Support target-free SOCKS5 port mappings with reference protection and UI workflows. Include connection-stage diagnostics, SSH fingerprint confirmation, asset impact checks, listener traffic visibility, SQLite snapshots, account mapping improvements, and MySQL discovery fixes. Update feature rationale and validation docs; Go checks, frontend build and 121 browser tests passed.