@ait-co/devtools 0.1.137 → 0.1.139

package/dist/qr-http-server-D4rGz8M7.js

@@ -0,0 +1,1640 @@
+import { createServer } from "node:http";
+//#region src/i18n/en.ts
+const en = {
+	"panel.title": "AIT DevTools",
+	"panel.toggle.title": "AIT DevTools",
+	"panel.close": "Close",
+	"panel.editMode.on": "EDIT",
+	"panel.editMode.off": "READ-ONLY",
+	"panel.editMode.toggleTitle": "Toggle panel edit mode",
+	"panel.tabError": "Error rendering \"{tab}\" tab.",
+	"panel.tab.env": "Environment",
+	"panel.tab.presets": "Presets",
+	"panel.tab.viewport": "Viewport",
+	"panel.tab.permissions": "Permissions",
+	"panel.tab.notifications": "Notifications",
+	"panel.tab.location": "Location",
+	"panel.tab.device": "Device",
+	"panel.tab.iap": "IAP",
+	"panel.tab.ads": "Ads",
+	"panel.tab.events": "Events",
+	"panel.tab.analytics": "Analytics",
+	"panel.tab.storage": "Storage",
+	"common.readOnly": "Read-only — mock responses are controlled at build time.",
+	"env.section.platform": "Platform",
+	"env.row.os": "OS",
+	"env.row.appVersion": "App Version",
+	"env.row.environment": "Environment",
+	"env.row.locale": "Locale",
+	"env.section.network": "Network",
+	"env.row.networkStatus": "Status",
+	"env.section.safeArea": "Safe Area Insets",
+	"env.row.safeArea.top": "Top",
+	"env.row.safeArea.bottom": "Bottom",
+	"env.section.navigation": "Navigation",
+	"env.row.iosSwipeGesture": "iOS swipe-back",
+	"env.value.iosSwipeGesture.unset": "not called",
+	"env.value.iosSwipeGesture.enabled": "enabled",
+	"env.value.iosSwipeGesture.disabled": "disabled",
+	"env.hint.iosSwipeGesture": "Last value passed to setIosSwipeGestureEnabled. Switching Environment to toss lets a toss-gated guard toggle this.",
+	"env.section.language": "Language",
+	"env.language.row": "Language",
+	"env.language.ko": "한국어",
+	"env.language.en": "English",
+	"permissions.section.device": "Device Permissions",
+	"location.section.current": "Current Location",
+	"location.row.latitude": "Latitude",
+	"location.row.longitude": "Longitude",
+	"location.row.accuracy": "Accuracy",
+	"device.section.modes": "Device API Modes",
+	"device.row.camera": "Camera",
+	"device.row.photos": "Photos",
+	"device.row.location": "Location",
+	"device.row.network": "Network",
+	"device.row.clipboard": "Clipboard",
+	"device.section.mockImages": "Mock Images ({count})",
+	"device.btn.add": "+ Add",
+	"device.btn.useDefaults": "Use defaults",
+	"device.btn.clear": "Clear",
+	"device.prompt.camera.title": "Camera Prompt — Select an image",
+	"device.prompt.photos.title": "Photos Prompt — Select images",
+	"device.prompt.location.title": "Location Prompt — Enter coordinates",
+	"device.prompt.locationUpdate.title": "Location Update — Send coordinates",
+	"device.prompt.fallbackTitle": "Prompt: {type}",
+	"device.prompt.label.lat": "Lat",
+	"device.prompt.label.lng": "Lng",
+	"device.prompt.send": "Send",
+	"device.prompt.cancel": "Cancel",
+	"device.section.haptic": "Haptic",
+	"device.haptic.lastCall": "Last haptic",
+	"device.haptic.noneYet": "(none yet)",
+	"device.haptic.trigger": "Trigger haptic",
+	"viewport.section.device": "Device",
+	"viewport.row.preset": "Preset",
+	"viewport.row.orientation": "Orientation",
+	"viewport.row.notchSide": "Notch side",
+	"viewport.section.custom": "Custom size",
+	"viewport.row.width": "Width (px)",
+	"viewport.row.height": "Height (px)",
+	"viewport.section.appearance": "Appearance",
+	"viewport.row.showFrame": "Show frame",
+	"viewport.row.showAitNavBar": "Show Apps in Toss nav bar",
+	"viewport.row.navBarType": "Nav bar type",
+	"viewport.status.noConstraint": "No viewport constraint — body fills the window.",
+	"viewport.status.cssPhysical": "CSS / physical",
+	"viewport.status.safeArea": "Safe area",
+	"viewport.status.aitNavBar": "AIT nav bar",
+	"viewport.status.aitNavBarValue": "{height}px → SafeArea top · {type}",
+	"viewport.orientation.autoSuffix": "{orient} (auto)",
+	"iap.section.simulator": "IAP Simulator",
+	"iap.row.nextResult": "Next Purchase Result",
+	"iap.section.tossPay": "TossPay",
+	"iap.row.tossPayResult": "Next Payment Result",
+	"iap.section.pending": "Pending Orders ({count})",
+	"iap.empty.pending": "(no pending orders)",
+	"iap.section.completed": "Completed Orders ({count})",
+	"iap.empty.completed": "(no completed orders)",
+	"iap.btn.complete": "Complete",
+	"iap.label.pending": "PENDING",
+	"events.section.navigation": "Navigation Events",
+	"events.btn.triggerBack": "Trigger Back Event",
+	"events.btn.triggerHome": "Trigger Home Event",
+	"events.section.login": "Login",
+	"events.row.loggedIn": "Logged In",
+	"events.row.tossLoginIntegrated": "Toss Login Integrated",
+	"analytics.section.log": "Analytics Log ({count})",
+	"analytics.btn.clear": "Clear",
+	"analytics.calls.section": "SDK Calls ({count})",
+	"analytics.calls.btn.clear": "Clear",
+	"analytics.calls.empty": "(no SDK calls yet)",
+	"storage.section.title": "Storage ({count} items)",
+	"storage.btn.clearAll": "Clear All",
+	"storage.empty": "No items in storage",
+	"presets.section.builtIn": "Built-in scenarios",
+	"presets.section.saved": "Saved presets ({count})",
+	"presets.section.save": "Save",
+	"presets.save.description": "Capture network / permissions / auth / IAP / ads / payment slices.",
+	"presets.btn.saveCurrent": "Save current as preset",
+	"presets.btn.apply": "Apply",
+	"presets.btn.reApply": "Re-apply",
+	"presets.btn.delete": "Delete",
+	"presets.empty.saved": "No saved presets yet.",
+	"presets.empty.builtIn": "No built-in presets.",
+	"presets.prompt.label": "Preset label?",
+	"presets.confirm.delete": "Delete preset \"{label}\"?",
+	"ads.section.state": "Ads State",
+	"ads.row.isLoaded": "isLoaded",
+	"ads.row.forceNoFill": "Force \"no fill\"",
+	"ads.empty.events": "No events yet",
+	"ads.section.googleAdMob": "GoogleAdMob",
+	"ads.section.tossAds": "TossAds",
+	"ads.section.fullScreenAd": "FullScreenAd",
+	"ads.btn.load": "Load",
+	"ads.btn.show": "Show",
+	"ads.section.tossAdsBanner": "TossAds Banner",
+	"ads.row.rewardUnitType": "Reward unit type",
+	"ads.row.rewardAmount": "Reward amount",
+	"ads.btn.render": "Render",
+	"ads.btn.noFill": "No-fill",
+	"ads.btn.click": "Click",
+	"ads.btn.destroy": "Destroy",
+	"notifications.section.title": "requestNotificationAgreement",
+	"notifications.option.newAgreement": "newAgreement (first-time agree)",
+	"notifications.option.alreadyAgreed": "alreadyAgreed (already opted-in)",
+	"notifications.option.agreementRejected": "agreementRejected (user declined)",
+	"dashboard.lang.ko": "한국어",
+	"dashboard.lang.en": "English",
+	"dashboard.title": "AIT Debug Dashboard",
+	"dashboard.updated": "Last updated: {ts}",
+	"dashboard.tunnel.section": "Tunnel status",
+	"dashboard.tunnel.up": "Connected",
+	"dashboard.tunnel.down": "Disconnected",
+	"dashboard.attach.section": "Attach QR",
+	"dashboard.attach.hint": "Call the start_attach MCP tool to show the QR here.",
+	"dashboard.attach.tunnelDown": "Relay disconnected — this QR is no longer valid. Restart the relay, then regenerate the QR.",
+	"dashboard.pages.section": "Connected Pages",
+	"dashboard.pages.empty": "No attached pages",
+	"dashboard.url.copy": "Copy",
+	"dashboard.url.copied": "Copied",
+	"dashboard.inspector.section": "Inspector",
+	"dashboard.inspector.open": "Open DevTools",
+	"dashboard.inspector.waiting": "Attach a page to enable the \"Open DevTools\" button",
+	"inspector.error.noTarget": "No page attached. Attach a device and try again.",
+	"inspector.error.relayDown": "Relay is not active. Start a relay session first.",
+	"dashboard.watchdog.title": "Server has shut down",
+	"dashboard.watchdog.body": "The MCP server has stopped. This session is no longer active. You may close this tab.",
+	"dashboard.watchdog.close": "Close tab",
+	"dashboard.conn.lost": "Connection lost — reconnecting…",
+	"dashboard.session.completeTitle": "Test run complete",
+	"dashboard.session.completeBody": "The runner exited cleanly. See your terminal for results.",
+	"dashboard.session.shutdownTitle": "Debug server stopped",
+	"dashboard.session.shutdownBody": "The MCP server has shut down; this session is no longer live. You can close this tab.",
+	"attach.title": "AIT Debug Session — QR Scan",
+	"attach.deployment": "deployment: {label}",
+	"attach.steps.section": "How to scan",
+	"attach.faq.section": "Troubleshooting checklist",
+	"attach.url.section": "URL (fallback)",
+	"attach.mode.sandbox": "env 2 — AITC Sandbox App (PWA)",
+	"attach.mode.intossDev": "env 3 — intoss-private relay dev",
+	"attach.sandbox.step1": "Launch the launcher PWA icon on your home screen (if the Safari address bar is visible, it is not standalone).",
+	"attach.sandbox.step2": "Scan this QR code with <strong>\"Scan QR with camera\"</strong> inside the launcher.",
+	"attach.sandbox.step3": "The mini-app opens fullscreen and the debug session attaches automatically.",
+	"attach.sandbox.faq.notInstalled": "<strong>Launcher is not installed</strong> — open <code>devtools.aitc.dev/launcher/</code> once and add it to your home screen",
+	"attach.sandbox.faq.cameraApp": "<strong>Scanning with the camera app opens a Safari tab (bottom tab bar visible)</strong> — relaunch from the launcher icon and use the in-app scanner",
+	"attach.sandbox.faq.totp": "<strong>QR expired (TOTP — 30-second step, ±6 steps (~3 min) accepted)</strong> — scan a fresh QR code",
+	"attach.sandbox.faq.chii": "<strong>Chii injection failure / console is empty</strong> — verify the mini-app bundle has an <code>in-app</code> debug import",
+	"attach.intoss.step1": "Open the Toss app.",
+	"attach.intoss.step2": "Scan the QR code with your phone camera app.",
+	"attach.intoss.step3": "Tap <strong>\"Open in Toss\"</strong> when the popup appears.",
+	"attach.intoss.step4": "The mini-app opens and the debug session attaches automatically.",
+	"attach.intoss.faq.appNotOpen": "<strong>Toss app does not open</strong> — check app version; scan with the system camera app (not the Toss in-app QR reader)",
+	"attach.intoss.faq.prepare": "<strong>Mini-app stuck in PREPARE state</strong> — verify the deep-link has a <code>_deploymentId</code> parameter",
+	"attach.intoss.faq.chii": "<strong>Chii injection failure / console is empty</strong> — verify the mini-app bundle has an <code>in-app</code> debug import",
+	"attach.intoss.faq.totp": "<strong>TOTP gate Layer C is inactive</strong> — check that <code>AIT_DEBUG_TOTP_SECRET</code> is set on the relay server",
+	"launcher.title": "AITC DevTools Launcher",
+	"launcher.description": "Scan the terminal QR code or paste the tunnel URL.",
+	"launcher.installCta": "Install launcher to your phone",
+	"launcher.urlPlaceholder": "https://example.trycloudflare.com",
+	"launcher.openBtn": "Open",
+	"launcher.scanBtn": "Scan QR with camera",
+	"launcher.noCamera": "No camera available — paste the URL instead.",
+	"launcher.cameraError": "Could not access the camera — paste the URL instead.",
+	"launcher.invalidUrlHttps": "Enter a valid https:// URL (the tunnel URL from your terminal).",
+	"launcher.invalidUrl": "Enter a valid http(s):// URL.",
+	"launcher.debugAuthFailed": "Debug connection authentication failed",
+	"launcher.debugAuthFailedHint": "The QR code may have expired. Scan a fresh QR code.",
+	"launcher.debugAuthExpiredHint": "The debug session has expired. Scan a fresh QR from the attach page on your Mac.",
+	"launcher.debugAuthRescanCta": "Scan a new QR",
+	"launcher.diagTitle": "Viewport diagnostics",
+	"launcher.diagYes": "yes",
+	"launcher.diagNo": "no",
+	"launcher.letterboxDetected": "An iOS viewport constraint may clip the bottom {pt}pt — rotating to landscape and back to portrait may resolve it.",
+	"launcher.letterboxClipped": "An iOS viewport bug makes the bottom {pt}pt unusable — rotating to landscape and back to portrait may recover it.",
+	"launcher.diagVerdictLabel": "Verdict reason",
+	"launcher.diagSafeAreaTrace": "top re-measure trace",
+	"launcher.diagVerdict.detected": "✓ letterbox correction",
+	"launcher.diagVerdict.notStandalone": "not standalone",
+	"launcher.diagVerdict.landscape": "landscape",
+	"launcher.diagVerdict.shortfallTooSmall": "shortfall too small",
+	"launcher.diagVerdict.safeAreaTopZero": "top=0 (env() stale?)",
+	"launcher.navbar.defaultTitle": "Mini App",
+	"launcher.navbar.back": "Back",
+	"launcher.navbar.menu": "Menu",
+	"launcher.navbar.close": "Close",
+	"launcher.navbar.menuRescan": "Rescan",
+	"launcher.navbar.menuDiag": "Viewport diagnostics",
+	"launcher.navbar.menuLanguage": "Language"
+};
+//#endregion
+//#region src/i18n/index.ts
+/**
+* Vanilla TS i18n for the floating DevTools panel.
