@ait-co/devtools 0.1.58 → 0.1.60

package/dist/qr-http-server-Byk0Yjk_.cjs

@@ -0,0 +1,901 @@
+let node_http = require("node:http");
+//#region src/i18n/en.ts
+const en = {
+	"panel.title": "AIT DevTools",
+	"panel.toggle.title": "AIT DevTools",
+	"panel.close": "Close",
+	"panel.editMode.on": "EDIT",
+	"panel.editMode.off": "READ-ONLY",
+	"panel.editMode.toggleTitle": "Toggle panel edit mode",
+	"panel.tabError": "Error rendering \"{tab}\" tab.",
+	"panel.tab.env": "Environment",
+	"panel.tab.presets": "Presets",
+	"panel.tab.viewport": "Viewport",
+	"panel.tab.permissions": "Permissions",
+	"panel.tab.notifications": "Notifications",
+	"panel.tab.location": "Location",
+	"panel.tab.device": "Device",
+	"panel.tab.iap": "IAP",
+	"panel.tab.ads": "Ads",
+	"panel.tab.events": "Events",
+	"panel.tab.analytics": "Analytics",
+	"panel.tab.storage": "Storage",
+	"common.readOnly": "Read-only — mock responses are controlled at build time.",
+	"toast.consent.title": "Send anonymous usage stats?",
+	"toast.consent.body": "We collect anonymous events only, to improve the tool. You can turn this off anytime in the Environment tab.",
+	"toast.consent.learnMore": "Learn more",
+	"toast.consent.accept": "Yes, send",
+	"toast.consent.deny": "No, thanks",
+	"env.section.platform": "Platform",
+	"env.row.os": "OS",
+	"env.row.appVersion": "App Version",
+	"env.row.environment": "Environment",
+	"env.row.locale": "Locale",
+	"env.section.network": "Network",
+	"env.row.networkStatus": "Status",
+	"env.section.safeArea": "Safe Area Insets",
+	"env.row.safeArea.top": "Top",
+	"env.row.safeArea.bottom": "Bottom",
+	"env.section.navigation": "Navigation",
+	"env.row.iosSwipeGesture": "iOS swipe-back",
+	"env.value.iosSwipeGesture.unset": "not called",
+	"env.value.iosSwipeGesture.enabled": "enabled",
+	"env.value.iosSwipeGesture.disabled": "disabled",
+	"env.hint.iosSwipeGesture": "Last value passed to setIosSwipeGestureEnabled. Switching Environment to toss lets a toss-gated guard toggle this.",
+	"env.telemetry.section": "Telemetry",
+	"env.telemetry.t0Row": "Anonymous usage signal (Tier 0)",
+	"env.telemetry.t0On": "On",
+	"env.telemetry.t0Off": "Off",
+	"env.telemetry.t0TurnOn": "Turn on",
+	"env.telemetry.t0TurnOff": "Turn off",
+	"env.telemetry.t0Desc": "Version + date only, no PII. Once per day. Helps improve the package.",
+	"env.telemetry.row": "Extended telemetry (Tier 1)",
+	"env.telemetry.on": "On",
+	"env.telemetry.off": "Off",
+	"env.telemetry.turnOn": "Turn on",
+	"env.telemetry.turnOff": "Turn off",
+	"env.telemetry.anonIdLabel": "anon_id: {value}",
+	"env.telemetry.anonIdNotSet": "(not yet set)",
+	"env.telemetry.anonIdCopyTitle": "Click to copy full anon_id",
+	"env.telemetry.deleteBtn": "Delete my data",
+	"env.telemetry.deleting": "Deleting…",
+	"env.telemetry.deleted": "Deleted",
+	"env.telemetry.deleteFailedRetry": "Delete failed (please retry)",
+	"env.telemetry.deleteFailed": "Delete failed",
+	"env.telemetry.privacyLink": "Privacy policy →",
+	"env.section.language": "Language",
+	"env.language.row": "Language",
+	"env.language.ko": "한국어",
+	"env.language.en": "English",
+	"permissions.section.device": "Device Permissions",
+	"location.section.current": "Current Location",
+	"location.row.latitude": "Latitude",
+	"location.row.longitude": "Longitude",
+	"location.row.accuracy": "Accuracy",
+	"device.section.modes": "Device API Modes",
+	"device.row.camera": "Camera",
+	"device.row.photos": "Photos",
+	"device.row.location": "Location",
