == 0 {
+		return pngBytes, nil
+	}
+	if scaleX <= 0 {
+		scaleX = 1
+	}
+	if scaleY <= 0 {
+		scaleY = scaleX
+	}
+	strokeScale := math.Max(scaleX, scaleY)
+
+	src, err := png.Decode(bytes.NewReader(pngBytes))
+	if err != nil {
+		return nil, fmt.Errorf("decode annotated png: %w", err)
+	}
+	bounds := src.Bounds()
+	dst := image.NewRGBA(image.Rect(0, 0, bounds.Dx(), bounds.Dy()))
+	draw.Draw(dst, dst.Bounds(), src, bounds.Min, draw.Src)
+
+	for _, ann := range annotations {
+		c, err := parseHexColor(ann.Color)
+		if err != nil {
+			c = color.RGBA{R: 59, G: 130, B: 246, A: 255}
+		}
+		strokeWidth := ann.StrokeWidth
+		if strokeWidth <= 0 {
+			strokeWidth = 3
+		}
+		width := int(math.Max(1, math.Round(strokeWidth*strokeScale)))
+		switch ann.Tool {
+		case "pen":
+			drawPolyline(dst, ann.Points, scaleX, scaleY, width, c)
+		case "line":
+			drawStraightLine(dst, ann.Points, scaleX, scaleY, width, c)
+		case "arrow":
+			drawArrow(dst, ann.Points, scaleX, scaleY, width, c)
+		case "rect":
+			drawRectOutline(dst, ann.Points, scaleX, scaleY, width, c)
+		case "ellipse":
+			drawEllipseOutline(dst, ann.Points, scaleX, scaleY, width, c)
+		case "text":
+			drawTextAnnotation(dst, ann, scaleX, scaleY, c)
+		case "mosaic-brush":
+			applyMosaicBrush(dst, ann.Points, scaleX, scaleY, width)
+		case "mosaic-rect":
+			applyMosaicRect(dst, ann.Points, scaleX, scaleY)
+		}
+	}
+
+	var buf bytes.Buffer
+	if err := png.Encode(&buf, dst); err != nil {
+		return nil, fmt.Errorf("encode annotated png: %w", err)
+	}
+	return buf.Bytes(), nil
+}
+
+func drawStraightLine(img *image.RGBA, points []Point, scaleX, scaleY float64, width int, c color.RGBA) {
+	if len(points) < 2 {
+		return
+	}
+	drawLine(img, scalePoint(points[0], scaleX, scaleY), scalePoint(points[len(points)-1], scaleX, scaleY), width, c)
+}
+
+func drawArrow(img *image.RGBA, points []Point, scaleX, scaleY float64, width int, c color.RGBA) {
+	if len(points) < 2 {
+		return
+	}
+	start := scalePoint(points[0], scaleX, scaleY)
+	end := scalePoint(points[len(points)-1], scaleX, scaleY)
+	dx, dy := end.X-start.X, end.Y-start.Y
+	length := math.Hypot(dx, dy)
+	if length < 1 {
+		return
+	}
+	drawLine(img, start, end, width, c)
+	headLength := math.Min(length*0.45, math.Max(10*math.Max(scaleX, scaleY), float64(width)*4))
+	angle := math.Atan2(dy, dx)
+	spread := math.Pi / 6
+	left := Point{X: end.X - headLength*math.Cos(angle-spread), Y: end.Y - headLength*math.Sin(angle-spread)}
+	right := Point{X: end.X - headLength*math.Cos(angle+spread), Y: end.Y - headLength*math.Sin(angle+spread)}
+	drawLine(img, end, left, width, c)
+	drawLine(img, end, right, width, c)
+}
+
+const mosaicBlockSize = 10
+
+func applyMosaicBrush(img *image.RGBA, points []Point, scaleX, scaleY float64, width int) {
+	if len(points) == 0 {
+		return
+	}
+	mask := image.NewAlpha(img.Bounds())
+	maskColor := color.RGBA{A: 255}
+	if len(points) == 1 {
+		drawDotMask(mask, scalePoint(points[0], scaleX, scaleY), width, maskColor)
+	} else {
+		for i := 1; i < len(points); i++ {
+			drawMaskLine(mask, scalePoint(points[i-1], scaleX, scaleY), scalePoint(points[i], scaleX, scaleY), width, maskColor)
+		}
+	}
+	applyPixelation(img, img.Bounds(), mask)
+}
+
+func applyMosaicRect(img *image.RGBA, points []Point, scaleX, scaleY float64) {
+	if len(points) < 2 {
+		return
+	}
+	a := scalePoint(points[0], scaleX, scaleY)
+	b := scalePoint(points[len(points)-1], scaleX, scaleY)
+	x1, x2 := ordered(a.X, b.X)
+	y1, y2 := ordered(a.Y, b.Y)
+	r := image.Rect(int(math.Floor(x1)), int(math.Floor(y1)), int(math.Ceil(x2)), int(math.Ceil(y2))).Intersect(img.Bounds())
+	applyPixelation(img, r, nil)
+}
+
+func applyPixelation(img *image.RGBA, region image.Rectangle, mask *image.Alpha) {
+	if region.Empty() {
+		return
+	}
+	for y := region.Min.Y; y < region.Max.Y; y += mosaicBlockSize {
+		for x := region.Min.X; x < region.Max.X; x += mosaicBlockSize {
+			block := image.Rect(x, y, min(x+mosaicBlockSize, region.Max.X), min(y+mosaicBlockSize, region.Max.Y))
+			var r, g, b, a, count uint64
+			for py := block.Min.Y; py < block.Max.Y; py++ {
+				for px := block.Min.X; px < block.Max.X; px++ {
+					c := img.RGBAAt(px, py)
+					r += uint64(c.R)
+					g += uint64(c.G)
+					b += uint64(c.B)
+					a += uint64(c.A)
+					count++
+				}
+			}
+			if count == 0 {
+				continue
+			}
+			avg := color.RGBA{uint8(r / count), uint8(g / count), uint8(b / count), uint8(a / count)}
+			for py := block.Min.Y; py < block.Max.Y; py++ {
+				for px := block.Min.X; px < block.Max.X; px++ {
+					if mask == nil || mask.AlphaAt(px, py).A > 0 {
+						img.SetRGBA(px, py, avg)
+					}
+				}
+			}
+		}
+	}
+}
+
+func drawMaskLine(mask *image.Alpha, a, b Point, width int, c color.RGBA) {
+	dx, dy := b.X-a.X, b.Y-a.Y
+	steps := int(math.Max(math.Abs(dx), math.Abs(dy)))
+	if steps == 0 {
+		drawDotMask(mask, a, width, c)
+		return
+	}
+	for i := 0; i <= steps; i++ {
+		t := float64(i) / float64(steps)
+		drawDotMask(mask, Point{X: a.X + dx*t, Y: a.Y + dy*t}, width, c)
+	}
+}
+
+func drawDotMask(mask *image.Alpha, p Point, width int, c color.RGBA) {
+	radius := float64(width) / 2
+	for y := int(math.Floor(p.Y - radius)); y <= int(math.Ceil(p.Y+radius)); y++ {
+		for x := int(math.Floor(p.X - radius)); x <= int(math.Ceil(p.X+radius)); x++ {
+			if image.Pt(x, y).In(mask.Bounds()) && math.Hypot(float64(x)-p.X, float64(y)-p.Y) <= radius {
+				mask.SetAlpha(x, y, color.Alpha{A: c.A})
+			}
+		}
+	}
+}
+
+func parseHexColor(hex string) (color.RGBA, error) {
+	value := strings.TrimPrefix(strings.TrimSpace(hex), "#")
+	if len(value) != 6 {
+		return color.RGBA{}, fmt.Errorf("invalid color %q", hex)
+	}
+	n, err := strconv.ParseUint(value, 16, 32)
+	if err != nil {
+		return color.RGBA{}, err
+	}
+	return color.RGBA{
+		R: uint8(n >> 16),
+		G: uint8(n >> 8),
+		B: uint8(n),
+		A: 255,
+	}, nil
+}
+
+func drawPolyline(img *image.RGBA, points []Point, scaleX, scaleY float64, width int, c color.RGBA) {
+	if len(points) == 1 {
+		drawDot(img, scalePoint(points[0], scaleX, scaleY), width, c)
+		return
+	}
+	for i := 1; i < len(points); i++ {
+		drawLine(img, scalePoint(points[i-1], scaleX, scaleY), scalePoint(points[i], scaleX, scaleY), width, c)
+	}
+}
+
+func drawRectOutline(img *image.RGBA, points []Point, scaleX, scaleY float64, width int, c color.RGBA) {
+	if len(points) < 2 {
+		return
+	}
+	a := scalePoint(points[0], scaleX, scaleY)
+	b := scalePoint(points[len(points)-1], scaleX, scaleY)
+	x1, x2 := ordered(a.X, b.X)
+	y1, y2 := ordered(a.Y, b.Y)
+	drawLine(img, Point{X: x1, Y: y1}, Point{X: x2, Y: y1}, width, c)
+	drawLine(img, Point{X: x2, Y: y1}, Point{X: x2, Y: y2}, width, c)
+	drawLine(img, Point{X: x2, Y: y2}, Point{X: x1, Y: y2}, width, c)
+	drawLine(img, Point{X: x1, Y: y2}, Point{X: x1, Y: y1}, width, c)
+}
+
+func drawEllipseOutline(img *image.RGBA, points []Point, scaleX, scaleY float64, width int, c color.RGBA) {
+	if len(points) < 2 {
+		return
+	}
+	a := scalePoint(points[0], scaleX, scaleY)
+	b := scalePoint(points[len(points)-1], scaleX, scaleY)
+	x1, x2 := ordered(a.X, b.X)
+	y1, y2 := ordered(a.Y, b.Y)
+	rx := (x2 - x1) / 2
+	ry := (y2 - y1) / 2
+	if rx <= 0 || ry <= 0 {
+		return
+	}
+	cx := x1 + rx
+	cy := y1 + ry
+	steps := int(math.Max(48, math.Ceil(2*math.Pi*math.Max(rx, ry)/4)))
+	prev := Point{
+		X: cx + rx,
+		Y: cy,
+	}
+	for i := 1; i <= steps; i++ {
+		theta := 2 * math.Pi * float64(i) / float64(steps)
+		next := Point{
+			X: cx + rx*math.Cos(theta),
+			Y: cy + ry*math.Sin(theta),
+		}
+		drawLine(img, prev, next, width, c)
+		prev = next
+	}
+}
+
+func drawLine(img *image.RGBA, a, b Point, width int, c color.RGBA) {
+	dx := b.X - a.X
+	dy := b.Y - a.Y
+	steps := int(math.Max(math.Abs(dx), math.Abs(dy)))
+	if steps == 0 {
+		drawDot(img, a, width, c)
+		return
+	}
+	for i := 0; i <= steps; i++ {
+		t := float64(i) / float64(steps)
+		drawDot(img, Point{X: a.X + dx*t, Y: a.Y + dy*t}, width, c)
+	}
+}
+
+func drawDot(img *image.RGBA, p Point, width int, c color.RGBA) {
+	radius := float64(width) / 2
+	minX := int(math.Floor(p.X - radius))
+	maxX := int(math.Ceil(p.X + radius))
+	minY := int(math.Floor(p.Y - radius))
+	maxY := int(math.Ceil(p.Y + radius))
+	bounds := img.Bounds()
+	for y := minY; y <= maxY; y++ {
+		for x := minX; x <= maxX; x++ {
+			if !image.Pt(x, y).In(bounds) {
+				continue
+			}
+			if math.Hypot(float64(x)-p.X, float64(y)-p.Y) <= radius {
+				img.SetRGBA(x, y, c)
+			}
+		}
+	}
+}
+
+func scalePoint(p Point, scaleX, scaleY float64) Point {
+	return Point{X: p.X * scaleX, Y: p.Y * scaleY}
+}
+
+func ordered(a, b float64) (float64, float64) {
+	if a < b {
+		return a, b
+	}
+	return b, a
+}
+
+func drawTextAnnotation(img *image.RGBA, ann Annotation, scaleX, scaleY float64, c color.RGBA) {
+	if len(ann.Points) == 0 {
+		return
+	}
+	text := strings.TrimSpace(ann.Text)
+	if text == "" {
+		return
+	}
+	fontSize := ann.FontSize
+	if fontSize <= 0 {
+		fontSize = 20
+	}
+	face := annotationFontFace(fontSize * scaleY)
+	if face == nil {
+		face = basicfont.Face7x13
+	}
+
+	origin := scalePoint(ann.Points[0], scaleX, scaleY)
+	metrics := face.Metrics()
+	lineHeight := metrics.Height
+	if lineHeight <= 0 {
+		lineHeight = fixed.I(int(math.Ceil(fontSize * 1.2 * scaleY)))
+	}
+	d := &xfont.Drawer{
+		Dst:  img,
+		Src:  image.NewUniform(c),
+		Face: face,
+	}
+	baselineY := fixed.I(int(math.Round(origin.Y))) + metrics.Ascent
+	x := fixed.I(int(math.Round(origin.X)))
+	for _, line := range strings.Split(text, "\n") {
+		line = strings.TrimRight(line, "\r")
+		if line != "" {
+			d.Dot = fixed.Point26_6{X: x, Y: baselineY}
+			d.DrawString(line)
+		}
+		baselineY += lineHeight
+	}
+}
+
+var (
+	annotationFontOnce sync.Once
+	annotationFont     *opentype.Font
+)
+
+func annotationFontFace(size float64) xfont.Face {
+	if size <= 0 {
+		size = 20
+	}
+	annotationFontOnce.Do(func() {
+		annotationFont = loadAnnotationFont()
+	})
+	if annotationFont == nil {
+		return basicfont.Face7x13
+	}
+	face, err := opentype.NewFace(annotationFont, &opentype.FaceOptions{
+		Size:    size,
+		DPI:     72,
+		Hinting: xfont.HintingFull,
+	})
+	if err != nil {
+		return basicfont.Face7x13
+	}
+	return face
+}
+
+func loadAnnotationFont() *opentype.Font {
+	paths := []string{
+		"/System/Library/Fonts/Supplemental/Arial Unicode.ttf",
+		"/Library/Fonts/Arial Unicode.ttf",
+		"/System/Library/Fonts/Hiragino Sans GB.ttc",
+		"/System/Library/Fonts/PingFang.ttc",
+		"/System/Library/Fonts/Helvetica.ttc",
+	}
+	for _, path := range paths {
+		data, err := os.ReadFile(path)
+		if err != nil {
+			continue
+		}
+		if collection, err := opentype.ParseCollection(data); err == nil && collection.NumFonts() > 0 {
+			if font, err := collection.Font(0); err == nil {
+				return font
+			}
+		}
+		if font, err := opentype.Parse(data); err == nil {
+			return font
+		}
+	}
+	return nil
+}
diff --git a/internal/application/annotation_test.go b/internal/application/annotation_test.go
new file mode 100644
index 0000000..7572e0c
--- /dev/null
+++ b/internal/application/annotation_test.go
@@ -0,0 +1,280 @@
+package application
+
+import (
+	"bytes"
+	"image"
+	"image/color"
+	"image/draw"
+	"image/png"
+	"testing"
+)
+
+func TestApplyAnnotationsDrawsIntoPNG(t *testing.T) {
+	src := image.NewRGBA(image.Rect(0, 0, 40, 40))
+	draw.Draw(src, src.Bounds(), &image.Uniform{C: color.White}, image.Point{}, draw.Src)
+
+	var buf bytes.Buffer
+	if err := png.Encode(&buf, src); err != nil {
+		t.Fatalf("encode source: %v", err)
+	}
+
+	out, err := ApplyAnnotations(buf.Bytes(), []Annotation{
+		{
+			Tool:  "rect",
+			Color: "#ef4444",
+			Points: []Point{
+				{X: 5, Y: 5},
+				{X: 30, Y: 30},
+			},
+		},
+	}, 1)
+	if err != nil {
+		t.Fatalf("apply annotations: %v", err)
+	}
+
+	img, err := png.Decode(bytes.NewReader(out))
+	if err != nil {
+		t.Fatalf("decode output: %v", err)
+	}
+	if got := color.RGBAModel.Convert(img.At(5, 5)).(color.RGBA); got.R != 0xef || got.G != 0x44 || got.B != 0x44 {
+		t.Fatalf("expected annotated pixel at rectangle edge, got %#v", got)
+	}
+}
+
+func TestApplyAnnotationsNoAnnotationsReturnsOriginalBytes(t *testing.T) {
+	original := []byte("not decoded when no annotations")
+	out, err := ApplyAnnotations(original, nil, 1)
+	if err != nil {
+		t.Fatalf("apply annotations: %v", err)
+	}
+	if !bytes.Equal(out, original) {
+		t.Fatalf("expected original bytes")
+	}
+}
+
+func TestApplyAnnotationsDrawsTextIntoPNG(t *testing.T) {
+	src := image.NewRGBA(image.Rect(0, 0, 120, 80))
+	draw.Draw(src, src.Bounds(), &image.Uniform{C: color.White}, image.Point{}, draw.Src)
+
+	var buf bytes.Buffer
+	if err := png.Encode(&buf, src); err != nil {
+		t.Fatalf("encode source: %v", err)
+	}
+
+	out, err := ApplyAnnotations(buf.Bytes(), []Annotation{
+		{
+			Tool:  "text",
+			Color: "#ef4444",
+			Points: []Point{
+				{X: 10, Y: 10},
+			},
+			Text: "T",
+		},
+	}, 1)
+	if err != nil {
+		t.Fatalf("apply annotations: %v", err)
+	}
+
+	img, err := png.Decode(bytes.NewReader(out))
+	if err != nil {
+		t.Fatalf("decode output: %v", err)
+	}
+	found := false
+	for y := 8; y < 40 && !found; y++ {
+		for x := 8; x < 40; x++ {
+			got := color.RGBAModel.Convert(img.At(x, y)).(color.RGBA)
+			if got.R > 180 && got.G < 180 && got.B < 180 {
+				found = true
+				break
+			}
+		}
+	}
+	if !found {
+		t.Fatalf("expected red text pixels near annotation point")
+	}
+}
+
+func TestApplyAnnotationsWithScaleDrawsTextAtDevicePosition(t *testing.T) {
+	src := image.NewRGBA(image.Rect(0, 0, 220, 120))
+	draw.Draw(src, src.Bounds(), &image.Uniform{C: color.White}, image.Point{}, draw.Src)
+
+	var buf bytes.Buffer
+	if err := png.Encode(&buf, src); err != nil {
+		t.Fatalf("encode source: %v", err)
+	}
+
+	out, err := ApplyAnnotationsWithScale(buf.Bytes(), []Annotation{
+		{
+			Tool:     "text",
+			Color:    "#ef4444",
+			Points:   []Point{{X: 50, Y: 20}},
+			Text:     "T",
+			FontSize: 20,
+		},
+	}, 2, 2)
+	if err != nil {
+		t.Fatalf("apply annotations: %v", err)
+	}
+
+	img, err := png.Decode(bytes.NewReader(out))
+	if err != nil {
+		t.Fatalf("decode output: %v", err)
+	}
+	minX := 999
+	found := false
+	for y := 0; y < img.Bounds().Dy(); y++ {
+		for x := 0; x < img.Bounds().Dx(); x++ {
+			got := color.RGBAModel.Convert(img.At(x, y)).(color.RGBA)
+			if got.R > 180 && got.G < 180 && got.B < 180 {
+				found = true
+				if x < minX {
+					minX = x
+				}
+			}
+		}
+	}
+	if !found {
+		t.Fatalf("expected red text pixels")
+	}
+	if minX < 90 {
+		t.Fatalf("expected text to be drawn near scaled x=100, min red x=%d", minX)
+	}
+}
+
+func TestApplyAnnotationsUsesStrokeWidth(t *testing.T) {
+	src := image.NewRGBA(image.Rect(0, 0, 80, 80))
+	draw.Draw(src, src.Bounds(), &image.Uniform{C: color.White}, image.Point{}, draw.Src)
+
+	var buf bytes.Buffer
+	if err := png.Encode(&buf, src); err != nil {
+		t.Fatalf("encode source: %v", err)
+	}
+
+	out, err := ApplyAnnotations(buf.Bytes(), []Annotation{
+		{
+			Tool:        "rect",
+			Color:       "#ef4444",
+			Points:      []Point{{X: 20, Y: 20}, {X: 60, Y: 60}},
+			StrokeWidth: 8,
+		},
+	}, 1)
+	if err != nil {
+		t.Fatalf("apply annotations: %v", err)
+	}
+
+	img, err := png.Decode(bytes.NewReader(out))
+	if err != nil {
+		t.Fatalf("decode output: %v", err)
+	}
+	got := color.RGBAModel.Convert(img.At(20, 24)).(color.RGBA)
+	if got.R < 180 || got.G > 180 || got.B > 180 {
+		t.Fatalf("expected thick rectangle stroke to cover y=24, got %#v", got)
+	}
+}
+
+func TestApplyAnnotationsPixelatesMosaicRectangle(t *testing.T) {
+	src := image.NewRGBA(image.Rect(0, 0, 40, 30))
+	for y := 0; y < 30; y++ {
+		for x := 0; x < 40; x++ {
+			src.SetRGBA(x, y, color.RGBA{R: uint8(x * 6), G: uint8(y * 8), B: uint8((x + y) * 3), A: 255})
+		}
+	}
+	var buf bytes.Buffer
+	if err := png.Encode(&buf, src); err != nil {
+		t.Fatalf("encode source: %v", err)
+	}
+	out, err := ApplyAnnotations(buf.Bytes(), []Annotation{{
+		Tool: "mosaic-rect", Points: []Point{{X: 10, Y: 5}, {X: 30, Y: 25}},
+	}}, 1)
+	if err != nil {
+		t.Fatalf("apply annotations: %v", err)
+	}
+	img, err := png.Decode(bytes.NewReader(out))
+	if err != nil {
+		t.Fatalf("decode output: %v", err)
+	}
+	if img.At(12, 7) != img.At(18, 13) {
+		t.Fatalf("expected pixels in one mosaic block to share a color")
+	}
+	if img.At(5, 5) != src.At(5, 5) {
+		t.Fatalf("expected pixels outside mosaic rectangle to remain unchanged")
+	}
+}
+
+func TestApplyAnnotationsPixelatesOnlyMosaicBrushStroke(t *testing.T) {
+	src := image.NewRGBA(image.Rect(0, 0, 50, 30))
+	for y := 0; y < 30; y++ {
+		for x := 0; x < 50; x++ {
+			src.SetRGBA(x, y, color.RGBA{R: uint8(x * 5), G: uint8(y * 8), A: 255})
+		}
+	}
+	var buf bytes.Buffer
+	if err := png.Encode(&buf, src); err != nil {
+		t.Fatalf("encode source: %v", err)
+	}
+	out, err := ApplyAnnotations(buf.Bytes(), []Annotation{{
+		Tool: "mosaic-brush", StrokeWidth: 12, Points: []Point{{X: 5, Y: 15}, {X: 45, Y: 15}},
+	}}, 1)
+	if err != nil {
+		t.Fatalf("apply annotations: %v", err)
+	}
+	img, err := png.Decode(bytes.NewReader(out))
+	if err != nil {
+		t.Fatalf("decode output: %v", err)
+	}
+	if img.At(12, 15) == src.At(12, 15) {
+		t.Fatalf("expected brush path to be pixelated")
+	}
+	if img.At(12, 2) != src.At(12, 2) {
+		t.Fatalf("expected pixels outside brush path to remain unchanged")
+	}
+}
+
+func TestApplyAnnotationsDrawsStraightLine(t *testing.T) {
+	src := image.NewRGBA(image.Rect(0, 0, 60, 40))
+	draw.Draw(src, src.Bounds(), &image.Uniform{C: color.White}, image.Point{}, draw.Src)
+	var buf bytes.Buffer
+	if err := png.Encode(&buf, src); err != nil {
+		t.Fatalf("encode source: %v", err)
+	}
+	out, err := ApplyAnnotations(buf.Bytes(), []Annotation{{
+		Tool: "line", Color: "#ef4444", StrokeWidth: 4,
+		Points: []Point{{X: 5, Y: 20}, {X: 50, Y: 20}},
+	}}, 1)
+	if err != nil {
+		t.Fatalf("apply annotations: %v", err)
+	}
+	img, err := png.Decode(bytes.NewReader(out))
+	if err != nil {
+		t.Fatalf("decode output: %v", err)
+	}
+	got := color.RGBAModel.Convert(img.At(30, 20)).(color.RGBA)
+	if got.R < 180 || got.G > 180 || got.B > 180 {
+		t.Fatalf("expected red line at center, got %#v", got)
+	}
+}
+
+func TestApplyAnnotationsDrawsArrowHead(t *testing.T) {
+	src := image.NewRGBA(image.Rect(0, 0, 80, 60))
+	draw.Draw(src, src.Bounds(), &image.Uniform{C: color.White}, image.Point{}, draw.Src)
+	var buf bytes.Buffer
+	if err := png.Encode(&buf, src); err != nil {
+		t.Fatalf("encode source: %v", err)
+	}
+	out, err := ApplyAnnotations(buf.Bytes(), []Annotation{{
+		Tool: "arrow", Color: "#3b82f6", StrokeWidth: 3,
+		Points: []Point{{X: 10, Y: 30}, {X: 60, Y: 30}},
+	}}, 1)
+	if err != nil {
+		t.Fatalf("apply annotations: %v", err)
+	}
+	img, err := png.Decode(bytes.NewReader(out))
+	if err != nil {
+		t.Fatalf("decode output: %v", err)
+	}
+	shaft := color.RGBAModel.Convert(img.At(35, 30)).(color.RGBA)
+	head := color.RGBAModel.Convert(img.At(52, 25)).(color.RGBA)
+	if shaft.B < 180 || shaft.R > 140 || head.B < 180 || head.R > 140 {
+		t.Fatalf("expected blue arrow shaft and head, got shaft=%#v head=%#v", shaft, head)
+	}
+}
diff --git a/internal/application/capture_actions.go b/internal/application/capture_actions.go
new file mode 100644
index 0000000..059b61c
--- /dev/null
+++ b/internal/application/capture_actions.go
@@ -0,0 +1,96 @@
+package application
+
+import (
+	"context"
+	"fmt"
+	"os"
+	"path/filepath"
+	"strings"
+	"time"
+
+	"github.com/mmmy/snapgo/internal/infrastructure/clipboard"
+)
+
+// CaptureActionsService handles non-upload actions on already-produced PNG
+// screenshots. Keeping these actions here makes save/copy available across
+// overlay implementations without binding them to Wails or a specific OS.
+type CaptureActionsService struct {
+	Clipboard clipboard.Writer
+	Notifier  Notifier
+}
+
+func (s *CaptureActionsService) CopyImage(_ context.Context, pngBytes []byte) error {
+	if len(pngBytes) == 0 {
+		err := fmt.Errorf("empty screenshot")
+		s.notifyFailure(err.Error())
+		return err
+	}
+	if s.Clipboard == nil {
+		err := fmt.Errorf("clipboard is not configured")
+		s.notifyFailure(err.Error())
+		return err
+	}
+	if err := s.Clipboard.WriteImage(pngBytes); err != nil {
+		s.notifyFailure("clipboard write failed: " + err.Error())
+		return err
+	}
+	if s.Notifier != nil {
+		s.Notifier.NotifySuccess("image copied to clipboard")
+	}
+	return nil
+}
+
+func (s *CaptureActionsService) SaveImage(_ context.Context, pngBytes []byte, dir string) (string, error) {
+	if len(pngBytes) == 0 {
+		err := fmt.Errorf("empty screenshot")
+		s.notifyFailure(err.Error())
+		return "", err
+	}
+	dir = strings.TrimSpace(dir)
+	if dir == "" {
+		err := fmt.Errorf("save directory is empty")
+		s.notifyFailure(err.Error())
+		return "", err
+	}
+	if err := os.MkdirAll(dir, 0o755); err != nil {
+		s.notifyFailure("create save directory failed: " + err.Error())
+		return "", err
+	}
+	path := uniquePNGPath(dir, time.Now())
+	if err := os.WriteFile(path, pngBytes, 0o644); err != nil {
+		s.notifyFailure("save failed: " + err.Error())
+		return "", err
+	}
+	// Copy the saved path to the clipboard so the user can paste it right
+	// away, mirroring how the upload/summary flows copy their result. A
+	// clipboard failure must not fail the save itself.
+	if s.Clipboard != nil {
+		if err := s.Clipboard.WriteText(path); err != nil {
+			s.notifyFailure("clipboard write failed: " + err.Error())
+		}
+	}
+	if s.Notifier != nil {
+		s.Notifier.NotifySuccess(path)
+	}
+	return path, nil
+}
+
+func (s *CaptureActionsService) notifyFailure(reason string) {
+	if s.Notifier != nil {
+		s.Notifier.NotifyFailure(reason)
+	}
+}
+
+func uniquePNGPath(dir string, now time.Time) string {
+	base := now.Format("20060102-150405")
+	path := filepath.Join(dir, base+".png")
+	for i := 1; fileExists(path); i++ {
+		path = filepath.Join(dir, fmt.Sprintf("%s-%02d.png", base, i))
+	}
+	return path
+}
+
+func fileExists(path string) bool {
+	_, err := os.Stat(path)
+	return err == nil
+}
diff --git a/internal/application/capture_actions_test.go b/internal/application/capture_actions_test.go
new file mode 100644
index 0000000..f25c135
--- /dev/null
+++ b/internal/application/capture_actions_test.go
@@ -0,0 +1,72 @@
+package application
+
+import (
+	"context"
+	"os"
+	"path/filepath"
+	"testing"
+)
+
+type fakeClipboard struct {
+	text  string
+	image []byte
+}
+
+func (f *fakeClipboard) WriteText(s string) error {
+	f.text = s
+	return nil
+}
+
+func (f *fakeClipboard) WriteImage(pngBytes []byte) error {
+	f.image = append([]byte(nil), pngBytes...)
+	return nil
+}
+
+type fakeNotifier struct {
+	success string
+	failure string
+}
+
+func (f *fakeNotifier) NotifySuccess(value string)  { f.success = value }
+func (f *fakeNotifier) NotifyFailure(reason string) { f.failure = reason }
+
+func TestCaptureActionsCopyImageWritesPNGToClipboard(t *testing.T) {
+	clip := &fakeClipboard{}
+	notifier := &fakeNotifier{}
+	svc := &CaptureActionsService{Clipboard: clip, Notifier: notifier}
+
+	err := svc.CopyImage(context.Background(), []byte("png"))
+	if err != nil {
+		t.Fatalf("copy image: %v", err)
+	}
+	if string(clip.image) != "png" {
+		t.Fatalf("expected image bytes copied, got %q", string(clip.image))
+	}
+	if notifier.success != "image copied to clipboard" {
+		t.Fatalf("expected copy success notification, got %q", notifier.success)
+	}
+}
+
+func TestCaptureActionsSaveImageWritesUniquePNG(t *testing.T) {
+	dir := t.TempDir()
+	svc := &CaptureActionsService{Notifier: &fakeNotifier{}}
+
+	path, err := svc.SaveImage(context.Background(), []byte("png"), dir)
+	if err != nil {
+		t.Fatalf("save image: %v", err)
+	}
+	if filepath.Dir(path) != dir {
+		t.Fatalf("expected save in %q, got %q", dir, path)
+	}
+	if data, err := os.ReadFile(path); err != nil || string(data) != "png" {
+		t.Fatalf("expected saved bytes, data=%q err=%v", string(data), err)
+	}
+
+	next, err := svc.SaveImage(context.Background(), []byte("png2"), dir)
+	if err != nil {
+		t.Fatalf("save second image: %v", err)
+	}
+	if next == path {
+		t.Fatalf("expected unique path for second save")
+	}
+}
diff --git a/internal/application/capture_ftp.go b/internal/application/capture_ftp.go
new file mode 100644
index 0000000..3df7a2a
--- /dev/null
+++ b/internal/application/capture_ftp.go
@@ -0,0 +1,150 @@
+// capture_ftp.go — application-level FTP/SFTP upload orchestration.
+//
+// Design rationale:
+//   - FTP/SFTP returns a remote filesystem path, not necessarily a public URL,
+//     so this flow stays separate from the OSSProvider-based S3 pipeline.
+//   - A tiny uploader interface keeps protocol libraries out of the
+//     application layer and makes the upload/copy/notify sequence unit-testable.
+//   - The dated filename layout is shared with SSH/SCP while FTP-specific path
+//     validation prevents an invalid prefix from escaping the login root.
+package application
+
+import (
+	"context"
+	"fmt"
+	"log/slog"
+	"strings"
+	"time"
+
+	"github.com/mmmy/snapgo/internal/domain"
+	"github.com/mmmy/snapgo/internal/infrastructure/clipboard"
+)
+
+// ftpSvcLog returns an application-layer FTP logger bound to the current
+// default slog handler.
+func ftpSvcLog() *slog.Logger { return slog.Default().With("component", "application.ftp") }
+
+// FTPUploader abstracts both FTP and SFTP adapters.
+type FTPUploader interface {
+	// Upload stores data at remoteRelPath, relative to the authenticated
+	// account's login root.
+	Upload(ctx context.Context, remoteRelPath string, data []byte) error
+}
+
+// CaptureAndFTPService wires captured PNG bytes → FTP/SFTP → clipboard →
+// notification.
+type CaptureAndFTPService struct {
+	Uploader  FTPUploader
+	Clipboard clipboard.Writer
+	Notifier  Notifier
+	Cfg       domain.FTPConfig
+}
+
+// ExecuteWithBytes uploads previously captured PNG bytes and copies a display
+// path built from the configured root directory plus the uploaded relative
+// path. RootDirectory deliberately does not affect the upload destination.
+func (s *CaptureAndFTPService) ExecuteWithBytes(ctx context.Context, pngBytes []byte) error {
+	if s.Uploader == nil {
+		s.notifyFailure("FTP/SFTP not configured")
+		return fmt.Errorf("ftp uploader is nil")
+	}
+	if len(pngBytes) == 0 {
+		s.notifyFailure("empty screenshot")
+		return fmt.Errorf("empty screenshot")
+	}
+
+	relPath, err := buildFTPRemotePath(s.Cfg.PathPrefix)
+	if err != nil {
+		s.notifyFailure(err.Error())
+		return err
+	}
+
+	protocol := normalizedFTPProtocol(s.Cfg.Protocol)
+	start := time.Now()
+	ftpSvcLog().Info("file-transfer pipeline start",
+		"protocol", protocol,
+		"host", s.Cfg.Host,
+		"user", s.Cfg.User,
+		"port", s.Cfg.Port,
+		"size", len(pngBytes),
+		"remote_path", relPath,
+		"strict_host_key", s.Cfg.StrictHostKey)
+
+	if err := s.Uploader.Upload(ctx, relPath, pngBytes); err != nil {
+		ftpSvcLog().Error("file-transfer upload failed",
+			"protocol", protocol,
+			"remote_path", relPath,
+			"elapsed", time.Since(start),
+			"err", err)
+		s.notifyFailure(strings.ToUpper(protocol) + " upload failed: " + err.Error())
+		return err
+	}
+
+	clipText := ftpShareText(protocol, s.Cfg.RootDirectory, relPath)
+	if s.Clipboard != nil {
+		if err := s.Clipboard.WriteText(clipText); err != nil {
+			s.notifyFailure("clipboard write failed: " + err.Error())
+			return err
+		}
+	}
+	if s.Notifier != nil {
+		s.Notifier.NotifySuccess(clipText)
+	}
+	ftpSvcLog().Info("file-transfer pipeline done",
+		"protocol", protocol,
+		"remote_path", relPath,
+		"total_elapsed", time.Since(start))
+	return nil
+}
+
+// buildFTPRemotePath validates the user-controlled prefix before reusing the
+// existing dated remote-path generator shared with SSH/SCP.
+func buildFTPRemotePath(prefix string) (string, error) {
+	if err := validateFTPPathPrefix(prefix); err != nil {
+		return "", err
+	}
+	prefix = strings.TrimSpace(prefix)
+	prefix = strings.TrimPrefix(prefix, "~")
+	prefix = strings.TrimLeft(prefix, "/")
+	return buildRemoteRelPath(prefix), nil
+}
+
+func validateFTPPathPrefix(prefix string) error {
+	if strings.ContainsAny(prefix, "\x00\r\n\\") {
+		return fmt.Errorf("FTP/SFTP path contains an invalid character")
+	}
+	prefix = strings.TrimSpace(prefix)
+	prefix = strings.TrimPrefix(prefix, "~")
+	prefix = strings.TrimLeft(prefix, "/")
+	for _, segment := range strings.Split(prefix, "/") {
+		if segment == ".." {
+			return fmt.Errorf("FTP/SFTP path must stay inside the login directory")
+		}
+	}
+	return nil
+}
+
+func normalizedFTPProtocol(protocol string) string {
+	if protocol == domain.FTPProtocolSFTP {
+		return domain.FTPProtocolSFTP
+	}
+	return domain.FTPProtocolFTP
+}
+
+func ftpShareText(protocol, rootDirectory, relPath string) string {
+	rootDirectory = strings.TrimSpace(rootDirectory)
+	if rootDirectory == "" {
+		if protocol == domain.FTPProtocolSFTP {
+			rootDirectory = "~/"
+		} else {
+			rootDirectory = "/"
+		}
+	}
+	return strings.TrimRight(rootDirectory, "/") + "/" + strings.TrimLeft(relPath, "/")
+}
+
+func (s *CaptureAndFTPService) notifyFailure(reason string) {
+	if s.Notifier != nil {
+		s.Notifier.NotifyFailure(reason)
+	}
+}
diff --git a/internal/application/capture_ftp_test.go b/internal/application/capture_ftp_test.go
new file mode 100644
index 0000000..72dbcfe
--- /dev/null
+++ b/internal/application/capture_ftp_test.go
@@ -0,0 +1,160 @@
+package application
+
+import (
+	"context"
+	"errors"
+	"strings"
+	"testing"
+
+	"github.com/mmmy/snapgo/internal/domain"
+)
+
+type fakeFTPUploader struct {
+	path string
+	data []byte
+	err  error
+}
+
+func (f *fakeFTPUploader) Upload(_ context.Context, remoteRelPath string, data []byte) error {
+	f.path = remoteRelPath
+	f.data = append([]byte(nil), data...)
+	return f.err
+}
+
+func TestCaptureAndFTPServiceUploadsAndCopiesFTPPath(t *testing.T) {
+	uploader := &fakeFTPUploader{}
+	clip := &fakeClipboard{}
+	notifier := &fakeNotifier{}
+	svc := &CaptureAndFTPService{
+		Uploader:  uploader,
+		Clipboard: clip,
+		Notifier:  notifier,
+		Cfg: domain.FTPConfig{
+			Protocol:   domain.FTPProtocolFTP,
+			PathPrefix: "snapgo/",
+		},
+	}
+
+	if err := svc.ExecuteWithBytes(context.Background(), []byte("png")); err != nil {
+		t.Fatalf("upload FTP screenshot: %v", err)
+	}
+	if string(uploader.data) != "png" {
+		t.Fatalf("expected PNG bytes, got %q", string(uploader.data))
+	}
+	if !strings.HasPrefix(uploader.path, "snapgo/") || !strings.HasSuffix(uploader.path, ".png") {
+		t.Fatalf("unexpected remote path %q", uploader.path)
+	}
+	if clip.text != "/"+uploader.path {
+		t.Fatalf("expected FTP root path copied, got %q", clip.text)
+	}
+	if notifier.success != clip.text {
+		t.Fatalf("expected success notification %q, got %q", clip.text, notifier.success)
+	}
+}
+
+func TestCaptureAndFTPServiceCopiesConfiguredRootPath(t *testing.T) {
+	uploader := &fakeFTPUploader{}
+	clip := &fakeClipboard{}
+	svc := &CaptureAndFTPService{
+		Uploader:  uploader,
+		Clipboard: clip,
+		Cfg: domain.FTPConfig{
+			Protocol:      domain.FTPProtocolSFTP,
+			RootDirectory: "~/ftp/",
+			PathPrefix:    "images",
+		},
+	}
+
+	if err := svc.ExecuteWithBytes(context.Background(), []byte("png")); err != nil {
+		t.Fatalf("upload SFTP screenshot: %v", err)
+	}
+	if clip.text != "~/ftp/"+uploader.path {
+		t.Fatalf("expected configured SFTP root path copied, got %q", clip.text)
+	}
+}
+
+func TestFTPShareTextJoinsConfiguredRootAndRemoteDirectory(t *testing.T) {
+	const relPath = "snapgo/2026/07/20260713-110413-18lnbx.png"
+	const want = "~/ftp/snapgo/2026/07/20260713-110413-18lnbx.png"
+	if got := ftpShareText(domain.FTPProtocolSFTP, "~/ftp/", relPath); got != want {
+		t.Fatalf("ftpShareText() = %q, want %q", got, want)
+	}
+}
+
+func TestFTPShareTextUsesProtocolDefaultWhenRootDirectoryIsEmpty(t *testing.T) {
+	const relPath = "snapgo/2026/07/image.png"
+	tests := []struct {
+		name     string
+		protocol string
+		want     string
+	}{
+		{name: "FTP", protocol: domain.FTPProtocolFTP, want: "/" + relPath},
+		{name: "SFTP", protocol: domain.FTPProtocolSFTP, want: "~/" + relPath},
+	}
+
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			if got := ftpShareText(tt.protocol, "", relPath); got != tt.want {
+				t.Fatalf("ftpShareText() = %q, want %q", got, tt.want)
+			}
+		})
+	}
+}
+
+func TestCaptureAndFTPServiceRejectsTraversalBeforeUpload(t *testing.T) {
+	uploader := &fakeFTPUploader{}
+	notifier := &fakeNotifier{}
+	svc := &CaptureAndFTPService{
+		Uploader: uploader,
+		Notifier: notifier,
+		Cfg: domain.FTPConfig{
+			Protocol:   domain.FTPProtocolSFTP,
+			PathPrefix: "../../outside",
+		},
+	}
+
+	err := svc.ExecuteWithBytes(context.Background(), []byte("png"))
+	if err == nil {
+		t.Fatal("expected traversal prefix to fail")
+	}
+	if uploader.path != "" {
+		t.Fatalf("uploader should not run, got path %q", uploader.path)
+	}
+	if notifier.failure == "" {
+		t.Fatal("expected failure notification")
+	}
+}
+
+func TestCaptureAndFTPServiceSurfacesUploadFailure(t *testing.T) {
+	want := errors.New("server unavailable")
+	uploader := &fakeFTPUploader{err: want}
+	clip := &fakeClipboard{}
+	notifier := &fakeNotifier{}
+	svc := &CaptureAndFTPService{
+		Uploader:  uploader,
+		Clipboard: clip,
+		Notifier:  notifier,
+		Cfg:       domain.FTPConfig{Protocol: domain.FTPProtocolFTP},
+	}
+
+	err := svc.ExecuteWithBytes(context.Background(), []byte("png"))
+	if !errors.Is(err, want) {
+		t.Fatalf("expected %v, got %v", want, err)
+	}
+	if clip.text != "" {
+		t.Fatalf("clipboard should remain empty, got %q", clip.text)
+	}
+	if !strings.Contains(notifier.failure, "server unavailable") {
+		t.Fatalf("unexpected failure notification %q", notifier.failure)
+	}
+}
+
+func TestBuildFTPRemotePathNormalizesLoginRootMarkers(t *testing.T) {
+	remotePath, err := buildFTPRemotePath("  ~////snapgo/  ")
+	if err != nil {
+		t.Fatalf("build remote path: %v", err)
+	}
+	if strings.HasPrefix(remotePath, "/") || !strings.HasPrefix(remotePath, "snapgo/") {
+		t.Fatalf("expected relative snapgo path, got %q", remotePath)
+	}
+}
diff --git a/internal/application/capture_ocr.go b/internal/application/capture_ocr.go
new file mode 100644
index 0000000..4dd572f
--- /dev/null
+++ b/internal/application/capture_ocr.go
@@ -0,0 +1,57 @@
+package application
+
+import (
+	"context"
+	"fmt"
+	"strings"
+
+	"github.com/mmmy/snapgo/internal/infrastructure/clipboard"
+)
+
+// OCRRecognizer describes a provider capable of extracting text from a PNG
+// screenshot.
+type OCRRecognizer interface {
+	RecognizeText(ctx context.Context, pngBytes []byte) (string, error)
+}
+
+// CaptureOCRService wires screenshot bytes -> OCR provider -> clipboard. It
+// leaves progress reporting to the caller so native and web overlays can share
+// the same status HUD.
+type CaptureOCRService struct {
+	Recognizer OCRRecognizer
+	Clipboard  clipboard.Writer
+}
+
+// Recognize asks the configured OCR provider to extract text from the PNG.
+func (s *CaptureOCRService) Recognize(ctx context.Context, pngBytes []byte) (string, error) {
+	if s.Recognizer == nil {
+		return "", fmt.Errorf("ocr is not configured")
+	}
+	if len(pngBytes) == 0 {
+		return "", fmt.Errorf("empty screenshot")
+	}
+	text, err := s.Recognizer.RecognizeText(ctx, pngBytes)
+	if err != nil {
+		return "", err
+	}
+	text = strings.TrimSpace(text)
+	if text == "" {
+		return "", fmt.Errorf("ocr result is empty")
+	}
+	return text, nil
+}
+
+// CopyText writes the extracted text to the clipboard.
+func (s *CaptureOCRService) CopyText(_ context.Context, text string) error {
+	text = strings.TrimSpace(text)
+	if text == "" {
+		return fmt.Errorf("empty ocr text")
+	}
+	if s.Clipboard == nil {
+		return fmt.Errorf("clipboard is not configured")
+	}
+	if err := s.Clipboard.WriteText(text); err != nil {
+		return fmt.Errorf("clipboard write failed: %w", err)
+	}
+	return nil
+}
diff --git a/internal/application/capture_ocr_test.go b/internal/application/capture_ocr_test.go
new file mode 100644
index 0000000..000b651
--- /dev/null
+++ b/internal/application/capture_ocr_test.go
@@ -0,0 +1,50 @@
+package application
+
+import (
+	"context"
+	"testing"
+)
+
+type fakeOCRRecognizer struct {
+	image []byte
+	text  string
+}
+
+func (f *fakeOCRRecognizer) RecognizeText(_ context.Context, pngBytes []byte) (string, error) {
+	f.image = append([]byte(nil), pngBytes...)
+	if f.text == "" {
+		return "extracted text", nil
+	}
+	return f.text, nil
+}
+
+func TestCaptureOCRServiceRecognizesAndCopies(t *testing.T) {
+	ctx := context.Background()
+	recognizer := &fakeOCRRecognizer{}
+	clip := &fakeClipboard{}
+	svc := &CaptureOCRService{Recognizer: recognizer, Clipboard: clip}
+
+	text, err := svc.Recognize(ctx, []byte("png"))
+	if err != nil {
+		t.Fatalf("recognize: %v", err)
+	}
+	if string(recognizer.image) != "png" {
+		t.Fatalf("expected screenshot bytes forwarded, got %q", string(recognizer.image))
+	}
+	if text != "extracted text" {
+		t.Fatalf("expected extracted text, got %q", text)
+	}
+	if err := svc.CopyText(ctx, text); err != nil {
+		t.Fatalf("copy text: %v", err)
+	}
+	if clip.text != "extracted text" {
+		t.Fatalf("expected ocr text copied, got %q", clip.text)
+	}
+}
+
+func TestCaptureOCRServiceRejectsEmptyResult(t *testing.T) {
+	svc := &CaptureOCRService{Recognizer: &fakeOCRRecognizer{text: " \n "}}
+	if _, err := svc.Recognize(context.Background(), []byte("png")); err == nil {
+		t.Fatalf("expected empty OCR result to fail")
+	}
+}
diff --git a/internal/application/capture_ssh.go b/internal/application/capture_ssh.go
new file mode 100644
index 0000000..3d0adaa
--- /dev/null
+++ b/internal/application/capture_ssh.go
@@ -0,0 +1,135 @@
+// capture_ssh.go — application-level service that uploads a screenshot to
+// a remote host via SSH/SCP.
+//
+// Design rationale:
+//   - Mirrors CaptureAndUploadService so the UI layer can call a single
+//     well-defined entrypoint per destination kind.
+//   - Depends on a small Uploader interface rather than the concrete SSH
+//     adapter so the service is unit-testable without a real SSH server.
+//   - The remote object key is generated through the same date-based
+//     scheme used for S3 uploads (see buildObjectKey in capture_upload.go)
+//     so users get a consistent layout regardless of destination.
+package application
+
+import (
+	"context"
+	"fmt"
+	"log/slog"
+	"os"
+	"strings"
+	"time"
+
+	"github.com/mmmy/snapgo/internal/domain"
+	"github.com/mmmy/snapgo/internal/infrastructure/clipboard"
+)
+
+// sshSvcLog returns an application-layer SSH logger bound to the CURRENT
+// default handler.
+//
+// 为什么是函数而非包级 slog.With 变量: 包级变量会在 main() 调用
+// logging.Init() 之前被初始化, 捕获到 bootstrap handler, 之后 SetDefault
+// 切换 handler 时会产生双前缀日志. 惰性读取 slog.Default() 可避免该问题.
+func sshSvcLog() *slog.Logger { return slog.Default().With("component", "application.ssh") }
+
+// SSHUploader abstracts the SSH/SCP adapter so this layer does not depend
+// on golang.org/x/crypto/ssh directly. The infrastructure package wires a
+// concrete implementation through a small adapter below.
+type SSHUploader interface {
+	// Upload writes `data` to remoteRelPath (relative to the user's $HOME)
+	// with the given file mode and returns once the remote has acknowledged
+	// the transfer.
+	Upload(ctx context.Context, remoteRelPath string, data []byte, mode os.FileMode) error
+}
+
+// CaptureAndSSHService wires capture-bytes → SCP → clipboard → notify.
+type CaptureAndSSHService struct {
+	Uploader  SSHUploader
+	Clipboard clipboard.Writer
+	Notifier  Notifier
+
+	// Cfg is the active SSH configuration; we keep a copy on the service
+	// so PathPrefix and PublicURLBase are explicitly part of the contract
+	// rather than reaching into a shared global.
+	Cfg domain.SSHConfig
+}
+
+// ExecuteWithBytes uploads previously-captured PNG bytes via SCP and copies
+// either a public URL (if configured) or the remote-relative path to the
+// clipboard. Either is useful: a URL for sharing, a path so the user can
+// inspect / scp it manually.
+func (s *CaptureAndSSHService) ExecuteWithBytes(ctx context.Context, pngBytes []byte) error {
+	if s.Uploader == nil {
+		sshSvcLog().Warn("ExecuteWithBytes aborted: uploader nil")
+		s.notifyFailure("SSH not configured")
+		return fmt.Errorf("ssh uploader is nil")
+	}
+	if len(pngBytes) == 0 {
+		sshSvcLog().Warn("ExecuteWithBytes aborted: empty screenshot")
+		s.notifyFailure("empty screenshot")
+		return fmt.Errorf("empty screenshot")
+	}
+	relPath := buildRemoteRelPath(s.Cfg.PathPrefix)
+	sshSvcLog().Info("save-remote pipeline start",
+		"host", s.Cfg.Host, "user", s.Cfg.User, "port", s.Cfg.Port,
+		"size", len(pngBytes), "remote_path", relPath,
+		"strict_host_key", s.Cfg.StrictHostKey)
+	start := time.Now()
+	if err := s.Uploader.Upload(ctx, relPath, pngBytes, 0o644); err != nil {
+		sshSvcLog().Error("save-remote upload failed",
+			"remote_path", relPath, "elapsed", time.Since(start), "err", err)
+		s.notifyFailure("ssh upload failed: " + err.Error())
+		return err
+	}
+	sshSvcLog().Info("save-remote upload ok",
+		"remote_path", relPath, "elapsed", time.Since(start))
+
+	clipText := remoteShareText(relPath)
+	if s.Clipboard != nil {
+		if err := s.Clipboard.WriteText(clipText); err != nil {
+			sshSvcLog().Error("save-remote clipboard write failed", "err", err)
+			s.notifyFailure("clipboard write failed: " + err.Error())
+			return err
+		}
+		sshSvcLog().Debug("save-remote clipboard write ok", "text", clipText)
+	}
+	if s.Notifier != nil {
+		s.Notifier.NotifySuccess(clipText)
+	}
+	sshSvcLog().Info("save-remote pipeline done",
+		"remote_path", relPath, "total_elapsed", time.Since(start))
+	return nil
+}
+
+// remoteShareText returns the clipboard string for an SSH upload.
+//
+// 设计理由: 用户反馈只需要远端机器上的路径 (方便登录后直接定位文件),
+// 不需要 user@host 前缀, 也不再支持 Public URL Base. 这里统一返回
+// "~/<relPath>", 即相对远端 $HOME 的可读路径.
+func remoteShareText(relPath string) string {
+	return "~/" + relPath
+}
+
+// buildRemoteRelPath produces the remote-relative target path with the
+// same date-grouped layout used by the S3 pipeline.
+func buildRemoteRelPath(prefix string) string {
+	prefix = strings.TrimSpace(prefix)
+	prefix = strings.TrimPrefix(prefix, "~")
+	prefix = strings.TrimPrefix(prefix, "/")
+	if prefix != "" && !strings.HasSuffix(prefix, "/") {
+		prefix += "/"
+	}
+	now := time.Now()
+	return fmt.Sprintf("%s%s/%s/%s-%s.png",
+		prefix,
+		now.Format("2006"),
+		now.Format("01"),
+		now.Format("20060102-150405"),
+		randomSuffix(6),
+	)
+}
+
+func (s *CaptureAndSSHService) notifyFailure(reason string) {
+	if s.Notifier != nil {
+		s.Notifier.NotifyFailure(reason)
+	}
+}
diff --git a/internal/application/capture_summary.go b/internal/application/capture_summary.go
new file mode 100644
index 0000000..5b71a9f
--- /dev/null
+++ b/internal/application/capture_summary.go
@@ -0,0 +1,158 @@
+package application
+
+import (
+	"context"
+	"encoding/base64"
+	"fmt"
+	"net/http"
+	"time"
+
+	"github.com/mmmy/snapgo/internal/domain"
+	"github.com/mmmy/snapgo/internal/infrastructure/clipboard"
+)
+
+// VisionSummarizer describes a multimodal model capable of reading an image
+// reference (either a public https URL or an inline base64 data URL) and
+// returning a textual summary.
+type VisionSummarizer interface {
+	SummarizeImage(ctx context.Context, prompt string, imageURL string) (string, error)
+}
+
+// ObjectDeleter is an optional capability an OSSProvider may implement so the
+// summary pipeline can delete the temporary screenshot it uploaded purely so a
+// remote model could fetch it. It is kept separate from domain.OSSProvider to
+// avoid forcing every provider (or test fake) to implement deletion.
+type ObjectDeleter interface {
+	Delete(ctx context.Context, key string) error
+}
+
+// CaptureSummaryService wires screenshot bytes -> multimodal LLM summary ->
+// clipboard. It prefers sending the image inline as a base64 data URL and only
+// falls back to an S3 upload (public URL) when the payload exceeds the
+// provider's inline size limit. It intentionally does not notify UI state
+// itself: the caller emits fine-grained "uploading / recognizing / done"
+// progress.
+type CaptureSummaryService struct {
+	Provider   domain.OSSProvider
+	Summarizer VisionSummarizer
+	Clipboard  clipboard.Writer
+	Prompt     string
+	PathPrefix string
+	// MaxInlineBytes caps the PNG size eligible for inline base64. Payloads
+	// larger than this must go through S3. A value <= 0 disables the inline
+	// path entirely (always upload).
+	MaxInlineBytes int
+	// HTTPClient is used for the public-URL reachability probe. Defaults to a
+	// short-timeout client when nil.
+	HTTPClient *http.Client
+}
+
+// CanInline reports whether the screenshot is small enough to be embedded
+// directly in the request as a base64 data URL.
+func (s *CaptureSummaryService) CanInline(pngBytes []byte) bool {
+	return s.MaxInlineBytes > 0 && len(pngBytes) <= s.MaxInlineBytes
+}
+
+// InlineDataURL encodes the PNG as an RFC 2397 data URL suitable for the
+// image_url field of an OpenAI-compatible request.
+func (s *CaptureSummaryService) InlineDataURL(pngBytes []byte) string {
+	return "data:image/png;base64," + base64.StdEncoding.EncodeToString(pngBytes)
+}
+
+// UploadImage uploads the screenshot and returns the public URL visible to
+// the multimodal provider. Used only when the image is too large to inline.
+func (s *CaptureSummaryService) UploadImage(ctx context.Context, pngBytes []byte) (*domain.UploadResult, error) {
+	if s.Provider == nil {
+		return nil, fmt.Errorf("s3 is not configured")
+	}
+	if len(pngBytes) == 0 {
+		return nil, fmt.Errorf("empty screenshot")
+	}
+	key := buildObjectKey(s.PathPrefix)
+	start := time.Now()
+	url, err := s.Provider.Upload(ctx, key, pngBytes, "image/png")
+	if err != nil {
+		return nil, fmt.Errorf("s3 put object: %w", err)
+	}
+	return &domain.UploadResult{
+		URL:      url,
+		Key:      key,
+		Provider: s.Provider.Name(),
+		Elapsed:  time.Since(start),
+	}, nil
+}
+
+// EnsureReachable verifies the public URL can actually be fetched, so we can
+// surface a clear "link not reachable" message instead of an opaque provider
+// error when the bucket is private or fronted by an inaccessible CDN.
+func (s *CaptureSummaryService) EnsureReachable(ctx context.Context, imageURL string) error {
+	client := s.HTTPClient
+	if client == nil {
+		client = &http.Client{Timeout: 10 * time.Second}
+	}
+	probe := func(method string) (int, error) {
+		req, err := http.NewRequestWithContext(ctx, method, imageURL, nil)
+		if err != nil {
+			return 0, err
+		}
+		resp, err := client.Do(req)
+		if err != nil {
+			return 0, err
+		}
+		resp.Body.Close()
+		return resp.StatusCode, nil
+	}
+	status, err := probe(http.MethodHead)
+	// Some S3-compatible endpoints reject HEAD; retry with GET before failing.
+	if err != nil || status == http.StatusMethodNotAllowed || status == http.StatusForbidden {
+		if s, gerr := probe(http.MethodGet); gerr == nil {
+			status, err = s, nil
+		} else if err == nil {
+			err = gerr
+		}
+	}
+	if err != nil {
+		return fmt.Errorf("图片链接不可达（模型无法读取上传的截图）：%w", err)
+	}
+	if status < 200 || status >= 300 {
+		return fmt.Errorf("图片链接不可达：HTTP %d，请确认对象存储 bucket 公网可读或已正确配置 PublicURLBase", status)
+	}
+	return nil
+}
+
+// DeleteUploaded removes the temporary object from S3 if the provider supports
+// deletion. It is best-effort: a nil return means either success or that the
+// provider cannot delete.
+func (s *CaptureSummaryService) DeleteUploaded(ctx context.Context, key string) error {
+	if key == "" {
+		return nil
+	}
+	deleter, ok := s.Provider.(ObjectDeleter)
+	if !ok {
+		return nil
+	}
+	return deleter.Delete(ctx, key)
+}
+
+// Summarize asks the configured model to summarize the image reference, which
+// may be a public URL or an inline base64 data URL.
+func (s *CaptureSummaryService) Summarize(ctx context.Context, imageURL string) (string, error) {
+	if s.Summarizer == nil {
+		return "", fmt.Errorf("llm is not configured")
+	}
+	return s.Summarizer.SummarizeImage(ctx, s.Prompt, imageURL)
+}
+
+// CopySummary writes the final summary text to the clipboard.
+func (s *CaptureSummaryService) CopySummary(_ context.Context, summary string) error {
+	if summary == "" {
+		return fmt.Errorf("empty summary")
+	}
+	if s.Clipboard == nil {
+		return fmt.Errorf("clipboard is not configured")
+	}
+	if err := s.Clipboard.WriteText(summary); err != nil {
+		return fmt.Errorf("clipboard write failed: %w", err)
+	}
+	return nil
+}
diff --git a/internal/application/capture_summary_test.go b/internal/application/capture_summary_test.go
new file mode 100644
index 0000000..7c69e45
--- /dev/null
+++ b/internal/application/capture_summary_test.go
@@ -0,0 +1,140 @@
+package application
+
+import (
+	"context"
+	"strings"
+	"testing"
+)
+
+type fakeOSSProvider struct {
+	key         string
+	data        []byte
+	contentType string
+	url         string
+	deletedKey  string
+}
+
+func (f *fakeOSSProvider) Upload(_ context.Context, key string, data []byte, contentType string) (string, error) {
+	f.key = key
+	f.data = append([]byte(nil), data...)
+	f.contentType = contentType
+	if f.url == "" {
+		return "https://cdn.example.com/" + key, nil
+	}
+	return f.url, nil
+}
+
+func (f *fakeOSSProvider) Name() string { return "fake" }
+
+func (f *fakeOSSProvider) Delete(_ context.Context, key string) error {
+	f.deletedKey = key
+	return nil
+}
+
+type fakeSummarizer struct {
+	prompt string
+	url    string
+	text   string
+}
+
+func (f *fakeSummarizer) SummarizeImage(_ context.Context, prompt string, imageURL string) (string, error) {
+	f.prompt = prompt
+	f.url = imageURL
+	if f.text == "" {
+		return "summary text", nil
+	}
+	return f.text, nil
+}
+
+func TestCaptureSummaryServiceUploadsSummarizesAndCopies(t *testing.T) {
+	ctx := context.Background()
+	provider := &fakeOSSProvider{}
+	summarizer := &fakeSummarizer{}
+	clip := &fakeClipboard{}
+	svc := &CaptureSummaryService{
+		Provider:   provider,
+		Summarizer: summarizer,
+		Clipboard:  clip,
+		Prompt:     "describe screenshot",
+		PathPrefix: "snapgo/",
+	}
+
+	uploaded, err := svc.UploadImage(ctx, []byte("png"))
+	if err != nil {
+		t.Fatalf("upload image: %v", err)
+	}
+	if provider.contentType != "image/png" {
+		t.Fatalf("expected image/png content type, got %q", provider.contentType)
+	}
+	if string(provider.data) != "png" {
+		t.Fatalf("expected uploaded png bytes, got %q", string(provider.data))
+	}
+
+	summary, err := svc.Summarize(ctx, uploaded.URL)
+	if err != nil {
+		t.Fatalf("summarize: %v", err)
+	}
+	if summarizer.prompt != "describe screenshot" {
+		t.Fatalf("expected prompt forwarded, got %q", summarizer.prompt)
+	}
+	if summarizer.url != uploaded.URL {
+		t.Fatalf("expected uploaded url forwarded, got %q", summarizer.url)
+	}
+	if summary != "summary text" {
+		t.Fatalf("expected summary text, got %q", summary)
+	}
+
+	if err := svc.CopySummary(ctx, summary); err != nil {
+		t.Fatalf("copy summary: %v", err)
+	}
+	if clip.text != "summary text" {
+		t.Fatalf("expected summary copied, got %q", clip.text)
+	}
+}
+
+func TestCaptureSummaryServiceInlineDataURL(t *testing.T) {
+	svc := &CaptureSummaryService{MaxInlineBytes: 10}
+
+	if !svc.CanInline([]byte("small")) {
+		t.Fatalf("expected 5-byte payload to be inlinable under 10-byte cap")
+	}
+	if svc.CanInline([]byte("this is definitely too big")) {
+		t.Fatalf("expected oversized payload to be rejected for inlining")
+	}
+
+	url := svc.InlineDataURL([]byte("png"))
+	if !strings.HasPrefix(url, "data:image/png;base64,") {
+		t.Fatalf("expected base64 data URL prefix, got %q", url)
+	}
+	if strings.Contains(url, "https://") {
+		t.Fatalf("inline URL must not be a remote URL, got %q", url)
+	}
+}
+
+func TestCaptureSummaryServiceDeleteUploadedUsesDeleter(t *testing.T) {
+	provider := &fakeOSSProvider{}
+	svc := &CaptureSummaryService{Provider: provider}
+
+	if err := svc.DeleteUploaded(context.Background(), "snapgo/a.png"); err != nil {
+		t.Fatalf("delete uploaded: %v", err)
+	}
+	if provider.deletedKey != "snapgo/a.png" {
+		t.Fatalf("expected object deleted, got %q", provider.deletedKey)
+	}
+}
+
+func TestCaptureSummaryServiceDeleteUploadedNoDeleterIsNoop(t *testing.T) {
+	// A provider without Delete must not error when cleanup is requested.
+	svc := &CaptureSummaryService{Provider: nonDeletingProvider{}}
+	if err := svc.DeleteUploaded(context.Background(), "snapgo/a.png"); err != nil {
+		t.Fatalf("expected no-op delete, got %v", err)
+	}
+}
+
+type nonDeletingProvider struct{}
+
+func (nonDeletingProvider) Upload(_ context.Context, _ string, _ []byte, _ string) (string, error) {
+	return "https://cdn.example.com/x.png", nil
+}
+
+func (nonDeletingProvider) Name() string { return "no-delete" }
diff --git a/internal/application/capture_upload.go b/internal/application/capture_upload.go
new file mode 100644
index 0000000..30d6a8d
--- /dev/null
+++ b/internal/application/capture_upload.go
@@ -0,0 +1,147 @@
+// Package application contains use-case orchestrators that the presentation
+// layer (Wails bindings, frontend) calls into.
+//
+// Design rationale:
+// - Application code only depends on domain interfaces; concrete adapters
+//   are injected from main.go. This keeps the layer easy to unit test and
+//   future-proofs us against swapping providers.
+package application
+
+import (
+	"context"
+	"fmt"
+	"image"
+	"math/rand"
+	"os"
+	"path/filepath"
+	"time"
+
+	"github.com/mmmy/snapgo/internal/domain"
+	"github.com/mmmy/snapgo/internal/infrastructure/clipboard"
+	"github.com/mmmy/snapgo/internal/infrastructure/screencapture"
+)
+
+// Notifier sends user-facing UI notifications. We define it as an interface
+// so the application package does not depend on the Wails runtime.
+type Notifier interface {
+	NotifySuccess(url string)
+	NotifyFailure(reason string)
+}
+
+// CaptureAndUploadService wires capture → upload → clipboard → notify.
+type CaptureAndUploadService struct {
+	Capturer  screencapture.Capturer
+	Provider  domain.OSSProvider
+	Clipboard clipboard.Writer
+	Notifier  Notifier
+	// FallbackDir is the directory where PNGs are saved when upload fails.
+	FallbackDir string
+	// PathPrefix is prepended to every generated object key.
+	PathPrefix string
+}
+
+// Execute runs the full pipeline for a single screenshot region.
+//
+// On any failure after capture, the PNG is written to FallbackDir and the
+// local file path is copied to the clipboard so the user can still recover
+// the image manually.
+func (s *CaptureAndUploadService) Execute(ctx context.Context, rect image.Rectangle) (*domain.UploadResult, error) {
+	if s.Provider == nil {
+		s.Notifier.NotifyFailure("OSS not configured")
+		return nil, fmt.Errorf("oss provider is nil")
+	}
+
+	pngBytes, err := s.Capturer.CaptureRegion(rect)
+	if err != nil {
+		s.Notifier.NotifyFailure("capture failed: " + err.Error())
+		return nil, err
+	}
+	return s.uploadAndCopy(ctx, pngBytes)
+}
+
+// ExecuteWithBytes runs only the upload-clipboard-notify portion of the
+// pipeline using PNG bytes that have already been produced by an upstream
+// capture step (e.g. macOS's interactive picker). Splitting this out keeps
+// the service free of any knowledge about how the pixels were obtained.
+func (s *CaptureAndUploadService) ExecuteWithBytes(ctx context.Context, pngBytes []byte) error {
+	if s.Provider == nil {
+		s.Notifier.NotifyFailure("OSS not configured")
+		return fmt.Errorf("oss provider is nil")
+	}
+	if len(pngBytes) == 0 {
+		s.Notifier.NotifyFailure("empty screenshot")
+		return fmt.Errorf("empty screenshot")
+	}
+	_, err := s.uploadAndCopy(ctx, pngBytes)
+	return err
+}
+
+// uploadAndCopy is the shared tail of Execute / ExecuteWithBytes. Extracting
+// this avoids duplicating the failure-handling and clipboard logic.
+func (s *CaptureAndUploadService) uploadAndCopy(ctx context.Context, pngBytes []byte) (*domain.UploadResult, error) {
+	key := buildObjectKey(s.PathPrefix)
+	start := time.Now()
+	url, uploadErr := s.Provider.Upload(ctx, key, pngBytes, "image/png")
+	if uploadErr != nil {
+		path := s.fallback(pngBytes)
+		_ = s.Clipboard.WriteText(path)
+		s.Notifier.NotifyFailure("upload failed: " + uploadErr.Error())
+		return nil, uploadErr
+	}
+
+	if err := s.Clipboard.WriteText(url); err != nil {
+		s.Notifier.NotifyFailure("clipboard write failed: " + err.Error())
+		return nil, err
+	}
+
+	s.Notifier.NotifySuccess(url)
+
+	return &domain.UploadResult{
+		URL:      url,
+		Key:      key,
+		Provider: s.Provider.Name(),
+		Elapsed:  time.Since(start),
+	}, nil
+}
+
+// fallback persists the PNG locally and returns the absolute path.