+*
+* Public surface:
+*   - `t(key, vars?)` — look up a UI string, with `{name}` placeholder
+*     interpolation. Falls back to the key itself if a translation is missing.
+*   - `getLocale()` / `setLocale(locale)` — read/persist the active locale.
+*     `setLocale` dispatches `__ait:localechange` so the panel can remount.
+*   - `detectLocale()` — first-run heuristic from `navigator.language`.
+*
+* `ko` is the source of truth (keys are typed from it). `en` is also a full
+* `Record<StringKey, string>` (devtools is developer-facing, en is a real
+* audience). The `Partial` lookup table preserves the runtime `?? key` safety
+* net even though we ship complete catalogs today.
+*/
+const tables = {
+	ko: {
+		"panel.title": "AIT DevTools",
+		"panel.toggle.title": "AIT DevTools",
+		"panel.close": "Close",
+		"panel.editMode.on": "EDIT",
+		"panel.editMode.off": "READ-ONLY",
+		"panel.editMode.toggleTitle": "패널 편집 모드 전환",
+		"panel.tabError": "\"{tab}\" 탭 렌더링 중 오류가 발생했습니다.",
+		"panel.tab.env": "Environment",
+		"panel.tab.presets": "Presets",
+		"panel.tab.viewport": "Viewport",
+		"panel.tab.permissions": "Permissions",
+		"panel.tab.notifications": "Notifications",
+		"panel.tab.location": "Location",
+		"panel.tab.device": "Device",
+		"panel.tab.iap": "IAP",
+		"panel.tab.ads": "Ads",
+		"panel.tab.events": "Events",
+		"panel.tab.analytics": "Analytics",
+		"panel.tab.storage": "Storage",
+		"common.readOnly": "읽기 전용 — mock 응답은 빌드 타임에 고정됩니다.",
+		"env.section.platform": "Platform",
+		"env.row.os": "OS",
+		"env.row.appVersion": "App Version",
+		"env.row.environment": "Environment",
+		"env.row.locale": "Locale",
+		"env.section.network": "Network",
+		"env.row.networkStatus": "Status",
+		"env.section.safeArea": "Safe Area Insets",
+		"env.row.safeArea.top": "Top",
+		"env.row.safeArea.bottom": "Bottom",
+		"env.section.navigation": "Navigation",
+		"env.row.iosSwipeGesture": "iOS swipe-back",
+		"env.value.iosSwipeGesture.unset": "미호출",
+		"env.value.iosSwipeGesture.enabled": "enabled",
+		"env.value.iosSwipeGesture.disabled": "disabled",
+		"env.hint.iosSwipeGesture": "setIosSwipeGestureEnabled의 마지막 호출값. Environment를 toss로 바꾸면 toss-gated 가드가 이 값을 토글합니다.",
+		"env.section.language": "Language",
+		"env.language.row": "Language",
+		"env.language.ko": "한국어",
+		"env.language.en": "English",
+		"permissions.section.device": "Device Permissions",
+		"location.section.current": "Current Location",
+		"location.row.latitude": "Latitude",
+		"location.row.longitude": "Longitude",
+		"location.row.accuracy": "Accuracy",
+		"device.section.modes": "Device API Modes",
+		"device.row.camera": "Camera",
+		"device.row.photos": "Photos",
+		"device.row.location": "Location",
+		"device.row.network": "Network",
+		"device.row.clipboard": "Clipboard",
+		"device.section.mockImages": "Mock Images ({count})",
+		"device.btn.add": "+ Add",
+		"device.btn.useDefaults": "Use defaults",
+		"device.btn.clear": "Clear",
+		"device.prompt.camera.title": "Camera Prompt — 이미지를 선택하세요",
+		"device.prompt.photos.title": "Photos Prompt — 이미지를 선택하세요",
+		"device.prompt.location.title": "Location Prompt — 좌표 입력",
+		"device.prompt.locationUpdate.title": "Location Update — 좌표 전송",
+		"device.prompt.fallbackTitle": "Prompt: {type}",
+		"device.prompt.label.lat": "Lat",
+		"device.prompt.label.lng": "Lng",
+		"device.prompt.send": "Send",
+		"device.prompt.cancel": "Cancel",
+		"device.section.haptic": "Haptic",
+		"device.haptic.lastCall": "마지막 haptic",
+		"device.haptic.noneYet": "(아직 없음)",
+		"device.haptic.trigger": "Haptic 트리거",
+		"viewport.section.device": "Device",
+		"viewport.row.preset": "Preset",
+		"viewport.row.orientation": "Orientation",
+		"viewport.row.notchSide": "Notch side",
+		"viewport.section.custom": "Custom size",
+		"viewport.row.width": "Width (px)",
+		"viewport.row.height": "Height (px)",
+		"viewport.section.appearance": "Appearance",
+		"viewport.row.showFrame": "Show frame",
+		"viewport.row.showAitNavBar": "Apps in Toss 내비게이션 바 표시",
+		"viewport.row.navBarType": "Nav bar type",
+		"viewport.status.noConstraint": "뷰포트 제약 없음 — body가 창을 가득 채웁니다.",
+		"viewport.status.cssPhysical": "CSS / physical",
+		"viewport.status.safeArea": "Safe area",
+		"viewport.status.aitNavBar": "AIT nav bar",
+		"viewport.status.aitNavBarValue": "{height}px → SafeArea top · {type}",
+		"viewport.orientation.autoSuffix": "{orient} (auto)",
+		"iap.section.simulator": "IAP Simulator",
+		"iap.row.nextResult": "Next Purchase Result",
+		"iap.section.tossPay": "TossPay",
+		"iap.row.tossPayResult": "Next Payment Result",
+		"iap.section.pending": "Pending Orders ({count})",
+		"iap.empty.pending": "(대기 중인 주문 없음)",
+		"iap.section.completed": "Completed Orders ({count})",
+		"iap.empty.completed": "(완료된 주문 없음)",
+		"iap.btn.complete": "Complete",
+		"iap.label.pending": "PENDING",
+		"events.section.navigation": "Navigation Events",
+		"events.btn.triggerBack": "Back 이벤트 발생",
+		"events.btn.triggerHome": "Home 이벤트 발생",
+		"events.section.login": "Login",
+		"events.row.loggedIn": "Logged In",
+		"events.row.tossLoginIntegrated": "Toss Login Integrated",
+		"analytics.section.log": "Analytics Log ({count})",
+		"analytics.btn.clear": "Clear",
+		"analytics.calls.section": "SDK Calls ({count})",
+		"analytics.calls.btn.clear": "Clear",
+		"analytics.calls.empty": "(아직 SDK 호출 없음)",
+		"storage.section.title": "Storage ({count} items)",
+		"storage.btn.clearAll": "Clear All",
+		"storage.empty": "저장된 항목이 없습니다",
+		"presets.section.builtIn": "Built-in scenarios",
+		"presets.section.saved": "Saved presets ({count})",
+		"presets.section.save": "Save",
+		"presets.save.description": "network / permissions / auth / IAP / ads / payment 슬라이스를 캡처합니다.",
+		"presets.btn.saveCurrent": "현재 상태를 프리셋으로 저장",
+		"presets.btn.apply": "Apply",
+		"presets.btn.reApply": "Re-apply",
+		"presets.btn.delete": "Delete",
+		"presets.empty.saved": "저장된 프리셋이 아직 없습니다.",
+		"presets.empty.builtIn": "내장 프리셋이 없습니다.",
+		"presets.prompt.label": "프리셋 라벨을 입력하세요",
+		"presets.confirm.delete": "\"{label}\" 프리셋을 삭제할까요?",
+		"ads.section.state": "Ads State",
+		"ads.row.isLoaded": "isLoaded",
+		"ads.row.forceNoFill": "강제 \"no fill\"",
+		"ads.empty.events": "아직 이벤트가 없습니다",
+		"ads.section.googleAdMob": "GoogleAdMob",
+		"ads.section.tossAds": "TossAds",
+		"ads.section.fullScreenAd": "FullScreenAd",
+		"ads.btn.load": "Load",
+		"ads.btn.show": "Show",
+		"ads.section.tossAdsBanner": "TossAds 배너",
+		"ads.row.rewardUnitType": "리워드 단위 타입",
+		"ads.row.rewardAmount": "리워드 수량",
+		"ads.btn.render": "Render",
+		"ads.btn.noFill": "No-fill",
+		"ads.btn.click": "Click",
+		"ads.btn.destroy": "Destroy",
+		"notifications.section.title": "requestNotificationAgreement",
+		"notifications.option.newAgreement": "newAgreement (최초 동의)",
+		"notifications.option.alreadyAgreed": "alreadyAgreed (이미 동의됨)",
+		"notifications.option.agreementRejected": "agreementRejected (사용자 거절)",
+		"dashboard.lang.ko": "한국어",
+		"dashboard.lang.en": "English",
+		"dashboard.title": "AIT 디버그 Dashboard",
+		"dashboard.updated": "마지막 갱신: {ts}",
+		"dashboard.tunnel.section": "터널 상태",
+		"dashboard.tunnel.up": "연결됨",
+		"dashboard.tunnel.down": "끊어짐",
+		"dashboard.attach.section": "Attach QR",
+		"dashboard.attach.hint": "start_attach MCP tool을 호출하면 QR이 여기에 표시됩니다.",
+		"dashboard.attach.tunnelDown": "relay 연결이 끊겼습니다 — 이 QR은 더 이상 유효하지 않습니다. relay를 재시작한 뒤 QR을 다시 생성하세요.",
+		"dashboard.pages.section": "연결된 Pages",
+		"dashboard.pages.empty": "attach된 페이지 없음",
+		"dashboard.url.copy": "복사",
+		"dashboard.url.copied": "복사됨",
+		"dashboard.inspector.section": "인스펙터",
+		"dashboard.inspector.open": "디버그 툴 열기",
+		"dashboard.inspector.waiting": "페이지를 attach하면 \"디버그 툴 열기\" 버튼이 표시됩니다",
+		"inspector.error.noTarget": "연결된 페이지가 없습니다. 기기를 attach한 후 다시 시도하세요.",
+		"inspector.error.relayDown": "relay가 활성화되지 않았습니다. start_debug로 relay를 기동하세요.",
+		"dashboard.watchdog.title": "서버가 종료되었습니다",
+		"dashboard.watchdog.body": "MCP server가 종료되어 이 세션이 더 이상 유효하지 않습니다. 이 탭을 닫아도 됩니다.",
+		"dashboard.watchdog.close": "탭 닫기",
+		"dashboard.conn.lost": "연결 끊김 — 재연결 시도 중…",
+		"dashboard.session.completeTitle": "테스트 실행 완료",
+		"dashboard.session.completeBody": "러너가 정상 종료되었습니다. 결과는 터미널에서 확인하세요.",
+		"dashboard.session.shutdownTitle": "디버그 서버가 종료되었습니다",
+		"dashboard.session.shutdownBody": "MCP server가 종료되어 이 세션이 더 이상 유효하지 않습니다. 이 탭을 닫아도 됩니다.",
+		"attach.title": "AIT 디버그 세션 — QR 스캔",
+		"attach.deployment": "deployment: {label}",
+		"attach.steps.section": "스캔 절차",
+		"attach.faq.section": "진단 체크리스트",
+		"attach.url.section": "URL (fallback)",
+		"attach.mode.sandbox": "환경 2 — AITC Sandbox App (PWA)",
+		"attach.mode.intossDev": "환경 3 — intoss-private relay dev",
+		"attach.sandbox.step1": "홈 화면의 launcher PWA 아이콘으로 실행하세요 (Safari 주소창이 보이면 standalone이 아닙니다).",
+		"attach.sandbox.step2": "launcher 안의 <strong>\"QR 카메라로 스캔\"</strong>으로 이 QR 코드를 스캔하세요.",
+		"attach.sandbox.step3": "미니앱이 풀스크린으로 열리고 디버그 세션이 자동으로 attach됩니다.",
+		"attach.sandbox.faq.notInstalled": "<strong>launcher가 설치돼 있지 않은 경우</strong> — <code>devtools.aitc.dev/launcher/</code>를 한 번 열어 홈 화면에 추가하세요",
+		"attach.sandbox.faq.cameraApp": "<strong>카메라 앱으로 스캔하면 Safari 탭으로 열립니다 (하단 탭 바 노출)</strong> — launcher 아이콘으로 다시 실행해 인앱 스캔을 사용하세요",
+		"attach.sandbox.faq.totp": "<strong>QR이 만료된 경우 (TOTP — 코드 1개는 30초 창, 만료 후 ~3분(±6 step) 이내 소급 허용)</strong> — 새 QR을 다시 스캔하세요",
+		"attach.sandbox.faq.chii": "<strong>Chii 주입 실패 / 콘솔이 비어 있는 경우</strong> — 미니앱 번들에 <code>in-app</code> debug import가 있는지 확인",
+		"attach.intoss.step1": "토스 앱을 실행하세요.",
+		"attach.intoss.step2": "폰 카메라 앱으로 QR 코드를 스캔하세요.",
+		"attach.intoss.step3": "팝업이 뜨면 <strong>\"토스로 열기\"</strong>를 탭하세요.",
+		"attach.intoss.step4": "미니앱이 열리고 디버그 세션이 자동으로 attach됩니다.",
+		"attach.intoss.faq.appNotOpen": "<strong>토스 앱이 안 열리는 경우</strong> — 앱 버전 확인, 카메라 앱으로 스캔 (토스 앱 내 QR 리더 X)",
+		"attach.intoss.faq.prepare": "<strong>미니앱이 PREPARE 상태에서 멈추는 경우</strong> — deep-link에 <code>_deploymentId</code> 파라미터가 있는지 확인",