+	"device.row.network": "Network",
+	"device.row.clipboard": "Clipboard",
+	"device.section.mockImages": "Mock Images ({count})",
+	"device.btn.add": "+ Add",
+	"device.btn.useDefaults": "Use defaults",
+	"device.btn.clear": "Clear",
+	"device.prompt.camera.title": "Camera Prompt — Select an image",
+	"device.prompt.photos.title": "Photos Prompt — Select images",
+	"device.prompt.location.title": "Location Prompt — Enter coordinates",
+	"device.prompt.locationUpdate.title": "Location Update — Send coordinates",
+	"device.prompt.fallbackTitle": "Prompt: {type}",
+	"device.prompt.label.lat": "Lat",
+	"device.prompt.label.lng": "Lng",
+	"device.prompt.send": "Send",
+	"device.prompt.cancel": "Cancel",
+	"device.section.haptic": "Haptic",
+	"device.haptic.lastCall": "Last haptic",
+	"device.haptic.noneYet": "(none yet)",
+	"device.haptic.trigger": "Trigger haptic",
+	"viewport.section.device": "Device",
+	"viewport.row.preset": "Preset",
+	"viewport.row.orientation": "Orientation",
+	"viewport.row.notchSide": "Notch side",
+	"viewport.section.custom": "Custom size",
+	"viewport.row.width": "Width (px)",
+	"viewport.row.height": "Height (px)",
+	"viewport.section.appearance": "Appearance",
+	"viewport.row.showFrame": "Show frame",
+	"viewport.row.showAitNavBar": "Show Apps in Toss nav bar",
+	"viewport.row.navBarType": "Nav bar type",
+	"viewport.status.noConstraint": "No viewport constraint — body fills the window.",
+	"viewport.status.cssPhysical": "CSS / physical",
+	"viewport.status.safeArea": "Safe area",
+	"viewport.status.aitNavBar": "AIT nav bar",
+	"viewport.status.aitNavBarValue": "{height}px → SafeArea top · {type}",
+	"viewport.orientation.autoSuffix": "{orient} (auto)",
+	"iap.section.simulator": "IAP Simulator",
+	"iap.row.nextResult": "Next Purchase Result",
+	"iap.section.tossPay": "TossPay",
+	"iap.row.tossPayResult": "Next Payment Result",
+	"iap.section.pending": "Pending Orders ({count})",
+	"iap.empty.pending": "(no pending orders)",
+	"iap.section.completed": "Completed Orders ({count})",
+	"iap.empty.completed": "(no completed orders)",
+	"iap.btn.complete": "Complete",
+	"iap.label.pending": "PENDING",
+	"events.section.navigation": "Navigation Events",
+	"events.btn.triggerBack": "Trigger Back Event",
+	"events.btn.triggerHome": "Trigger Home Event",
+	"events.section.login": "Login",
+	"events.row.loggedIn": "Logged In",
+	"events.row.tossLoginIntegrated": "Toss Login Integrated",
+	"analytics.section.log": "Analytics Log ({count})",
+	"analytics.btn.clear": "Clear",
+	"analytics.calls.section": "SDK Calls ({count})",
+	"analytics.calls.btn.clear": "Clear",
+	"analytics.calls.empty": "(no SDK calls yet)",
+	"storage.section.title": "Storage ({count} items)",
+	"storage.btn.clearAll": "Clear All",
+	"storage.empty": "No items in storage",
+	"presets.section.builtIn": "Built-in scenarios",
+	"presets.section.saved": "Saved presets ({count})",
+	"presets.section.save": "Save",
+	"presets.save.description": "Capture network / permissions / auth / IAP / ads / payment slices.",
+	"presets.btn.saveCurrent": "Save current as preset",
+	"presets.btn.apply": "Apply",
+	"presets.btn.reApply": "Re-apply",
+	"presets.btn.delete": "Delete",
+	"presets.empty.saved": "No saved presets yet.",
+	"presets.empty.builtIn": "No built-in presets.",
+	"presets.prompt.label": "Preset label?",
+	"presets.confirm.delete": "Delete preset \"{label}\"?",
+	"ads.section.state": "Ads State",
+	"ads.row.isLoaded": "isLoaded",
+	"ads.row.forceNoFill": "Force \"no fill\"",