+// Errors are swallowed because the caller has already failed once and we
+// must not mask the original failure with a secondary error.
+func (s *CaptureAndUploadService) fallback(data []byte) string {
+	if s.FallbackDir == "" {
+		s.FallbackDir = filepath.Join(os.TempDir(), "SnapGo")
+	}
+	_ = os.MkdirAll(s.FallbackDir, 0o755)
+	name := fmt.Sprintf("%s.png", time.Now().Format("20060102-150405"))
+	path := filepath.Join(s.FallbackDir, name)
+	_ = os.WriteFile(path, data, 0o644)
+	return path
+}
+
+// buildObjectKey produces a date-grouped object key with a 6-char random
+// suffix to avoid collisions when many screenshots happen in the same second.
+//
+// The template is intentionally hard-coded for the MVP; making it user-
+// configurable is left to a follow-up spec.
+func buildObjectKey(prefix string) string {
+	now := time.Now()
+	return fmt.Sprintf("%s%s/%s/%s-%s.png",
+		prefix,
+		now.Format("2006"),
+		now.Format("01"),
+		now.Format("20060102-150405"),
+		randomSuffix(6),
+	)
+}
+
+const suffixAlphabet = "abcdefghijklmnopqrstuvwxyz0123456789"
+
+// randomSuffix produces a short non-cryptographic identifier sufficient for
+// avoiding key collisions among consecutive captures.
+func randomSuffix(n int) string {
+	b := make([]byte, n)
+	for i := range b {
+		b[i] = suffixAlphabet[rand.Intn(len(suffixAlphabet))]
+	}
+	return string(b)
+}
diff --git a/internal/domain/config.go b/internal/domain/config.go
new file mode 100644
index 0000000..73fe143
--- /dev/null
+++ b/internal/domain/config.go
@@ -0,0 +1,540 @@
+// Package domain — configuration types.
+//
+// S3Config, SSHConfig, and FTPConfig are intentionally split into their own
+// structs so future providers can introduce configuration types side-by-side
+// without polluting the core domain types file.
+package domain
+
+// S3Config describes the connection parameters for any S3-compatible
+// endpoint (AWS S3, MinIO, Cloudflare R2, Backblaze B2, Aliyun OSS S3
+// endpoint, etc.).
+//
+// Field design notes:
+//   - PathPrefix supports object name templating so users can group screenshots
+//     by date.
+//   - PublicURLBase is optional to support CDN-fronted buckets; otherwise the
+//     adapter falls back to "{Endpoint}/{Bucket}/{Key}" (path-style).
+//   - UsePathStyle defaults to true because many self-hosted MinIO / R2
+//     deployments do not support virtual-hosted-style addressing.
+type S3Config struct {
+	Endpoint        string `json:"endpoint"`
+	Region          string `json:"region"`
+	Bucket          string `json:"bucket"`
+	AccessKeyID     string `json:"accessKeyId"`
+	SecretAccessKey string `json:"secretAccessKey"`
+	PathPrefix      string `json:"pathPrefix"`
+	PublicURLBase   string `json:"publicUrlBase"`
+	UsePathStyle    bool   `json:"usePathStyle"`
+}
+
+// SSHConfig describes the parameters required to upload a screenshot via
+// SSH/SCP to a remote host.
+//
+// Field design notes:
+//   - Host / Port form the destination endpoint. Port defaults to 22 when 0.
+//   - User is the SSH login name.
+//   - AuthMethod selects how the connection authenticates:
+//     "password"     → password only, via the in-process Go SSH client.
+//     "key"          → ssh-agent + ~/.ssh/id_* key files (no password),
+//     via the in-process Go SSH client.
+//     "kerberos"     → delegate to the system /usr/bin/ssh binary so the
+//     existing Kerberos (GSSAPI) credential cache from
+//     `kinit` is reused. Native GSSAPI is required here
+//     because macOS stores tickets in an API: ccache
+//     that pure-Go SSH libraries cannot read.
+//     "" / "builtin" → legacy combined behaviour (password → agent → key
+//     files) kept only for backward compatibility with
+//     configs written before the method was split.
+//   - Password is optional; when empty the implementation falls back to the
+//     local SSH agent or ~/.ssh/id_* keys (i.e. the user is responsible for
+//     having password-less access already configured on this machine).
+//     It is ignored entirely when AuthMethod is "kerberos".
+//   - PathPrefix is interpreted *relative to the remote user's $HOME*. The
+//     UI presents it as "~/<PathPrefix>" so the user cannot escape the home
+//     directory by writing absolute paths. Leading "/" or "~" markers are
+//     stripped before the path is used.
+//   - StrictHostKey toggles host key verification. When false the client
+//     uses ssh.InsecureIgnoreHostKey() to mimic `scp -o StrictHostKeyChecking=no`,
+//     trading some security for first-launch usability on personal LANs.
+//   - KnownHostsPath defaults to ~/.ssh/known_hosts when empty and is only
+//     used while StrictHostKey is true.
+//   - ConnectTimeoutSecs caps the network handshake duration so a wrong
+//     endpoint does not hang the capture flow indefinitely.
+type SSHConfig struct {
+	Host               string `json:"host"`
+	Port               int    `json:"port"`
+	User               string `json:"user"`
+	AuthMethod         string `json:"authMethod"`
+	Password           string `json:"password"`
+	PathPrefix         string `json:"pathPrefix"`
+	StrictHostKey      bool   `json:"strictHostKey"`
+	KnownHostsPath     string `json:"knownHostsPath"`
+	ConnectTimeoutSecs int    `json:"connectTimeoutSecs"`
+}
+
+// FTPConfig describes a file-transfer destination reached through FTP or
+// SFTP. It is intentionally separate from SSHConfig: SFTP uses the SSH
+// transport, but it is a different file-transfer protocol from the existing
+// SCP action and has its own remote-root semantics.
+//
+// Field design notes:
+//   - Protocol is either "ftp" or "sftp". Their default ports are 21 and 22.
+//   - AuthMethod is used only by SFTP. "password" uses Password, while "key"
+//     reuses the local ssh-agent and ~/.ssh/id_* discovery used by SSH/SCP.
+//   - PathPrefix is relative to the account's login root. The application
+//     rejects absolute paths and traversal segments before uploading.
+//   - RootDirectory is only used to build the path copied to the clipboard.
+//     Keeping it separate from PathPrefix lets the server expose a login root
+//     such as "~/ftp/" while uploads still target a relative directory such
+//     as "snapgo/".
+//   - StrictHostKey and KnownHostsPath apply only to SFTP. Plain FTP has no
+//     host-key mechanism and sends credentials and data without encryption.
+type FTPConfig struct {
+	Protocol           string `json:"protocol"`
+	Host               string `json:"host"`
+	Port               int    `json:"port"`
+	User               string `json:"user"`
+	AuthMethod         string `json:"authMethod"`
+	Password           string `json:"password"`
+	RootDirectory      string `json:"rootDirectory"`
+	PathPrefix         string `json:"pathPrefix"`
+	StrictHostKey      bool   `json:"strictHostKey"`
+	KnownHostsPath     string `json:"knownHostsPath"`
+	ConnectTimeoutSecs int    `json:"connectTimeoutSecs"`
+}
+
+// LLMProviderConfig stores one OpenAI-compatible multimodal chat endpoint.
+//
+// The three built-in providers (Qwen, Doubao/Ark, OpenAI-compatible) all use
+// the same request shape: chat/completions with a user content array that
+// contains text plus an image_url item. Keeping them as provider records lets
+// users switch between credentials/models without retyping every field.
+type LLMProviderConfig struct {
+	Label       string  `json:"label"`
+	BaseURL     string  `json:"baseUrl"`
+	APIKey      string  `json:"apiKey"`
+	Model       string  `json:"model"`
+	MaxTokens   int     `json:"maxTokens"`
+	Temperature float64 `json:"temperature"`
+	TimeoutSecs int     `json:"timeoutSecs"`
+	// MaxInlineBytes caps the screenshot size (in bytes of the PNG payload)
+	// that may be sent inline as a base64 data URL. Above this threshold the
+	// summary pipeline falls back to uploading the image to S3 and passing a
+	// public URL instead, because most providers reject oversized inline
+	// images. A value <= 0 means "use the built-in default".
+	MaxInlineBytes int `json:"maxInlineBytes"`
+}
+
+// DefaultMaxInlineBytes is the fallback inline-image cap (~4 MiB) used when a
+// provider config does not specify MaxInlineBytes. It is a conservative bound
+// that keeps a single base64 data URL within the request-size limits accepted
+// by the common OpenAI-compatible multimodal endpoints.
+const DefaultMaxInlineBytes = 4 << 20
+
+// LLMConfig controls screenshot summarisation.
+type LLMConfig struct {
+	ActiveProvider string                       `json:"activeProvider"`
+	Prompt         string                       `json:"prompt"`
+	Providers      map[string]LLMProviderConfig `json:"providers"`
+}
+
+// OCRProviderConfig stores one cloud OCR endpoint that accepts a screenshot
+// image and returns extracted text. Aliyun and Volcengine both authenticate
+// with an AccessKey pair, but their signing schemes use slightly different
+// endpoint metadata; keeping Region/Service/Action/Version configurable lets
+// the presets track official API changes without a schema rewrite.
+type OCRProviderConfig struct {
+	Label           string `json:"label"`
+	Endpoint        string `json:"endpoint"`
+	AccessKeyID     string `json:"accessKeyId"`
+	AccessKeySecret string `json:"accessKeySecret"`
+	Region          string `json:"region"`
+	Service         string `json:"service"`
+	Action          string `json:"action"`
+	Version         string `json:"version"`
+	TimeoutSecs     int    `json:"timeoutSecs"`
+}
+
+// OCRConfig controls screenshot text extraction.
+type OCRConfig struct {
+	ActiveProvider string                       `json:"activeProvider"`
+	Providers      map[string]OCRProviderConfig `json:"providers"`
+}
+
+// SSH authentication method identifiers stored in SSHConfig.AuthMethod.
+const (
+	// SSHAuthBuiltin is the legacy combined method (password → agent → key
+	// files). Retained for backward compatibility with older config files;
+	// new configs use the explicit methods below.
+	SSHAuthBuiltin = "builtin"
+	// SSHAuthPassword authenticates with the password field only.
+	SSHAuthPassword = "password"
+	// SSHAuthKey authenticates with ssh-agent / ~/.ssh/id_* key files only.
+	SSHAuthKey = "key"
+	// SSHAuthKerberos delegates to the system ssh binary so an existing
+	// Kerberos credential cache (populated by `kinit`) is reused via GSSAPI.
+	SSHAuthKerberos = "kerberos"
+)
+
+// File-transfer protocol identifiers stored in FTPConfig.Protocol.
+const (
+	FTPProtocolFTP  = "ftp"
+	FTPProtocolSFTP = "sftp"
+)
+
+// Built-in LLM provider identifiers.
+const (
+	LLMProviderQwen   = "qwen"
+	LLMProviderDoubao = "doubao"
+	LLMProviderOpenAI = "openai"
+)
+
+// Built-in OCR provider identifiers.
+const (
+	OCRProviderAliyun     = "aliyun"
+	OCRProviderVolcengine = "volcengine"
+)
+
+// Theme preference identifiers stored in AppConfig.Theme.
+const (
+	ThemeAuto  = "auto"
+	ThemeLight = "light"
+	ThemeDark  = "dark"
+)
+
+const DefaultSummaryPrompt = `你是一个截图内容总结助手。请阅读截图，并用中文输出一段适合直接粘贴到聊天、工单、Issue 或 PR 中的说明。
+
+要求：
+- 先说明截图中最重要的信息和用户可能想表达的意图。
+- 如果截图包含报错、异常状态、表格、代码、界面控件或关键数字，请准确提取。
+- 如果截图内容不足以判断，不要编造；直接说明不确定点。
+- 输出尽量简洁，默认 3 到 6 条要点。
+- 不要输出 Markdown 标题，不要寒暄。`
+
+// IsKerberos reports whether this config requests Kerberos/GSSAPI auth.
+func (c SSHConfig) IsKerberos() bool {
+	return c.AuthMethod == SSHAuthKerberos
+}
+
+// AppConfig is the top-level on-disk configuration document.
+//
+// We keep S3 / SSH / FTP nested so adding another provider later only requires
+// a new sibling field rather than a schema rewrite.
+type AppConfig struct {
+	// Hotkey describes the global shortcut that triggers a capture.
+	// Stored as a human-readable string like "cmd+shift+a"; parsing happens
+	// in the infrastructure hotkey adapter.
+	Hotkey string `json:"hotkey"`
+
+	// Theme controls the settings UI appearance: "auto", "light", or "dark".
+	Theme string `json:"theme"`
+
+	// S3 holds the active S3-compatible storage configuration.
+	S3 S3Config `json:"s3"`
+
+	// SSH holds the configuration for the optional "save to remote via scp"
+	// destination triggered by the save-remote toolbar button.
+	SSH SSHConfig `json:"ssh"`
+
+	// FTP holds the destination used by the dedicated FTP/SFTP toolbar action.
+	FTP FTPConfig `json:"ftp"`
+
+	// LLM holds provider settings for the "copy summary" screenshot action.
+	LLM LLMConfig `json:"llm"`
+
+	// OCR holds provider settings for the "extract text" screenshot action.
+	OCR OCRConfig `json:"ocr"`
+}
+
+// DefaultAppConfig returns sane zero-value defaults used on first launch.
+func DefaultAppConfig() AppConfig {
+	cfg := AppConfig{
+		Hotkey: "cmd+shift+a",
+		Theme:  ThemeAuto,
+		S3: S3Config{
+			PathPrefix:   "snapgo/",
+			UsePathStyle: true,
+		},
+		SSH: SSHConfig{
+			Port:               22,
+			PathPrefix:         "snapgo/",
+			ConnectTimeoutSecs: 10,
+			StrictHostKey:      false,
+		},
+		FTP: FTPConfig{
+			Protocol:           FTPProtocolFTP,
+			Port:               21,
+			AuthMethod:         SSHAuthPassword,
+			RootDirectory:      "/",
+			PathPrefix:         "snapgo/",
+			ConnectTimeoutSecs: 10,
+			StrictHostKey:      false,
+		},
+		LLM: DefaultLLMConfig(),
+		OCR: DefaultOCRConfig(),
+	}
+	cfg.Normalize()
+	return cfg
+}
+
+// DefaultLLMConfig returns the built-in provider presets. API keys and exact
+// models remain user-editable because each provider account may expose
+// different model names / endpoint IDs.
+func DefaultLLMConfig() LLMConfig {
+	return LLMConfig{
+		ActiveProvider: LLMProviderOpenAI,
+		Prompt:         DefaultSummaryPrompt,
+		Providers: map[string]LLMProviderConfig{
+			LLMProviderQwen: {
+				Label:          "阿里千问多模态",
+				BaseURL:        "https://dashscope.aliyuncs.com/compatible-mode/v1",
+				Model:          "qwen-vl-plus",
+				MaxTokens:      600,
+				Temperature:    0.2,
+				TimeoutSecs:    60,
+				MaxInlineBytes: DefaultMaxInlineBytes,
+			},
+			LLMProviderDoubao: {
+				Label:          "火山方舟豆包多模态",
+				BaseURL:        "https://ark.cn-beijing.volces.com/api/v3",
+				Model:          "",
+				MaxTokens:      600,
+				Temperature:    0.2,
+				TimeoutSecs:    60,
+				MaxInlineBytes: DefaultMaxInlineBytes,
+			},
+			LLMProviderOpenAI: {
+				Label:          "ChatGPT / OpenAI-compatible",
+				BaseURL:        "https://api.openai.com/v1",
+				Model:          "gpt-5.5",
+				MaxTokens:      600,
+				Temperature:    0.2,
+				TimeoutSecs:    60,
+				MaxInlineBytes: DefaultMaxInlineBytes,
+			},
+		},
+	}
+}
+
+// DefaultOCRConfig returns the built-in OCR provider presets. Users only need
+// to fill AccessKey credentials for the common regions/actions, while advanced
+// accounts can still override endpoint metadata from the settings UI.
+func DefaultOCRConfig() OCRConfig {
+	return OCRConfig{
+		ActiveProvider: OCRProviderAliyun,
+		Providers: map[string]OCRProviderConfig{
+			OCRProviderAliyun: {
+				Label:       "阿里云文字识别",
+				Endpoint:    "https://ocr-api.cn-hangzhou.aliyuncs.com",
+				Action:      "RecognizeGeneral",
+				Version:     "2021-07-07",
+				TimeoutSecs: 30,
+			},
+			OCRProviderVolcengine: {
+				Label:       "火山引擎文字识别",
+				Endpoint:    "https://visual.volcengineapi.com",
+				Region:      "cn-north-1",
+				Service:     "cv",
+				Action:      "OCRNormal",
+				Version:     "2020-08-26",
+				TimeoutSecs: 30,
+			},
+		},
+	}
+}
+
+// Normalize fills defaults into configs written by older app versions while
+// preserving any user-provided provider fields.
+func (c *AppConfig) Normalize() {
+	if c.Hotkey == "" {
+		c.Hotkey = "cmd+shift+a"
+	}
+	if c.Theme != ThemeLight && c.Theme != ThemeDark && c.Theme != ThemeAuto {
+		c.Theme = ThemeAuto
+	}
+	if c.S3.PathPrefix == "" {
+		c.S3.PathPrefix = "snapgo/"
+	}
+	if c.SSH.Port == 0 {
+		c.SSH.Port = 22
+	}
+	if c.SSH.PathPrefix == "" {
+		c.SSH.PathPrefix = "snapgo/"
+	}
+	if c.SSH.ConnectTimeoutSecs == 0 {
+		c.SSH.ConnectTimeoutSecs = 10
+	}
+	if c.FTP.Protocol != FTPProtocolFTP && c.FTP.Protocol != FTPProtocolSFTP {
+		c.FTP.Protocol = FTPProtocolFTP
+	}
+	if c.FTP.Port == 0 {
+		if c.FTP.Protocol == FTPProtocolSFTP {
+			c.FTP.Port = 22
+		} else {
+			c.FTP.Port = 21
+		}
+	}
+	if c.FTP.AuthMethod != SSHAuthPassword && c.FTP.AuthMethod != SSHAuthKey {
+		c.FTP.AuthMethod = SSHAuthPassword
+	}
+	if c.FTP.RootDirectory == "" {
+		if c.FTP.Protocol == FTPProtocolSFTP {
+			c.FTP.RootDirectory = "~/"
+		} else {
+			c.FTP.RootDirectory = "/"
+		}
+	}
+	if c.FTP.PathPrefix == "" {
+		c.FTP.PathPrefix = "snapgo/"
+	}
+	if c.FTP.ConnectTimeoutSecs == 0 {
+		c.FTP.ConnectTimeoutSecs = 10
+	}
+
+	defaultLLM := DefaultLLMConfig()
+	if c.LLM.ActiveProvider == "" {
+		c.LLM.ActiveProvider = defaultLLM.ActiveProvider
+	}
+	if c.LLM.Prompt == "" {
+		c.LLM.Prompt = defaultLLM.Prompt
+	}
+	if c.LLM.Providers == nil {
+		c.LLM.Providers = map[string]LLMProviderConfig{}
+	}
+	for id, def := range defaultLLM.Providers {
+		current, ok := c.LLM.Providers[id]
+		if !ok {
+			c.LLM.Providers[id] = def
+			continue
+		}
+		if current.Label == "" {
+			current.Label = def.Label
+		}
+		if current.BaseURL == "" {
+			current.BaseURL = def.BaseURL
+		}
+		if current.Model == "" && id != LLMProviderDoubao {
+			current.Model = def.Model
+		}
+		if current.MaxTokens == 0 {
+			current.MaxTokens = def.MaxTokens
+		}
+		if current.Temperature < 0 {
+			current.Temperature = def.Temperature
+		}
+		if current.TimeoutSecs == 0 {
+			current.TimeoutSecs = def.TimeoutSecs
+		}
+		if current.MaxInlineBytes <= 0 {
+			current.MaxInlineBytes = DefaultMaxInlineBytes
+		}
+		c.LLM.Providers[id] = current
+	}
+
+	defaultOCR := DefaultOCRConfig()
+	if c.OCR.ActiveProvider == "" {
+		c.OCR.ActiveProvider = defaultOCR.ActiveProvider
+	}
+	if c.OCR.Providers == nil {
+		c.OCR.Providers = map[string]OCRProviderConfig{}
+	}
+	for id, def := range defaultOCR.Providers {
+		current, ok := c.OCR.Providers[id]
+		if !ok {
+			c.OCR.Providers[id] = def
+			continue
+		}
+		if current.Label == "" {
+			current.Label = def.Label
+		}
+		if current.Endpoint == "" {
+			current.Endpoint = def.Endpoint
+		}
+		if current.Region == "" {
+			current.Region = def.Region
+		}
+		if current.Service == "" {
+			current.Service = def.Service
+		}
+		if current.Action == "" {
+			current.Action = def.Action
+		}
+		if current.Version == "" {
+			current.Version = def.Version
+		}
+		if current.TimeoutSecs == 0 {
+			current.TimeoutSecs = def.TimeoutSecs
+		}
+		c.OCR.Providers[id] = current
+	}
+}
+
+// IsS3Configured reports whether the user has filled the mandatory S3 fields.
+func (c AppConfig) IsS3Configured() bool {
+	return c.S3.Endpoint != "" &&
+		c.S3.Bucket != "" &&
+		c.S3.AccessKeyID != "" &&
+		c.S3.SecretAccessKey != ""
+}
+
+// IsSSHConfigured reports whether the SSH destination has the minimum
+// fields required to attempt a connection. Password is intentionally NOT
+// checked because empty password means "use agent / key auth".
+func (c AppConfig) IsSSHConfigured() bool {
+	return c.SSH.Host != "" && c.SSH.User != ""
+}
+
+// IsFTPConfigured reports whether the FTP/SFTP destination has the minimum
+// fields required to attempt a connection. Password is not required because
+// SFTP key authentication and password-less FTP accounts are both valid.
+func (c AppConfig) IsFTPConfigured() bool {
+	return (c.FTP.Protocol == FTPProtocolFTP || c.FTP.Protocol == FTPProtocolSFTP) &&
+		c.FTP.Host != "" && c.FTP.User != ""
+}
+
+// ActiveLLMProvider returns the selected provider config plus a boolean
+// indicating whether the selection exists.
+func (c AppConfig) ActiveLLMProvider() (string, LLMProviderConfig, bool) {
+	id := c.LLM.ActiveProvider
+	if id == "" {
+		id = LLMProviderOpenAI
+	}
+	provider, ok := c.LLM.Providers[id]
+	return id, provider, ok
+}
+
+// IsLLMConfigured reports whether the selected multimodal provider has the
+// fields required to make a request.
+func (c AppConfig) IsLLMConfigured() bool {
+	_, provider, ok := c.ActiveLLMProvider()
+	return ok && provider.BaseURL != "" && provider.APIKey != "" && provider.Model != ""
+}
+
+// ActiveOCRProvider returns the selected OCR provider config plus a boolean
+// indicating whether the selection exists.
+func (c AppConfig) ActiveOCRProvider() (string, OCRProviderConfig, bool) {
+	id := c.OCR.ActiveProvider
+	if id == "" {
+		id = OCRProviderAliyun
+	}
+	provider, ok := c.OCR.Providers[id]
+	return id, provider, ok
+}
+
+// IsOCRConfigured reports whether the selected OCR provider has the fields
+// required to sign and send a request.
+func (c AppConfig) IsOCRConfigured() bool {
+	id, provider, ok := c.ActiveOCRProvider()
+	if !ok ||
+		provider.Endpoint == "" ||
+		provider.AccessKeyID == "" ||
+		provider.AccessKeySecret == "" ||
+		provider.Action == "" ||
+		provider.Version == "" {
+		return false
+	}
+	if id == OCRProviderVolcengine && (provider.Region == "" || provider.Service == "") {
+		return false
+	}
+	return true
+}
diff --git a/internal/domain/config_ftp_test.go b/internal/domain/config_ftp_test.go
new file mode 100644
index 0000000..746b066
--- /dev/null
+++ b/internal/domain/config_ftp_test.go
@@ -0,0 +1,56 @@
+package domain
+
+import "testing"
+
+func TestDefaultAppConfigIncludesFTPDefaults(t *testing.T) {
+	cfg := DefaultAppConfig()
+	if cfg.FTP.Protocol != FTPProtocolFTP {
+		t.Fatalf("expected default FTP protocol, got %q", cfg.FTP.Protocol)
+	}
+	if cfg.FTP.Port != 21 {
+		t.Fatalf("expected default FTP port 21, got %d", cfg.FTP.Port)
+	}
+	if cfg.FTP.PathPrefix != "snapgo/" {
+		t.Fatalf("expected default path prefix, got %q", cfg.FTP.PathPrefix)
+	}
+	if cfg.FTP.RootDirectory != "/" {
+		t.Fatalf("expected default root directory, got %q", cfg.FTP.RootDirectory)
+	}
+	if cfg.FTP.ConnectTimeoutSecs != 10 {
+		t.Fatalf("expected 10 second timeout, got %d", cfg.FTP.ConnectTimeoutSecs)
+	}
+}
+
+func TestNormalizeUsesSFTPDefaultPort(t *testing.T) {
+	cfg := AppConfig{
+		FTP: FTPConfig{
+			Protocol: FTPProtocolSFTP,
+		},
+	}
+	cfg.Normalize()
+	if cfg.FTP.Port != 22 {
+		t.Fatalf("expected SFTP port 22, got %d", cfg.FTP.Port)
+	}
+	if cfg.FTP.AuthMethod != SSHAuthPassword {
+		t.Fatalf("expected password auth default, got %q", cfg.FTP.AuthMethod)
+	}
+	if cfg.FTP.RootDirectory != "~/" {
+		t.Fatalf("expected SFTP home root directory, got %q", cfg.FTP.RootDirectory)
+	}
+}
+
+func TestIsFTPConfiguredRequiresProtocolHostAndUser(t *testing.T) {
+	cfg := DefaultAppConfig()
+	if cfg.IsFTPConfigured() {
+		t.Fatal("empty FTP destination should not be configured")
+	}
+	cfg.FTP.Host = "files.example.com"
+	cfg.FTP.User = "snapgo"
+	if !cfg.IsFTPConfigured() {
+		t.Fatal("host and user should be enough for a normalized FTP config")
+	}
+	cfg.FTP.Protocol = "invalid"
+	if cfg.IsFTPConfigured() {
+		t.Fatal("invalid protocol should not be configured")
+	}
+}
diff --git a/internal/domain/types.go b/internal/domain/types.go
new file mode 100644
index 0000000..db7d790
--- /dev/null
+++ b/internal/domain/types.go
@@ -0,0 +1,54 @@
+// Package domain defines the core business types of SnapGo.
+//
+// Design rationale:
+// - Keep this layer free of any third-party SDK or OS API.
+// - Higher layers (application, infrastructure) depend on these types,
+//   but this package depends on nothing except the Go standard library.
+// - Encapsulating data here makes the upgrade path to multiple OSS providers
+//   (Aliyun OSS, Qiniu, Tencent COS, etc.) trivial — only a new infra adapter
+//   is needed.
+package domain
+
+import (
+	"context"
+	"image"
+	"time"
+)
+
+// Screenshot represents a single captured image in PNG-encoded byte form.
+//
+// We hold the encoded bytes (not image.Image) because:
+// 1. Uploaders need a byte stream;
+// 2. Local fallback writes the same bytes to disk;
+// 3. Avoids re-encoding cost.
+type Screenshot struct {
+	PNG       []byte          // PNG-encoded payload
+	Region    image.Rectangle // The captured region in virtual screen coords
+	Width     int             // Logical width of the region
+	Height    int             // Logical height of the region
+	CreatedAt time.Time       // When the capture happened
+}
+
+// UploadResult describes the outcome of a successful upload.
+type UploadResult struct {
+	URL      string        // Public URL that was copied to the clipboard
+	Key      string        // Object key on the remote storage
+	Provider string        // Provider name, e.g. "s3"
+	Elapsed  time.Duration // How long the upload took
+}
+
+// OSSProvider is the abstraction every storage adapter MUST implement.
+//
+// Why an interface:
+// - Allows the application layer to remain agnostic of the concrete SDK.
+// - Future providers (Aliyun OSS / COS / Qiniu) only need a new adapter
+//   without touching the service layer.
+type OSSProvider interface {
+	// Upload pushes data with the given key and content-type to remote storage,
+	// returning the publicly accessible URL on success.
+	Upload(ctx context.Context, key string, data []byte, contentType string) (publicURL string, err error)
+
+	// Name returns a stable identifier of the provider implementation
+	// (used in logs, telemetry, history records).
+	Name() string
+}
diff --git a/internal/infrastructure/clipboard/clipboard.go b/internal/infrastructure/clipboard/clipboard.go
new file mode 100644
index 0000000..8ab5ede
--- /dev/null
+++ b/internal/infrastructure/clipboard/clipboard.go
@@ -0,0 +1,56 @@
+// Package clipboard wraps golang.design/x/clipboard with lazy initialization.
+//
+// Why a wrapper:
+//   - The upstream library requires a one-time clipboard.Init() call. Hiding it
+//     here keeps the application service free of init concerns.
+//   - Allows future swap to a different backend (e.g. atotto/clipboard) without
+//     changing callers.
+package clipboard
+
+import (
+	"fmt"
+	"sync"
+
+	"golang.design/x/clipboard"
+)
+
+// Writer abstracts clipboard writes for testability.
+type Writer interface {
+	WriteText(s string) error
+	WriteImage(pngBytes []byte) error
+}
+
+type clipWriter struct {
+	once    sync.Once
+	initErr error
+}
+
+// New returns a process-wide clipboard writer. Initialization is lazy.
+func New() Writer {
+	return &clipWriter{}
+}
+
+func (w *clipWriter) ensureInit() error {
+	w.once.Do(func() {
+		w.initErr = clipboard.Init()
+	})
+	return w.initErr
+}
+
+// WriteText replaces the clipboard contents with the supplied UTF-8 string.
+func (w *clipWriter) WriteText(s string) error {
+	if err := w.ensureInit(); err != nil {
+		return fmt.Errorf("clipboard init: %w", err)
+	}
+	clipboard.Write(clipboard.FmtText, []byte(s))
+	return nil
+}
+
+// WriteImage replaces the clipboard contents with PNG-encoded image data.
+func (w *clipWriter) WriteImage(pngBytes []byte) error {
+	if err := w.ensureInit(); err != nil {
+		return fmt.Errorf("clipboard init: %w", err)
+	}
+	clipboard.Write(clipboard.FmtImage, pngBytes)
+	return nil
+}
diff --git a/internal/infrastructure/config/file_store.go b/internal/infrastructure/config/file_store.go
new file mode 100644
index 0000000..285e5f5
--- /dev/null
+++ b/internal/infrastructure/config/file_store.go
@@ -0,0 +1,91 @@
+// Package config provides JSON-file backed persistence for AppConfig.
+//
+// Design rationale:
+//   - JSON keeps the file human-readable, which is useful while the MVP has
+//     no settings UI for every option.
+//   - Storage location follows os.UserConfigDir() so each platform places it
+//     in the canonical spot (macOS: ~/Library/Application Support/SnapGo).
+//   - File mode 0600 / dir mode 0700 mitigate accidental leakage of access
+//     keys before we wire up the OS keychain (deferred to a later spec).
+package config
+
+import (
+	"encoding/json"
+	"errors"
+	"fmt"
+	"os"
+	"path/filepath"
+	"sync"
+
+	"github.com/mmmy/snapgo/internal/domain"
+)
+
+// FileStore implements load/save of AppConfig on the local filesystem.
+//
+// All methods are safe for concurrent use.
+type FileStore struct {
+	mu   sync.RWMutex
+	path string
+}
+
+// NewFileStore resolves the on-disk path and creates the parent directory
+// with permissions 0700 if missing.
+func NewFileStore() (*FileStore, error) {
+	dir, err := os.UserConfigDir()
+	if err != nil {
+		return nil, fmt.Errorf("resolve user config dir: %w", err)
+	}
+	appDir := filepath.Join(dir, "SnapGo")
+	if err := os.MkdirAll(appDir, 0o700); err != nil {
+		return nil, fmt.Errorf("ensure config dir: %w", err)
+	}
+	return &FileStore{path: filepath.Join(appDir, "config.json")}, nil
+}
+
+// Path exposes the absolute config file path (mainly for diagnostics / UI).
+func (s *FileStore) Path() string {
+	return s.path
+}
+
+// Load reads the config file. If the file does not exist OR cannot be parsed,
+// the default config is returned with a non-nil error so the caller can decide
+// whether to surface the parse failure to the user.
+func (s *FileStore) Load() (domain.AppConfig, error) {
+	s.mu.RLock()
+	defer s.mu.RUnlock()
+
+	cfg := domain.DefaultAppConfig()
+	data, err := os.ReadFile(s.path)
+	if err != nil {
+		if errors.Is(err, os.ErrNotExist) {
+			return cfg, nil
+		}
+		return cfg, fmt.Errorf("read config: %w", err)
+	}
+	if err := json.Unmarshal(data, &cfg); err != nil {
+		return domain.DefaultAppConfig(), fmt.Errorf("parse config: %w", err)
+	}
+	cfg.Normalize()
+	return cfg, nil
+}
+
+// Save persists the supplied config atomically (write-temp + rename) so
+// crashes mid-write cannot leave a half-written file.
+func (s *FileStore) Save(cfg domain.AppConfig) error {
+	s.mu.Lock()
+	defer s.mu.Unlock()
+
+	cfg.Normalize()
+	data, err := json.MarshalIndent(cfg, "", "  ")
+	if err != nil {
+		return fmt.Errorf("marshal config: %w", err)
+	}
+	tmp := s.path + ".tmp"
+	if err := os.WriteFile(tmp, data, 0o600); err != nil {
+		return fmt.Errorf("write tmp config: %w", err)
+	}
+	if err := os.Rename(tmp, s.path); err != nil {
+		return fmt.Errorf("commit config: %w", err)
+	}
+	return nil
+}
diff --git a/internal/infrastructure/cursor/cursor.go b/internal/infrastructure/cursor/cursor.go
new file mode 100644
index 0000000..b3368c0
--- /dev/null
+++ b/internal/infrastructure/cursor/cursor.go
@@ -0,0 +1,12 @@
+// Package cursor exposes the current mouse pointer position in a
+// platform-agnostic way. We use it to anchor the post-capture toolbar near
+// the location where the user released the mouse — on macOS that point is
+// effectively the bottom-right corner of the screencapture selection.
+package cursor
+
+// Point is a screen-space pointer location, in *logical* pixels (i.e. the
+// coordinate system Wails uses for window placement).
+type Point struct {
+	X int
+	Y int
+}
diff --git a/internal/infrastructure/cursor/cursor_darwin.go b/internal/infrastructure/cursor/cursor_darwin.go
new file mode 100644
index 0000000..7cc14d0
--- /dev/null
+++ b/internal/infrastructure/cursor/cursor_darwin.go
@@ -0,0 +1,30 @@
+//go:build darwin
+
+// cursor_darwin.go reads the global cursor position via Quartz Event
+// Services. This API is preferable to NSEvent.mouseLocation for our use
+// case because it returns the pointer in flipped (top-left origin)
+// coordinates, which matches Wails / web pixel coordinates exactly.
+package cursor
+
+/*
+#cgo LDFLAGS: -framework ApplicationServices
+#include <ApplicationServices/ApplicationServices.h>
+
+// readCursor returns the current mouse position with origin at the
+// top-left of the primary display, in logical pixels.
+static void readCursor(double* x, double* y) {
+    CGEventRef event = CGEventCreate(NULL);
+    CGPoint p = CGEventGetLocation(event);
+    if (event) CFRelease(event);
+    *x = p.x;
+    *y = p.y;
+}
+*/
+import "C"
+
+// Get returns the current mouse pointer position.
+func Get() (Point, error) {
+	var x, y C.double
+	C.readCursor(&x, &y)
+	return Point{X: int(x), Y: int(y)}, nil
+}
diff --git a/internal/infrastructure/cursor/cursor_other.go b/internal/infrastructure/cursor/cursor_other.go
new file mode 100644
index 0000000..e3a1429
--- /dev/null
+++ b/internal/infrastructure/cursor/cursor_other.go
@@ -0,0 +1,9 @@
+//go:build !darwin
+
+package cursor
+
+// Get is a no-op stub on non-macOS targets. The toolbar will fall back to
+// the centre of the screen on these platforms.
+func Get() (Point, error) {
+	return Point{X: 0, Y: 0}, nil
+}
diff --git a/internal/infrastructure/display/display.go b/internal/infrastructure/display/display.go
new file mode 100644
index 0000000..81e0e8c
--- /dev/null
+++ b/internal/infrastructure/display/display.go
@@ -0,0 +1,25 @@
+// Package display exposes platform-specific helpers for reading the
+// geometry of the primary display, in both CSS (logical) and PHYSICAL
+// pixels. The overlay flow needs both: CSS pixels to size the Wails window
+// to "fullscreen" (since Wails uses CSS-px-equivalent units), and the
+// backing scale factor to translate the user's CSS-px selection rectangle
+// into the physical-pixel rectangle of the captured PNG.
+package display
+
+// Info describes the primary display.
+//
+// The struct is deliberately minimal: only the few fields the overlay flow
+// actually needs. We can grow it later without affecting callers because
+// it is returned by value.
+type Info struct {
+	// CSSWidth / CSSHeight are the logical dimensions of the primary
+	// display in points (i.e. what CSS / Wails uses).
+	CSSWidth  int
+	CSSHeight int
+
+	// Scale is backing factor (CSS-px → device-px). 2 on Retina, 1 on
+	// non-Retina. We model it as float64 to leave room for fractional
+	// scales (e.g. Linux 1.25×) even though macOS effectively only ever
+	// reports 1 or 2.
+	Scale float64
+}
diff --git a/internal/infrastructure/display/display_darwin.go b/internal/infrastructure/display/display_darwin.go
new file mode 100644
index 0000000..547d1d5
--- /dev/null
+++ b/internal/infrastructure/display/display_darwin.go
@@ -0,0 +1,41 @@
+//go:build darwin
+
+package display
+
+/*
+#cgo LDFLAGS: -framework CoreGraphics -framework Foundation
+#include <CoreGraphics/CoreGraphics.h>
+
+// readPrimaryDisplay fills the four out-params with:
+//   - cssW / cssH    : logical (point) dimensions of the main display
+//   - pxW  / pxH     : physical (device-pixel) dimensions
+// Using CGDisplayBounds for points and CGDisplayPixelsWide/High for pixels
+// is the canonical way to derive the backing scale on macOS without
+// bringing AppKit into the build (we do not want to link Cocoa here).
+static void readPrimaryDisplay(int* cssW, int* cssH, int* pxW, int* pxH) {
+    CGDirectDisplayID id = CGMainDisplayID();
+    CGRect bounds = CGDisplayBounds(id);
+    *cssW = (int)bounds.size.width;
+    *cssH = (int)bounds.size.height;
+    *pxW  = (int)CGDisplayPixelsWide(id);
+    *pxH  = (int)CGDisplayPixelsHigh(id);
+}
+*/
+import "C"
+
+// Primary returns the geometry of the main display. The CGo call has no
+// failure path — the OS always reports a main display whenever there is at
+// least one attached, which is implied for any GUI process.
+func Primary() Info {
+	var cssW, cssH, pxW, pxH C.int
+	C.readPrimaryDisplay(&cssW, &cssH, &pxW, &pxH)
+	scale := 1.0
+	if cssW > 0 {
+		scale = float64(pxW) / float64(cssW)
+	}
+	return Info{
+		CSSWidth:  int(cssW),
+		CSSHeight: int(cssH),
+		Scale:     scale,
+	}
+}
diff --git a/internal/infrastructure/display/display_other.go b/internal/infrastructure/display/display_other.go
new file mode 100644
index 0000000..500257e
--- /dev/null
+++ b/internal/infrastructure/display/display_other.go
@@ -0,0 +1,21 @@
+//go:build !darwin
+
+package display
+
+import "github.com/kbinani/screenshot"
+
+// Primary returns the dimensions of display 0. We currently assume a 1× DPR
+// because Wails on Windows / Linux already paints in physical pixels, so
+// CSS coordinates and capture coordinates coincide. If a user ever runs at
+// non-1× we will add a platform-specific scale lookup.
+func Primary() Info {
+	if screenshot.NumActiveDisplays() == 0 {
+		return Info{CSSWidth: 1440, CSSHeight: 900, Scale: 1}
+	}
+	b := screenshot.GetDisplayBounds(0)
+	return Info{
+		CSSWidth:  b.Dx(),
+		CSSHeight: b.Dy(),
+		Scale:     1,
+	}
+}
diff --git a/internal/infrastructure/ftp/uploader.go b/internal/infrastructure/ftp/uploader.go
new file mode 100644
index 0000000..a96509a
--- /dev/null
+++ b/internal/infrastructure/ftp/uploader.go
@@ -0,0 +1,288 @@
+// Package ftp provides the FTP side of SnapGo's FTP/SFTP destination.
+//
+// Design rationale:
+//   - Plain FTP needs a real protocol client for PASV/EPSV handling; hand-
+//     rolling those details would be fragile across common servers.
+//   - SFTP is delegated to the sibling SSH adapter so authentication, agent,
+//     key discovery, and known_hosts behaviour stay consistent with SCP.
+//   - Both implementations upload to a temporary name and rename only after
+//     the payload is complete, preventing a failed transfer from exposing a
+//     partially written screenshot at the final path.
+package ftp
+
+import (
+	"bytes"
+	"context"
+	"fmt"
+	"io"
+	"log/slog"
+	"net"
+	"path"
+	"strings"
+	"sync"
+	"time"
+
+	ftpclient "github.com/jlaffaye/ftp"
+
+	"github.com/mmmy/snapgo/internal/domain"
+	sshpkg "github.com/mmmy/snapgo/internal/infrastructure/ssh"
+)
+
+// RemoteUploader is the common capability exposed to app.go for FTP and
+// SFTP. The application service only needs Upload; TestConnection remains an
+// infrastructure concern used by the Settings probe RPC.
+type RemoteUploader interface {
+	Upload(ctx context.Context, remoteRelPath string, data []byte) error
+	TestConnection(ctx context.Context) error
+}
+
+// NewUploader validates cfg and returns the adapter for its selected protocol.
+func NewUploader(cfg domain.FTPConfig) (RemoteUploader, error) {
+	normalized, err := normalizeConfig(cfg)
+	if err != nil {
+		return nil, err
+	}
+	if normalized.Protocol == domain.FTPProtocolSFTP {
+		return sshpkg.NewSFTPUploader(normalized), nil
+	}
+	return &plainUploader{cfg: normalized}, nil
+}
+
+type plainUploader struct {
+	cfg domain.FTPConfig
+}
+
+func ftpLog() *slog.Logger { return slog.Default().With("component", "ftp") }
+
+func normalizeConfig(cfg domain.FTPConfig) (domain.FTPConfig, error) {
+	cfg.Protocol = strings.ToLower(strings.TrimSpace(cfg.Protocol))
+	if cfg.Protocol == "" {
+		cfg.Protocol = domain.FTPProtocolFTP
+	}
+	if cfg.Protocol != domain.FTPProtocolFTP && cfg.Protocol != domain.FTPProtocolSFTP {
+		return domain.FTPConfig{}, fmt.Errorf("file transfer: protocol must be ftp or sftp")
+	}
+	cfg.Host = strings.TrimSpace(cfg.Host)
+	cfg.User = strings.TrimSpace(cfg.User)
+	if cfg.Host == "" || cfg.User == "" {
+		return domain.FTPConfig{}, fmt.Errorf("file transfer: host and user are required")
+	}
+	if cfg.Port <= 0 {
+		if cfg.Protocol == domain.FTPProtocolSFTP {
+			cfg.Port = 22
+		} else {
+			cfg.Port = 21
+		}
+	}
+	if cfg.Port > 65535 {
+		return domain.FTPConfig{}, fmt.Errorf("file transfer: port must be between 1 and 65535")
+	}
+	if cfg.ConnectTimeoutSecs <= 0 {
+		cfg.ConnectTimeoutSecs = 10
+	}
+	if cfg.AuthMethod == "" {
+		cfg.AuthMethod = domain.SSHAuthPassword
+	}
+	if cfg.Protocol == domain.FTPProtocolSFTP &&
+		cfg.AuthMethod != domain.SSHAuthPassword && cfg.AuthMethod != domain.SSHAuthKey {
+		return domain.FTPConfig{}, fmt.Errorf("sftp: auth method must be password or key")
+	}
+	return cfg, nil
+}
+
+func (u *plainUploader) dial(ctx context.Context) (*ftpclient.ServerConn, error) {
+	timeout := time.Duration(u.cfg.ConnectTimeoutSecs) * time.Second
+	addr := net.JoinHostPort(u.cfg.Host, fmt.Sprintf("%d", u.cfg.Port))
+	ftpLog().Info("FTP dial start",
+		"addr", addr,
+		"user", u.cfg.User,
+		"timeout", timeout,
+		"has_password", u.cfg.Password != "")
+	conn, err := ftpclient.Dial(
+		addr,
+		ftpclient.DialWithDialFunc(contextDialFunc(ctx, timeout)),
+		ftpclient.DialWithShutTimeout(timeout),
+	)
+	if err != nil {
+		return nil, fmt.Errorf("ftp: dial %s: %w", addr, err)
+	}
+	if err := conn.Login(u.cfg.User, u.cfg.Password); err != nil {
+		_ = conn.Quit()
+		return nil, fmt.Errorf("ftp: login: %w", err)
+	}
+	return conn, nil
+}
+
+// Upload stores one screenshot through plain FTP.
+func (u *plainUploader) Upload(ctx context.Context, remoteRelPath string, data []byte) error {
+	cleaned, err := validateRemoteRelativePath(remoteRelPath)
+	if err != nil {
+		return err
+	}
+	conn, err := u.dial(ctx)
+	if err != nil {
+		return err
+	}
+	defer func() { _ = conn.Quit() }()
+
+	if err := enterFTPDirectory(conn, path.Dir(cleaned)); err != nil {
+		return err
+	}
+	base := path.Base(cleaned)
+
+	tempName := temporaryRemoteName(base)
+	removeTemp := true
+	defer func() {
+		if removeTemp {
+			_ = conn.Delete(tempName)
+		}
+	}()
+
+	if err := conn.Stor(tempName, &contextReader{ctx: ctx, reader: bytes.NewReader(data)}); err != nil {
+		if ctx.Err() != nil {
+			return ctx.Err()
+		}
+		return fmt.Errorf("ftp: store %s: %w", cleaned, err)
+	}
+	if err := conn.Rename(tempName, base); err != nil {
+		return fmt.Errorf("ftp: commit %s: %w", cleaned, err)
+	}
+	removeTemp = false
+	ftpLog().Info("FTP upload ok", "remote_path", cleaned, "size", len(data))
+	return nil
+}
+
+// TestConnection writes and removes a small probe under the configured path,
+// proving that credentials and directory permissions are both usable.
+func (u *plainUploader) TestConnection(ctx context.Context) error {
+	probe, err := probeRemotePath(u.cfg.PathPrefix)
+	if err != nil {
+		return err
+	}
+	conn, err := u.dial(ctx)
+	if err != nil {
+		return err
+	}
+	defer func() { _ = conn.Quit() }()
+
+	if err := enterFTPDirectory(conn, path.Dir(probe)); err != nil {
+		return err
+	}
+	base := path.Base(probe)
+	if err := conn.Stor(base, strings.NewReader("snapgo")); err != nil {
+		return fmt.Errorf("ftp probe: write: %w", err)
+	}
+	if err := conn.Delete(base); err != nil {
+		return fmt.Errorf("ftp probe: delete: %w", err)
+	}
+	return nil
+}
+
+// enterFTPDirectory walks to dir relative to the login root, creating missing
+// segments.
+func enterFTPDirectory(conn *ftpclient.ServerConn, dir string) error {
+	dir = strings.Trim(dir, "/")
+	if dir == "" || dir == "." {
+		return nil
+	}
+	for _, segment := range strings.Split(dir, "/") {
+		if err := conn.ChangeDir(segment); err == nil {
+			continue
+		}
+		if err := conn.MakeDir(segment); err != nil {
+			// A concurrent uploader may have created the directory after our
+			// failed CWD. Retrying CWD distinguishes that race from a real error.
+			if retryErr := conn.ChangeDir(segment); retryErr == nil {
+				continue
+			}
+			return fmt.Errorf("ftp: create directory %q: %w", segment, err)
+		}
+		if err := conn.ChangeDir(segment); err != nil {
+			return fmt.Errorf("ftp: enter directory %q: %w", segment, err)
+		}
+	}
+	return nil
+}
+
+func validateRemoteRelativePath(value string) (string, error) {
+	value = strings.TrimSpace(value)
+	if value == "" || strings.HasPrefix(value, "/") || strings.HasPrefix(value, "~") {
+		return "", fmt.Errorf("file transfer: remote path must be relative to the login directory")
+	}
+	if strings.ContainsAny(value, "\x00\r\n\\") {
+		return "", fmt.Errorf("file transfer: remote path contains an invalid character")
+	}
+	for _, segment := range strings.Split(value, "/") {
+		if segment == ".." {
+			return "", fmt.Errorf("file transfer: remote path must not contain '..'")
+		}
+	}
+	cleaned := path.Clean(value)
+	if cleaned == "." || path.Base(cleaned) == "." || path.Base(cleaned) == ".." {
+		return "", fmt.Errorf("file transfer: remote filename is empty")
+	}
+	return cleaned, nil
+}
+
+func probeRemotePath(prefix string) (string, error) {
+	prefix = strings.TrimSpace(prefix)
+	prefix = strings.TrimPrefix(prefix, "~")
+	prefix = strings.TrimLeft(prefix, "/")
+	probe := fmt.Sprintf(".snapgo-probe-%d", time.Now().UnixNano())
+	return validateRemoteRelativePath(path.Join(prefix, probe))
+}
+
+func temporaryRemoteName(base string) string {
+	return fmt.Sprintf(".%s.snapgo-upload-%d", base, time.Now().UnixNano())
+}
+
+type contextReader struct {
+	ctx    context.Context
+	reader io.Reader
+}
+
+func contextDialFunc(ctx context.Context, timeout time.Duration) func(string, string) (net.Conn, error) {
+	dialer := &net.Dialer{Timeout: timeout}
+	return func(network, address string) (net.Conn, error) {
+		conn, err := dialer.DialContext(ctx, network, address)
+		if err != nil {
+			return nil, err
+		}
+		wrapped := &cancelableConn{
+			Conn: conn,
+			done: make(chan struct{}),
+		}
+		go func() {
+			select {
+			case <-ctx.Done():
+				_ = wrapped.Close()
+			case <-wrapped.done:
+			}
+		}()
+		return wrapped, nil
+	}
+}
+
+type cancelableConn struct {
+	net.Conn
+	done chan struct{}
+	once sync.Once
+}
+
+func (c *cancelableConn) Close() error {
+	var err error
+	c.once.Do(func() {
+		close(c.done)
+		err = c.Conn.Close()
+	})
+	return err
+}
+
+func (r *contextReader) Read(p []byte) (int, error) {
+	select {
+	case <-r.ctx.Done():
+		return 0, r.ctx.Err()
+	default:
+		return r.reader.Read(p)
+	}
+}
diff --git a/internal/infrastructure/ftp/uploader_test.go b/internal/infrastructure/ftp/uploader_test.go
new file mode 100644
index 0000000..fd2cb64
--- /dev/null
+++ b/internal/infrastructure/ftp/uploader_test.go
@@ -0,0 +1,34 @@
+package ftp
+
+import "testing"
+
+func TestValidateRemoteRelativePath(t *testing.T) {
+	valid, err := validateRemoteRelativePath("snapgo/2026/07/image.png")
+	if err != nil {
+		t.Fatalf("valid path rejected: %v", err)
+	}
+	if valid != "snapgo/2026/07/image.png" {
+		t.Fatalf("unexpected normalized path %q", valid)
+	}
+
+	invalid := []string{
+		"",
+		"/absolute/image.png",
+		"~/image.png",
+		"../image.png",
+		"snapgo/../../image.png",
+		"snapgo\\image.png",
+		"snapgo/image.png\nnext",
+	}
+	for _, value := range invalid {
+		if _, err := validateRemoteRelativePath(value); err == nil {
+			t.Errorf("expected %q to be rejected", value)
+		}
+	}
+}
+
+func TestProbeRemotePathRejectsTraversalPrefix(t *testing.T) {
+	if _, err := probeRemotePath("../../outside"); err == nil {
+		t.Fatal("expected traversal prefix to fail")
+	}
+}
diff --git a/internal/infrastructure/hotkey/hotkey.go b/internal/infrastructure/hotkey/hotkey.go
new file mode 100644
index 0000000..a09f017
--- /dev/null
+++ b/internal/infrastructure/hotkey/hotkey.go
@@ -0,0 +1,121 @@
+// Package hotkey wraps golang.design/x/hotkey to provide a process-wide
+// global shortcut. The MVP only supports a single hard-coded combination
+// (Cmd+Shift+A on macOS) but the abstraction below allows the binding to
+// be replaced at runtime once we add per-platform parsing of user input.
+package hotkey
+
+import (
+	"fmt"
+	"strings"
+	"sync"
+
+	hk "golang.design/x/hotkey"
+)
+
+// Manager owns the lifecycle of one global hotkey.
+type Manager struct {
+	mu      sync.Mutex
+	current *hk.Hotkey
+	stop    chan struct{}
+}
+
+// NewManager returns a fresh manager with no hotkey registered yet.
+func NewManager() *Manager { return &Manager{} }
+
+// Register parses the spec (e.g. "cmd+shift+a") and binds the callback.
+// If a previous hotkey is registered, it is unregistered first so callers
+// can swap shortcuts at runtime when the user changes the setting.
+func (m *Manager) Register(spec string, onTrigger func()) error {
+	m.mu.Lock()
+	defer m.mu.Unlock()
+
+	if m.current != nil {
+		_ = m.current.Unregister()
+		close(m.stop)
+		m.current = nil
+		m.stop = nil
+	}
+
+	mods, key, err := parseSpec(spec)
+	if err != nil {
+		return err
+	}
+
+	hot := hk.New(mods, key)
+	if err := hot.Register(); err != nil {
+		return fmt.Errorf("register hotkey %q: %w", spec, err)
+	}
+
+	stop := make(chan struct{})
+	m.current = hot
+	m.stop = stop
+
+	// Listen on a dedicated goroutine. We never run the callback inline
+	// because the keydown channel is unbuffered.
+	go func() {
+		for {
+			select {
+			case <-stop:
+				return
+			case <-hot.Keydown():
+				if onTrigger != nil {
+					go onTrigger()
+				}
+			}
+		}
+	}()
+	return nil
+}
+
+// Unregister releases the active hotkey, if any.
+func (m *Manager) Unregister() {
+	m.mu.Lock()
+	defer m.mu.Unlock()
+	if m.current != nil {
+		_ = m.current.Unregister()
+		close(m.stop)
+		m.current = nil
+		m.stop = nil
+	}
+}
+
+// parseSpec parses a "+"-separated hotkey description into (modifiers, key).
+//
+// Supported tokens (case-insensitive): cmd, command, ctrl, control,
+// option, alt, shift, plus a single letter A–Z or digit 0–9.
+//
+// We keep the parser intentionally tiny — full key mapping is out of scope
+// for the MVP.
+func parseSpec(spec string) ([]hk.Modifier, hk.Key, error) {
+	parts := strings.Split(strings.ToLower(strings.TrimSpace(spec)), "+")
+	if len(parts) == 0 {
+		return nil, 0, fmt.Errorf("empty hotkey")
+	}
+	var mods []hk.Modifier
+	var key hk.Key
+	hasKey := false
+	for _, p := range parts {
+		p = strings.TrimSpace(p)
+		switch p {
+		case "cmd", "command", "meta", "super":
+			mods = append(mods, modCmd())
+		case "ctrl", "control":
+			mods = append(mods, modCtrl())
+		case "option", "alt":
+			mods = append(mods, modOption())
+		case "shift":
+			mods = append(mods, modShift())
+		default:
+			k, ok := lookupKey(p)
+			if !ok {
+				return nil, 0, fmt.Errorf("unsupported token: %q", p)
+			}
+			key = k
+			hasKey = true
+		}
+	}
+	if !hasKey {
+		return nil, 0, fmt.Errorf("hotkey %q is missing a key", spec)
+	}
+	return mods, key, nil
+}
diff --git a/internal/infrastructure/hotkey/hotkey_darwin.go b/internal/infrastructure/hotkey/hotkey_darwin.go
new file mode 100644
index 0000000..afeb662
--- /dev/null
+++ b/internal/infrastructure/hotkey/hotkey_darwin.go
@@ -0,0 +1,15 @@
+//go:build darwin && cgo
+
+package hotkey
+
+import hk "golang.design/x/hotkey"
+
+// macOS uses ⌘ as the primary modifier; Option corresponds to Alt.
+//
+// This file is gated on cgo because golang.design/x/hotkey only exposes the
+// Mod* constants from its cgo-backed darwin implementation; with CGO_ENABLED=0
+// the package falls back to a stub that defines no constants.
+func modCmd() hk.Modifier    { return hk.ModCmd }
+func modCtrl() hk.Modifier   { return hk.ModCtrl }
+func modOption() hk.Modifier { return hk.ModOption }
+func modShift() hk.Modifier  { return hk.ModShift }
diff --git a/internal/infrastructure/hotkey/hotkey_linux.go b/internal/infrastructure/hotkey/hotkey_linux.go
new file mode 100644
index 0000000..2e7b0d8
--- /dev/null
+++ b/internal/infrastructure/hotkey/hotkey_linux.go
@@ -0,0 +1,18 @@
+//go:build linux && cgo
+
+package hotkey
+
+import hk "golang.design/x/hotkey"
+
+// On Linux we map "cmd" to Ctrl so the same config string ("cmd+shift+a")
+// stays meaningful across platforms.
+//
+// The X11 backend exposes modifiers as Mod1..Mod5 rather than named Alt/Option
+// constants; Mod1 is the conventional Alt mask under X11, so "option"/"alt"
+// resolve to hk.Mod1. This file is gated on cgo because the constants only
+// exist in the cgo-backed linux implementation (CGO_ENABLED=0 falls back to a
+// stub with no constants).
+func modCmd() hk.Modifier    { return hk.ModCtrl }
+func modCtrl() hk.Modifier   { return hk.ModCtrl }
+func modOption() hk.Modifier { return hk.Mod1 }
+func modShift() hk.Modifier  { return hk.ModShift }
diff --git a/internal/infrastructure/hotkey/hotkey_unsupported.go b/internal/infrastructure/hotkey/hotkey_unsupported.go
new file mode 100644
index 0000000..2be7d60
--- /dev/null
+++ b/internal/infrastructure/hotkey/hotkey_unsupported.go
@@ -0,0 +1,25 @@
+//go:build !windows && !cgo
+
+package hotkey
+
+import hk "golang.design/x/hotkey"
+
+// This file covers the configuration where golang.design/x/hotkey compiles its
+// cgo-less stub (any non-Windows platform built with CGO_ENABLED=0). In that
+// stub the package defines the Modifier/Key types but no Mod*/Key* constants,
+// and Register panics at runtime. We still provide the package-internal
+// helpers so that snapgo keeps cross-compiling (e.g. `go vet`, editor analysis,
+// or CI cross-builds) without pulling in a C toolchain.
+//
+// The returned values are inert zero modifiers and lookupKey always reports
+// "unsupported": callers on this build cannot register a real global hotkey,
+// so surfacing an "unsupported token" parse error is preferable to reaching
+// the upstream panic.
+func modCmd() hk.Modifier    { return 0 }
+func modCtrl() hk.Modifier   { return 0 }
+func modOption() hk.Modifier { return 0 }
+func modShift() hk.Modifier  { return 0 }
+
+// lookupKey has no key constants to map against in the cgo-less stub, so it
+// always reports the token as unsupported.
+func lookupKey(string) (hk.Key, bool) { return 0, false }
diff --git a/internal/infrastructure/hotkey/hotkey_windows.go b/internal/infrastructure/hotkey/hotkey_windows.go
new file mode 100644
index 0000000..4ac7482
--- /dev/null
+++ b/internal/infrastructure/hotkey/hotkey_windows.go
@@ -0,0 +1,13 @@
+//go:build windows
+
+package hotkey
+
+import hk "golang.design/x/hotkey"
+
+// On Windows we map "cmd" to Ctrl so the same config string ("cmd+shift+a")
+// stays meaningful across platforms; "option" is treated as Alt. The Windows
+// backend does not require cgo, hence the single-tag guard.
+func modCmd() hk.Modifier    { return hk.ModCtrl }
+func modCtrl() hk.Modifier   { return hk.ModCtrl }
+func modOption() hk.Modifier { return hk.ModAlt }
+func modShift() hk.Modifier  { return hk.ModShift }
diff --git a/internal/infrastructure/hotkey/keys.go b/internal/infrastructure/hotkey/keys.go
new file mode 100644
index 0000000..299ba49
--- /dev/null
+++ b/internal/infrastructure/hotkey/keys.go
@@ -0,0 +1,92 @@
+//go:build windows || cgo
+
+package hotkey
+
+import hk "golang.design/x/hotkey"
+
+// lookupKey maps a token from the user-supplied hotkey spec to a hk.Key.
+//
+// The Key* constants only exist in the platform backends that ship them
+// (windows, or the cgo-backed darwin/linux implementations); the cgo-less stub
+// in hotkey_unsupported.go provides a fallback lookupKey for the complement.
+//
+// The map is intentionally exhaustive over the alphanumeric set so we never
+// rely on an assumption that hk.KeyA..hk.KeyZ are contiguous values — the
+// upstream package gives no such guarantee.
+func lookupKey(token string) (hk.Key, bool) {
+	switch token {
+	case "a":
+		return hk.KeyA, true
+	case "b":
+		return hk.KeyB, true
+	case "c":
+		return hk.KeyC, true
+	case "d":
+		return hk.KeyD, true
+	case "e":
+		return hk.KeyE, true
+	case "f":
+		return hk.KeyF, true
+	case "g":
+		return hk.KeyG, true
+	case "h":
+		return hk.KeyH, true
+	case "i":
+		return hk.KeyI, true
+	case "j":
+		return hk.KeyJ, true
+	case "k":
+		return hk.KeyK, true
+	case "l":
+		return hk.KeyL, true
+	case "m":
+		return hk.KeyM, true
+	case "n":
+		return hk.KeyN, true
+	case "o":
+		return hk.KeyO, true
+	case "p":
+		return hk.KeyP, true
+	case "q":
+		return hk.KeyQ, true
+	case "r":
+		return hk.KeyR, true
+	case "s":
+		return hk.KeyS, true
+	case "t":
+		return hk.KeyT, true
+	case "u":
+		return hk.KeyU, true
+	case "v":
+		return hk.KeyV, true
+	case "w":
+		return hk.KeyW, true
+	case "x":
+		return hk.KeyX, true
+	case "y":
+		return hk.KeyY, true
+	case "z":
+		return hk.KeyZ, true
+	case "0":
+		return hk.Key0, true
+	case "1":
+		return hk.Key1, true
+	case "2":
+		return hk.Key2, true
+	case "3":
+		return hk.Key3, true
+	case "4":
+		return hk.Key4, true
+	case "5":
+		return hk.Key5, true
+	case "6":
+		return hk.Key6, true
+	case "7":
+		return hk.Key7, true
+	case "8":
+		return hk.Key8, true
+	case "9":
+		return hk.Key9, true
+	}
+	return 0, false
+}
diff --git a/internal/infrastructure/llm/openai_compatible.go b/internal/infrastructure/llm/openai_compatible.go
new file mode 100644
index 0000000..d5bc3d1
--- /dev/null
+++ b/internal/infrastructure/llm/openai_compatible.go
@@ -0,0 +1,174 @@
+// Package llm contains multimodal LLM adapters.
+//
+// The built-in providers are intentionally implemented through the
+// OpenAI-compatible chat/completions shape. Qwen DashScope, Volcengine Ark,
+// and OpenAI-compatible gateways all accept the same "text + image_url"
+// message content pattern, so one small HTTP adapter is enough here.
+package llm
+
+import (
+	"bytes"
+	"context"
+	"encoding/json"
+	"fmt"
+	"io"
+	"net/http"
+	"strings"
+	"time"
+
+	"github.com/mmmy/snapgo/internal/domain"
+)
+
+// VisionClient calls one configured multimodal chat endpoint.
+type VisionClient struct {
+	providerID string
+	cfg        domain.LLMProviderConfig
+	httpClient *http.Client
+}
+
+// NewVisionClient validates cfg and returns a reusable client.
+func NewVisionClient(providerID string, cfg domain.LLMProviderConfig) (*VisionClient, error) {
+	if strings.TrimSpace(cfg.BaseURL) == "" {
+		return nil, fmt.Errorf("llm base url is required")
+	}
+	if strings.TrimSpace(cfg.APIKey) == "" {
+		return nil, fmt.Errorf("llm api key is required")
+	}
+	if strings.TrimSpace(cfg.Model) == "" {
+		return nil, fmt.Errorf("llm model is required")
+	}
+	timeout := cfg.TimeoutSecs
+	if timeout <= 0 {
+		timeout = 60
+	}
+	return &VisionClient{
+		providerID: providerID,
+		cfg:        cfg,
+		httpClient: &http.Client{Timeout: time.Duration(timeout) * time.Second},
+	}, nil
+}
+
+// SummarizeImage asks the model to summarise an image available at imageURL.
+func (c *VisionClient) SummarizeImage(ctx context.Context, prompt string, imageURL string) (string, error) {
+	prompt = strings.TrimSpace(prompt)
+	if prompt == "" {
+		return "", fmt.Errorf("llm prompt is empty")
+	}
+	imageURL = strings.TrimSpace(imageURL)
+	if imageURL == "" {
+		return "", fmt.Errorf("image url is empty")
+	}
+
+	body := map[string]any{
+		"model": c.cfg.Model,
+		"messages": []map[string]any{
+			{
+				"role": "user",
+				"content": []map[string]any{
+					{"type": "text", "text": prompt},
+					{"type": "image_url", "image_url": map[string]any{"url": imageURL}},
+				},
+			},
+		},
+	}
+	if c.cfg.MaxTokens > 0 {
+		if c.providerID == domain.LLMProviderOpenAI {
+			body["max_completion_tokens"] = c.cfg.MaxTokens
+		} else {
+			body["max_tokens"] = c.cfg.MaxTokens
+		}
+	}
+	if c.cfg.Temperature >= 0 {
+		body["temperature"] = c.cfg.Temperature
+	}
+
+	payload, err := json.Marshal(body)
+	if err != nil {
+		return "", fmt.Errorf("marshal llm request: %w", err)
+	}
+	req, err := http.NewRequestWithContext(ctx, http.MethodPost, chatCompletionsURL(c.cfg.BaseURL), bytes.NewReader(payload))
+	if err != nil {
+		return "", fmt.Errorf("build llm request: %w", err)
+	}
+	req.Header.Set("Content-Type", "application/json")
+	req.Header.Set("Authorization", "Bearer "+c.cfg.APIKey)
+
+	resp, err := c.httpClient.Do(req)
+	if err != nil {
+		return "", fmt.Errorf("llm request: %w", err)
+	}
+	defer resp.Body.Close()
+	data, _ := io.ReadAll(io.LimitReader(resp.Body, 4<<20))
+	if resp.StatusCode < 200 || resp.StatusCode >= 300 {
+		return "", fmt.Errorf("llm status %d: %s", resp.StatusCode, compactBody(data))
+	}
+
+	var decoded chatCompletionResponse
+	if err := json.Unmarshal(data, &decoded); err != nil {
+		return "", fmt.Errorf("decode llm response: %w", err)
+	}
+	if decoded.Error != nil && decoded.Error.Message != "" {
+		return "", fmt.Errorf("llm error: %s", decoded.Error.Message)
+	}
+	if len(decoded.Choices) == 0 {
+		return "", fmt.Errorf("llm response has no choices")
+	}
+	text := strings.TrimSpace(contentText(decoded.Choices[0].Message.Content))
+	if text == "" {
+		return "", fmt.Errorf("llm response is empty")
+	}
+	return text, nil
+}
+
+func chatCompletionsURL(baseURL string) string {
+	base := strings.TrimRight(strings.TrimSpace(baseURL), "/")
+	if strings.HasSuffix(base, "/chat/completions") {
+		return base
+	}
+	return base + "/chat/completions"
+}
+
+type chatCompletionResponse struct {
+	Choices []struct {
+		Message struct {
+			Content any `json:"content"`
+		} `json:"message"`
+	} `json:"choices"`
+	Error *struct {
+		Message string `json:"message"`
+		Type    string `json:"type"`
+		Code    any    `json:"code"`
+	} `json:"error"`
+}
+
+func contentText(content any) string {
+	switch v := content.(type) {
+	case string:
+		return v
+	case []any:
+		parts := make([]string, 0, len(v))
+		for _, item := range v {
+			obj, ok := item.(map[string]any)
+			if !ok {
+				continue
+			}
+			if text, ok := obj["text"].(string); ok {
+				parts = append(parts, text)
+			}
+		}
+		return strings.Join(parts, "\n")
+	default:
+		return ""
+	}
+}
+
+func compactBody(data []byte) string {
+	text := strings.TrimSpace(string(data))
+	if text == "" {
+		return "<empty body>"
+	}
+	if len(text) > 800 {
+		return text[:800] + "..."