+		"attach.intoss.faq.chii": "<strong>Chii 주입 실패 / 콘솔이 비어 있는 경우</strong> — 미니앱 번들에 <code>in-app</code> debug import가 있는지 확인",
+		"attach.intoss.faq.totp": "<strong>TOTP gate Layer C가 비활성인 경우</strong> — relay 서버에 <code>AIT_DEBUG_TOTP_SECRET</code>이 설정돼 있는지 확인",
+		"launcher.title": "AITC DevTools Launcher",
+		"launcher.description": "터미널 QR을 스캔하거나 URL을 입력하세요.",
+		"launcher.installCta": "폰에 런처 설치하기",
+		"launcher.urlPlaceholder": "https://example.trycloudflare.com",
+		"launcher.openBtn": "Open",
+		"launcher.scanBtn": "QR 카메라로 스캔",
+		"launcher.noCamera": "카메라를 사용할 수 없습니다 — URL을 직접 붙여넣으세요.",
+		"launcher.cameraError": "카메라에 접근할 수 없습니다 — URL을 직접 붙여넣으세요.",
+		"launcher.invalidUrlHttps": "올바른 https:// URL을 입력하세요 (터미널의 터널 URL).",
+		"launcher.invalidUrl": "올바른 http(s):// URL을 입력하세요.",
+		"launcher.debugAuthFailed": "디버그 연결 인증 실패",
+		"launcher.debugAuthFailedHint": "QR 코드가 만료되었을 수 있어요. 새 QR을 다시 스캔하세요.",
+		"launcher.debugAuthExpiredHint": "디버그 세션이 만료됐어요. Mac의 attach 페이지에서 새 QR을 스캔하세요.",
+		"launcher.debugAuthRescanCta": "새 QR 스캔하기",
+		"launcher.diagTitle": "뷰포트 진단",
+		"launcher.diagYes": "예",
+		"launcher.diagNo": "아니요",
+		"launcher.letterboxDetected": "iOS 뷰포트 제약으로 화면 아래 {pt}pt가 잘릴 수 있습니다 — 기기를 가로로 돌렸다 세로로 복귀하면 해소될 수 있어요.",
+		"launcher.letterboxClipped": "iOS 뷰포트 버그로 화면 아래 {pt}pt를 쓸 수 없습니다 — 기기를 가로로 돌렸다 세로로 돌리면 복구될 수 있어요.",
+		"launcher.diagVerdictLabel": "판정 사유",
+		"launcher.diagSafeAreaTrace": "top 재측정 추이",
+		"launcher.diagVerdict.detected": "✓ letterbox 보정",
+		"launcher.diagVerdict.notStandalone": "홈 화면 앱 아님",
+		"launcher.diagVerdict.landscape": "가로 모드",
+		"launcher.diagVerdict.shortfallTooSmall": "높이 차이 미달",
+		"launcher.diagVerdict.safeAreaTopZero": "top=0 (env() stale?)",
+		"launcher.navbar.defaultTitle": "미니앱",
+		"launcher.navbar.back": "뒤로가기",
+		"launcher.navbar.menu": "메뉴",
+		"launcher.navbar.close": "닫기",
+		"launcher.navbar.menuRescan": "다시 스캔",
+		"launcher.navbar.menuDiag": "뷰포트 진단",
+		"launcher.navbar.menuLanguage": "언어"
+	},
+	en
+};
+/**
+* Decide a locale from a BCP-47 language tag. `ko` (and `ko-*`) → `'ko'`,
+* everything else → `'en'`. Shared by the browser (`navigator.language`) and
+* Node (`Accept-Language` header) paths so both resolve identically.
+*/
+function localeFromLanguageTag(lang) {
+	return /^ko\b/i.test(lang) ? "ko" : "en";
+}
+/**
+* Decide a locale from an HTTP `Accept-Language` header value. The Node-served
+* surfaces (e.g. the qr-http-server dashboard) have no `navigator`, so the
+* request header is the only language signal. Reads the FIRST language tag
+* (highest priority, ignoring `q=` weights — good enough for ko/en) and feeds
+* it through the same `ko`-vs-`en` heuristic `detectLocale` uses. Returns `'ko'`
+* for an empty/missing header (ko is the primary locale).
+*/
+function parseAcceptLanguage(header) {
+	if (!header) return "ko";
+	return localeFromLanguageTag(header.split(",")[0]?.trim().split(";")[0]?.trim() ?? "");
+}
+/**
+* A locale-bound string resolver for surfaces that can't use the in-memory
+* `getLocale()` cache — notably the Node HTTP server, which resolves locale
+* per-request from `Accept-Language` rather than from a process-global. Returns
+* a `t`-compatible closure over the SAME `ko`/`en` tables (single source of
+* truth), so the dashboard/attach HTML shares the exact 169-key catalog the
+* browser surfaces use. The `key: StringKey` signature keeps compile-time key
+* safety on the Node path identical to `t()`.
+*/
+function resolveLocaleStrings(locale) {
+	const table = tables[locale];
+	return (key, vars) => {
+		const raw = table[key] ?? key;
+		if (!vars) return raw;
+		return raw.replace(/\{(\w+)\}/g, (match, name) => {
+			const value = vars[name];
+			return value === void 0 ? match : String(value);
+		});
+	};
+}
+//#endregion
+//#region src/mcp/dashboard.generated.ts
+const dashboardChromeHtmlKo = `<!DOCTYPE html>
+<html lang="ko"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><title>AIT 디버그 Dashboard</title><style>
+*, *::before, *::after { box-sizing: border-box; }
+body {
+  font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+  background: #0d1117; color: #c9d1d9;
+  display: flex; flex-direction: column; align-items: center;
+  min-height: 100vh; margin: 0; padding: 2rem 1rem;
+  gap: 1.5rem;
+}
+h1 { font-size: 1.25rem; font-weight: 600; color: #e6edf3; margin: 0; text-align: center; }
+.updated { font-size: 0.75rem; opacity: 0.4; font-family: monospace; margin: 0; }
+section { width: 100%; max-width: 520px; }
+h2 { font-size: 1rem; font-weight: 600; color: #e6edf3; margin: 0 0 0.5rem; }
+.status { display: inline-block; padding: 0.25rem 0.75rem; border-radius: 999px; font-size: 0.8rem; font-weight: 600; }
+.status-up { background: #238636; color: #fff; }
+.status-down { background: #6e7681; color: #fff; }
+img.qr {
+  width: min(80vw, 300px); height: auto;
+  image-rendering: pixelated;
+  background: #fff; padding: 0.75rem; border-radius: 10px;
+  display: block; margin: 0.5rem auto;
+}
+.url-row {
+  display: flex; align-items: stretch; gap: 0; margin: 0.5rem 0 0;
+  border-radius: 6px; border: 1px solid #30363d; overflow: hidden;
+}
+.url-box {
+  font-family: monospace; font-size: 0.7rem;
+  word-break: break-all; opacity: 0.45;
+  background: #161b22; padding: 0.6rem 0.85rem;
+  flex: 1; cursor: pointer; border: none; border-radius: 0;
+}
+.url-box:hover { opacity: 0.65; }
+.copy-btn {
+  flex-shrink: 0; padding: 0.4rem 0.7rem;
+  background: #21262d; border: none; border-left: 1px solid #30363d;
+  color: #58a6ff; font-size: 0.7rem; cursor: pointer; white-space: nowrap;
+  font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+}
+.copy-btn:hover { background: #30363d; }
+.hint { font-size: 0.85rem; opacity: 0.5; margin: 0.25rem 0 0; }
+.hint.error { color: #f85149; opacity: 1; font-weight: 600; }
+.inspector-link {
+  display: inline-block; margin-top: 0.5rem;
+  padding: 0.45rem 1rem; border-radius: 6px;
+  background: #1f6feb; color: #fff; font-size: 0.85rem; font-weight: 600;
+  text-decoration: none; text-align: center;
+}
+.inspector-link:hover { background: #388bfd; }
+.inspector-hint { display: inline-block; margin-top: 0.5rem; font-size: 0.8rem; opacity: 0.45; }
+ul { margin: 0; padding-left: 1.25rem; }
+li { margin-bottom: 0.35rem; font-size: 0.85rem; line-height: 1.5; }
+li.empty { opacity: 0.4; list-style: none; padding-left: 0; }
+.page-id { font-family: monospace; font-size: 0.75rem; opacity: 0.5; margin-right: 0.4rem; }
+.page-url { word-break: break-all; }
+hr { border: none; border-top: 1px solid #21262d; width: 100%; margin: 0; }
+.lang-switcher { display: flex; gap: 0.5rem; font-size: 0.75rem; }
+.lang-switcher a { color: #58a6ff; text-decoration: none; opacity: 0.6; }
+.lang-switcher a.active { font-weight: 700; text-decoration: underline; opacity: 1; }
+</style></head><body><h1>AIT 디버그 Dashboard</h1>__LANG_SWITCHER__<p class="updated" id="updated">마지막 갱신: __NOW__</p><section><h2>터널 상태</h2><span class="status __TUNNEL_CLASS__" id="tunnel-status">__TUNNEL_STATUS__</span></section><hr/><section><h2>Attach QR</h2><div id="attach-section">__ATTACH_SECTION__</div></section><hr/><section id="inspector-section"><h2>인스펙터</h2>__INSPECTOR_SECTION__</section>__PAGES_SECTION__</body></html>`;
+const attachChromeHtmlKoSandbox = `<!DOCTYPE html>
+<html lang="ko"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="preload" as="image" href="__QR_DATA_URL__"/><title>AIT 디버그 세션 — QR 스캔</title><style>
+*, *::before, *::after { box-sizing: border-box; }
+body {
+  font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+  background: #0d1117; color: #c9d1d9;
+  display: flex; flex-direction: column; align-items: center;
+  min-height: 100vh; margin: 0; padding: 2rem 1rem;
+  gap: 1.5rem;
+}
+h1 { font-size: 1.25rem; font-weight: 600; color: #e6edf3; margin: 0; text-align: center; }
+.mode-label {
+  font-size: 0.78rem; font-weight: 600; color: #79c0ff;
+  background: #161b22; border: 1px solid #30363d; border-radius: 999px;
+  padding: 0.25rem 0.75rem; margin: 0;
+}
+.label { font-size: 0.8rem; opacity: 0.5; font-family: monospace; margin: 0; }
+img.qr {
+  width: min(90vw, 360px); height: auto;
+  image-rendering: pixelated;
+  background: #fff; padding: 1rem; border-radius: 12px;
+  display: block; margin: 0 auto;
+}
+section { width: 100%; max-width: 480px; }
+.hint { font-size: 0.85rem; opacity: 0.5; margin: 0.25rem 0 0; }
+.hint.error { color: #f85149; opacity: 1; font-weight: 600; }
+h2 { font-size: 1rem; font-weight: 600; color: #e6edf3; margin: 0 0 0.5rem; }
+ol, ul { margin: 0; padding-left: 1.25rem; }
+li { margin-bottom: 0.4rem; font-size: 0.9rem; line-height: 1.5; }
+.url-row {
+  display: flex; align-items: stretch; gap: 0;
+  border-radius: 6px; border: 1px solid #30363d; overflow: hidden;
+}
+.url-box {
+  font-family: monospace; font-size: 0.72rem;
+  word-break: break-all; opacity: 0.4;
+  background: #161b22; padding: 0.75rem 1rem;
+  flex: 1; cursor: pointer; border: none; border-radius: 0;
+}
+.url-box:hover { opacity: 0.6; }
+.copy-btn {
+  flex-shrink: 0; padding: 0.5rem 0.8rem;
+  background: #21262d; border: none; border-left: 1px solid #30363d;
+  color: #58a6ff; font-size: 0.75rem; cursor: pointer; white-space: nowrap;
+  font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+}
+.copy-btn:hover { background: #30363d; }
+hr { border: none; border-top: 1px solid #21262d; width: 100%; margin: 0.5rem 0; }
+.lang-switcher { display: flex; gap: 0.5rem; font-size: 0.75rem; }
+.lang-switcher a { color: #58a6ff; text-decoration: none; opacity: 0.6; }
+.lang-switcher a.active { font-weight: 700; text-decoration: underline; opacity: 1; }
+.inspector-link {
+  display: inline-block; margin-top: 0.5rem;
+  padding: 0.45rem 1rem; border-radius: 6px;
+  background: #1f6feb; color: #fff; font-size: 0.85rem; font-weight: 600;
+  text-decoration: none; text-align: center;
+}
+.inspector-link:hover { background: #388bfd; }
+.inspector-hint { display: inline-block; margin-top: 0.5rem; font-size: 0.8rem; opacity: 0.45; }