+	"ads.empty.events": "No events yet",
+	"ads.section.googleAdMob": "GoogleAdMob",
+	"ads.section.tossAds": "TossAds",
+	"ads.section.fullScreenAd": "FullScreenAd",
+	"ads.btn.load": "Load",
+	"ads.btn.show": "Show",
+	"ads.section.tossAdsBanner": "TossAds Banner",
+	"ads.row.rewardUnitType": "Reward unit type",
+	"ads.row.rewardAmount": "Reward amount",
+	"ads.btn.render": "Render",
+	"ads.btn.noFill": "No-fill",
+	"ads.btn.click": "Click",
+	"ads.btn.destroy": "Destroy",
+	"notifications.section.title": "requestNotificationAgreement",
+	"notifications.option.newAgreement": "newAgreement (first-time agree)",
+	"notifications.option.alreadyAgreed": "alreadyAgreed (already opted-in)",
+	"notifications.option.agreementRejected": "agreementRejected (user declined)",
+	"dashboard.title": "AIT Debug Dashboard",
+	"dashboard.updated": "Last updated: {ts}",
+	"dashboard.tunnel.section": "Tunnel status",
+	"dashboard.tunnel.up": "Connected",
+	"dashboard.tunnel.down": "Disconnected",
+	"dashboard.attach.section": "Attach QR",
+	"dashboard.attach.hint": "Call the build_attach_url MCP tool to show the QR here.",
+	"dashboard.pages.section": "Connected Pages",
+	"dashboard.pages.empty": "No attached pages",
+	"attach.title": "AIT Debug Session — QR Scan",
+	"attach.deployment": "deployment: {label}",
+	"attach.steps.section": "How to scan",
+	"attach.step1": "Open the Toss app.",
+	"attach.step2": "Scan the QR code with your phone camera app.",
+	"attach.step3": "Tap <strong>\"Open in Toss\"</strong> when the popup appears.",
+	"attach.step4": "The mini-app opens and the debug session attaches automatically.",
+	"attach.faq.section": "Troubleshooting checklist",
+	"attach.faq.appNotOpen": "<strong>Toss app does not open</strong> — check app version; scan with the system camera app (not the Toss in-app QR reader)",
+	"attach.faq.prepare": "<strong>Mini-app stuck in PREPARE state</strong> — verify the deep-link has a <code>_deploymentId</code> parameter",
+	"attach.faq.chii": "<strong>Chii injection failure / console is empty</strong> — verify the mini-app bundle has an <code>in-app</code> debug import",
+	"attach.faq.totp": "<strong>TOTP gate Layer C is inactive</strong> — check that <code>AIT_DEBUG_TOTP_SECRET</code> is set on the relay server",
+	"attach.url.section": "URL (fallback)",
+	"launcher.title": "AITC DevTools Launcher",
+	"launcher.description": "Scan the terminal QR code or paste the tunnel URL.",
+	"launcher.installCta": "Install launcher to your phone",
+	"launcher.urlPlaceholder": "https://example.trycloudflare.com",
+	"launcher.openBtn": "Open",
+	"launcher.scanBtn": "Scan QR with camera",
+	"launcher.rescanBtn": "Rescan",
+	"launcher.noCamera": "No camera available — paste the URL instead.",
+	"launcher.cameraError": "Could not access the camera — paste the URL instead.",
+	"launcher.invalidUrlHttps": "Enter a valid https:// URL (the tunnel URL from your terminal).",
+	"launcher.invalidUrl": "Enter a valid http(s):// URL."
+};
+//#endregion
+//#region src/i18n/index.ts
+/**
+* Vanilla TS i18n for the floating DevTools panel.
+*
+* Public surface:
+*   - `t(key, vars?)` — look up a UI string, with `{name}` placeholder
+*     interpolation. Falls back to the key itself if a translation is missing.
+*   - `getLocale()` / `setLocale(locale)` — read/persist the active locale.
+*     `setLocale` dispatches `__ait:localechange` so the panel can remount.
+*   - `detectLocale()` — first-run heuristic from `navigator.language`.