+	}
+	return text
+}
diff --git a/internal/infrastructure/llm/openai_compatible_test.go b/internal/infrastructure/llm/openai_compatible_test.go
new file mode 100644
index 0000000..67c3845
--- /dev/null
+++ b/internal/infrastructure/llm/openai_compatible_test.go
@@ -0,0 +1,86 @@
+package llm
+
+import (
+	"bytes"
+	"context"
+	"encoding/json"
+	"io"
+	"net/http"
+	"testing"
+
+	"github.com/mmmy/snapgo/internal/domain"
+)
+
+type roundTripFunc func(*http.Request) (*http.Response, error)
+
+func (f roundTripFunc) RoundTrip(req *http.Request) (*http.Response, error) {
+	return f(req)
+}
+
+func TestVisionClientSummarizeImageUsesChatCompletionImageURL(t *testing.T) {
+	var requestBody map[string]any
+	transport := roundTripFunc(func(r *http.Request) (*http.Response, error) {
+		if r.URL.Path != "/v1/chat/completions" {
+			t.Fatalf("expected /v1/chat/completions, got %s", r.URL.Path)
+		}
+		if got := r.Header.Get("Authorization"); got != "Bearer test-key" {
+			t.Fatalf("unexpected auth header %q", got)
+		}
+		if err := json.NewDecoder(r.Body).Decode(&requestBody); err != nil {
+			t.Fatalf("decode request: %v", err)
+		}
+		return &http.Response{
+			StatusCode: http.StatusOK,
+			Header:     http.Header{"Content-Type": []string{"application/json"}},
+			Body:       io.NopCloser(bytes.NewBufferString(`{"choices":[{"message":{"content":"summary ok"}}]}`)),
+		}, nil
+	})
+
+	client, err := NewVisionClient(domain.LLMProviderQwen, domain.LLMProviderConfig{
+		BaseURL:     "https://example.test/v1",
+		APIKey:      "test-key",
+		Model:       "qwen-vl-plus",
+		MaxTokens:   321,
+		Temperature: 0.2,
+		TimeoutSecs: 5,
+	})
+	if err != nil {
+		t.Fatalf("new client: %v", err)
+	}
+	client.httpClient.Transport = transport
+
+	text, err := client.SummarizeImage(context.Background(), "describe", "https://cdn.example.com/a.png")
+	if err != nil {
+		t.Fatalf("summarize image: %v", err)
+	}
+	if text != "summary ok" {
+		t.Fatalf("expected response text, got %q", text)
+	}
+	if requestBody["model"] != "qwen-vl-plus" {
+		t.Fatalf("expected model forwarded, got %#v", requestBody["model"])
+	}
+	if requestBody["max_tokens"] != float64(321) {
+		t.Fatalf("expected max_tokens forwarded, got %#v", requestBody["max_tokens"])
+	}
+
+	messages := requestBody["messages"].([]any)
+	content := messages[0].(map[string]any)["content"].([]any)
+	if content[0].(map[string]any)["text"] != "describe" {
+		t.Fatalf("expected prompt content, got %#v", content[0])
+	}
+	image := content[1].(map[string]any)
+	if image["type"] != "image_url" {
+		t.Fatalf("expected image_url item, got %#v", image)
+	}
+	url := image["image_url"].(map[string]any)["url"]
+	if url != "https://cdn.example.com/a.png" {
+		t.Fatalf("expected image url forwarded, got %#v", url)
+	}
+}
+
+func TestChatCompletionsURLAcceptsFullEndpoint(t *testing.T) {
+	full := "https://example.com/v1/chat/completions"
+	if got := chatCompletionsURL(full); got != full {
+		t.Fatalf("expected full endpoint unchanged, got %q", got)
+	}
+}
diff --git a/internal/infrastructure/logging/logging.go b/internal/infrastructure/logging/logging.go
new file mode 100644
index 0000000..73c2cdb
--- /dev/null
+++ b/internal/infrastructure/logging/logging.go
@@ -0,0 +1,226 @@
+// Package logging centralises slog configuration.
+//
+// 设计动机:
+//   - SnapGo 是 macOS GUI 应用, 由 Finder/open 启动时 stderr 会被重定向
+//     到 /dev/null, slog 默认 handler 写到 stderr 因此对用户不可见.
+//   - 为方便排查网络 / 权限 / SCP 协议层问题, 我们将日志同时写入磁盘文件
+//     和 stderr, 让 `tail -f` 与开发期 `wails dev` 都能直接看到输出.
+//   - 单独抽出包可避免 main / app 直接依赖文件 IO 细节, 也方便后续替换为
+//     os_log 或集中式日志方案.
+package logging
+
+import (
+	"fmt"
+	"io"
+	"log/slog"
+	"os"
+	"path/filepath"
+	"strings"
+	"sync"
+)
+
+const (
+	// maxLogSize is the byte threshold that triggers a rotation. 5 MiB keeps
+	// a useful amount of recent history while staying small enough to open
+	// in any editor.
+	maxLogSize = 5 * 1024 * 1024
+	// maxBackups is how many rotated files to retain (snapgo.log.1,
+	// snapgo.log.2). Older ones are deleted on each rotation.
+	maxBackups = 2
+)
+
+// teeWriter is a thin io.Writer that fans out a single slog write to many
+// underlying writers. We avoid log.MultiWriter from the std library because
+// io.MultiWriter already covers the use case without an extra dependency.
+type teeWriter struct {
+	writers []io.Writer
+}
+
+// Write copies p to every underlying writer. We deliberately keep going on
+// errors so a single broken writer (e.g. closed file handle) does not lose
+// output to the surviving writers; the last error wins which is sufficient
+// for a logger.
+func (t *teeWriter) Write(p []byte) (int, error) {
+	var lastErr error
+	for _, w := range t.writers {
+		if w == nil {
+			continue
+		}
+		if _, err := w.Write(p); err != nil {
+			lastErr = err
+		}
+	}
+	return len(p), lastErr
+}
+
+// Init wires slog.Default to write to both ~/Library/Logs/SnapGo/snapgo.log
+// and stderr. Returns a closer the caller (main) should defer so the file
+// handle is released on shutdown.
+//
+// 日志级别可通过环境变量 SNAPGO_LOG_LEVEL 调整: debug|info|warn|error.
+// 默认 debug 以便排查 SCP 阶段性问题, 待功能稳定后可调整为 info.
+func Init() (closer func()) {
+	level := parseLevel(os.Getenv("SNAPGO_LOG_LEVEL"))
+
+	var fileW io.Writer
+	logPath, err := defaultLogPath()
+	if err == nil {
+		// Size-based rotation keeps the log directory bounded; append mode is
+		// preserved inside rotatingFile so prior-launch context survives.
+		rf, ferr := newRotatingFile(logPath, maxLogSize, maxBackups)
+		if ferr == nil {
+			fileW = rf
+			closer = func() { _ = rf.Close() }
+		}
+	}
+	if closer == nil {
+		closer = func() {}
+	}
+
+	writer := &teeWriter{writers: []io.Writer{os.Stderr}}
+	if fileW != nil {
+		writer.writers = append(writer.writers, fileW)
+	}
+
+	handler := slog.NewTextHandler(writer, &slog.HandlerOptions{Level: level})
+	slog.SetDefault(slog.New(handler))
+
+	slog.Info("logging initialised",
+		"level", level.String(),
+		"file", logPath)
+	return closer
+}
+
+// rotatingFile is a size-based rotating log writer.
+//
+// 设计理由:
+//   - GUI 应用长期 append 写日志, 不加限制会无限增长, 占满磁盘.
+//   - 标准库不提供滚动能力, 引入 lumberjack 等第三方库又会增加依赖,
+//     而我们的需求很简单 (单文件 / 按大小 / 固定份数), 自实现成本更低.
+//   - 实现策略: 每次 Write 前检查写入后是否超过 maxLogSize, 超过则先
+//     rotate (snapgo.log -> snapgo.log.1 -> snapgo.log.2, 丢弃最老的),
+//     再写入新建的 snapgo.log. 用互斥锁保证并发安全 (slog handler 自身
+//     不保证对 io.Writer 的串行化).
+type rotatingFile struct {
+	mu      sync.Mutex
+	path    string
+	maxSize int64
+	backups int
+	file    *os.File
+	size    int64
+}
+
+// newRotatingFile opens (or creates, append mode) the target log file and
+// initialises the current size from the existing file so a restart does not
+// reset the rotation threshold.
+func newRotatingFile(path string, maxSize int64, backups int) (*rotatingFile, error) {
+	r := &rotatingFile{path: path, maxSize: maxSize, backups: backups}
+	if err := r.openExisting(); err != nil {
+		return nil, err
+	}
+	return r, nil
+}
+
+// openExisting opens the active log file in append mode and records its
+// current size.
+func (r *rotatingFile) openExisting() error {
+	f, err := os.OpenFile(r.path, os.O_CREATE|os.O_APPEND|os.O_WRONLY, 0o644)
+	if err != nil {
+		return err
+	}
+	info, err := f.Stat()
+	if err != nil {
+		_ = f.Close()
+		return err
+	}
+	r.file = f
+	r.size = info.Size()
+	return nil
+}
+
+// Write appends p, rotating first when the write would exceed maxSize.
+func (r *rotatingFile) Write(p []byte) (int, error) {
+	r.mu.Lock()
+	defer r.mu.Unlock()
+
+	if r.size+int64(len(p)) > r.maxSize {
+		if err := r.rotate(); err != nil {
+			// On rotation failure we keep writing to the current file rather
+			// than dropping logs; oversized-by-a-bit beats data loss.
+			r.size += int64(len(p))
+			n, werr := r.file.Write(p)
+			if werr != nil {
+				return n, werr
+			}
+			return n, err
+		}
+	}
+	n, err := r.file.Write(p)
+	r.size += int64(n)
+	return n, err
+}
+
+// rotate closes the current file, shifts backups (snapgo.log.1 ->
+// snapgo.log.2, dropping the oldest), renames the active file to
+// snapgo.log.1, then opens a fresh active file.
+func (r *rotatingFile) rotate() error {
+	if err := r.file.Close(); err != nil {
+		return err
+	}
+	// Drop the oldest backup, then shift the rest up by one index.
+	oldest := fmt.Sprintf("%s.%d", r.path, r.backups)
+	_ = os.Remove(oldest)
+	for i := r.backups - 1; i >= 1; i-- {
+		src := fmt.Sprintf("%s.%d", r.path, i)
+		dst := fmt.Sprintf("%s.%d", r.path, i+1)
+		_ = os.Rename(src, dst)
+	}
+	if r.backups >= 1 {
+		_ = os.Rename(r.path, fmt.Sprintf("%s.1", r.path))
+	}
+	return r.openExisting()
+}
+
+// Close releases the underlying file handle.
+func (r *rotatingFile) Close() error {
+	r.mu.Lock()
+	defer r.mu.Unlock()
+	if r.file == nil {
+		return nil
+	}
+	return r.file.Close()
+}
+
+// defaultLogPath returns ~/Library/Logs/SnapGo/snapgo.log, creating the
+// parent directory if needed. macOS users expect app logs to live there
+// (Console.app surfaces this directory under "Reports" and `open ~/Library/Logs`
+// is muscle-memory).
+func defaultLogPath() (string, error) {
+	home, err := os.UserHomeDir()
+	if err != nil {
+		return "", err
+	}
+	dir := filepath.Join(home, "Library", "Logs", "SnapGo")
+	if err := os.MkdirAll(dir, 0o755); err != nil {
+		return "", err
+	}
+	return filepath.Join(dir, "snapgo.log"), nil
+}
+
+// parseLevel translates a free-form string into an slog.Level. We default
+// to debug because the app currently has plenty of diagnostic logs and the
+// user-facing impact (slightly more disk IO on uploads) is negligible.
+func parseLevel(s string) slog.Level {
+	switch strings.ToLower(strings.TrimSpace(s)) {
+	case "error":
+		return slog.LevelError
+	case "warn", "warning":
+		return slog.LevelWarn
+	case "info":
+		return slog.LevelInfo
+	case "debug", "":
+		return slog.LevelDebug
+	default:
+		return slog.LevelDebug
+	}
+}
diff --git a/internal/infrastructure/ocr/client.go b/internal/infrastructure/ocr/client.go
new file mode 100644
index 0000000..93a93dc
--- /dev/null
+++ b/internal/infrastructure/ocr/client.go
@@ -0,0 +1,701 @@
+// Package ocr contains cloud OCR adapters.
+package ocr
+
+import (
+	"bytes"
+	"context"
+	"crypto/hmac"
+	"crypto/rand"
+	"crypto/sha256"
+	"encoding/base64"
+	"encoding/hex"
+	"encoding/json"
+	"errors"
+	"fmt"
+	"io"
+	"net/http"
+	"net/url"
+	"sort"
+	"strings"
+	"time"
+
+	"github.com/mmmy/snapgo/internal/application"
+	"github.com/mmmy/snapgo/internal/domain"
+)
+
+// Client calls one configured OCR provider.
+type Client struct {
+	providerID string
+	cfg        domain.OCRProviderConfig
+	httpClient *http.Client
+	now        func() time.Time
+	nonce      func() string
+}
+
+var _ application.OCRRecognizer = (*Client)(nil)
+
+// NewClient validates cfg and returns a reusable OCR client.
+func NewClient(providerID string, cfg domain.OCRProviderConfig) (*Client, error) {
+	if strings.TrimSpace(cfg.Endpoint) == "" {
+		return nil, fmt.Errorf("ocr endpoint is required")
+	}
+	if strings.TrimSpace(cfg.AccessKeyID) == "" {
+		return nil, fmt.Errorf("ocr access key id is required")
+	}
+	if strings.TrimSpace(cfg.AccessKeySecret) == "" {
+		return nil, fmt.Errorf("ocr access key secret is required")
+	}
+	if strings.TrimSpace(cfg.Action) == "" {
+		return nil, fmt.Errorf("ocr action is required")
+	}
+	if strings.TrimSpace(cfg.Version) == "" {
+		return nil, fmt.Errorf("ocr version is required")
+	}
+	switch providerID {
+	case domain.OCRProviderAliyun:
+	case domain.OCRProviderVolcengine:
+		if strings.TrimSpace(cfg.Region) == "" {
+			return nil, fmt.Errorf("volcengine ocr region is required")
+		}
+		if strings.TrimSpace(cfg.Service) == "" {
+			return nil, fmt.Errorf("volcengine ocr service is required")
+		}
+	default:
+		return nil, fmt.Errorf("unsupported ocr provider %q", providerID)
+	}
+	timeout := cfg.TimeoutSecs
+	if timeout <= 0 {
+		timeout = 30
+	}
+	return &Client{
+		providerID: providerID,
+		cfg:        cfg,
+		httpClient: &http.Client{Timeout: time.Duration(timeout) * time.Second},
+		now:        time.Now,
+		nonce:      randomNonce,
+	}, nil
+}
+
+// RecognizeText extracts visible text from a PNG screenshot.
+func (c *Client) RecognizeText(ctx context.Context, pngBytes []byte) (string, error) {
+	if len(pngBytes) == 0 {
+		return "", fmt.Errorf("empty screenshot")
+	}
+	switch c.providerID {
+	case domain.OCRProviderAliyun:
+		return c.recognizeAliyun(ctx, pngBytes)
+	case domain.OCRProviderVolcengine:
+		return c.recognizeVolcengine(ctx, pngBytes)
+	default:
+		return "", fmt.Errorf("unsupported ocr provider %q", c.providerID)
+	}
+}
+
+func (c *Client) recognizeAliyun(ctx context.Context, pngBytes []byte) (string, error) {
+	endpoint, err := parseEndpoint(c.cfg.Endpoint)
+	if err != nil {
+		return "", err
+	}
+	req, err := http.NewRequestWithContext(ctx, http.MethodPost, endpoint.String(), bytes.NewReader(pngBytes))
+	if err != nil {
+		return "", fmt.Errorf("build aliyun ocr request: %w", err)
+	}
+	req.Header.Set("Accept", "application/json")
+	req.Header.Set("Content-Type", "application/octet-stream")
+	c.signAliyun(req, pngBytes)
+	return c.doOCRRequest(req, "aliyun ocr")
+}
+
+func (c *Client) recognizeVolcengine(ctx context.Context, pngBytes []byte) (string, error) {
+	endpoint, err := parseEndpoint(c.cfg.Endpoint)
+	if err != nil {
+		return "", err
+	}
+	query := endpoint.Query()
+	query.Set("Action", c.cfg.Action)
+	query.Set("Version", c.cfg.Version)
+	endpoint.RawQuery = query.Encode()
+
+	body := map[string]string{
+		"image_base64": base64.StdEncoding.EncodeToString(pngBytes),
+	}
+	payload, err := json.Marshal(body)
+	if err != nil {
+		return "", fmt.Errorf("marshal volcengine ocr request: %w", err)
+	}
+	req, err := http.NewRequestWithContext(ctx, http.MethodPost, endpoint.String(), bytes.NewReader(payload))
+	if err != nil {
+		return "", fmt.Errorf("build volcengine ocr request: %w", err)
+	}
+	req.Header.Set("Accept", "application/json")
+	req.Header.Set("Content-Type", "application/json")
+	c.signVolcengine(req, payload)
+	return c.doOCRRequest(req, "volcengine ocr")
+}
+
+func (c *Client) doOCRRequest(req *http.Request, label string) (string, error) {
+	resp, err := c.httpClient.Do(req)
+	if err != nil {
+		return "", fmt.Errorf("%s request: %w", label, err)
+	}
+	defer resp.Body.Close()
+	data, _ := io.ReadAll(io.LimitReader(resp.Body, 8<<20))
+	if resp.StatusCode < 200 || resp.StatusCode >= 300 {
+		return "", fmt.Errorf("%s status %d: %s", label, resp.StatusCode, compactBody(data))
+	}
+	text, err := parseOCRText(data)
+	if err != nil {
+		return "", fmt.Errorf("%s response: %w", label, err)
+	}
+	return text, nil
+}
+
+func (c *Client) signAliyun(req *http.Request, payload []byte) {
+	now := c.now().UTC()
+	payloadHash := sha256Hex(payload)
+	nonce := c.nonce()
+
+	req.Header.Set("x-acs-action", c.cfg.Action)
+	req.Header.Set("x-acs-version", c.cfg.Version)
+	req.Header.Set("x-acs-date", now.Format("2006-01-02T15:04:05Z"))
+	req.Header.Set("x-acs-signature-nonce", nonce)
+	req.Header.Set("x-acs-content-sha256", payloadHash)
+
+	signedHeaders := []string{
+		"content-type",
+		"host",
+		"x-acs-action",
+		"x-acs-content-sha256",
+		"x-acs-date",
+		"x-acs-signature-nonce",
+		"x-acs-version",
+	}
+	canonicalHeaders := canonicalHeaders(req, signedHeaders)
+	canonicalRequest := strings.Join([]string{
+		req.Method,
+		canonicalURI(req.URL),
+		canonicalQuery(req.URL),
+		canonicalHeaders,
+		strings.Join(signedHeaders, ";"),
+		payloadHash,
+	}, "\n")
+	stringToSign := "ACS3-HMAC-SHA256\n" + sha256Hex([]byte(canonicalRequest))
+	signature := hmacSHA256Hex([]byte(c.cfg.AccessKeySecret), []byte(stringToSign))
+	req.Header.Set(
+		"Authorization",
+		fmt.Sprintf("ACS3-HMAC-SHA256 Credential=%s,SignedHeaders=%s,Signature=%s",
+			c.cfg.AccessKeyID,
+			strings.Join(signedHeaders, ";"),
+			signature,
+		),
+	)
+}
+
+func (c *Client) signVolcengine(req *http.Request, payload []byte) {
+	now := c.now().UTC()
+	xDate := now.Format("20060102T150405Z")
+	shortDate := now.Format("20060102")
+	payloadHash := sha256Hex(payload)
+
+	req.Header.Set("X-Date", xDate)
+	req.Header.Set("X-Content-Sha256", payloadHash)
+
+	signedHeaders := []string{
+		"content-type",
+		"host",
+		"x-content-sha256",
+		"x-date",
+	}
+	canonicalHeaders := canonicalHeaders(req, signedHeaders)
+	canonicalRequest := strings.Join([]string{
+		req.Method,
+		canonicalURI(req.URL),
+		canonicalQuery(req.URL),
+		canonicalHeaders,
+		strings.Join(signedHeaders, ";"),
+		payloadHash,
+	}, "\n")
+	scope := strings.Join([]string{shortDate, c.cfg.Region, c.cfg.Service, "request"}, "/")
+	stringToSign := strings.Join([]string{
+		"HMAC-SHA256",
+		xDate,
+		scope,
+		sha256Hex([]byte(canonicalRequest)),
+	}, "\n")
+	signingKey := volcengineSigningKey(c.cfg.AccessKeySecret, shortDate, c.cfg.Region, c.cfg.Service)
+	signature := hmacSHA256Hex(signingKey, []byte(stringToSign))
+	req.Header.Set(
+		"Authorization",
+		fmt.Sprintf("HMAC-SHA256 Credential=%s/%s, SignedHeaders=%s, Signature=%s",
+			c.cfg.AccessKeyID,
+			scope,
+			strings.Join(signedHeaders, ";"),
+			signature,
+		),
+	)
+}
+
+func parseEndpoint(raw string) (*url.URL, error) {
+	endpoint := strings.TrimSpace(raw)
+	if endpoint == "" {
+		return nil, fmt.Errorf("ocr endpoint is required")
+	}
+	if !strings.Contains(endpoint, "://") {
+		endpoint = "https://" + endpoint
+	}
+	parsed, err := url.Parse(endpoint)
+	if err != nil {
+		return nil, fmt.Errorf("parse ocr endpoint: %w", err)
+	}
+	if parsed.Scheme == "" || parsed.Host == "" {
+		return nil, fmt.Errorf("invalid ocr endpoint %q", raw)
+	}
+	if parsed.Path == "" {
+		parsed.Path = "/"
+	}
+	return parsed, nil
+}
+
+func parseOCRText(data []byte) (string, error) {
+	var root any
+	if err := json.Unmarshal(data, &root); err != nil {
+		return "", fmt.Errorf("decode json: %w", err)
+	}
+	if msg := responseError(root); msg != "" {
+		return "", errors.New(msg)
+	}
+	if text := normalizeOCRText(extractOverallOCRText(root, "")); text != "" {
+		return text, nil
+	}
+	parts := collectOCRParts(root, "")
+	if len(parts) == 0 {
+		return "", fmt.Errorf("no text found")
+	}
+	return strings.Join(dedupeNonEmpty(parts), "\n"), nil
+}
+
+func responseError(v any) string {
+	obj, ok := v.(map[string]any)
+	if !ok {
+		return ""
+	}
+	if meta, ok := obj["ResponseMetadata"].(map[string]any); ok {
+		if errObj, ok := meta["Error"].(map[string]any); ok {
+			if msg := stringValue(errObj["Message"]); msg != "" {
+				return msg
+			}
+			if code := stringValue(errObj["Code"]); code != "" {
+				return code
+			}
+		}
+	}
+	if errObj, ok := obj["Error"].(map[string]any); ok {
+		if msg := stringValue(errObj["Message"]); msg != "" {
+			return msg
+		}
+		if msg := stringValue(errObj["message"]); msg != "" {
+			return msg
+		}
+	}
+	if code, ok := numericCode(obj["code"]); ok && code != 0 && code != 10000 {
+		if msg := stringValue(obj["message"]); msg != "" {
+			return msg
+		}
+		if msg := stringValue(obj["msg"]); msg != "" {
+			return msg
+		}
+		return fmt.Sprintf("provider code %.0f", code)
+	}
+	if code := stringValue(obj["Code"]); code != "" && !isSuccessCode(code) {
+		if msg := stringValue(obj["Message"]); msg != "" {
+			return msg
+		}
+		return code
+	}
+	return ""
+}
+
+func extractOverallOCRText(v any, parentKey string) string {
+	switch value := v.(type) {
+	case string:
+		text := strings.TrimSpace(value)
+		if text == "" {
+			return ""
+		}
+		if looksLikeJSON(text) {
+			var nested any
+			if err := json.Unmarshal([]byte(text), &nested); err == nil {
+				if nestedText := extractOverallOCRText(nested, parentKey); nestedText != "" {
+					return nestedText
+				}
+			}
+		}
+		if isAggregateContainerKey(parentKey) {
+			return text
+		}
+		return ""
+	case map[string]any:
+		for _, key := range aggregateTextKeys() {
+			if child, ok := value[key]; ok {
+				if text := extractOverallOCRText(child, key); text != "" {
+					return text
+				}
+			}
+		}
+		for _, key := range responseContainerKeys() {
+			if child, ok := value[key]; ok {
+				if text := extractOverallOCRText(child, key); text != "" {
+					return text
+				}
+			}
+		}
+		keys := make([]string, 0, len(value))
+		for key := range value {
+			keys = append(keys, key)
+		}
+		sort.Strings(keys)
+		for _, key := range keys {
+			if isAggregateTextKey(key) ||
+				isResponseContainerKey(key) ||
+				isBlockContainerKey(key) ||
+				isMetadataKey(key) {
+				continue
+			}
+			if text := extractOverallOCRText(value[key], key); text != "" {
+				return text
+			}
+		}
+		return ""
+	default:
+		return ""
+	}
+}
+
+func collectOCRParts(v any, parentKey string) []string {
+	switch value := v.(type) {
+	case string:
+		text := strings.TrimSpace(value)
+		if text == "" {
+			return nil
+		}
+		if looksLikeJSON(text) {
+			var nested any
+			if err := json.Unmarshal([]byte(text), &nested); err == nil {
+				return collectOCRParts(nested, parentKey)
+			}
+		}
+		if isTextKey(parentKey) || isContainerTextKey(parentKey) {
+			return []string{text}
+		}
+		return nil
+	case []any:
+		parts := make([]string, 0, len(value))
+		for _, item := range value {
+			parts = append(parts, collectOCRParts(item, parentKey)...)
+		}
+		return parts
+	case map[string]any:
+		parts := make([]string, 0)
+		for _, key := range priorityOCRKeys() {
+			if child, ok := value[key]; ok {
+				parts = append(parts, collectOCRParts(child, key)...)
+			}
+		}
+		keys := make([]string, 0, len(value))
+		for key := range value {
+			keys = append(keys, key)
+		}
+		sort.Strings(keys)
+		for _, key := range keys {
+			if isPriorityOCRKey(key) || isMetadataKey(key) {
+				continue
+			}
+			parts = append(parts, collectOCRParts(value[key], key)...)
+		}
+		return parts
+	default:
+		return nil
+	}
+}
+
+func aggregateTextKeys() []string {
+	return []string{
+		"content",
+		"Content",
+		"text",
+		"Text",
+		"full_text",
+		"FullText",
+		"fullText",
+		"plain_text",
+		"PlainText",
+		"plainText",
+		"recognized_text",
+		"RecognizedText",
+		"recognizedText",
+		"ocr_text",
+		"OCRText",
+		"ocrText",
+	}
+}
+
+func responseContainerKeys() []string {
+	return []string{
+		"Data",
+		"data",
+		"Result",
+		"result",
+	}
+}
+
+func priorityOCRKeys() []string {
+	return []string{
+		"Data",
+		"data",
+		"Result",
+		"result",
+		"content",
+		"Content",
+		"text",
+		"Text",
+		"DetectedText",
+		"detected_text",
+		"line_text",
+		"LineText",
+		"line_texts",
+		"LineTexts",
+		"word",
+		"Word",
+		"words",
+		"Words",
+		"words_result",
+		"WordsResult",
+		"prism_wordsInfo",
+		"prism_words_info",
+		"ocr_infos",
+		"OCRInfos",
+		"items",
+		"Items",
+		"blocks",
+		"Blocks",
+		"regions",
+		"Regions",
+	}
+}
+
+func isAggregateTextKey(key string) bool {
+	for _, item := range aggregateTextKeys() {
+		if item == key {
+			return true
+		}
+	}
+	return false
+}
+
+func isAggregateContainerKey(key string) bool {
+	return isAggregateTextKey(key) || isResponseContainerKey(key)
+}
+
+func isResponseContainerKey(key string) bool {
+	for _, item := range responseContainerKeys() {
+		if item == key {
+			return true
+		}
+	}
+	return false
+}
+
+func isBlockContainerKey(key string) bool {
+	switch normalizeKey(key) {
+	case "wordsresult", "prismwordsinfo", "prismwords", "ocrinfos", "items",
+		"blocks", "regions", "words", "linetexts", "lines", "cells":
+		return true
+	default:
+		return false
+	}
+}
+
+func isPriorityOCRKey(key string) bool {
+	for _, item := range priorityOCRKeys() {
+		if item == key {
+			return true
+		}
+	}
+	return false
+}
+
+func isTextKey(key string) bool {
+	switch normalizeKey(key) {
+	case "content", "text", "detectedtext", "linetext", "word", "words", "value":
+		return true
+	default:
+		return false
+	}
+}
+
+func isContainerTextKey(key string) bool {
+	switch normalizeKey(key) {
+	case "data", "result", "linetexts", "texts":
+		return true
+	default:
+		return false
+	}
+}
+
+func isMetadataKey(key string) bool {
+	switch normalizeKey(key) {
+	case "requestid", "request", "code", "status", "statuscode", "success",
+		"error", "errors", "message", "msg", "cost", "angle", "probability",
+		"confidence", "height", "width", "left", "top", "right", "bottom",
+		"x", "y", "responsemetadata":
+		return true
+	default:
+		return false
+	}
+}
+
+func normalizeKey(key string) string {
+	key = strings.ToLower(key)
+	key = strings.ReplaceAll(key, "_", "")
+	key = strings.ReplaceAll(key, "-", "")
+	return key
+}
+
+func dedupeNonEmpty(parts []string) []string {
+	seen := map[string]struct{}{}
+	out := make([]string, 0, len(parts))
+	for _, part := range parts {
+		for _, line := range strings.Split(part, "\n") {
+			line = strings.TrimSpace(line)
+			if line == "" {
+				continue
+			}
+			if _, ok := seen[line]; ok {
+				continue
+			}
+			seen[line] = struct{}{}
+			out = append(out, line)
+		}
+	}
+	return out
+}
+
+func normalizeOCRText(text string) string {
+	lines := strings.Split(strings.TrimSpace(text), "\n")
+	out := make([]string, 0, len(lines))
+	for _, line := range lines {
+		line = strings.TrimSpace(line)
+		if line != "" {
+			out = append(out, line)
+		}
+	}
+	return strings.Join(out, "\n")
+}
+
+func looksLikeJSON(text string) bool {
+	return strings.HasPrefix(text, "{") || strings.HasPrefix(text, "[")
+}
+
+func stringValue(v any) string {
+	if s, ok := v.(string); ok {
+		return strings.TrimSpace(s)
+	}
+	return ""
+}
+
+func numericCode(v any) (float64, bool) {
+	switch n := v.(type) {
+	case float64:
+		return n, true
+	case int:
+		return float64(n), true
+	case json.Number:
+		f, err := n.Float64()
+		return f, err == nil
+	default:
+		return 0, false
+	}
+}
+
+func isSuccessCode(code string) bool {
+	switch strings.ToLower(strings.TrimSpace(code)) {
+	case "", "ok", "success", "200", "10000":
+		return true
+	default:
+		return false
+	}
+}
+
+func canonicalURI(u *url.URL) string {
+	if u == nil || u.EscapedPath() == "" {
+		return "/"
+	}
+	return u.EscapedPath()
+}
+
+func canonicalQuery(u *url.URL) string {
+	if u == nil || u.RawQuery == "" {
+		return ""
+	}
+	values, _ := url.ParseQuery(u.RawQuery)
+	return values.Encode()
+}
+
+func canonicalHeaders(req *http.Request, signedHeaders []string) string {
+	lines := make([]string, 0, len(signedHeaders))
+	for _, key := range signedHeaders {
+		var value string
+		if key == "host" {
+			value = req.URL.Host
+		} else {
+			value = req.Header.Get(key)
+		}
+		lines = append(lines, key+":"+normalizeHeaderValue(value)+"\n")
+	}
+	return strings.Join(lines, "")
+}
+
+func normalizeHeaderValue(value string) string {
+	return strings.Join(strings.Fields(strings.TrimSpace(value)), " ")
+}
+
+func volcengineSigningKey(secret, date, region, service string) []byte {
+	kDate := hmacSHA256([]byte(secret), []byte(date))
+	kRegion := hmacSHA256(kDate, []byte(region))
+	kService := hmacSHA256(kRegion, []byte(service))
+	return hmacSHA256(kService, []byte("request"))
+}
+
+func hmacSHA256(key, data []byte) []byte {
+	mac := hmac.New(sha256.New, key)
+	mac.Write(data)
+	return mac.Sum(nil)
+}
+
+func hmacSHA256Hex(key, data []byte) string {
+	return hex.EncodeToString(hmacSHA256(key, data))
+}
+
+func sha256Hex(data []byte) string {
+	sum := sha256.Sum256(data)
+	return hex.EncodeToString(sum[:])
+}
+
+func randomNonce() string {
+	buf := make([]byte, 16)
+	if _, err := rand.Read(buf); err != nil {
+		return fmt.Sprintf("%d", time.Now().UnixNano())
+	}
+	return hex.EncodeToString(buf)
+}
+
+func compactBody(data []byte) string {
+	text := strings.TrimSpace(string(data))
+	if text == "" {
+		return "<empty body>"
+	}
+	if len(text) > 800 {
+		return text[:800] + "..."
+	}
+	return text
+}
diff --git a/internal/infrastructure/ocr/client_test.go b/internal/infrastructure/ocr/client_test.go
new file mode 100644
index 0000000..163aa75
--- /dev/null
+++ b/internal/infrastructure/ocr/client_test.go
@@ -0,0 +1,177 @@
+package ocr
+
+import (
+	"bytes"
+	"context"
+	"encoding/base64"
+	"encoding/json"
+	"io"
+	"net/http"
+	"strings"
+	"testing"
+	"time"
+
+	"github.com/mmmy/snapgo/internal/domain"
+)
+
+type roundTripFunc func(*http.Request) (*http.Response, error)
+
+func (f roundTripFunc) RoundTrip(req *http.Request) (*http.Response, error) {
+	return f(req)
+}
+
+func TestAliyunRecognizeTextSignsRawPNGRequest(t *testing.T) {
+	var requestBody []byte
+	transport := roundTripFunc(func(r *http.Request) (*http.Response, error) {
+		if r.URL.Host != "ocr-api.cn-hangzhou.aliyuncs.com" {
+			t.Fatalf("unexpected host %s", r.URL.Host)
+		}
+		if got := r.Header.Get("x-acs-action"); got != "RecognizeGeneral" {
+			t.Fatalf("unexpected action %q", got)
+		}
+		if got := r.Header.Get("x-acs-version"); got != "2021-07-07" {
+			t.Fatalf("unexpected version %q", got)
+		}
+		if got := r.Header.Get("x-acs-date"); got != "2026-07-08T01:02:03Z" {
+			t.Fatalf("unexpected date %q", got)
+		}
+		if got := r.Header.Get("Authorization"); !strings.Contains(got, "ACS3-HMAC-SHA256 Credential=ak") {
+			t.Fatalf("unexpected auth header %q", got)
+		}
+		var err error
+		requestBody, err = io.ReadAll(r.Body)
+		if err != nil {
+			t.Fatalf("read body: %v", err)
+		}
+		return &http.Response{
+			StatusCode: http.StatusOK,
+			Header:     http.Header{"Content-Type": []string{"application/json"}},
+			Body: io.NopCloser(bytes.NewBufferString(
+				`{"Data":"{\"content\":\"第一行\\n第二行\"}"}`,
+			)),
+		}, nil
+	})
+
+	client, err := NewClient(domain.OCRProviderAliyun, domain.OCRProviderConfig{
+		Endpoint:        "https://ocr-api.cn-hangzhou.aliyuncs.com",
+		AccessKeyID:     "ak",
+		AccessKeySecret: "sk",
+		Action:          "RecognizeGeneral",
+		Version:         "2021-07-07",
+	})
+	if err != nil {
+		t.Fatalf("new client: %v", err)
+	}
+	client.httpClient.Transport = transport
+	client.now = func() time.Time { return time.Date(2026, 7, 8, 1, 2, 3, 0, time.UTC) }
+	client.nonce = func() string { return "nonce" }
+
+	text, err := client.RecognizeText(context.Background(), []byte("png"))
+	if err != nil {
+		t.Fatalf("recognize text: %v", err)
+	}
+	if string(requestBody) != "png" {
+		t.Fatalf("expected raw png body, got %q", string(requestBody))
+	}
+	if text != "第一行\n第二行" {
+		t.Fatalf("unexpected OCR text %q", text)
+	}
+}
+
+func TestVolcengineRecognizeTextSignsBase64JSONRequest(t *testing.T) {
+	var requestBody map[string]string
+	transport := roundTripFunc(func(r *http.Request) (*http.Response, error) {
+		if got := r.URL.Query().Get("Action"); got != "OCRNormal" {
+			t.Fatalf("unexpected action %q", got)
+		}
+		if got := r.URL.Query().Get("Version"); got != "2020-08-26" {
+			t.Fatalf("unexpected version %q", got)
+		}
+		if got := r.Header.Get("X-Date"); got != "20260708T010203Z" {
+			t.Fatalf("unexpected x-date %q", got)
+		}
+		if got := r.Header.Get("Authorization"); !strings.Contains(got, "HMAC-SHA256 Credential=ak/20260708/cn-north-1/cv/request") {
+			t.Fatalf("unexpected auth header %q", got)
+		}
+		if err := json.NewDecoder(r.Body).Decode(&requestBody); err != nil {
+			t.Fatalf("decode request: %v", err)
+		}
+		return &http.Response{
+			StatusCode: http.StatusOK,
+			Header:     http.Header{"Content-Type": []string{"application/json"}},
+			Body: io.NopCloser(bytes.NewBufferString(
+				`{"ResponseMetadata":{"RequestId":"r"},"Result":{"LineTexts":["你好","世界"]}}`,
+			)),
+		}, nil
+	})
+
+	client, err := NewClient(domain.OCRProviderVolcengine, domain.OCRProviderConfig{
+		Endpoint:        "https://visual.volcengineapi.com",
+		AccessKeyID:     "ak",
+		AccessKeySecret: "sk",
+		Region:          "cn-north-1",
+		Service:         "cv",
+		Action:          "OCRNormal",
+		Version:         "2020-08-26",
+	})
+	if err != nil {
+		t.Fatalf("new client: %v", err)
+	}
+	client.httpClient.Transport = transport
+	client.now = func() time.Time { return time.Date(2026, 7, 8, 1, 2, 3, 0, time.UTC) }
+
+	text, err := client.RecognizeText(context.Background(), []byte("png"))
+	if err != nil {
+		t.Fatalf("recognize text: %v", err)
+	}
+	if requestBody["image_base64"] != base64.StdEncoding.EncodeToString([]byte("png")) {
+		t.Fatalf("expected base64 image body, got %#v", requestBody)
+	}
+	if text != "你好\n世界" {
+		t.Fatalf("unexpected OCR text %q", text)
+	}
+}
+
+func TestParseOCRTextSupportsWordsResult(t *testing.T) {
+	text, err := parseOCRText([]byte(`{"data":{"words_result":[{"words":"foo"},{"words":"bar"}]}}`))
+	if err != nil {
+		t.Fatalf("parse ocr text: %v", err)
+	}
+	if text != "foo\nbar" {
+		t.Fatalf("unexpected OCR text %q", text)
+	}
+}
+
+func TestParseOCRTextPrefersOverallContentOverBlocks(t *testing.T) {
+	text, err := parseOCRText([]byte(`{
+		"Data": "{\"content\":\"整体识别文本\",\"prism_wordsInfo\":[{\"word\":\"整体\"},{\"word\":\"识别\"},{\"word\":\"文本\"}]}"
+	}`))
+	if err != nil {
+		t.Fatalf("parse ocr text: %v", err)
+	}
+	if text != "整体识别文本" {
+		t.Fatalf("expected overall content only, got %q", text)
+	}
+}
+
+func TestParseOCRTextPrefersResultTextOverWordsResult(t *testing.T) {
+	text, err := parseOCRText([]byte(`{
+		"Result": {
+			"text": "hello world",
+			"words_result": [{"words":"hello"},{"words":"world"}]
+		}
+	}`))
+	if err != nil {
+		t.Fatalf("parse ocr text: %v", err)
+	}
+	if text != "hello world" {
+		t.Fatalf("expected result text only, got %q", text)
+	}
+}
+
+func TestParseOCRTextReturnsProviderError(t *testing.T) {
+	_, err := parseOCRText([]byte(`{"ResponseMetadata":{"Error":{"Code":"BadRequest","Message":"bad image"}}}`))
+	if err == nil || !strings.Contains(err.Error(), "bad image") {
+		t.Fatalf("expected provider error, got %v", err)
+	}
+}
diff --git a/internal/infrastructure/oss/s3.go b/internal/infrastructure/oss/s3.go
new file mode 100644
index 0000000..028e3bd
--- /dev/null
+++ b/internal/infrastructure/oss/s3.go
@@ -0,0 +1,138 @@
+// Package oss contains storage adapters that satisfy domain.OSSProvider.
+//
+// The S3 adapter targets any S3-compatible endpoint via aws-sdk-go-v2.
+package oss
+
+import (
+	"bytes"
+	"context"
+	"fmt"
+	"net/url"
+	"strings"
+
+	awsv2 "github.com/aws/aws-sdk-go-v2/aws"
+	"github.com/aws/aws-sdk-go-v2/credentials"
+	"github.com/aws/aws-sdk-go-v2/service/s3"
+
+	"github.com/mmmy/snapgo/internal/domain"
+)
+
+// S3Provider implements domain.OSSProvider using aws-sdk-go-v2.
+//
+// We construct one client per Provider instance because the S3 client is
+// goroutine-safe and the configuration is immutable for the lifetime of the
+// provider.
+type S3Provider struct {
+	cfg    domain.S3Config
+	client *s3.Client
+}
+
+// NewS3Provider builds an *S3Provider from the supplied user configuration.
+//
+// The endpoint is plumbed through BaseEndpoint + UsePathStyle so any
+// S3-compatible service (MinIO, R2, B2, Aliyun OSS s3 endpoint) works
+// without us writing per-vendor branches.
+func NewS3Provider(cfg domain.S3Config) (*S3Provider, error) {
+	if cfg.Endpoint == "" || cfg.Bucket == "" || cfg.AccessKeyID == "" || cfg.SecretAccessKey == "" {
+		return nil, fmt.Errorf("s3 config: endpoint/bucket/accessKeyId/secretAccessKey are required")
+	}
+	region := cfg.Region
+	if region == "" {
+		region = "us-east-1"
+	}
+	awsCfg := awsv2.Config{
+		Region: region,
+		Credentials: credentials.NewStaticCredentialsProvider(
+			cfg.AccessKeyID, cfg.SecretAccessKey, "",
+		),
+	}
+	endpoint := cfg.Endpoint
+	client := s3.NewFromConfig(awsCfg, func(o *s3.Options) {
+		o.BaseEndpoint = awsv2.String(endpoint)
+		o.UsePathStyle = cfg.UsePathStyle
+	})
+	return &S3Provider{cfg: cfg, client: client}, nil
+}
+
+// Name identifies this provider in logs and history records.
+func (p *S3Provider) Name() string { return "s3" }
+
+// Upload pushes the bytes to the configured bucket and returns a public URL.
+//
+// We pass the body via bytes.Reader so the SDK can compute Content-Length
+// and signed checksum without buffering the data twice.
+func (p *S3Provider) Upload(ctx context.Context, key string, data []byte, contentType string) (string, error) {
+	if contentType == "" {
+		contentType = "image/png"
+	}
+	_, err := p.client.PutObject(ctx, &s3.PutObjectInput{
+		Bucket:      awsv2.String(p.cfg.Bucket),
+		Key:         awsv2.String(key),
+		Body:        bytes.NewReader(data),
+		ContentType: awsv2.String(contentType),
+	})
+	if err != nil {
+		return "", fmt.Errorf("s3 put object: %w", err)
+	}
+	return p.BuildPublicURL(key), nil
+}
+
+// BuildPublicURL constructs the URL that the user pastes into Markdown.
+//
+// Priority:
+//  1. PublicURLBase if user filled it (best-fit for CDN-fronted buckets);
+//  2. {Endpoint}/{Bucket}/{Key} for path-style;
+//  3. virtual-hosted-style fallback ({bucket}.host).
+func (p *S3Provider) BuildPublicURL(key string) string {
+	if p.cfg.PublicURLBase != "" {
+		base := strings.TrimRight(p.cfg.PublicURLBase, "/")
+		return base + "/" + key
+	}
+	endpoint := strings.TrimRight(p.cfg.Endpoint, "/")
+	if p.cfg.UsePathStyle {
+		return endpoint + "/" + p.cfg.Bucket + "/" + key
+	}
+	// Virtual-hosted-style: replace host with {bucket}.{host}
+	if u, err := url.Parse(endpoint); err == nil && u.Host != "" {
+		u.Host = p.cfg.Bucket + "." + u.Host
+		u.Path = "/" + key
+		return u.String()
+	}
+	return endpoint + "/" + p.cfg.Bucket + "/" + key
+}
+
+// Delete removes a previously uploaded object by key.
+//
+// The summary pipeline uses this to clean up the temporary screenshot it had
+// to upload only so a remote multimodal model could fetch it via public URL.
+func (p *S3Provider) Delete(ctx context.Context, key string) error {
+	if _, err := p.client.DeleteObject(ctx, &s3.DeleteObjectInput{
+		Bucket: awsv2.String(p.cfg.Bucket),
+		Key:    awsv2.String(key),
+	}); err != nil {
+		return fmt.Errorf("s3 delete object: %w", err)
+	}
+	return nil
+}
+
+// TestConnection performs a small put + delete to verify credentials and
+// bucket reachability. Used by the "Test connection" button in settings.
+func (p *S3Provider) TestConnection(ctx context.Context) error {
+	probeKey := strings.TrimRight(p.cfg.PathPrefix, "/") + "/.snapgo-probe"
+	probeKey = strings.TrimLeft(probeKey, "/")
+	if _, err := p.client.PutObject(ctx, &s3.PutObjectInput{
+		Bucket:      awsv2.String(p.cfg.Bucket),
+		Key:         awsv2.String(probeKey),
+		Body:        bytes.NewReader([]byte("snapgo")),
+		ContentType: awsv2.String("text/plain"),
+	}); err != nil {
+		return fmt.Errorf("probe put: %w", err)
+	}
+	if _, err := p.client.DeleteObject(ctx, &s3.DeleteObjectInput{
+		Bucket: awsv2.String(p.cfg.Bucket),
+		Key:    awsv2.String(probeKey),
+	}); err != nil {
+		return fmt.Errorf("probe delete: %w", err)
+	}
+	return nil
+}
diff --git a/internal/infrastructure/screencapture/capturer.go b/internal/infrastructure/screencapture/capturer.go
new file mode 100644
index 0000000..cb462bd
--- /dev/null
+++ b/internal/infrastructure/screencapture/capturer.go
@@ -0,0 +1,42 @@
+// Package screencapture defines the cross-platform Capturer abstraction.
+//
+// Per-platform implementations live in sibling files:
+//   - capturer_darwin.go    macOS, uses /usr/sbin/screencapture
+//   - capturer_other.go     non-darwin, uses kbinani/screenshot
+//
+// The interface is kept here so callers do not need build tags.
+package screencapture
+
+import "image"
+
+// Capturer is the abstraction that the application service depends on.
+type Capturer interface {
+	// CaptureRegion grabs the pixels within the supplied virtual-screen
+	// rectangle and returns PNG-encoded bytes.
+	CaptureRegion(rect image.Rectangle) ([]byte, error)
+
+	// VirtualBounds returns the union rectangle of every connected display.
+	VirtualBounds() image.Rectangle
+
+	// CaptureInteractive opens a system-provided region picker (e.g. macOS's
+	// `screencapture -i`) and returns the resulting PNG bytes once the user
+	// confirms a selection. If the user cancels (Esc / right-click), it
+	// returns (nil, ErrCancelled) so callers can short-circuit cleanly.
+	CaptureInteractive() ([]byte, error)
+
+	// CaptureFullScreen grabs the entire primary display silently and
+	// returns the PNG bytes. Used as the backdrop for the in-app Snipaste-
+	// style overlay; the per-region crop happens later in CropPNG once the
+	// user finishes dragging.
+	CaptureFullScreen() ([]byte, error)
+}
+
+// ErrCancelled signals that the user aborted an interactive capture.
+// It is a sentinel value; callers should compare via errors.Is.
+type cancelled struct{}
+
+func (cancelled) Error() string { return "capture cancelled by user" }
+
+// ErrCancelled is returned from CaptureInteractive when the user dismisses
+// the system selection UI without confirming a region.
+var ErrCancelled = cancelled{}
diff --git a/internal/infrastructure/screencapture/capturer_darwin.go b/internal/infrastructure/screencapture/capturer_darwin.go
new file mode 100644
index 0000000..b0f4afa
--- /dev/null
+++ b/internal/infrastructure/screencapture/capturer_darwin.go
@@ -0,0 +1,145 @@
+//go:build darwin
+
+package screencapture
+
+import (
+	"fmt"
+	"image"
+	"os"
+	"os/exec"
+	"path/filepath"
+	"strconv"
+	"strings"
+	"time"
+)
+
+// macCapturer shells out to /usr/sbin/screencapture, which is bundled with
+// macOS, requires no cgo, and is fully compatible with macOS 15/26 SDKs
+// where CoreGraphics's display-capture API has been removed.
+//
+// Trade-off: a tiny process-spawn cost per capture (~30 ms). Acceptable for
+// an interactive screenshot tool — users cannot perceive it.
+type macCapturer struct{}
+
+// New returns a macOS-native Capturer.
+func New() Capturer { return &macCapturer{} }
+
+// VirtualBounds returns the union of all displays measured in CSS pixels
+// (i.e. logical, not Retina physical pixels). We query system_profiler via
+// AppleScript-free shell utilities to avoid extra cgo dependencies.
+//
+// For simplicity we currently return the main display only; this matches
+// what the WebView/window can actually paint without a separate transparent
+// window per display. Multi-monitor support is a follow-up spec.
+func (c *macCapturer) VirtualBounds() image.Rectangle {
+	out, err := exec.Command(
+		"system_profiler", "SPDisplaysDataType",
+	).Output()
+	if err == nil {
+		// Look for "Resolution: 3024 x 1964" lines and take the first one.
+		for _, line := range strings.Split(string(out), "\n") {
+			line = strings.TrimSpace(line)
+			if !strings.HasPrefix(line, "Resolution:") {
+				continue
+			}
+			parts := strings.Fields(line)
+			// Expected pattern: ["Resolution:", "3024", "x", "1964", ...]
+			if len(parts) >= 4 {
+				w, errW := strconv.Atoi(parts[1])
+				h, errH := strconv.Atoi(parts[3])
+				if errW == nil && errH == nil {
+					// Resolution reported is physical; convert to CSS px by
+					// halving for Retina (assume 2× when w >= 2560).
+					if w >= 2560 {
+						w /= 2
+						h /= 2
+					}
+					return image.Rect(0, 0, w, h)
+				}
+			}
+		}
+	}
+	// Conservative fallback used by ~all modern Macs.
+	return image.Rect(0, 0, 1440, 900)
+}
+
+// CaptureRegion grabs the requested rectangle via the OS tool and returns
+// the resulting PNG bytes.
+//
+// Rect coords here are logical screen coordinates, matching macOS
+// screencapture's -R contract and the CSS-point coordinates reported by the
+// transparent overlay.
+func (c *macCapturer) CaptureRegion(rect image.Rectangle) ([]byte, error) {
+	if rect.Dx() <= 0 || rect.Dy() <= 0 {
+		return nil, fmt.Errorf("invalid capture rectangle: %v", rect)
+	}
+
+	tmp := filepath.Join(os.TempDir(), fmt.Sprintf("snapgo-%d.png", time.Now().UnixNano()))
+	defer os.Remove(tmp)
+
+	region := fmt.Sprintf("%d,%d,%d,%d",
+		rect.Min.X, rect.Min.Y, rect.Dx(), rect.Dy(),
+	)
+
+	// -x: silent (no shutter sound)
+	// -R: rectangle
+	// -t png
+	cmd := exec.Command("/usr/sbin/screencapture", "-x", "-R", region, "-t", "png", tmp)
+	if out, err := cmd.CombinedOutput(); err != nil {
+		return nil, fmt.Errorf("screencapture: %w (%s)", err, strings.TrimSpace(string(out)))
+	}
+	data, err := os.ReadFile(tmp)
+	if err != nil {
+		return nil, fmt.Errorf("read screencapture output: %w", err)
+	}
+	return data, nil
+}
+
+// CaptureInteractive launches `screencapture -i` which presents the macOS
+// native region selector (the same crosshair that Cmd+Shift+4 produces).
+//
+// Design rationale:
+//   - The native picker is pixel-perfect across Retina / external displays
+//     and supports multi-monitor out of the box.
+//   - It also handles Esc / right-click to cancel without requiring us to
+//     run a transparent overlay window — which previously caused the main
+//     window to flash a grey full-screen and trap the user.
+//   - When the user cancels, screencapture exits 0 but writes no file; we
+//     detect that case via os.Stat and return ErrCancelled.
+func (c *macCapturer) CaptureInteractive() ([]byte, error) {
+	tmp := filepath.Join(os.TempDir(), fmt.Sprintf("snapgo-i-%d.png", time.Now().UnixNano()))
+	defer os.Remove(tmp)
+
+	// -i: interactive region selection
+	// -x: silent (suppress the camera shutter sound)
+	// -t png: png output
+	cmd := exec.Command("/usr/sbin/screencapture", "-i", "-x", "-t", "png", tmp)
+	if out, err := cmd.CombinedOutput(); err != nil {
+		return nil, fmt.Errorf("screencapture -i: %w (%s)", err, strings.TrimSpace(string(out)))
+	}
+
+	// User cancelled (Esc / right-click): tool exits 0 with no file written.
+	info, err := os.Stat(tmp)
+	if err != nil || info.Size() == 0 {
+		return nil, ErrCancelled
+	}
+	return os.ReadFile(tmp)
+}
+
+// CaptureFullScreen runs `screencapture -x` to grab the primary display in
+// a single shot. We use -m so only the main display is captured even if
+// external monitors are attached — matches the "primary screen only" UX
+// chosen for the in-app overlay.
+func (c *macCapturer) CaptureFullScreen() ([]byte, error) {
+	tmp := filepath.Join(os.TempDir(), fmt.Sprintf("snapgo-full-%d.png", time.Now().UnixNano()))
+	defer os.Remove(tmp)
+
+	// -x: silent
+	// -m: main display only
+	// -t png: png output
+	cmd := exec.Command("/usr/sbin/screencapture", "-x", "-m", "-t", "png", tmp)
+	if out, err := cmd.CombinedOutput(); err != nil {
+		return nil, fmt.Errorf("screencapture -x -m: %w (%s)", err, strings.TrimSpace(string(out)))
+	}
+	return os.ReadFile(tmp)
+}
diff --git a/internal/infrastructure/screencapture/capturer_other.go b/internal/infrastructure/screencapture/capturer_other.go
new file mode 100644
index 0000000..0b957ee
--- /dev/null
+++ b/internal/infrastructure/screencapture/capturer_other.go
@@ -0,0 +1,71 @@
+//go:build !darwin
+
+package screencapture
+
+import (
+	"bytes"
+	"fmt"
+	"image"
+	"image/png"
+
+	"github.com/kbinani/screenshot"
+)
+
+// kbinaniCapturer is the default non-darwin Capturer.
+type kbinaniCapturer struct{}
+
+// New returns the default cross-platform Capturer for non-macOS systems.
+func New() Capturer { return &kbinaniCapturer{} }
+
+func (c *kbinaniCapturer) VirtualBounds() image.Rectangle {
+	n := screenshot.NumActiveDisplays()
+	if n == 0 {
+		return image.Rect(0, 0, 0, 0)
+	}
+	bounds := screenshot.GetDisplayBounds(0)
+	for i := 1; i < n; i++ {
+		bounds = bounds.Union(screenshot.GetDisplayBounds(i))
+	}
+	return bounds
+}
+
+func (c *kbinaniCapturer) CaptureRegion(rect image.Rectangle) ([]byte, error) {
+	if rect.Dx() <= 0 || rect.Dy() <= 0 {
+		return nil, fmt.Errorf("invalid capture rectangle: %v", rect)
+	}
+	img, err := screenshot.CaptureRect(rect)
+	if err != nil {
+		return nil, fmt.Errorf("capture: %w", err)
+	}
+	var buf bytes.Buffer
+	if err := png.Encode(&buf, img); err != nil {
+		return nil, fmt.Errorf("encode png: %w", err)
+	}
+	return buf.Bytes(), nil
+}
+
+// CaptureInteractive on non-darwin platforms is not yet implemented. The
+// frontend overlay still works there. We surface a clear error so callers
+// can decide whether to fall back to the WebView overlay.
+func (c *kbinaniCapturer) CaptureInteractive() ([]byte, error) {
+	return nil, fmt.Errorf("interactive capture is not implemented on this platform yet")
+}
+
+// CaptureFullScreen grabs the primary display via kbinani/screenshot and
+// PNG-encodes the result. Multi-display extension is deliberately deferred
+// to keep parity with the macOS "primary only" UX.
+func (c *kbinaniCapturer) CaptureFullScreen() ([]byte, error) {
+	if screenshot.NumActiveDisplays() == 0 {
+		return nil, fmt.Errorf("no active display detected")
+	}
+	bounds := screenshot.GetDisplayBounds(0)
+	img, err := screenshot.CaptureRect(bounds)
+	if err != nil {
+		return nil, fmt.Errorf("capture full screen: %w", err)
+	}
+	var buf bytes.Buffer
+	if err := png.Encode(&buf, img); err != nil {
+		return nil, fmt.Errorf("encode png: %w", err)
+	}
+	return buf.Bytes(), nil
+}
diff --git a/internal/infrastructure/screencapture/cropper.go b/internal/infrastructure/screencapture/cropper.go
new file mode 100644
index 0000000..bb71b78
--- /dev/null
+++ b/internal/infrastructure/screencapture/cropper.go
@@ -0,0 +1,59 @@
+package screencapture
+
+import (
+	"bytes"
+	"fmt"
+	"image"
+	"image/png"
+)
+
+// CropPNG decodes the supplied PNG, crops it to rect (in PHYSICAL pixels of
+// the source image — i.e. the same coordinate system the PNG itself uses),
+// and re-encodes the result.
+//
+// Why an extra abstraction: the overlay flow captures the entire screen as
+// one big PNG and lets the user pick a region in the WebView. The selection
+// rectangle the WebView reports is in CSS pixels, so callers must scale by
+// the display's backing factor before invoking CropPNG. Splitting "scale"
+// from "crop" keeps this helper focused and unit-testable.
+func CropPNG(pngBytes []byte, rect image.Rectangle) ([]byte, error) {
+	if rect.Dx() <= 0 || rect.Dy() <= 0 {
+		return nil, fmt.Errorf("invalid crop rectangle: %v", rect)
+	}
+	img, err := png.Decode(bytes.NewReader(pngBytes))
+	if err != nil {
+		return nil, fmt.Errorf("decode source png: %w", err)
+	}
+	// Clip the requested rectangle to the source bounds — defensive guard
+	// against off-by-one errors from CSS-px → physical-px scaling.
+	src := img.Bounds()
+	clipped := rect.Intersect(src)
+	if clipped.Empty() {
+		return nil, fmt.Errorf("crop rectangle %v has no overlap with source %v", rect, src)
+	}
+
+	// SubImage is documented on most concrete image types; the standard
+	// library decodes PNGs into one of those, so this assertion is safe in
+	// practice. Fall back to a manual copy otherwise.
+	type subImager interface {
+		SubImage(r image.Rectangle) image.Image
+	}
+	var cropped image.Image
+	if si, ok := img.(subImager); ok {
+		cropped = si.SubImage(clipped)
+	} else {
+		dst := image.NewRGBA(image.Rect(0, 0, clipped.Dx(), clipped.Dy()))
+		for y := 0; y < clipped.Dy(); y++ {
+			for x := 0; x < clipped.Dx(); x++ {
+				dst.Set(x, y, img.At(clipped.Min.X+x, clipped.Min.Y+y))
+			}
+		}
+		cropped = dst
+	}
+
+	var buf bytes.Buffer
+	if err := png.Encode(&buf, cropped); err != nil {
+		return nil, fmt.Errorf("encode cropped png: %w", err)
+	}
+	return buf.Bytes(), nil
+}
diff --git a/internal/infrastructure/ssh/client.go b/internal/infrastructure/ssh/client.go
new file mode 100644
index 0000000..42c1364
--- /dev/null
+++ b/internal/infrastructure/ssh/client.go
@@ -0,0 +1,505 @@
+// Package ssh provides an SCP-based remote upload adapter for SnapGo.
+//
+// Design rationale:
+//   - We deliberately implement SCP "sink mode" by hand on top of an SSH
+//     session instead of pulling in an extra dependency. The protocol is
+//     trivial (one control line + payload + null byte) and we only need
+//     write support, so a custom implementation keeps the dependency
+//     surface small and auditable.
+//   - The adapter is split into a Client (connection lifetime) and a
+//     CopyFile method (single transfer) so future use-cases such as listing
+//     or deleting remote files can extend the same SSH session.
+//   - All public methods accept a context so the application layer can
+//     enforce a timeout that matches the user-perceived capture latency.
+package ssh
+
+import (
+	"context"
+	"fmt"
+	"io"
+	"log/slog"
+	"net"
+	"os"
+	"path"
+	"strings"
+	"time"
+
+	"golang.org/x/crypto/ssh"
+	"golang.org/x/crypto/ssh/agent"
+	"golang.org/x/crypto/ssh/knownhosts"
+
+	"github.com/mmmy/snapgo/internal/domain"
+)
+
+// logger returns a component-scoped slog logger bound to the CURRENT
+// default handler.
+//
+// 为什么是函数而非包级 slog.With 变量:
+//   - 包级变量在 main() 调用 logging.Init() 之前就初始化, 那一刻
+//     slog.Default() 还是 bootstrap handler (它转发给标准 log 包).
+//   - logging.Init() 里的 slog.SetDefault() 会把标准 log 包重定向回新的
+//     TextHandler, 于是旧 handler 先把整行格式化成 "INFO msg component=ssh..."
+//     再被新 handler 当成一个 msg 二次包裹, 产生双前缀日志.
+//   - 每次惰性读取 slog.Default() 即可始终拿到正确的目标 handler.
+func sshLog() *slog.Logger { return slog.Default().With("component", "ssh") }
+
+// Client is a thin wrapper around *ssh.Client whose lifetime maps 1:1
+// to a single upload operation. We do not pool connections because the
+// expected cadence (a few uploads per minute at most) does not justify
+// the additional complexity of managing keep-alives.
+type Client struct {
+	client *ssh.Client
+	cfg    domain.SSHConfig
+}
+
+// Dial establishes an SSH connection using the supplied configuration.
+//
+// Authentication priority:
+//  1. Password, if non-empty.
+//  2. Local ssh-agent ($SSH_AUTH_SOCK), if present.
+//  3. ~/.ssh/id_ed25519 → id_rsa fallback files.
+//
+// Host-key verification follows cfg.StrictHostKey. When strict, the user-
+// supplied known_hosts file is honoured (defaulting to ~/.ssh/known_hosts).
+// When false the call uses ssh.InsecureIgnoreHostKey, which is a deliberate
+// trade-off that surfaces in the UI — the settings page warns the user.
+func Dial(ctx context.Context, cfg domain.SSHConfig) (*Client, error) {
+	if cfg.Host == "" || cfg.User == "" {
+		return nil, fmt.Errorf("ssh: host and user are required")
+	}
+	port := cfg.Port
+	if port <= 0 {
+		port = 22
+	}
+	timeout := time.Duration(cfg.ConnectTimeoutSecs) * time.Second
+	if timeout <= 0 {
+		timeout = 10 * time.Second
+	}
+
+	authMethods, authSummary, err := buildAuthMethods(cfg)
+	if err != nil {
+		return nil, err
+	}
+	if len(authMethods) == 0 {
+		sshLog().Warn("dial aborted: no auth methods",
+			"host", cfg.Host, "user", cfg.User, "auth_summary", authSummary)
+		return nil, fmt.Errorf("ssh: no authentication methods available (set password or ensure ssh-agent / ~/.ssh/id_* exists)")
+	}
+
+	hostKeyCallback, hostKeyMode, err := buildHostKeyCallback(cfg)
+	if err != nil {
+		sshLog().Error("host key callback failed",
+			"host", cfg.Host, "strict", cfg.StrictHostKey,
+			"known_hosts", cfg.KnownHostsPath, "err", err)
+		return nil, err
+	}
+
+	clientCfg := &ssh.ClientConfig{
+		User:            cfg.User,
+		Auth:            authMethods,
+		HostKeyCallback: hostKeyCallback,
+		Timeout:         timeout,
+	}
+	addr := net.JoinHostPort(cfg.Host, fmt.Sprintf("%d", port))
+
+	sshLog().Info("dial start",
+		"addr", addr, "user", cfg.User,
+		"timeout", timeout, "auth_summary", authSummary, "host_key", hostKeyMode)
+
+	dialStart := time.Now()
+	// Honour ctx by dialing through net.Dialer so an early ctx cancel
+	// surfaces here instead of after the (long) ssh handshake.
+	dialer := net.Dialer{Timeout: timeout}
+	tcpConn, err := dialer.DialContext(ctx, "tcp", addr)
+	if err != nil {
+		sshLog().Error("tcp dial failed",
+			"addr", addr, "elapsed", time.Since(dialStart), "err", err)
+		return nil, fmt.Errorf("ssh: dial %s: %w", addr, err)
+	}
+	sshLog().Debug("tcp connected", "addr", addr, "elapsed", time.Since(dialStart))
+
+	hsStart := time.Now()
+	sshConn, chans, reqs, err := ssh.NewClientConn(tcpConn, addr, clientCfg)
+	if err != nil {
+		_ = tcpConn.Close()
+		sshLog().Error("ssh handshake failed",
+			"addr", addr, "user", cfg.User,
+			"elapsed", time.Since(hsStart), "err", err)
+		return nil, fmt.Errorf("ssh: handshake: %w", err)
+	}
+	sshLog().Info("ssh handshake ok",
+		"addr", addr, "user", cfg.User,
+		"server_version", string(sshConn.ServerVersion()),
+		"elapsed", time.Since(hsStart))
+	return &Client{
+		client: ssh.NewClient(sshConn, chans, reqs),
+		cfg:    cfg,
+	}, nil
+}
+
+// Close shuts down the underlying SSH connection.
+func (c *Client) Close() error {
+	if c == nil || c.client == nil {
+		return nil
+	}
+	return c.client.Close()
+}
+
+// CopyFile uploads `data` to remoteRelativePath under the user's home
+// directory. The caller passes a path *relative to $HOME*; the adapter
+// strips any leading "/" or "~" so users cannot escape their home
+// directory through misconfigured PathPrefix values.
+//
+// The upload uses the SCP "sink mode" protocol:
+//
+//	$ scp -t <remote-dir>
+//	  ← we send: D0755 0 <subdir>\n      (mkdir -p analogue, repeated)
+//	  ← we send: C0644 <size> <basename>\n
+//	  ← we send: <bytes...>\0
+//	  ← we send: E\n                     (close each directory)
+//
+// Each line we write is acknowledged by a single 0x00 byte from the remote
+// `scp -t` process; a non-zero ack indicates an error.