+</style></head><body><h1>AIT 디버그 세션 — QR 스캔</h1>__MODE_LABEL____LANG_SWITCHER__<div id="attach-section"><img class="qr" src="__QR_DATA_URL__" alt="attach QR"/></div><section><h2>스캔 절차</h2><ol><li>홈 화면의 launcher PWA 아이콘으로 실행하세요 (Safari 주소창이 보이면 standalone이 아닙니다).</li><li>launcher 안의 <strong>"QR 카메라로 스캔"</strong>으로 이 QR 코드를 스캔하세요.</li><li>미니앱이 풀스크린으로 열리고 디버그 세션이 자동으로 attach됩니다.</li></ol></section><hr/><section><h2>진단 체크리스트</h2><ul><li><strong>launcher가 설치돼 있지 않은 경우</strong> — <code>devtools.aitc.dev/launcher/</code>를 한 번 열어 홈 화면에 추가하세요</li><li><strong>카메라 앱으로 스캔하면 Safari 탭으로 열립니다 (하단 탭 바 노출)</strong> — launcher 아이콘으로 다시 실행해 인앱 스캔을 사용하세요</li><li><strong>QR이 만료된 경우 (TOTP — 코드 1개는 30초 창, 만료 후 ~3분(±6 step) 이내 소급 허용)</strong> — 새 QR을 다시 스캔하세요</li><li><strong>Chii 주입 실패 / 콘솔이 비어 있는 경우</strong> — 미니앱 번들에 <code>in-app</code> debug import가 있는지 확인</li></ul></section><hr/><section id="url-section"><h2>URL (fallback)</h2><div class="url-row"><p class="url-box" id="url-box">__SAFE_ATTACH_URL__</p><button class="copy-btn" id="copy-btn" type="button" aria-label="복사">복사</button></div></section><hr/><section id="inspector-section"><h2>인스펙터</h2>__INSPECTOR_SECTION__</section></body></html>`;
+const attachChromeHtmlKoIntoss = `<!DOCTYPE html>
+<html lang="ko"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="preload" as="image" href="__QR_DATA_URL__"/><title>AIT 디버그 세션 — QR 스캔</title><style>
+*, *::before, *::after { box-sizing: border-box; }
+body {
+  font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+  background: #0d1117; color: #c9d1d9;
+  display: flex; flex-direction: column; align-items: center;
+  min-height: 100vh; margin: 0; padding: 2rem 1rem;
+  gap: 1.5rem;
+}
+h1 { font-size: 1.25rem; font-weight: 600; color: #e6edf3; margin: 0; text-align: center; }
+.mode-label {
+  font-size: 0.78rem; font-weight: 600; color: #79c0ff;
+  background: #161b22; border: 1px solid #30363d; border-radius: 999px;
+  padding: 0.25rem 0.75rem; margin: 0;
+}
+.label { font-size: 0.8rem; opacity: 0.5; font-family: monospace; margin: 0; }
+img.qr {
+  width: min(90vw, 360px); height: auto;
+  image-rendering: pixelated;
+  background: #fff; padding: 1rem; border-radius: 12px;
+  display: block; margin: 0 auto;
+}
+section { width: 100%; max-width: 480px; }
+.hint { font-size: 0.85rem; opacity: 0.5; margin: 0.25rem 0 0; }
+.hint.error { color: #f85149; opacity: 1; font-weight: 600; }
+h2 { font-size: 1rem; font-weight: 600; color: #e6edf3; margin: 0 0 0.5rem; }
+ol, ul { margin: 0; padding-left: 1.25rem; }
+li { margin-bottom: 0.4rem; font-size: 0.9rem; line-height: 1.5; }
+.url-row {
+  display: flex; align-items: stretch; gap: 0;
+  border-radius: 6px; border: 1px solid #30363d; overflow: hidden;
+}
+.url-box {
+  font-family: monospace; font-size: 0.72rem;
+  word-break: break-all; opacity: 0.4;
+  background: #161b22; padding: 0.75rem 1rem;
+  flex: 1; cursor: pointer; border: none; border-radius: 0;
+}
+.url-box:hover { opacity: 0.6; }
+.copy-btn {
+  flex-shrink: 0; padding: 0.5rem 0.8rem;
+  background: #21262d; border: none; border-left: 1px solid #30363d;
+  color: #58a6ff; font-size: 0.75rem; cursor: pointer; white-space: nowrap;
+  font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+}
+.copy-btn:hover { background: #30363d; }
+hr { border: none; border-top: 1px solid #21262d; width: 100%; margin: 0.5rem 0; }
+.lang-switcher { display: flex; gap: 0.5rem; font-size: 0.75rem; }
+.lang-switcher a { color: #58a6ff; text-decoration: none; opacity: 0.6; }
+.lang-switcher a.active { font-weight: 700; text-decoration: underline; opacity: 1; }
+.inspector-link {
+  display: inline-block; margin-top: 0.5rem;
+  padding: 0.45rem 1rem; border-radius: 6px;
+  background: #1f6feb; color: #fff; font-size: 0.85rem; font-weight: 600;
+  text-decoration: none; text-align: center;
+}
+.inspector-link:hover { background: #388bfd; }
+.inspector-hint { display: inline-block; margin-top: 0.5rem; font-size: 0.8rem; opacity: 0.45; }
+</style></head><body><h1>AIT 디버그 세션 — QR 스캔</h1>__MODE_LABEL____LANG_SWITCHER__<p class="label">deployment: __SAFE_LABEL__</p><div id="attach-section"><img class="qr" src="__QR_DATA_URL__" alt="attach QR"/></div><section><h2>스캔 절차</h2><ol><li>토스 앱을 실행하세요.</li><li>폰 카메라 앱으로 QR 코드를 스캔하세요.</li><li>팝업이 뜨면 <strong>"토스로 열기"</strong>를 탭하세요.</li><li>미니앱이 열리고 디버그 세션이 자동으로 attach됩니다.</li></ol></section><hr/><section><h2>진단 체크리스트</h2><ul><li><strong>토스 앱이 안 열리는 경우</strong> — 앱 버전 확인, 카메라 앱으로 스캔 (토스 앱 내 QR 리더 X)</li><li><strong>미니앱이 PREPARE 상태에서 멈추는 경우</strong> — deep-link에 <code>_deploymentId</code> 파라미터가 있는지 확인</li><li><strong>Chii 주입 실패 / 콘솔이 비어 있는 경우</strong> — 미니앱 번들에 <code>in-app</code> debug import가 있는지 확인</li><li><strong>TOTP gate Layer C가 비활성인 경우</strong> — relay 서버에 <code>AIT_DEBUG_TOTP_SECRET</code>이 설정돼 있는지 확인</li></ul></section><hr/><section id="url-section"><h2>URL (fallback)</h2><div class="url-row"><p class="url-box" id="url-box">__SAFE_ATTACH_URL__</p><button class="copy-btn" id="copy-btn" type="button" aria-label="복사">복사</button></div></section><hr/><section id="inspector-section"><h2>인스펙터</h2>__INSPECTOR_SECTION__</section></body></html>`;
+const dashboardChromeHtmlEn = `<!DOCTYPE html>
+<html lang="en"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><title>AIT Debug Dashboard</title><style>
+*, *::before, *::after { box-sizing: border-box; }
+body {
+  font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+  background: #0d1117; color: #c9d1d9;
+  display: flex; flex-direction: column; align-items: center;
+  min-height: 100vh; margin: 0; padding: 2rem 1rem;
+  gap: 1.5rem;
+}
+h1 { font-size: 1.25rem; font-weight: 600; color: #e6edf3; margin: 0; text-align: center; }
+.updated { font-size: 0.75rem; opacity: 0.4; font-family: monospace; margin: 0; }
+section { width: 100%; max-width: 520px; }
+h2 { font-size: 1rem; font-weight: 600; color: #e6edf3; margin: 0 0 0.5rem; }
+.status { display: inline-block; padding: 0.25rem 0.75rem; border-radius: 999px; font-size: 0.8rem; font-weight: 600; }
+.status-up { background: #238636; color: #fff; }
+.status-down { background: #6e7681; color: #fff; }
+img.qr {
+  width: min(80vw, 300px); height: auto;
+  image-rendering: pixelated;
+  background: #fff; padding: 0.75rem; border-radius: 10px;
+  display: block; margin: 0.5rem auto;
+}
+.url-row {
+  display: flex; align-items: stretch; gap: 0; margin: 0.5rem 0 0;
+  border-radius: 6px; border: 1px solid #30363d; overflow: hidden;
+}
+.url-box {
+  font-family: monospace; font-size: 0.7rem;
+  word-break: break-all; opacity: 0.45;
+  background: #161b22; padding: 0.6rem 0.85rem;
+  flex: 1; cursor: pointer; border: none; border-radius: 0;
+}
+.url-box:hover { opacity: 0.65; }
+.copy-btn {
+  flex-shrink: 0; padding: 0.4rem 0.7rem;
+  background: #21262d; border: none; border-left: 1px solid #30363d;
+  color: #58a6ff; font-size: 0.7rem; cursor: pointer; white-space: nowrap;
+  font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+}
+.copy-btn:hover { background: #30363d; }
+.hint { font-size: 0.85rem; opacity: 0.5; margin: 0.25rem 0 0; }
+.hint.error { color: #f85149; opacity: 1; font-weight: 600; }
+.inspector-link {
+  display: inline-block; margin-top: 0.5rem;
+  padding: 0.45rem 1rem; border-radius: 6px;
+  background: #1f6feb; color: #fff; font-size: 0.85rem; font-weight: 600;
+  text-decoration: none; text-align: center;
+}
+.inspector-link:hover { background: #388bfd; }
+.inspector-hint { display: inline-block; margin-top: 0.5rem; font-size: 0.8rem; opacity: 0.45; }
+ul { margin: 0; padding-left: 1.25rem; }
+li { margin-bottom: 0.35rem; font-size: 0.85rem; line-height: 1.5; }
+li.empty { opacity: 0.4; list-style: none; padding-left: 0; }
+.page-id { font-family: monospace; font-size: 0.75rem; opacity: 0.5; margin-right: 0.4rem; }
+.page-url { word-break: break-all; }
+hr { border: none; border-top: 1px solid #21262d; width: 100%; margin: 0; }
+.lang-switcher { display: flex; gap: 0.5rem; font-size: 0.75rem; }
+.lang-switcher a { color: #58a6ff; text-decoration: none; opacity: 0.6; }
+.lang-switcher a.active { font-weight: 700; text-decoration: underline; opacity: 1; }
+</style></head><body><h1>AIT Debug Dashboard</h1>__LANG_SWITCHER__<p class="updated" id="updated">Last updated: __NOW__</p><section><h2>Tunnel status</h2><span class="status __TUNNEL_CLASS__" id="tunnel-status">__TUNNEL_STATUS__</span></section><hr/><section><h2>Attach QR</h2><div id="attach-section">__ATTACH_SECTION__</div></section><hr/><section id="inspector-section"><h2>Inspector</h2>__INSPECTOR_SECTION__</section>__PAGES_SECTION__</body></html>`;
+const attachChromeHtmlEnSandbox = `<!DOCTYPE html>
+<html lang="en"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="preload" as="image" href="__QR_DATA_URL__"/><title>AIT Debug Session — QR Scan</title><style>
+*, *::before, *::after { box-sizing: border-box; }
+body {
+  font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+  background: #0d1117; color: #c9d1d9;
+  display: flex; flex-direction: column; align-items: center;
+  min-height: 100vh; margin: 0; padding: 2rem 1rem;
+  gap: 1.5rem;
+}
+h1 { font-size: 1.25rem; font-weight: 600; color: #e6edf3; margin: 0; text-align: center; }
+.mode-label {
+  font-size: 0.78rem; font-weight: 600; color: #79c0ff;
+  background: #161b22; border: 1px solid #30363d; border-radius: 999px;
+  padding: 0.25rem 0.75rem; margin: 0;
+}
+.label { font-size: 0.8rem; opacity: 0.5; font-family: monospace; margin: 0; }
+img.qr {
+  width: min(90vw, 360px); height: auto;
+  image-rendering: pixelated;
+  background: #fff; padding: 1rem; border-radius: 12px;
+  display: block; margin: 0 auto;
+}
+section { width: 100%; max-width: 480px; }
+.hint { font-size: 0.85rem; opacity: 0.5; margin: 0.25rem 0 0; }
+.hint.error { color: #f85149; opacity: 1; font-weight: 600; }
+h2 { font-size: 1rem; font-weight: 600; color: #e6edf3; margin: 0 0 0.5rem; }
+ol, ul { margin: 0; padding-left: 1.25rem; }
+li { margin-bottom: 0.4rem; font-size: 0.9rem; line-height: 1.5; }