+*
+* `ko` is the source of truth (keys are typed from it). `en` is also a full
+* `Record<StringKey, string>` (devtools is developer-facing, en is a real
+* audience). The `Partial` lookup table preserves the runtime `?? key` safety
+* net even though we ship complete catalogs today.
+*/
+const tables = {
+	ko: {
+		"panel.title": "AIT DevTools",
+		"panel.toggle.title": "AIT DevTools",
+		"panel.close": "Close",
+		"panel.editMode.on": "EDIT",
+		"panel.editMode.off": "READ-ONLY",
+		"panel.editMode.toggleTitle": "패널 편집 모드 전환",
+		"panel.tabError": "\"{tab}\" 탭 렌더링 중 오류가 발생했습니다.",
+		"panel.tab.env": "Environment",
+		"panel.tab.presets": "Presets",
+		"panel.tab.viewport": "Viewport",
+		"panel.tab.permissions": "Permissions",
+		"panel.tab.notifications": "Notifications",
+		"panel.tab.location": "Location",
+		"panel.tab.device": "Device",
+		"panel.tab.iap": "IAP",
+		"panel.tab.ads": "Ads",
+		"panel.tab.events": "Events",
+		"panel.tab.analytics": "Analytics",
+		"panel.tab.storage": "Storage",
+		"common.readOnly": "읽기 전용 — mock 응답은 빌드 타임에 고정됩니다.",
+		"toast.consent.title": "익명 사용 통계를 보낼까요?",
+		"toast.consent.body": "도구 개선을 위해 익명 이벤트만 수집해요. 언제든 환경 탭에서 끌 수 있어요.",
+		"toast.consent.learnMore": "더 알아보기",
+		"toast.consent.accept": "네, 보낼게요",
+		"toast.consent.deny": "아니요",
+		"env.section.platform": "Platform",
+		"env.row.os": "OS",
+		"env.row.appVersion": "App Version",
+		"env.row.environment": "Environment",
+		"env.row.locale": "Locale",
+		"env.section.network": "Network",
+		"env.row.networkStatus": "Status",
+		"env.section.safeArea": "Safe Area Insets",
+		"env.row.safeArea.top": "Top",
+		"env.row.safeArea.bottom": "Bottom",
+		"env.section.navigation": "Navigation",
+		"env.row.iosSwipeGesture": "iOS swipe-back",
+		"env.value.iosSwipeGesture.unset": "미호출",
+		"env.value.iosSwipeGesture.enabled": "enabled",
+		"env.value.iosSwipeGesture.disabled": "disabled",
+		"env.hint.iosSwipeGesture": "setIosSwipeGestureEnabled의 마지막 호출값. Environment를 toss로 바꾸면 toss-gated 가드가 이 값을 토글합니다.",
+		"env.telemetry.section": "Telemetry",
+		"env.telemetry.t0Row": "익명 사용 신호 (Tier 0)",
+		"env.telemetry.t0On": "On",
+		"env.telemetry.t0Off": "Off",
+		"env.telemetry.t0TurnOn": "Turn on",
+		"env.telemetry.t0TurnOff": "Turn off",
+		"env.telemetry.t0Desc": "버전·날짜만 수집, PII 없음. 하루 1회. 패키지 개선에 사용됩니다.",
+		"env.telemetry.row": "확장 텔레메트리 (Tier 1)",
+		"env.telemetry.on": "On",
+		"env.telemetry.off": "Off",
+		"env.telemetry.turnOn": "Turn on",
+		"env.telemetry.turnOff": "Turn off",
+		"env.telemetry.anonIdLabel": "anon_id: {value}",
+		"env.telemetry.anonIdNotSet": "(not yet set)",
+		"env.telemetry.anonIdCopyTitle": "전체 anon_id 복사",
+		"env.telemetry.deleteBtn": "내 데이터 삭제",
+		"env.telemetry.deleting": "삭제 중…",
+		"env.telemetry.deleted": "삭제 완료",
+		"env.telemetry.deleteFailedRetry": "삭제 실패 (다시 시도해주세요)",
+		"env.telemetry.deleteFailed": "삭제 실패",
+		"env.telemetry.privacyLink": "개인정보 처리방침 →",
+		"env.section.language": "Language",
+		"env.language.row": "Language",
+		"env.language.ko": "한국어",
+		"env.language.en": "English",
+		"permissions.section.device": "Device Permissions",
+		"location.section.current": "Current Location",