+func (c *Client) CopyFile(ctx context.Context, remoteRelativePath string, data []byte, mode os.FileMode) error {
+	cleaned := normaliseRemotePath(remoteRelativePath)
+	if cleaned == "" {
+		return fmt.Errorf("ssh: remote path is empty")
+	}
+
+	dir, base := path.Split(cleaned)
+	dir = strings.Trim(dir, "/")
+
+	sshLog().Info("scp copy start",
+		"remote_path", cleaned, "dir", dir, "file", base,
+		"size", len(data), "mode", fmt.Sprintf("%#o", mode.Perm()))
+
+	session, err := c.client.NewSession()
+	if err != nil {
+		sshLog().Error("scp new session failed", "err", err)
+		return fmt.Errorf("ssh: new session: %w", err)
+	}
+	defer session.Close()
+
+	stdin, err := session.StdinPipe()
+	if err != nil {
+		return fmt.Errorf("ssh: stdin pipe: %w", err)
+	}
+	stdout, err := session.StdoutPipe()
+	if err != nil {
+		return fmt.Errorf("ssh: stdout pipe: %w", err)
+	}
+
+	// `-t` puts the remote scp into "sink mode" rooted at $HOME. `-r`
+	// allows us to feed `D` directives so we can create directory trees
+	// in one round-trip rather than running a separate `mkdir -p`.
+	cmd := fmt.Sprintf("scp -tr %s", shellQuote("./"))
+	sshLog().Debug("scp remote command", "cmd", cmd)
+	if err := session.Start(cmd); err != nil {
+		sshLog().Error("scp session start failed", "cmd", cmd, "err", err)
+		return fmt.Errorf("ssh: start scp: %w", err)
+	}
+
+	transferStart := time.Now()
+	errCh := make(chan error, 1)
+	go func() {
+		errCh <- writeSCPStream(stdin, stdout, dir, base, data, mode)
+	}()
+
+	// Wait for either ctx, the writer goroutine, or the remote command.
+	select {
+	case <-ctx.Done():
+		sshLog().Warn("scp cancelled by context",
+			"remote_path", cleaned, "elapsed", time.Since(transferStart), "err", ctx.Err())
+		_ = session.Signal(ssh.SIGTERM)
+		_ = session.Close()
+		return ctx.Err()
+	case writeErr := <-errCh:
+		if writeErr != nil {
+			sshLog().Error("scp protocol failed",
+				"remote_path", cleaned, "elapsed", time.Since(transferStart), "err", writeErr)
+			_ = session.Close()
+			return writeErr
+		}
+	}
+
+	if err := session.Wait(); err != nil {
+		sshLog().Error("scp session wait failed",
+			"remote_path", cleaned, "elapsed", time.Since(transferStart), "err", err)
+		return fmt.Errorf("ssh: scp wait: %w", err)
+	}
+	sshLog().Info("scp copy ok",
+		"remote_path", cleaned, "size", len(data), "elapsed", time.Since(transferStart))
+	return nil
+}
+
+// writeSCPStream drives the SCP sink-mode dialogue described above. It is
+// extracted from CopyFile for two reasons:
+//   1. It contains the only blocking IO so we can run it in a goroutine
+//      and select on ctx.Done().
+//   2. It makes the protocol-level steps testable in isolation (the unit
+//      tests pipe an in-memory bytes.Buffer into expectAck).
+func writeSCPStream(stdin io.WriteCloser, stdout io.Reader, dir, base string, data []byte, mode os.FileMode) error {
+	defer stdin.Close()
+
+	// First ack: the remote scp -t emits an initial 0x00 once it is ready.
+	if err := expectAck(stdout); err != nil {
+		return fmt.Errorf("scp: initial ack: %w", err)
+	}
+	sshLog().Debug("scp initial ack received")
+
+	// Walk `dir` segment by segment, opening each level with `D0755 0 <name>`.
+	dirs := splitNonEmpty(dir, "/")
+	for _, segment := range dirs {
+		line := fmt.Sprintf("D0755 0 %s\n", segment)
+		if _, err := io.WriteString(stdin, line); err != nil {
+			return fmt.Errorf("scp: write D-line: %w", err)
+		}
+		if err := expectAck(stdout); err != nil {
+			return fmt.Errorf("scp: ack D-line %q: %w", segment, err)
+		}
+		sshLog().Debug("scp dir opened", "segment", segment)
+	}
+
+	// File header: `C<perm> <size> <name>\n`
+	header := fmt.Sprintf("C%04o %d %s\n", mode.Perm(), len(data), base)
+	if _, err := io.WriteString(stdin, header); err != nil {
+		return fmt.Errorf("scp: write C-line: %w", err)
+	}
+	if err := expectAck(stdout); err != nil {
+		return fmt.Errorf("scp: ack C-line: %w", err)
+	}
+	sshLog().Debug("scp header acked", "header", strings.TrimSpace(header))
+
+	if _, err := stdin.Write(data); err != nil {
+		return fmt.Errorf("scp: write payload: %w", err)
+	}
+	if _, err := stdin.Write([]byte{0}); err != nil {
+		return fmt.Errorf("scp: write trailing null: %w", err)
+	}
+	if err := expectAck(stdout); err != nil {
+		return fmt.Errorf("scp: ack payload: %w", err)
+	}
+	sshLog().Debug("scp payload acked", "bytes", len(data))
+
+	// Pop each directory we opened earlier with an `E` line so the remote
+	// scp finishes cleanly.
+	for range dirs {
+		if _, err := io.WriteString(stdin, "E\n"); err != nil {
+			return fmt.Errorf("scp: write E-line: %w", err)
+		}
+		if err := expectAck(stdout); err != nil {
+			return fmt.Errorf("scp: ack E-line: %w", err)
+		}
+	}
+	return nil
+}
+
+// expectAck reads exactly one byte from the remote scp and treats anything
+// other than 0x00 as a protocol-level error. When the remote signals an
+// error (0x01 = warning, 0x02 = fatal) it is followed by a textual reason
+// terminated with '\n', which we surface to the caller.
+func expectAck(r io.Reader) error {
+	buf := make([]byte, 1)
+	if _, err := io.ReadFull(r, buf); err != nil {
+		return err
+	}
+	if buf[0] == 0 {
+		return nil
+	}
+	// Read the rest of the message until newline so the user sees a
+	// meaningful "permission denied"-style reason.
+	msg := readUntilNewline(r)
+	return fmt.Errorf("scp remote error (%d): %s", buf[0], strings.TrimSpace(msg))
+}
+
+func readUntilNewline(r io.Reader) string {
+	var sb strings.Builder
+	buf := make([]byte, 1)
+	for i := 0; i < 1024; i++ {
+		if _, err := io.ReadFull(r, buf); err != nil {
+			break
+		}
+		if buf[0] == '\n' {
+			break
+		}
+		sb.WriteByte(buf[0])
+	}
+	return sb.String()
+}
+
+// TestConnection performs a minimal handshake + `pwd` round trip so the
+// settings UI can confirm the credentials work without writing a file.
+func TestConnection(ctx context.Context, cfg domain.SSHConfig) error {
+	sshLog().Info("test connection start", "host", cfg.Host, "user", cfg.User, "port", cfg.Port)
+	start := time.Now()
+	client, err := Dial(ctx, cfg)
+	if err != nil {
+		sshLog().Error("test connection: dial failed", "err", err, "elapsed", time.Since(start))
+		return err
+	}
+	defer client.Close()
+	session, err := client.client.NewSession()
+	if err != nil {
+		sshLog().Error("test connection: new session failed", "err", err)
+		return fmt.Errorf("ssh: new session: %w", err)
+	}
+	defer session.Close()
+	if err := session.Run("true"); err != nil {
+		sshLog().Error("test connection: probe failed", "err", err)
+		return fmt.Errorf("ssh: probe command failed: %w", err)
+	}
+	sshLog().Info("test connection ok", "elapsed", time.Since(start))
+	return nil
+}
+
+// normaliseRemotePath strips any leading "/" or "~" so the path is always
+// interpreted relative to the remote $HOME, matching the UI promise.
+func normaliseRemotePath(p string) string {
+	p = strings.TrimSpace(p)
+	p = strings.TrimPrefix(p, "~")
+	p = strings.TrimPrefix(p, "/")
+	p = strings.TrimPrefix(p, "./")
+	return path.Clean(p)
+}
+
+// splitNonEmpty splits `s` on `sep` and discards empty segments so the
+// caller does not have to defend against double slashes etc.
+func splitNonEmpty(s, sep string) []string {
+	parts := strings.Split(s, sep)
+	out := parts[:0]
+	for _, part := range parts {
+		if part == "" || part == "." {
+			continue
+		}
+		out = append(out, part)
+	}
+	return out
+}
+
+// shellQuote is a defensive single-quote escaper used when interpolating
+// user-controlled strings (currently only the relative root ".") into the
+// remote `scp` command line. We do NOT quote arbitrary user paths because
+// SCP itself receives them through the protocol channel above.
+func shellQuote(s string) string {
+	return "'" + strings.ReplaceAll(s, "'", `'\''`) + "'"
+}
+
+// buildAuthMethods chooses authentication methods given the supplied
+// configuration.
+//
+// The method set is gated by cfg.AuthMethod:
+//   - SSHAuthPassword            → password only.
+//   - SSHAuthKey                 → ssh-agent + ~/.ssh/id_* key files only.
+//   - "" / SSHAuthBuiltin (legacy) → password (if set) + agent + key files.
+//
+// (Kerberos never reaches here; it uses the system ssh binary instead.)
+//
+// Returns a human-readable summary alongside the method slice so the
+// caller can include "password+agent+ed25519" (and similar) in its dial
+// log without leaking secret material.
+func buildAuthMethods(cfg domain.SSHConfig) ([]ssh.AuthMethod, string, error) {
+	var methods []ssh.AuthMethod
+	var sources []string
+
+	// Decide which families are allowed for the selected method. An empty /
+	// "builtin" value preserves the original combined behaviour so configs
+	// written before the split keep working.
+	allowPassword := cfg.AuthMethod == domain.SSHAuthPassword ||
+		cfg.AuthMethod == domain.SSHAuthBuiltin || cfg.AuthMethod == ""
+	allowKey := cfg.AuthMethod == domain.SSHAuthKey ||
+		cfg.AuthMethod == domain.SSHAuthBuiltin || cfg.AuthMethod == ""
+
+	if allowPassword && cfg.Password != "" {
+		methods = append(methods, ssh.Password(cfg.Password))
+		sources = append(sources, "password")
+	}
+	if allowKey {
+		if sock := os.Getenv("SSH_AUTH_SOCK"); sock != "" {
+			if conn, err := net.Dial("unix", sock); err == nil {
+				// 关键: 仅在 agent 真正持有 key 时才把它加入 auth methods.
+				//
+				// macOS 的 launchd ssh-agent 即便没有任何 identity 也会响应,
+				// 此时若仍注册 PublicKeysCallback, x/crypto 会把它当作一次空的
+				// publickey 尝试. 配合服务器的 MaxAuthTries 计数, 这次"空尝试"
+				// 会挤占后续基于磁盘私钥的认证机会, 最终导致
+				// "[none publickey] no supported methods remain" —— 即便磁盘上
+				// 的 key 本身完全可用. 因此空 agent 必须跳过.
+				ag := agent.NewClient(conn)
+				if keys, lerr := ag.List(); lerr == nil && len(keys) > 0 {
+					methods = append(methods, ssh.PublicKeysCallback(ag.Signers))
+					sources = append(sources, fmt.Sprintf("agent(%d)", len(keys)))
+				} else {
+					sshLog().Debug("ssh-agent has no identities; skipping",
+						"sock", sock, "list_err", lerr)
+				}
+			} else {
+				sshLog().Debug("ssh-agent dial failed", "sock", sock, "err", err)
+			}
+		}
+		home, err := os.UserHomeDir()
+		if err == nil {
+			// Probe the common default keys; any unreadable / missing file is
+			// silently skipped so the user never sees noise about keys they did
+			// not set up.
+			for _, name := range []string{"id_ed25519", "id_rsa", "id_ecdsa"} {
+				signer, err := loadPrivateKey(path.Join(home, ".ssh", name))
+				if err == nil && signer != nil {
+					methods = append(methods, ssh.PublicKeys(signer))
+					sources = append(sources, name)
+				}
+			}
+		} else {
+			sshLog().Debug("home dir unavailable for ssh keys", "err", err)
+		}
+	}
+	if len(sources) == 0 {
+		return methods, "none", nil
+	}
+	return methods, strings.Join(sources, "+"), nil
+}
+
+// loadPrivateKey reads and parses a single OpenSSH private key file.
+// Returns (nil, nil) when the file does not exist so the caller can keep
+// scanning the standard key list.
+func loadPrivateKey(p string) (ssh.Signer, error) {
+	data, err := os.ReadFile(p)
+	if err != nil {
+		if os.IsNotExist(err) {
+			return nil, nil
+		}
+		return nil, err
+	}
+	signer, err := ssh.ParsePrivateKey(data)
+	if err != nil {
+		// Encrypted keys without a passphrase are skipped silently for now;
+		// passphrase support is left to a follow-up spec.
+		return nil, nil
+	}
+	return signer, nil
+}
+
+// buildHostKeyCallback returns either a strict known_hosts-backed callback
+// or an InsecureIgnoreHostKey fallback, depending on cfg.StrictHostKey.
+//
+// The returned mode string ("insecure" or "known_hosts:<path>") is logged
+// at dial time so a "rejected by host key" failure is easy to diagnose.
+func buildHostKeyCallback(cfg domain.SSHConfig) (ssh.HostKeyCallback, string, error) {
+	if !cfg.StrictHostKey {
+		// Deliberate trade-off: matches `scp -o StrictHostKeyChecking=no` and
+		// keeps the first-launch experience friction-free for personal LANs.
+		return ssh.InsecureIgnoreHostKey(), "insecure", nil
+	}
+	knownHosts := cfg.KnownHostsPath
+	if knownHosts == "" {
+		home, err := os.UserHomeDir()
+		if err != nil {
+			return nil, "", fmt.Errorf("ssh: resolve home for known_hosts: %w", err)
+		}
+		knownHosts = path.Join(home, ".ssh", "known_hosts")
+	}
+	cb, err := knownhosts.New(knownHosts)
+	if err != nil {
+		return nil, "", fmt.Errorf("ssh: load known_hosts %q: %w", knownHosts, err)
+	}
+	return cb, "known_hosts:" + knownHosts, nil
+}
diff --git a/internal/infrastructure/ssh/kerberos_uploader.go b/internal/infrastructure/ssh/kerberos_uploader.go
new file mode 100644
index 0000000..fd6ce8a
--- /dev/null
+++ b/internal/infrastructure/ssh/kerberos_uploader.go
@@ -0,0 +1,230 @@
+// kerberos_uploader.go — an SSHUploader implementation that delegates to
+// the system /usr/bin/ssh + /usr/bin/scp binaries so an existing Kerberos
+// (GSSAPI) credential cache populated by `kinit` is reused transparently.
+//
+// 设计理由 (为什么不用 golang.org/x/crypto/ssh 做 Kerberos):
+//   - macOS 的 Kerberos 票据默认存放在 API: 类型的 credential cache 中,
+//     由系统 GSSD (Heimdal) 守护进程托管. Go 生态的 gokrb5 只能读取
+//     FILE: 类型 ccache 与 keytab, 无法访问 API: ccache, 因此在 macOS 上
+//     用纯 Go 实现 GSSAPI 认证基本不可行.
+//   - 系统自带的 /usr/bin/ssh 原生集成 Heimdal GSSAPI, 用户 `kinit` 之后
+//     的票据可被直接复用. 把上传委托给系统 ssh/scp 是最稳妥的方案, 也与
+//     用户"命令行能免密登录即可"的预期完全一致.
+//   - 仅在 AuthMethod == kerberos 时启用此实现; builtin 路径不受影响.
+package ssh
+
+import (
+	"bytes"
+	"context"
+	"fmt"
+	"os"
+	"os/exec"
+	"path"
+	"strconv"
+	"strings"
+	"time"
+
+	"github.com/mmmy/snapgo/internal/domain"
+)
+
+// systemSSHPath / systemSCPPath are the absolute paths to the macOS system
+// binaries. We use absolute paths rather than relying on $PATH so a hijacked
+// PATH cannot redirect us to an arbitrary binary, and because GUI apps on
+// macOS often launch with a minimal PATH that omits /usr/bin entirely.
+const (
+	systemSSHPath = "/usr/bin/ssh"
+	systemSCPPath = "/usr/bin/scp"
+)
+
+// KerberosUploader satisfies application.SSHUploader by shelling out to the
+// system scp binary with GSSAPI authentication enabled.
+type KerberosUploader struct {
+	cfg domain.SSHConfig
+}
+
+// NewKerberosUploader returns an uploader that delegates to system scp.
+func NewKerberosUploader(cfg domain.SSHConfig) *KerberosUploader {
+	return &KerberosUploader{cfg: cfg}
+}
+
+// Upload writes data to remoteRelPath (relative to the remote $HOME) by
+// staging it in a local temp file and invoking system scp once.
+//
+// We stage to a temp file because scp transfers files, not stdin; piping a
+// stream would require the more fragile `scp -t` sink protocol that we only
+// use for the in-process client. A temp file is simpler and robust.
+func (u *KerberosUploader) Upload(ctx context.Context, remoteRelPath string, data []byte, mode os.FileMode) error {
+	start := time.Now()
+	cleaned := normaliseRemotePath(remoteRelPath)
+	if cleaned == "" {
+		return fmt.Errorf("ssh(kerberos): remote path is empty")
+	}
+	sshLog().Info("kerberos uploader start",
+		"host", u.cfg.Host, "user", u.cfg.User, "port", u.cfg.Port,
+		"remote_path", cleaned, "size", len(data))
+
+	// 1. Ensure the remote directory tree exists. scp itself will not create
+	//    intermediate directories, so we run a remote `mkdir -p` first.
+	dir, _ := path.Split(cleaned)
+	dir = strings.Trim(dir, "/")
+	if dir != "" {
+		if err := u.runRemoteMkdir(ctx, dir); err != nil {
+			sshLog().Error("kerberos uploader mkdir failed",
+				"dir", dir, "elapsed", time.Since(start), "err", err)
+			return err
+		}
+	}
+
+	// 2. Stage the payload to a local temp file for scp to read.
+	tmp, err := os.CreateTemp("", "snapgo-scp-*.png")
+	if err != nil {
+		return fmt.Errorf("ssh(kerberos): create temp: %w", err)
+	}
+	tmpPath := tmp.Name()
+	defer os.Remove(tmpPath)
+	if _, err := tmp.Write(data); err != nil {
+		_ = tmp.Close()
+		return fmt.Errorf("ssh(kerberos): write temp: %w", err)
+	}
+	if err := tmp.Close(); err != nil {
+		return fmt.Errorf("ssh(kerberos): close temp: %w", err)
+	}
+	if err := os.Chmod(tmpPath, mode.Perm()); err != nil {
+		sshLog().Debug("kerberos uploader chmod temp failed", "err", err)
+	}
+
+	// 3. scp the temp file to "user@host:cleaned" (cleaned is relative to
+	//    $HOME, which scp interprets correctly for a remote login shell).
+	remoteTarget := fmt.Sprintf("%s@%s:%s", u.cfg.User, u.cfg.Host, cleaned)
+	args := append(u.commonSCPArgs(), tmpPath, remoteTarget)
+	if err := u.runCommand(ctx, systemSCPPath, args); err != nil {
+		sshLog().Error("kerberos uploader scp failed",
+			"remote_path", cleaned, "elapsed", time.Since(start), "err", err)
+		return err
+	}
+	sshLog().Info("kerberos uploader done",
+		"remote_path", cleaned, "size", len(data), "total_elapsed", time.Since(start))
+	return nil
+}
+
+// runRemoteMkdir runs `mkdir -p ~/<dir>` on the remote host via system ssh.
+func (u *KerberosUploader) runRemoteMkdir(ctx context.Context, dir string) error {
+	remote := fmt.Sprintf("%s@%s", u.cfg.User, u.cfg.Host)
+	// Quote the directory so spaces / metacharacters cannot break the shell
+	// command. dir is already normalised (no leading ~ or /).
+	cmd := "mkdir -p " + shellQuote("./"+dir)
+	args := append(u.commonSSHArgs(), remote, cmd)
+	return u.runCommand(ctx, systemSSHPath, args)
+}
+
+// commonSSHArgs builds the shared option set that enables GSSAPI auth and
+// disables interactive prompts (we want a hard failure, never a hang waiting
+// for a password the GUI cannot answer).
+func (u *KerberosUploader) commonSSHArgs() []string {
+	port := u.cfg.Port
+	if port <= 0 {
+		port = 22
+	}
+	timeout := u.cfg.ConnectTimeoutSecs
+	if timeout <= 0 {
+		timeout = 10
+	}
+	args := []string{
+		"-p", strconv.Itoa(port),
+		"-o", "GSSAPIAuthentication=yes",
+		"-o", "GSSAPIDelegateCredentials=no",
+		"-o", "PreferredAuthentications=gssapi-with-mic,gssapi-keyex",
+		"-o", "PubkeyAuthentication=no",
+		"-o", "PasswordAuthentication=no",
+		"-o", "KbdInteractiveAuthentication=no",
+		"-o", "BatchMode=yes",
+		"-o", "ConnectTimeout=" + strconv.Itoa(timeout),
+	}
+	args = append(args, u.hostKeyArgs()...)
+	return args
+}
+
+// commonSCPArgs mirrors commonSSHArgs but uses scp's uppercase -P port flag.
+func (u *KerberosUploader) commonSCPArgs() []string {
+	port := u.cfg.Port
+	if port <= 0 {
+		port = 22
+	}
+	timeout := u.cfg.ConnectTimeoutSecs
+	if timeout <= 0 {
+		timeout = 10
+	}
+	args := []string{
+		"-P", strconv.Itoa(port),
+		"-o", "GSSAPIAuthentication=yes",
+		"-o", "GSSAPIDelegateCredentials=no",
+		"-o", "PreferredAuthentications=gssapi-with-mic,gssapi-keyex",
+		"-o", "PubkeyAuthentication=no",
+		"-o", "PasswordAuthentication=no",
+		"-o", "KbdInteractiveAuthentication=no",
+		"-o", "BatchMode=yes",
+		"-o", "ConnectTimeout=" + strconv.Itoa(timeout),
+	}
+	args = append(args, u.hostKeyArgs()...)
+	return args
+}
+
+// hostKeyArgs maps StrictHostKey onto OpenSSH's StrictHostKeyChecking option,
+// keeping behaviour consistent with the in-process client.
+func (u *KerberosUploader) hostKeyArgs() []string {
+	if u.cfg.StrictHostKey {
+		if u.cfg.KnownHostsPath != "" {
+			return []string{
+				"-o", "StrictHostKeyChecking=yes",
+				"-o", "UserKnownHostsFile=" + u.cfg.KnownHostsPath,
+			}
+		}
+		return []string{"-o", "StrictHostKeyChecking=yes"}
+	}
+	// Non-strict: accept new keys automatically but still record them. This
+	// mirrors the in-process InsecureIgnoreHostKey trade-off the UI warns of.
+	return []string{"-o", "StrictHostKeyChecking=accept-new"}
+}
+
+// runCommand executes the given binary, capturing combined stderr so a
+// failure surfaces the remote/OpenSSH diagnostic instead of a bare exit code.
+func (u *KerberosUploader) runCommand(ctx context.Context, bin string, args []string) error {
+	cmd := exec.CommandContext(ctx, bin, args...)
+	var stderr bytes.Buffer
+	cmd.Stderr = &stderr
+	sshLog().Debug("kerberos exec", "bin", bin, "args", strings.Join(args, " "))
+	if err := cmd.Run(); err != nil {
+		msg := strings.TrimSpace(stderr.String())
+		if msg == "" {
+			msg = err.Error()
+		}
+		return fmt.Errorf("%s failed: %s", path.Base(bin), msg)
+	}
+	return nil
+}
+
+// TestKerberosConnection probes the remote host with system ssh, surfacing a
+// clear hint when no valid ticket is present.
+func TestKerberosConnection(ctx context.Context, cfg domain.SSHConfig) error {
+	sshLog().Info("kerberos test connection start",
+		"host", cfg.Host, "user", cfg.User, "port", cfg.Port)
+	u := &KerberosUploader{cfg: cfg}
+	remote := fmt.Sprintf("%s@%s", cfg.User, cfg.Host)
+	args := append(u.commonSSHArgs(), remote, "true")
+	if err := u.runCommand(ctx, systemSSHPath, args); err != nil {
+		// Detect the most common cause: no/expired Kerberos ticket.
+		if !hasKerberosTicket(ctx) {
+			return fmt.Errorf("no valid Kerberos ticket found — run `kinit %s@BYTEDANCE.COM` first (%w)", cfg.User, err)
+		}
+		return err
+	}
+	sshLog().Info("kerberos test connection ok")
+	return nil
+}
+
+// hasKerberosTicket reports whether `klist -s` indicates a valid ticket.
+// `klist -s` exits 0 when a valid TGT exists, non-zero otherwise.
+func hasKerberosTicket(ctx context.Context) bool {
+	cmd := exec.CommandContext(ctx, "/usr/bin/klist", "-s")
+	return cmd.Run() == nil
+}
diff --git a/internal/infrastructure/ssh/sftp_uploader.go b/internal/infrastructure/ssh/sftp_uploader.go
new file mode 100644
index 0000000..445441b
--- /dev/null
+++ b/internal/infrastructure/ssh/sftp_uploader.go
@@ -0,0 +1,213 @@
+package ssh
+
+import (
+	"bytes"
+	"context"
+	"fmt"
+	"io"
+	"os"
+	"path"
+	"strings"
+	"time"
+
+	"github.com/pkg/sftp"
+
+	"github.com/mmmy/snapgo/internal/domain"
+)
+
+// SFTPUploader transfers screenshots through the SSH File Transfer Protocol.
+// It lives beside the SCP client so both protocols share the same SSH
+// authentication and host-key implementation without duplicating credential
+// discovery code.
+type SFTPUploader struct {
+	cfg domain.FTPConfig
+}
+
+// NewSFTPUploader returns a short-lived SFTP adapter. A fresh SSH/SFTP
+// connection is opened for every upload or connection probe.
+func NewSFTPUploader(cfg domain.FTPConfig) *SFTPUploader {
+	return &SFTPUploader{cfg: cfg}
+}
+
+func (u *SFTPUploader) sshConfig() domain.SSHConfig {
+	return domain.SSHConfig{
+		Host:               u.cfg.Host,
+		Port:               u.cfg.Port,
+		User:               u.cfg.User,
+		AuthMethod:         u.cfg.AuthMethod,
+		Password:           u.cfg.Password,
+		StrictHostKey:      u.cfg.StrictHostKey,
+		KnownHostsPath:     u.cfg.KnownHostsPath,
+		ConnectTimeoutSecs: u.cfg.ConnectTimeoutSecs,
+	}
+}
+
+func (u *SFTPUploader) dial(ctx context.Context) (*Client, *sftp.Client, error) {
+	sshClient, err := Dial(ctx, u.sshConfig())
+	if err != nil {
+		return nil, nil, fmt.Errorf("sftp: %w", err)
+	}
+	sftpClient, err := sftp.NewClient(sshClient.client)
+	if err != nil {
+		_ = sshClient.Close()
+		return nil, nil, fmt.Errorf("sftp: start subsystem: %w", err)
+	}
+	return sshClient, sftpClient, nil
+}
+
+// Upload writes data to a temporary file and atomically exposes it at the
+// final relative path after the transfer completes.
+func (u *SFTPUploader) Upload(ctx context.Context, remoteRelPath string, data []byte) error {
+	cleaned, err := validateSFTPRemotePath(remoteRelPath)
+	if err != nil {
+		return err
+	}
+	sshClient, sftpClient, err := u.dial(ctx)
+	if err != nil {
+		return err
+	}
+	done := closeSFTPOnCancel(ctx, sshClient, sftpClient)
+	defer sshClient.Close()
+	defer sftpClient.Close()
+	defer close(done)
+
+	dir := path.Dir(cleaned)
+	if dir != "." {
+		if err := sftpClient.MkdirAll(dir); err != nil {
+			return fmt.Errorf("sftp: create directory %s: %w", dir, err)
+		}
+	}
+
+	tempPath := path.Join(dir, temporarySFTPName(path.Base(cleaned)))
+	removeTemp := true
+	defer func() {
+		if removeTemp {
+			_ = sftpClient.Remove(tempPath)
+		}
+	}()
+
+	file, err := sftpClient.OpenFile(tempPath, os.O_WRONLY|os.O_CREATE|os.O_TRUNC)
+	if err != nil {
+		return fmt.Errorf("sftp: create temporary file: %w", err)
+	}
+	reader := &sftpContextReader{ctx: ctx, reader: bytes.NewReader(data)}
+	_, copyErr := io.Copy(file, reader)
+	if copyErr == nil {
+		copyErr = file.Chmod(0o644)
+	}
+	closeErr := file.Close()
+	if copyErr != nil {
+		if ctx.Err() != nil {
+			return ctx.Err()
+		}
+		return fmt.Errorf("sftp: write %s: %w", cleaned, copyErr)
+	}
+	if closeErr != nil {
+		return fmt.Errorf("sftp: close %s: %w", cleaned, closeErr)
+	}
+	if err := sftpClient.Rename(tempPath, cleaned); err != nil {
+		return fmt.Errorf("sftp: commit %s: %w", cleaned, err)
+	}
+	removeTemp = false
+	sshLog().Info("SFTP upload ok", "remote_path", cleaned, "size", len(data))
+	return nil
+}
+
+// TestConnection verifies SFTP write/delete permissions with a small probe.
+func (u *SFTPUploader) TestConnection(ctx context.Context) error {
+	probe, err := sftpProbePath(u.cfg.PathPrefix)
+	if err != nil {
+		return err
+	}
+	sshClient, sftpClient, err := u.dial(ctx)
+	if err != nil {
+		return err
+	}
+	done := closeSFTPOnCancel(ctx, sshClient, sftpClient)
+	defer sshClient.Close()
+	defer sftpClient.Close()
+	defer close(done)
+
+	dir := path.Dir(probe)
+	if dir != "." {
+		if err := sftpClient.MkdirAll(dir); err != nil {
+			return fmt.Errorf("sftp probe: create directory: %w", err)
+		}
+	}
+	file, err := sftpClient.OpenFile(probe, os.O_WRONLY|os.O_CREATE|os.O_TRUNC)
+	if err != nil {
+		return fmt.Errorf("sftp probe: create: %w", err)
+	}
+	_, writeErr := file.Write([]byte("snapgo"))
+	closeErr := file.Close()
+	if writeErr != nil {
+		_ = sftpClient.Remove(probe)
+		return fmt.Errorf("sftp probe: write: %w", writeErr)
+	}
+	if closeErr != nil {
+		_ = sftpClient.Remove(probe)
+		return fmt.Errorf("sftp probe: close: %w", closeErr)
+	}
+	if err := sftpClient.Remove(probe); err != nil {
+		return fmt.Errorf("sftp probe: delete: %w", err)
+	}
+	return nil
+}
+
+func closeSFTPOnCancel(ctx context.Context, sshClient *Client, sftpClient *sftp.Client) chan struct{} {
+	done := make(chan struct{})
+	go func() {
+		select {
+		case <-ctx.Done():
+			_ = sftpClient.Close()
+			_ = sshClient.Close()
+		case <-done:
+		}
+	}()
+	return done
+}
+
+func validateSFTPRemotePath(value string) (string, error) {
+	value = strings.TrimSpace(value)
+	if value == "" || strings.HasPrefix(value, "/") || strings.HasPrefix(value, "~") {
+		return "", fmt.Errorf("sftp: remote path must be relative to the login directory")
+	}
+	if strings.ContainsAny(value, "\x00\r\n\\") {
+		return "", fmt.Errorf("sftp: remote path contains an invalid character")
+	}
+	for _, segment := range strings.Split(value, "/") {
+		if segment == ".." {
+			return "", fmt.Errorf("sftp: remote path must not contain '..'")
+		}
+	}
+	cleaned := path.Clean(value)
+	if cleaned == "." || path.Base(cleaned) == "." || path.Base(cleaned) == ".." {
+		return "", fmt.Errorf("sftp: remote filename is empty")
+	}
+	return cleaned, nil
+}
+
+func sftpProbePath(prefix string) (string, error) {
+	prefix = strings.TrimSpace(prefix)
+	prefix = strings.TrimPrefix(prefix, "~")
+	prefix = strings.TrimLeft(prefix, "/")
+	return validateSFTPRemotePath(path.Join(prefix, fmt.Sprintf(".snapgo-probe-%d", time.Now().UnixNano())))
+}
+
+func temporarySFTPName(base string) string {
+	return fmt.Sprintf(".%s.snapgo-upload-%d", base, time.Now().UnixNano())
+}
+
+type sftpContextReader struct {
+	ctx    context.Context
+	reader io.Reader
+}
+
+func (r *sftpContextReader) Read(p []byte) (int, error) {
+	select {
+	case <-r.ctx.Done():
+		return 0, r.ctx.Err()
+	default:
+		return r.reader.Read(p)
+	}
+}
diff --git a/internal/infrastructure/ssh/sftp_uploader_test.go b/internal/infrastructure/ssh/sftp_uploader_test.go
new file mode 100644
index 0000000..1543f1f
--- /dev/null
+++ b/internal/infrastructure/ssh/sftp_uploader_test.go
@@ -0,0 +1,28 @@
+package ssh
+
+import "testing"
+
+func TestValidateSFTPRemotePathRejectsTraversal(t *testing.T) {
+	if got, err := validateSFTPRemotePath("snapgo/2026/image.png"); err != nil || got != "snapgo/2026/image.png" {
+		t.Fatalf("valid path: got %q err=%v", got, err)
+	}
+
+	for _, value := range []string{
+		"",
+		"/absolute/image.png",
+		"~/image.png",
+		"../image.png",
+		"snapgo/../../image.png",
+		"snapgo\\image.png",
+	} {
+		if _, err := validateSFTPRemotePath(value); err == nil {
+			t.Errorf("expected %q to be rejected", value)
+		}
+	}
+}
+
+func TestSFTPProbePathRejectsTraversalPrefix(t *testing.T) {
+	if _, err := sftpProbePath("../../outside"); err == nil {
+		t.Fatal("expected traversal prefix to fail")
+	}
+}
diff --git a/internal/infrastructure/ssh/uploader.go b/internal/infrastructure/ssh/uploader.go
new file mode 100644
index 0000000..e042812
--- /dev/null
+++ b/internal/infrastructure/ssh/uploader.go
@@ -0,0 +1,59 @@
+// uploader.go — small adapter that satisfies application.SSHUploader by
+// dialing a one-shot connection per upload. This keeps the application
+// layer free of any direct dependency on golang.org/x/crypto/ssh while
+// still exposing a clean, unit-testable contract.
+package ssh
+
+import (
+	"context"
+	"os"
+	"time"
+
+	"github.com/mmmy/snapgo/internal/domain"
+)
+
+// Uploader is the production implementation of application.SSHUploader.
+//
+// We dial fresh per-upload because:
+//   - Captures happen sparsely (a few per minute at peak), so the cost of
+//     a TCP+SSH handshake is dwarfed by user think-time.
+//   - Holding a long-lived connection would force us to add keepalives,
+//     reconnection logic, and config-change invalidation — not worth it
+//     for the current usage profile.
+type Uploader struct {
+	cfg domain.SSHConfig
+}
+
+// NewUploader returns a ready-to-use uploader. The configuration is
+// captured by value so a simultaneous in-flight upload cannot be re-
+// targeted by a settings save.
+func NewUploader(cfg domain.SSHConfig) *Uploader {
+	return &Uploader{cfg: cfg}
+}
+
+// Upload satisfies application.SSHUploader. We log entry/exit at INFO so
+// the operator sees a single line per upload in the normal happy path,
+// and ERROR with elapsed time when something fails.
+func (u *Uploader) Upload(ctx context.Context, remoteRelPath string, data []byte, mode os.FileMode) error {
+	start := time.Now()
+	sshLog().Info("uploader.Upload start",
+		"host", u.cfg.Host, "user", u.cfg.User, "port", u.cfg.Port,
+		"remote_path", remoteRelPath, "size", len(data))
+
+	client, err := Dial(ctx, u.cfg)
+	if err != nil {
+		sshLog().Error("uploader.Upload dial failed",
+			"host", u.cfg.Host, "elapsed", time.Since(start), "err", err)
+		return err
+	}
+	defer client.Close()
+	if err := client.CopyFile(ctx, remoteRelPath, data, mode); err != nil {
+		sshLog().Error("uploader.Upload copy failed",
+			"remote_path", remoteRelPath, "elapsed", time.Since(start), "err", err)
+		return err
+	}
+	sshLog().Info("uploader.Upload done",
+		"remote_path", remoteRelPath, "size", len(data),
+		"total_elapsed", time.Since(start))
+	return nil
+}
diff --git a/internal/infrastructure/tray/assets/statusbarTemplate.png b/internal/infrastructure/tray/assets/statusbarTemplate.png
new file mode 100644
index 0000000..39694e8
Binary files /dev/null and b/internal/infrastructure/tray/assets/statusbarTemplate.png differ
diff --git a/internal/infrastructure/tray/assets/statusbarTemplate.tiff b/internal/infrastructure/tray/assets/statusbarTemplate.tiff
new file mode 100644
index 0000000..5363835
Binary files /dev/null and b/internal/infrastructure/tray/assets/statusbarTemplate.tiff differ
diff --git a/internal/infrastructure/tray/assets/statusbarTemplate@2x.png b/internal/infrastructure/tray/assets/statusbarTemplate@2x.png
new file mode 100644
index 0000000..17242d0
Binary files /dev/null and b/internal/infrastructure/tray/assets/statusbarTemplate@2x.png differ
diff --git a/internal/infrastructure/tray/dispatch_darwin.go b/internal/infrastructure/tray/dispatch_darwin.go
new file mode 100644
index 0000000..7efdd78
--- /dev/null
+++ b/internal/infrastructure/tray/dispatch_darwin.go
@@ -0,0 +1,62 @@
+//go:build darwin
+
+package tray
+
+/*
+#cgo darwin LDFLAGS: -framework Foundation
+#include <dispatch/dispatch.h>
+
+// runOnMainQueue submits the Go-side callback (identified by handle) to the
+// main dispatch queue. We use dispatch_async so the caller — typically a
+// Wails OnStartup goroutine — does not block the cocoa runloop while waiting
+// for the main thread to drain.
+extern void trayDispatchMainCallback(unsigned long handle);
+
+static void runOnMainQueue(unsigned long handle) {
+    dispatch_async(dispatch_get_main_queue(), ^{
+        trayDispatchMainCallback(handle);
+    });
+}
+*/
+import "C"
+
+import (
+	"sync"
+	"sync/atomic"
+)
+
+// dispatchRegistry stores Go closures keyed by an integer handle so that the
+// C side can call back into Go without leaking unsafe.Pointer-cast function
+// pointers (which CGo disallows).
+var (
+	dispatchMu     sync.Mutex
+	dispatchTable  = map[uint64]func(){}
+	dispatchNextID uint64
+)
+
+// dispatchOnMain schedules fn to run on the macOS main thread. This is the
+// Cocoa contract for any API that touches NSWindow / NSStatusBar — calling
+// them from a goroutine triggers the "should only be instantiated on the
+// main thread" assertion.
+func dispatchOnMain(fn func()) {
+	if fn == nil {
+		return
+	}
+	id := atomic.AddUint64(&dispatchNextID, 1)
+	dispatchMu.Lock()
+	dispatchTable[id] = fn
+	dispatchMu.Unlock()
+	C.runOnMainQueue(C.ulong(id))
+}
+
+//export trayDispatchMainCallback
+func trayDispatchMainCallback(handle C.ulong) {
+	id := uint64(handle)
+	dispatchMu.Lock()
+	fn := dispatchTable[id]
+	delete(dispatchTable, id)
+	dispatchMu.Unlock()
+	if fn != nil {
+		fn()
+	}
+}
diff --git a/internal/infrastructure/tray/dispatch_other.go b/internal/infrastructure/tray/dispatch_other.go
new file mode 100644
index 0000000..4ecf3d5
--- /dev/null
+++ b/internal/infrastructure/tray/dispatch_other.go
@@ -0,0 +1,16 @@
+//go:build !darwin
+
+package tray
+
+// dispatchOnMain is a no-op on non-darwin platforms because:
+//   - On Linux (GTK/AppIndicator), systray.Run / nativeStart can be invoked
+//     from any goroutine; the GTK runloop is started internally.
+//   - On Windows, status icons are tied to a hidden window owned by the
+//     systray library itself, also independent of the Go main goroutine.
+// Wrapping the call in dispatchOnMain on these platforms would just add a
+// pointless layer of indirection.
+func dispatchOnMain(fn func()) {
+	if fn != nil {
+		fn()
+	}
+}
diff --git a/internal/infrastructure/tray/icon_darwin.go b/internal/infrastructure/tray/icon_darwin.go
new file mode 100644
index 0000000..6e47e02
--- /dev/null
+++ b/internal/infrastructure/tray/icon_darwin.go
@@ -0,0 +1,16 @@
+//go:build darwin
+
+package tray
+
+import _ "embed"
+
+// templateIconBytes embeds the macOS template icon as a multi-resolution TIFF
+// generated from the 1x and 2x source PNGs in assets/.
+//
+//go:embed assets/statusbarTemplate.tiff
+var templateIconBytes []byte
+
+// regularIconBytes keeps a PNG fallback for APIs that expect a regular raster icon.
+//
+//go:embed assets/statusbarTemplate.png
+var regularIconBytes []byte
diff --git a/internal/infrastructure/tray/icon_other.go b/internal/infrastructure/tray/icon_other.go
new file mode 100644
index 0000000..4f4c2fe
--- /dev/null
+++ b/internal/infrastructure/tray/icon_other.go
@@ -0,0 +1,13 @@
+//go:build !darwin
+
+package tray
+
+import _ "embed"
+
+// Keep a regular PNG for non-macOS builds where template icons are unsupported.
+//
+//go:embed assets/statusbarTemplate.png
+var templateIconBytes []byte
+
+//go:embed assets/statusbarTemplate.png
+var regularIconBytes []byte
diff --git a/internal/infrastructure/tray/tray.go b/internal/infrastructure/tray/tray.go
new file mode 100644
index 0000000..f290d60
--- /dev/null
+++ b/internal/infrastructure/tray/tray.go
@@ -0,0 +1,84 @@
+// Package tray runs the menu-bar agent UI for SnapGo on macOS / Linux /
+// Windows. It is intentionally decoupled from the main App struct: the App
+// supplies a small set of callbacks (Capture / Settings / Quit) so that this
+// package never imports the application service stack.
+//
+// We use fyne.io/systray (a fork of getlantern/systray) because it is
+// designed to coexist with other GUI runloops — important when the host
+// process is also driving a Wails / Cocoa main loop.
+package tray
+
+import (
+	"fyne.io/systray"
+)
+
+// Callbacks bundles the menu actions the host application wants to expose.
+// Splitting these into a struct (rather than 3 positional arguments) keeps
+// future extension cheap — we can add e.g. OnCheckForUpdates without
+// touching the call sites.
+type Callbacks struct {
+	OnCapture  func()
+	OnSettings func()
+	OnQuit     func()
+}
+
+// Start installs the menu-bar status item and returns immediately. The
+// fyne.io/systray fork exposes RunWithExternalLoop precisely for cases like
+// ours where the host process already owns the main thread (Wails).
+//
+// The returned `stop` function tears down the status item; call it from the
+// host's shutdown path.
+func Start(cbs Callbacks) (start, stop func()) {
+	onReady := func() {
+		systray.SetTemplateIcon(templateIconBytes, regularIconBytes)
+		systray.SetTooltip("SnapGo")
+
+		mCapture := systray.AddMenuItem("截图", "Take a region screenshot")
+		mSettings := systray.AddMenuItem("设置", "Open settings window")
+		systray.AddSeparator()
+		mQuit := systray.AddMenuItem("退出", "Quit the application")
+
+		// Pump menu clicks on a dedicated goroutine. Channel sends from
+		// systray are non-blocking, so a slow user callback does not back
+		// up the UI thread.
+		go func() {
+			for {
+				select {
+				case <-mCapture.ClickedCh:
+					if cbs.OnCapture != nil {
+						cbs.OnCapture()
+					}
+				case <-mSettings.ClickedCh:
+					if cbs.OnSettings != nil {
+						cbs.OnSettings()
+					}
+				case <-mQuit.ClickedCh:
+					if cbs.OnQuit != nil {
+						cbs.OnQuit()
+					}
+					systray.Quit()
+					return
+				}
+			}
+		}()
+	}
+
+	onExit := func() { /* nothing to clean up */ }
+
+	// RunWithExternalLoop registers the status item without blocking the
+	// caller — the returned `start` should be invoked once the host's
+	// runloop is up so the icon appears. fyne.io/systray returns a
+	// (start, end) pair; we delegate `end` to systray.Quit for symmetry.
+	rawStart, _ := systray.RunWithExternalLoop(onReady, onExit)
+
+	// IMPORTANT: on macOS, `nativeStart` ends up calling
+	//   [NSStatusBar systemStatusBar] -> [-NSStatusBar _statusItemWithLength:...]
+	// which constructs an NSWindow. Cocoa hard-asserts that NSWindow can
+	// only be instantiated on the main thread. Wails v2 invokes OnStartup
+	// from a worker goroutine, so calling rawStart() directly from there
+	// crashes with NSInternalInconsistencyException. We wrap it in
+	// dispatchOnMain so the call is forwarded to the main dispatch queue.
+	start = func() { dispatchOnMain(rawStart) }
+	stop = systray.Quit
+	return start, stop
+}
diff --git a/main.go b/main.go
new file mode 100644
index 0000000..b409f85
--- /dev/null
+++ b/main.go
@@ -0,0 +1,89 @@
+package main
+
+import (
+	"context"
+	"embed"
+
+	"github.com/wailsapp/wails/v2"
+	"github.com/wailsapp/wails/v2/pkg/options"
+	"github.com/wailsapp/wails/v2/pkg/options/assetserver"
+	"github.com/wailsapp/wails/v2/pkg/options/mac"
+
+	"github.com/mmmy/snapgo/internal/infrastructure/logging"
+	"github.com/mmmy/snapgo/internal/infrastructure/tray"
+)
+
+//go:embed all:frontend/dist
+var assets embed.FS
+
+func main() {
+	// Init logging FIRST so the rest of startup (config load, hotkey
+	// registration, tray bootstrap) is captured to ~/Library/Logs/SnapGo
+	// even when the binary was launched via `open` and stderr is /dev/null.
+	closeLog := logging.Init()
+	defer closeLog()
+
+	app := NewApp()
+
+	// Wire up the menu-bar agent. Start() returns a `start` thunk that we
+	// invoke from OnStartup so the icon appears AFTER Wails has spun up the
+	// Cocoa runloop, and a `stop` thunk we call on shutdown.
+	startTray, stopTray := tray.Start(tray.Callbacks{
+		OnCapture:  func() { app.CaptureNow() },
+		OnSettings: func() { app.ShowWindow() },
+		OnQuit:     func() { app.QuitApp() },
+	})
+
+	err := wails.Run(&options.App{
+		Title:     "SnapGo",
+		Width:     1000,
+		Height:    820,
+		MinWidth:  720,
+		MinHeight: 520,
+		AssetServer: &assetserver.Options{
+			Assets: assets,
+		},
+		// Keep the standard macOS title bar for the Settings window. The
+		// capture UI uses a separate native NSPanel on macOS, so the main
+		// Wails window no longer needs to be frameless.
+		Frameless:         false,
+		StartHidden:       true,
+		HideWindowOnClose: true,
+		BackgroundColour:  &options.RGBA{R: 0, G: 0, B: 0, A: 0},
+		OnStartup: func(ctx context.Context) {
+			app.startup(ctx)
+			installActivationPolicyHooks()
+			hideDockIcon()
+			startTray()
+		},
+		OnBeforeClose: func(ctx context.Context) (prevent bool) {
+			hideDockIcon()
+			return false
+		},
+		OnShutdown: func(ctx context.Context) {
+			stopTray()
+			app.shutdown(ctx)
+		},
+		Bind: []interface{}{
+			app,
+		},
+		Mac: &mac.Options{
+			// The capture overlay is native AppKit on macOS; the Wails
+			// Settings window should behave like a normal macOS window.
+			WebviewIsTransparent: true,
+			WindowIsTranslucent:  true,
+			About: &mac.AboutInfo{
+				Title:   "SnapGo",
+				Message: "Cross-platform screenshot tool with one-click upload to S3, FTP, SFTP, or SSH.",
+			},
+		},
+	})
+
+	if err != nil {
+		println("Error:", err.Error())
+	}
+
+	// Defensive: ensure the tray is torn down even if Wails exited via an
+	// error path that bypassed OnShutdown.
+	stopTray()
+}
diff --git a/native_overlay_callbacks_darwin.go b/native_overlay_callbacks_darwin.go
new file mode 100644
index 0000000..7f70381
--- /dev/null
+++ b/native_overlay_callbacks_darwin.go
@@ -0,0 +1,120 @@
+//go:build darwin
+
+package main
+
+import "C"
+
+func nativeCaptureResult(x, y, w, h C.int, annotationsJSON *C.char) CaptureResult {
+	rawAnnotations := C.GoString(annotationsJSON)
+	return CaptureResult{
+		Rect: RegionRect{
+			X: int(x),
+			Y: int(y),
+			W: int(w),
+			H: int(h),
+		},
+		Annotations: parseNativeAnnotations(rawAnnotations),
+	}
+}
+
+func consumeNativeOverlayApp() *App {
+	nativeOverlayState.Lock()
+	app := nativeOverlayState.app
+	nativeOverlayState.app = nil
+	nativeOverlayState.Unlock()
+	return app
+}
+
+//export nativeOverlayConfirm
+func nativeOverlayConfirm(x, y, w, h C.int, annotationsJSON *C.char) {
+	app := consumeNativeOverlayApp()
+	if app == nil {
+		return
+	}
+	result := nativeCaptureResult(x, y, w, h, annotationsJSON)
+	go func() {
+		_ = app.ConfirmNativeRegion(result)
+	}()
+}
+
+//export nativeOverlayCopy
+func nativeOverlayCopy(x, y, w, h C.int, annotationsJSON *C.char) {
+	app := consumeNativeOverlayApp()
+	if app == nil {
+		return
+	}
+	result := nativeCaptureResult(x, y, w, h, annotationsJSON)
+	go func() {
+		_ = app.CopyNativeRegionImage(result)
+	}()
+}
+
+//export nativeOverlaySave
+func nativeOverlaySave(x, y, w, h C.int, annotationsJSON *C.char, dir *C.char) {
+	app := consumeNativeOverlayApp()
+	if app == nil {
+		return
+	}
+	result := nativeCaptureResult(x, y, w, h, annotationsJSON)
+	saveDir := C.GoString(dir)
+	go func() {
+		_, _ = app.SaveNativeRegionImageToDir(result, saveDir)
+	}()
+}
+
+//export nativeOverlaySaveRemote
+func nativeOverlaySaveRemote(x, y, w, h C.int, annotationsJSON *C.char) {
+	app := consumeNativeOverlayApp()
+	if app == nil {
+		return
+	}
+	result := nativeCaptureResult(x, y, w, h, annotationsJSON)
+	go func() {
+		_ = app.SaveNativeRegionToRemote(result)
+	}()
+}
+
+//export nativeOverlayUploadFTP
+func nativeOverlayUploadFTP(x, y, w, h C.int, annotationsJSON *C.char) {
+	app := consumeNativeOverlayApp()
+	if app == nil {
+		return
+	}
+	result := nativeCaptureResult(x, y, w, h, annotationsJSON)
+	go func() {
+		_ = app.UploadNativeRegionToFTP(result)
+	}()
+}
+
+//export nativeOverlaySummarize
+func nativeOverlaySummarize(x, y, w, h C.int, annotationsJSON *C.char) {
+	app := consumeNativeOverlayApp()
+	if app == nil {
+		return
+	}
+	result := nativeCaptureResult(x, y, w, h, annotationsJSON)
+	go func() {
+		_ = app.SummarizeNativeRegion(result)
+	}()
+}
+
+//export nativeOverlayOCR
+func nativeOverlayOCR(x, y, w, h C.int, annotationsJSON *C.char) {
+	app := consumeNativeOverlayApp()
+	if app == nil {
+		return
+	}
+	result := nativeCaptureResult(x, y, w, h, annotationsJSON)
+	go func() {
+		_ = app.ExtractTextNativeRegion(result)
+	}()
+}
+
+//export nativeOverlayCancel
+func nativeOverlayCancel() {
+	app := consumeNativeOverlayApp()
+	if app == nil {
+		return
+	}
+	go app.CancelNativeRegion()
+}
diff --git a/native_overlay_darwin.go b/native_overlay_darwin.go
new file mode 100644
index 0000000..eeb7e49
--- /dev/null
+++ b/native_overlay_darwin.go
@@ -0,0 +1,1769 @@
+//go:build darwin
+
+package main
+
+/*
+#cgo CFLAGS: -x objective-c -fobjc-arc -fblocks
+#cgo LDFLAGS: -framework AppKit -framework CoreGraphics -framework QuartzCore
+#include <math.h>
+#include <dispatch/dispatch.h>
+#import <objc/runtime.h>
+#import <AppKit/AppKit.h>
+#import <QuartzCore/QuartzCore.h>
+
+extern void nativeOverlayConfirm(int x, int y, int w, int h, const char *annotationsJSON);
+extern void nativeOverlayCopy(int x, int y, int w, int h, const char *annotationsJSON);
+extern void nativeOverlaySave(int x, int y, int w, int h, const char *annotationsJSON, const char *dir);
+extern void nativeOverlaySaveRemote(int x, int y, int w, int h, const char *annotationsJSON);
+extern void nativeOverlayUploadFTP(int x, int y, int w, int h, const char *annotationsJSON);
+extern void nativeOverlaySummarize(int x, int y, int w, int h, const char *annotationsJSON);
+extern void nativeOverlayOCR(int x, int y, int w, int h, const char *annotationsJSON);
+extern void nativeOverlayCancel(void);
+
+static NSWindow *nativeOverlayWindow = nil;
+static id nativeOverlayKeyMonitor = nil;
+
+@interface SnipNativeOverlayPanel : NSPanel
+@end
+
+@implementation SnipNativeOverlayPanel
+- (BOOL)canBecomeKeyWindow { return YES; }
+- (BOOL)canBecomeMainWindow { return YES; }
+@end
+
+// SnipHoverButton — NSButton subclass that animates its tint color on hover.
+//
+// Design rationale:
+// - NSButton has no built-in hover state; we install an NSTrackingArea that
+//   tracks mouseEntered/mouseExited regardless of focus state.
+// - When the cursor enters, the content tint color animates from `baseColor`
+//   to `hoverColor` over 0.2s using NSAnimationContext, matching the spec.
+//   When the cursor leaves, the color reverts immediately (no animation).
+// - `baseColor`/`hoverColor` are configurable per-instance so each action
+//   button can keep a shared white default but expose its own hover hue
+//   (cancel = red, others = blue).
+@interface SnipHoverButton : NSButton
+@property(strong) NSColor *baseColor;
+@property(strong) NSColor *hoverColor;
+@property(strong) NSTrackingArea *hoverTrackingArea;
+@end
+
+@implementation SnipHoverButton
+- (void)updateTrackingAreas {
+    [super updateTrackingAreas];
+    if (_hoverTrackingArea) {
+        [self removeTrackingArea:_hoverTrackingArea];
+    }
+    NSTrackingAreaOptions opts = NSTrackingMouseEnteredAndExited |
+                                 NSTrackingActiveAlways |
+                                 NSTrackingInVisibleRect;
+    _hoverTrackingArea = [[NSTrackingArea alloc] initWithRect:NSZeroRect
+                                                      options:opts
+                                                        owner:self
+                                                     userInfo:nil];
+    [self addTrackingArea:_hoverTrackingArea];
+}
+- (void)mouseEntered:(NSEvent *)event {
+    if (@available(macOS 10.14, *)) {
+        NSColor *target = _hoverColor ?: [NSColor whiteColor];
+        // Animate the tint color transition over 0.2s for a soft fade-in.
+        [NSAnimationContext runAnimationGroup:^(NSAnimationContext *ctx) {
+            [ctx setDuration:0.2];
+            [ctx setTimingFunction:[CAMediaTimingFunction functionWithName:kCAMediaTimingFunctionEaseInEaseOut]];
+            [[self animator] setContentTintColor:target];
+        } completionHandler:nil];
+    }
+}
+- (void)mouseExited:(NSEvent *)event {
+    if (@available(macOS 10.14, *)) {
+        NSColor *base = _baseColor ?: [NSColor whiteColor];
+        // Snap back to the base color instantly (no animation) per spec.
+        [self setContentTintColor:base];
+    }
+}
+@end
+
+@interface SnipToolSettingsView : NSView
+@property CGFloat arrowX;
+@end
+
+@implementation SnipToolSettingsView
+- (BOOL)isFlipped { return YES; }
+- (void)drawRect:(NSRect)dirtyRect {
+    [[NSColor clearColor] setFill];
+    NSRectFill(dirtyRect);
+
+    CGFloat arrowHalf = 8;
+    CGFloat arrowH = 9;
+    CGFloat radius = 8;
+    NSRect body = NSMakeRect(0, arrowH, self.bounds.size.width, self.bounds.size.height - arrowH);
+    CGFloat arrowX = MAX(18, MIN(_arrowX, self.bounds.size.width - 18));
+
+    NSBezierPath *path = [NSBezierPath bezierPath];
+    [path moveToPoint:NSMakePoint(NSMinX(body) + radius, NSMinY(body))];
+    [path lineToPoint:NSMakePoint(arrowX - arrowHalf, NSMinY(body))];
+    [path lineToPoint:NSMakePoint(arrowX, 0)];
+    [path lineToPoint:NSMakePoint(arrowX + arrowHalf, NSMinY(body))];
+    [path lineToPoint:NSMakePoint(NSMaxX(body) - radius, NSMinY(body))];
+    [path curveToPoint:NSMakePoint(NSMaxX(body), NSMinY(body) + radius)
+         controlPoint1:NSMakePoint(NSMaxX(body) - radius / 2, NSMinY(body))
+         controlPoint2:NSMakePoint(NSMaxX(body), NSMinY(body) + radius / 2)];
+    [path lineToPoint:NSMakePoint(NSMaxX(body), NSMaxY(body) - radius)];
+    [path curveToPoint:NSMakePoint(NSMaxX(body) - radius, NSMaxY(body))
+         controlPoint1:NSMakePoint(NSMaxX(body), NSMaxY(body) - radius / 2)
+         controlPoint2:NSMakePoint(NSMaxX(body) - radius / 2, NSMaxY(body))];
+    [path lineToPoint:NSMakePoint(NSMinX(body) + radius, NSMaxY(body))];
+    [path curveToPoint:NSMakePoint(NSMinX(body), NSMaxY(body) - radius)
+         controlPoint1:NSMakePoint(NSMinX(body) + radius / 2, NSMaxY(body))
+         controlPoint2:NSMakePoint(NSMinX(body), NSMaxY(body) - radius / 2)];
+    [path lineToPoint:NSMakePoint(NSMinX(body), NSMinY(body) + radius)];
+    [path curveToPoint:NSMakePoint(NSMinX(body) + radius, NSMinY(body))
+         controlPoint1:NSMakePoint(NSMinX(body), NSMinY(body) + radius / 2)
+         controlPoint2:NSMakePoint(NSMinX(body) + radius / 2, NSMinY(body))];
+    [path closePath];
+
+    [[NSColor colorWithCalibratedWhite:1 alpha:0.96] setFill];
+    [path fill];
+}
+@end
+
+@interface SnipNativeOverlayView : NSView
+@property BOOL hasSelection;
+@property BOOL creating;
+@property BOOL moving;
+@property BOOL resizing;
+@property BOOL annotating;
+@property NSRect selection;
+@property NSPoint anchor;
+@property NSPoint moveOffset;
+@property NSRect resizeStart;
+@property NSString *resizeHandle;
+@property NSString *activeTool;
+@property(strong) NSColor *activeColor;
+@property CGFloat activeStrokeWidth;
+@property CGFloat activeFontSize;
+@property CGFloat mosaicBrushWidth;
+@property NSString *mosaicMode;
+@property(strong) NSMutableArray<NSDictionary *> *annotations;
+@property(strong) NSMutableDictionary *draftAnnotation;
+// A downsampled snapshot of the screen beneath the overlay. Drawing this
+// image back at full size with interpolation disabled produces a genuine
+// pixel-block preview instead of a translucent placeholder stroke.
+@property(strong) NSImage *mosaicPreviewImage;
+@property(strong) NSButton *cancelButton;
+// Use `clipboardButton` (not `copyButton`) to avoid ARC's "copy" method
+// family ownership rule which would otherwise treat the synthesized getter
+// as returning a +1 retained object.
+@property(strong) NSButton *clipboardButton;
+@property(strong) NSButton *saveButton;
+@property(strong) NSButton *saveRemoteButton;
+@property(strong) NSButton *ftpButton;
+@property(strong) NSButton *ocrButton;
+@property(strong) NSButton *summaryButton;
+@property(strong) NSButton *uploadButton;
+@property(strong) NSButton *penButton;
+@property(strong) NSButton *lineButton;
+@property(strong) NSButton *arrowButton;
+@property(strong) NSButton *rectButton;
+@property(strong) NSButton *ellipseButton;
+@property(strong) NSButton *textButton;
+@property(strong) NSButton *mosaicButton;
+@property(strong) NSButton *undoButton;
+@property(strong) SnipToolSettingsView *toolSettingsView;
+@property(strong) NSView *settingsDivider;
+@property(strong) NSMutableArray<NSButton *> *strokeSettingButtons;
+@property(strong) NSMutableArray<NSButton *> *fontSettingButtons;
+@property(strong) NSMutableArray<NSButton *> *colorSettingButtons;
+@property(strong) NSMutableArray<NSButton *> *mosaicModeButtons;
+@property(strong) NSMutableArray<NSButton *> *mosaicWidthButtons;
+@property(strong) NSView *actionToolbarBg;
+@property(strong) NSTextField *textEditor;
+@property NSPoint textEditorLocalPoint;
+@property NSInteger textEditorAnnotationIndex;
+@property(strong) NSColor *textEditorColor;
+@property NSInteger selectedTextAnnotationIndex;
+@property BOOL draggingTextAnnotation;
+@property NSPoint textDragStartLocalPoint;
+@property NSPoint textDragOriginalLocalPoint;
+@property(strong) NSTextField *sizeLabel;
+@property(strong) NSTextField *hintLabel;
+- (void)syncControls;
+- (void)styleControls;
+- (void)selectText;
+- (void)confirmSelection;
+- (void)copySelection;
+- (void)saveSelection;
+- (void)saveRemoteSelection;
+- (void)uploadFTPSelection;
+- (void)ocrSelection;
+- (void)summarizeSelection;
+- (void)cancelSelection;
+- (void)beginTextAnnotationAtPoint:(NSPoint)localPoint;
+- (void)beginEditingTextAnnotationAtIndex:(NSInteger)index;
+- (NSInteger)textAnnotationIndexAtPoint:(NSPoint)p;
+- (NSRect)textAnnotationRectForItem:(NSDictionary *)item;
+- (NSPoint)clampedTextLocalPoint:(NSPoint)localPoint text:(NSString *)text fontSize:(CGFloat)fontSize;
+- (void)selectStrokeWidth:(NSButton *)sender;
+- (void)selectFontSize:(NSButton *)sender;
+- (void)selectToolColor:(NSButton *)sender;
+- (void)selectMosaicMode:(NSButton *)sender;
+- (void)selectMosaicWidth:(NSButton *)sender;
+- (BOOL)isEditingText;
+- (void)commitTextEditor;
+- (void)cancelTextEditor;
+@end
+
+@implementation SnipNativeOverlayView
+- (BOOL)isFlipped { return YES; }
+- (BOOL)acceptsFirstResponder { return YES; }
+
+- (instancetype)initWithFrame:(NSRect)frame {
+    self = [super initWithFrame:frame];
+    if (self) {
+        [self setWantsLayer:YES];
+        [[self layer] setBackgroundColor:[[NSColor clearColor] CGColor]];
+
+        _activeTool = nil;
+        _activeColor = [NSColor colorWithCalibratedRed:239.0/255.0 green:68.0/255.0 blue:68.0/255.0 alpha:1.0];
+        _activeStrokeWidth = 3.0;
+        _activeFontSize = 20.0;
+        _mosaicBrushWidth = 24.0;
+        _mosaicMode = @"brush";
+        _annotations = [NSMutableArray array];
+        _textEditorAnnotationIndex = -1;
+        _selectedTextAnnotationIndex = -1;
+
+        // Use SnipHoverButton for the action buttons so we get hover-color
+        // animation. Annotation buttons stay as plain NSButton because they
+        // already have explicit on/off "active" styling.
+        _cancelButton = [SnipHoverButton buttonWithTitle:@"" target:self action:@selector(cancelSelection)];
+        _clipboardButton = [SnipHoverButton buttonWithTitle:@"" target:self action:@selector(copySelection)];
+        _saveButton = [SnipHoverButton buttonWithTitle:@"" target:self action:@selector(saveSelection)];
+        _saveRemoteButton = [SnipHoverButton buttonWithTitle:@"" target:self action:@selector(saveRemoteSelection)];
+        _ftpButton = [SnipHoverButton buttonWithTitle:@"" target:self action:@selector(uploadFTPSelection)];
+        _ocrButton = [SnipHoverButton buttonWithTitle:@"" target:self action:@selector(ocrSelection)];
+        _summaryButton = [SnipHoverButton buttonWithTitle:@"" target:self action:@selector(summarizeSelection)];
+        _uploadButton = [SnipHoverButton buttonWithTitle:@"" target:self action:@selector(confirmSelection)];
+        // Tooltip strings shown on hover for each action button.
+        // Localized in Chinese to match the rest of the action UI surface.
+        [_cancelButton setToolTip:@"取消截图"];
+        [_clipboardButton setToolTip:@"复制图片"];
+        [_saveButton setToolTip:@"保存本地"];
+        [_saveRemoteButton setToolTip:@"上传 SSH/SCP"];
+        [_ftpButton setToolTip:@"上传 FTP/SFTP"];
+        [_ocrButton setToolTip:@"提取文字"];
+        [_summaryButton setToolTip:@"复制总结"];
+        [_uploadButton setToolTip:@"上传 S3"];
+        _penButton = [NSButton buttonWithTitle:@"" target:self action:@selector(selectPen)];
+        _lineButton = [NSButton buttonWithTitle:@"" target:self action:@selector(selectLine)];
+        _arrowButton = [NSButton buttonWithTitle:@"" target:self action:@selector(selectArrow)];
+        _rectButton = [NSButton buttonWithTitle:@"" target:self action:@selector(selectRect)];
+        _ellipseButton = [NSButton buttonWithTitle:@"" target:self action:@selector(selectEllipse)];
+        _textButton = [NSButton buttonWithTitle:@"" target:self action:@selector(selectText)];
+        _mosaicButton = [NSButton buttonWithTitle:@"" target:self action:@selector(selectMosaic)];
+        _undoButton = [NSButton buttonWithTitle:@"" target:self action:@selector(undoAnnotation)];
+        _toolSettingsView = [[SnipToolSettingsView alloc] initWithFrame:NSZeroRect];
+        _settingsDivider = [[NSView alloc] initWithFrame:NSZeroRect];
+        _strokeSettingButtons = [NSMutableArray array];
+        _fontSettingButtons = [NSMutableArray array];
+        _colorSettingButtons = [NSMutableArray array];
+        _mosaicModeButtons = [NSMutableArray array];
+        _mosaicWidthButtons = [NSMutableArray array];
+        // Dark rounded background container behind the action icon buttons,
+        // mirroring the look of `.action-toolbar` in the Vue overlay.
+        _actionToolbarBg = [[NSView alloc] initWithFrame:NSZeroRect];
+        [_actionToolbarBg setWantsLayer:YES];
+        [[_actionToolbarBg layer] setCornerRadius:8];
+        [[_actionToolbarBg layer] setBackgroundColor:[[NSColor colorWithCalibratedWhite:0.11 alpha:0.94] CGColor]];
+        _sizeLabel = [NSTextField labelWithString:@""];
+        _hintLabel = [NSTextField labelWithString:@"Drag to select an area  ·  Esc to cancel"];
+        [self styleControls];
+
+        // Add the action toolbar background BEFORE the buttons so it sits
+        // behind them in the view hierarchy (AppKit z-order = subview order).