+.url-row {
+  display: flex; align-items: stretch; gap: 0;
+  border-radius: 6px; border: 1px solid #30363d; overflow: hidden;
+}
+.url-box {
+  font-family: monospace; font-size: 0.72rem;
+  word-break: break-all; opacity: 0.4;
+  background: #161b22; padding: 0.75rem 1rem;
+  flex: 1; cursor: pointer; border: none; border-radius: 0;
+}
+.url-box:hover { opacity: 0.6; }
+.copy-btn {
+  flex-shrink: 0; padding: 0.5rem 0.8rem;
+  background: #21262d; border: none; border-left: 1px solid #30363d;
+  color: #58a6ff; font-size: 0.75rem; cursor: pointer; white-space: nowrap;
+  font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+}
+.copy-btn:hover { background: #30363d; }
+hr { border: none; border-top: 1px solid #21262d; width: 100%; margin: 0.5rem 0; }
+.lang-switcher { display: flex; gap: 0.5rem; font-size: 0.75rem; }
+.lang-switcher a { color: #58a6ff; text-decoration: none; opacity: 0.6; }
+.lang-switcher a.active { font-weight: 700; text-decoration: underline; opacity: 1; }
+.inspector-link {
+  display: inline-block; margin-top: 0.5rem;
+  padding: 0.45rem 1rem; border-radius: 6px;
+  background: #1f6feb; color: #fff; font-size: 0.85rem; font-weight: 600;
+  text-decoration: none; text-align: center;
+}
+.inspector-link:hover { background: #388bfd; }
+.inspector-hint { display: inline-block; margin-top: 0.5rem; font-size: 0.8rem; opacity: 0.45; }
+</style></head><body><h1>AIT Debug Session — QR Scan</h1>__MODE_LABEL____LANG_SWITCHER__<div id="attach-section"><img class="qr" src="__QR_DATA_URL__" alt="attach QR"/></div><section><h2>How to scan</h2><ol><li>Launch the launcher PWA icon on your home screen (if the Safari address bar is visible, it is not standalone).</li><li>Scan this QR code with <strong>"Scan QR with camera"</strong> inside the launcher.</li><li>The mini-app opens fullscreen and the debug session attaches automatically.</li></ol></section><hr/><section><h2>Troubleshooting checklist</h2><ul><li><strong>Launcher is not installed</strong> — open <code>devtools.aitc.dev/launcher/</code> once and add it to your home screen</li><li><strong>Scanning with the camera app opens a Safari tab (bottom tab bar visible)</strong> — relaunch from the launcher icon and use the in-app scanner</li><li><strong>QR expired (TOTP — 30-second step, ±6 steps (~3 min) accepted)</strong> — scan a fresh QR code</li><li><strong>Chii injection failure / console is empty</strong> — verify the mini-app bundle has an <code>in-app</code> debug import</li></ul></section><hr/><section id="url-section"><h2>URL (fallback)</h2><div class="url-row"><p class="url-box" id="url-box">__SAFE_ATTACH_URL__</p><button class="copy-btn" id="copy-btn" type="button" aria-label="Copy">Copy</button></div></section><hr/><section id="inspector-section"><h2>Inspector</h2>__INSPECTOR_SECTION__</section></body></html>`;
+const attachChromeHtmlEnIntoss = `<!DOCTYPE html>
+<html lang="en"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="preload" as="image" href="__QR_DATA_URL__"/><title>AIT Debug Session — QR Scan</title><style>
+*, *::before, *::after { box-sizing: border-box; }
+body {
+  font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+  background: #0d1117; color: #c9d1d9;
+  display: flex; flex-direction: column; align-items: center;
+  min-height: 100vh; margin: 0; padding: 2rem 1rem;
+  gap: 1.5rem;
+}
+h1 { font-size: 1.25rem; font-weight: 600; color: #e6edf3; margin: 0; text-align: center; }
+.mode-label {
+  font-size: 0.78rem; font-weight: 600; color: #79c0ff;
+  background: #161b22; border: 1px solid #30363d; border-radius: 999px;
+  padding: 0.25rem 0.75rem; margin: 0;
+}
+.label { font-size: 0.8rem; opacity: 0.5; font-family: monospace; margin: 0; }
+img.qr {
+  width: min(90vw, 360px); height: auto;
+  image-rendering: pixelated;
+  background: #fff; padding: 1rem; border-radius: 12px;
+  display: block; margin: 0 auto;
+}
+section { width: 100%; max-width: 480px; }
+.hint { font-size: 0.85rem; opacity: 0.5; margin: 0.25rem 0 0; }
+.hint.error { color: #f85149; opacity: 1; font-weight: 600; }
+h2 { font-size: 1rem; font-weight: 600; color: #e6edf3; margin: 0 0 0.5rem; }
+ol, ul { margin: 0; padding-left: 1.25rem; }
+li { margin-bottom: 0.4rem; font-size: 0.9rem; line-height: 1.5; }
+.url-row {
+  display: flex; align-items: stretch; gap: 0;
+  border-radius: 6px; border: 1px solid #30363d; overflow: hidden;
+}
+.url-box {
+  font-family: monospace; font-size: 0.72rem;
+  word-break: break-all; opacity: 0.4;
+  background: #161b22; padding: 0.75rem 1rem;
+  flex: 1; cursor: pointer; border: none; border-radius: 0;
+}
+.url-box:hover { opacity: 0.6; }
+.copy-btn {
+  flex-shrink: 0; padding: 0.5rem 0.8rem;
+  background: #21262d; border: none; border-left: 1px solid #30363d;
+  color: #58a6ff; font-size: 0.75rem; cursor: pointer; white-space: nowrap;
+  font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+}
+.copy-btn:hover { background: #30363d; }
+hr { border: none; border-top: 1px solid #21262d; width: 100%; margin: 0.5rem 0; }
+.lang-switcher { display: flex; gap: 0.5rem; font-size: 0.75rem; }
+.lang-switcher a { color: #58a6ff; text-decoration: none; opacity: 0.6; }
+.lang-switcher a.active { font-weight: 700; text-decoration: underline; opacity: 1; }
+.inspector-link {
+  display: inline-block; margin-top: 0.5rem;
+  padding: 0.45rem 1rem; border-radius: 6px;
+  background: #1f6feb; color: #fff; font-size: 0.85rem; font-weight: 600;
+  text-decoration: none; text-align: center;
+}
+.inspector-link:hover { background: #388bfd; }
+.inspector-hint { display: inline-block; margin-top: 0.5rem; font-size: 0.8rem; opacity: 0.45; }
+</style></head><body><h1>AIT Debug Session — QR Scan</h1>__MODE_LABEL____LANG_SWITCHER__<p class="label">deployment: __SAFE_LABEL__</p><div id="attach-section"><img class="qr" src="__QR_DATA_URL__" alt="attach QR"/></div><section><h2>How to scan</h2><ol><li>Open the Toss app.</li><li>Scan the QR code with your phone camera app.</li><li>Tap <strong>"Open in Toss"</strong> when the popup appears.</li><li>The mini-app opens and the debug session attaches automatically.</li></ol></section><hr/><section><h2>Troubleshooting checklist</h2><ul><li><strong>Toss app does not open</strong> — check app version; scan with the system camera app (not the Toss in-app QR reader)</li><li><strong>Mini-app stuck in PREPARE state</strong> — verify the deep-link has a <code>_deploymentId</code> parameter</li><li><strong>Chii injection failure / console is empty</strong> — verify the mini-app bundle has an <code>in-app</code> debug import</li><li><strong>TOTP gate Layer C is inactive</strong> — check that <code>AIT_DEBUG_TOTP_SECRET</code> is set on the relay server</li></ul></section><hr/><section id="url-section"><h2>URL (fallback)</h2><div class="url-row"><p class="url-box" id="url-box">__SAFE_ATTACH_URL__</p><button class="copy-btn" id="copy-btn" type="button" aria-label="Copy">Copy</button></div></section><hr/><section id="inspector-section"><h2>Inspector</h2>__INSPECTOR_SECTION__</section></body></html>`;
+/** Map from Locale to the precompiled dashboard chrome string. */
+const dashboardChromeByLocale = {
+	ko: dashboardChromeHtmlKo,
+	en: dashboardChromeHtmlEn
+};
+/** Map from Locale × copy family to the precompiled attach page chrome string (#468). */
+const attachChromeByLocale = {
+	ko: {
+		sandbox: attachChromeHtmlKoSandbox,
+		intoss: attachChromeHtmlKoIntoss
+	},
+	en: {
+		sandbox: attachChromeHtmlEnSandbox,
+		intoss: attachChromeHtmlEnIntoss
+	}
+};
+//#endregion
+//#region src/mcp/qr-http-server.ts
+/** mode → 어느 precompiled attach chrome family를 쓰는가 (#468). */
+function attachFamilyForMode(mode) {
+	return mode === "relay-mobile" ? "sandbox" : "intoss";
+}
+/**
+* mode → 페이지 상단 환경 라벨 HTML (`__MODE_LABEL__` 토큰 채움, #468).
+* 사용자가 fidelity 사다리의 어느 겹에 있는지 즉시 알게 하는 환경 가시화 배지.
+* mode 미지정/'mock'은 빈 문자열 — 알 수 없는 환경을 거짓으로 라벨링하지 않는다.
+*/
+function buildModeLabel(mode, s) {
+	let label;
+	switch (mode) {
+		case "relay-mobile":
+			label = s("attach.mode.sandbox");
+			break;
+		case "relay-dev":
+			label = s("attach.mode.intossDev");
+			break;
+		case "mock":
+		case void 0: return "";
+	}
+	return `<p class="mode-label">${escapeHtml(label)}</p>`;
+}
+/** HTML 특수문자를 이스케이프한다. */
+function escapeHtml(s) {
+	return s.replace(/[<>&"']/g, (c) => `&#${c.charCodeAt(0)};`);
+}
+/**
+* 현재 path+query에서 lang 파라미터만 교체한 ko/en 토글 링크를 생성한다.
+*
+* SECRET-HANDLING: u= (attachUrl, TOTP at= 캡슐 포함) 등 기존 query를 보존한다.
+* lang= 만 덮어쓴다. 링크 href에 at= 코드가 들어가는 건 의도된 전달 경로.
+*/
+function buildLangSwitcher(path, existingParams, locale, s) {
+	function switcherHref(targetLang) {
+		const p = new URLSearchParams(existingParams);
+		p.set("lang", targetLang);
+		return `${escapeHtml(path)}?${p.toString()}`;
+	}
+	const koLabel = escapeHtml(s("dashboard.lang.ko"));
+	const enLabel = escapeHtml(s("dashboard.lang.en"));
+	const koClass = locale === "ko" ? "active" : "";
+	const enClass = locale === "en" ? "active" : "";
+	return `<div class="lang-switcher"><a href="${switcherHref("ko")}" class="${koClass}">${koLabel}</a><a href="${switcherHref("en")}" class="${enClass}">${enLabel}</a></div>`;
+}
+/**
+* Dashboard HTML — precompiled chrome에 per-request 동적 값을 채워 완성한다.
+*
+* 토큰 채우기 순서:
+*   1. chrome string(locale별 precompile)을 가져온다.
+*   2. 동적 부분을 단순 replaceAll로 채운다 (토큰이 HTML context 밖에 있으므로 안전).
+*   3. inline SSE <script>를 </body> 직전에 주입한다.
+*
+* 동적 파트 분류:
+*   - "token-fill": 단일 값 교체 (__NOW__, __TUNNEL_CLASS__, __TUNNEL_STATUS__,
+*     __ATTACH_SECTION__, __INSPECTOR_SECTION__)
+*   - "runtime builder": 가변 길이 구조 (__PAGES_SECTION__ — 조건부 렌더 + 가변 rows)
+*   - "suffix": inline SSE <script> (빌드 파이프라인 없는 클라이언트 스크립트, locale
+*     aware 문자열 포함)
+*
+* SECRET-HANDLING:
+*   - attachUrl은 url-box 안에서만 노출 (TOTP at= 코드 캡슐 그대로).
+*   - inspectorUrl은 anchor href 안에서만 노출 (TOTP at= 코드 캡슐 그대로).
+*     relay host + TOTP 코드가 담길 수 있으나 대시보드 HTML은 의도된 transport.
+*   - tunnel wssUrl은 "터널 연결됨" 상태 표시에서 UP/DOWN만 노출.
+*     wssUrl 값 자체는 dashboard HTML에 넣지 않는다.