+		"location.row.latitude": "Latitude",
+		"location.row.longitude": "Longitude",
+		"location.row.accuracy": "Accuracy",
+		"device.section.modes": "Device API Modes",
+		"device.row.camera": "Camera",
+		"device.row.photos": "Photos",
+		"device.row.location": "Location",
+		"device.row.network": "Network",
+		"device.row.clipboard": "Clipboard",
+		"device.section.mockImages": "Mock Images ({count})",
+		"device.btn.add": "+ Add",
+		"device.btn.useDefaults": "Use defaults",
+		"device.btn.clear": "Clear",
+		"device.prompt.camera.title": "Camera Prompt — 이미지를 선택하세요",
+		"device.prompt.photos.title": "Photos Prompt — 이미지를 선택하세요",
+		"device.prompt.location.title": "Location Prompt — 좌표 입력",
+		"device.prompt.locationUpdate.title": "Location Update — 좌표 전송",
+		"device.prompt.fallbackTitle": "Prompt: {type}",
+		"device.prompt.label.lat": "Lat",
+		"device.prompt.label.lng": "Lng",
+		"device.prompt.send": "Send",
+		"device.prompt.cancel": "Cancel",
+		"device.section.haptic": "Haptic",
+		"device.haptic.lastCall": "마지막 haptic",
+		"device.haptic.noneYet": "(아직 없음)",
+		"device.haptic.trigger": "Haptic 트리거",
+		"viewport.section.device": "Device",
+		"viewport.row.preset": "Preset",
+		"viewport.row.orientation": "Orientation",
+		"viewport.row.notchSide": "Notch side",
+		"viewport.section.custom": "Custom size",
+		"viewport.row.width": "Width (px)",
+		"viewport.row.height": "Height (px)",
+		"viewport.section.appearance": "Appearance",
+		"viewport.row.showFrame": "Show frame",
+		"viewport.row.showAitNavBar": "Apps in Toss 내비게이션 바 표시",
+		"viewport.row.navBarType": "Nav bar type",
+		"viewport.status.noConstraint": "뷰포트 제약 없음 — body가 창을 가득 채웁니다.",
+		"viewport.status.cssPhysical": "CSS / physical",
+		"viewport.status.safeArea": "Safe area",
+		"viewport.status.aitNavBar": "AIT nav bar",
+		"viewport.status.aitNavBarValue": "{height}px → SafeArea top · {type}",
+		"viewport.orientation.autoSuffix": "{orient} (auto)",
+		"iap.section.simulator": "IAP Simulator",
+		"iap.row.nextResult": "Next Purchase Result",
+		"iap.section.tossPay": "TossPay",
+		"iap.row.tossPayResult": "Next Payment Result",
+		"iap.section.pending": "Pending Orders ({count})",
+		"iap.empty.pending": "(대기 중인 주문 없음)",
+		"iap.section.completed": "Completed Orders ({count})",
+		"iap.empty.completed": "(완료된 주문 없음)",
+		"iap.btn.complete": "Complete",
+		"iap.label.pending": "PENDING",
+		"events.section.navigation": "Navigation Events",
+		"events.btn.triggerBack": "Back 이벤트 발생",
+		"events.btn.triggerHome": "Home 이벤트 발생",
+		"events.section.login": "Login",
+		"events.row.loggedIn": "Logged In",
+		"events.row.tossLoginIntegrated": "Toss Login Integrated",
+		"analytics.section.log": "Analytics Log ({count})",
+		"analytics.btn.clear": "Clear",
+		"analytics.calls.section": "SDK Calls ({count})",
+		"analytics.calls.btn.clear": "Clear",
+		"analytics.calls.empty": "(아직 SDK 호출 없음)",
+		"storage.section.title": "Storage ({count} items)",
+		"storage.btn.clearAll": "Clear All",
+		"storage.empty": "저장된 항목이 없습니다",
+		"presets.section.builtIn": "Built-in scenarios",
+		"presets.section.saved": "Saved presets ({count})",