+        [self addSubview:_actionToolbarBg];
+        for (NSView *view in @[_cancelButton, _clipboardButton, _saveButton, _saveRemoteButton, _ftpButton, _ocrButton, _summaryButton, _uploadButton, _penButton, _lineButton, _arrowButton, _rectButton, _ellipseButton, _textButton, _mosaicButton, _undoButton, _toolSettingsView, _sizeLabel, _hintLabel]) {
+            [self addSubview:view];
+        }
+        for (NSView *view in @[_cancelButton, _clipboardButton, _saveButton, _saveRemoteButton, _ftpButton, _ocrButton, _summaryButton, _uploadButton, _penButton, _lineButton, _arrowButton, _rectButton, _ellipseButton, _textButton, _mosaicButton, _undoButton, _toolSettingsView, _actionToolbarBg]) {
+            [view setHidden:YES];
+        }
+        [_sizeLabel setHidden:YES];
+
+        [_sizeLabel setTextColor:[NSColor whiteColor]];
+        [_sizeLabel setBackgroundColor:[NSColor colorWithCalibratedWhite:0.08 alpha:0.78]];
+        [_sizeLabel setDrawsBackground:YES];
+        [_sizeLabel setBezeled:NO];
+        [_sizeLabel setAlignment:NSTextAlignmentCenter];
+
+        [_hintLabel setTextColor:[NSColor whiteColor]];
+        [_hintLabel setBackgroundColor:[NSColor colorWithCalibratedWhite:0.0 alpha:0.5]];
+        [_hintLabel setDrawsBackground:YES];
+        [_hintLabel setBezeled:NO];
+        [_hintLabel setAlignment:NSTextAlignmentCenter];
+        [_hintLabel setFrame:NSMakeRect((frame.size.width - 320) / 2, 24, 320, 24)];
+    }
+    return self;
+}
+
+- (NSString *)hexForColor:(NSColor *)color {
+    NSColor *rgb = [color colorUsingColorSpace:[NSColorSpace sRGBColorSpace]];
+    NSInteger r = (NSInteger)llround([rgb redComponent] * 255.0);
+    NSInteger g = (NSInteger)llround([rgb greenComponent] * 255.0);
+    NSInteger b = (NSInteger)llround([rgb blueComponent] * 255.0);
+    return [NSString stringWithFormat:@"#%02lx%02lx%02lx", (long)r, (long)g, (long)b];
+}
+
+- (NSImage *)iconFromSVG:(NSString *)svg {
+    NSData *data = [svg dataUsingEncoding:NSUTF8StringEncoding];
+    NSImage *image = [[NSImage alloc] initWithData:data];
+    [image setTemplate:YES];
+    return image;
+}
+
+- (void)styleButton:(NSButton *)button background:(NSColor *)background foreground:(NSColor *)foreground {
+    [button setBordered:NO];
+    [button setBezelStyle:NSBezelStyleRegularSquare];
+    [button setWantsLayer:YES];
+    [[button layer] setCornerRadius:5];
+    [[button layer] setBackgroundColor:[background CGColor]];
+    NSMutableAttributedString *title = [[NSMutableAttributedString alloc] initWithString:[button title]];
+    [title addAttribute:NSForegroundColorAttributeName value:foreground range:NSMakeRange(0, [title length])];
+    [title addAttribute:NSFontAttributeName value:[NSFont systemFontOfSize:12 weight:NSFontWeightMedium] range:NSMakeRange(0, [title length])];
+    [button setAttributedTitle:title];
+}
+
+- (void)styleIconButton:(NSButton *)button image:(NSImage *)image {
+    [button setBordered:NO];
+    [button setBezelStyle:NSBezelStyleRegularSquare];
+    [button setImagePosition:NSImageOnly];
+    [button setImageScaling:NSImageScaleProportionallyDown];
+    if (@available(macOS 10.14, *)) {
+        [button setContentTintColor:[NSColor whiteColor]];
+    }
+    [button setImage:image];
+    [button setWantsLayer:YES];
+    [[button layer] setCornerRadius:5];
+    [[button layer] setBackgroundColor:[[NSColor clearColor] CGColor]];
+}
+
+- (void)styleControls {
+    // Cancel / Copy / Save / SSH / FTP / OCR / Summary / S3 — square icon buttons
+    // rendered from the user-supplied SVG assets. All actions default to white
+    // and animate to a per-action accent color on hover (cancel = red,
+    // others = blue). The base "white default" replaces the previous blue
+    // upload tint so the toolbar reads as a uniform icon row.
+    NSImage *cancelIcon = [self iconFromSVG:@"<svg viewBox='0 0 1024 1024' xmlns='http://www.w3.org/2000/svg'><path d='M512 85.333333c235.648 0 426.666667 191.018667 426.666667 426.666667s-191.018667 426.666667-426.666667 426.666667S85.333333 747.648 85.333333 512 276.352 85.333333 512 85.333333zM170.666667 512a341.333333 341.333333 0 0 0 550.613333 269.653333L242.304 302.762667A339.84 339.84 0 0 0 170.666667 512z m341.333333-341.333333c-78.848 0-151.466667 26.752-209.28 71.68l478.976 478.933333A341.333333 341.333333 0 0 0 512 170.666667z' fill='white'/></svg>"];
+    NSImage *copyIcon = [self iconFromSVG:@"<svg viewBox='0 0 1024 1024' xmlns='http://www.w3.org/2000/svg'><path d='M768 256a85.333333 85.333333 0 0 1 85.333333 85.333333v512a85.333333 85.333333 0 0 1-85.333333 85.333334h-341.333333a85.333333 85.333333 0 0 1-85.333334-85.333334V341.333333a85.333333 85.333333 0 0 1 85.333334-85.333333h341.333333z m0 85.333333h-341.333333v512h341.333333V341.333333z m-128-256a42.666667 42.666667 0 0 1 42.666667 42.666667l-0.042667 42.666667H256l-0.042667 597.333333H213.333333a42.666667 42.666667 0 0 1-42.666666-42.666667V170.666667a85.333333 85.333333 0 0 1 85.333333-85.333334h384z' fill='white'/></svg>"];
+    NSImage *saveIcon = [self iconFromSVG:@"<svg viewBox='0 0 1024 1024' xmlns='http://www.w3.org/2000/svg'><path d='M896 810.666667a85.333333 85.333333 0 0 1-85.333333 85.333333H213.333333a85.333333 85.333333 0 0 1-85.333333-85.333333V213.333333a85.333333 85.333333 0 0 1 85.333333-85.333333h250.368a85.333333 85.333333 0 0 1 73.173334 41.429333L563.2 213.333333H810.666667a85.333333 85.333333 0 0 1 85.333333 85.333334v512z m-85.333333-341.333334H213.333333v341.333334h597.333334v-341.333334z m-346.965334-256H213.333333v170.666667h597.333334V298.666667h-271.616a42.666667 42.666667 0 0 1-36.608-20.736L463.701333 213.333333z' fill='white'/></svg>"];
+    // save-remote.svg — provided by the user; its content is the same arrow
+    // icon as the previous upload, so we reuse it verbatim here.
+    NSImage *saveRemoteIcon = [self iconFromSVG:@"<svg viewBox='0 0 1024 1024' xmlns='http://www.w3.org/2000/svg'><path d='M481.749333 353.792c16.682667-16.64 43.690667-16.64 60.373334 0l120.917333 120.832 3.541333 4.010667a42.666667 42.666667 0 0 1-63.872 56.32L554.666667 486.954667V896a42.666667 42.666667 0 0 1-85.333334 0v-409.173333l-48.170666 48.128a42.666667 42.666667 0 0 1-60.330667 0l-3.541333-4.010667a42.666667 42.666667 0 0 1 3.541333-56.32zM512 85.333333c122.538667 0 227.84 73.813333 273.92 179.370667A213.333333 213.333333 0 0 1 725.333333 682.666667a42.666667 42.666667 0 0 1-4.992-85.034667L725.333333 597.333333a128 128 0 0 0 36.394667-250.794666l-38.144-11.264-15.914667-36.437334a213.376 213.376 0 0 0-407.296 58.026667l-7.381333 58.368-57.173333 13.824A85.418667 85.418667 0 0 0 256 597.333333h42.666667a42.666667 42.666667 0 0 1 0 85.333334H256a170.666667 170.666667 0 0 1-40.277333-336.554667A298.709333 298.709333 0 0 1 512 85.333333z' fill='white'/></svg>"];
+    NSImage *ftpIcon = [self iconFromSVG:@"<svg viewBox='0 0 1024 1024' xmlns='http://www.w3.org/2000/svg'><path d='M128 128h768v256H128V128zm64 64v128h640V192H192zm64 48h64v32h-64v-32zM128 448h416v64H192v192h352v64H128V448zm560-32 160 160-45.248 45.248L720 538.496V832h-64V538.496l-82.752 82.752L528 576l160-160z' fill='white'/></svg>"];
+    NSImage *ocrIcon = [self iconFromSVG:@"<svg viewBox='0 0 1024 1024' xmlns='http://www.w3.org/2000/svg'><path d='M192 160h192v64H256v128h-64V160zM640 160h192v192h-64V224H640v-64zM256 672v128h128v64H192V672h64zM832 672v192H640v-64h128V672h64zM469.333333 288h85.333334l170.666666 448h-78.933333l-39.253333-106.666667H416.853333L377.6 736H298.666667l170.666666-448zM439.466667 565.333333h144.896L512 368.981333 439.466667 565.333333z' fill='white'/></svg>"];
+    NSImage *summaryIcon = [self iconFromSVG:@"<svg viewBox='0 0 1024 1024' xmlns='http://www.w3.org/2000/svg'><path d='M256 128h448l192 192v576H256V128z m64 64v640h512V352H672V192H320z m416 45.248V288h50.752L736 237.248zM384 448h384v64H384v-64z m0 128h384v64H384v-64z m0 128h256v64H384v-64zM192 256v704h512v64H128V256h64z' fill='white'/></svg>"];
+    // upload.svg — newly replaced "send/cloud" icon supplied by the user.
+    NSImage *uploadIcon = [self iconFromSVG:@"<svg viewBox='0 0 1024 1024' xmlns='http://www.w3.org/2000/svg'><path d='M550.528 544.128L640 539.776V678.4l178.005333-178.005333L640 322.389333v129.024l-72.618667 10.922667c-155.52 23.424-251.733333 73.557333-312.874666 164.437333 84.906667-50.602667 178.261333-76.928 296.021333-82.645333zM554.666667 629.376c-27.392 1.322667-53.034667 3.968-77.141334 7.808l-8.192 1.365333c-136.704 23.637333-224.810667 87.168-310.954666 176.128-26.154667 27.008-51.882667 59.648-51.882667 59.648-14.848 18.176-24.021333 14.037333-20.352-9.173333 0 0 4.394667-31.402667 11.690667-65.792C144.938667 577.066667 250.581333 423.68 554.666667 377.941333V209.066667a38.4 38.4 0 0 1 65.536-27.136l291.328 291.285333a38.4 38.4 0 0 1 0 54.314667l-291.328 291.285333A38.4 38.4 0 0 1 554.666667 791.637333v-162.261333z' fill='white'/></svg>"];
+
+    [self styleIconButton:_cancelButton image:cancelIcon];
+    [self styleIconButton:_clipboardButton image:copyIcon];
+    [self styleIconButton:_saveButton image:saveIcon];
+    [self styleIconButton:_saveRemoteButton image:saveRemoteIcon];
+    [self styleIconButton:_ftpButton image:ftpIcon];
+    [self styleIconButton:_ocrButton image:ocrIcon];
+    [self styleIconButton:_summaryButton image:summaryIcon];
+    [self styleIconButton:_uploadButton image:uploadIcon];
+
+    // Configure hover colors for the action buttons. White is the shared
+    // base; cancel turns red on hover and the rest turn blue, providing a
+    // glance-able cue for destructive vs. constructive actions.
+    NSColor *baseWhite = [NSColor whiteColor];
+    NSColor *hoverRed  = [NSColor colorWithCalibratedRed:248.0/255.0 green:113.0/255.0 blue:113.0/255.0 alpha:1.0];
+    NSColor *hoverBlue = [NSColor colorWithCalibratedRed:96.0/255.0  green:165.0/255.0 blue:250.0/255.0 alpha:1.0];
+    SnipHoverButton *cancelHB     = (SnipHoverButton *)_cancelButton;
+    SnipHoverButton *clipboardHB  = (SnipHoverButton *)_clipboardButton;
+    SnipHoverButton *saveHB       = (SnipHoverButton *)_saveButton;
+    SnipHoverButton *saveRemoteHB = (SnipHoverButton *)_saveRemoteButton;
+    SnipHoverButton *ftpHB        = (SnipHoverButton *)_ftpButton;
+    SnipHoverButton *ocrHB        = (SnipHoverButton *)_ocrButton;
+    SnipHoverButton *summaryHB    = (SnipHoverButton *)_summaryButton;
+    SnipHoverButton *uploadHB     = (SnipHoverButton *)_uploadButton;
+    cancelHB.baseColor = baseWhite;     cancelHB.hoverColor = hoverRed;
+    clipboardHB.baseColor = baseWhite;  clipboardHB.hoverColor = hoverBlue;
+    saveHB.baseColor = baseWhite;       saveHB.hoverColor = hoverBlue;
+    saveRemoteHB.baseColor = baseWhite; saveRemoteHB.hoverColor = hoverBlue;
+    ftpHB.baseColor = baseWhite;        ftpHB.hoverColor = hoverBlue;
+    ocrHB.baseColor = baseWhite;        ocrHB.hoverColor = hoverBlue;
+    summaryHB.baseColor = baseWhite;    summaryHB.hoverColor = hoverBlue;
+    uploadHB.baseColor = baseWhite;     uploadHB.hoverColor = hoverBlue;
+
+    [self styleIconButton:_penButton image:[self iconFromSVG:@"<svg viewBox='0 0 24 24' xmlns='http://www.w3.org/2000/svg'><g fill='none' stroke='white' stroke-width='1.8' stroke-linecap='round' stroke-linejoin='round'><path d='m14.5 5.5 4-4 4 4-4 4'/><path d='m17.5 8.5-7.8 7.8'/><path d='M11 14.8c.8 2.8-.7 5.5-3.7 6.3-1.8.5-3.7.1-5.3-.9 2.1-.4 2.8-1.5 3.1-3.3.4-2.5 3.3-3.8 5.9-2.1Z'/></g></svg>"]];
+    [self styleIconButton:_lineButton image:[self iconFromSVG:@"<svg viewBox='0 0 24 24' xmlns='http://www.w3.org/2000/svg'><path d='M5 19 19 5' fill='none' stroke='white' stroke-width='2' stroke-linecap='round'/></svg>"]];
+    [self styleIconButton:_arrowButton image:[self iconFromSVG:@"<svg viewBox='0 0 24 24' xmlns='http://www.w3.org/2000/svg'><g fill='none' stroke='white' stroke-width='2' stroke-linecap='round' stroke-linejoin='round'><path d='M5 19 19 5'/><path d='M11 5h8v8'/></g></svg>"]];
+    [_penButton setToolTip:@"画笔标记"];
+    [_lineButton setToolTip:@"直线标记"];
+    [_arrowButton setToolTip:@"箭头标记"];
+    [self styleIconButton:_rectButton image:[self iconFromSVG:@"<svg viewBox='0 0 1024 1024' xmlns='http://www.w3.org/2000/svg'><path d='M96 96h832v832H96V96z m32 32v768h768V128H128z' fill='white'/></svg>"]];
+    [self styleIconButton:_ellipseButton image:[self iconFromSVG:@"<svg viewBox='0 0 1024 1024' xmlns='http://www.w3.org/2000/svg'><path d='M512 928c229.76 0 416-186.24 416-416S741.76 96 512 96 96 282.24 96 512s186.24 416 416 416z m0-32C299.936 896 128 724.064 128 512S299.936 128 512 128s384 171.936 384 384-171.936 384-384 384z' fill='white'/></svg>"]];
+    [self styleIconButton:_textButton image:[self iconFromSVG:@"<svg viewBox='0 0 1024 1024' xmlns='http://www.w3.org/2000/svg'><path d='M224 160h576v96H560v608h-96V256H224V160zM384 864h256v64H384v-64z' fill='white'/></svg>"]];
+    [self styleIconButton:_mosaicButton image:[self iconFromSVG:@"<svg viewBox='0 0 1024 1024' xmlns='http://www.w3.org/2000/svg'><path d='M128 128h320v320H128V128zm448 0h320v320H576V128zM128 576h320v320H128V576zm448 0h320v320H576V576z' fill='white'/></svg>"]];
+    [_mosaicButton setToolTip:@"马赛克标记"];
+    [self styleIconButton:_undoButton image:[self iconFromSVG:@"<svg viewBox='0 0 1024 1024' xmlns='http://www.w3.org/2000/svg'><g transform='translate(1024 0) scale(-1 1)'><path d='M838.976 288l-169.344-162.56a16 16 0 1 1 22.144-23.04l213.632 204.992-213.312 215.84a16 16 0 0 1-22.784-22.464L847.936 320H454.56c-164.192 0-297.28 128.96-297.28 288s133.088 288 297.28 288H704v32h-242.784C266.88 928 128 784.736 128 608S266.88 288 461.248 288h377.728z' fill='white'/></g></svg>"]];
+
+    [_toolSettingsView setWantsLayer:NO];
+    [_settingsDivider setWantsLayer:YES];
+    [[_settingsDivider layer] setBackgroundColor:[[NSColor colorWithCalibratedWhite:0.82 alpha:1] CGColor]];
+    [_toolSettingsView addSubview:_settingsDivider];
+
+    for (NSNumber *width in @[@2, @4, @6]) {
+        NSButton *button = [NSButton buttonWithTitle:@"●" target:self action:@selector(selectStrokeWidth:)];
+        [button setTag:[width integerValue]];
+        [button setBordered:NO];
+        [button setWantsLayer:YES];
+        [[button layer] setCornerRadius:6];
+        NSMutableAttributedString *title = [[NSMutableAttributedString alloc] initWithString:@"●"];
+        [title addAttribute:NSFontAttributeName value:[NSFont systemFontOfSize:8 + [width doubleValue] * 2 weight:NSFontWeightBold] range:NSMakeRange(0, title.length)];
+        [button setAttributedTitle:title];
+        [_strokeSettingButtons addObject:button];
+        [_toolSettingsView addSubview:button];
+    }
+
+    for (NSNumber *size in @[@16, @20, @28, @36]) {
+        NSButton *button = [NSButton buttonWithTitle:[NSString stringWithFormat:@"%ld", (long)[size integerValue]] target:self action:@selector(selectFontSize:)];
+        [button setTag:[size integerValue]];
+        [button setBordered:NO];
+        [button setWantsLayer:YES];
+        [[button layer] setCornerRadius:6];
+        NSMutableAttributedString *title = [[NSMutableAttributedString alloc] initWithString:[button title]];
+        [title addAttribute:NSForegroundColorAttributeName value:[NSColor colorWithCalibratedWhite:0.12 alpha:1] range:NSMakeRange(0, title.length)];
+        [title addAttribute:NSFontAttributeName value:[NSFont systemFontOfSize:13 weight:NSFontWeightBold] range:NSMakeRange(0, title.length)];
+        [button setAttributedTitle:title];
+        [_fontSettingButtons addObject:button];
+        [_toolSettingsView addSubview:button];
+    }
+
+    for (NSUInteger i = 0; i < 2; i++) {
+        NSButton *button = [NSButton buttonWithTitle:@"" target:self action:@selector(selectMosaicMode:)];
+        [button setTag:(NSInteger)i];
+        [button setBordered:NO];
+        [button setWantsLayer:YES];
+        [[button layer] setCornerRadius:5];
+        NSString *svg = i == 0
+            ? @"<svg viewBox='0 0 24 24' xmlns='http://www.w3.org/2000/svg'><g fill='none' stroke='black' stroke-width='1.8' stroke-linecap='round' stroke-linejoin='round'><path d='M9 11V5.5a2 2 0 0 1 4 0V10'/><path d='M13 10V8a2 2 0 0 1 4 0v3'/><path d='M17 10a2 2 0 0 1 4 0v4.5c0 4-2.5 6.5-6.5 6.5h-1.2a6 6 0 0 1-4.7-2.3L4 13.2a1.9 1.9 0 0 1 2.8-2.5L9 12.5'/></g></svg>"
+            : @"<svg viewBox='0 0 24 24' xmlns='http://www.w3.org/2000/svg'><g fill='none' stroke='black' stroke-width='1.8' stroke-linejoin='round'><rect x='2.5' y='2.5' width='19' height='19' rx='2'/></g><g fill='black'><rect x='6' y='6' width='4' height='4' rx='.5'/><rect x='14' y='6' width='4' height='4' rx='.5'/><rect x='6' y='14' width='4' height='4' rx='.5'/><rect x='14' y='14' width='4' height='4' rx='.5'/></g></svg>";
+        [button setImage:[self iconFromSVG:svg]];
+        [button setImagePosition:NSImageOnly];
+        [button setImageScaling:NSImageScaleProportionallyDown];
+        NSString *accessibilityLabel = i == 0 ? @"涂抹马赛克" : @"框选马赛克";
+        [button setToolTip:accessibilityLabel];
+        [button setAccessibilityLabel:accessibilityLabel];
+        [_mosaicModeButtons addObject:button];
+        [_toolSettingsView addSubview:button];
+    }
+    for (NSNumber *width in @[@16, @24, @36, @52]) {
+        NSButton *button = [NSButton buttonWithTitle:@"●" target:self action:@selector(selectMosaicWidth:)];
+        [button setTag:[width integerValue]];
+        [button setBordered:NO];
+        [button setWantsLayer:YES];
+        [[button layer] setCornerRadius:6];
+        NSMutableAttributedString *title = [[NSMutableAttributedString alloc] initWithString:@"●"];
+        [title addAttribute:NSFontAttributeName value:[NSFont systemFontOfSize:MIN(22, 6 + [width doubleValue] / 3) weight:NSFontWeightBold] range:NSMakeRange(0, title.length)];
+        [button setAttributedTitle:title];
+        [_mosaicWidthButtons addObject:button];
+        [_toolSettingsView addSubview:button];
+    }
+
+    NSArray *colors = @[
+        [NSColor colorWithCalibratedRed:239.0/255.0 green:68.0/255.0 blue:68.0/255.0 alpha:1.0],
+        [NSColor colorWithCalibratedRed:250.0/255.0 green:204.0/255.0 blue:21.0/255.0 alpha:1.0],
+        [NSColor colorWithCalibratedRed:34.0/255.0 green:197.0/255.0 blue:94.0/255.0 alpha:1.0],
+        [NSColor colorWithCalibratedRed:59.0/255.0 green:130.0/255.0 blue:246.0/255.0 alpha:1.0],
+        [NSColor colorWithCalibratedWhite:0.0 alpha:1.0],
+        [NSColor colorWithCalibratedRed:156.0/255.0 green:163.0/255.0 blue:175.0/255.0 alpha:1.0],
+        [NSColor whiteColor]
+    ];
+    for (NSUInteger i = 0; i < colors.count; i++) {
+        NSButton *button = [NSButton buttonWithTitle:@"" target:self action:@selector(selectToolColor:)];
+        [button setTag:(NSInteger)i];
+        [button setBordered:NO];
+        [button setWantsLayer:YES];
+        [[button layer] setCornerRadius:4];
+        [[button layer] setBorderWidth:1];
+        [[button layer] setBorderColor:[[NSColor colorWithCalibratedWhite:0.12 alpha:0.22] CGColor]];
+        [[button layer] setBackgroundColor:[colors[i] CGColor]];
+        [_colorSettingButtons addObject:button];
+        [_toolSettingsView addSubview:button];
+    }
+    objc_setAssociatedObject(_toolSettingsView, "snapgoColors", colors, OBJC_ASSOCIATION_RETAIN_NONATOMIC);
+}
+
+- (void)drawRect:(NSRect)dirtyRect {
+    [[NSColor colorWithCalibratedWhite:0.0 alpha:0.48] setFill];
+    if (_hasSelection) {
+        NSRect top = NSMakeRect(0, 0, self.bounds.size.width, _selection.origin.y);
+        NSRect left = NSMakeRect(0, _selection.origin.y, _selection.origin.x, _selection.size.height);
+        NSRect right = NSMakeRect(NSMaxX(_selection), _selection.origin.y, self.bounds.size.width - NSMaxX(_selection), _selection.size.height);
+        NSRect bottom = NSMakeRect(0, NSMaxY(_selection), self.bounds.size.width, self.bounds.size.height - NSMaxY(_selection));
+        NSRectFill(top);
+        NSRectFill(left);
+        NSRectFill(right);
+        NSRectFill(bottom);
+
+        NSBezierPath *border = [NSBezierPath bezierPathWithRect:NSInsetRect(_selection, 0.75, 0.75)];
+        [border setLineWidth:1.5];
+        [[NSColor colorWithCalibratedRed:59.0/255.0 green:130.0/255.0 blue:246.0/255.0 alpha:1.0] setStroke];
+        [border stroke];
+
+        CGFloat corner = 8;
+        NSBezierPath *corners = [NSBezierPath bezierPath];
+        [corners moveToPoint:NSMakePoint(NSMinX(_selection), NSMinY(_selection) + corner)];
+        [corners lineToPoint:NSMakePoint(NSMinX(_selection), NSMinY(_selection))];
+        [corners lineToPoint:NSMakePoint(NSMinX(_selection) + corner, NSMinY(_selection))];
+        [corners moveToPoint:NSMakePoint(NSMaxX(_selection) - corner, NSMinY(_selection))];
+        [corners lineToPoint:NSMakePoint(NSMaxX(_selection), NSMinY(_selection))];
+        [corners lineToPoint:NSMakePoint(NSMaxX(_selection), NSMinY(_selection) + corner)];
+        [corners moveToPoint:NSMakePoint(NSMaxX(_selection), NSMaxY(_selection) - corner)];
+        [corners lineToPoint:NSMakePoint(NSMaxX(_selection), NSMaxY(_selection))];
+        [corners lineToPoint:NSMakePoint(NSMaxX(_selection) - corner, NSMaxY(_selection))];
+        [corners moveToPoint:NSMakePoint(NSMinX(_selection) + corner, NSMaxY(_selection))];
+        [corners lineToPoint:NSMakePoint(NSMinX(_selection), NSMaxY(_selection))];
+        [corners lineToPoint:NSMakePoint(NSMinX(_selection), NSMaxY(_selection) - corner)];
+        [corners setLineWidth:3];
+        [corners stroke];
+
+        [self drawAnnotations];
+        [self drawResizeHandles];
+    } else {
+        NSRectFill(self.bounds);
+    }
+}
+
+- (void)drawResizeHandles {
+    NSArray *points = @[
+        [NSValue valueWithPoint:NSMakePoint(NSMinX(_selection), NSMinY(_selection))],
+        [NSValue valueWithPoint:NSMakePoint(NSMidX(_selection), NSMinY(_selection))],
+        [NSValue valueWithPoint:NSMakePoint(NSMaxX(_selection), NSMinY(_selection))],
+        [NSValue valueWithPoint:NSMakePoint(NSMaxX(_selection), NSMidY(_selection))],
+        [NSValue valueWithPoint:NSMakePoint(NSMaxX(_selection), NSMaxY(_selection))],
+        [NSValue valueWithPoint:NSMakePoint(NSMidX(_selection), NSMaxY(_selection))],
+        [NSValue valueWithPoint:NSMakePoint(NSMinX(_selection), NSMaxY(_selection))],
+        [NSValue valueWithPoint:NSMakePoint(NSMinX(_selection), NSMidY(_selection))]
+    ];
+    [[NSColor whiteColor] setStroke];
+    [[NSColor colorWithCalibratedRed:59.0/255.0 green:130.0/255.0 blue:246.0/255.0 alpha:1.0] setFill];
+    for (NSValue *value in points) {
+        NSPoint p = [value pointValue];
+        NSRect handleRect = NSMakeRect(p.x - 5, p.y - 5, 10, 10);
+        NSBezierPath *path = [NSBezierPath bezierPathWithRect:handleRect];
+        [path fill];
+        [path stroke];
+    }
+}
+
+- (CGFloat)fontSizeForTextItem:(NSDictionary *)item {
+    NSNumber *fontSize = item[@"fontSize"];
+    if (fontSize != nil && [fontSize doubleValue] > 0) {
+        return [fontSize doubleValue];
+    }
+    return 20.0;
+}
+
+- (CGFloat)strokeWidthForItem:(NSDictionary *)item {
+    NSNumber *strokeWidth = item[@"strokeWidth"];
+    if (strokeWidth != nil && [strokeWidth doubleValue] > 0) {
+        return [strokeWidth doubleValue];
+    }
+    return 3.0;
+}
+
+- (NSDictionary *)textAttributesWithFontSize:(CGFloat)fontSize color:(NSColor *)color {
+    return @{
+        NSFontAttributeName: [NSFont systemFontOfSize:fontSize weight:NSFontWeightSemibold],
+        NSForegroundColorAttributeName: color ?: [NSColor whiteColor]
+    };
+}
+
+- (NSSize)textSizeForString:(NSString *)text fontSize:(CGFloat)fontSize {
+    NSString *measured = text.length > 0 ? text : @" ";
+    NSDictionary *attrs = [self textAttributesWithFontSize:fontSize color:[NSColor whiteColor]];
+    NSRect bounds = [measured boundingRectWithSize:NSMakeSize(CGFLOAT_MAX, CGFLOAT_MAX)
+                                           options:NSStringDrawingUsesLineFragmentOrigin | NSStringDrawingUsesFontLeading
+                                        attributes:attrs];
+    return NSMakeSize(ceil(MAX(1.0, bounds.size.width)), ceil(MAX(fontSize * 1.2, bounds.size.height)));
+}
+
+- (NSSize)textEditorSizeForString:(NSString *)text fontSize:(CGFloat)fontSize {
+    NSSize textSize = [self textSizeForString:text fontSize:fontSize];
+    return NSMakeSize(MAX(180, MIN(420, textSize.width + 28)), MAX(30, ceil(fontSize * 1.6)));
+}
+
+- (NSRect)textEditorFrameForLocalPoint:(NSPoint)localPoint text:(NSString *)text fontSize:(CGFloat)fontSize {
+    NSSize editorSize = [self textEditorSizeForString:text fontSize:fontSize];
+    NSPoint clampedLocal = [self clampedTextLocalPoint:localPoint text:text fontSize:fontSize];
+    NSRect frame = NSMakeRect(_selection.origin.x + clampedLocal.x, _selection.origin.y + clampedLocal.y, editorSize.width, editorSize.height);
+    CGFloat maxX = self.bounds.size.width - frame.size.width - 8;
+    CGFloat maxY = self.bounds.size.height - frame.size.height - 8;
+    frame.origin.x = MAX(8, MIN(frame.origin.x, maxX));
+    frame.origin.y = MAX(8, MIN(frame.origin.y, maxY));
+    return frame;
+}
+
+- (void)resizeTextEditorForCurrentFont {
+    if (_textEditor == nil) {
+        return;
+    }
+    NSString *text = [_textEditor stringValue] ?: @"";
+    NSRect frame = [self textEditorFrameForLocalPoint:_textEditorLocalPoint text:text fontSize:_activeFontSize];
+    [_textEditor setFrame:frame];
+    _textEditorLocalPoint = [self localPoint:frame.origin];
+}
+
+- (NSRect)textAnnotationRectForItem:(NSDictionary *)item {
+    if (![item[@"tool"] isEqualToString:@"text"]) {
+        return NSZeroRect;
+    }
+    NSArray *points = item[@"points"];
+    NSString *text = item[@"text"];
+    if (points.count == 0 || text.length == 0) {
+        return NSZeroRect;
+    }
+    NSPoint p = [points[0] pointValue];
+    CGFloat fontSize = [self fontSizeForTextItem:item];
+    NSSize size = [self textSizeForString:text fontSize:fontSize];
+    return NSMakeRect(_selection.origin.x + p.x, _selection.origin.y + p.y, size.width, size.height);
+}
+
+- (NSPoint)clampedTextLocalPoint:(NSPoint)localPoint text:(NSString *)text fontSize:(CGFloat)fontSize {
+    NSSize size = [self textSizeForString:text fontSize:fontSize];
+    CGFloat maxX = MAX(0, _selection.size.width - size.width);
+    CGFloat maxY = MAX(0, _selection.size.height - size.height);
+    return NSMakePoint(MAX(0, MIN(localPoint.x, maxX)), MAX(0, MIN(localPoint.y, maxY)));
+}
+
+- (NSInteger)textAnnotationIndexAtPoint:(NSPoint)p {
+    for (NSInteger i = (NSInteger)_annotations.count - 1; i >= 0; i--) {
+        NSDictionary *item = _annotations[(NSUInteger)i];
+        if (![item[@"tool"] isEqualToString:@"text"]) {
+            continue;
+        }
+        NSRect hitRect = NSInsetRect([self textAnnotationRectForItem:item], -6, -6);
+        if (!NSIsEmptyRect(hitRect) && NSPointInRect(p, hitRect)) {
+            return i;
+        }
+    }
+    return -1;
+}
+
+- (void)drawAnnotations {
+    NSMutableArray *items = [NSMutableArray arrayWithArray:_annotations];
+    if (_draftAnnotation != nil) {
+        [items addObject:_draftAnnotation];
+    }
+    for (NSUInteger index = 0; index < items.count; index++) {
+        NSDictionary *item = items[index];
+        NSString *tool = item[@"tool"];
+        NSColor *color = item[@"nsColor"];
+        NSArray *points = item[@"points"];
+        if (points.count == 0) {
+            continue;
+        }
+        if ([tool isEqualToString:@"text"]) {
+            NSString *text = item[@"text"];
+            if (text.length == 0) {
+                continue;
+            }
+            NSPoint p = [points[0] pointValue];
+            CGFloat fontSize = [self fontSizeForTextItem:item];
+            NSDictionary *attrs = [self textAttributesWithFontSize:fontSize color:color];
+            [text drawAtPoint:NSMakePoint(_selection.origin.x + p.x, _selection.origin.y + p.y) withAttributes:attrs];
+            if ((NSInteger)index == _selectedTextAnnotationIndex && index < _annotations.count) {
+                NSRect rect = NSInsetRect([self textAnnotationRectForItem:item], -4, -3);
+                NSBezierPath *selectionPath = [NSBezierPath bezierPathWithRoundedRect:rect xRadius:4 yRadius:4];
+                [selectionPath setLineWidth:1.5];
+                CGFloat dash[] = {4.0, 3.0};
+                [selectionPath setLineDash:dash count:2 phase:0];
+                [[NSColor colorWithCalibratedRed:59.0/255.0 green:130.0/255.0 blue:246.0/255.0 alpha:0.95] setStroke];
+                [selectionPath stroke];
+            }
+            continue;
+        }
+        if ([tool hasPrefix:@"mosaic-"]) {
+            [NSGraphicsContext saveGraphicsState];
+            NSBezierPath *clipPath = nil;
+            if ([tool isEqualToString:@"mosaic-brush"]) {
+                clipPath = [NSBezierPath bezierPath];
+                CGFloat radius = [self strokeWidthForItem:item] / 2.0;
+                for (NSUInteger i = 0; i < points.count; i++) {
+                    NSPoint local = [points[i] pointValue];
+                    NSPoint p = NSMakePoint(_selection.origin.x + local.x, _selection.origin.y + local.y);
+                    [clipPath appendBezierPathWithOvalInRect:NSMakeRect(p.x - radius, p.y - radius, radius * 2, radius * 2)];
+                    if (i == 0) continue;
+                    NSPoint previousLocal = [points[i - 1] pointValue];
+                    NSPoint previous = NSMakePoint(_selection.origin.x + previousLocal.x, _selection.origin.y + previousLocal.y);
+                    CGFloat dx = p.x - previous.x, dy = p.y - previous.y;
+                    CGFloat length = hypot(dx, dy);
+                    if (length <= 0.001) continue;
+                    CGFloat nx = -dy / length * radius, ny = dx / length * radius;
+                    NSBezierPath *segment = [NSBezierPath bezierPath];
+                    [segment moveToPoint:NSMakePoint(previous.x + nx, previous.y + ny)];
+                    [segment lineToPoint:NSMakePoint(p.x + nx, p.y + ny)];
+                    [segment lineToPoint:NSMakePoint(p.x - nx, p.y - ny)];
+                    [segment lineToPoint:NSMakePoint(previous.x - nx, previous.y - ny)];
+                    [segment closePath];
+                    [clipPath appendBezierPath:segment];
+                }
+            } else if (points.count >= 2) {
+                NSPoint a = [points[0] pointValue], b = [[points lastObject] pointValue];
+                NSRect r = NSMakeRect(_selection.origin.x + MIN(a.x, b.x), _selection.origin.y + MIN(a.y, b.y), fabs(b.x-a.x), fabs(b.y-a.y));
+                clipPath = [NSBezierPath bezierPathWithRect:r];
+            }
+            if (clipPath != nil) {
+                [clipPath addClip];
+                if (_mosaicPreviewImage != nil) {
+                    NSDictionary *hints = @{NSImageHintInterpolation: @(NSImageInterpolationNone)};
+                    [_mosaicPreviewImage drawInRect:self.bounds
+                                          fromRect:NSMakeRect(0, 0, _mosaicPreviewImage.size.width, _mosaicPreviewImage.size.height)
+                                         operation:NSCompositingOperationCopy
+                                          fraction:1.0
+                                    respectFlipped:YES
+                                             hints:hints];
+                } else {
+                    // Screen capture can be unavailable before Screen Recording
+                    // permission is granted. A checkerboard fallback still reads
+                    // as pixelation and never resembles a marker stroke.
+                    CGFloat tile = 8.0;
+                    for (CGFloat y = 0; y < self.bounds.size.height; y += tile) {
+                        for (CGFloat x = 0; x < self.bounds.size.width; x += tile) {
+                            BOOL alternate = (((NSInteger)(x / tile) + (NSInteger)(y / tile)) % 2) == 0;
+                            [[NSColor colorWithCalibratedWhite:(alternate ? 0.42 : 0.68) alpha:1.0] setFill];
+                            NSRectFill(NSMakeRect(x, y, tile, tile));
+                        }
+                    }
+                }
+            }
+            [NSGraphicsContext restoreGraphicsState];
+            continue;
+        }
+        [color setStroke];
+        CGFloat strokeWidth = [self strokeWidthForItem:item];
+        NSBezierPath *path = [NSBezierPath bezierPath];
+        [path setLineWidth:strokeWidth];
+        [path setLineCapStyle:NSLineCapStyleRound];
+        [path setLineJoinStyle:NSLineJoinStyleRound];
+        if ([tool isEqualToString:@"pen"]) {
+            NSPoint first = [points[0] pointValue];
+            [path moveToPoint:NSMakePoint(_selection.origin.x + first.x, _selection.origin.y + first.y)];
+            for (NSUInteger i = 1; i < points.count; i++) {
+                NSPoint point = [points[i] pointValue];
+                [path lineToPoint:NSMakePoint(_selection.origin.x + point.x, _selection.origin.y + point.y)];
+            }
+            [path stroke];
+        } else if (points.count >= 2) {
+            NSPoint a = [points[0] pointValue];
+            NSPoint b = [[points lastObject] pointValue];
+            NSPoint start = NSMakePoint(_selection.origin.x + a.x, _selection.origin.y + a.y);
+            NSPoint end = NSMakePoint(_selection.origin.x + b.x, _selection.origin.y + b.y);
+            NSRect r = NSMakeRect(
+                _selection.origin.x + MIN(a.x, b.x),
+                _selection.origin.y + MIN(a.y, b.y),
+                fabs(b.x - a.x),
+                fabs(b.y - a.y));
+            if ([tool isEqualToString:@"line"] || [tool isEqualToString:@"arrow"]) {
+                NSBezierPath *linePath = [NSBezierPath bezierPath];
+                [linePath moveToPoint:start];
+                [linePath lineToPoint:end];
+                [linePath setLineWidth:strokeWidth];
+                [linePath setLineCapStyle:NSLineCapStyleRound];
+                [linePath setLineJoinStyle:NSLineJoinStyleRound];
+                if ([tool isEqualToString:@"arrow"]) {
+                    CGFloat dx = end.x - start.x, dy = end.y - start.y;
+                    CGFloat length = hypot(dx, dy);
+                    if (length >= 1.0) {
+                        CGFloat headLength = MIN(length * 0.45, MAX(10.0, strokeWidth * 4.0));
+                        CGFloat angle = atan2(dy, dx), spread = M_PI / 6.0;
+                        NSPoint left = NSMakePoint(end.x - headLength * cos(angle - spread), end.y - headLength * sin(angle - spread));
+                        NSPoint right = NSMakePoint(end.x - headLength * cos(angle + spread), end.y - headLength * sin(angle + spread));
+                        [linePath moveToPoint:left];
+                        [linePath lineToPoint:end];
+                        [linePath lineToPoint:right];
+                    }
+                }
+                [linePath stroke];
+            } else if ([tool isEqualToString:@"rect"]) {
+                NSBezierPath *rectPath = [NSBezierPath bezierPathWithRect:r];
+                [rectPath setLineWidth:strokeWidth];
+                [rectPath stroke];
+            } else if ([tool isEqualToString:@"ellipse"]) {
+                NSBezierPath *ellipsePath = [NSBezierPath bezierPathWithOvalInRect:r];
+                [ellipsePath setLineWidth:strokeWidth];
+                [ellipsePath stroke];
+            }
+        }
+    }
+}
+
+- (NSString *)resizeHandleAtPoint:(NSPoint)p {
+    if (!_hasSelection) {
+        return nil;
+    }
+    CGFloat t = 9;
+    NSDictionary *handles = @{
+        @"nw": [NSValue valueWithPoint:NSMakePoint(NSMinX(_selection), NSMinY(_selection))],
+        @"n": [NSValue valueWithPoint:NSMakePoint(NSMidX(_selection), NSMinY(_selection))],
+        @"ne": [NSValue valueWithPoint:NSMakePoint(NSMaxX(_selection), NSMinY(_selection))],
+        @"e": [NSValue valueWithPoint:NSMakePoint(NSMaxX(_selection), NSMidY(_selection))],
+        @"se": [NSValue valueWithPoint:NSMakePoint(NSMaxX(_selection), NSMaxY(_selection))],
+        @"s": [NSValue valueWithPoint:NSMakePoint(NSMidX(_selection), NSMaxY(_selection))],
+        @"sw": [NSValue valueWithPoint:NSMakePoint(NSMinX(_selection), NSMaxY(_selection))],
+        @"w": [NSValue valueWithPoint:NSMakePoint(NSMinX(_selection), NSMidY(_selection))]
+    };
+    for (NSString *key in handles) {
+        NSPoint hp = [handles[key] pointValue];
+        if (fabs(p.x - hp.x) <= t && fabs(p.y - hp.y) <= t) {
+            return key;
+        }
+    }
+    BOOL nearX = p.x >= NSMinX(_selection) - t && p.x <= NSMaxX(_selection) + t;
+    BOOL nearY = p.y >= NSMinY(_selection) - t && p.y <= NSMaxY(_selection) + t;
+    if (nearX && fabs(p.y - NSMinY(_selection)) <= t) return @"n";
+    if (nearX && fabs(p.y - NSMaxY(_selection)) <= t) return @"s";
+    if (nearY && fabs(p.x - NSMinX(_selection)) <= t) return @"w";
+    if (nearY && fabs(p.x - NSMaxX(_selection)) <= t) return @"e";
+    return nil;
+}
+
+- (NSPoint)localPoint:(NSPoint)p {
+    return NSMakePoint(
+        MAX(0, MIN(p.x - _selection.origin.x, _selection.size.width)),
+        MAX(0, MIN(p.y - _selection.origin.y, _selection.size.height)));
+}
+
+// Annotations use selection-local coordinates. When a top or left resize
+// moves the selection origin, offset every local point in the opposite
+// direction so the annotation remains attached to the same screen pixels.
+- (void)preserveAnnotationScreenPositionsFromOrigin:(NSPoint)previousOrigin toOrigin:(NSPoint)nextOrigin {
+    CGFloat dx = previousOrigin.x - nextOrigin.x;
+    CGFloat dy = previousOrigin.y - nextOrigin.y;
+    if (fabs(dx) <= 0.001 && fabs(dy) <= 0.001) {
+        return;
+    }
+    for (NSDictionary *annotation in _annotations) {
+        NSMutableArray *points = (NSMutableArray *)annotation[@"points"];
+        for (NSUInteger i = 0; i < points.count; i++) {
+            NSPoint point = [points[i] pointValue];
+            points[i] = [NSValue valueWithPoint:NSMakePoint(point.x + dx, point.y + dy)];
+        }
+    }
+}
+
+// Translate a selection rectangle expressed in view-local coordinates into
+// the global top-left screen coordinate system used by
+// `/usr/sbin/screencapture -R`.
+//
+// Why this is needed:
+//   - The overlay window is created with the host screen's AppKit frame and
+//     its flipped content view yields top-left local coordinates relative
+//     to that screen only.
+//   - macOS combines all attached displays into a single virtual coordinate
+//     space whose origin is the top-left corner of the primary display
+//     (Y grows downward). `screencapture -R` interprets its arguments in
+//     that space.
+//   - Without this translation, a selection on a secondary display is sent
+//     as if it were on the primary, so screencapture crops the wrong area.
+//
+// Translation steps:
+//   1. globalX = screenFrame.origin.x + sel.origin.x
+//      (NSScreen frame origin.x is already in primary-anchored global X.)
+//   2. globalY = (primaryHeight - (screenFrame.origin.y + screenFrame.size.height)) + sel.origin.y
+//      Converts the screen's AppKit bottom-left origin to a top-left global
+//      origin, then adds the already-top-left local Y inside the view.
+- (NSRect)globalRectForSelection:(NSRect)sel {
+    NSScreen *screen = [nativeOverlayWindow screen];
+    if (screen == nil) {
+        screen = [NSScreen mainScreen];
+    }
+    if (screen == nil) {
+        return sel;
+    }
+    NSRect screenFrame = [screen frame];
+    NSScreen *primary = [[NSScreen screens] firstObject];
+    CGFloat primaryHeight = primary != nil ? [primary frame].size.height : screenFrame.size.height;
+    CGFloat globalX = screenFrame.origin.x + sel.origin.x;
+    CGFloat globalY = (primaryHeight - (screenFrame.origin.y + screenFrame.size.height)) + sel.origin.y;
+    return NSMakeRect(globalX, globalY, sel.size.width, sel.size.height);
+}
+
+- (void)mouseDown:(NSEvent *)event {
+    NSPoint p = [self convertPoint:[event locationInWindow] fromView:nil];
+    if (_textEditor != nil) {
+        [self commitTextEditor];
+    }
+    _draggingTextAnnotation = NO;
+    NSString *handle = [self resizeHandleAtPoint:p];
+    if (handle != nil) {
+        _resizing = YES;
+        _creating = NO;
+        _moving = NO;
+        _annotating = NO;
+        _resizeHandle = handle;
+        _resizeStart = _selection;
+        [self syncControls];
+        return;
+    }
+    NSInteger textIndex = _hasSelection ? [self textAnnotationIndexAtPoint:p] : -1;
+    if (textIndex >= 0) {
+        _selectedTextAnnotationIndex = textIndex;
+        NSDictionary *item = _annotations[(NSUInteger)textIndex];
+        _activeTool = @"text";
+        _activeColor = item[@"nsColor"] ?: _activeColor;
+        _activeFontSize = [self fontSizeForTextItem:item];
+        _creating = NO;
+        _moving = NO;
+        _resizing = NO;
+        _annotating = NO;
+        if ([event clickCount] >= 2) {
+            [self beginEditingTextAnnotationAtIndex:textIndex];
+            [self syncControls];
+            [self setNeedsDisplay:YES];
+            return;
+        }
+        NSArray *points = item[@"points"];
+        if (points.count > 0) {
+            _draggingTextAnnotation = YES;
+            _textDragStartLocalPoint = [self localPoint:p];
+            _textDragOriginalLocalPoint = [points[0] pointValue];
+        }
+        [self syncControls];
+        [self setNeedsDisplay:YES];
+        return;
+    }
+    _selectedTextAnnotationIndex = -1;
+    if (_hasSelection && NSPointInRect(p, _selection) && [_activeTool isEqualToString:@"text"]) {
+        _creating = NO;
+        _moving = NO;
+        _resizing = NO;
+        _annotating = NO;
+        [self beginTextAnnotationAtPoint:[self localPoint:p]];
+        [self syncControls];
+        return;
+    }
+    if ([event clickCount] == 2 && _hasSelection && NSPointInRect(p, _selection)) {
+        [self copySelection];
+        return;
+    }
+    if (_hasSelection && NSPointInRect(p, _selection) && _activeTool != nil) {
+        _annotating = YES;
+        _creating = NO;
+        _moving = NO;
+        _resizing = NO;
+        NSPoint local = [self localPoint:p];
+        _draftAnnotation = [@{
+            @"tool": _activeTool,
+            @"color": [self hexForColor:_activeColor],
+            @"nsColor": _activeColor,
+            @"strokeWidth": @([_activeTool isEqualToString:@"mosaic-brush"] ? _mosaicBrushWidth : _activeStrokeWidth),
+            @"points": [NSMutableArray arrayWithObject:[NSValue valueWithPoint:local]]
+        } mutableCopy];
+    } else if (_hasSelection && NSPointInRect(p, _selection)) {
+        _moving = YES;
+        _creating = NO;
+        _resizing = NO;
+        _annotating = NO;
+        _moveOffset = NSMakePoint(p.x - _selection.origin.x, p.y - _selection.origin.y);
+    } else {
+        _creating = YES;
+        _moving = NO;
+        _resizing = NO;
+        _annotating = NO;
+        _hasSelection = YES;
+        _anchor = p;
+        _selection = NSMakeRect(p.x, p.y, 0, 0);
+        [_annotations removeAllObjects];
+        _draftAnnotation = nil;
+        _selectedTextAnnotationIndex = -1;
+    }
+    [self syncControls];
+}
+
+- (void)mouseDragged:(NSEvent *)event {
+    NSPoint p = [self convertPoint:[event locationInWindow] fromView:nil];
+    if (_creating) {
+        CGFloat x = MIN(_anchor.x, p.x);
+        CGFloat y = MIN(_anchor.y, p.y);
+        _selection = NSMakeRect(x, y, fabs(p.x - _anchor.x), fabs(p.y - _anchor.y));
+    } else if (_moving) {
+        CGFloat x = p.x - _moveOffset.x;
+        CGFloat y = p.y - _moveOffset.y;
+        x = MAX(0, MIN(x, self.bounds.size.width - _selection.size.width));
+        y = MAX(0, MIN(y, self.bounds.size.height - _selection.size.height));
+        _selection.origin = NSMakePoint(x, y);
+    } else if (_resizing) {
+        CGFloat left = NSMinX(_resizeStart);
+        CGFloat top = NSMinY(_resizeStart);
+        CGFloat right = NSMaxX(_resizeStart);
+        CGFloat bottom = NSMaxY(_resizeStart);
+        if ([_resizeHandle containsString:@"w"]) left = p.x;
+        if ([_resizeHandle containsString:@"e"]) right = p.x;
+        if ([_resizeHandle containsString:@"n"]) top = p.y;
+        if ([_resizeHandle containsString:@"s"]) bottom = p.y;
+        left = MAX(0, MIN(left, self.bounds.size.width));
+        right = MAX(0, MIN(right, self.bounds.size.width));
+        top = MAX(0, MIN(top, self.bounds.size.height));
+        bottom = MAX(0, MIN(bottom, self.bounds.size.height));
+        NSRect nextSelection = NSMakeRect(MIN(left, right), MIN(top, bottom), fabs(right - left), fabs(bottom - top));
+        [self preserveAnnotationScreenPositionsFromOrigin:_selection.origin toOrigin:nextSelection.origin];
+        _selection = nextSelection;
+    } else if (_draggingTextAnnotation && _selectedTextAnnotationIndex >= 0 && _selectedTextAnnotationIndex < (NSInteger)_annotations.count) {
+        NSMutableDictionary *item = (NSMutableDictionary *)_annotations[(NSUInteger)_selectedTextAnnotationIndex];
+        NSMutableArray *points = (NSMutableArray *)item[@"points"];
+        if (points.count > 0) {
+            NSPoint local = [self localPoint:p];
+            NSPoint delta = NSMakePoint(local.x - _textDragStartLocalPoint.x, local.y - _textDragStartLocalPoint.y);
+            NSPoint next = NSMakePoint(_textDragOriginalLocalPoint.x + delta.x, _textDragOriginalLocalPoint.y + delta.y);
+            NSString *text = item[@"text"] ?: @"";
+            CGFloat fontSize = [self fontSizeForTextItem:item];
+            points[0] = [NSValue valueWithPoint:[self clampedTextLocalPoint:next text:text fontSize:fontSize]];
+        }
+    } else if (_annotating && _draftAnnotation != nil) {
+        NSMutableArray *points = _draftAnnotation[@"points"];
+        NSPoint local = [self localPoint:p];
+        if ([_activeTool isEqualToString:@"pen"] || [_activeTool isEqualToString:@"mosaic-brush"]) {
+            [points addObject:[NSValue valueWithPoint:local]];
+        } else {
+            if (points.count == 1) {
+                [points addObject:[NSValue valueWithPoint:local]];
+            } else {
+                points[1] = [NSValue valueWithPoint:local];
+            }
+        }
+    }
+    [self syncControls];
+    [self setNeedsDisplay:YES];
+}
+
+- (void)mouseUp:(NSEvent *)event {
+    _creating = NO;
+    _moving = NO;
+    _resizing = NO;
+    _draggingTextAnnotation = NO;
+    if (_annotating && _draftAnnotation != nil) {
+        [_annotations addObject:_draftAnnotation];
+        _draftAnnotation = nil;
+    }
+    _annotating = NO;
+    if (_hasSelection && (_selection.size.width < 4 || _selection.size.height < 4)) {
+        _hasSelection = NO;
+    }
+    [self syncControls];
+    [self setNeedsDisplay:YES];
+}
+
+- (void)keyDown:(NSEvent *)event {
+    if ([self isEditingText]) {
+        if ([event keyCode] == 53 || [[event charactersIgnoringModifiers] isEqualToString:@"\033"]) {
+            [self cancelTextEditor];
+            return;
+        }
+        if ([event keyCode] == 36 || [[event charactersIgnoringModifiers] isEqualToString:@"\r"]) {
+            [self commitTextEditor];
+            return;
+        }
+    }
+    if ([event keyCode] == 53 || [[event charactersIgnoringModifiers] isEqualToString:@"\033"]) {
+        [self cancelSelection];
+    } else if (([event keyCode] == 36 || [[event charactersIgnoringModifiers] isEqualToString:@"\r"]) && _hasSelection) {
+        [self confirmSelection];
+    } else {
+        [super keyDown:event];
+    }
+}
+
+- (void)rightMouseDown:(NSEvent *)event {
+    [self cancelSelection];
+}
+
+- (void)syncControls {
+    BOOL visible = _hasSelection && _selection.size.width >= 4 && _selection.size.height >= 4;
+    [_cancelButton setHidden:!visible];
+    [_clipboardButton setHidden:!visible];
+    [_saveButton setHidden:!visible];
+    [_saveRemoteButton setHidden:!visible];
+    [_ftpButton setHidden:!visible];
+    [_ocrButton setHidden:!visible];
+    [_summaryButton setHidden:!visible];
+    [_uploadButton setHidden:!visible];
+    [_actionToolbarBg setHidden:!visible];
+    [_penButton setHidden:!visible];
+    [_lineButton setHidden:!visible];
+    [_arrowButton setHidden:!visible];
+    [_rectButton setHidden:!visible];
+    [_ellipseButton setHidden:!visible];
+    [_textButton setHidden:!visible];
+    [_mosaicButton setHidden:!visible];
+    [_undoButton setHidden:!visible];
+    [_toolSettingsView setHidden:!visible || _activeTool == nil];
+    [_sizeLabel setHidden:!visible];
+    [_hintLabel setHidden:_hasSelection];
+
+    if (!visible) {
+        return;
+    }
+
+    [_sizeLabel setStringValue:[NSString stringWithFormat:@"%.0f × %.0f", _selection.size.width, _selection.size.height]];
+    [_sizeLabel setFrame:NSMakeRect(_selection.origin.x, MAX(0, _selection.origin.y - 26), 110, 22)];
+
+    // Action toolbar layout — 8 icon buttons, each 28x28, separated by 8px,
+    // with 4px outer padding. Total = 8*28 + 7*8 + 2*4 = 288px wide.
+    CGFloat actionBtnSize = 28;
+    CGFloat actionGap = 8;
+    CGFloat actionPad = 4;
+    NSInteger actionCount = 8;
+    CGFloat toolbarW = actionPad * 2 + actionBtnSize * actionCount + actionGap * (actionCount - 1);
+    CGFloat toolbarH = 40;
+    CGFloat x = _selection.origin.x + _selection.size.width - toolbarW;
+    CGFloat y = _selection.origin.y + _selection.size.height + 8;
+    if (y + toolbarH > self.bounds.size.height) {
+        y = _selection.origin.y + _selection.size.height - toolbarH - 8;
+    }
+    x = MAX(0, MIN(x, self.bounds.size.width - toolbarW));
+
+    [_actionToolbarBg setFrame:NSMakeRect(x, y, toolbarW, toolbarH)];
+
+    CGFloat btnY = y + (toolbarH - actionBtnSize) / 2;
+    CGFloat baseX = x + actionPad;
+    [_cancelButton     setFrame:NSMakeRect(baseX + (actionBtnSize + actionGap) * 0, btnY, actionBtnSize, actionBtnSize)];
+    [_clipboardButton  setFrame:NSMakeRect(baseX + (actionBtnSize + actionGap) * 1, btnY, actionBtnSize, actionBtnSize)];
+    [_saveButton       setFrame:NSMakeRect(baseX + (actionBtnSize + actionGap) * 2, btnY, actionBtnSize, actionBtnSize)];
+    [_saveRemoteButton setFrame:NSMakeRect(baseX + (actionBtnSize + actionGap) * 3, btnY, actionBtnSize, actionBtnSize)];
+    [_ftpButton        setFrame:NSMakeRect(baseX + (actionBtnSize + actionGap) * 4, btnY, actionBtnSize, actionBtnSize)];
+    [_ocrButton        setFrame:NSMakeRect(baseX + (actionBtnSize + actionGap) * 5, btnY, actionBtnSize, actionBtnSize)];
+    [_summaryButton    setFrame:NSMakeRect(baseX + (actionBtnSize + actionGap) * 6, btnY, actionBtnSize, actionBtnSize)];
+    [_uploadButton     setFrame:NSMakeRect(baseX + (actionBtnSize + actionGap) * 7, btnY, actionBtnSize, actionBtnSize)];
+
+    // Mark toolbar sits to the LEFT of the action toolbar (same row) with an
+    // 8px gap between the two groups, so they never overlap on tiny selections.