+*/
+function buildDashboardHtml(state, qrDataUrl, locale, path = "/", params = new URLSearchParams(), devtoolsEntryUrl = null, sseRefreshIntervalMs = 9e4) {
+	const s = resolveLocaleStrings(locale);
+	const now = (/* @__PURE__ */ new Date()).toISOString();
+	const tunnelStatus = state.tunnel.up ? s("dashboard.tunnel.up") : s("dashboard.tunnel.down");
+	const tunnelClass = state.tunnel.up ? "status-up" : "status-down";
+	let attachSection;
+	if (!state.tunnel.up) attachSection = `<p class="hint error">${escapeHtml(s("dashboard.attach.tunnelDown"))}</p>`;
+	else if (qrDataUrl && state.attachUrl) {
+		const safeAttachUrl = escapeHtml(state.attachUrl);
+		const copyLabel = escapeHtml(s("dashboard.url.copy"));
+		attachSection = `<img class="qr" src="${qrDataUrl}" alt="attach QR" /><div class="url-row"><p class="url-box" id="url-box">${safeAttachUrl}</p><button class="copy-btn" id="copy-btn" type="button" aria-label="${copyLabel}">${copyLabel}</button></div>`;
+	} else attachSection = `<p class="hint">${escapeHtml(s("dashboard.attach.hint"))}</p>`;
+	const pagesAttached = Array.isArray(state.pages) && state.pages.length > 0;
+	let inspectorSection;
+	if (pagesAttached && devtoolsEntryUrl) inspectorSection = `<a class="inspector-link" id="inspector-link" href="${escapeHtml(devtoolsEntryUrl)}" target="_blank" rel="noopener noreferrer">${escapeHtml(s("dashboard.inspector.open"))}</a>`;
+	else inspectorSection = `<span class="inspector-hint" id="inspector-link">${escapeHtml(s("dashboard.inspector.waiting"))}</span>`;
+	const pagesSection = state.pages === null ? "" : `<hr /><section id="pages-section"><h2>${escapeHtml(s("dashboard.pages.section"))}</h2><ul id="pages-list">${state.pages.length > 0 ? state.pages.map((p) => {
+		return `<li><span class="page-id">${escapeHtml(p.id)}</span> <span class="page-url">${escapeHtml(p.url.slice(0, 120))}</span></li>`;
+	}).join("\n") : `<li class="empty">${escapeHtml(s("dashboard.pages.empty"))}</li>`}</ul></section>`;
+	const watchdogTimeoutMs = sseRefreshIntervalMs < 5e3 ? sseRefreshIntervalMs * 3 : sseRefreshIntervalMs * 2 + 3e4;
+	const sseStrings = {
+		tunnelUp: JSON.stringify(s("dashboard.tunnel.up")),
+		tunnelDown: JSON.stringify(s("dashboard.tunnel.down")),
+		pagesEmpty: JSON.stringify(s("dashboard.pages.empty")),
+		attachHint: JSON.stringify(s("dashboard.attach.hint")),
+		attachTunnelDown: JSON.stringify(s("dashboard.attach.tunnelDown")),
+		copyLabel: JSON.stringify(s("dashboard.url.copy")),
+		copiedLabel: JSON.stringify(s("dashboard.url.copied")),
+		inspectorOpenLabel: JSON.stringify(s("dashboard.inspector.open")),
+		inspectorWaitingLabel: JSON.stringify(s("dashboard.inspector.waiting")),
+		dashboardSurface: true,
+		watchdogTimeoutMs,
+		watchdogTitle: JSON.stringify(s("dashboard.watchdog.title")),
+		watchdogBody: JSON.stringify(s("dashboard.watchdog.body")),
+		watchdogCloseLabel: JSON.stringify(s("dashboard.watchdog.close")),
+		connectionLost: JSON.stringify(s("dashboard.conn.lost")),
+		completeTitle: JSON.stringify(s("dashboard.session.completeTitle")),
+		completeBody: JSON.stringify(s("dashboard.session.completeBody")),
+		shutdownTitle: JSON.stringify(s("dashboard.session.shutdownTitle")),
+		shutdownBody: JSON.stringify(s("dashboard.session.shutdownBody"))
+	};
+	const langSwitcher = buildLangSwitcher(path, params, locale, s);
+	const filled = dashboardChromeByLocale[locale].replaceAll("__LANG_SWITCHER__", langSwitcher).replaceAll("__NOW__", escapeHtml(now)).replaceAll("__TUNNEL_CLASS__", tunnelClass).replaceAll("__TUNNEL_STATUS__", escapeHtml(tunnelStatus)).replaceAll("__ATTACH_SECTION__", attachSection).replaceAll("__INSPECTOR_SECTION__", inspectorSection).replaceAll("__PAGES_SECTION__", pagesSection);
+	const sseScript = buildSseScript(sseStrings);
+	return filled.replace("</body>", `${sseScript}\n</body>`);
+}
+/**
+* Inline SSE client <script> — injected into the dashboard HTML at runtime.
+*
+* Subscribes to /events and updates the DOM without a build pipeline.
+* client side: attachUrl은 DOM에 렌더링, wssUrl은 절대 렌더링하지 않는다.
+* pages === null 이면 섹션을 건드리지 않는다 (#411).
+*
+* 두 표면(dashboard / attach) 분기:
+*   - dashboard (dashboardSurface=true): #attach-section innerHTML 전체 교체 방식 유지.
+*     url-box도 innerHTML 재렌더 안에 포함되어 갱신됨.
+*   - /attach (dashboardSurface=false): #attach-section의 img src만 교체하고,
+*     url-box는 #url-box textContent만 갱신한다. (#attach-section에 url-box가 없으므로
+*     innerHTML 교체 시 url-box가 새로 생겨 이중 표시되는 결함을 방지 — #458 결함 수정.)
+*
+* 복사 기능: 이벤트 위임으로 document에 단일 핸들러. innerHTML 재렌더 후에도 생존.
+*   - .url-box 클릭 또는 .copy-btn 클릭 → 현재 #url-box textContent 복사.
+*   - clipboard: navigator.clipboard.writeText → 실패/부재 시 textarea execCommand fallback.
+*   - 피드백: 버튼 라벨이 COPIED_LABEL로 ~1.5초 전환 후 COPY_LABEL로 복귀.
+*
+* SSE watchdog (#681): SSE 주기 갱신이 `watchdogTimeoutMs` 동안 수신되지 않으면
+* server가 종료된 것으로 판단한다. `window.close()`를 시도하고, 닫히지 않으면
+* 폴백 안내 화면으로 교체해 stale QR이 계속 보이는 오해를 항상 방지한다.
+*
+* 문자열 인자는 빌드타임에 ko/en 테이블에서 가져와 JSON.stringify로 이미 escape됨.
+*
+* SECRET-HANDLING: URL 값을 console.log 등으로 출력하지 않는다.
+*/
+function buildSseScript(strings) {
+	const isDashboard = strings.dashboardSurface;
+	return `<script>
+    // SSE — /events 구독해 상태 자동 갱신. 빌드 파이프라인 없는 인라인 스크립트.
+    (function () {
+      var TUNNEL_UP = ${strings.tunnelUp};
+      var TUNNEL_DOWN = ${strings.tunnelDown};
+      var PAGES_EMPTY = ${strings.pagesEmpty};
+      var ATTACH_HINT = ${strings.attachHint};
+      var ATTACH_TUNNEL_DOWN = ${strings.attachTunnelDown};
+      var COPY_LABEL = ${strings.copyLabel};
+      var COPIED_LABEL = ${strings.copiedLabel};
+      var INSPECTOR_OPEN_LABEL = ${strings.inspectorOpenLabel};
+      var INSPECTOR_WAITING_LABEL = ${strings.inspectorWaitingLabel};
+
+      // ── SSE watchdog 상수 (#681) ──────────────────────────────────────────
+      // server의 SSE refresh 주기(기본 90s)보다 넉넉히 큰 값 — 주기 × 2 + 30s 여유.
+      // token-fill 패턴으로 server에서 계산해 주입한다.
+      var WATCHDOG_TIMEOUT_MS = ${strings.watchdogTimeoutMs};
+      var WATCHDOG_TITLE = ${strings.watchdogTitle};
+      var WATCHDOG_BODY = ${strings.watchdogBody};
+      var WATCHDOG_CLOSE_LABEL = ${strings.watchdogCloseLabel};
+
+      // ── 실시간 상태 표면 상수 (#730) ───────────────────────────────────────
+      var CONN_LOST = ${strings.connectionLost};
+      var COMPLETE_TITLE = ${strings.completeTitle};
+      var COMPLETE_BODY = ${strings.completeBody};
+      var SHUTDOWN_TITLE = ${strings.shutdownTitle};
+      var SHUTDOWN_BODY = ${strings.shutdownBody};
+      var disconnectedShown = false;
+
+      // ── 클립보드 복사 헬퍼 ────────────────────────────────────────────────
+      function copyText(text) {
+        if (navigator.clipboard && navigator.clipboard.writeText) {
+          return navigator.clipboard.writeText(text);
+        }
+        // fallback: textarea + execCommand
+        return new Promise(function (resolve, reject) {
+          var ta = document.createElement('textarea');
+          ta.value = text;
+          ta.style.position = 'fixed';
+          ta.style.opacity = '0';
+          document.body.appendChild(ta);
+          ta.focus();
+          ta.select();
+          try {
+            document.execCommand('copy') ? resolve() : reject(new Error('execCommand failed'));
+          } catch (err) {
+            reject(err);
+          } finally {
+            document.body.removeChild(ta);
+          }
+        });
+      }
+
+      // ── 복사 피드백 ───────────────────────────────────────────────────────
+      var copyTimer = null;
+      function triggerCopy() {
+        var urlBox = document.getElementById('url-box');
+        if (!urlBox) return;
+        var text = urlBox.textContent || '';
+        if (!text) return;
+        copyText(text).then(function () {
+          var btn = document.getElementById('copy-btn');
+          if (btn) {
+            btn.textContent = COPIED_LABEL;
+            if (copyTimer) clearTimeout(copyTimer);
+            copyTimer = setTimeout(function () {
+              btn.textContent = COPY_LABEL;
+              copyTimer = null;
+            }, 1500);
+          }
+        }).catch(function () { /* 복사 실패 시 조용히 무시 */ });
+      }
+
+      // ── 이벤트 위임 — document 레벨에서 단일 핸들러 (innerHTML 재렌더 후에도 생존) ──
+      document.addEventListener('click', function (e) {
+        var target = e.target;
+        if (!target) return;
+        // .copy-btn 또는 .url-box 클릭 시 복사
+        if (target.closest && (target.closest('.copy-btn') || target.closest('.url-box'))) {
+          triggerCopy();
+        }
+      });
+
+      // ── SSE watchdog (#681) ───────────────────────────────────────────────
+      // 마지막으로 SSE 메시지를 수신한 시각. 스크립트 로드 시각으로 초기화한다.
+      // (서버가 /events 연결 즉시 초기 상태를 push하므로 onmessage가 곧 갱신한다.)
+      var lastSeen = Date.now();
+      // watchdog이 한 번 발화하면 타이머를 clear해 중복 실행 방지.
+      var watchdogFired = false;
+      var watchdogTimer = null;
+
+      // 폴백 UI — window.close()가 무시되면 stale QR 대신 안내 화면을 표시한다.
+      function showWatchdogFallback() {
+        if (document.body) {
+          document.body.innerHTML =
+            '<div style="display:flex;flex-direction:column;align-items:center;justify-content:center;' +
+            'height:100vh;font-family:sans-serif;text-align:center;padding:2rem;box-sizing:border-box;">' +
+            '<p style="font-size:1.4rem;font-weight:bold;margin-bottom:1rem;">' + WATCHDOG_TITLE + '</p>' +
+            '<p style="color:#555;margin-bottom:2rem;">' + WATCHDOG_BODY + '</p>' +
+            '<button onclick="window.close()" ' +
+            'style="padding:0.6rem 1.4rem;font-size:1rem;cursor:pointer;border:1px solid #ccc;' +
+            'border-radius:6px;background:#f5f5f5;">' + WATCHDOG_CLOSE_LABEL + '</button>' +
+            '</div>';
+        }
+      }
+
+      // ── Terminal 상태 배너 (#730) ─────────────────────────────────────────
+      // "완료"/"종료"는 watchdog(최대 210s 지연)을 기다리지 않고 close() 직전에
+      // 서버가 직접 push하는 마지막 SSE 프레임으로 즉시 렌더한다. watchdogFired를
+      // 함께 세워 뒤이은 onerror의 showConnLost가 이 배너를 덮어쓰지 않게 한다.
+      function showTerminalBanner(title, body) {
+        if (watchdogTimer) { clearInterval(watchdogTimer); watchdogTimer = null; }
+        watchdogFired = true; // 이후 watchdog/onerror 발화를 억제
+        if (document.body) {
+          document.body.innerHTML =
+            '<div style="display:flex;flex-direction:column;align-items:center;justify-content:center;' +
+            'height:100vh;font-family:sans-serif;text-align:center;padding:2rem;box-sizing:border-box;">' +
+            '<p style="font-size:1.4rem;font-weight:bold;margin-bottom:1rem;">' + title + '</p>' +
+            '<p style="color:#555;">' + body + '</p></div>';
+        }
+      }
+
+      // ── SSE onerror 즉시 신호 (#730) ──────────────────────────────────────
+      // EventSource는 "재시도 중"과 "서버 종료"를 구분하지 못하므로, onerror에서
+      // 즉시 구분되는 '연결 끊김' 상태를 tunnel-status 배지에 표시한다. 이미
+      // terminal 배너가 뜬 뒤(watchdogFired)라면 덮어쓰지 않는다.