+		"presets.section.save": "Save",
+		"presets.save.description": "network / permissions / auth / IAP / ads / payment 슬라이스를 캡처합니다.",
+		"presets.btn.saveCurrent": "현재 상태를 프리셋으로 저장",
+		"presets.btn.apply": "Apply",
+		"presets.btn.reApply": "Re-apply",
+		"presets.btn.delete": "Delete",
+		"presets.empty.saved": "저장된 프리셋이 아직 없습니다.",
+		"presets.empty.builtIn": "내장 프리셋이 없습니다.",
+		"presets.prompt.label": "프리셋 라벨을 입력하세요",
+		"presets.confirm.delete": "\"{label}\" 프리셋을 삭제할까요?",
+		"ads.section.state": "Ads State",
+		"ads.row.isLoaded": "isLoaded",
+		"ads.row.forceNoFill": "강제 \"no fill\"",
+		"ads.empty.events": "아직 이벤트가 없습니다",
+		"ads.section.googleAdMob": "GoogleAdMob",
+		"ads.section.tossAds": "TossAds",
+		"ads.section.fullScreenAd": "FullScreenAd",
+		"ads.btn.load": "Load",
+		"ads.btn.show": "Show",
+		"ads.section.tossAdsBanner": "TossAds 배너",
+		"ads.row.rewardUnitType": "리워드 단위 타입",
+		"ads.row.rewardAmount": "리워드 수량",
+		"ads.btn.render": "Render",
+		"ads.btn.noFill": "No-fill",
+		"ads.btn.click": "Click",
+		"ads.btn.destroy": "Destroy",
+		"notifications.section.title": "requestNotificationAgreement",
+		"notifications.option.newAgreement": "newAgreement (최초 동의)",
+		"notifications.option.alreadyAgreed": "alreadyAgreed (이미 동의됨)",
+		"notifications.option.agreementRejected": "agreementRejected (사용자 거절)",
+		"dashboard.title": "AIT 디버그 Dashboard",
+		"dashboard.updated": "마지막 갱신: {ts}",
+		"dashboard.tunnel.section": "터널 상태",
+		"dashboard.tunnel.up": "연결됨",
+		"dashboard.tunnel.down": "끊어짐",
+		"dashboard.attach.section": "Attach QR",
+		"dashboard.attach.hint": "build_attach_url MCP tool을 호출하면 QR이 여기에 표시됩니다.",
+		"dashboard.pages.section": "연결된 Pages",
+		"dashboard.pages.empty": "attach된 페이지 없음",
+		"attach.title": "AIT 디버그 세션 — QR 스캔",
+		"attach.deployment": "deployment: {label}",
+		"attach.steps.section": "스캔 절차",
+		"attach.step1": "토스 앱을 실행하세요.",
+		"attach.step2": "폰 카메라 앱으로 QR 코드를 스캔하세요.",
+		"attach.step3": "팝업이 뜨면 <strong>\"토스로 열기\"</strong>를 탭하세요.",
+		"attach.step4": "미니앱이 열리고 디버그 세션이 자동으로 attach됩니다.",
+		"attach.faq.section": "진단 체크리스트",
+		"attach.faq.appNotOpen": "<strong>토스 앱이 안 열리는 경우</strong> — 앱 버전 확인, 카메라 앱으로 스캔 (토스 앱 내 QR 리더 X)",
+		"attach.faq.prepare": "<strong>미니앱이 PREPARE 상태에서 멈추는 경우</strong> — deep-link에 <code>_deploymentId</code> 파라미터가 있는지 확인",
+		"attach.faq.chii": "<strong>Chii 주입 실패 / 콘솔이 비어 있는 경우</strong> — 미니앱 번들에 <code>in-app</code> debug import가 있는지 확인",
+		"attach.faq.totp": "<strong>TOTP gate Layer C가 비활성인 경우</strong> — relay 서버에 <code>AIT_DEBUG_TOTP_SECRET</code>이 설정돼 있는지 확인",
+		"attach.url.section": "URL (fallback)",
+		"launcher.title": "AITC DevTools Launcher",
+		"launcher.description": "터미널 QR을 스캔하거나 URL을 입력하세요.",
+		"launcher.installCta": "폰에 런처 설치하기",
+		"launcher.urlPlaceholder": "https://example.trycloudflare.com",
+		"launcher.openBtn": "Open",
+		"launcher.scanBtn": "QR 카메라로 스캔",
+		"launcher.rescanBtn": "Rescan",
+		"launcher.noCamera": "카메라를 사용할 수 없습니다 — URL을 직접 붙여넣으세요.",
+		"launcher.cameraError": "카메라에 접근할 수 없습니다 — URL을 직접 붙여넣으세요.",
+		"launcher.invalidUrlHttps": "올바른 https:// URL을 입력하세요 (터미널의 터널 URL).",
+		"launcher.invalidUrl": "올바른 http(s):// URL을 입력하세요."