+    CGFloat markW = 280;
+    CGFloat markGap = 8;
+    CGFloat markX = MAX(0, x - markGap - markW);
+    [_penButton setFrame:NSMakeRect(markX + 4, y + 4, 28, 28)];
+    [_lineButton setFrame:NSMakeRect(markX + 38, y + 4, 28, 28)];
+    [_arrowButton setFrame:NSMakeRect(markX + 72, y + 4, 28, 28)];
+    [_rectButton setFrame:NSMakeRect(markX + 106, y + 4, 28, 28)];
+    [_ellipseButton setFrame:NSMakeRect(markX + 140, y + 4, 28, 28)];
+    [_textButton setFrame:NSMakeRect(markX + 174, y + 4, 28, 28)];
+    [_mosaicButton setFrame:NSMakeRect(markX + 208, y + 4, 28, 28)];
+    [_undoButton setFrame:NSMakeRect(markX + 246, y + 4, 28, 28)];
+    [_undoButton setEnabled:YES];
+    [[_undoButton layer] setOpacity:_annotations.count > 0 ? 1.0 : 0.35];
+
+    if (_activeTool != nil) {
+        BOOL isText = [_activeTool isEqualToString:@"text"];
+        BOOL isMosaic = [_activeTool hasPrefix:@"mosaic-"];
+        BOOL mosaicBrush = [_mosaicMode isEqualToString:@"brush"];
+        CGFloat settingsW = isMosaic ? (mosaicBrush ? 304 : 112) : (isText ? 462 : 398);
+        CGFloat settingsH = 58;
+        CGFloat settingsX = MAX(8, MIN(markX, self.bounds.size.width - settingsW - 8));
+        CGFloat settingsY = y + toolbarH + 4;
+        if (settingsY + settingsH > self.bounds.size.height) {
+            settingsY = y - settingsH - 8;
+        }
+        CGFloat activeCenter = markX + 18;
+        if ([_activeTool isEqualToString:@"line"]) activeCenter = markX + 52;
+        if ([_activeTool isEqualToString:@"arrow"]) activeCenter = markX + 86;
+        if ([_activeTool isEqualToString:@"rect"]) activeCenter = markX + 120;
+        if ([_activeTool isEqualToString:@"ellipse"]) activeCenter = markX + 154;
+        if ([_activeTool isEqualToString:@"text"]) activeCenter = markX + 188;
+        if (isMosaic) activeCenter = markX + 222;
+        [_toolSettingsView setFrame:NSMakeRect(settingsX, settingsY, settingsW, settingsH)];
+        [_toolSettingsView setArrowX:MAX(18, MIN(activeCenter - settingsX, settingsW - 18))];
+        [_toolSettingsView setNeedsDisplay:YES];
+
+        CGFloat contentY = 18;
+        CGFloat xCursor = 14;
+        for (NSButton *button in _strokeSettingButtons) {
+            [button setHidden:isText || isMosaic];
+            [button setFrame:NSMakeRect(xCursor, contentY, 32, 32)];
+            xCursor += 42;
+        }
+        xCursor = 14;
+        for (NSButton *button in _fontSettingButtons) {
+            [button setHidden:!isText || isMosaic];
+            [button setFrame:NSMakeRect(xCursor, contentY, 40, 32)];
+            xCursor += 48;
+        }
+        for (NSUInteger i = 0; i < _mosaicModeButtons.count; i++) {
+            NSButton *button = _mosaicModeButtons[i];
+            [button setHidden:!isMosaic];
+            [button setFrame:NSMakeRect(14 + i * 38, contentY + 1, 36, 30)];
+        }
+        for (NSUInteger i = 0; i < _mosaicWidthButtons.count; i++) {
+            NSButton *button = _mosaicWidthButtons[i];
+            [button setHidden:!isMosaic || !mosaicBrush];
+            [button setFrame:NSMakeRect(122 + i * 42, contentY, 32, 32)];
+        }
+        CGFloat groupW = isText ? (4 * 40 + 3 * 8) : (3 * 32 + 2 * 10);
+        CGFloat dividerX = 14 + groupW + 12;
+        [_settingsDivider setHidden:isMosaic && !mosaicBrush];
+        if (isMosaic) dividerX = 102;
+        [_settingsDivider setFrame:NSMakeRect(dividerX, contentY + 3, 1, 26)];
+        CGFloat colorX = dividerX + 18;
+        for (NSButton *button in _colorSettingButtons) {
+            [button setHidden:isMosaic];
+            [button setFrame:NSMakeRect(colorX, contentY + 5, 22, 22)];
+            colorX += 34;
+        }
+    }
+    [self updateToolButtonStates];
+}
+
+- (void)updateToolButtonStates {
+    NSDictionary *buttons = @{@"pen": _penButton, @"line": _lineButton, @"arrow": _arrowButton, @"rect": _rectButton, @"ellipse": _ellipseButton, @"text": _textButton};
+    for (NSString *tool in buttons) {
+        NSButton *button = buttons[tool];
+        NSColor *bg = [tool isEqualToString:_activeTool]
+            ? [NSColor colorWithCalibratedWhite:1.0 alpha:0.14]
+            : [NSColor clearColor];
+        [[button layer] setBackgroundColor:[bg CGColor]];
+    }
+    BOOL mosaicActive = [_activeTool hasPrefix:@"mosaic-"];
+    [[_mosaicButton layer] setBackgroundColor:[(mosaicActive ? [NSColor colorWithCalibratedWhite:1.0 alpha:0.14] : [NSColor clearColor]) CGColor]];
+    [self updateToolSettingsStates];
+}
+
+- (void)updateToolSettingsStates {
+    NSColor *activeBg = [NSColor colorWithCalibratedRed:234.0/255.0 green:241.0/255.0 blue:1.0 alpha:1.0];
+    NSColor *clear = [NSColor clearColor];
+    NSColor *activeFg = [NSColor colorWithCalibratedRed:37.0/255.0 green:99.0/255.0 blue:235.0/255.0 alpha:1.0];
+    NSColor *normalFg = [NSColor colorWithCalibratedWhite:0.12 alpha:1.0];
+
+    for (NSButton *button in _strokeSettingButtons) {
+        BOOL active = fabs((CGFloat)button.tag - _activeStrokeWidth) < 0.1;
+        [[button layer] setBackgroundColor:[(active ? activeBg : clear) CGColor]];
+        NSMutableAttributedString *title = [[button attributedTitle] mutableCopy];
+        if (title.length > 0) {
+            [title addAttribute:NSForegroundColorAttributeName value:(active ? activeFg : normalFg) range:NSMakeRange(0, title.length)];
+            [button setAttributedTitle:title];
+        }
+    }
+    for (NSButton *button in _fontSettingButtons) {
+        BOOL active = fabs((CGFloat)button.tag - _activeFontSize) < 0.1;
+        [[button layer] setBackgroundColor:[(active ? activeBg : clear) CGColor]];
+        NSMutableAttributedString *title = [[button attributedTitle] mutableCopy];
+        if (title.length > 0) {
+            [title addAttribute:NSForegroundColorAttributeName value:(active ? activeFg : normalFg) range:NSMakeRange(0, title.length)];
+            [button setAttributedTitle:title];
+        }
+    }
+    for (NSButton *button in _mosaicModeButtons) {
+        BOOL active = (button.tag == 0 && [_mosaicMode isEqualToString:@"brush"]) || (button.tag == 1 && [_mosaicMode isEqualToString:@"rect"]);
+        [self styleButton:button background:(active ? [NSColor whiteColor] : clear) foreground:(active ? activeFg : normalFg)];
+        if (@available(macOS 10.14, *)) {
+            [button setContentTintColor:(active ? activeFg : normalFg)];
+        }
+        [button setAccessibilityValue:(active ? @"已选择" : @"未选择")];
+    }
+    for (NSButton *button in _mosaicWidthButtons) {
+        BOOL active = fabs((CGFloat)button.tag - _mosaicBrushWidth) < 0.1;
+        [[button layer] setBackgroundColor:[(active ? activeBg : clear) CGColor]];
+        NSMutableAttributedString *title = [[button attributedTitle] mutableCopy];
+        if (title.length > 0) {
+            [title addAttribute:NSForegroundColorAttributeName value:(active ? activeFg : normalFg) range:NSMakeRange(0, title.length)];
+            [button setAttributedTitle:title];
+        }
+    }
+
+    NSString *activeHex = [self hexForColor:_activeColor];
+    NSArray *colors = objc_getAssociatedObject(_toolSettingsView, "snapgoColors");
+    for (NSUInteger i = 0; i < _colorSettingButtons.count; i++) {
+        NSButton *button = _colorSettingButtons[i];
+        NSString *hex = i < colors.count ? [self hexForColor:colors[i]] : @"";
+        BOOL active = [hex isEqualToString:activeHex];
+        [[button layer] setBorderWidth:active ? 2 : 1];
+        [[button layer] setBorderColor:[(active ? activeFg : [NSColor colorWithCalibratedWhite:0.12 alpha:0.22]) CGColor]];
+    }
+}
+
+- (void)selectTool:(NSString *)tool {
+    _activeTool = tool;
+    [self syncControls];
+}
+- (void)selectPen { [self selectTool:@"pen"]; }
+- (void)selectLine { [self selectTool:@"line"]; }
+- (void)selectArrow { [self selectTool:@"arrow"]; }
+- (void)selectRect { [self selectTool:@"rect"]; }
+- (void)selectEllipse { [self selectTool:@"ellipse"]; }
+- (void)selectText { [self selectTool:@"text"]; }
+- (void)selectMosaic { [self selectTool:[_mosaicMode isEqualToString:@"brush"] ? @"mosaic-brush" : @"mosaic-rect"]; }
+- (void)undoAnnotation {
+    if (_annotations.count == 0 && _textEditor == nil) {
+        return;
+    }
+    [self cancelTextEditor];
+    if (_annotations.count == 0) {
+        [self syncControls];
+        [self setNeedsDisplay:YES];
+        return;
+    }
+    [_annotations removeLastObject];
+    if (_selectedTextAnnotationIndex >= (NSInteger)_annotations.count) {
+        _selectedTextAnnotationIndex = -1;
+    }
+    [self syncControls];
+    [self setNeedsDisplay:YES];
+}
+
+- (void)beginTextAnnotationAtPoint:(NSPoint)localPoint {
+    [self beginTextEditorAtLocalPoint:localPoint text:@"" color:_activeColor annotationIndex:-1];
+}
+
+- (void)beginEditingTextAnnotationAtIndex:(NSInteger)index {
+    if (index < 0 || index >= (NSInteger)_annotations.count) {
+        return;
+    }
+    NSDictionary *item = _annotations[(NSUInteger)index];
+    if (![item[@"tool"] isEqualToString:@"text"]) {
+        return;
+    }
+    NSArray *points = item[@"points"];
+    if (points.count == 0) {
+        return;
+    }
+    NSColor *color = item[@"nsColor"] ?: _activeColor;
+    _activeColor = color;
+    _activeFontSize = [self fontSizeForTextItem:item];
+    [self beginTextEditorAtLocalPoint:[points[0] pointValue]
+                                 text:item[@"text"] ?: @""
+                                color:color
+                      annotationIndex:index];
+}
+
+- (void)beginTextEditorAtLocalPoint:(NSPoint)localPoint text:(NSString *)text color:(NSColor *)color annotationIndex:(NSInteger)index {
+    [self cancelTextEditor];
+    CGFloat fontSize = _activeFontSize;
+    if (index >= 0 && index < (NSInteger)_annotations.count) {
+        fontSize = [self fontSizeForTextItem:_annotations[(NSUInteger)index]];
+        _activeFontSize = fontSize;
+    }
+    NSPoint clampedLocal = [self clampedTextLocalPoint:localPoint text:text fontSize:fontSize];
+    _textEditorLocalPoint = clampedLocal;
+    _textEditorAnnotationIndex = index;
+    _textEditorColor = color ?: _activeColor;
+
+    NSRect frame = [self textEditorFrameForLocalPoint:clampedLocal text:text fontSize:fontSize];
+    _textEditorLocalPoint = [self localPoint:frame.origin];
+
+    _textEditor = [[NSTextField alloc] initWithFrame:frame];
+    [_textEditor setBezeled:YES];
+    [_textEditor setBordered:YES];
+    [_textEditor setDrawsBackground:YES];
+    [_textEditor setBackgroundColor:[NSColor colorWithCalibratedWhite:0.08 alpha:0.78]];
+    [_textEditor setTextColor:_textEditorColor];
+    [_textEditor setFont:[NSFont systemFontOfSize:fontSize weight:NSFontWeightSemibold]];
+    [_textEditor setStringValue:text ?: @""];
+    [_textEditor setFocusRingType:NSFocusRingTypeNone];
+    [_textEditor setTarget:self];
+    [_textEditor setAction:@selector(commitTextEditorFromSender:)];
+    [self addSubview:_textEditor];
+    [[self window] makeFirstResponder:_textEditor];
+    [_textEditor selectText:nil];
+}
+
+- (BOOL)isEditingText {
+    return _textEditor != nil;
+}
+
+- (void)commitTextEditorFromSender:(id)sender {
+    [self commitTextEditor];
+}
+
+- (void)commitTextEditor {
+    if (_textEditor == nil) {
+        return;
+    }
+    NSString *text = [[_textEditor stringValue] stringByTrimmingCharactersInSet:[NSCharacterSet whitespaceAndNewlineCharacterSet]];
+    NSColor *textColor = _textEditorColor ?: _activeColor;
+    if (_textEditorAnnotationIndex >= 0 && _textEditorAnnotationIndex < (NSInteger)_annotations.count) {
+        if (text.length > 0) {
+            NSMutableDictionary *item = (NSMutableDictionary *)_annotations[(NSUInteger)_textEditorAnnotationIndex];
+            item[@"color"] = [self hexForColor:textColor];
+            item[@"nsColor"] = textColor;
+            item[@"points"] = [NSMutableArray arrayWithObject:[NSValue valueWithPoint:_textEditorLocalPoint]];
+            item[@"text"] = text;
+            item[@"fontSize"] = @(_activeFontSize);
+            _selectedTextAnnotationIndex = _textEditorAnnotationIndex;
+        } else {
+            [_annotations removeObjectAtIndex:(NSUInteger)_textEditorAnnotationIndex];
+            _selectedTextAnnotationIndex = -1;
+        }
+    } else if (text.length > 0) {
+        [_annotations addObject:[@{
+            @"tool": @"text",
+            @"color": [self hexForColor:textColor],
+            @"nsColor": textColor,
+            @"points": [NSMutableArray arrayWithObject:[NSValue valueWithPoint:_textEditorLocalPoint]],
+            @"text": text,
+            @"fontSize": @(_activeFontSize)
+        } mutableCopy]];
+        _selectedTextAnnotationIndex = (NSInteger)_annotations.count - 1;
+    }
+    [_textEditor removeFromSuperview];
+    _textEditor = nil;
+    _textEditorAnnotationIndex = -1;
+    _textEditorColor = nil;
+    [[self window] makeFirstResponder:self];
+    [self syncControls];
+    [self setNeedsDisplay:YES];
+}
+
+- (void)cancelTextEditor {
+    if (_textEditor == nil) {
+        return;
+    }
+    [_textEditor removeFromSuperview];
+    _textEditor = nil;
+    _textEditorAnnotationIndex = -1;
+    _textEditorColor = nil;
+    [[self window] makeFirstResponder:self];
+    [self setNeedsDisplay:YES];
+}
+
+- (void)selectStrokeWidth:(NSButton *)sender {
+    _activeStrokeWidth = MAX(1.0, (CGFloat)sender.tag);
+    [self updateToolSettingsStates];
+}
+
+- (void)selectMosaicMode:(NSButton *)sender {
+    _mosaicMode = sender.tag == 0 ? @"brush" : @"rect";
+    [self selectMosaic];
+}
+
+- (void)selectMosaicWidth:(NSButton *)sender {
+    _mosaicBrushWidth = MAX(8.0, (CGFloat)sender.tag);
+    [self updateToolSettingsStates];
+}
+
+- (void)selectFontSize:(NSButton *)sender {
+    _activeFontSize = MAX(8.0, (CGFloat)sender.tag);
+    if (_textEditor != nil) {
+        [_textEditor setFont:[NSFont systemFontOfSize:_activeFontSize weight:NSFontWeightSemibold]];
+        [self resizeTextEditorForCurrentFont];
+    } else if ([_activeTool isEqualToString:@"text"] && _selectedTextAnnotationIndex >= 0 && _selectedTextAnnotationIndex < (NSInteger)_annotations.count) {
+        NSMutableDictionary *item = (NSMutableDictionary *)_annotations[(NSUInteger)_selectedTextAnnotationIndex];
+        item[@"fontSize"] = @(_activeFontSize);
+        NSMutableArray *points = (NSMutableArray *)item[@"points"];
+        if (points.count > 0) {
+            NSString *text = item[@"text"] ?: @"";
+            NSPoint p = [points[0] pointValue];
+            points[0] = [NSValue valueWithPoint:[self clampedTextLocalPoint:p text:text fontSize:_activeFontSize]];
+        }
+        [self setNeedsDisplay:YES];
+    }
+    [self syncControls];
+}
+
+- (void)selectToolColor:(NSButton *)sender {
+    NSArray *colors = objc_getAssociatedObject(_toolSettingsView, "snapgoColors");
+    if (sender.tag >= 0 && sender.tag < (NSInteger)colors.count) {
+        _activeColor = colors[(NSUInteger)sender.tag];
+        if (_textEditor != nil) {
+            _textEditorColor = _activeColor;
+            [_textEditor setTextColor:_activeColor];
+        } else if ([_activeTool isEqualToString:@"text"] && _selectedTextAnnotationIndex >= 0 && _selectedTextAnnotationIndex < (NSInteger)_annotations.count) {
+            NSMutableDictionary *item = (NSMutableDictionary *)_annotations[(NSUInteger)_selectedTextAnnotationIndex];
+            item[@"color"] = [self hexForColor:_activeColor];
+            item[@"nsColor"] = _activeColor;
+            [self setNeedsDisplay:YES];
+        }
+        [self updateToolSettingsStates];
+    }
+}
+
+- (NSString *)annotationsJSON {
+    [self commitTextEditor];
+    NSMutableArray *payload = [NSMutableArray array];
+    for (NSDictionary *item in _annotations) {
+        NSMutableArray *points = [NSMutableArray array];
+        for (NSValue *value in item[@"points"]) {
+            NSPoint p = [value pointValue];
+            [points addObject:@{@"x": @(p.x), @"y": @(p.y)}];
+        }
+        NSMutableDictionary *entry = [@{@"tool": item[@"tool"], @"color": item[@"color"], @"points": points} mutableCopy];
+        NSString *text = item[@"text"];
+        if (text.length > 0) {
+            entry[@"text"] = text;
+            entry[@"fontSize"] = item[@"fontSize"] ?: @20.0;
+        } else {
+            entry[@"strokeWidth"] = item[@"strokeWidth"] ?: @3.0;
+        }
+        [payload addObject:entry];
+    }
+    NSData *data = [NSJSONSerialization dataWithJSONObject:payload options:0 error:nil];
+    if (data == nil) {
+        return @"[]";
+    }
+    return [[NSString alloc] initWithData:data encoding:NSUTF8StringEncoding];
+}
+
+- (void)closeOverlayWindow {
+    [nativeOverlayWindow orderOut:nil];
+    if (nativeOverlayKeyMonitor != nil) {
+        [NSEvent removeMonitor:nativeOverlayKeyMonitor];
+        nativeOverlayKeyMonitor = nil;
+    }
+    nativeOverlayWindow = nil;
+}
+
+- (void)confirmSelection {
+    if (!_hasSelection) {
+        return;
+    }
+    NSRect r = [self globalRectForSelection:_selection];
+    NSString *json = [self annotationsJSON];
+    [self closeOverlayWindow];
+    nativeOverlayConfirm((int)llround(r.origin.x), (int)llround(r.origin.y), (int)llround(r.size.width), (int)llround(r.size.height), [json UTF8String]);
+}
+
+- (void)copySelection {
+    if (!_hasSelection) {
+        return;
+    }
+    NSRect r = [self globalRectForSelection:_selection];
+    NSString *json = [self annotationsJSON];
+    [self closeOverlayWindow];
+    nativeOverlayCopy((int)llround(r.origin.x), (int)llround(r.origin.y), (int)llround(r.size.width), (int)llround(r.size.height), [json UTF8String]);
+}
+
+- (void)saveSelection {
+    if (!_hasSelection) {
+        return;
+    }
+    NSRect r = [self globalRectForSelection:_selection];
+    NSString *json = [self annotationsJSON];
+    [self closeOverlayWindow];
+
+    NSOpenPanel *panel = [NSOpenPanel openPanel];
+    [panel setTitle:@"Save screenshot to folder"];
+    [panel setCanChooseFiles:NO];
+    [panel setCanChooseDirectories:YES];
+    [panel setAllowsMultipleSelection:NO];
+    [panel setCanCreateDirectories:YES];
+    [panel beginWithCompletionHandler:^(NSModalResponse result) {
+        if (result != NSModalResponseOK || [panel URL] == nil) {
+            nativeOverlayCancel();
+            return;
+        }
+        NSString *dir = [[panel URL] path];
+        nativeOverlaySave((int)llround(r.origin.x), (int)llround(r.origin.y), (int)llround(r.size.width), (int)llround(r.size.height), [json UTF8String], [dir UTF8String]);
+    }];
+}
+
+- (void)cancelSelection {
+    [self cancelTextEditor];
+    [self closeOverlayWindow];
+    nativeOverlayCancel();
+}
+
+// `saveRemoteSelection` triggers the SCP upload flow. The overlay closes
+// immediately so the user can keep working while the transfer runs in the
+// background; success / failure surfaces through the regular Toast events.
+- (void)saveRemoteSelection {
+    if (!_hasSelection) {
+        return;
+    }
+    NSRect r = [self globalRectForSelection:_selection];
+    NSString *json = [self annotationsJSON];
+    [self closeOverlayWindow];
+    nativeOverlaySaveRemote((int)llround(r.origin.x), (int)llround(r.origin.y), (int)llround(r.size.width), (int)llround(r.size.height), [json UTF8String]);
+}
+
+// `uploadFTPSelection` dispatches the dedicated FTP/SFTP upload action.
+- (void)uploadFTPSelection {
+    if (!_hasSelection) {
+        return;
+    }
+    NSRect r = [self globalRectForSelection:_selection];
+    NSString *json = [self annotationsJSON];
+    [self closeOverlayWindow];
+    nativeOverlayUploadFTP((int)llround(r.origin.x), (int)llround(r.origin.y), (int)llround(r.size.width), (int)llround(r.size.height), [json UTF8String]);
+}
+
+// `ocrSelection` sends the screenshot to the configured OCR provider and
+// copies the extracted text.
+- (void)ocrSelection {
+    if (!_hasSelection) {
+        return;
+    }
+    NSRect r = [self globalRectForSelection:_selection];
+    NSString *json = [self annotationsJSON];
+    [self closeOverlayWindow];
+    nativeOverlayOCR((int)llround(r.origin.x), (int)llround(r.origin.y), (int)llround(r.size.width), (int)llround(r.size.height), [json UTF8String]);
+}
+
+// `summarizeSelection` uploads the screenshot to S3, sends it to the
+// configured multimodal model, and copies the generated summary.
+- (void)summarizeSelection {
+    if (!_hasSelection) {
+        return;
+    }
+    NSRect r = [self globalRectForSelection:_selection];
+    NSString *json = [self annotationsJSON];
+    [self closeOverlayWindow];
+    nativeOverlaySummarize((int)llround(r.origin.x), (int)llround(r.origin.y), (int)llround(r.size.width), (int)llround(r.size.height), [json UTF8String]);
+}
+@end
+
+// screenContainingCursor returns the NSScreen the cursor is currently on,
+// falling back to the main screen and then the first attached screen.
+//
+// Rationale: when an external display is attached, users expect the capture
+// overlay to appear on whichever display they were just working on.
+// `[NSEvent mouseLocation]` reports the cursor in the same global Cocoa
+// (bottom-left-origin) screen space used by `NSScreen.frame`, so a simple
+// `NSPointInRect` test against each screen's frame yields the right one.
+// Iteration over `[NSScreen screens]` is cheap (typically <=4 displays).
+static NSScreen *snipScreenContainingCursor(void) {
+    NSPoint cursor = [NSEvent mouseLocation];
+    for (NSScreen *candidate in [NSScreen screens]) {
+        if (NSPointInRect(cursor, [candidate frame])) {
+            return candidate;
+        }
+    }
+    NSScreen *fallback = [NSScreen mainScreen];
+    if (fallback != nil) {
+        return fallback;
+    }
+    return [[NSScreen screens] firstObject];
+}
+
+// snipMosaicPreviewImage captures the target display before the transparent
+// overlay becomes visible, then downsamples it to one sample per 10 logical
+// points. The view scales this tiny image back with nearest-neighbour
+// interpolation inside each mosaic mask, yielding stable, screen-derived
+// pixel blocks while the pointer is moving.
+static NSImage *snipMosaicPreviewImage(NSScreen *screen) {
+    NSSize fullSize = [screen frame].size;
+    NSUInteger screenIndex = [[NSScreen screens] indexOfObjectIdenticalTo:screen];
+    if (screenIndex == NSNotFound) screenIndex = 0;
+    NSString *temporaryPath = [NSTemporaryDirectory() stringByAppendingPathComponent:
+        [NSString stringWithFormat:@"snapgo-mosaic-%@.png", [[NSUUID UUID] UUIDString]]];
+    NSTask *captureTask = [[NSTask alloc] init];
+    [captureTask setExecutableURL:[NSURL fileURLWithPath:@"/usr/sbin/screencapture"]];
+    [captureTask setArguments:@[@"-x", @"-D", [NSString stringWithFormat:@"%lu", (unsigned long)screenIndex + 1], temporaryPath]];
+    NSError *launchError = nil;
+    if (![captureTask launchAndReturnError:&launchError]) return nil;
+    [captureTask waitUntilExit];
+    NSImage *fullImage = [[NSImage alloc] initWithContentsOfFile:temporaryPath];
+    [[NSFileManager defaultManager] removeItemAtPath:temporaryPath error:nil];
+    if ([captureTask terminationStatus] != 0 || fullImage == nil) return nil;
+
+    NSInteger pixelW = MAX(1, (NSInteger)ceil(fullSize.width / 10.0));
+    NSInteger pixelH = MAX(1, (NSInteger)ceil(fullSize.height / 10.0));
+    NSBitmapImageRep *bitmap = [[NSBitmapImageRep alloc]
+        initWithBitmapDataPlanes:NULL
+                      pixelsWide:pixelW
+                      pixelsHigh:pixelH
+                   bitsPerSample:8
+                 samplesPerPixel:4
+                        hasAlpha:YES
+                        isPlanar:NO
+                  colorSpaceName:NSCalibratedRGBColorSpace
+                     bytesPerRow:0
+                    bitsPerPixel:0];
+    if (bitmap == nil) return nil;
+
+    NSGraphicsContext *context = [NSGraphicsContext graphicsContextWithBitmapImageRep:bitmap];
+    [NSGraphicsContext saveGraphicsState];
+    [NSGraphicsContext setCurrentContext:context];
+    [context setImageInterpolation:NSImageInterpolationHigh];
+    [fullImage drawInRect:NSMakeRect(0, 0, pixelW, pixelH)
+                 fromRect:NSMakeRect(0, 0, fullSize.width, fullSize.height)
+                operation:NSCompositingOperationCopy
+                 fraction:1.0
+           respectFlipped:NO
+                    hints:nil];
+    [context flushGraphics];
+    [NSGraphicsContext restoreGraphicsState];
+
+    NSImage *result = [[NSImage alloc] initWithSize:NSMakeSize(pixelW, pixelH)];
+    [result addRepresentation:bitmap];
+    return result;
+}
+
+static void snipShowNativeOverlay(int width, int height) {
+    dispatch_async(dispatch_get_main_queue(), ^{
+        NSScreen *screen = snipScreenContainingCursor();
+        if (screen == nil) {
+            nativeOverlayCancel();
+            return;
+        }
+
+        NSRect frame = [screen frame];
+        NSImage *mosaicPreview = snipMosaicPreviewImage(screen);
+        [NSApp activateIgnoringOtherApps:YES];
+
+        nativeOverlayWindow = [[SnipNativeOverlayPanel alloc]
+            initWithContentRect:frame
+                      styleMask:NSWindowStyleMaskBorderless
+                        backing:NSBackingStoreBuffered
+                          defer:NO];
+        [nativeOverlayWindow setOpaque:NO];
+        [nativeOverlayWindow setBackgroundColor:[NSColor clearColor]];
+        [nativeOverlayWindow setLevel:NSScreenSaverWindowLevel];
+        [nativeOverlayWindow setHidesOnDeactivate:NO];
+        [(NSPanel *)nativeOverlayWindow setFloatingPanel:YES];
+        [nativeOverlayWindow setCollectionBehavior:
+            NSWindowCollectionBehaviorCanJoinAllSpaces |
+            NSWindowCollectionBehaviorFullScreenAuxiliary |
+            NSWindowCollectionBehaviorStationary];
+        [nativeOverlayWindow setIgnoresMouseEvents:NO];
+
+        SnipNativeOverlayView *view = [[SnipNativeOverlayView alloc]
+            initWithFrame:NSMakeRect(0, 0, frame.size.width, frame.size.height)];
+        [view setMosaicPreviewImage:mosaicPreview];
+        [nativeOverlayWindow setContentView:view];
+        [nativeOverlayWindow makeKeyAndOrderFront:nil];
+        [nativeOverlayWindow makeFirstResponder:view];
+
+        nativeOverlayKeyMonitor = [NSEvent addLocalMonitorForEventsMatchingMask:NSEventMaskKeyDown handler:^NSEvent *(NSEvent *event) {
+            if ([event keyCode] == 53) {
+                if ([view isEditingText]) {
+                    [view cancelTextEditor];
+                    return nil;
+                }
+                [view cancelSelection];
+                return nil;
+            }
+            if ([event keyCode] == 36 && [view hasSelection]) {
+                if ([view isEditingText]) {
+                    [view commitTextEditor];
+                    return nil;
+                }
+                [view confirmSelection];
+                return nil;
+            }
+            return event;
+        }];
+    });
+}
+*/
+import "C"
+import (
+	"sync"
+
+	"github.com/mmmy/snapgo/internal/infrastructure/display"
+)
+
+var nativeOverlayState struct {
+	sync.Mutex
+	app *App
+}
+
+// showNativeCaptureOverlay uses a macOS-native transparent panel instead of
+// the Wails WebView overlay, avoiding WKWebView's opaque grey backing layer.
+func showNativeCaptureOverlay(app *App, info display.Info) bool {
+	nativeOverlayState.Lock()
+	nativeOverlayState.app = app
+	nativeOverlayState.Unlock()
+	C.snipShowNativeOverlay(C.int(info.CSSWidth), C.int(info.CSSHeight))
+	return true
+}
diff --git a/native_overlay_other.go b/native_overlay_other.go
new file mode 100644
index 0000000..5ba2fe7
--- /dev/null
+++ b/native_overlay_other.go
@@ -0,0 +1,11 @@
+//go:build !darwin
+
+package main
+
+import "github.com/mmmy/snapgo/internal/infrastructure/display"
+
+// showNativeCaptureOverlay is only implemented on macOS. Other platforms
+// keep using the Wails WebView overlay fallback.
+func showNativeCaptureOverlay(_ *App, _ display.Info) bool {
+	return false
+}
diff --git a/operation_status_darwin.go b/operation_status_darwin.go
new file mode 100644
index 0000000..4de9698
--- /dev/null
+++ b/operation_status_darwin.go
@@ -0,0 +1,163 @@
+//go:build darwin
+
+package main
+
+/*
+#cgo CFLAGS: -x objective-c -fobjc-arc -fblocks
+#cgo LDFLAGS: -framework AppKit -framework QuartzCore
+#include <stdlib.h>
+#include <dispatch/dispatch.h>
+#import <AppKit/AppKit.h>
+#import <QuartzCore/QuartzCore.h>
+
+static NSPanel *operationPanel = nil;
+static NSTextField *operationTitleLabel = nil;
+static NSTextField *operationDetailLabel = nil;
+static NSTextField *operationIconLabel = nil;
+static NSProgressIndicator *operationSpinner = nil;
+
+static NSString *statusString(const char *value) {
+    if (value == NULL) {
+        return @"";
+    }
+    NSString *text = [NSString stringWithUTF8String:value];
+    return text ?: @"";
+}
+
+static void ensureOperationPanel(void) {
+    if (operationPanel != nil) {
+        return;
+    }
+
+    NSRect frame = NSMakeRect(0, 0, 360, 118);
+    operationPanel = [[NSPanel alloc]
+        initWithContentRect:frame
+                  styleMask:NSWindowStyleMaskBorderless
+                    backing:NSBackingStoreBuffered
+                      defer:NO];
+    [operationPanel setOpaque:NO];
+    [operationPanel setBackgroundColor:[NSColor clearColor]];
+    [operationPanel setLevel:NSFloatingWindowLevel];
+    [operationPanel setHidesOnDeactivate:NO];
+    [operationPanel setCollectionBehavior:
+        NSWindowCollectionBehaviorCanJoinAllSpaces |
+        NSWindowCollectionBehaviorFullScreenAuxiliary |
+        NSWindowCollectionBehaviorStationary];
+
+    NSView *root = [[NSView alloc] initWithFrame:frame];
+    [root setWantsLayer:YES];
+    [[root layer] setCornerRadius:14];
+    [[root layer] setBackgroundColor:[[NSColor colorWithCalibratedWhite:0.08 alpha:0.92] CGColor]];
+    [[root layer] setShadowColor:[[NSColor blackColor] CGColor]];
+    [[root layer] setShadowOpacity:0.28];
+    [[root layer] setShadowRadius:18];
+    [[root layer] setShadowOffset:CGSizeMake(0, -8)];
+
+    operationSpinner = [[NSProgressIndicator alloc] initWithFrame:NSMakeRect(24, 42, 34, 34)];
+    [operationSpinner setStyle:NSProgressIndicatorStyleSpinning];
+    [operationSpinner setIndeterminate:YES];
+
+    operationIconLabel = [NSTextField labelWithString:@"OK"];
+    [operationIconLabel setFrame:NSMakeRect(21, 43, 42, 30)];
+    [operationIconLabel setAlignment:NSTextAlignmentCenter];
+    [operationIconLabel setFont:[NSFont systemFontOfSize:17 weight:NSFontWeightSemibold]];
+    [operationIconLabel setTextColor:[NSColor colorWithCalibratedRed:74.0/255.0 green:222.0/255.0 blue:128.0/255.0 alpha:1.0]];
+    [operationIconLabel setHidden:YES];
+
+    operationTitleLabel = [NSTextField labelWithString:@""];
+    [operationTitleLabel setFrame:NSMakeRect(76, 61, 260, 24)];
+    [operationTitleLabel setFont:[NSFont systemFontOfSize:15 weight:NSFontWeightSemibold]];
+    [operationTitleLabel setTextColor:[NSColor whiteColor]];
+
+    operationDetailLabel = [NSTextField labelWithString:@""];
+    [operationDetailLabel setFrame:NSMakeRect(76, 34, 260, 22)];
+    [operationDetailLabel setFont:[NSFont systemFontOfSize:12 weight:NSFontWeightRegular]];
+    [operationDetailLabel setTextColor:[NSColor colorWithCalibratedWhite:0.82 alpha:1.0]];
+    [operationDetailLabel setLineBreakMode:NSLineBreakByTruncatingTail];
+
+    [root addSubview:operationSpinner];
+    [root addSubview:operationIconLabel];
+    [root addSubview:operationTitleLabel];
+    [root addSubview:operationDetailLabel];
+    [operationPanel setContentView:root];
+}
+
+static void snipShowOperationStatus(const char *titleC, const char *detailC, int state) {
+    NSString *title = statusString(titleC);
+    NSString *detail = statusString(detailC);
+    dispatch_async(dispatch_get_main_queue(), ^{
+        ensureOperationPanel();
+        [operationTitleLabel setStringValue:title];
+        [operationDetailLabel setStringValue:detail];
+
+        if (state == 0) {
+            [operationIconLabel setHidden:YES];
+            [operationSpinner setHidden:NO];
+            [operationSpinner startAnimation:nil];
+        } else {
+            [operationSpinner stopAnimation:nil];
+            [operationSpinner setHidden:YES];
+            [operationIconLabel setHidden:NO];
+            if (state == 2) {
+                [operationIconLabel setStringValue:@"!"];
+                [operationIconLabel setTextColor:[NSColor colorWithCalibratedRed:248.0/255.0 green:113.0/255.0 blue:113.0/255.0 alpha:1.0]];
+            } else {
+                [operationIconLabel setStringValue:@"OK"];
+                [operationIconLabel setTextColor:[NSColor colorWithCalibratedRed:74.0/255.0 green:222.0/255.0 blue:128.0/255.0 alpha:1.0]];
+            }
+        }
+
+        NSScreen *screen = [NSScreen mainScreen];
+        if (screen != nil) {
+            NSRect visible = [screen visibleFrame];
+            NSRect panelFrame = [operationPanel frame];
+            panelFrame.origin.x = NSMidX(visible) - panelFrame.size.width / 2;
+            panelFrame.origin.y = NSMaxY(visible) - panelFrame.size.height - 48;
+            [operationPanel setFrame:panelFrame display:YES];
+        }
+        [operationPanel orderFrontRegardless];
+    });
+}
+
+static void snipHideOperationStatus(void) {
+    dispatch_async(dispatch_get_main_queue(), ^{
+        if (operationPanel != nil) {
+            [operationSpinner stopAnimation:nil];
+            [operationPanel orderOut:nil];
+        }
+    });
+}
+*/
+import "C"
+
+import (
+	"sync/atomic"
+	"time"
+	"unsafe"
+)
+
+const (
+	operationStatusRunning = iota
+	operationStatusSuccess
+	operationStatusError
+)
+
+var operationStatusSeq atomic.Uint64
+
+func showOperationStatus(title, detail string, state int) {
+	operationStatusSeq.Add(1)
+	ctitle := C.CString(title)
+	cdetail := C.CString(detail)
+	defer C.free(unsafe.Pointer(ctitle))
+	defer C.free(unsafe.Pointer(cdetail))
+	C.snipShowOperationStatus(ctitle, cdetail, C.int(state))
+}
+
+func hideOperationStatusAfter(delay time.Duration) {
+	seq := operationStatusSeq.Load()
+	time.AfterFunc(delay, func() {
+		if operationStatusSeq.Load() == seq {
+			C.snipHideOperationStatus()
+		}
+	})
+}
diff --git a/operation_status_other.go b/operation_status_other.go
new file mode 100644
index 0000000..28b4b3f
--- /dev/null
+++ b/operation_status_other.go
@@ -0,0 +1,15 @@
+//go:build !darwin
+
+package main
+
+import "time"
+
+const (
+	operationStatusRunning = iota
+	operationStatusSuccess
+	operationStatusError
+)
+
+func showOperationStatus(_ string, _ string, _ int) {}
+
+func hideOperationStatusAfter(_ time.Duration) {}
diff --git a/overlay_window_darwin.go b/overlay_window_darwin.go
new file mode 100644
index 0000000..35e84ad
--- /dev/null
+++ b/overlay_window_darwin.go
@@ -0,0 +1,121 @@
+//go:build darwin
+
+package main
+
+/*
+#cgo CFLAGS: -x objective-c -fobjc-arc -fblocks
+#cgo LDFLAGS: -framework AppKit -framework CoreGraphics
+#include <dispatch/dispatch.h>
+#import <AppKit/AppKit.h>
+
+static NSWindow* snipMainWindow(void) {
+    NSWindow *window = [NSApp mainWindow];
+    if (window == nil && [[NSApp windows] count] > 0) {
+        window = [[NSApp windows] objectAtIndex:0];
+    }
+    return window;
+}
+
+// snipMakeViewTransparent recursively clears AppKit/WKWebView backing
+// surfaces. Setting only NSWindow transparent is insufficient for Wails:
+// WKWebView may still paint an opaque default grey background.
+static void snipMakeViewTransparent(NSView *view) {
+    if (view == nil) {
+        return;
+    }
+
+    Class wkWebViewClass = NSClassFromString(@"WKWebView");
+    if (wkWebViewClass != nil && [view isKindOfClass:wkWebViewClass]) {
+        @try {
+            [view setValue:@NO forKey:@"drawsBackground"];
+        } @catch (__unused NSException *exception) {
+        }
+        @try {
+            id scrollView = [view valueForKey:@"scrollView"];
+            if ([scrollView isKindOfClass:[NSScrollView class]]) {
+                [(NSScrollView *)scrollView setDrawsBackground:NO];
+                [(NSScrollView *)scrollView setBackgroundColor:[NSColor clearColor]];
+            }
+        } @catch (__unused NSException *exception) {
+        }
+    }
+
+    if ([view isKindOfClass:[NSScrollView class]]) {
+        NSScrollView *scrollView = (NSScrollView *)view;
+        [scrollView setDrawsBackground:NO];
+        [scrollView setBackgroundColor:[NSColor clearColor]];
+    }
+
+    [view setWantsLayer:YES];
+    if ([view layer] != nil) {
+        [[view layer] setOpaque:NO];
+        [[view layer] setBackgroundColor:[[NSColor clearColor] CGColor]];
+    }
+
+    @try {
+        [view setValue:@NO forKey:@"opaque"];
+    } @catch (__unused NSException *exception) {
+    }
+
+    @try {
+        [view setValue:@NO forKey:@"drawsBackground"];
+    } @catch (__unused NSException *exception) {
+    }
+
+    for (NSView *subview in [view subviews]) {
+        snipMakeViewTransparent(subview);
+    }
+}
+
+static void snipConfigureOverlayWindow(void) {
+    dispatch_async(dispatch_get_main_queue(), ^{
+        NSWindow *window = snipMainWindow();
+        NSScreen *screen = [NSScreen mainScreen];
+        if (window == nil || screen == nil) {
+            return;
+        }
+
+        [window setOpaque:NO];
+        [window setBackgroundColor:[NSColor clearColor]];
+        snipMakeViewTransparent([window contentView]);
+        [window setLevel:NSScreenSaverWindowLevel];
+        [window setCollectionBehavior:
+            NSWindowCollectionBehaviorCanJoinAllSpaces |
+            NSWindowCollectionBehaviorFullScreenAuxiliary |
+            NSWindowCollectionBehaviorStationary];
+        [window setFrame:[screen frame] display:YES];
+    });
+}
+
+static void snipRestoreOverlayWindow(void) {
+    dispatch_async(dispatch_get_main_queue(), ^{
+        NSWindow *window = snipMainWindow();
+        if (window == nil) {
+            return;
+        }
+
+        [window setLevel:NSNormalWindowLevel];
+        [window setCollectionBehavior:NSWindowCollectionBehaviorDefault];
+        [window setOpaque:YES];
+        [window setBackgroundColor:
+            [NSColor colorWithCalibratedRed:246.0/255.0
+                                      green:247.0/255.0
+                                       blue:250.0/255.0
+                                      alpha:1.0]];
+    });
+}
+*/
+import "C"
+
+// configureOverlayWindow promotes the Wails NSWindow to a transparent,
+// screen-level overlay. Wails can size a frameless window, but AppKit-only
+// flags are needed to cover the menu bar and keep the WebView transparent.
+func configureOverlayWindow() {
+	C.snipConfigureOverlayWindow()
+}
+
+// restoreOverlayWindow returns the NSWindow to normal app-window behaviour
+// before the settings UI is shown again.
+func restoreOverlayWindow() {
+	C.snipRestoreOverlayWindow()
+}
diff --git a/overlay_window_other.go b/overlay_window_other.go
new file mode 100644
index 0000000..9ab2842
--- /dev/null
+++ b/overlay_window_other.go
@@ -0,0 +1,10 @@
+//go:build !darwin
+
+package main
+
+// configureOverlayWindow is a macOS-only AppKit refinement. Other platforms
+// rely on Wails' own frameless/always-on-top window behaviour.
+func configureOverlayWindow() {}
+
+// restoreOverlayWindow is a macOS-only AppKit refinement.
+func restoreOverlayWindow() {}
diff --git a/promo/landing/.env.example b/promo/landing/.env.example
new file mode 100644
index 0000000..4e34f63
--- /dev/null
+++ b/promo/landing/.env.example
@@ -0,0 +1 @@
+VITE_BASE_PATH=/
diff --git a/promo/landing/.gitignore b/promo/landing/.gitignore
new file mode 100644
index 0000000..f6af9ef
--- /dev/null
+++ b/promo/landing/.gitignore
@@ -0,0 +1,10 @@
+node_modules
+dist
+dist-ssr
+.vite
+.DS_Store
+*.log
+
+tsconfig.node.tsbuildinfo
+tsconfig.app.tsbuildinfo
+upload_koodo.py
diff --git a/promo/landing/index.html b/promo/landing/index.html
new file mode 100644
index 0000000..a3ca0ce
--- /dev/null
+++ b/promo/landing/index.html
@@ -0,0 +1,22 @@
+<!doctype html>
+<html lang="zh-CN">
+  <head>
+    <meta charset="UTF-8" />
+    <link rel="icon" type="image/png" sizes="64x64" href="%BASE_URL%favicon.png" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <meta
+      name="description"
+      content="SnapGo — 截完图，链接已经在你剪贴板里。常驻菜单栏的轻量截图工具，一键上传到你自己的 S3 兼容对象存储。"
+    />
+    <meta property="og:title" content="SnapGo — 截完图，链接已经在剪贴板里" />
+    <meta
+      property="og:description"
+      content="常驻菜单栏的轻量截图工具，一键上传到你自己的 S3 兼容对象存储。"
+    />
+    <title>SnapGo — 截完图，链接已经在剪贴板里</title>
+  </head>
+  <body>
+    <div id="root"></div>
+    <script type="module" src="/src/main.tsx"></script>
+  </body>
+</html>
diff --git a/promo/landing/package-lock.json b/promo/landing/package-lock.json
new file mode 100644
index 0000000..3ed9791
--- /dev/null
+++ b/promo/landing/package-lock.json
@@ -0,0 +1,2239 @@
+{
+  "name": "snapgo-landing",
+  "version": "0.1.0",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "snapgo-landing",
+      "version": "0.1.0",
+      "dependencies": {
+        "react": "^18.3.1",
+        "react-dom": "^18.3.1"
+      },
+      "devDependencies": {
+        "@tailwindcss/vite": "^4.0.0",
+        "@types/react": "^18.3.12",
+        "@types/react-dom": "^18.3.1",
+        "@vitejs/plugin-react": "^4.3.4",
+        "tailwindcss": "^4.0.0",
+        "typescript": "^5.6.3",
+        "vite": "^5.4.11"
+      }
+    },
+    "node_modules/@babel/code-frame": {
+      "version": "7.29.7",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/helper-validator-identifier": "^7.29.7",
+        "js-tokens": "^4.0.0",
+        "picocolors": "^1.1.1"
+      },
+      "engines": {
+        "node": ">=6.9.0"
+      }
+    },
+    "node_modules/@babel/compat-data": {
+      "version": "7.29.7",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6.9.0"
+      }
+    },
+    "node_modules/@babel/core": {
+      "version": "7.29.7",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/code-frame": "^7.29.7",
+        "@babel/generator": "^7.29.7",
+        "@babel/helper-compilation-targets": "^7.29.7",
+        "@babel/helper-module-transforms": "^7.29.7",
+        "@babel/helpers": "^7.29.7",
+        "@babel/parser": "^7.29.7",
+        "@babel/template": "^7.29.7",
+        "@babel/traverse": "^7.29.7",
+        "@babel/types": "^7.29.7",
+        "@jridgewell/remapping": "^2.3.5",
+        "convert-source-map": "^2.0.0",
+        "debug": "^4.1.0",
+        "gensync": "^1.0.0-beta.2",
+        "json5": "^2.2.3",
+        "semver": "^6.3.1"
+      },
+      "engines": {
+        "node": ">=6.9.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/babel"
+      }
+    },
+    "node_modules/@babel/generator": {
+      "version": "7.29.7",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/parser": "^7.29.7",
+        "@babel/types": "^7.29.7",
+        "@jridgewell/gen-mapping": "^0.3.12",
+        "@jridgewell/trace-mapping": "^0.3.28",
+        "jsesc": "^3.0.2"
+      },
+      "engines": {
+        "node": ">=6.9.0"
+      }
+    },
+    "node_modules/@babel/helper-compilation-targets": {
+      "version": "7.29.7",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/compat-data": "^7.29.7",
+        "@babel/helper-validator-option": "^7.29.7",
+        "browserslist": "^4.24.0",
+        "lru-cache": "^5.1.1",
+        "semver": "^6.3.1"
+      },
+      "engines": {
+        "node": ">=6.9.0"
+      }
+    },
+    "node_modules/@babel/helper-globals": {
+      "version": "7.29.7",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6.9.0"
+      }
+    },
+    "node_modules/@babel/helper-module-imports": {
+      "version": "7.29.7",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/traverse": "^7.29.7",
+        "@babel/types": "^7.29.7"
+      },
+      "engines": {
+        "node": ">=6.9.0"
+      }
+    },
+    "node_modules/@babel/helper-module-transforms": {
+      "version": "7.29.7",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/helper-module-imports": "^7.29.7",
+        "@babel/helper-validator-identifier": "^7.29.7",
+        "@babel/traverse": "^7.29.7"
+      },
+      "engines": {
+        "node": ">=6.9.0"
+      },
+      "peerDependencies": {
+        "@babel/core": "^7.0.0"
+      }
+    },
+    "node_modules/@babel/helper-plugin-utils": {
+      "version": "7.29.7",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6.9.0"
+      }
+    },
+    "node_modules/@babel/helper-string-parser": {
+      "version": "7.29.7",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6.9.0"
+      }
+    },
+    "node_modules/@babel/helper-validator-identifier": {
+      "version": "7.29.7",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6.9.0"
+      }
+    },
+    "node_modules/@babel/helper-validator-option": {
+      "version": "7.29.7",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6.9.0"
+      }
+    },
+    "node_modules/@babel/helpers": {
+      "version": "7.29.7",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/template": "^7.29.7",
+        "@babel/types": "^7.29.7"
+      },
+      "engines": {
+        "node": ">=6.9.0"
+      }
+    },
+    "node_modules/@babel/parser": {
+      "version": "7.29.7",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/types": "^7.29.7"
+      },
+      "bin": {
+        "parser": "bin/babel-parser.js"
+      },
+      "engines": {
+        "node": ">=6.0.0"
+      }
+    },
+    "node_modules/@babel/plugin-transform-react-jsx-self": {
+      "version": "7.29.7",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/helper-plugin-utils": "^7.29.7"
+      },
+      "engines": {
+        "node": ">=6.9.0"
+      },
+      "peerDependencies": {
+        "@babel/core": "^7.0.0-0"
+      }
+    },
+    "node_modules/@babel/plugin-transform-react-jsx-source": {
+      "version": "7.29.7",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/helper-plugin-utils": "^7.29.7"
+      },
+      "engines": {
+        "node": ">=6.9.0"
+      },
+      "peerDependencies": {
+        "@babel/core": "^7.0.0-0"
+      }
+    },
+    "node_modules/@babel/template": {
+      "version": "7.29.7",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/code-frame": "^7.29.7",
+        "@babel/parser": "^7.29.7",
+        "@babel/types": "^7.29.7"
+      },
+      "engines": {
+        "node": ">=6.9.0"
+      }
+    },
+    "node_modules/@babel/traverse": {
+      "version": "7.29.7",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/code-frame": "^7.29.7",
+        "@babel/generator": "^7.29.7",
+        "@babel/helper-globals": "^7.29.7",
+        "@babel/parser": "^7.29.7",
+        "@babel/template": "^7.29.7",
+        "@babel/types": "^7.29.7",
+        "debug": "^4.3.1"
+      },
+      "engines": {
+        "node": ">=6.9.0"
+      }
+    },
+    "node_modules/@babel/types": {
+      "version": "7.29.7",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/helper-string-parser": "^7.29.7",
+        "@babel/helper-validator-identifier": "^7.29.7"
+      },
+      "engines": {
+        "node": ">=6.9.0"
+      }
+    },
+    "node_modules/@esbuild/aix-ppc64": {
+      "version": "0.21.5",
+      "resolved": "https://registry.npmjs.org/@esbuild/aix-ppc64/-/aix-ppc64-0.21.5.tgz",
+      "integrity": "sha512-1SDgH6ZSPTlggy1yI6+Dbkiz8xzpHJEVAlF/AM1tHPLsf5STom9rwtjE4hKAF20FfXXNTFqEYXyJNWh1GiZedQ==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "aix"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild/android-arm": {
+      "version": "0.21.5",
+      "resolved": "https://registry.npmjs.org/@esbuild/android-arm/-/android-arm-0.21.5.tgz",
+      "integrity": "sha512-vCPvzSjpPHEi1siZdlvAlsPxXl7WbOVUBBAowWug4rJHb68Ox8KualB+1ocNvT5fjv6wpkX6o/iEpbDrf68zcg==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild/android-arm64": {
+      "version": "0.21.5",
+      "resolved": "https://registry.npmjs.org/@esbuild/android-arm64/-/android-arm64-0.21.5.tgz",
+      "integrity": "sha512-c0uX9VAUBQ7dTDCjq+wdyGLowMdtR/GoC2U5IYk/7D1H1JYC0qseD7+11iMP2mRLN9RcCMRcjC4YMclCzGwS/A==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild/android-x64": {
+      "version": "0.21.5",
+      "resolved": "https://registry.npmjs.org/@esbuild/android-x64/-/android-x64-0.21.5.tgz",
+      "integrity": "sha512-D7aPRUUNHRBwHxzxRvp856rjUHRFW1SdQATKXH2hqA0kAZb1hKmi02OpYRacl0TxIGz/ZmXWlbZgjwWYaCakTA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild/darwin-arm64": {
+      "version": "0.21.5",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild/darwin-x64": {
+      "version": "0.21.5",
+      "resolved": "https://registry.npmjs.org/@esbuild/darwin-x64/-/darwin-x64-0.21.5.tgz",
+      "integrity": "sha512-se/JjF8NlmKVG4kNIuyWMV/22ZaerB+qaSi5MdrXtd6R08kvs2qCN4C09miupktDitvh8jRFflwGFBQcxZRjbw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild/freebsd-arm64": {
+      "version": "0.21.5",
+      "resolved": "https://registry.npmjs.org/@esbuild/freebsd-arm64/-/freebsd-arm64-0.21.5.tgz",
+      "integrity": "sha512-5JcRxxRDUJLX8JXp/wcBCy3pENnCgBR9bN6JsY4OmhfUtIHe3ZW0mawA7+RDAcMLrMIZaf03NlQiX9DGyB8h4g==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild/freebsd-x64": {
+      "version": "0.21.5",
+      "resolved": "https://registry.npmjs.org/@esbuild/freebsd-x64/-/freebsd-x64-0.21.5.tgz",
+      "integrity": "sha512-J95kNBj1zkbMXtHVH29bBriQygMXqoVQOQYA+ISs0/2l3T9/kj42ow2mpqerRBxDJnmkUDCaQT/dfNXWX/ZZCQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild/linux-arm": {
+      "version": "0.21.5",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-arm/-/linux-arm-0.21.5.tgz",
+      "integrity": "sha512-bPb5AHZtbeNGjCKVZ9UGqGwo8EUu4cLq68E95A53KlxAPRmUyYv2D6F0uUI65XisGOL1hBP5mTronbgo+0bFcA==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild/linux-arm64": {
+      "version": "0.21.5",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-arm64/-/linux-arm64-0.21.5.tgz",
+      "integrity": "sha512-ibKvmyYzKsBeX8d8I7MH/TMfWDXBF3db4qM6sy+7re0YXya+K1cem3on9XgdT2EQGMu4hQyZhan7TeQ8XkGp4Q==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild/linux-ia32": {
+      "version": "0.21.5",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-ia32/-/linux-ia32-0.21.5.tgz",
+      "integrity": "sha512-YvjXDqLRqPDl2dvRODYmmhz4rPeVKYvppfGYKSNGdyZkA01046pLWyRKKI3ax8fbJoK5QbxblURkwK/MWY18Tg==",
+      "cpu": [
+        "ia32"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild/linux-loong64": {
+      "version": "0.21.5",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-loong64/-/linux-loong64-0.21.5.tgz",
+      "integrity": "sha512-uHf1BmMG8qEvzdrzAqg2SIG/02+4/DHB6a9Kbya0XDvwDEKCoC8ZRWI5JJvNdUjtciBGFQ5PuBlpEOXQj+JQSg==",
+      "cpu": [
+        "loong64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild/linux-mips64el": {
+      "version": "0.21.5",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-mips64el/-/linux-mips64el-0.21.5.tgz",
+      "integrity": "sha512-IajOmO+KJK23bj52dFSNCMsz1QP1DqM6cwLUv3W1QwyxkyIWecfafnI555fvSGqEKwjMXVLokcV5ygHW5b3Jbg==",
+      "cpu": [
+        "mips64el"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild/linux-ppc64": {
+      "version": "0.21.5",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-ppc64/-/linux-ppc64-0.21.5.tgz",
+      "integrity": "sha512-1hHV/Z4OEfMwpLO8rp7CvlhBDnjsC3CttJXIhBi+5Aj5r+MBvy4egg7wCbe//hSsT+RvDAG7s81tAvpL2XAE4w==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild/linux-riscv64": {
+      "version": "0.21.5",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-riscv64/-/linux-riscv64-0.21.5.tgz",
+      "integrity": "sha512-2HdXDMd9GMgTGrPWnJzP2ALSokE/0O5HhTUvWIbD3YdjME8JwvSCnNGBnTThKGEB91OZhzrJ4qIIxk/SBmyDDA==",
+      "cpu": [
+        "riscv64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild/linux-s390x": {
+      "version": "0.21.5",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-s390x/-/linux-s390x-0.21.5.tgz",
+      "integrity": "sha512-zus5sxzqBJD3eXxwvjN1yQkRepANgxE9lgOW2qLnmr8ikMTphkjgXu1HR01K4FJg8h1kEEDAqDcZQtbrRnB41A==",
+      "cpu": [
+        "s390x"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild/linux-x64": {
+      "version": "0.21.5",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-x64/-/linux-x64-0.21.5.tgz",
+      "integrity": "sha512-1rYdTpyv03iycF1+BhzrzQJCdOuAOtaqHTWJZCWvijKD2N5Xu0TtVC8/+1faWqcP9iBCWOmjmhoH94dH82BxPQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild/netbsd-x64": {
+      "version": "0.21.5",
+      "resolved": "https://registry.npmjs.org/@esbuild/netbsd-x64/-/netbsd-x64-0.21.5.tgz",
+      "integrity": "sha512-Woi2MXzXjMULccIwMnLciyZH4nCIMpWQAs049KEeMvOcNADVxo0UBIQPfSmxB3CWKedngg7sWZdLvLczpe0tLg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "netbsd"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild/openbsd-x64": {
+      "version": "0.21.5",
+      "resolved": "https://registry.npmjs.org/@esbuild/openbsd-x64/-/openbsd-x64-0.21.5.tgz",
+      "integrity": "sha512-HLNNw99xsvx12lFBUwoT8EVCsSvRNDVxNpjZ7bPn947b8gJPzeHWyNVhFsaerc0n3TsbOINvRP2byTZ5LKezow==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openbsd"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild/sunos-x64": {
+      "version": "0.21.5",
+      "resolved": "https://registry.npmjs.org/@esbuild/sunos-x64/-/sunos-x64-0.21.5.tgz",
+      "integrity": "sha512-6+gjmFpfy0BHU5Tpptkuh8+uw3mnrvgs+dSPQXQOv3ekbordwnzTVEb4qnIvQcYXq6gzkyTnoZ9dZG+D4garKg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "sunos"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild/win32-arm64": {
+      "version": "0.21.5",
+      "resolved": "https://registry.npmjs.org/@esbuild/win32-arm64/-/win32-arm64-0.21.5.tgz",
+      "integrity": "sha512-Z0gOTd75VvXqyq7nsl93zwahcTROgqvuAcYDUr+vOv8uHhNSKROyU961kgtCD1e95IqPKSQKH7tBTslnS3tA8A==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild/win32-ia32": {
+      "version": "0.21.5",
+      "resolved": "https://registry.npmjs.org/@esbuild/win32-ia32/-/win32-ia32-0.21.5.tgz",
+      "integrity": "sha512-SWXFF1CL2RVNMaVs+BBClwtfZSvDgtL//G/smwAc5oVK/UPu2Gu9tIaRgFmYFFKrmg3SyAjSrElf0TiJ1v8fYA==",
+      "cpu": [
+        "ia32"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild/win32-x64": {
+      "version": "0.21.5",
+      "resolved": "https://registry.npmjs.org/@esbuild/win32-x64/-/win32-x64-0.21.5.tgz",
+      "integrity": "sha512-tQd/1efJuzPC6rCFwEvLtci/xNFcTZknmXs98FYDfGE4wP9ClFV98nyKrzJKVPMhdDnjzLhdUyMX4PsQAPjwIw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@jridgewell/gen-mapping": {
+      "version": "0.3.13",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@jridgewell/sourcemap-codec": "^1.5.0",
+        "@jridgewell/trace-mapping": "^0.3.24"
+      }
+    },
+    "node_modules/@jridgewell/remapping": {
+      "version": "2.3.5",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@jridgewell/gen-mapping": "^0.3.5",
+        "@jridgewell/trace-mapping": "^0.3.24"
+      }
+    },
+    "node_modules/@jridgewell/resolve-uri": {
+      "version": "3.1.2",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6.0.0"
+      }
+    },
+    "node_modules/@jridgewell/sourcemap-codec": {
+      "version": "1.5.5",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@jridgewell/trace-mapping": {
+      "version": "0.3.31",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@jridgewell/resolve-uri": "^3.1.0",
+        "@jridgewell/sourcemap-codec": "^1.4.14"
+      }
+    },
+    "node_modules/@rolldown/pluginutils": {
+      "version": "1.0.0-beta.27",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@rollup/rollup-android-arm-eabi": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-android-arm-eabi/-/rollup-android-arm-eabi-4.62.2.tgz",
+      "integrity": "sha512-6o7ZLZK+BeenkZCFNDXqpbjw9bD6nuWonvS/lwQJp7NoVVxm6p3qE7qQ5jGuBjiFsgvqjD8mZAU5oWxTmbOeOg==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ]
+    },
+    "node_modules/@rollup/rollup-android-arm64": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-android-arm64/-/rollup-android-arm64-4.62.2.tgz",
+      "integrity": "sha512-BaH7BllCACHoH1LguOU56UItGfUWjujlO65kS9LAodViaN4bwIKd7oeW/ZHJ/4ljr/7MIiENnNy3HJ0zXv8Zkw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ]
+    },
+    "node_modules/@rollup/rollup-darwin-arm64": {
+      "version": "4.62.2",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ]
+    },
+    "node_modules/@rollup/rollup-darwin-x64": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-darwin-x64/-/rollup-darwin-x64-4.62.2.tgz",
+      "integrity": "sha512-yl0y2vq3S3lHeuXhEdss6TWfKW8vkujImO12tn4ZkG/4oghr09LvdYm2RElVjokTQiUvDUGXLGsYeLqUMCKpGA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ]
+    },
+    "node_modules/@rollup/rollup-freebsd-arm64": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-freebsd-arm64/-/rollup-freebsd-arm64-4.62.2.tgz",
+      "integrity": "sha512-tT4pvt4qXD+vEoezupCWi+a1F0vvDiksiHc+PxRlYTOH1I6/X4id9jPxTP+Fg+545euaFT1jJVs4CEdHZAU1vw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ]
+    },
+    "node_modules/@rollup/rollup-freebsd-x64": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-freebsd-x64/-/rollup-freebsd-x64-4.62.2.tgz",
+      "integrity": "sha512-6nU5F2wCW+qvCBhTn1pdIU3bzsIoF7EUwsCDRxilWGprQR6yd508YnH9+OKFCwpfS8pjZqDUmnCAr7exax0XCg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-arm-gnueabihf": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm-gnueabihf/-/rollup-linux-arm-gnueabihf-4.62.2.tgz",
+      "integrity": "sha512-n1GJHPOvpIfhi3TmrCeh6S6URt9BFCt0KQE3qvexyGCTAKpR4Lg+eWvNZEqu7epxwus/8ElT3hacYEucm49SZg==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "libc": [
+        "glibc"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-arm-musleabihf": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm-musleabihf/-/rollup-linux-arm-musleabihf-4.62.2.tgz",
+      "integrity": "sha512-JqgflS8wEB+UXV/vS1RpRbifGBeN4D5lz8D8oOFbFZw4vedvdOgCFAjfBmIMdW3yL10XpQQ0Ambepw6MXrhOnA==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "libc": [
+        "musl"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-arm64-gnu": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm64-gnu/-/rollup-linux-arm64-gnu-4.62.2.tgz",
+      "integrity": "sha512-wnFJkogWvN4jm/hQRF2UBaeUmk20j5+DmHvoyWii2b8HJDyvz1MF2OU/6ynXt2KR63rbZLWkFpoytpdc/yBuSA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "libc": [
+        "glibc"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-arm64-musl": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm64-musl/-/rollup-linux-arm64-musl-4.62.2.tgz",
+      "integrity": "sha512-HVu2bp0zhvJ8xHEV9+UUs7S90VadmBSY3LcIMvozbPo4AuMGDWlz3ymHLHZPX4hR67TKTt8Qp5PJ5RBg/i+RMQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "libc": [
+        "musl"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-loong64-gnu": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-loong64-gnu/-/rollup-linux-loong64-gnu-4.62.2.tgz",
+      "integrity": "sha512-mQqqAV8QaoSgr9I2fKDLY2BAVvmKjWoGiu/cSYQonsLvtqwEn1E4QYfnCOcp5zoEqNhsDYin1s6jx/VJmrxlZg==",
+      "cpu": [
+        "loong64"
+      ],
+      "dev": true,
+      "libc": [
+        "glibc"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-loong64-musl": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-loong64-musl/-/rollup-linux-loong64-musl-4.62.2.tgz",
+      "integrity": "sha512-IxKLoxCQ2IWi6bT2akyDUBGsOImDKB+sPp4EsTmwFQ/fMwpCKm8uLSSgP/Kx/QYUgKis6SEZ5/Nlhup0DIA0PQ==",
+      "cpu": [
+        "loong64"
+      ],
+      "dev": true,
+      "libc": [
+        "musl"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-ppc64-gnu": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-ppc64-gnu/-/rollup-linux-ppc64-gnu-4.62.2.tgz",
+      "integrity": "sha512-Mk5ha2RQSgyFfmYYLkBpPnUk8D8FriBxesO1u9O75X0mHgXL1UQcH5Itl2lurWL2tj0RxV9b9tJgipac0hRY9A==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "libc": [
+        "glibc"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-ppc64-musl": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-ppc64-musl/-/rollup-linux-ppc64-musl-4.62.2.tgz",
+      "integrity": "sha512-CjvEnqJL/0/TQ3TXX3OPIJ/kmBellrWd4heXUmHeJlTnmwjKpSJzoehLaL6Xk0ZnMHBu9dZuFADNOrtjF4v+2w==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "libc": [
+        "musl"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-riscv64-gnu": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-riscv64-gnu/-/rollup-linux-riscv64-gnu-4.62.2.tgz",
+      "integrity": "sha512-1SiZbzwdkaDURsew/tSOrooKiYy7EQGT6m8ufavAi9NEyQb/6VuIxFXAL1fqa4iZe3g4NbNk4P7J32z2tw5Mgg==",
+      "cpu": [
+        "riscv64"
+      ],
+      "dev": true,
+      "libc": [
+        "glibc"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-riscv64-musl": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-riscv64-musl/-/rollup-linux-riscv64-musl-4.62.2.tgz",
+      "integrity": "sha512-nQts12zJ3NQRoE6uYljOH89v7szzLDvG2JD/vsX+vGXU8w/At1GowTZ5/7qeFQ8m7L55rpR8Okugnuo5bgjy2Q==",
+      "cpu": [
+        "riscv64"
+      ],
+      "dev": true,
+      "libc": [
+        "musl"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-s390x-gnu": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-s390x-gnu/-/rollup-linux-s390x-gnu-4.62.2.tgz",
+      "integrity": "sha512-E9/ll019jhPIJgpzfZoIkBGhcz+kKNgVWYRY0zr9srBdPPFVpvOKW8VaJKUbeK+eZXyQF9ltME+Kk6affeaPgg==",
+      "cpu": [
+        "s390x"
+      ],
+      "dev": true,
+      "libc": [
+        "glibc"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-x64-gnu": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-x64-gnu/-/rollup-linux-x64-gnu-4.62.2.tgz",
+      "integrity": "sha512-5BqxR/pshjey51iliyzTD5Xi3EN0aLmQ2lZ3lvefVV9c82BvrLo2/6OT55iifpWBufs6kdwWbuOKS841DrmK9A==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "libc": [
+        "glibc"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-linux-x64-musl": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-x64-musl/-/rollup-linux-x64-musl-4.62.2.tgz",
+      "integrity": "sha512-uNN83XxQrRAh/w0/pmAfibcwyb6YWt4gP+dpnQKPVJshAloQ785ii8CT8ZCIxkGg9opVsvAlGhFitSm6D1Jjpg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "libc": [
+        "musl"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@rollup/rollup-openbsd-x64": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-openbsd-x64/-/rollup-openbsd-x64-4.62.2.tgz",