+      function showConnLost() {
+        if (disconnectedShown || watchdogFired) return;
+        disconnectedShown = true;
+        var el = document.getElementById('tunnel-status');
+        if (el) { el.textContent = CONN_LOST; el.className = 'status status-down'; }
+      }
+      function clearConnLost() {
+        disconnectedShown = false;
+      }
+
+      function fireWatchdog() {
+        if (watchdogFired) return;
+        watchdogFired = true;
+        if (watchdogTimer) { clearInterval(watchdogTimer); watchdogTimer = null; }
+        // 폴백 UI를 먼저 표시한다 — close가 성공하면 어차피 페이지가 닫혀 보이지 않는다.
+        // close 실패(opener 없는 탭)에 대비해 stale QR 대신 안내 화면을 항상 보장한다.
+        showWatchdogFallback();
+        // window.close() 시도 — OS가 연 탭은 opener가 없어 무시될 수 있다.
+        window.close();
+      }
+
+      // 주기적으로 lastSeen을 검사 — WATCHDOG_TIMEOUT_MS 초과 시 발화.
+      // 검사 간격: WATCHDOG_TIMEOUT_MS / 6, 단 최소 1s 이상이되 timeout 자체보다 크지 않게 한다.
+      // (sseRefreshIntervalMs가 작을 때 최솟값 1s가 timeout을 초과하는 경우 방지 — 테스트 격리.)
+      var checkIntervalMs = Math.min(
+        Math.max(1000, Math.round(WATCHDOG_TIMEOUT_MS / 6)),
+        WATCHDOG_TIMEOUT_MS,
+      );
+      watchdogTimer = setInterval(function () {
+        if (watchdogFired) return;
+        if (Date.now() - lastSeen > WATCHDOG_TIMEOUT_MS) {
+          fireWatchdog();
+        }
+      }, checkIntervalMs);
+
+      // ── SSE 구독 ──────────────────────────────────────────────────────────
+      var src = new EventSource('/events');
+      src.onopen = function () {
+        // 연결 복구 시 lastSeen 갱신 — 일시적 끊김이 watchdog을 발화시키지 않게.
+        // watchdog이 이미 발화했으면 갱신하지 않는다(폴백 UI를 그대로 유지).
+        if (!watchdogFired) { lastSeen = Date.now(); clearConnLost(); }
+      };
+      src.onmessage = function (e) {
+        // SSE 메시지 수신 — lastSeen 갱신으로 watchdog 리셋.
+        // watchdog 발화 후라면 갱신해도 타이머가 이미 clear됐으므로 효과 없음.
+        if (!watchdogFired) { lastSeen = Date.now(); }
+        try {
+          var s = JSON.parse(e.data);
+          // 어떤 프레임이든 성공적으로 수신됐다는 건 서버가 살아있다는 뜻 —
+          // onerror가 세운 '연결 끊김' 표시를 해제한다 (#730).
+          clearConnLost();
+          // phase gate (#730) — 'complete'/'shutdown'은 terminal 상태이므로
+          // 나머지 필드 렌더보다 먼저 처리하고 즉시 반환한다.
+          if (s.phase === 'complete') { showTerminalBanner(COMPLETE_TITLE, COMPLETE_BODY); return; }
+          if (s.phase === 'shutdown') { showTerminalBanner(SHUTDOWN_TITLE, SHUTDOWN_BODY); return; }
+          // 터널 상태 갱신
+          var el = document.getElementById('tunnel-status');
+          if (el) {
+            el.textContent = s.tunnel && s.tunnel.up ? TUNNEL_UP : TUNNEL_DOWN;
+            el.className = 'status ' + (s.tunnel && s.tunnel.up ? 'status-up' : 'status-down');
+          }
+          // page 목록 갱신 — pages === null(env 2)이면 섹션 자체를 숨긴 채 둔다.
+          // 정적 렌더가 #pages-section을 아예 안 그렸으므로 여기서도 손대지 않아
+          // SSE push 때 섹션이 되살아나지 않는다(#411). 배열일 때만 목록을 채운다.
+          if (s.pages !== null && s.pages !== undefined) {
+            var ul = document.getElementById('pages-list');
+            if (ul) {
+              if (s.pages.length === 0) {
+                ul.innerHTML = '<li class="empty">' + PAGES_EMPTY + '</li>';
+              } else {
+                ul.innerHTML = s.pages.map(function (p) {
+                  var sid = String(p.id || '').slice(0, 36).replace(/[<>&"']/g, function (c) { return '&#' + c.charCodeAt(0) + ';'; });
+                  var su = String(p.url || '').slice(0, 120).replace(/[<>&"']/g, function (c) { return '&#' + c.charCodeAt(0) + ';'; });
+                  return '<li><span class="page-id">' + sid + '</span> <span class="page-url">' + su + '</span></li>';
+                }).join('');
+              }
+            }
+          }
+          // attachUrl QR + url-box 갱신
+          // SECRET-HANDLING: URL 값을 로그로 출력하지 않는다.
+          // 터널이 죽으면(s.tunnel.up=false) attachUrl이 남아 있어도 QR을
+          // 그리지 않고 에러 상태로 교체한다 — 죽은 QR이 스캔되는 것을 막는다(#631).
+          var sec = document.getElementById('attach-section');
+          if (sec) {
+            if (!(s.tunnel && s.tunnel.up)) {
+              sec.innerHTML = '<p class=\\"hint error\\">' + ATTACH_TUNNEL_DOWN + '</p>';
+            } else if (s.attachUrl) {
+              var encoded = encodeURIComponent(s.attachUrl);
+              var safeUrl = String(s.attachUrl).slice(0, 2000).replace(/[<>&"']/g, function (c) { return '&#' + c.charCodeAt(0) + ';'; });
+              ${isDashboard ? `// dashboard: #attach-section innerHTML 전체 교체 (img + url-row).
+              // url-box id="url-box" 를 포함해 복사 핸들러가 계속 동작함.
+              sec.innerHTML =
+                '<img class="qr" src="/qr.png?u=' + encoded + '" alt="attach QR" />' +
+                '<div class=\\"url-row\\">' +
+                  '<p class=\\"url-box\\" id=\\"url-box\\">' + safeUrl + '</p>' +
+                  '<button class=\\"copy-btn\\" id=\\"copy-btn\\" type=\\"button\\" aria-label=\\"' + COPY_LABEL + '\\">' + COPY_LABEL + '</button>' +
+                '</div>';` : `// /attach: img src만 교체 — url-box는 별도 #url-section에서 관리해 이중 표시 방지(#458).
+              // QR img src 교체: img가 있으면 src만 갱신, 없으면 img 요소 생성.
+              var img = sec.querySelector('img.qr');
+              if (img) {
+                img.src = '/qr.png?u=' + encoded;
+              } else {
+                sec.innerHTML = '<img class=\\"qr\\" src=\\"/qr.png?u=' + encoded + '\\" alt=\\"attach QR\\" />';
+              }
+              // url-box textContent만 갱신 (innerHTML 교체하지 않아 복사 버튼/핸들러 생존).
+              var ub = document.getElementById('url-box');
+              if (ub) ub.textContent = s.attachUrl;`}
+            } else {
+              ${isDashboard ? `sec.innerHTML = '<p class=\\"hint\\">' + ATTACH_HINT + '</p>';` : `// /attach에서 hint가 필요한 경우는 없으나 방어 처리.
+              sec.innerHTML = '<p class=\\"hint\\">' + ATTACH_HINT + '</p>';`}
+            }
+          }
+          // 인스펙터 링크 갱신 — #inspector-link (#503, gate 보정 #544).
+          // 게이트: pages.length > 0 (페이지 attach 여부) — inspectorUrl 존재 여부가 아님.
+          // #530 이후 inspectorUrl은 항상 안정 URL이므로 null 게이트는 사실상 항상 활성이었다.
+          // pages.length > 0 으로 바꿔 미attach 시 대기 힌트를 보여주도록 수정.
+          // SECRET-HANDLING: inspectorUrl을 console.log 등으로 출력하지 않는다.
+          var insp = document.getElementById('inspector-link');
+          if (insp) {
+            var pagesAttachedSse = Array.isArray(s.pages) && s.pages.length > 0;
+            if (pagesAttachedSse && s.inspectorUrl) {
+              var safeInspUrl = String(s.inspectorUrl).slice(0, 2000).replace(/[<>&"']/g, function (c) { return '&#' + c.charCodeAt(0) + ';'; });
+              insp.outerHTML = '<a class=\\"inspector-link\\" id=\\"inspector-link\\" href=\\"' + safeInspUrl + '\\" target=\\"_blank\\" rel=\\"noopener noreferrer\\">' + INSPECTOR_OPEN_LABEL + '</a>';
+            } else {
+              insp.outerHTML = '<span class=\\"inspector-hint\\" id=\\"inspector-link\\">' + INSPECTOR_WAITING_LABEL + '</span>';
+            }
+          }
+          // 갱신 시각 (dashboard만 #updated 요소 있음)
+          var upd = document.getElementById('updated');
+          if (upd) upd.textContent = upd.textContent.replace(/[^ ]+$/, new Date().toISOString());
+        } catch (_) { /* 파싱 오류 무시 */ }
+      };
+      src.onerror = function () {
+        // EventSource는 "재시도 중"과 "서버 종료"를 구분하지 못하므로 즉시
+        // 구분되는 "연결 끊김"을 표시한다(#730). 네이티브 auto-reconnect는 그대로
+        // 진행되며 onopen/onmessage가 성공 즉시 이 상태를 해제한다. watchdog은
+        // 여전히 2차 fallback으로 남는다(최종 폴백 UI 전환).
+        showConnLost();
+      };
+    })();
+  <\/script>`;
+}
+/**
+* Attach 페이지 HTML — precompiled chrome에 per-request 동적 값을 채워 완성한다.
+*
+* 동적 파트:
+*   - __QR_DATA_URL__       : base64 data URL (QR 이미지)
+*   - __SAFE_LABEL__        : HTML-escaped deploymentId label (intoss family에만 존재)
+*   - __SAFE_ATTACH_URL__   : HTML-escaped attach URL (TOTP at= 코드 포함 — 의도된 전달)
+*   - __MODE_LABEL__        : 환경 배지 (`<p class="mode-label">…</p>` 또는 빈 문자열, #468)
+*   - __INSPECTOR_SECTION__ : "디버그 툴 열기" 버튼 또는 대기 힌트 (#544)
+*
+* mode-aware 분기 (#468): mode가 `relay-mobile`이면 sandbox family chrome(launcher
+* PWA 절차), 그 외는 intoss family chrome(토스 앱 절차)을 선택한다.
+* relay-live (env 4) 제거 (#665) — positive-allowlist kill-switch.
+*
+* SSE 스크립트도 주입 — `#attach-section` hook이 있으면 `/events` push 때 QR이
+* `/qr.png?u=<fresh attachUrl>`로 자동 갱신된다. `#inspector-link`도 SSE push로
+* pages.length > 0 게이트에 따라 활성/비활성 전환된다 (#544).
+*
+* SECRET-HANDLING: TOTP at= 코드는 attachUrl 캡슐 안에서만 노출 — 의도된 transport.
+* inspectorStableUrl은 /inspector 안정 URL (127.0.0.1, 시크릿 없음) — 노출 가능.
+*/
+function buildAttachHtml(qrDataUrl, safeLabel, safeAttachUrl, locale, path = "/attach", params = new URLSearchParams(), mode, pagesAttached = false, inspectorStableUrl = null, sseRefreshIntervalMs = 9e4) {
+	const s = resolveLocaleStrings(locale);
+	const langSwitcher = buildLangSwitcher(path, params, locale, s);
+	const family = attachFamilyForMode(mode);
+	let inspectorSection;
+	if (pagesAttached && inspectorStableUrl) inspectorSection = `<a class="inspector-link" id="inspector-link" href="${escapeHtml(inspectorStableUrl)}" target="_blank" rel="noopener noreferrer">${escapeHtml(s("dashboard.inspector.open"))}</a>`;
+	else inspectorSection = `<span class="inspector-hint" id="inspector-link">${escapeHtml(s("dashboard.inspector.waiting"))}</span>`;
+	const filled = attachChromeByLocale[locale][family].replaceAll("__LANG_SWITCHER__", langSwitcher).replaceAll("__MODE_LABEL__", buildModeLabel(mode, s)).replaceAll("__QR_DATA_URL__", qrDataUrl).replaceAll("__SAFE_LABEL__", safeLabel).replaceAll("__SAFE_ATTACH_URL__", safeAttachUrl).replaceAll("__INSPECTOR_SECTION__", inspectorSection);
+	const watchdogTimeoutMs = sseRefreshIntervalMs < 5e3 ? sseRefreshIntervalMs * 3 : sseRefreshIntervalMs * 2 + 3e4;
+	const sseScript = buildSseScript({
+		tunnelUp: JSON.stringify(s("dashboard.tunnel.up")),
+		tunnelDown: JSON.stringify(s("dashboard.tunnel.down")),
+		pagesEmpty: JSON.stringify(s("dashboard.pages.empty")),
+		attachHint: JSON.stringify(s("dashboard.attach.hint")),
+		attachTunnelDown: JSON.stringify(s("dashboard.attach.tunnelDown")),
+		copyLabel: JSON.stringify(s("dashboard.url.copy")),
+		copiedLabel: JSON.stringify(s("dashboard.url.copied")),
+		inspectorOpenLabel: JSON.stringify(s("dashboard.inspector.open")),
+		inspectorWaitingLabel: JSON.stringify(s("dashboard.inspector.waiting")),
+		dashboardSurface: false,
+		watchdogTimeoutMs,
+		watchdogTitle: JSON.stringify(s("dashboard.watchdog.title")),
+		watchdogBody: JSON.stringify(s("dashboard.watchdog.body")),
+		watchdogCloseLabel: JSON.stringify(s("dashboard.watchdog.close")),
+		connectionLost: JSON.stringify(s("dashboard.conn.lost")),
+		completeTitle: JSON.stringify(s("dashboard.session.completeTitle")),
+		completeBody: JSON.stringify(s("dashboard.session.completeBody")),
+		shutdownTitle: JSON.stringify(s("dashboard.session.shutdownTitle")),
+		shutdownBody: JSON.stringify(s("dashboard.session.shutdownBody"))
+	});
+	return filled.replace("</body>", `${sseScript}\n</body>`);
+}
+/**
+* base 포트부터 EADDRINUSE 시 +1씩 증가하며 bind를 시도한다. EADDRINUSE가
+* 아닌 에러는 즉시 reject한다(스캔 대상 아님). `range`번 모두 점유 상태면
+* ephemeral(포트 0)로 폴백하고 한국어 안내를 stderr에 1회 출력한다.