+      "integrity": "sha512-srjEIxSH3LRnJN6THczDHWQplqEMFiAJrTab0msUryh9kwNpkICf3Ea6q6MN/2cZwRFUNx5w+h6Hpi4QuHS6Zg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openbsd"
+      ]
+    },
+    "node_modules/@rollup/rollup-openharmony-arm64": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-openharmony-arm64/-/rollup-openharmony-arm64-4.62.2.tgz",
+      "integrity": "sha512-8hOJnxgbyObnCm5AlRA3A931xX19xq80RjVTKgJOvEKWqJruP/Uf12IbAOaDjjEXYRewwHLfmF0YRIdK3OwKWA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openharmony"
+      ]
+    },
+    "node_modules/@rollup/rollup-win32-arm64-msvc": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-arm64-msvc/-/rollup-win32-arm64-msvc-4.62.2.tgz",
+      "integrity": "sha512-mmF4AY1i0hG/bLWUctUq59gtmgaSIRa3cu/A3JFRp/sCNEme2bgDEiDS22P9FbnJB8NJNF4jPJiSP5RHQpUTDg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ]
+    },
+    "node_modules/@rollup/rollup-win32-ia32-msvc": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-ia32-msvc/-/rollup-win32-ia32-msvc-4.62.2.tgz",
+      "integrity": "sha512-DZgkknc6jhHrk46V25vbAM0zZkyP0nSDkJB8/dRkLTxv470dOmWDqGoEJl/9A0dFfS7yE3REOwNDxpHwSLSt0Q==",
+      "cpu": [
+        "ia32"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ]
+    },
+    "node_modules/@rollup/rollup-win32-x64-gnu": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-x64-gnu/-/rollup-win32-x64-gnu-4.62.2.tgz",
+      "integrity": "sha512-T6xr6ucWSFto+VGajA8YH26LdpHRuP4YLHEKAtCWvJDOlnmWcDZVCI2Jmjr+IFHDlt2zRaTAKE4tfjTaWLgJBg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ]
+    },
+    "node_modules/@rollup/rollup-win32-x64-msvc": {
+      "version": "4.62.2",
+      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-x64-msvc/-/rollup-win32-x64-msvc-4.62.2.tgz",
+      "integrity": "sha512-BfzEnDJOt9T8M989/lA37EcJgat01wLRnoi5dQf3QzOH7jzpqTAzdDbVfRljVr5r+jzKqpbHeyOfAaXxAd0PAA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ]
+    },
+    "node_modules/@tailwindcss/node": {
+      "version": "4.3.2",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@jridgewell/remapping": "^2.3.5",
+        "enhanced-resolve": "5.21.6",
+        "jiti": "^2.7.0",
+        "lightningcss": "1.32.0",
+        "magic-string": "^0.30.21",
+        "source-map-js": "^1.2.1",
+        "tailwindcss": "4.3.2"
+      }
+    },
+    "node_modules/@tailwindcss/oxide": {
+      "version": "4.3.2",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">= 20"
+      },
+      "optionalDependencies": {
+        "@tailwindcss/oxide-android-arm64": "4.3.2",
+        "@tailwindcss/oxide-darwin-arm64": "4.3.2",
+        "@tailwindcss/oxide-darwin-x64": "4.3.2",
+        "@tailwindcss/oxide-freebsd-x64": "4.3.2",
+        "@tailwindcss/oxide-linux-arm-gnueabihf": "4.3.2",
+        "@tailwindcss/oxide-linux-arm64-gnu": "4.3.2",
+        "@tailwindcss/oxide-linux-arm64-musl": "4.3.2",
+        "@tailwindcss/oxide-linux-x64-gnu": "4.3.2",
+        "@tailwindcss/oxide-linux-x64-musl": "4.3.2",
+        "@tailwindcss/oxide-wasm32-wasi": "4.3.2",
+        "@tailwindcss/oxide-win32-arm64-msvc": "4.3.2",
+        "@tailwindcss/oxide-win32-x64-msvc": "4.3.2"
+      }
+    },
+    "node_modules/@tailwindcss/oxide-android-arm64": {
+      "version": "4.3.2",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-android-arm64/-/oxide-android-arm64-4.3.2.tgz",
+      "integrity": "sha512-WHxqIuHpvZ5VtdX6GTl1Ik/Vp2YuN42Et+0CdeaVd/frQ9jAvGmvR8vLT+jk3e8/Q3x8kECB9+R17pgpp2BulA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">= 20"
+      }
+    },
+    "node_modules/@tailwindcss/oxide-darwin-arm64": {
+      "version": "4.3.2",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">= 20"
+      }
+    },
+    "node_modules/@tailwindcss/oxide-darwin-x64": {
+      "version": "4.3.2",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-darwin-x64/-/oxide-darwin-x64-4.3.2.tgz",
+      "integrity": "sha512-UIIzmefR6KO1sDU7MzRqAxC8iBpft/VhkGjTjnhoS6k7Z3rQ9wEgA1ODSiyH/tcSYssulNm4Ci3hOeK1jH7ccQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">= 20"
+      }
+    },
+    "node_modules/@tailwindcss/oxide-freebsd-x64": {
+      "version": "4.3.2",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-freebsd-x64/-/oxide-freebsd-x64-4.3.2.tgz",
+      "integrity": "sha512-GN+uAmcI6DNspnCDwtOAZrTz6oukJnp337qZvxqCGLd3BHBzJpO0ZbTLRvJNdztOeAmTzewewGIMPb0tk2R4WA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": ">= 20"
+      }
+    },
+    "node_modules/@tailwindcss/oxide-linux-arm-gnueabihf": {
+      "version": "4.3.2",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-linux-arm-gnueabihf/-/oxide-linux-arm-gnueabihf-4.3.2.tgz",
+      "integrity": "sha512-4ABn7qSbdHRwTiDiuWNegCyb5+2FJ4vKIKc3DmKrvAFw7MU1Lm11dIkTPwUaFdTzc7IsOpDbqBrlh0x6y36U/w==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 20"
+      }
+    },
+    "node_modules/@tailwindcss/oxide-linux-arm64-gnu": {
+      "version": "4.3.2",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-linux-arm64-gnu/-/oxide-linux-arm64-gnu-4.3.2.tgz",
+      "integrity": "sha512-wDgEIGwoM8w8pufh9LVt1PahDgNdKXrLC2qfAnV3vAmococ9RWbxeAw4pxPttd/TsJfwjyLf90Dg1y9y8I6Emw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "libc": [
+        "glibc"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 20"
+      }
+    },
+    "node_modules/@tailwindcss/oxide-linux-arm64-musl": {
+      "version": "4.3.2",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-linux-arm64-musl/-/oxide-linux-arm64-musl-4.3.2.tgz",
+      "integrity": "sha512-J5Nuk0uZQIiMTJj3LEx4sAA9tMFUoXQZFv1J6An+QGYe53HKRJuFDi0rpq/tuouCZeAbOBY3kQ6g8qeD4TUjtA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "libc": [
+        "musl"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 20"
+      }
+    },
+    "node_modules/@tailwindcss/oxide-linux-x64-gnu": {
+      "version": "4.3.2",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-linux-x64-gnu/-/oxide-linux-x64-gnu-4.3.2.tgz",
+      "integrity": "sha512-kqCZpSKOBEJO4mz7OqWoofBZeXTAwaVGPj0ErAj7CojmhKpWVWVOnrt9dE8odoIraZq4oj3ausM37kXi+Tow8w==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "libc": [
+        "glibc"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 20"
+      }
+    },
+    "node_modules/@tailwindcss/oxide-linux-x64-musl": {
+      "version": "4.3.2",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-linux-x64-musl/-/oxide-linux-x64-musl-4.3.2.tgz",
+      "integrity": "sha512-cixpqbh2toJDmkuCRI68nXA8ZxNmdK9Y+9v5h3MC3ZQKy/0BO8AWzlkWyRM7JAFSGBlfig4YVTPsK6MVgqz1uw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "libc": [
+        "musl"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 20"
+      }
+    },
+    "node_modules/@tailwindcss/oxide-wasm32-wasi": {
+      "version": "4.3.2",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-wasm32-wasi/-/oxide-wasm32-wasi-4.3.2.tgz",
+      "integrity": "sha512-4ec2Z/LOmRsAgU23CS4xeJfcJlmRg94A/XrbGRCF1gyU/zdDfRLYDVsS+ynSZCmGNxQ1jQriQOKMQeQxBA3Isw==",
+      "bundleDependencies": [
+        "@napi-rs/wasm-runtime",
+        "@emnapi/core",
+        "@emnapi/runtime",
+        "@tybys/wasm-util",
+        "@emnapi/wasi-threads",
+        "tslib"
+      ],
+      "cpu": [
+        "wasm32"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "@emnapi/core": "^1.11.1",
+        "@emnapi/runtime": "^1.11.1",
+        "@emnapi/wasi-threads": "^1.2.2",
+        "@napi-rs/wasm-runtime": "^1.1.4",
+        "@tybys/wasm-util": "^0.10.2",
+        "tslib": "^2.8.1"
+      },
+      "engines": {
+        "node": ">=14.0.0"
+      }
+    },
+    "node_modules/@tailwindcss/oxide-win32-arm64-msvc": {
+      "version": "4.3.2",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-win32-arm64-msvc/-/oxide-win32-arm64-msvc-4.3.2.tgz",
+      "integrity": "sha512-Zyr/M0+XcYZu3bZrUytc7TXvrk0ftWfl8gN2MwekNDzhqhKRUucMPSeOzM0o0wH5AWOU49BsKRrfKxI2atCPMQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">= 20"
+      }
+    },
+    "node_modules/@tailwindcss/oxide-win32-x64-msvc": {
+      "version": "4.3.2",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-win32-x64-msvc/-/oxide-win32-x64-msvc-4.3.2.tgz",
+      "integrity": "sha512-QI9BO7KlNZsp2GuO0jwAAj5jCDABOKXRkCk2XuKTSaNEFSdfzqswYVTtCHBNKHLsqyjFyFkqlDiwkNbTYSssMQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">= 20"
+      }
+    },
+    "node_modules/@tailwindcss/vite": {
+      "version": "4.3.2",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@tailwindcss/node": "4.3.2",
+        "@tailwindcss/oxide": "4.3.2",
+        "tailwindcss": "4.3.2"
+      },
+      "peerDependencies": {
+        "vite": "^5.2.0 || ^6 || ^7 || ^8"
+      }
+    },
+    "node_modules/@types/babel__core": {
+      "version": "7.20.5",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/parser": "^7.20.7",
+        "@babel/types": "^7.20.7",
+        "@types/babel__generator": "*",
+        "@types/babel__template": "*",
+        "@types/babel__traverse": "*"
+      }
+    },
+    "node_modules/@types/babel__generator": {
+      "version": "7.27.0",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/types": "^7.0.0"
+      }
+    },
+    "node_modules/@types/babel__template": {
+      "version": "7.4.4",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/parser": "^7.1.0",
+        "@babel/types": "^7.0.0"
+      }
+    },
+    "node_modules/@types/babel__traverse": {
+      "version": "7.28.0",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/types": "^7.28.2"
+      }
+    },
+    "node_modules/@types/estree": {
+      "version": "1.0.9",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@types/prop-types": {
+      "version": "15.7.15",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@types/react": {
+      "version": "18.3.31",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/prop-types": "*",
+        "csstype": "^3.2.2"
+      }
+    },
+    "node_modules/@types/react-dom": {
+      "version": "18.3.7",
+      "dev": true,
+      "license": "MIT",
+      "peerDependencies": {
+        "@types/react": "^18.0.0"
+      }
+    },
+    "node_modules/@vitejs/plugin-react": {
+      "version": "4.7.0",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/core": "^7.28.0",
+        "@babel/plugin-transform-react-jsx-self": "^7.27.1",
+        "@babel/plugin-transform-react-jsx-source": "^7.27.1",
+        "@rolldown/pluginutils": "1.0.0-beta.27",
+        "@types/babel__core": "^7.20.5",
+        "react-refresh": "^0.17.0"
+      },
+      "engines": {
+        "node": "^14.18.0 || >=16.0.0"
+      },
+      "peerDependencies": {
+        "vite": "^4.2.0 || ^5.0.0 || ^6.0.0 || ^7.0.0"
+      }
+    },
+    "node_modules/baseline-browser-mapping": {
+      "version": "2.10.42",
+      "dev": true,
+      "license": "Apache-2.0",
+      "bin": {
+        "baseline-browser-mapping": "dist/cli.cjs"
+      },
+      "engines": {
+        "node": ">=6.0.0"
+      }
+    },
+    "node_modules/browserslist": {
+      "version": "4.28.5",
+      "dev": true,
+      "funding": [
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/browserslist"
+        },
+        {
+          "type": "tidelift",
+          "url": "https://tidelift.com/funding/github/npm/browserslist"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "baseline-browser-mapping": "^2.10.42",
+        "caniuse-lite": "^1.0.30001800",
+        "electron-to-chromium": "^1.5.387",
+        "node-releases": "^2.0.50",
+        "update-browserslist-db": "^1.2.3"
+      },
+      "bin": {
+        "browserslist": "cli.js"
+      },
+      "engines": {
+        "node": "^6 || ^7 || ^8 || ^9 || ^10 || ^11 || ^12 || >=13.7"
+      }
+    },
+    "node_modules/caniuse-lite": {
+      "version": "1.0.30001803",
+      "dev": true,
+      "funding": [
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/browserslist"
+        },
+        {
+          "type": "tidelift",
+          "url": "https://tidelift.com/funding/github/npm/caniuse-lite"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "license": "CC-BY-4.0"
+    },
+    "node_modules/convert-source-map": {
+      "version": "2.0.0",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/csstype": {
+      "version": "3.2.3",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/debug": {
+      "version": "4.4.3",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "ms": "^2.1.3"
+      },
+      "engines": {
+        "node": ">=6.0"
+      },
+      "peerDependenciesMeta": {
+        "supports-color": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/detect-libc": {
+      "version": "2.1.2",
+      "dev": true,
+      "license": "Apache-2.0",
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/electron-to-chromium": {
+      "version": "1.5.389",
+      "dev": true,
+      "license": "ISC"
+    },
+    "node_modules/enhanced-resolve": {
+      "version": "5.21.6",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "graceful-fs": "^4.2.4",
+        "tapable": "^2.3.3"
+      },
+      "engines": {
+        "node": ">=10.13.0"
+      }
+    },
+    "node_modules/esbuild": {
+      "version": "0.21.5",
+      "dev": true,
+      "hasInstallScript": true,
+      "license": "MIT",
+      "bin": {
+        "esbuild": "bin/esbuild"
+      },
+      "engines": {
+        "node": ">=12"
+      },
+      "optionalDependencies": {
+        "@esbuild/aix-ppc64": "0.21.5",
+        "@esbuild/android-arm": "0.21.5",
+        "@esbuild/android-arm64": "0.21.5",
+        "@esbuild/android-x64": "0.21.5",
+        "@esbuild/darwin-arm64": "0.21.5",
+        "@esbuild/darwin-x64": "0.21.5",
+        "@esbuild/freebsd-arm64": "0.21.5",
+        "@esbuild/freebsd-x64": "0.21.5",
+        "@esbuild/linux-arm": "0.21.5",
+        "@esbuild/linux-arm64": "0.21.5",
+        "@esbuild/linux-ia32": "0.21.5",
+        "@esbuild/linux-loong64": "0.21.5",
+        "@esbuild/linux-mips64el": "0.21.5",
+        "@esbuild/linux-ppc64": "0.21.5",
+        "@esbuild/linux-riscv64": "0.21.5",
+        "@esbuild/linux-s390x": "0.21.5",
+        "@esbuild/linux-x64": "0.21.5",
+        "@esbuild/netbsd-x64": "0.21.5",
+        "@esbuild/openbsd-x64": "0.21.5",
+        "@esbuild/sunos-x64": "0.21.5",
+        "@esbuild/win32-arm64": "0.21.5",
+        "@esbuild/win32-ia32": "0.21.5",
+        "@esbuild/win32-x64": "0.21.5"
+      }
+    },
+    "node_modules/escalade": {
+      "version": "3.2.0",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6"
+      }
+    },
+    "node_modules/fsevents": {
+      "version": "2.3.3",
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": "^8.16.0 || ^10.6.0 || >=11.0.0"
+      }
+    },
+    "node_modules/gensync": {
+      "version": "1.0.0-beta.2",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6.9.0"
+      }
+    },
+    "node_modules/graceful-fs": {
+      "version": "4.2.11",
+      "dev": true,
+      "license": "ISC"
+    },
+    "node_modules/jiti": {
+      "version": "2.7.0",
+      "dev": true,
+      "license": "MIT",
+      "bin": {
+        "jiti": "lib/jiti-cli.mjs"
+      }
+    },
+    "node_modules/js-tokens": {
+      "version": "4.0.0",
+      "license": "MIT"
+    },
+    "node_modules/jsesc": {
+      "version": "3.1.0",
+      "dev": true,
+      "license": "MIT",
+      "bin": {
+        "jsesc": "bin/jsesc"
+      },
+      "engines": {
+        "node": ">=6"
+      }
+    },
+    "node_modules/json5": {
+      "version": "2.2.3",
+      "dev": true,
+      "license": "MIT",
+      "bin": {
+        "json5": "lib/cli.js"
+      },
+      "engines": {
+        "node": ">=6"
+      }
+    },
+    "node_modules/lightningcss": {
+      "version": "1.32.0",
+      "dev": true,
+      "license": "MPL-2.0",
+      "dependencies": {
+        "detect-libc": "^2.0.3"
+      },
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      },
+      "optionalDependencies": {
+        "lightningcss-android-arm64": "1.32.0",
+        "lightningcss-darwin-arm64": "1.32.0",
+        "lightningcss-darwin-x64": "1.32.0",
+        "lightningcss-freebsd-x64": "1.32.0",
+        "lightningcss-linux-arm-gnueabihf": "1.32.0",
+        "lightningcss-linux-arm64-gnu": "1.32.0",
+        "lightningcss-linux-arm64-musl": "1.32.0",
+        "lightningcss-linux-x64-gnu": "1.32.0",
+        "lightningcss-linux-x64-musl": "1.32.0",
+        "lightningcss-win32-arm64-msvc": "1.32.0",
+        "lightningcss-win32-x64-msvc": "1.32.0"
+      }
+    },
+    "node_modules/lightningcss-android-arm64": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-android-arm64/-/lightningcss-android-arm64-1.32.0.tgz",
+      "integrity": "sha512-YK7/ClTt4kAK0vo6w3X+Pnm0D2cf2vPHbhOXdoNti1Ga0al1P4TBZhwjATvjNwLEBCnKvjJc2jQgHXH0NEwlAg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-darwin-arm64": {
+      "version": "1.32.0",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-darwin-x64": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-darwin-x64/-/lightningcss-darwin-x64-1.32.0.tgz",
+      "integrity": "sha512-U+QsBp2m/s2wqpUYT/6wnlagdZbtZdndSmut/NJqlCcMLTWp5muCrID+K5UJ6jqD2BFshejCYXniPDbNh73V8w==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-freebsd-x64": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-freebsd-x64/-/lightningcss-freebsd-x64-1.32.0.tgz",
+      "integrity": "sha512-JCTigedEksZk3tHTTthnMdVfGf61Fky8Ji2E4YjUTEQX14xiy/lTzXnu1vwiZe3bYe0q+SpsSH/CTeDXK6WHig==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-linux-arm-gnueabihf": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm-gnueabihf/-/lightningcss-linux-arm-gnueabihf-1.32.0.tgz",
+      "integrity": "sha512-x6rnnpRa2GL0zQOkt6rts3YDPzduLpWvwAF6EMhXFVZXD4tPrBkEFqzGowzCsIWsPjqSK+tyNEODUBXeeVHSkw==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-linux-arm64-gnu": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-gnu/-/lightningcss-linux-arm64-gnu-1.32.0.tgz",
+      "integrity": "sha512-0nnMyoyOLRJXfbMOilaSRcLH3Jw5z9HDNGfT/gwCPgaDjnx0i8w7vBzFLFR1f6CMLKF8gVbebmkUN3fa/kQJpQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "libc": [
+        "glibc"
+      ],
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-linux-arm64-musl": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-musl/-/lightningcss-linux-arm64-musl-1.32.0.tgz",
+      "integrity": "sha512-UpQkoenr4UJEzgVIYpI80lDFvRmPVg6oqboNHfoH4CQIfNA+HOrZ7Mo7KZP02dC6LjghPQJeBsvXhJod/wnIBg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "libc": [
+        "musl"
+      ],
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-linux-x64-gnu": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-x64-gnu/-/lightningcss-linux-x64-gnu-1.32.0.tgz",
+      "integrity": "sha512-V7Qr52IhZmdKPVr+Vtw8o+WLsQJYCTd8loIfpDaMRWGUZfBOYEJeyJIkqGIDMZPwPx24pUMfwSxxI8phr/MbOA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "libc": [
+        "glibc"
+      ],
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-linux-x64-musl": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-x64-musl/-/lightningcss-linux-x64-musl-1.32.0.tgz",
+      "integrity": "sha512-bYcLp+Vb0awsiXg/80uCRezCYHNg1/l3mt0gzHnWV9XP1W5sKa5/TCdGWaR/zBM2PeF/HbsQv/j2URNOiVuxWg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "libc": [
+        "musl"
+      ],
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-win32-arm64-msvc": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-win32-arm64-msvc/-/lightningcss-win32-arm64-msvc-1.32.0.tgz",
+      "integrity": "sha512-8SbC8BR40pS6baCM8sbtYDSwEVQd4JlFTOlaD3gWGHfThTcABnNDBda6eTZeqbofalIJhFx0qKzgHJmcPTnGdw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-win32-x64-msvc": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-win32-x64-msvc/-/lightningcss-win32-x64-msvc-1.32.0.tgz",
+      "integrity": "sha512-Amq9B/SoZYdDi1kFrojnoqPLxYhQ4Wo5XiL8EVJrVsB8ARoC1PWW6VGtT0WKCemjy8aC+louJnjS7U18x3b06Q==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/loose-envify": {
+      "version": "1.4.0",
+      "license": "MIT",
+      "dependencies": {
+        "js-tokens": "^3.0.0 || ^4.0.0"
+      },
+      "bin": {
+        "loose-envify": "cli.js"
+      }
+    },
+    "node_modules/lru-cache": {
+      "version": "5.1.1",
+      "dev": true,
+      "license": "ISC",
+      "dependencies": {
+        "yallist": "^3.0.2"
+      }
+    },
+    "node_modules/magic-string": {
+      "version": "0.30.21",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@jridgewell/sourcemap-codec": "^1.5.5"
+      }
+    },
+    "node_modules/ms": {
+      "version": "2.1.3",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/nanoid": {
+      "version": "3.3.15",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "license": "MIT",
+      "bin": {
+        "nanoid": "bin/nanoid.cjs"
+      },
+      "engines": {
+        "node": "^10 || ^12 || ^13.7 || ^14 || >=15.0.1"
+      }
+    },
+    "node_modules/node-releases": {
+      "version": "2.0.50",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/picocolors": {
+      "version": "1.1.1",
+      "dev": true,
+      "license": "ISC"
+    },
+    "node_modules/postcss": {
+      "version": "8.5.16",
+      "dev": true,
+      "funding": [
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/postcss/"
+        },
+        {
+          "type": "tidelift",
+          "url": "https://tidelift.com/funding/github/npm/postcss"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "nanoid": "^3.3.12",
+        "picocolors": "^1.1.1",
+        "source-map-js": "^1.2.1"
+      },
+      "engines": {
+        "node": "^10 || ^12 || >=14"
+      }
+    },
+    "node_modules/react": {
+      "version": "18.3.1",
+      "license": "MIT",
+      "dependencies": {
+        "loose-envify": "^1.1.0"
+      },
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/react-dom": {
+      "version": "18.3.1",
+      "license": "MIT",
+      "dependencies": {
+        "loose-envify": "^1.1.0",
+        "scheduler": "^0.23.2"
+      },
+      "peerDependencies": {
+        "react": "^18.3.1"
+      }
+    },
+    "node_modules/react-refresh": {
+      "version": "0.17.0",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/rollup": {
+      "version": "4.62.2",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/estree": "1.0.9"
+      },
+      "bin": {
+        "rollup": "dist/bin/rollup"
+      },
+      "engines": {
+        "node": ">=18.0.0",
+        "npm": ">=8.0.0"
+      },
+      "optionalDependencies": {
+        "@rollup/rollup-android-arm-eabi": "4.62.2",
+        "@rollup/rollup-android-arm64": "4.62.2",
+        "@rollup/rollup-darwin-arm64": "4.62.2",
+        "@rollup/rollup-darwin-x64": "4.62.2",
+        "@rollup/rollup-freebsd-arm64": "4.62.2",
+        "@rollup/rollup-freebsd-x64": "4.62.2",
+        "@rollup/rollup-linux-arm-gnueabihf": "4.62.2",
+        "@rollup/rollup-linux-arm-musleabihf": "4.62.2",
+        "@rollup/rollup-linux-arm64-gnu": "4.62.2",
+        "@rollup/rollup-linux-arm64-musl": "4.62.2",
+        "@rollup/rollup-linux-loong64-gnu": "4.62.2",
+        "@rollup/rollup-linux-loong64-musl": "4.62.2",
+        "@rollup/rollup-linux-ppc64-gnu": "4.62.2",
+        "@rollup/rollup-linux-ppc64-musl": "4.62.2",
+        "@rollup/rollup-linux-riscv64-gnu": "4.62.2",
+        "@rollup/rollup-linux-riscv64-musl": "4.62.2",
+        "@rollup/rollup-linux-s390x-gnu": "4.62.2",
+        "@rollup/rollup-linux-x64-gnu": "4.62.2",
+        "@rollup/rollup-linux-x64-musl": "4.62.2",
+        "@rollup/rollup-openbsd-x64": "4.62.2",
+        "@rollup/rollup-openharmony-arm64": "4.62.2",
+        "@rollup/rollup-win32-arm64-msvc": "4.62.2",
+        "@rollup/rollup-win32-ia32-msvc": "4.62.2",
+        "@rollup/rollup-win32-x64-gnu": "4.62.2",
+        "@rollup/rollup-win32-x64-msvc": "4.62.2",
+        "fsevents": "~2.3.2"
+      }
+    },
+    "node_modules/scheduler": {
+      "version": "0.23.2",
+      "license": "MIT",
+      "dependencies": {
+        "loose-envify": "^1.1.0"
+      }
+    },
+    "node_modules/semver": {
+      "version": "6.3.1",
+      "dev": true,
+      "license": "ISC",
+      "bin": {
+        "semver": "bin/semver.js"
+      }
+    },
+    "node_modules/source-map-js": {
+      "version": "1.2.1",
+      "dev": true,
+      "license": "BSD-3-Clause",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/tailwindcss": {
+      "version": "4.3.2",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/tapable": {
+      "version": "2.3.3",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/webpack"
+      }
+    },
+    "node_modules/typescript": {
+      "version": "5.9.3",
+      "dev": true,
+      "license": "Apache-2.0",
+      "bin": {
+        "tsc": "bin/tsc",
+        "tsserver": "bin/tsserver"
+      },
+      "engines": {
+        "node": ">=14.17"
+      }
+    },
+    "node_modules/update-browserslist-db": {
+      "version": "1.2.3",
+      "dev": true,
+      "funding": [
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/browserslist"
+        },
+        {
+          "type": "tidelift",
+          "url": "https://tidelift.com/funding/github/npm/browserslist"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "escalade": "^3.2.0",
+        "picocolors": "^1.1.1"
+      },
+      "bin": {
+        "update-browserslist-db": "cli.js"
+      },
+      "peerDependencies": {
+        "browserslist": ">= 4.21.0"
+      }
+    },
+    "node_modules/vite": {
+      "version": "5.4.21",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "esbuild": "^0.21.3",
+        "postcss": "^8.4.43",
+        "rollup": "^4.20.0"
+      },
+      "bin": {
+        "vite": "bin/vite.js"
+      },
+      "engines": {
+        "node": "^18.0.0 || >=20.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/vitejs/vite?sponsor=1"
+      },
+      "optionalDependencies": {
+        "fsevents": "~2.3.3"
+      },
+      "peerDependencies": {
+        "@types/node": "^18.0.0 || >=20.0.0",
+        "less": "*",
+        "lightningcss": "^1.21.0",
+        "sass": "*",
+        "sass-embedded": "*",
+        "stylus": "*",
+        "sugarss": "*",
+        "terser": "^5.4.0"
+      },
+      "peerDependenciesMeta": {
+        "@types/node": {
+          "optional": true
+        },
+        "less": {
+          "optional": true
+        },
+        "lightningcss": {
+          "optional": true
+        },
+        "sass": {
+          "optional": true
+        },
+        "sass-embedded": {
+          "optional": true
+        },
+        "stylus": {
+          "optional": true
+        },
+        "sugarss": {
+          "optional": true
+        },
+        "terser": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/yallist": {
+      "version": "3.1.1",
+      "dev": true,
+      "license": "ISC"
+    }
+  }
+}
diff --git a/promo/landing/package.json b/promo/landing/package.json
new file mode 100644
index 0000000..f21a682
--- /dev/null
+++ b/promo/landing/package.json
@@ -0,0 +1,25 @@
+{
+  "name": "snapgo-landing",
+  "private": true,
+  "version": "0.1.0",
+  "type": "module",
+  "scripts": {
+    "dev": "vite",
+    "build": "tsc -b && vite build",
+    "preview": "vite preview",
+    "typecheck": "tsc -b --noEmit"
+  },
+  "dependencies": {
+    "react": "^18.3.1",
+    "react-dom": "^18.3.1"
+  },
+  "devDependencies": {
+    "@tailwindcss/vite": "^4.0.0",
+    "@types/react": "^18.3.12",
+    "@types/react-dom": "^18.3.1",
+    "@vitejs/plugin-react": "^4.3.4",
+    "tailwindcss": "^4.0.0",
+    "typescript": "^5.6.3",
+    "vite": "^5.4.11"
+  }
+}
diff --git a/promo/landing/public/favicon.png b/promo/landing/public/favicon.png
new file mode 100644
index 0000000..c71f511
Binary files /dev/null and b/promo/landing/public/favicon.png differ
diff --git a/promo/landing/src/App.tsx b/promo/landing/src/App.tsx
new file mode 100644
index 0000000..cfcbdbb
--- /dev/null
+++ b/promo/landing/src/App.tsx
@@ -0,0 +1,268 @@
+import { useMemo, useRef, useState, type AnimationEvent } from "react";
+import logoUrl from "./assets/logo-universal.png";
+import ShowcaseVisual from "./ShowcaseVisual";
+
+const slides = [
+  {
+    eyebrow: "UPLOAD",
+    title: "直达云端",
+    body: "截图可直接保存至对象存储、远端服务器等，并将地址直接复制到剪切板。",
+    metric: "OBS / SSH / FTP",
+    feature: "支持多种远端存储配置",
+  },
+  {
+    eyebrow: "IDENTIFICATION",
+    title: "智能识别",
+    body: "截图可按你配置进行 AI 识别与总结，直接将你所需要的答案复制到剪切板。",
+    metric: "AI",
+    feature: "支持自定义 prompt 与多 provider",
+  },
+  {
+    eyebrow: "OCR",
+    title: "文字提取",
+    body: "截图可自动识别其中的文本文字，并将文字直接复制到剪切板。",
+    metric: "TEXT",
+    feature: "兼容多个主流的 OCR 服务",
+  },
+  {
+    eyebrow: "CAPTURE",
+    title: "功能完备",
+    body: "完善的截图功能，支持各类标注、打码，直接复制与本机保存。",
+    metric: "⌘⇧S",
+    feature: "全局快捷键唤起",
+  },
+];
+
+type SlideDirection = -1 | 1;
+
+type SlideTransition = {
+  from: number;
+  direction: SlideDirection;
+};
+
+function Logo() {
+  return (
+    <div className="brand" aria-label="SnapGo logo">
+      <div className="brand-main">
+        <span className="logo-mark">
+          <img src={logoUrl} alt="SnapGo" />
+        </span>
+        <span className="brand-name">SnapGo</span>
+      </div>
+      <p className="brand-overline">AI SCREENSHOT UTILITY</p>
+    </div>
+  );
+}
+
+export default function App() {
+  const [activeSlide, setActiveSlide] = useState(0);
+  const [slideTransition, setSlideTransition] = useState<SlideTransition | null>(null);
+  const dragStartX = useRef<number | null>(null);
+  const active = slides[activeSlide];
+
+  function getTransitionClass(role: "entering" | "exiting") {
+    if (!slideTransition) {
+      return "";
+    }
+
+    const edge = slideTransition.direction === 1 ? "right" : "left";
+    return `is-${role}-from-${edge}`;
+  }
+
+  function finishSlideTransition(event: AnimationEvent<HTMLElement>) {
+    if (event.target === event.currentTarget) {
+      setSlideTransition(null);
+    }
+  }
+
+  function selectSlide(nextSlide: number, direction: SlideDirection) {
+    if (slideTransition || nextSlide === activeSlide) {
+      return;
+    }
+
+    setSlideTransition({ from: activeSlide, direction });
+    setActiveSlide(nextSlide);
+  }
+
+  function selectDotSlide(nextSlide: number) {
+    const forwardDistance = (nextSlide - activeSlide + slides.length) % slides.length;
+    const backwardDistance = (activeSlide - nextSlide + slides.length) % slides.length;
+    selectSlide(nextSlide, forwardDistance <= backwardDistance ? 1 : -1);
+  }
+
+  const accentDots = useMemo(
+    () =>
+      slides.map((slide, index) => (
+        <button
+          key={slide.eyebrow}
+          className={`dot ${index === activeSlide ? "is-active" : ""}`}
+          type="button"
+          aria-label={`查看 ${slide.title}`}
+          onClick={() => selectDotSlide(index)}
+        />
+      )),
+    [activeSlide, slideTransition],
+  );
+
+  function moveSlide(direction: SlideDirection) {
+    const nextSlide = (activeSlide + direction + slides.length) % slides.length;
+    selectSlide(nextSlide, direction);
+  }
+
+  function handlePointerEnd(clientX: number) {
+    if (dragStartX.current === null) {
+      return;
+    }
+
+    const delta = clientX - dragStartX.current;
+    dragStartX.current = null;
+    if (Math.abs(delta) < 42) {
+      return;
+    }
+
+    moveSlide(delta > 0 ? -1 : 1);
+  }
+
+  return (
+    <main className="landing-shell">
+      <div className="ambient ambient-one" aria-hidden="true" />
+      <div className="ambient ambient-two" aria-hidden="true" />
+      <Logo />
+
+      <section className="hero-copy" aria-labelledby="landing-title">
+        <h1 id="landing-title">AI 时代的截图工具</h1>
+        <p className="subtitle">高效、便捷、专为 AI 交互设计</p>
+        <p className="intro">
+          智能识图，发布链接，提取文本..
+          <br />
+          你能想到的都能一键解决
+        </p>
+
+        <div className="cta-row" aria-label="下载与项目链接">
+          <div className="download-cta-group">
+            <a className="primary-cta" href="https://gitea.mamamiyear.site/mamamiyear/SnapGo">
+              <span className="apple-logo" aria-hidden="true"></span>
+              下载 Mac 应用
+              <svg viewBox="0 0 20 20" aria-hidden="true">
+                <path d="M5 10h9M10.5 6.5 14 10l-3.5 3.5" />
+              </svg>
+            </a>
+            <span className="platform-note">Windows/Linux 版本紧锣密鼓开发中</span>
+          </div>
+          <a
+            className="github-cta"
+            href="https://gitea.mamamiyear.site/mamamiyear/SnapGo"
+            aria-label="查看源码"
+            title="查看源码"
+          >
+            <svg viewBox="0 0 24 24" aria-hidden="true">
+              <path
+                fillRule="evenodd"
+                clipRule="evenodd"
+                d="M12 2C6.48 2 2 6.58 2 12.23c0 4.52 2.87 8.35 6.84 9.7.5.09.68-.22.68-.49 0-.24-.01-.88-.01-1.73-2.78.62-3.37-1.37-3.37-1.37-.45-1.18-1.11-1.5-1.11-1.5-.91-.64.07-.63.07-.63 1 .07 1.53 1.06 1.53 1.06.9 1.57 2.34 1.12 2.91.86.09-.67.35-1.12.64-1.38-2.22-.26-4.56-1.14-4.56-5.06 0-1.12.39-2.03 1.03-2.74-.1-.26-.45-1.3.1-2.7 0 0 .84-.28 2.75 1.05A9.32 9.32 0 0 1 12 6.96c.85 0 1.7.12 2.5.34 1.91-1.33 2.75-1.05 2.75-1.05.55 1.4.2 2.44.1 2.7.64.71 1.03 1.62 1.03 2.74 0 3.93-2.34 4.8-4.57 5.05.36.32.68.94.68 1.9 0 1.38-.01 2.49-.01 2.83 0 .27.18.59.69.49A10.1 10.1 0 0 0 22 12.23C22 6.58 17.52 2 12 2Z"
+              />
+            </svg>
+          </a>
+        </div>
+      </section>
+
+      <section className="product-showcase" aria-label="SnapGo 功能效果展示">
+        <div
+          className="device-card"
+          onPointerDown={(event) => {
+            dragStartX.current = event.clientX;
+          }}
+          onPointerUp={(event) => handlePointerEnd(event.clientX)}
+          onPointerCancel={() => {
+            dragStartX.current = null;
+          }}
+          onPointerLeave={() => {
+            dragStartX.current = null;
+          }}
+        >
+          <div className="window-chrome" aria-hidden="true">
+            <span />
+            <span />
+            <span />
+          </div>
+
+          <div className="preview-stage">
+            {slideTransition && (
+              <div
+                key={`visual-${slideTransition.from}`}
+                className={`carousel-slide is-exiting ${getTransitionClass("exiting")}`}
+                aria-hidden="true"
+              >
+                <ShowcaseVisual activeIndex={slideTransition.from} />
+              </div>
+            )}
+            <div
+              key={`visual-${activeSlide}`}
+              className={`carousel-slide ${slideTransition ? `is-entering ${getTransitionClass("entering")}` : ""}`}
+              onAnimationEnd={finishSlideTransition}
+            >
+              <ShowcaseVisual activeIndex={activeSlide} />
+            </div>
+          </div>
+
+          <div className="slide-panel-viewport">
+            {slideTransition && (
+              <div
+                key={`copy-${slideTransition.from}`}
+                className={`slide-panel is-exiting ${getTransitionClass("exiting")}`}
+                aria-hidden="true"
+              >
+                <p>{slides[slideTransition.from].eyebrow}</p>
+                <h2>{slides[slideTransition.from].title}</h2>
+                <span>{slides[slideTransition.from].body}</span>
+              </div>
+            )}
+            <div
+              key={`copy-${activeSlide}`}
+              className={`slide-panel ${slideTransition ? `is-entering ${getTransitionClass("entering")}` : ""}`}
+            >
+              <p>{active.eyebrow}</p>
+              <h2>{active.title}</h2>
+              <span>{active.body}</span>
+            </div>
+          </div>
+        </div>
+
+        <div className="carousel-bar">
+          <button type="button" className="nav-btn" aria-label="上一项" onClick={() => moveSlide(-1)}>
+            <svg viewBox="0 0 20 20" aria-hidden="true">
+              <path d="m12 5-5 5 5 5" />
+            </svg>
+          </button>
+          <div className="slide-meta-viewport" aria-live="polite">
+            {slideTransition && (
+              <div
+                key={`meta-${slideTransition.from}`}
+                className={`slide-meta is-exiting ${getTransitionClass("exiting")}`}
+                aria-hidden="true"
+              >
+                <strong>{slides[slideTransition.from].metric}</strong>
+                <span>{slides[slideTransition.from].feature}</span>
+              </div>
+            )}
+            <div
+              key={`meta-${activeSlide}`}
+              className={`slide-meta ${slideTransition ? `is-entering ${getTransitionClass("entering")}` : ""}`}
+            >
+              <strong>{active.metric}</strong>
+              <span>{active.feature}</span>
+            </div>
+          </div>
+          <div className="dots" aria-label="轮播分页">
+            {accentDots}
+          </div>
+          <button type="button" className="nav-btn" aria-label="下一项" onClick={() => moveSlide(1)}>
+            <svg viewBox="0 0 20 20" aria-hidden="true">
+              <path d="m8 5 5 5-5 5" />
+            </svg>
+          </button>
+        </div>
+      </section>
+    </main>
+  );
+}
diff --git a/promo/landing/src/ShowcaseVisual.tsx b/promo/landing/src/ShowcaseVisual.tsx
new file mode 100644
index 0000000..f927281
--- /dev/null
+++ b/promo/landing/src/ShowcaseVisual.tsx
@@ -0,0 +1,435 @@
+import { useState, type PointerEvent } from "react";
+
+type ShowcaseVisualProps = {
+  activeIndex: number;
+};
+
+type CaptureTool = "rect" | "arrow" | "pen" | "mosaic";
+type OcrLanguage = "zh" | "en" | "auto";
+type UploadDestination = {
+  id: "obs" | "ssh" | "ftp";
+  label: string;
+  detail: string;
+};
+
+const destinations: UploadDestination[] = [
+  { id: "obs", label: "OBS", detail: "Bucket" },
+  { id: "ssh", label: "SSH", detail: "Server" },
+  { id: "ftp", label: "FTP", detail: "Remote" },
+];
+
+const uploadRoutes: Record<UploadDestination["id"], string> = {
+  obs: "M 50 30 C 59 30 61 17 71 17",
+  ssh: "M 50 30 C 58 30 63 30 71 30",
+  ftp: "M 50 30 C 59 30 61 43 71 43",
+};
+
+const ocrModes: Array<{
+  id: OcrLanguage;
+  label: string;
+  name: string;
+  lines: string[];
+  characters: number;
+  confidence: string;
+}> = [
+  {
+    id: "zh",
+    label: "中",
+    name: "中文",
+    lines: ["让每一次截图直接进入下一步。"],
+    characters: 15,
+    confidence: "99.5%",
+  },
+  {
+    id: "en",
+    label: "EN",
+    name: "English",
+    lines: ["Capture, understand, share."],
+    characters: 27,
+    confidence: "99.1%",
+  },
+  {
+    id: "auto",
+    label: "AUTO",
+    name: "中英混排",
+    lines: ["Capture, understand, share.", "让每一次截图直接进入下一步。"],
+    characters: 42,
+    confidence: "99.2%",
+  },
+];
+
+const aiModes = [
+  {
+    id: "vision",
+    label: "识图",
+    result: "检测到系统权限弹窗，截图权限尚未开启。",
+    score: "96%",
+  },
+  {
+    id: "summary",
+    label: "总结",
+    result: "当前页面包含 3 个设置项，建议先开启屏幕录制权限。",
+    score: "93%",
+  },
+  {
+    id: "question",
+    label: "问答",
+    result: "前往系统设置中的隐私与安全性即可完成授权。",
+    score: "98%",
+  },
+];
+
+const captureTools: Array<{ id: CaptureTool; label: string }> = [
+  { id: "rect", label: "矩形" },
+  { id: "arrow", label: "箭头" },
+  { id: "pen", label: "画笔" },
+  { id: "mosaic", label: "马赛克" },
+];
+
+function stopSceneDrag(event: PointerEvent<HTMLElement>) {
+  event.stopPropagation();
+}
+
+function UploadScene() {
+  const [selected, setSelected] = useState<UploadDestination>(destinations[0]);
+  const routePath = uploadRoutes[selected.id];
+
+  return (
+    <div className={`visual-scene upload-scene target-${selected.id}`}>
+      <div className="upload-file-card">
+        <div className="upload-file-preview" aria-hidden="true">
+          <div className="screenshot-window-bar">
+            <span><i /><i /><i /></span>
+            <b className="screenshot-address-bar" />
+          </div>
+          <div className="screenshot-window-body">
+            <div className="screenshot-sidebar"><i /><i /><i /><i /></div>
+            <div className="screenshot-main">
+              <span className="screenshot-heading" />
+              <span className="screenshot-row row-long" />
+              <span className="screenshot-row row-medium" />
+              <div className="screenshot-card-grid">
+                <i /><i /><i />
+              </div>
+              <div className="screenshot-copy-lines">
+                <i /><i /><i />
+              </div>
+            </div>
+          </div>
+          <div className="upload-capture-frame">
+            <i className="upload-capture-corner corner-nw" />
+            <i className="upload-capture-corner corner-ne" />
+            <i className="upload-capture-corner corner-sw" />
+            <i className="upload-capture-corner corner-se" />
+          </div>
+        </div>
+        <div className="upload-file-copy">
+          <span>SCREENSHOT-1428.PNG</span>
+        </div>
+      </div>
+
+      <svg
+        className="upload-route"
+        viewBox="0 0 100 60"
+        preserveAspectRatio="none"
+        aria-hidden="true"
+      >
+        <path
+          key={`route-${selected.id}`}
+          className="upload-route-line"
+          d={routePath}
+          vectorEffect="non-scaling-stroke"
+        />
+        <path
+          key={`shimmer-${selected.id}`}
+          className="upload-route-shimmer"
+          d={routePath}
+          pathLength="100"
+          strokeDasharray="16 84"
+          vectorEffect="non-scaling-stroke"
+        />
+      </svg>
+
+      <span key={`packet-${selected.id}`} className={`upload-packet packet-${selected.id}`} aria-hidden="true">
+        <svg viewBox="0 0 20 20">
+          <path d="M 5 10 H 14 M 10.5 6.5 L 14 10 L 10.5 13.5" />
+        </svg>
+      </span>
+
+      <div className="upload-destinations" role="group" aria-label="上传目标">
+        {destinations.map((destination) => (
+          <button
+            key={destination.id}
+            type="button"
+            className={destination.id === selected.id ? "is-selected" : ""}
+            aria-pressed={destination.id === selected.id}
+            aria-label={`选择 ${destination.label} 上传目标`}
+            onPointerDown={stopSceneDrag}
+            onClick={() => setSelected(destination)}
+          >
+            <span className="destination-status" />
+            <strong>{destination.label}</strong>
+            <small>{destination.detail}</small>
+          </button>
+        ))}
+      </div>
+
+      <div className="upload-result scene-float-delayed" aria-live="polite">
+        <span className="result-check" aria-hidden="true">✓</span>
+        <div>
+          <small>LINK COPIED</small>
+          <strong>cdn.snapgo.dev/{selected.id}/...</strong>
+        </div>
+      </div>
+    </div>
+  );
+}
+
+function IdentificationScene() {
+  const [mode, setMode] = useState(aiModes[0]);
+
+  return (
+    <div className="visual-scene identification-scene">
+      <div className="ai-source-card">
+        <div className="mini-window-bar" aria-hidden="true">
+          <span />
+          <span />
+          <span />
+        </div>
+        <div className="ai-source-content">
+          <span className="source-sidebar" />
+          <div className="source-settings">
+            <i />
+            <i />
+            <i />
+          </div>
+          <div className="source-dialog">
+            <span className="dialog-icon">!</span>
+            <div>
+              <strong>Permission required</strong>
+              <small>Screen Recording</small>
+            </div>
+          </div>
+        </div>
+        <span className="ai-scan-line" aria-hidden="true" />
+      </div>
+
+      <div className="ai-core" aria-hidden="true">
+        <span>AI</span>
+        <i className="ai-orbit orbit-one" />
+        <i className="ai-orbit orbit-two" />
+      </div>
+
+      <div className="ai-result-card scene-float-soft" aria-live="polite">
+        <div className="ai-result-heading">
+          <span className="ai-spark" aria-hidden="true">✦</span>
+          <strong>SnapGo Vision</strong>
+          <i />
+        </div>
+        <p>{mode.result}</p>
+        <div className="confidence-row">
+          <span><i /></span>
+          <small>{mode.score} confidence</small>
+        </div>
+      </div>
+
+      <div className="ai-mode-switch" role="group" aria-label="AI 处理模式">
+        {aiModes.map((item) => (
+          <button
+            key={item.id}
+            type="button"
+            className={item.id === mode.id ? "is-selected" : ""}
+            aria-pressed={item.id === mode.id}
+            onPointerDown={stopSceneDrag}
+            onClick={() => setMode(item)}
+          >
+            {item.label}
+          </button>
+        ))}
+      </div>
+    </div>
+  );
+}
+
+function OcrScene() {
+  const [copied, setCopied] = useState(false);
+  const [language, setLanguage] = useState<OcrLanguage>("auto");
+  const activeMode = ocrModes.find((mode) => mode.id === language) ?? ocrModes[2];
+
+  function selectLanguage(mode: OcrLanguage) {
+    setLanguage(mode);
+    setCopied(false);
+  }
+
+  return (
+    <div className="visual-scene ocr-scene">
+      <div className="ocr-document">
+        <div className="document-header">
+          <span />
+          <div><i /><i /><i /></div>
+        </div>
+        <div className="document-copy">
+          <strong>Release notes</strong>
+          <span className="text-line line-long" />
+          <span className="text-line line-medium" />
+          <span className="text-line line-highlight"><i>Capture, understand, share.</i></span>
+          <span className="text-line line-long" />
+          <span className="text-line line-short" />
+          <span className="text-line line-highlight secondary"><i>让每一次截图直接进入下一步。</i></span>
+        </div>
+        <span className="ocr-scan-bar" aria-hidden="true" />
+      </div>
+
+      <div className="ocr-selection-card scene-float-delayed">
+        <div className="selection-heading">
+          <span>OCR</span>
+          <small>{activeMode.name}</small>
+        </div>
+        <p>
+          {activeMode.lines.map((line) => <span key={line}>{line}</span>)}
+        </p>
+        <div className="selection-meta">
+          <span>{activeMode.characters} characters</span>
+          <strong>{activeMode.confidence}</strong>
+        </div>
+        <button
+          type="button"
+          className={copied ? "is-copied" : ""}
+          aria-pressed={copied}
+          onPointerDown={stopSceneDrag}
+          onClick={() => setCopied((current) => !current)}
+        >
+          <span aria-hidden="true">{copied ? "✓" : "⌘C"}</span>
+          {copied ? "已复制" : "复制文本"}
+        </button>
+      </div>
+
+      <div className="ocr-language-pills" role="group" aria-label="OCR 识别语言">
+        {ocrModes.map((mode) => (
+          <button
+            key={mode.id}
+            type="button"
+            className={mode.id === language ? "is-selected" : ""}
+            aria-pressed={mode.id === language}
+            onPointerDown={stopSceneDrag}
+            onClick={() => selectLanguage(mode.id)}
+          >
+            {mode.label}
+          </button>
+        ))}
+      </div>
+    </div>
+  );
+}
+
+function ToolGlyph({ tool }: { tool: CaptureTool }) {
+  if (tool === "rect") {
+    return <svg viewBox="0 0 20 20" aria-hidden="true"><rect x="4" y="4" width="12" height="12" rx="2" /></svg>;
+  }
+
+  if (tool === "arrow") {
+    return <svg viewBox="0 0 20 20" aria-hidden="true"><path d="M4 15 15 4M9 4h6v6" /></svg>;
+  }
+
+  if (tool === "pen") {
+    return <svg viewBox="0 0 20 20" aria-hidden="true"><path d="m5 15 2.2-4.7L13.8 3.7l2.5 2.5-6.6 6.6L5 15Z" /><path d="m11.8 5.7 2.5 2.5" /></svg>;
+  }
+
+  return (
+    <svg viewBox="0 0 20 20" aria-hidden="true">
+      <rect x="3" y="3" width="5" height="5" />
+      <rect x="12" y="3" width="5" height="5" />
+      <rect x="3" y="12" width="5" height="5" />
+      <rect x="12" y="12" width="5" height="5" />
+    </svg>
+  );
+}
+
+function AnnotationPreview({ tool }: { tool: CaptureTool }) {
+  if (tool === "arrow") {
+    return (
+      <svg className="annotation-arrow" viewBox="0 0 180 110" aria-hidden="true">
+        <path d="M28 84C66 78 91 56 139 31" />
+        <path d="m121 27 20 3-8 18" />
+      </svg>
+    );
+  }
+
+  if (tool === "pen") {
+    return (
+      <svg className="annotation-pen" viewBox="0 0 180 110" aria-hidden="true">
+        <path d="M24 76c20-42 36 25 57-6s33-33 48-4c9 18 21 13 29-7" />
+      </svg>
+    );
+  }
+
+  if (tool === "mosaic") {
+    return <div className="annotation-mosaic" aria-hidden="true">{Array.from({ length: 20 }, (_, index) => <span key={index} />)}</div>;
+  }
+
+  return <div className="annotation-rect" aria-hidden="true"><span /><span /><span /><span /></div>;
+}
+
+function CaptureScene() {
+  const [tool, setTool] = useState<CaptureTool>("rect");
+
+  return (
+    <div className="visual-scene capture-scene">
+      <div className="capture-canvas">
+        <div className="canvas-app-bar">
+          <span />
+          <strong>Project overview</strong>
+          <i />
+        </div>
+        <div className="canvas-layout" aria-hidden="true">
+          <span className="canvas-sidebar" />
+          <div className="canvas-content">
+            <i className="canvas-heading" />
+            <i className="canvas-line" />
+            <i className="canvas-line short" />
+            <div className="canvas-chart"><span /><span /><span /><span /><span /></div>
+          </div>
+        </div>
+        <div className="capture-selection">
+          <span className="selection-size">1280 × 720</span>
+          <i className="selection-handle handle-nw" />
+          <i className="selection-handle handle-ne" />
+          <i className="selection-handle handle-sw" />
+          <i className="selection-handle handle-se" />
+          <AnnotationPreview tool={tool} />
+        </div>
+      </div>
+
+      <div className="capture-toolbar" role="toolbar" aria-label="截图标注工具">
+        {captureTools.map((item) => (
+          <button
+            key={item.id}
+            type="button"
+            className={item.id === tool ? "is-selected" : ""}
+            aria-label={item.label}
+            aria-pressed={item.id === tool}
+            title={item.label}
+            onPointerDown={stopSceneDrag}
+            onClick={() => setTool(item.id)}
+          >
+            <ToolGlyph tool={item.id} />
+          </button>
+        ))}
+        <span className="toolbar-divider" />
+        <span className="toolbar-color" aria-hidden="true" />
+      </div>
+    </div>
+  );
+}
+
+const scenes = [UploadScene, IdentificationScene, OcrScene, CaptureScene];
+
+export default function ShowcaseVisual({ activeIndex }: ShowcaseVisualProps) {
+  const Scene = scenes[activeIndex] ?? UploadScene;
+
+  return (
+    <div className="scene-parallax" data-testid="showcase-visual">
+      <Scene />
+    </div>
+  );
+}
diff --git a/promo/landing/src/assets/logo-universal.png b/promo/landing/src/assets/logo-universal.png
new file mode 100644
index 0000000..dc728e3
Binary files /dev/null and b/promo/landing/src/assets/logo-universal.png differ
diff --git a/promo/landing/src/index.css b/promo/landing/src/index.css
new file mode 100644
index 0000000..e9fa129
--- /dev/null
+++ b/promo/landing/src/index.css
@@ -0,0 +1,2645 @@
+@import "tailwindcss";
+
+:root {
+  color-scheme: light;
+  font-family:
+    -apple-system, BlinkMacSystemFont, "SF Pro Display", "SF Pro Text", "Segoe UI",
+    "PingFang SC", "Hiragino Sans GB", "Microsoft YaHei", Helvetica, Arial, sans-serif;
+  background: #f5f7fb;
+  color: #111827;
+  font-synthesis: none;
+  text-rendering: optimizeLegibility;
+  -webkit-font-smoothing: antialiased;
+  -moz-osx-font-smoothing: grayscale;
+}
+
+* {
+  box-sizing: border-box;
+}
+
+html,
+body,
+#root {
+  width: 100%;
+  height: 100%;
+  min-height: 100%;
+  overflow: hidden;
+}
+
+body {
+  margin: 0;
+  background:
+    radial-gradient(circle at 13% 20%, rgba(171, 199, 255, 0.34), transparent 27%),
+    radial-gradient(circle at 86% 77%, rgba(214, 226, 255, 0.72), transparent 31%),
+    linear-gradient(135deg, #fbfcff 0%, #f3f6fb 46%, #edf2fb 100%);
+}
+
+button,
+a {
+  font: inherit;
+}
+
+button {
+  border: 0;
+}
+
+a {
+  color: inherit;
+  text-decoration: none;
+}
+
+.landing-shell {
+  position: relative;
+  isolation: isolate;
+  display: grid;
+  grid-template-columns: minmax(0, 0.94fr) minmax(320px, 1.06fr);
+  align-items: center;
+  gap: clamp(24px, 5vw, 84px);
+  width: 100%;
+  height: 100dvh;
+  max-height: 100dvh;
+  padding: clamp(22px, 4.4vw, 72px);
+  overflow: hidden;
+}
+
+.ambient {
+  position: absolute;
+  z-index: -2;
+  border-radius: 999px;
+  filter: blur(6px);
+  pointer-events: none;
+}
+
+.ambient-one {
+  top: 7%;
+  right: 12%;
+  width: 32vw;
+  height: 32vw;
+  background: radial-gradient(circle, rgba(120, 152, 255, 0.23), transparent 64%);
+}
+
+.ambient-two {
+  left: 23%;
+  bottom: -18%;
+  width: 46vw;
+  height: 46vw;
+  background: radial-gradient(circle, rgba(255, 255, 255, 0.95), transparent 62%);
+}
+
+.hero-copy {
+  display: flex;
+  flex-direction: column;
+  align-items: flex-start;
+  min-width: 0;
+}
+
+.brand {
+  position: absolute;
+  top: clamp(22px, 4.4vw, 72px);
+  left: clamp(22px, 4.4vw, 72px);
+  z-index: 2;
+  display: flex;
+  flex-direction: column;
+  align-items: flex-start;
+  gap: 11px;
+  color: #111827;
+}
+
+.brand-main {
+  display: inline-flex;
+  align-items: center;
+  gap: 12px;
+  font-weight: 700;
+  letter-spacing: -0.03em;
+}
+
+.logo-mark {
+  display: grid;
+  place-items: center;
+  width: 46px;
+  height: 46px;
+  overflow: hidden;
+  border-radius: 13px;
+}
+
+.logo-mark img {
+  width: 100%;
+  height: 100%;
+  object-fit: contain;
+}
+
+.brand-name {
+  font-size: 18px;
+}
+
+.brand-overline {
+  margin: 0;
+  color: #5e6f8f;
+  font-size: clamp(12px, 1.4vw, 14px);
+  font-weight: 700;
+  letter-spacing: 0.16em;
+  text-transform: uppercase;
+}
+
+h1 {
+  max-width: 780px;
+  margin: 0;
+  color: #07111f;
+  font-size: clamp(40px, 5.2vw, 76px);
+  font-weight: 800;
+  letter-spacing: -0.045em;
+  line-height: 1.04;
+}
+
+.subtitle {
+  max-width: 660px;
+  margin: clamp(16px, 2.6vh, 26px) 0 0;
+  color: #26354a;
+  font-size: clamp(19px, 1.9vw, 26px);
+  font-weight: 650;
+  letter-spacing: -0.02em;
+  line-height: 1.25;
+}
+
+.intro {
+  max-width: 590px;
+  margin: clamp(12px, 2vh, 22px) 0 0;
+  color: #667287;
+  font-size: clamp(14px, 1.3vw, 17px);
+  line-height: 1.78;
+}
+
+.cta-row {
+  display: flex;
+  flex-wrap: wrap;
+  align-items: flex-start;
+  gap: 12px;
+  margin-top: clamp(22px, 4vh, 42px);
+}
+
+.download-cta-group {
+  display: inline-flex;
+  flex-direction: column;
+  align-items: center;
+  gap: 8px;
+}
+
+.platform-note {
+  color: #768298;
+  font-size: 12px;
+  font-weight: 600;
+  letter-spacing: 0.01em;
+  line-height: 1.35;
+  white-space: nowrap;
+}
+
+.primary-cta,
+.github-cta {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  min-height: 48px;
+  border-radius: 999px;
+  font-size: 15px;
+  font-weight: 700;
+  letter-spacing: -0.01em;
+  transition:
+    transform 180ms ease,
+    box-shadow 180ms ease,
+    background 180ms ease;
+}
+
+.primary-cta {
+  gap: 9px;
+  padding: 0 22px 0 24px;
+  color: #fff;
+  background: #0a84ff;
+  box-shadow: 0 18px 38px rgba(10, 132, 255, 0.25);
+}
+
+.apple-logo {
+  display: inline-block;
+  width: 17px;
+  font-family: -apple-system, BlinkMacSystemFont, "SF Pro Display", sans-serif;
+  font-size: 19px;
+  font-weight: 700;
+  line-height: 1;
+  transform: translateY(-1px);
+}
+
+.primary-cta svg,
+.nav-btn svg {
+  width: 20px;
+  height: 20px;
+  fill: none;
+  stroke: currentColor;
+  stroke-width: 2;
+  stroke-linecap: round;
+  stroke-linejoin: round;
+}
+
+.github-cta {
+  width: 48px;
+  height: 48px;
+  color: #1f2937;
+  background: rgba(255, 255, 255, 0.66);
+  border: 1px solid rgba(255, 255, 255, 0.86);
+  box-shadow: 0 15px 34px rgba(54, 69, 98, 0.09);
+  backdrop-filter: blur(18px);
+}
+
+.github-cta svg {
+  width: 23px;
+  height: 23px;
+  fill: currentColor;
+}
+
+.primary-cta:hover,
+.github-cta:hover,
+.nav-btn:hover {
+  transform: translateY(-2px);
+}
+
+.primary-cta:focus-visible,
+.github-cta:focus-visible,
+.nav-btn:focus-visible,
+.dot:focus-visible {
+  outline: 3px solid rgba(10, 132, 255, 0.32);
+  outline-offset: 3px;
+}
+
+.product-showcase {
+  display: flex;
+  flex-direction: column;
+  justify-content: center;
+  min-width: 0;
+  gap: 16px;
+}
+
+.device-card {
+  position: relative;
+  min-height: clamp(390px, 66vh, 650px);
+  overflow: hidden;
+  cursor: grab;
+  touch-action: pan-y;
+  border: 1px solid rgba(255, 255, 255, 0.68);
+  border-radius: clamp(30px, 4vw, 56px);
+  background:
+    linear-gradient(145deg, rgba(255, 255, 255, 0.77), rgba(246, 248, 253, 0.48)),
+    rgba(255, 255, 255, 0.62);
+  box-shadow:
+    inset 0 1px 0 rgba(255, 255, 255, 0.86),
+    0 35px 85px rgba(52, 68, 100, 0.18),
+    0 8px 22px rgba(52, 68, 100, 0.08);
+  backdrop-filter: blur(28px) saturate(1.18);
+}
+
+.device-card:active {
+  cursor: grabbing;
+}
+
+.device-card::before {
+  content: "";
+  position: absolute;
+  inset: 10% 8% auto auto;
+  width: 48%;
+  aspect-ratio: 1;
+  border-radius: 999px;
+  background: radial-gradient(circle, rgba(10, 132, 255, 0.16), transparent 62%);
+}
+
+.window-chrome {
+  position: absolute;
+  top: 22px;
+  left: 24px;
+  display: flex;
+  gap: 8px;
+}
+
+.window-chrome span {
+  width: 12px;
+  height: 12px;
+  border-radius: 999px;
+  background: #d8dee9;
+  box-shadow: inset 0 0 0 1px rgba(0, 0, 0, 0.04);
+}
+
+.window-chrome span:nth-child(1) {
+  background: #ff5f57;
+}
+
+.window-chrome span:nth-child(2) {
+  background: #febc2e;
+}
+
+.window-chrome span:nth-child(3) {
+  background: #28c840;
+}
+
+.preview-stage {
+  position: absolute;
+  inset: 74px clamp(22px, 4vw, 52px) 154px;
+  overflow: hidden;
+  border-radius: 34px;
+  background:
+    linear-gradient(rgba(16, 24, 40, 0.045) 1px, transparent 1px),
+    linear-gradient(90deg, rgba(16, 24, 40, 0.045) 1px, transparent 1px),
+    linear-gradient(155deg, rgba(244, 247, 252, 0.82), rgba(255, 255, 255, 0.62));
+  background-size: 34px 34px, 34px 34px, auto;
+}
+
+.carousel-slide {
+  position: absolute;
+  inset: 0;
+  width: 100%;
+  height: 100%;
+  will-change: transform;
+}
+
+.scene-parallax {
+  position: relative;
+  width: 100%;
+  height: 100%;
+}
+
+.visual-scene {
+  position: absolute;
+  inset: 0;
+  overflow: hidden;
+  color: #142033;
+}
+
+.visual-scene button {
+  color: inherit;
+  cursor: pointer;
+}
+
+.visual-scene button:focus-visible {
+  outline: 2px solid rgba(10, 132, 255, 0.42);
+  outline-offset: 2px;
+}
+
+.scene-float-soft {
+  animation: scene-float 5.2s ease-in-out infinite;
+}
+
+.scene-float-delayed {
+  animation: scene-float 5.6s ease-in-out 0.8s infinite;
+}
+
+/* Upload scene */
+.upload-file-card {
+  position: absolute;
+  top: 50%;
+  left: 5%;
+  z-index: 2;
+  width: 45%;
+  padding: 12px;
+  border: 1px solid rgba(255, 255, 255, 0.9);
+  border-radius: 18px;
+  background: rgba(255, 255, 255, 0.84);
+  box-shadow: 0 18px 42px rgba(55, 76, 112, 0.16);
+  backdrop-filter: blur(16px);
+  transform: translateY(-50%);
+}
+
+.upload-file-preview {
+  position: relative;
+  display: block;
+  height: auto;
+  aspect-ratio: 2.2;
+  overflow: hidden;
+  border: 1px solid rgba(77, 95, 122, 0.1);
+  border-radius: 12px;
+  background: #f3f6fa;
+}
+
+.screenshot-window-bar {
+  display: flex;
+  height: 22%;
+  min-height: 14px;
+  align-items: center;
+  gap: 7px;
+  padding: 0 7px;
+  border-bottom: 1px solid rgba(68, 87, 116, 0.09);
+  background: rgba(255, 255, 255, 0.92);
+}
+
+.screenshot-window-bar > span {
+  display: flex;
+  gap: 3px;
+}
+
+.screenshot-window-bar i {
+  width: 4px;
+  height: 4px;
+  border-radius: 999px;
+  background: #c7cfda;
+}
+
+.screenshot-window-bar i:first-child {
+  background: #ff736d;
+}
+
+.screenshot-window-bar i:nth-child(2) {
+  background: #ffc557;
+}
+
+.screenshot-window-bar i:last-child {
+  background: #55c979;
+}
+
+.screenshot-address-bar {
+  display: block;
+  width: 38%;
+  height: 4px;
+  border-radius: 999px;
+  background: #d7dee8;
+}
+
+.screenshot-window-body {
+  position: absolute;
+  inset: 22% 0 0;
+  display: grid;
+  grid-template-columns: 25% 1fr;
+}
+
+.screenshot-sidebar {
+  display: flex;
+  flex-direction: column;
+  gap: 8px;
+  padding: 10px 7px;
+  border-right: 1px solid rgba(68, 87, 116, 0.08);
+  background: #e7ecf3;
+}
+
+.screenshot-sidebar i {
+  display: block;
+  width: 100%;
+  height: 4px;
+  border-radius: 999px;
+  background: #bdc7d5;
+}
+
+.screenshot-sidebar i:nth-child(2) {
+  background: #0a84ff;
+  opacity: 0.72;
+}
+
+.screenshot-main {
+  position: relative;
+  padding: 9px 9px 7px;
+  background: linear-gradient(145deg, #fafbfd, #eef3f8);
+}
+
+.screenshot-heading {
+  display: block;
+  width: 48%;
+  height: 5px;
+  margin-bottom: 8px;
+  border-radius: 999px;
+  background: #8797ab;
+}
+
+.screenshot-row {
+  display: block;
+  height: 4px;
+  margin-bottom: 5px;
+  border-radius: 999px;
+  background: #ced6e2;
+}
+
+.screenshot-row.row-long {
+  width: 82%;
+}
+
+.screenshot-row.row-medium {
+  width: 61%;
+}
+
+.screenshot-card-grid {
+  display: grid;
+  grid-template-columns: repeat(3, 1fr);
+  gap: 4px;
+  margin: 7px 0 6px;
+}
+
+.screenshot-card-grid i {
+  height: 18px;
+  border: 1px solid rgba(112, 131, 160, 0.1);
+  border-radius: 4px;
+  background: rgba(255, 255, 255, 0.78);
+}
+
+.screenshot-card-grid i:nth-child(2) {
+  background: rgba(10, 132, 255, 0.12);
+}
+
+.screenshot-copy-lines {
+  display: grid;
+  gap: 3px;
+}
+
+.screenshot-copy-lines i {
+  display: block;
+  width: 92%;
+  height: 3px;
+  border-radius: 999px;
+  background: #d8dfe9;
+}
+
+.screenshot-copy-lines i:nth-child(2) {
+  width: 72%;
+}
+
+.screenshot-copy-lines i:last-child {
+  width: 44%;
+}
+
+.upload-capture-frame {
+  position: absolute;
+  inset: 5px;
+  z-index: 3;
+  pointer-events: none;
+}
+
+.upload-capture-corner {
+  position: absolute;
+  width: 12px;
+  height: 12px;
+  border-color: #0a84ff;
+  filter: drop-shadow(0 1px 2px rgba(10, 132, 255, 0.3));
+}
+
+.upload-capture-corner.corner-nw {
+  top: 0;
+  left: 0;
+  border-top: 2px solid;
+  border-left: 2px solid;
+}
+
+.upload-capture-corner.corner-ne {
+  top: 0;
+  right: 0;
+  border-top: 2px solid;
+  border-right: 2px solid;
+}
+
+.upload-capture-corner.corner-sw {
+  bottom: 0;
+  left: 0;
+  border-bottom: 2px solid;
+  border-left: 2px solid;
+}
+
+.upload-capture-corner.corner-se {
+  right: 0;
+  bottom: 0;
+  border-right: 2px solid;
+  border-bottom: 2px solid;
+}
+
+.upload-file-copy {
+  display: flex;
+  align-items: center;
+  margin-top: 10px;
+}
+
+.upload-file-copy span {
+  overflow: hidden;
+  color: #43516a;
+  font-size: 10px;
+  font-weight: 700;
+  letter-spacing: 0.08em;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.upload-route {
+  position: absolute;
+  inset: 0;
+  z-index: 2;
+  width: 100%;
+  height: 100%;
+  overflow: visible;
+  pointer-events: none;
+}
+
+.upload-route-line {
+  fill: none;
+  stroke: #2998ff;
+  stroke-width: 2.4;
+  stroke-linecap: round;
+}
+
+.upload-route-shimmer {
+  fill: none;
+  stroke: #dff2ff;
+  stroke-width: 2;
+  stroke-linecap: round;
+  animation: upload-route-marquee 0.95s linear infinite;
+}
+
+.upload-packet {
+  position: absolute;
+  z-index: 4;
+  top: 50%;
+  left: 50%;
+  display: grid;
+  width: 20px;
+  height: 20px;
+  place-items: center;
+  opacity: 0;
+  border-radius: 999px;
+  background: #0a84ff;
+  box-shadow: 0 7px 18px rgba(10, 132, 255, 0.34);
+  pointer-events: none;
+  transform: translate(-50%, -50%);
+}
+
+.upload-packet svg {
+  width: 13px;
+  height: 13px;
+  fill: none;
+  stroke: #fff;
+  stroke-width: 2;
+  stroke-linecap: round;
+  stroke-linejoin: round;
+  transform-origin: center;
+}
+
+.packet-obs {
+  animation: upload-packet-obs 1.65s linear infinite;
+}
+
+.packet-ssh {
+  animation: upload-packet-ssh 1.65s linear infinite;
+}
+
+.packet-ftp {
+  animation: upload-packet-ftp 1.65s linear infinite;
+}
+
+.packet-obs svg {
+  animation: upload-arrow-obs 1.65s linear infinite;
+}
+
+.packet-ftp svg {
+  animation: upload-arrow-ftp 1.65s linear infinite;
+}
+
+.upload-destinations {
+  position: absolute;
+  top: 20%;
+  right: 4%;
+  bottom: 20%;
+  z-index: 3;
+  display: grid;
+  width: 25%;
+  gap: 13px;
+}
+
+.upload-destinations button {
+  display: grid;
+  grid-template-columns: 7px minmax(0, 1fr);
+  grid-template-rows: auto auto;
+  column-gap: 8px;
+  align-items: center;
+  min-height: 52px;
+  padding: 8px 10px;
+  text-align: left;
+  border: 1px solid rgba(255, 255, 255, 0.82);
+  border-radius: 12px;
+  background: rgba(255, 255, 255, 0.64);
+  box-shadow: 0 9px 26px rgba(55, 76, 112, 0.08);
+  backdrop-filter: blur(12px);
+  transition:
+    transform 180ms ease,
+    border-color 180ms ease,
+    background 180ms ease,
+    box-shadow 180ms ease;
+}
+
+.upload-destinations button:hover {
+  z-index: 2;
+  transform: translateX(-3px);
+}
+
+.upload-destinations button.is-selected {
+  z-index: 2;
+  transform: none;
+  border-color: rgba(10, 132, 255, 0.32);
+  background: rgba(255, 255, 255, 0.92);
+  box-shadow: 0 12px 28px rgba(10, 132, 255, 0.13);
+}
+
+.destination-status {
+  grid-row: 1 / 3;
+  width: 7px;
+  height: 7px;
+  border-radius: 999px;
+  background: #b8c1cf;
+  transition: background 180ms ease, box-shadow 180ms ease;
+}
+
+.upload-destinations button.is-selected .destination-status {
+  background: #25be72;
+  box-shadow: 0 0 0 4px rgba(37, 190, 114, 0.12);
+}
+
+.upload-destinations strong {
+  font-size: 12px;
+  letter-spacing: 0;
+}
+
+.upload-destinations small {
+  color: #8590a3;
+  font-size: 9px;
+  line-height: 1.1;
+}
+
+.upload-result {
+  position: absolute;
+  bottom: 5%;
+  left: 5%;
+  z-index: 4;
+  display: flex;
+  width: 45%;
+  min-width: 0;
+  align-items: center;
+  gap: 9px;
+  padding: 9px 11px;
+  border: 1px solid rgba(255, 255, 255, 0.86);
+  border-radius: 14px;
+  background: rgba(255, 255, 255, 0.88);
+  box-shadow: 0 16px 34px rgba(45, 70, 108, 0.16);
+  backdrop-filter: blur(16px);
+}
+
+.result-check {
+  display: grid;
+  flex: 0 0 auto;
+  place-items: center;
+  width: 26px;
+  height: 26px;
+  color: #fff;
+  font-size: 13px;
+  font-weight: 800;
+  border-radius: 999px;
+  background: #25be72;
+  box-shadow: 0 6px 14px rgba(37, 190, 114, 0.25);
+}
+
+.upload-result div {
+  min-width: 0;
+}
+
+.upload-result small,
+.upload-result strong {
+  display: block;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.upload-result small {
+  color: #8590a3;
+  font-size: 8px;
+  font-weight: 800;
+  letter-spacing: 0.12em;
+}
+
+.upload-result strong {
+  margin-top: 2px;
+  color: #26364c;
+  font-size: 10px;
+}
+
+/* AI identification scene */
+.ai-source-card {
+  position: absolute;
+  top: 8%;
+  bottom: 8%;
+  left: 5%;
+  width: 49%;
+  overflow: hidden;
+  border: 1px solid rgba(255, 255, 255, 0.88);
+  border-radius: 17px;
+  background: rgba(255, 255, 255, 0.76);
+  box-shadow: 0 18px 45px rgba(49, 71, 105, 0.15);
+}
+
+.mini-window-bar {
+  display: flex;
+  align-items: center;
+  height: 28px;
+  gap: 5px;
+  padding: 0 10px;
+  background: rgba(245, 247, 251, 0.9);
+  border-bottom: 1px solid rgba(72, 91, 122, 0.07);
+}
+
+.mini-window-bar span {
+  width: 6px;
+  height: 6px;
+  border-radius: 999px;
+  background: #d1d7e1;
+}
+
+.mini-window-bar span:first-child {
+  background: #ff746e;
+}
+
+.mini-window-bar span:nth-child(2) {
+  background: #ffc65a;
+}
+
+.mini-window-bar span:last-child {
+  background: #57ce7c;
+}
+
+.ai-source-content {
+  position: absolute;
+  inset: 28px 0 0;
+  overflow: hidden;
+  background:
+    linear-gradient(90deg, rgba(230, 235, 244, 0.86) 25%, transparent 25%),
+    linear-gradient(145deg, #fbfcfe, #eef3fb);
+}
+
+.source-sidebar {
+  position: absolute;
+  top: 17%;
+  left: 6%;
+  width: 13%;
+  height: 62%;
+  border-radius: 6px;
+  background: repeating-linear-gradient(180deg, #bdc7d6 0 4px, transparent 4px 13px);
+  opacity: 0.72;
+}
+
+.source-settings {
+  position: absolute;
+  top: 17%;
+  right: 7%;
+  display: grid;
+  width: 61%;
+  gap: 11px;
+}
+
+.source-settings i {
+  display: block;
+  height: 7px;
+  border-radius: 999px;
+  background: #d9e0ea;
+}
+
+.source-settings i:nth-child(2) {
+  width: 78%;
+}
+
+.source-settings i:nth-child(3) {
+  width: 90%;
+}
+
+.source-dialog {
+  position: absolute;
+  right: 7%;
+  bottom: 14%;
+  left: 31%;
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  padding: 9px;
+  border: 1px solid rgba(255, 255, 255, 0.92);
+  border-radius: 11px;
+  background: rgba(255, 255, 255, 0.92);
+  box-shadow: 0 12px 26px rgba(53, 68, 98, 0.12);
+}
+
+.dialog-icon {
+  display: grid;
+  flex: 0 0 auto;
+  place-items: center;
+  width: 24px;
+  height: 24px;
+  color: #fff;
+  font-size: 12px;
+  font-weight: 800;
+  border-radius: 8px;
+  background: #ff6b64;
+}
+
+.source-dialog strong,
+.source-dialog small {
+  display: block;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.source-dialog strong {
+  font-size: 9px;
+}
+
+.source-dialog small {
+  margin-top: 2px;
+  color: #8b96a6;
+  font-size: 8px;
+}
+
+.ai-scan-line {
+  position: absolute;
+  z-index: 4;
+  top: 22px;
+  right: 0;
+  left: 0;
+  height: 2px;
+  background: #39a0ff;
+  box-shadow:
+    0 0 10px rgba(10, 132, 255, 0.75),
+    0 8px 24px rgba(10, 132, 255, 0.22);
+  animation: ai-scan 3.2s ease-in-out infinite;
+}
+
+.ai-core {
+  position: absolute;
+  z-index: 5;
+  top: 47%;
+  left: 51%;
+  display: grid;
+  place-items: center;
+  width: 46px;
+  height: 46px;
+  color: #fff;
+  font-size: 12px;
+  font-weight: 800;
+  border: 5px solid rgba(255, 255, 255, 0.9);
+  border-radius: 999px;
+  background: linear-gradient(145deg, #0879f1, #47b4ff);
+  box-shadow: 0 14px 30px rgba(10, 132, 255, 0.28);
+  transform: translate(-50%, -50%);
+  animation: ai-core-breathe 3s ease-in-out infinite;
+}
+
+.ai-orbit {
+  position: absolute;
+  border: 1px solid rgba(10, 132, 255, 0.22);
+  border-radius: 999px;
+}
+
+.orbit-one {
+  inset: -11px;
+  border-right-color: #0a84ff;
+  animation: orbit-spin 5s linear infinite;
+}
+
+.orbit-two {
+  inset: -20px;
+  border-bottom-color: rgba(10, 132, 255, 0.62);
+  animation: orbit-spin 7s linear reverse infinite;
+}
+
+.ai-result-card {
+  position: absolute;
+  top: 13%;
+  right: 4%;
+  z-index: 3;
+  width: 43%;
+  padding: 13px;
+  border: 1px solid rgba(255, 255, 255, 0.9);
+  border-radius: 16px;
+  background: rgba(255, 255, 255, 0.88);
+  box-shadow: 0 20px 42px rgba(48, 70, 107, 0.17);
+  backdrop-filter: blur(16px);
+}
+
+.ai-result-heading {
+  display: flex;
+  min-width: 0;
+  align-items: center;
+  gap: 6px;
+}
+
+.ai-spark {
+  display: grid;
+  flex: 0 0 auto;
+  place-items: center;
+  width: 23px;
+  height: 23px;
+  color: #0a84ff;
+  font-size: 13px;
+  border-radius: 8px;
+  background: rgba(10, 132, 255, 0.1);
+}
+
+.ai-result-heading strong {
+  overflow: hidden;
+  font-size: 10px;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.ai-result-heading i {
+  flex: 0 0 auto;
+  width: 6px;
+  height: 6px;
+  margin-left: auto;
+  border-radius: 999px;
+  background: #25be72;
+  box-shadow: 0 0 0 4px rgba(37, 190, 114, 0.11);
+}
+
+.ai-result-card p {
+  min-height: 42px;
+  margin: 11px 0;
+  color: #3f4e63;
+  font-size: 11px;
+  line-height: 1.55;
+}
+
+.confidence-row {
+  display: flex;
+  align-items: center;
+  gap: 7px;
+}
+
+.confidence-row > span {
+  flex: 1;
+  height: 4px;
+  overflow: hidden;
+  border-radius: 999px;
+  background: #e7edf5;
+}
+
+.confidence-row > span i {
+  display: block;
+  width: 94%;
+  height: 100%;
+  border-radius: inherit;
+  background: linear-gradient(90deg, #0a84ff, #71c6ff);
+}
+
+.confidence-row small {
+  flex: 0 0 auto;
+  color: #8792a4;
+  font-size: 8px;
+}
+
+.ai-mode-switch {
+  position: absolute;
+  right: 5%;
+  bottom: 8%;
+  z-index: 5;
+  display: flex;
+  gap: 3px;
+  padding: 3px;
+  border: 1px solid rgba(255, 255, 255, 0.88);
+  border-radius: 11px;
+  background: rgba(255, 255, 255, 0.72);
+  box-shadow: 0 10px 24px rgba(48, 70, 107, 0.1);
+  backdrop-filter: blur(14px);
+}
+
+.ai-mode-switch button {
+  min-width: 42px;
+  padding: 6px 8px;
+  color: #718096;
+  font-size: 9px;
+  font-weight: 700;
+  border-radius: 8px;
+  background: transparent;
+  transition: color 160ms ease, background 160ms ease, box-shadow 160ms ease;
+}
+
+.ai-mode-switch button.is-selected {
+  color: #0a70d8;
+  background: #fff;
+  box-shadow: 0 5px 12px rgba(53, 74, 108, 0.1);
+}
+
+/* OCR scene */
+.ocr-document {
+  position: absolute;
+  top: 7%;
+  bottom: 7%;
+  left: 6%;
+  width: 51%;
+  overflow: hidden;
+  border: 1px solid rgba(255, 255, 255, 0.9);
+  border-radius: 17px;
+  background: rgba(255, 255, 255, 0.88);
+  box-shadow: 0 18px 44px rgba(48, 69, 103, 0.14);
+  transform: rotate(-1.4deg);
+}
+
+.document-header {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  height: 30px;
+  padding: 0 11px;
+  border-bottom: 1px solid rgba(61, 80, 111, 0.07);
+}
+
+.document-header > span {
+  width: 33%;
+  height: 6px;
+  border-radius: 999px;
+  background: #d5dce7;
+}
+
+.document-header div {
+  display: flex;
+  gap: 4px;
+}
+
+.document-header i {
+  width: 5px;
+  height: 5px;
+  border-radius: 999px;
+  background: #c8d0dc;
+}
+
+.document-copy {
+  display: flex;
+  flex-direction: column;
+  gap: 9px;
+  padding: 13px 14px;
+}
+
+.document-copy > strong {
+  margin-bottom: 3px;
+  color: #28384f;
+  font-size: 12px;
+}
+
+.text-line {
+  display: block;
+  width: 100%;
+  height: 5px;
+  border-radius: 999px;
+  background: #d9e0e9;
+}
+
+.line-medium {
+  width: 76%;
+}
+
+.line-short {
+  width: 58%;
+}
+
+.line-highlight {
+  position: relative;
+  width: 92%;
+  height: 18px;
+  margin-block: -2px;
+  border: 1px solid rgba(10, 132, 255, 0.17);
+  border-radius: 5px;
+  background: rgba(10, 132, 255, 0.11);
+}
+
+.line-highlight.secondary {
+  width: 86%;
+  background: rgba(255, 196, 83, 0.18);
+  border-color: rgba(230, 167, 42, 0.22);
+}
+
+.line-highlight i {
+  position: absolute;
+  top: 50%;
+  left: 5px;
+  overflow: hidden;
+  max-width: calc(100% - 10px);
+  color: #476079;
+  font-size: 7px;
+  font-style: normal;
+  font-weight: 650;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+  transform: translateY(-50%);
+}
+
+.ocr-scan-bar {
+  position: absolute;
+  z-index: 3;
+  top: 28px;
+  right: 0;
+  left: 0;
+  height: 2px;
+  background: #0a84ff;
+  box-shadow: 0 0 16px rgba(10, 132, 255, 0.66);
+  animation: ocr-scan 3.4s ease-in-out infinite;
+}
+
+.ocr-selection-card {
+  position: absolute;
+  top: 12%;
+  right: 5%;
+  z-index: 4;
+  width: 43%;
+  padding: 13px;
+  border: 1px solid rgba(255, 255, 255, 0.92);
+  border-radius: 16px;
+  background: rgba(255, 255, 255, 0.9);
+  box-shadow: 0 20px 44px rgba(47, 69, 105, 0.17);
+  backdrop-filter: blur(16px);
+}
+
+.selection-heading,
+.selection-meta {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 8px;
+}
+
+.selection-heading span {
+  color: #0a84ff;
+  font-size: 9px;
+  font-weight: 850;
+  letter-spacing: 0.12em;
+}
+
+.selection-heading small,
+.selection-meta span {
+  color: #8a95a6;
+  font-size: 8px;
+}
+
+.ocr-selection-card p {
+  min-height: 31px;
+  margin: 10px 0;
+  color: #3e4d63;
+  font-size: 10px;
+  line-height: 1.55;
+}
+
+.ocr-selection-card p span {
+  display: block;
+}
+
+.selection-meta strong {
+  color: #25a869;
+  font-size: 9px;
+}
+
+.ocr-selection-card button {
+  display: flex;
+  width: 100%;
+  min-height: 30px;
+  align-items: center;
+  justify-content: center;
+  gap: 6px;
+  margin-top: 10px;
+  color: #fff;
+  font-size: 9px;
+  font-weight: 750;
+  border-radius: 9px;
+  background: #0a84ff;
+  box-shadow: 0 9px 20px rgba(10, 132, 255, 0.2);
+  transition: transform 160ms ease, background 160ms ease;
+}
+
+.ocr-selection-card button:hover {
+  transform: translateY(-1px);
+}
+
+.ocr-selection-card button.is-copied {
+  background: #25ad6b;
+}
+
+.ocr-selection-card button span {
+  font-size: 10px;
+}
+
+.ocr-language-pills {
+  position: absolute;
+  right: 7%;
+  bottom: 8%;
+  display: flex;
+  gap: 5px;
+}
+
+.ocr-language-pills button {
+  padding: 5px 7px;
+  color: #6d7a90;
+  font-size: 8px;
+  font-weight: 750;
+  border: 1px solid rgba(255, 255, 255, 0.85);
+  border-radius: 999px;
+  background: rgba(255, 255, 255, 0.7);
+  box-shadow: 0 5px 12px rgba(48, 69, 103, 0.06);
+  transition: color 160ms ease, background 160ms ease, transform 160ms ease;
+}
+
+.ocr-language-pills button:hover {
+  transform: translateY(-1px);
+}
+
+.ocr-language-pills button.is-selected {
+  color: #0a70d8;
+  background: rgba(220, 239, 255, 0.88);
+  border-color: rgba(10, 132, 255, 0.18);
+}
+
+/* Capture scene */
+.capture-canvas {
+  position: absolute;
+  top: 6%;
+  right: 5%;
+  bottom: 8%;
+  left: 5%;
+  overflow: hidden;
+  border: 1px solid rgba(255, 255, 255, 0.9);
+  border-radius: 17px;
+  background: rgba(255, 255, 255, 0.78);
+  box-shadow: 0 19px 46px rgba(49, 70, 105, 0.16);
+}
+
+.canvas-app-bar {
+  display: flex;
+  height: 29px;
+  align-items: center;
+  gap: 8px;
+  padding: 0 11px;
+  color: #45536a;
+  background: rgba(247, 249, 252, 0.92);
+  border-bottom: 1px solid rgba(61, 80, 111, 0.07);
+}
+
+.canvas-app-bar > span {
+  width: 7px;
+  height: 7px;
+  border-radius: 999px;
+  background: #0a84ff;
+}
+
+.canvas-app-bar strong {
+  font-size: 8px;
+}
+
+.canvas-app-bar i {
+  width: 27px;
+  height: 5px;
+  margin-left: auto;
+  border-radius: 999px;
+  background: #d8dfe9;
+}
+
+.canvas-layout {
+  position: absolute;
+  inset: 29px 0 0;
+  display: grid;
+  grid-template-columns: 22% 1fr;
+  background: linear-gradient(145deg, #f8fafc, #eaf0f8);
+}
+
+.canvas-sidebar {
+  border-right: 1px solid rgba(61, 80, 111, 0.07);
+  background:
+    repeating-linear-gradient(180deg, transparent 0 13px, rgba(126, 140, 162, 0.18) 13px 18px, transparent 18px 28px),
+    rgba(231, 236, 244, 0.8);
+}
+
+.canvas-content {
+  padding: 13px 15px;
+}
+
+.canvas-heading,
+.canvas-line {
+  display: block;
+  height: 6px;
+  border-radius: 999px;
+  background: #cbd4e1;
+}
+
+.canvas-heading {
+  width: 42%;
+  height: 9px;
+  margin-bottom: 13px;
+  background: #93a4b9;
+}
+
+.canvas-line {
+  width: 74%;
+  margin-bottom: 8px;
+}
+
+.canvas-line.short {
+  width: 54%;
+}
+
+.canvas-chart {
+  display: flex;
+  height: 44%;
+  align-items: flex-end;
+  gap: 7px;
+  margin-top: 12px;
+  padding: 0 8px;
+  border-bottom: 1px solid rgba(85, 103, 132, 0.13);
+}
+
+.canvas-chart span {
+  flex: 1;
+  min-width: 5px;
+  border-radius: 4px 4px 0 0;
+  background: linear-gradient(180deg, rgba(10, 132, 255, 0.82), rgba(10, 132, 255, 0.24));
+}
+
+.canvas-chart span:nth-child(1) { height: 38%; }
+.canvas-chart span:nth-child(2) { height: 68%; }
+.canvas-chart span:nth-child(3) { height: 51%; }
+.canvas-chart span:nth-child(4) { height: 84%; }
+.canvas-chart span:nth-child(5) { height: 72%; }
+
+.capture-selection {
+  position: absolute;
+  z-index: 3;
+  top: 18%;
+  right: 10%;
+  bottom: 11%;
+  left: 20%;
+  border: 2px solid #0a84ff;
+  background: rgba(255, 255, 255, 0.14);
+  box-shadow:
+    0 0 0 999px rgba(21, 31, 48, 0.1),
+    inset 0 0 0 1px rgba(255, 255, 255, 0.48);
+}
+
+.selection-size {
+  position: absolute;
+  top: -21px;
+  left: -2px;
+  padding: 3px 6px;
+  color: #fff;
+  font-size: 7px;
+  font-weight: 750;
+  border-radius: 5px 5px 0 0;
+  background: #0a84ff;
+}
+
+.selection-handle {
+  position: absolute;
+  width: 7px;
+  height: 7px;
+  border: 2px solid #fff;
+  border-radius: 2px;
+  background: #0a84ff;
+  box-shadow: 0 2px 6px rgba(10, 89, 166, 0.22);
+}
+
+.handle-nw { top: -4px; left: -4px; }
+.handle-ne { top: -4px; right: -4px; }
+.handle-sw { bottom: -4px; left: -4px; }
+.handle-se { right: -4px; bottom: -4px; }
+
+.annotation-rect {
+  position: absolute;
+  top: 21%;
+  right: 19%;
+  bottom: 20%;
+  left: 17%;
+  border: 3px solid #ff5b52;
+  border-radius: 6px;
+  animation: annotation-pop 260ms ease both;
+}
+
+.annotation-rect span {
+  position: absolute;
+  width: 5px;
+  height: 5px;
+  border-radius: 999px;
+  background: #ff5b52;
+}
+
+.annotation-rect span:first-child { top: -4px; left: -4px; }
+.annotation-rect span:nth-child(2) { top: -4px; right: -4px; }
+.annotation-rect span:nth-child(3) { bottom: -4px; left: -4px; }
+.annotation-rect span:last-child { right: -4px; bottom: -4px; }
+
+.annotation-arrow,
+.annotation-pen {
+  position: absolute;
+  inset: 4%;
+  width: 92%;
+  height: 92%;
+  overflow: visible;
+}
+
+.annotation-arrow path,
+.annotation-pen path {
+  fill: none;
+  stroke: #ff5b52;
+  stroke-width: 7;
+  stroke-linecap: round;
+  stroke-linejoin: round;
+  stroke-dasharray: 260;
+  animation: annotation-draw 620ms ease-out both;
+}
+
+.annotation-mosaic {
+  position: absolute;
+  top: 22%;
+  right: 15%;
+  bottom: 24%;
+  left: 18%;
+  display: grid;
+  grid-template-columns: repeat(5, 1fr);
+  gap: 1px;
+  overflow: hidden;
+  border: 2px solid rgba(255, 91, 82, 0.78);
+  border-radius: 6px;
+  background: #d8e0eb;
+  animation: annotation-pop 260ms ease both;
+}
+
+.annotation-mosaic span {
+  background: #94a4b8;
+  animation: mosaic-pulse 1.8s ease-in-out infinite alternate;
+}
+
+.annotation-mosaic span:nth-child(3n) { background: #65778f; animation-delay: 0.15s; }
+.annotation-mosaic span:nth-child(4n) { background: #bdc8d5; animation-delay: 0.3s; }
+
+.capture-toolbar {
+  position: absolute;
+  z-index: 6;
+  bottom: 3%;
+  left: 50%;
+  display: flex;
+  align-items: center;
+  gap: 4px;
+  padding: 4px;
+  border: 1px solid rgba(255, 255, 255, 0.92);
+  border-radius: 13px;
+  background: rgba(255, 255, 255, 0.9);
+  box-shadow: 0 12px 28px rgba(40, 60, 94, 0.18);
+  backdrop-filter: blur(15px);
+  transform: translateX(-50%);
+}
+
+.capture-toolbar button {
+  display: grid;
+  place-items: center;
+  width: 31px;
+  height: 31px;
+  color: #69778c;
+  border-radius: 9px;
+  background: transparent;
+  transition: color 160ms ease, background 160ms ease, transform 160ms ease;
+}
+
+.capture-toolbar button:hover {
+  transform: translateY(-1px);
+}
+
+.capture-toolbar button.is-selected {
+  color: #fff;
+  background: #0a84ff;
+  box-shadow: 0 7px 15px rgba(10, 132, 255, 0.23);
+}
+
+.capture-toolbar svg {
+  width: 17px;
+  height: 17px;
+  fill: none;
+  stroke: currentColor;
+  stroke-width: 1.8;
+  stroke-linecap: round;
+  stroke-linejoin: round;
+}
+
+.toolbar-divider {
+  width: 1px;
+  height: 18px;
+  margin-inline: 2px;
+  background: #dce2ea;
+}
+
+.toolbar-color {
+  width: 17px;
+  height: 17px;
+  margin: 0 4px 0 2px;
+  border: 3px solid #fff;
+  border-radius: 999px;
+  background: #ff5b52;
+  box-shadow: 0 0 0 1px rgba(38, 52, 73, 0.12);
+}
+
+.slide-panel-viewport {
+  position: absolute;
+  right: clamp(22px, 4vw, 52px);
+  bottom: 34px;
+  left: clamp(22px, 4vw, 52px);
+  display: grid;
+  min-height: 92px;
+  overflow: hidden;
+}
+
+.slide-panel {
+  position: relative;
+  grid-area: 1 / 1;
+  will-change: transform;
+}
+
+.slide-panel p {
+  margin: 0 0 7px;
+  color: #0a84ff;
+  font-size: 12px;
+  font-weight: 800;
+  letter-spacing: 0.16em;
+  text-transform: uppercase;
+}
+
+.slide-panel h2 {
+  margin: 0;
+  color: #0b1524;
+  font-size: clamp(27px, 3vw, 42px);
+  font-weight: 780;
+  letter-spacing: -0.055em;
+  line-height: 1;
+}
+
+.slide-panel span {
+  display: block;
+  max-width: 620px;
+  margin-top: 10px;
+  color: #657186;
+  font-size: 15px;
+  line-height: 1.58;
+}
+
+.carousel-bar {
+  display: grid;
+  grid-template-columns: 48px minmax(0, 1fr) auto 48px;
+  align-items: center;
+  gap: 12px;
+  padding: 10px;
+  border: 1px solid rgba(255, 255, 255, 0.72);
+  border-radius: 999px;
+  background: rgba(255, 255, 255, 0.58);
+  box-shadow: 0 18px 42px rgba(52, 68, 100, 0.1);
+  backdrop-filter: blur(22px);
+}
+
+.nav-btn {
+  display: grid;
+  place-items: center;
+  width: 48px;
+  height: 48px;
+  color: #1f2937;
+  cursor: pointer;
+  border-radius: 999px;
+  background: rgba(255, 255, 255, 0.78);
+  box-shadow: inset 0 0 0 1px rgba(0, 0, 0, 0.04);
+  transition:
+    transform 180ms ease,
+    background 180ms ease;
+}
+
+.slide-meta-viewport {
+  position: relative;
+  min-width: 0;
+  height: 28px;
+  overflow: hidden;
+}
+
+.slide-meta {
+  position: absolute;
+  inset: 0;
+  display: flex;
+  min-width: 0;
+  align-items: baseline;
+  gap: 10px;
+  padding-left: 4px;
+  will-change: transform;
+}
+
+.slide-meta strong {
+  color: #0a1220;
+  font-size: 20px;
+  letter-spacing: -0.04em;
+}
+
+.slide-meta span {
+  overflow: hidden;
+  color: #667287;
+  font-size: 13px;
+  font-weight: 600;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.dots {
+  display: flex;
+  align-items: center;
+  gap: 7px;
+}
+
+.dot {
+  width: 8px;
+  height: 8px;
+  padding: 0;
+  cursor: pointer;
+  border-radius: 999px;
+  background: rgba(106, 119, 140, 0.32);
+  transition:
+    width 180ms ease,
+    background 180ms ease;
+}
+
+.dot.is-active {
+  width: 24px;
+  background: #0a84ff;
+}
+
+.is-entering-from-right {
+  animation: carousel-enter-from-right 420ms cubic-bezier(0.22, 1, 0.36, 1) both;
+}
+
+.is-exiting-from-right {
+  animation: carousel-exit-to-left 420ms cubic-bezier(0.22, 1, 0.36, 1) both;
+}
+
+.is-entering-from-left {
+  animation: carousel-enter-from-left 420ms cubic-bezier(0.22, 1, 0.36, 1) both;
+}
+
+.is-exiting-from-left {
+  animation: carousel-exit-to-right 420ms cubic-bezier(0.22, 1, 0.36, 1) both;
+}
+
+@keyframes carousel-enter-from-right {
+  from {
+    transform: translate3d(100%, 0, 0);
+  }
+
+  to {
+    transform: translate3d(0, 0, 0);
+  }
+}
+
+@keyframes carousel-exit-to-left {
+  from {
+    transform: translate3d(0, 0, 0);
+  }
+
+  to {
+    transform: translate3d(-100%, 0, 0);
+  }
+}
+
+@keyframes carousel-enter-from-left {
+  from {
+    transform: translate3d(-100%, 0, 0);
+  }
+
+  to {
+    transform: translate3d(0, 0, 0);
+  }
+}
+
+@keyframes carousel-exit-to-right {
+  from {
+    transform: translate3d(0, 0, 0);
+  }
+
+  to {
+    transform: translate3d(100%, 0, 0);
+  }
+}
+
+@keyframes scene-float {
+  0%,
+  100% {
+    transform: translate3d(0, 0, 0);
+  }
+
+  50% {
+    transform: translate3d(0, -6px, 0);
+  }
+}
+
+@keyframes upload-route-marquee {
+  to {
+    stroke-dashoffset: -100;
+  }
+}
+
+@keyframes upload-packet-obs {
+  0%,
+  10% {
+    top: 50%;
+    left: 50%;
+    opacity: 0;
+  }
+
+  12% {
+    top: 50%;
+    left: 50%;
+    opacity: 1;
+  }
+
+  34% {
+    top: 46.6%;
+    left: 55.7%;
+    opacity: 1;
+  }
+
+  56% {
+    top: 39.2%;
+    left: 60.1%;
+    opacity: 1;
+  }
+
+  78% {
+    top: 31.7%;
+    left: 64.8%;
+    opacity: 1;
+  }
+
+  96% {
+    top: 28.3%;
+    left: 71%;
+    opacity: 1;
+  }
+
+  100% {
+    top: 28.3%;
+    left: 71%;
+    opacity: 0;
+  }
+}
+
+@keyframes upload-packet-ssh {
+  0%,
+  10% {
+    top: 50%;
+    left: 50%;
+    opacity: 0;
+  }
+
+  12% {
+    top: 50%;
+    left: 50%;
+    opacity: 1;
+  }
+
+  34% {
+    top: 50%;
+    left: 55.5%;
+    opacity: 1;
+  }
+
+  56% {
+    top: 50%;
+    left: 60.5%;
+    opacity: 1;
+  }
+
+  78% {
+    top: 50%;
+    left: 65.5%;
+    opacity: 1;
+  }
+
+  96% {
+    top: 50%;
+    left: 71%;
+    opacity: 1;
+  }
+
+  100% {
+    top: 50%;
+    left: 71%;
+    opacity: 0;
+  }
+}
+
+@keyframes upload-packet-ftp {
+  0%,
+  10% {
+    top: 50%;
+    left: 50%;
+    opacity: 0;
+  }
+
+  12% {
+    top: 50%;
+    left: 50%;
+    opacity: 1;
+  }
+
+  34% {
+    top: 53.4%;
+    left: 55.7%;
+    opacity: 1;
+  }
+
+  56% {
+    top: 60.8%;
+    left: 60.1%;
+    opacity: 1;
+  }
+
+  78% {
+    top: 68.3%;
+    left: 64.8%;
+    opacity: 1;
+  }
+
+  96% {
+    top: 71.7%;
+    left: 71%;
+    opacity: 1;
+  }
+
+  100% {
+    top: 71.7%;
+    left: 71%;
+    opacity: 0;
+  }
+}
+
+@keyframes upload-arrow-obs {
+  0%,
+  12% {
+    transform: rotate(0deg);
+  }
+
+  34% {
+    transform: rotate(-25deg);
+  }
+
+  56% {
+    transform: rotate(-42deg);
+  }
+
+  78% {
+    transform: rotate(-36deg);
+  }
+
+  96%,
+  100% {
+    transform: rotate(0deg);
+  }
+}
+
+@keyframes upload-arrow-ftp {
+  0%,
+  12% {
+    transform: rotate(0deg);
+  }
+
+  34% {
+    transform: rotate(25deg);
+  }
+
+  56% {
+    transform: rotate(42deg);
+  }
+
+  78% {
+    transform: rotate(36deg);
+  }
+
+  96%,
+  100% {
+    transform: rotate(0deg);
+  }
+}
+
+@keyframes ai-scan {
+  0%,
+  100% {
+    top: 28px;
+    opacity: 0.3;
+  }
+
+  50% {
+    top: calc(100% - 3px);
+    opacity: 1;
+  }
+}
+
+@keyframes ai-core-breathe {
+  0%,
+  100% {
+    transform: translate(-50%, -50%) scale(1);
+  }
+
+  50% {
+    transform: translate(-50%, -50%) scale(1.06);
+  }
+}
+
+@keyframes orbit-spin {
+  to {
+    transform: rotate(360deg);
+  }
+}
+
+@keyframes ocr-scan {
+  0%,
+  100% {
+    top: 30px;
+    opacity: 0.25;
+  }
+
+  52% {
+    top: calc(100% - 3px);
+    opacity: 1;
+  }
+}
+
+@keyframes annotation-pop {
+  from {
+    opacity: 0;
+    transform: scale(0.9);
+  }
+
+  to {
+    opacity: 1;
+    transform: scale(1);
+  }
+}
+
+@keyframes annotation-draw {
+  from {
+    stroke-dashoffset: 260;
+  }
+
+  to {
+    stroke-dashoffset: 0;
+  }
+}
+
+@keyframes mosaic-pulse {
+  from {
+    filter: brightness(0.9);
+  }
+
+  to {
+    filter: brightness(1.12);
+  }
+}
+
+@media (max-width: 860px) {
+  html,
+  body,
+  #root {
+    height: auto;
+    min-height: 100%;
+    overflow: visible;
+  }
+
+  html {
+    overflow-x: clip;
+  }
+
+  body,
+  #root {
+    min-height: 100svh;
+  }
+
+  .landing-shell {
+    align-content: start;
+    align-items: stretch;
+    grid-template-columns: 1fr;
+    grid-template-rows: auto auto;
+    gap: 18px;
+    height: auto;
+    min-height: 100svh;
+    max-height: none;
+    padding: 124px 18px 18px;
+    overflow: clip;
+  }
+
+  .hero-copy {
+    align-items: center;
+    text-align: center;
+  }
+
+  .brand {
+    top: 18px;
+    left: 18px;
+  }
+
+  h1 {
+    max-width: 620px;
+    font-size: clamp(38px, 8.4vw, 60px);
+  }
+
+  .subtitle {
+    max-width: 560px;
+    margin-top: 12px;
+    font-size: clamp(17px, 4vw, 22px);
+  }
+
+  .intro {
+    max-width: 620px;
+    margin-top: 9px;
+    font-size: 13px;
+    line-height: 1.55;
+  }
+
+  .cta-row {
+    justify-content: center;
+    margin-top: 16px;
+  }
+
+  .product-showcase {
+    min-height: 0;
+  }
+
+  .device-card {
+    height: clamp(350px, 68vw, 470px);
+    min-height: clamp(350px, 68vw, 470px);
+    max-height: none;
+    border-radius: 32px;
+  }
+
+  .preview-stage {
+    inset: 52px 18px 118px;
+    border-radius: 24px;
+  }
+
+  .slide-panel-viewport {
+    right: 22px;
+    bottom: 22px;
+    left: 22px;
+    min-height: 72px;
+  }
+
+  .slide-panel h2 {
+    font-size: 25px;
+  }
+
+  .slide-panel span {
+    margin-top: 6px;
+    font-size: 13px;
+    line-height: 1.45;
+  }
+}
+
+@media (max-width: 560px) {
+  .landing-shell {
+    padding: 114px 14px 14px;
+    gap: 12px;
+  }
+
+  .brand {
+    top: 14px;
+    left: 14px;
+  }
+
+  .logo-mark {
+    width: 40px;
+    height: 40px;
+    border-radius: 13px;
+  }
+
+  .brand-name {
+    font-size: 16px;
+  }
+
+  .brand-overline {
+    font-size: 11px;
+  }
+
+  h1 {
+    font-size: clamp(34px, 10vw, 46px);
+  }
+
+  .subtitle {
+    font-size: 17px;
+  }
+
+  .intro {
+    display: -webkit-box;
+    overflow: hidden;
+    -webkit-box-orient: vertical;
+    -webkit-line-clamp: 2;
+  }
+
+  .primary-cta,
+  .github-cta {
+    min-height: 44px;
+    font-size: 14px;
+  }
+
+  .primary-cta {
+    padding-inline: 18px;
+  }
+
+  .github-cta {
+    width: 44px;
+    height: 44px;
+  }
+
+  .platform-note {
+    font-size: 11px;
+  }
+
+  .device-card {
+    height: 350px;
+    min-height: 350px;
+  }
+
+  .window-chrome {
+    top: 17px;
+    left: 18px;
+  }
+
+  .preview-stage {
+    inset: 46px 14px 112px;
+    background-size: 28px 28px, 28px 28px, auto;
+  }
+
+  .upload-file-card {
+    top: 50%;
+    left: 5%;
+    width: 45%;
+    padding: 8px;
+    border-radius: 12px;
+    transform: translateY(-50%);
+  }
+
+  .upload-file-preview {
+    height: auto;
+    border-radius: 8px;
+  }
+
+  .upload-file-copy {
+    margin-top: 6px;
+  }
+
+  .upload-file-copy span {
+    font-size: 9px;
+  }
+
+  .upload-destinations {
+    top: 18%;
+    right: 3%;
+    bottom: 18%;
+    width: 26%;
+    gap: 8px;
+  }
+
+  .upload-destinations button {
+    grid-template-columns: 6px minmax(0, 1fr);
+    column-gap: 5px;
+    min-height: 35px;
+    padding: 5px 6px;
+    border-radius: 9px;
+  }
+
+  .upload-destinations button:hover {
+    transform: translateX(-3px);
+  }
+
+  .upload-destinations button.is-selected {
+    transform: none;
+  }
+
+  .destination-status {
+    width: 6px;
+    height: 6px;
+  }
+
+  .upload-destinations strong {
+    font-size: 9px;
+  }
+
+  .upload-destinations small {
+    font-size: 7px;
+  }
+
+  .upload-result {
+    bottom: 1%;
+    left: 5%;
+    width: 45%;
+    gap: 6px;
+    padding: 7px 8px;
+    border-radius: 11px;
+  }
+
+  .result-check {
+    width: 21px;
+    height: 21px;
+    font-size: 10px;
+  }
+
+  .upload-result small {
+    font-size: 7px;
+  }
+
+  .upload-result strong {
+    font-size: 8px;
+  }
+
+  .ai-source-card {
+    top: 4%;
+    bottom: 4%;
+    left: 3%;
+    width: 49%;
+    border-radius: 13px;
+  }
+
+  .mini-window-bar {
+    height: 22px;
+    padding-inline: 8px;
+  }
+
+  .ai-source-content {
+    inset: 22px 0 0;
+  }
+
+  .source-settings {
+    gap: 8px;
+  }
+
+  .source-dialog {
+    right: 5%;
+    bottom: 12%;
+    left: 27%;
+    gap: 5px;
+    padding: 6px;
+    border-radius: 8px;
+  }
+
+  .dialog-icon {
+    width: 19px;
+    height: 19px;
+    font-size: 9px;
+    border-radius: 6px;
+  }
+
+  .source-dialog strong {
+    font-size: 7px;
+  }
+
+  .source-dialog small {
+    font-size: 6px;
+  }
+
+  .ai-core {
+    width: 34px;
+    height: 34px;
+    font-size: 9px;
+    border-width: 3px;
+  }
+
+  .orbit-two {
+    inset: -15px;
+  }
+
+  .ai-result-card {
+    top: 8%;
+    right: 3%;
+    width: 45%;
+    padding: 8px;
+    border-radius: 12px;
+  }
+
+  .ai-spark {
+    width: 19px;
+    height: 19px;
+    font-size: 10px;
+    border-radius: 6px;
+  }
+
+  .ai-result-heading strong {
+    font-size: 8px;
+  }
+
+  .ai-result-card p {
+    min-height: 30px;
+    margin: 7px 0;
+    font-size: 8px;
+    line-height: 1.45;
+  }
+
+  .confidence-row small {
+    font-size: 6px;
+  }
+
+  .ai-mode-switch {
+    right: 4%;
+    bottom: 5%;
+  }
+
+  .ai-mode-switch button {
+    min-width: 34px;
+    padding: 5px 6px;
+    font-size: 8px;
+  }
+
+  .ocr-document {
+    top: 4%;
+    bottom: 4%;
+    left: 4%;
+    width: 50%;
+    border-radius: 13px;
+  }
+
+  .document-header {
+    height: 24px;
+    padding-inline: 8px;
+  }
+
+  .document-copy {
+    gap: 6px;
+    padding: 9px 10px;
+  }
+
+  .document-copy > strong {
+    margin-bottom: 1px;
+    font-size: 9px;
+  }
+
+  .text-line {
+    height: 4px;
+  }
+
+  .line-highlight {
+    height: 14px;
+  }
+
+  .line-highlight i {
+    font-size: 6px;
+  }
+
+  .ocr-selection-card {
+    top: 8%;
+    right: 3%;
+    width: 45%;
+    padding: 8px;
+    border-radius: 12px;
+  }
+
+  .ocr-selection-card p {
+    min-height: 24px;
+    margin: 6px 0;
+    font-size: 8px;
+    line-height: 1.45;
+  }
+
+  .ocr-selection-card button {
+    min-height: 26px;
+    margin-top: 6px;
+    font-size: 8px;
+  }
+
+  .ocr-language-pills {
+    right: 4%;
+    bottom: 4%;
+    gap: 3px;
+  }
+
+  .ocr-language-pills button {
+    padding: 4px 6px;
+    font-size: 7px;
+  }
+
+  .capture-canvas {
+    top: 4%;
+    right: 3%;
+    bottom: 4%;
+    left: 3%;
+    border-radius: 13px;
+  }
+
+  .canvas-app-bar {
+    height: 23px;
+  }
+
+  .canvas-layout {
+    inset: 23px 0 0;
+  }
+
+  .canvas-content {
+    padding: 9px 11px;
+  }
+
+  .canvas-heading {
+    margin-bottom: 8px;
+  }
+
+  .canvas-line {
+    margin-bottom: 5px;
+  }
+
+  .canvas-chart {
+    margin-top: 7px;
+  }
+
+  .capture-toolbar {
+    bottom: 2%;
+    padding: 3px;
+    border-radius: 11px;
+  }
+
+  .capture-toolbar button {
+    width: 27px;
+    height: 27px;
+    border-radius: 8px;
+  }
+
+  .capture-toolbar svg {
+    width: 14px;
+    height: 14px;
+  }
+
+  .toolbar-color {
+    width: 14px;
+    height: 14px;
+  }
+
+  .slide-panel h2 {
+    font-size: 22px;
+  }
+
+  .slide-panel span {
+    display: -webkit-box;
+    overflow: hidden;
+    -webkit-box-orient: vertical;
+    -webkit-line-clamp: 2;
+  }
+
+  .carousel-bar {
+    grid-template-columns: 42px minmax(0, 1fr) 42px;
+    border-radius: 28px;
+  }
+
+  .dots {
+    display: none;
+  }
+
+  .nav-btn {
+    width: 42px;
+    height: 42px;
+  }
+
+  .slide-meta {
+    flex-direction: column;
+    align-items: flex-start;
+    gap: 1px;
+  }
+
+  .slide-meta-viewport {
+    height: 38px;
+  }
+
+  .slide-meta strong {
+    font-size: 16px;
+  }
+
+  .slide-meta span {
+    max-width: 100%;
+    font-size: 12px;
+  }
+}
+
+@media (max-height: 700px) and (min-width: 861px) {
+  .landing-shell {
+    padding-block: 74px 30px;
+  }
+
+  .brand {
+    top: 30px;
+  }
+
+  h1 {
+    font-size: clamp(42px, 5vw, 64px);
+  }
+
+  .subtitle {
+    margin-top: 14px;
+  }
+
+  .intro {
+    line-height: 1.55;
+  }
+
+  .cta-row {
+    margin-top: 24px;
+  }
+
+  .device-card {
+    min-height: 500px;
+  }
+}
+
+@media (prefers-reduced-motion: reduce) {
+  *,
+  *::before,
+  *::after {
+    scroll-behavior: auto !important;
+    animation-duration: 0.01ms !important;
+    animation-iteration-count: 1 !important;
+    transition-duration: 0.01ms !important;
+  }
+}
diff --git a/promo/landing/src/main.tsx b/promo/landing/src/main.tsx
new file mode 100644
index 0000000..27481e0
--- /dev/null
+++ b/promo/landing/src/main.tsx
@@ -0,0 +1,10 @@
+import React from "react";
+import ReactDOM from "react-dom/client";
+import App from "./App";
+import "./index.css";
+
+ReactDOM.createRoot(document.getElementById("root")!).render(
+  <React.StrictMode>
+    <App />
+  </React.StrictMode>,
+);
diff --git a/promo/landing/src/vite-env.d.ts b/promo/landing/src/vite-env.d.ts
new file mode 100644
index 0000000..11f02fe
--- /dev/null
+++ b/promo/landing/src/vite-env.d.ts
@@ -0,0 +1 @@
+/// <reference types="vite/client" />
diff --git a/promo/landing/tsconfig.app.json b/promo/landing/tsconfig.app.json
new file mode 100644
index 0000000..16c4fc8
--- /dev/null
+++ b/promo/landing/tsconfig.app.json
@@ -0,0 +1,22 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "lib": ["ES2022", "DOM", "DOM.Iterable"],
+    "module": "ESNext",
+    "moduleResolution": "bundler",
+    "jsx": "react-jsx",
+    "strict": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "noFallthroughCasesInSwitch": true,
+    "skipLibCheck": true,
+    "esModuleInterop": true,
+    "allowSyntheticDefaultImports": true,
+    "resolveJsonModule": true,
+    "isolatedModules": true,
+    "useDefineForClassFields": true,
+    "allowImportingTsExtensions": false,
+    "noEmit": true
+  },
+  "include": ["src"]
+}
diff --git a/promo/landing/tsconfig.json b/promo/landing/tsconfig.json
new file mode 100644
index 0000000..1ffef60
--- /dev/null
+++ b/promo/landing/tsconfig.json
@@ -0,0 +1,7 @@
+{
+  "files": [],
+  "references": [
+    { "path": "./tsconfig.app.json" },
+    { "path": "./tsconfig.node.json" }
+  ]
+}
diff --git a/promo/landing/tsconfig.node.json b/promo/landing/tsconfig.node.json
new file mode 100644
index 0000000..1f905a5
--- /dev/null
+++ b/promo/landing/tsconfig.node.json
@@ -0,0 +1,15 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "lib": ["ES2023"],
+    "module": "ESNext",
+    "moduleResolution": "bundler",
+    "strict": true,
+    "skipLibCheck": true,
+    "esModuleInterop": true,
+    "allowSyntheticDefaultImports": true,
+    "isolatedModules": true,
+    "noEmit": true
+  },
+  "include": ["vite.config.ts"]
+}
diff --git a/promo/landing/vite.config.ts b/promo/landing/vite.config.ts
new file mode 100644
index 0000000..f385f51
--- /dev/null
+++ b/promo/landing/vite.config.ts
@@ -0,0 +1,17 @@
+import { defineConfig, loadEnv } from "vite";
+import react from "@vitejs/plugin-react";
+import tailwindcss from "@tailwindcss/vite";
+
+// https://vitejs.dev/config/
+export default defineConfig(({ mode }) => {
+  const env = loadEnv(mode, ".", "");
+
+  return {
+    base: env.VITE_BASE_PATH || "/",
+    plugins: [react(), tailwindcss()],
+    server: {
+      port: 5273,
+      open: true,
+    },
+  };
+});
diff --git a/scripts/create-dev-cert.sh b/scripts/create-dev-cert.sh
new file mode 100755
index 0000000..8e71a17
--- /dev/null
+++ b/scripts/create-dev-cert.sh
@@ -0,0 +1,95 @@
+#!/usr/bin/env bash
+# =============================================================================
+# create-dev-cert.sh — Create a stable, self-signed code-signing certificate.
+#
+# Why this exists:
+#   macOS's privacy database (TCC) tracks app identity primarily by the
+#   code-signing cdhash (for ad-hoc) or the certificate (for properly signed
+#   apps). Wails default ad-hoc signing produces a new cdhash on every build,
+#   so TCC keeps re-prompting for Screen Recording / Accessibility permission.
+#
+#   By creating ONE self-signed certificate locally and reusing it for every
+#   build, the signing identity never changes, so TCC remembers the grant.
+#
+# Idempotent: if the cert already exists with the configured CN, this script
+# is a no-op and exits 0.
+# =============================================================================
+set -euo pipefail
+
+CERT_CN="${CERT_CN:-SnapGo Dev Cert}"
+KEYCHAIN="${KEYCHAIN:-login.keychain-db}"
+
+# 1. Skip ONLY if a usable code-signing identity exists. We deliberately do
+#    not skip on the mere presence of a certificate object, because a partial
+#    import (e.g. wrong PKCS#12 password) leaves the cert behind without a
+#    private key, which makes codesign fail later in confusing ways.
+if security find-identity -v -p codesigning 2>/dev/null | grep -q "\"${CERT_CN}\""; then
+  echo "[create-dev-cert.sh] usable identity '${CERT_CN}' already present — nothing to do."
+  exit 0
+fi
+
+# 1b. Clean any stale certificate-only entry from a previous failed import,
+#     so the new import does not collide on duplicate CN.
+if security find-certificate -c "${CERT_CN}" "${KEYCHAIN}" >/dev/null 2>&1; then
+  echo "[create-dev-cert.sh] removing stale (key-less) cert entry from previous run..."
+  # Loop because there may be multiple stale copies.
+  while security find-certificate -c "${CERT_CN}" "${KEYCHAIN}" >/dev/null 2>&1; do
+    security delete-certificate -c "${CERT_CN}" "${KEYCHAIN}" >/dev/null 2>&1 || break
+  done
+fi
+
+# 2. Generate a self-signed code-signing cert via openssl + import via security.
+WORK="$(mktemp -d)"
+trap 'rm -rf "${WORK}"' EXIT
+
+KEY="${WORK}/dev.key"
+CSR="${WORK}/dev.csr"
+CRT="${WORK}/dev.crt"
+P12="${WORK}/dev.p12"
+EXTFILE="${WORK}/ext.cnf"
+
+# X509 v3 extension file enabling "Code Signing" extended key usage (EKU).
+cat > "${EXTFILE}" <<'EOF'
+[v3_ext]
+keyUsage = critical,digitalSignature
+extendedKeyUsage = critical,codeSigning
+basicConstraints = CA:false
+EOF
+
+echo "[create-dev-cert.sh] generating private key..."
+openssl genrsa -out "${KEY}" 2048 >/dev/null 2>&1
+
+echo "[create-dev-cert.sh] generating CSR..."
+openssl req -new -key "${KEY}" -out "${CSR}" -subj "/CN=${CERT_CN}/O=SnapGo Dev/C=US" >/dev/null 2>&1
+
+echo "[create-dev-cert.sh] self-signing certificate (10 years)..."
+openssl x509 -req -in "${CSR}" -signkey "${KEY}" -out "${CRT}" \
+  -days 3650 -extfile "${EXTFILE}" -extensions v3_ext >/dev/null 2>&1
+
+echo "[create-dev-cert.sh] bundling into PKCS#12..."
+# `-legacy` is REQUIRED on OpenSSL 3+: macOS's `security` tool can only
+# verify the legacy PKCS#12 MAC (SHA-1 / 3DES). Without this flag the import
+# fails with "MAC verification failed during PKCS12 import".
+# Use a non-empty passphrase to avoid edge cases where empty pass triggers
+# different MAC behaviour on some openssl builds.
+P12_PASS="snapgo"
+openssl pkcs12 -export -legacy \
+  -inkey "${KEY}" -in "${CRT}" -out "${P12}" \
+  -name "${CERT_CN}" -passout "pass:${P12_PASS}" >/dev/null 2>&1
+
+echo "[create-dev-cert.sh] importing into ${KEYCHAIN} (you may be prompted for your login password)..."
+security import "${P12}" -k "${KEYCHAIN}" -P "${P12_PASS}" -T /usr/bin/codesign
+
+# 3. Mark the cert as trusted for code signing. This requires admin.
+#    We use `security add-trusted-cert` with policy `codeSign`.
+echo "[create-dev-cert.sh] adding trust setting (admin password may be required)..."
+sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain \
+  -p codeSign "${CRT}" || {
+    echo "[create-dev-cert.sh] WARN: trust setting could not be added. The cert"
+    echo "  is still importable for codesign use, but TCC may still re-prompt"
+    echo "  unless the cert is trusted. Re-run as admin to fix."
+}
+
+echo "[create-dev-cert.sh] done. Verify with:"
+echo "    security find-identity -v -p codesigning"
+echo "You should see: '${CERT_CN}'"
diff --git a/scripts/dev-build.sh b/scripts/dev-build.sh
new file mode 100755
index 0000000..c4f590e
--- /dev/null
+++ b/scripts/dev-build.sh
@@ -0,0 +1,73 @@
+#!/usr/bin/env bash
+# =============================================================================
+# dev-build.sh — Local dev rebuild + stable re-sign + open.
+#
+# Use this instead of plain `wails build` while iterating, so that every
+# rebuild uses the same self-signed dev certificate (created by
+# create-dev-cert.sh). This keeps macOS TCC from re-prompting for Screen
+# Recording / Accessibility permissions after every code change.
+#
+# Workflow:
+#   ./scripts/create-dev-cert.sh   # one time
+#   ./scripts/dev-build.sh         # every rebuild
+# =============================================================================
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+ROOT_DIR="$(cd "${SCRIPT_DIR}/.." && pwd)"
+cd "${ROOT_DIR}"
+
+CERT_CN="${CERT_CN:-SnapGo Dev Cert}"
+
+# 1. Make sure wails is on PATH (works whether or not the user added it).
+_GOBINPATH=$(go env GOBIN)
+if [ "${_GOBINPATH}X" == "X" ]; then
+    _GOBINPATH=$(go env GOPATH)/bin
+fi
+export PATH="${_GOBINPATH}:${PATH}"
+
+# 2. Make sure the dev cert exists. If not, abort with a clear pointer.
+if ! security find-identity -v -p codesigning | grep -q "${CERT_CN}"; then
+  echo "[dev-build.sh] ERROR: code-signing identity '${CERT_CN}' not found." >&2
+  echo "  Run ./scripts/create-dev-cert.sh first." >&2
+  exit 1
+fi
+
+# 3. Stop any running instance so the rebuild is not blocked by file locks
+#    and so the next launch uses the fresh binary.
+pkill -f SnapGo 2>/dev/null || true
+sleep 0.4
+
+# 4. Build via Wails. We deliberately keep the default ad-hoc-style packaging
+#    and re-sign right after, since `wails build` does not expose a
+#    --identity flag in v2.
+ARCH="${ARCH:-arm64}"
+echo "[dev-build.sh] building darwin/${ARCH}..."
+# Allow the -Wl,-no_warn_duplicate_libraries flag declared in the darwin cgo
+# files past Go's cgo LDFLAGS allowlist (see activation_policy_darwin.go).
+export CGO_LDFLAGS_ALLOW='-Wl,-no_warn_duplicate_libraries'
+wails build -platform "darwin/${ARCH}" -clean
+
+# 5. Re-sign with the stable dev cert. We invoke sign.sh through env var
+#    DEVELOPER_ID_APPLICATION which it accepts as the identity.
+APP_PATH="${ROOT_DIR}/build/bin/SnapGo.app"
+echo "[dev-build.sh] re-signing ${APP_PATH} with '${CERT_CN}'..."
+DEVELOPER_ID_APPLICATION="${CERT_CN}" SIGN_MODE=developer-id \
+  "${SCRIPT_DIR}/sign.sh" >/dev/null
+
+# 6. Sync to /Applications and launch from there.
+#    Why /Applications: macOS TCC tracks an app by its code-signing identity
+#    AND its on-disk path. Running from a stable absolute path makes the
+#    privacy grants stick. We deliberately do NOT launch from build/bin to
+#    avoid creating a second TCC entry every time the build dir moves.
+INSTALL_PATH="/Applications/SnapGo.app"
+echo "[dev-build.sh] syncing to ${INSTALL_PATH}..."
+rm -rf "${INSTALL_PATH}"
+cp -R "${APP_PATH}" "${INSTALL_PATH}"
+
+echo "[dev-build.sh] opening app..."
+open "${INSTALL_PATH}"
+
+echo "[dev-build.sh] done. If TCC still re-prompts, run:"
+echo "    tccutil reset ScreenCapture io.snapgo.app"
+echo "    tccutil reset Accessibility io.snapgo.app"
diff --git a/scripts/make-dmg.sh b/scripts/make-dmg.sh
new file mode 100755
index 0000000..793e9ee
--- /dev/null
+++ b/scripts/make-dmg.sh
@@ -0,0 +1,85 @@
+#!/usr/bin/env bash
+# =============================================================================
+# make-dmg.sh — Build a distributable .dmg for SnapGo.app
+#
+# Design rationale:
+# - Prefer `create-dmg` (https://github.com/create-dmg/create-dmg) when available
+#   because it produces a polished installer with /Applications drag target,
+#   custom background and proper icon layout.
+# - Fall back to a plain `hdiutil create` UDZO image so the script always works
+#   on a fresh machine even without homebrew. The fallback DMG still shows the
+#   app + a symlink to /Applications so users can drag-install.
+# - Output is always written to build/bin/SnapGo-<version>-<arch>.dmg so it
+#   does not collide with the .app bundle.
+# =============================================================================
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+ROOT_DIR="$(cd "${SCRIPT_DIR}/.." && pwd)"
+APP_PATH="${APP_PATH:-${ROOT_DIR}/build/bin/SnapGo.app}"
+OUT_DIR="${OUT_DIR:-${ROOT_DIR}/build/bin}"
+
+if [[ ! -d "${APP_PATH}" ]]; then
+  echo "[make-dmg.sh] ERROR: ${APP_PATH} not found." >&2
+  exit 1
+fi
+
+# -------- Version / arch derivation --------
+VERSION="${VERSION:-$(/usr/libexec/PlistBuddy -c 'Print :CFBundleShortVersionString' \
+                       "${APP_PATH}/Contents/Info.plist" 2>/dev/null || echo "0.1.0")}"
+ARCH="${ARCH:-$(uname -m)}"   # arm64 or x86_64
+DMG_NAME="SnapGo-${VERSION}-${ARCH}.dmg"
+DMG_PATH="${OUT_DIR}/${DMG_NAME}"
+VOLNAME="SnapGo ${VERSION}"
+
+mkdir -p "${OUT_DIR}"
+rm -f "${DMG_PATH}"
+
+# -------- Path 1: create-dmg (pretty) --------
+if command -v create-dmg >/dev/null 2>&1; then
+  echo "[make-dmg.sh] using create-dmg"
+  # NOTE: create-dmg refuses to run when the output exists; we already removed it.
+  create-dmg \
+      --volname "${VOLNAME}" \
+      --window-pos 200 120 \
+      --window-size 600 360 \
+      --icon-size 100 \
+      --icon "SnapGo.app" 160 180 \
+      --hide-extension "SnapGo.app" \
+      --app-drop-link 440 180 \
+      --no-internet-enable \
+      "${DMG_PATH}" \
+      "${APP_PATH}"
+else
+  # -------- Path 2: hdiutil fallback (always works) --------
+  echo "[make-dmg.sh] create-dmg not found, using hdiutil fallback"
+  STAGING="$(mktemp -d)"
+  trap 'rm -rf "${STAGING}"' EXIT
+
+  # Copy the .app and add an /Applications symlink so users can drag-install.
+  cp -R "${APP_PATH}" "${STAGING}/"
+  ln -s /Applications "${STAGING}/Applications"
+
+  hdiutil create \
+      -volname "${VOLNAME}" \
+      -srcfolder "${STAGING}" \
+      -ov -format UDZO \
+      "${DMG_PATH}"
+fi
+
+# -------- Sign the DMG itself if a Developer ID is available --------
+# Notarization requires the DMG be signed too.
+if [[ -n "${DEVELOPER_ID_APPLICATION:-}" ]]; then
+  echo "[make-dmg.sh] signing DMG with: ${DEVELOPER_ID_APPLICATION}"
+  codesign --force --sign "${DEVELOPER_ID_APPLICATION}" --timestamp "${DMG_PATH}"
+elif security find-identity -v -p codesigning 2>/dev/null \
+        | grep -q "Developer ID Application"; then
+  IDENT=$(security find-identity -v -p codesigning \
+            | awk -F'"' '/Developer ID Application/ {print $2; exit}')
+  echo "[make-dmg.sh] signing DMG with auto-detected identity: ${IDENT}"
+  codesign --force --sign "${IDENT}" --timestamp "${DMG_PATH}"
+else
+  echo "[make-dmg.sh] no Developer ID identity, DMG left unsigned (ad-hoc build)."
+fi
+
+echo "[make-dmg.sh] OK -> ${DMG_PATH}"
diff --git a/scripts/notarize.sh b/scripts/notarize.sh
new file mode 100755
index 0000000..637a95d
--- /dev/null
+++ b/scripts/notarize.sh
@@ -0,0 +1,76 @@
+#!/usr/bin/env bash
+# =============================================================================
+# notarize.sh — Submit the signed DMG to Apple Notary Service and staple the
+#               returned ticket so users get a green Gatekeeper check offline.
+#
+# Design rationale:
+# - We use `xcrun notarytool` (Xcode 13+). The legacy `altool` is deprecated.
+# - Two credential modes are supported, in order of preference:
+#     1. KEYCHAIN_PROFILE  — recommended, created once via:
+#          xcrun notarytool store-credentials "snapgo-notary" \
+#               --apple-id "<APPLE_ID>" \
+#               --team-id  "<TEAMID>" \
+#               --password "<APP_SPECIFIC_PASSWORD>"
+#     2. APPLE_ID + APPLE_TEAM_ID + APPLE_APP_SPECIFIC_PASSWORD env vars.
+# - After successful notarization we run `xcrun stapler staple` so the app/dmg
+#   is verifiable without an internet connection on the user's Mac.
+# =============================================================================
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+ROOT_DIR="$(cd "${SCRIPT_DIR}/.." && pwd)"
+
+DMG_PATH="${DMG_PATH:-}"
+if [[ -z "${DMG_PATH}" ]]; then
+  # Auto-detect the most recent DMG produced by make-dmg.sh
+  DMG_PATH="$(ls -1t "${ROOT_DIR}/build/bin/"SnapGo-*.dmg 2>/dev/null | head -1 || true)"
+fi
+if [[ -z "${DMG_PATH}" || ! -f "${DMG_PATH}" ]]; then
+  echo "[notarize.sh] ERROR: DMG not found. Set DMG_PATH or run make-dmg.sh first." >&2
+  exit 1
+fi
+
+# -------- Build the credential argv array --------
+# Using array form keeps spaces in passwords / paths safe.
+NOTARY_ARGS=()
+if [[ -n "${KEYCHAIN_PROFILE:-}" ]]; then
+  NOTARY_ARGS+=(--keychain-profile "${KEYCHAIN_PROFILE}")
+elif [[ -n "${APPLE_ID:-}" && -n "${APPLE_TEAM_ID:-}" && -n "${APPLE_APP_SPECIFIC_PASSWORD:-}" ]]; then
+  NOTARY_ARGS+=(--apple-id "${APPLE_ID}"
+                --team-id  "${APPLE_TEAM_ID}"
+                --password "${APPLE_APP_SPECIFIC_PASSWORD}")
+else
+  cat >&2 <<EOF
+[notarize.sh] ERROR: notary credentials not configured.
+
+Option A (recommended) — store once in keychain, then export KEYCHAIN_PROFILE:
+    xcrun notarytool store-credentials "snapgo-notary" \\
+         --apple-id  "you@example.com" \\
+         --team-id   "ABCDE12345" \\
+         --password  "<app-specific-password>"
+    export KEYCHAIN_PROFILE=snapgo-notary
+
+Option B — export env vars directly:
+    export APPLE_ID="you@example.com"
+    export APPLE_TEAM_ID="ABCDE12345"
+    export APPLE_APP_SPECIFIC_PASSWORD="abcd-efgh-ijkl-mnop"
+EOF
+  exit 1
+fi
+
+echo "[notarize.sh] submitting: ${DMG_PATH}"
+xcrun notarytool submit "${DMG_PATH}" "${NOTARY_ARGS[@]}" --wait
+
+echo "[notarize.sh] stapling ticket..."
+xcrun stapler staple "${DMG_PATH}"
+xcrun stapler validate "${DMG_PATH}"
+
+# Also staple the .app inside, if we still have it on disk — this ensures the
+# offline Gatekeeper check works even if the user copies the app out of the DMG.
+APP_PATH="${ROOT_DIR}/build/bin/SnapGo.app"
+if [[ -d "${APP_PATH}" ]]; then
+  echo "[notarize.sh] stapling app bundle..."
+  xcrun stapler staple "${APP_PATH}" || true
+fi
+
+echo "[notarize.sh] OK -> ${DMG_PATH}"
diff --git a/scripts/release.sh b/scripts/release.sh
new file mode 100755
index 0000000..04e94e5
--- /dev/null
+++ b/scripts/release.sh
@@ -0,0 +1,65 @@
+#!/usr/bin/env bash
+# =============================================================================
+# release.sh — One-shot build → sign → DMG → notarize → staple pipeline.
+#
+# Design rationale:
+# - Each stage is delegated to a dedicated single-purpose script. This keeps the
+#   pipeline composable: a developer can re-run any individual stage without
+#   redoing the whole release.
+# - Notarization is OPT-IN. Setting NOTARIZE=1 (or providing notary credentials)
+#   triggers it; otherwise we stop after producing a signed DMG, which is enough
+#   for internal distribution and CI smoke tests.
+# - ARCH defaults to the host arch so a developer on Apple Silicon gets an
+#   arm64 build. Set ARCH=universal to ship a fat binary.
+# =============================================================================
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+ROOT_DIR="$(cd "${SCRIPT_DIR}/.." && pwd)"
+
+ARCH="${ARCH:-$(uname -m)}"
+case "${ARCH}" in
+  arm64)      WAILS_PLATFORM="darwin/arm64" ;;
+  x86_64)     WAILS_PLATFORM="darwin/amd64" ;;
+  universal)  WAILS_PLATFORM="darwin/universal" ;;
+  *) echo "[release.sh] ERROR: unsupported ARCH=${ARCH}" >&2; exit 1 ;;
+esac
+
+echo "================================================================"
+echo " SnapGo release pipeline"
+echo "   arch     : ${ARCH}  (${WAILS_PLATFORM})"
+echo "   sign     : ${SIGN_MODE:-auto}"
+echo "   notarize : ${NOTARIZE:-0}"
+echo "================================================================"
+
+# ---- 1. Build ----
+echo ""
+echo "[release.sh] (1/4) wails build"
+# Allow the -Wl,-no_warn_duplicate_libraries flag declared in the darwin cgo
+# files past Go's cgo LDFLAGS allowlist (see activation_policy_darwin.go).
+( cd "${ROOT_DIR}" && CGO_LDFLAGS_ALLOW='-Wl,-no_warn_duplicate_libraries' wails build -platform "${WAILS_PLATFORM}" -clean )
+
+# ---- 2. Sign .app ----
+echo ""
+echo "[release.sh] (2/4) sign app"
+"${SCRIPT_DIR}/sign.sh"
+
+# ---- 3. DMG ----
+echo ""
+echo "[release.sh] (3/4) make DMG"
+ARCH="${ARCH}" "${SCRIPT_DIR}/make-dmg.sh"
+
+# ---- 4. Notarize (optional) ----
+echo ""
+if [[ "${NOTARIZE:-0}" == "1" || -n "${KEYCHAIN_PROFILE:-}" \
+   || ( -n "${APPLE_ID:-}" && -n "${APPLE_TEAM_ID:-}" \
+        && -n "${APPLE_APP_SPECIFIC_PASSWORD:-}" ) ]]; then
+  echo "[release.sh] (4/4) notarize"
+  "${SCRIPT_DIR}/notarize.sh"
+else
+  echo "[release.sh] (4/4) notarize SKIPPED (set NOTARIZE=1 with credentials to enable)"
+fi
+
+echo ""
+echo "[release.sh] DONE."
+ls -lh "${ROOT_DIR}/build/bin/"SnapGo-*.dmg 2>/dev/null || true
diff --git a/scripts/sign.sh b/scripts/sign.sh
new file mode 100755
index 0000000..c659a47
--- /dev/null
+++ b/scripts/sign.sh
@@ -0,0 +1,134 @@
+#!/usr/bin/env bash
+# =============================================================================
+# sign.sh — Sign SnapGo.app with Hardened Runtime.
+#
+# Design rationale:
+# - Two modes are supported, controlled purely by env vars (no CLI args), so
+#   the script stays idempotent and easy to wire into CI:
+#     1. "developer-id"  : real Developer ID Application signing for distribution
+#                          (requires DEVELOPER_ID_APPLICATION env or default
+#                           lookup via `security find-identity`).
+#     2. "ad-hoc"        : codesign with `-` identity. The bundle works on the
+#                          building machine after `xattr -dr com.apple.quarantine`,
+#                          but cannot be notarized.
+# - We always sign with --options=runtime so the bundle is notarization-ready.
+# - We sign nested binaries first, then the .app bundle (Apple's required order).
+# =============================================================================
+set -euo pipefail
+
+# -------- Paths --------
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+ROOT_DIR="$(cd "${SCRIPT_DIR}/.." && pwd)"
+APP_PATH="${APP_PATH:-${ROOT_DIR}/build/bin/SnapGo.app}"
+ENTITLEMENTS="${ENTITLEMENTS:-${ROOT_DIR}/build/darwin/entitlements.plist}"
+
+# -------- Mode resolution --------
+# SIGN_MODE=developer-id | ad-hoc (default: ad-hoc when no identity is found)
+SIGN_MODE="${SIGN_MODE:-auto}"
+SIGN_IDENTITY=""
+
+resolve_identity() {
+  if [[ -n "${DEVELOPER_ID_APPLICATION:-}" ]]; then
+    SIGN_IDENTITY="${DEVELOPER_ID_APPLICATION}"
+    SIGN_MODE="developer-id"
+    return
+  fi
+  # Try to auto-discover the first Developer ID Application identity.
+  local found
+  found=$(security find-identity -v -p codesigning 2>/dev/null \
+            | awk -F'"' '/Developer ID Application/ {print $2; exit}')
+  if [[ -n "${found}" ]]; then
+    SIGN_IDENTITY="${found}"
+    SIGN_MODE="developer-id"
+  else
+    SIGN_IDENTITY="-"
+    SIGN_MODE="ad-hoc"
+  fi
+}
+
+if [[ "${SIGN_MODE}" == "auto" ]]; then
+  resolve_identity
+elif [[ "${SIGN_MODE}" == "developer-id" ]]; then
+  if [[ -z "${DEVELOPER_ID_APPLICATION:-}" ]]; then
+    resolve_identity
+    if [[ "${SIGN_MODE}" != "developer-id" ]]; then
+      echo "[sign.sh] ERROR: SIGN_MODE=developer-id but no Developer ID Application identity found." >&2
+      echo "          Set DEVELOPER_ID_APPLICATION='Developer ID Application: NAME (TEAMID)'" >&2
+      exit 1
+    fi
+  else
+    SIGN_IDENTITY="${DEVELOPER_ID_APPLICATION}"
+  fi
+elif [[ "${SIGN_MODE}" == "ad-hoc" ]]; then
+  SIGN_IDENTITY="-"
+else
+  echo "[sign.sh] ERROR: invalid SIGN_MODE='${SIGN_MODE}'" >&2
+  exit 1
+fi
+
+# -------- Sanity check --------
+if [[ ! -d "${APP_PATH}" ]]; then
+  echo "[sign.sh] ERROR: app bundle not found at ${APP_PATH}" >&2
+  echo "          Run 'wails build -platform darwin/arm64 -clean' first." >&2
+  exit 1
+fi
+if [[ ! -f "${ENTITLEMENTS}" ]]; then
+  echo "[sign.sh] ERROR: entitlements not found at ${ENTITLEMENTS}" >&2
+  exit 1
+fi
+
+echo "[sign.sh] mode      = ${SIGN_MODE}"
+echo "[sign.sh] identity  = ${SIGN_IDENTITY}"
+echo "[sign.sh] app       = ${APP_PATH}"
+echo "[sign.sh] ents      = ${ENTITLEMENTS}"
+
+# -------- Decide whether to request RFC3161 timestamp --------
+# Apple's timestamp server only accepts signatures from Developer ID-issued
+# certificates. For ad-hoc or local self-signed certs the timestamp call
+# either fails or attaches noise that makes re-signing nondeterministic
+# (which in turn breaks TCC's "is this the same app?" comparison).
+TIMESTAMP_FLAG="--timestamp=none"
+if [[ "${SIGN_MODE}" == "developer-id" && "${SIGN_IDENTITY}" == "Developer ID Application:"* ]]; then
+  TIMESTAMP_FLAG="--timestamp"
+fi
+echo "[sign.sh] timestamp = ${TIMESTAMP_FLAG}"
+
+# -------- Strip stale signatures so re-signing is deterministic --------
+codesign --remove-signature "${APP_PATH}" 2>/dev/null || true
+
+# -------- Sign nested executables first (Apple required ordering) --------
+# Find any embedded Mach-O binaries / frameworks / dylibs.
+NESTED_PATHS=()
+while IFS= read -r path; do
+  NESTED_PATHS+=("$path")
+done < <(find "${APP_PATH}/Contents" \
+            \( -name "*.dylib" -o -name "*.framework" -o -path "*/Frameworks/*" \) \
+            -not -path "*/_CodeSignature/*" 2>/dev/null || true)
+
+for nested in "${NESTED_PATHS[@]:-}"; do
+  [[ -z "${nested}" ]] && continue
+  echo "[sign.sh] signing nested: ${nested}"
+  codesign --force ${TIMESTAMP_FLAG} --options=runtime \
+           --sign "${SIGN_IDENTITY}" \
+           "${nested}"
+done
+
+# -------- Sign the main app bundle --------
+echo "[sign.sh] signing app bundle..."
+codesign --force ${TIMESTAMP_FLAG} --options=runtime \
+         --entitlements "${ENTITLEMENTS}" \
+         --sign "${SIGN_IDENTITY}" \
+         "${APP_PATH}"
+
+# -------- Verify --------
+echo "[sign.sh] verifying signature..."
+codesign --verify --deep --strict --verbose=2 "${APP_PATH}"
+
+if [[ "${SIGN_MODE}" == "developer-id" ]]; then
+  # Gatekeeper assessment will pass only after notarization + stapling,
+  # but we can pre-flight the spctl evaluation now.
+  echo "[sign.sh] spctl assessment (will likely say 'rejected' until notarized)..."
+  spctl --assess --type execute --verbose=4 "${APP_PATH}" || true
+fi
+
+echo "[sign.sh] OK."
diff --git a/wails.json b/wails.json
new file mode 100644
index 0000000..980d00a
--- /dev/null
+++ b/wails.json
@@ -0,0 +1,19 @@
+{
+  "$schema": "https://wails.io/schemas/config.v2.json",
+  "name": "SnapGo",
+  "outputfilename": "SnapGo",
+  "frontend:install": "npm install",
+  "frontend:build": "npm run build",
+  "frontend:dev:watcher": "npm run dev",
+  "frontend:dev:serverUrl": "auto",
+  "author": {
+    "name": "mmmy",
+    "email": "mmmy@example.com"
+  },
+  "info": {
+    "productName": "SnapGo",
+    "productVersion": "0.1.0",
+    "copyright": "Copyright © 2026",
+    "comments": "Cross-platform screenshot tool with one-click upload to S3"
+  }
+}