+*
+* 매 시도마다 이전에 등록한 `error` 리스너를 제거한다 — 성공 시 listener가
+* 누적돼 다음 실패에서 중복 reject/EventEmitter 경고가 나는 것을 방지한다.
+*
+* `basePort === 0`이면 스캔 없이 즉시 ephemeral bind (명시적 opt-out, 기존
+* 순수 랜덤 포트 동작 유지).
+*/
+async function bindWithIncrement(server, basePort, range = 20) {
+	if (basePort === 0) return new Promise((resolve, reject) => {
+		const onError = (err) => reject(err);
+		server.once("error", onError);
+		server.listen(0, "127.0.0.1", () => {
+			server.removeListener("error", onError);
+			resolve();
+		});
+	});
+	for (let attempt = 0; attempt < range; attempt++) {
+		const candidatePort = basePort + attempt;
+		try {
+			await new Promise((resolve, reject) => {
+				const onError = (err) => {
+					server.removeListener("error", onError);
+					reject(err);
+				};
+				server.once("error", onError);
+				server.listen(candidatePort, "127.0.0.1", () => {
+					server.removeListener("error", onError);
+					resolve();
+				});
+			});
+			return;
+		} catch (err) {
+			if (err.code !== "EADDRINUSE") throw err;
+		}
+	}
+	process.stderr.write(`devtools: 대시보드 포트 ${basePort}~${basePort + range - 1}이 모두 사용 중이라 임의 포트로 대체합니다.\n`);
+	return new Promise((resolve, reject) => {
+		const onError = (err) => reject(err);
+		server.once("error", onError);
+		server.listen(0, "127.0.0.1", () => {
+			server.removeListener("error", onError);
+			resolve();
+		});
+	});
+}
+/**
+* 로컬 HTTP 서버를 127.0.0.1에 고정 base 포트({@link DEFAULT_DASHBOARD_PORT},
+* `AIT_DEBUG_HTTP_PORT` env, 또는 `options.dashboardPort`)에서 시작한다.
+* base 포트가 점유(EADDRINUSE) 상태면 +1씩 증가하며 재시도하고(최대
+* {@link PORT_SCAN_RANGE}회), 전부 점유면 ephemeral 포트로 폴백한다 —
+* rerun 시 대시보드 URL이 안정적으로 유지되어 브라우저 탭/북마크가
+* run마다 무효화되지 않는다 (devtools#752). base 포트를 명시적으로 `0`으로
+* 주면(env 또는 옵션) 기존 순수 ephemeral 동작을 유지한다.
+*
+* MCP debug server 생애주기에 묶어 사용 — `runDebugServer` shutdown 시 `close()`로 정리.
+*
+* @param getDashboardState - dashboard 상태를 반환하는 클로저. 주입 시 `GET /` dashboard와
+*   `GET /events` SSE 스트림이 활성화된다. 미주입 시 두 라우트는 204/서비스 없음으로 응답.
+* @param options - 서버 옵션. `sseRefreshIntervalMs`로 idle 탭 TOTP 만료 방지 주기를 조정.
+*   `getDirectInspectorUrl`로 /inspector 라우트에서 직접 조립 URL을 제공해 redirect 루프를 방지.
+*   `dashboardPort`로 bind base 포트를 override.
+*/
+async function startQrHttpServer(getDashboardState, options) {
+	const { default: QRCode } = await import("qrcode");
+	/** SSE 활성 연결 목록 — `notifyStateChange()` 시 전체 push. */
+	const sseClients = [];
+	const refreshIntervalMs = options?.sseRefreshIntervalMs ?? 9e4;
+	/** SSE 연결 하나에 상태 이벤트를 flush한다. */
+	function pushStateToClient(res, state) {
+		const payload = JSON.stringify({
+			tunnel: {
+				up: state.tunnel.up,
+				wssUrl: state.tunnel.wssUrl
+			},
+			pages: state.pages,
+			attachUrl: state.attachUrl,
+			inspectorUrl: state.inspectorUrl ?? null,
+			phase: state.phase ?? "active",
+			manualPrompt: state.manualPrompt ?? null
+		});
+		res.write(`data: ${payload}\n\n`);
+	}
+	const server = createServer(async (req, res) => {
+		const [path, query = ""] = (req.url ?? "/").split("?", 2);
+		const params = new URLSearchParams(query ?? "");
+		const langParam = params.get("lang");
+		const locale = langParam === "ko" || langParam === "en" ? langParam : parseAcceptLanguage(req.headers["accept-language"]);
+		if (path === "/") {
+			if (!getDashboardState) {
+				res.writeHead(204, { "Content-Type": "text/plain; charset=utf-8" });
+				res.end();
+				return;
+			}
+			const state = getDashboardState();
+			let qrDataUrl = null;
+			if (state.attachUrl) try {
+				qrDataUrl = await QRCode.toDataURL(state.attachUrl, {
+					type: "image/png",
+					errorCorrectionLevel: "M"
+				});
+			} catch {}
+			const devtoolsEntryUrl = (() => {
+				if (!options?.getDirectInspectorUrl) return null;
+				const addr = server.address();
+				if (!addr || typeof addr === "string") return null;
+				return `http://127.0.0.1:${addr.port}/devtools/`;
+			})();
+			const html = buildDashboardHtml(state, qrDataUrl, locale, path, params, devtoolsEntryUrl, refreshIntervalMs);
+			res.writeHead(200, {
+				"Content-Type": "text/html; charset=utf-8",
+				"Cache-Control": "no-store"
+			});
+			res.end(html);
+			return;
+		}
+		if (path === "/events") {
+			if (!getDashboardState) {
+				res.writeHead(204, { "Content-Type": "text/plain; charset=utf-8" });
+				res.end();
+				return;
+			}
+			res.writeHead(200, {
+				"Content-Type": "text/event-stream",
+				"Cache-Control": "no-cache",
+				Connection: "keep-alive",
+				"X-Accel-Buffering": "no"
+			});
+			pushStateToClient(res, getDashboardState());
+			sseClients.push(res);
+			req.once("close", () => {
+				const idx = sseClients.indexOf(res);
+				if (idx !== -1) sseClients.splice(idx, 1);
+			});
+			return;
+		}
+		if (path === "/attach") {
+			const encodedU = params.get("u") ?? "";
+			let attachUrl;
+			try {
+				attachUrl = decodeURIComponent(encodedU);
+			} catch {
+				res.writeHead(400, { "Content-Type": "text/plain; charset=utf-8" });
+				res.end("잘못된 u 파라미터입니다.");
+				return;
+			}
+			let deploymentIdLabel = "attach";
+			try {
+				const dpMatch = attachUrl.match(/[?&]_deploymentId=([^&]+)/);
+				if (dpMatch?.[1]) deploymentIdLabel = decodeURIComponent(dpMatch[1]).slice(0, 36);
+			} catch {}
+			const currentState = getDashboardState?.();
+			const mode = currentState?.mode;
+			const pagesAttached = Array.isArray(currentState?.pages) && (currentState?.pages.length ?? 0) > 0;
+			const inspectorStableUrlForAttach = (() => {
+				if (!options?.getDirectInspectorUrl) return null;
+				const addr = server.address();
+				if (!addr || typeof addr === "string") return null;
+				return `http://127.0.0.1:${addr.port}/inspector`;
+			})();
+			QRCode.toDataURL(attachUrl, {
+				type: "image/png",
+				errorCorrectionLevel: "M"
+			}).then((dataUrl) => {
+				const html = buildAttachHtml(dataUrl, escapeHtml(deploymentIdLabel), escapeHtml(attachUrl), locale, path, params, mode, pagesAttached, inspectorStableUrlForAttach, refreshIntervalMs);
+				res.writeHead(200, {
+					"Content-Type": "text/html; charset=utf-8",
+					"Cache-Control": "no-store"
+				});
+				res.end(html);
+			}).catch(() => {
+				res.writeHead(500, { "Content-Type": "text/plain; charset=utf-8" });
+				res.end("QR 생성에 실패했습니다.");
+			});
+			return;
+		}
+		if (path === "/inspector" || path === "/devtools" || path === "/devtools/") {
+			const getDirectInspectorUrl = options?.getDirectInspectorUrl;
+			if (!getDirectInspectorUrl) {
+				const body = path === "/inspector" ? "Inspector endpoint is not available in this server mode." : "relay 연결 세션에서만 DevTools UI를 열 수 있습니다.";
+				res.writeHead(503, { "Content-Type": "text/plain; charset=utf-8" });
+				res.end(body);
+				return;
+			}
+			const result = getDirectInspectorUrl();
+			const s = resolveLocaleStrings(locale);
+			if (!result.ok) {
+				const body = `<!DOCTYPE html><html lang="${locale}"><head><meta charset="utf-8"><title>Inspector</title></head><body><p>${escapeHtml(s(result.reason === "noTarget" ? "inspector.error.noTarget" : "inspector.error.relayDown"))}</p><p style="font-size:0.9em;color:#666">` + (locale === "ko" ? "(<a href=\"/\">대시보드로 돌아가기</a>)" : "(<a href=\"/\">Back to dashboard</a>)") + `</p></body></html>`;
+				res.writeHead(502, {
+					"Content-Type": "text/html; charset=utf-8",
+					"Cache-Control": "no-store"
+				});
+				res.end(body);
+				return;
+			}
+			res.writeHead(302, {
+				Location: result.url,
+				"Cache-Control": "no-store"
+			});
+			res.end();
+			return;
+		}
+		if (path === "/qr.png") {
+			const encodedU = params.get("u") ?? "";
+			if (encodedU === "") {
+				res.writeHead(204, { "Cache-Control": "no-store" });
+				res.end();
+				return;
+			}
+			let attachUrl;
+			try {
+				attachUrl = decodeURIComponent(encodedU);
+			} catch {
+				res.writeHead(400, { "Content-Type": "text/plain; charset=utf-8" });
+				res.end("잘못된 u 파라미터입니다.");
+				return;
+			}
+			if (attachUrl === "") {
+				res.writeHead(204, { "Cache-Control": "no-store" });
+				res.end();
+				return;
+			}
+			QRCode.toBuffer(attachUrl, {
+				type: "png",
+				errorCorrectionLevel: "M"
+			}).then((buf) => {
+				res.writeHead(200, {
+					"Content-Type": "image/png",
+					"Cache-Control": "no-store",
+					"Content-Length": String(buf.length)
+				});
+				res.end(buf);
+			}).catch(() => {
+				res.writeHead(500, { "Content-Type": "text/plain; charset=utf-8" });
+				res.end("QR PNG 생성에 실패했습니다.");
+			});
+			return;
+		}
+		res.writeHead(404, { "Content-Type": "text/plain; charset=utf-8" });
+		res.end("Not Found");
+	});
+	await bindWithIncrement(server, options?.dashboardPort ?? (process.env.AIT_DEBUG_HTTP_PORT !== void 0 ? Number(process.env.AIT_DEBUG_HTTP_PORT) : 8317), options?.portScanRange);
+	const address = server.address();
+	if (!address || typeof address === "string") throw new Error("qr-http-server: server.address()가 예상하지 못한 형태입니다.");
+	const port = address.port;
+	/** idle 탭 TOTP 만료 방지용 주기 SSE 갱신 interval. */
+	function notifyStateChangeInternal() {
+		if (!getDashboardState) return;
+		const state = getDashboardState();
+		for (const client of sseClients) try {
+			pushStateToClient(client, state);
+		} catch {}
+	}
+	const refreshHandle = setInterval(() => {
+		if (sseClients.length > 0 && getDashboardState) notifyStateChangeInternal();
+	}, refreshIntervalMs).unref();
+	return {
+		port,
+		buildAttachPageUrl(_attachUrl) {
+			return `http://127.0.0.1:${port}/`;
+		},
+		get inspectorStableUrl() {
+			return `http://127.0.0.1:${port}/inspector`;
+		},
+		notifyStateChange() {
+			notifyStateChangeInternal();
+		},
+		close() {
+			clearInterval(refreshHandle);
+			server.closeAllConnections();
+			return new Promise((resolve, reject) => {
+				server.close((err) => err ? reject(err) : resolve());
+			});
+		}
+	};
+}
+//#endregion
+export { startQrHttpServer };
+
+//# sourceMappingURL=qr-http-server-D4rGz8M7.js.map