+	},
+	en
+};
+/**
+* Decide a locale from a BCP-47 language tag. `ko` (and `ko-*`) → `'ko'`,
+* everything else → `'en'`. Shared by the browser (`navigator.language`) and
+* Node (`Accept-Language` header) paths so both resolve identically.
+*/
+function localeFromLanguageTag(lang) {
+	return /^ko\b/i.test(lang) ? "ko" : "en";
+}
+/**
+* Decide a locale from an HTTP `Accept-Language` header value. The Node-served
+* surfaces (e.g. the qr-http-server dashboard) have no `navigator`, so the
+* request header is the only language signal. Reads the FIRST language tag
+* (highest priority, ignoring `q=` weights — good enough for ko/en) and feeds
+* it through the same `ko`-vs-`en` heuristic `detectLocale` uses. Returns `'en'`
+* for an empty/missing header.
+*/
+function parseAcceptLanguage(header) {
+	if (!header) return "en";
+	return localeFromLanguageTag(header.split(",")[0]?.trim().split(";")[0]?.trim() ?? "");
+}
+/**
+* A locale-bound string resolver for surfaces that can't use the in-memory
+* `getLocale()` cache — notably the Node HTTP server, which resolves locale
+* per-request from `Accept-Language` rather than from a process-global. Returns
+* a `t`-compatible closure over the SAME `ko`/`en` tables (single source of
+* truth), so the dashboard/attach HTML shares the exact 169-key catalog the
+* browser surfaces use. The `key: StringKey` signature keeps compile-time key
+* safety on the Node path identical to `t()`.
+*/
+function resolveLocaleStrings(locale) {
+	const table = tables[locale];
+	return (key, vars) => {
+		const raw = table[key] ?? key;
+		if (!vars) return raw;
+		return raw.replace(/\{(\w+)\}/g, (match, name) => {
+			const value = vars[name];
+			return value === void 0 ? match : String(value);
+		});
+	};
+}
+//#endregion
+//#region src/mcp/dashboard.generated.ts
+const dashboardChromeHtmlKo = `<!DOCTYPE html>
+<html lang="ko"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><title>AIT 디버그 Dashboard</title><style>
+*, *::before, *::after { box-sizing: border-box; }
+body {
+  font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+  background: #0d1117; color: #c9d1d9;
+  display: flex; flex-direction: column; align-items: center;
+  min-height: 100vh; margin: 0; padding: 2rem 1rem;
+  gap: 1.5rem;
+}
+h1 { font-size: 1.25rem; font-weight: 600; color: #e6edf3; margin: 0; text-align: center; }
+.updated { font-size: 0.75rem; opacity: 0.4; font-family: monospace; margin: 0; }
+section { width: 100%; max-width: 520px; }
+h2 { font-size: 1rem; font-weight: 600; color: #e6edf3; margin: 0 0 0.5rem; }
+.status { display: inline-block; padding: 0.25rem 0.75rem; border-radius: 999px; font-size: 0.8rem; font-weight: 600; }
+.status-up { background: #238636; color: #fff; }
+.status-down { background: #6e7681; color: #fff; }
+img.qr {
+  width: min(80vw, 300px); height: auto;
+  image-rendering: pixelated;
+  background: #fff; padding: 0.75rem; border-radius: 10px;
+  display: block; margin: 0.5rem auto;
+}
+.url-box {
+  font-family: monospace; font-size: 0.7rem;
+  word-break: break-all; opacity: 0.45;
+  background: #161b22; padding: 0.6rem 0.85rem;
+  border-radius: 6px; border: 1px solid #30363d; margin: 0.5rem 0 0;
+}
+.hint { font-size: 0.85rem; opacity: 0.5; margin: 0.25rem 0 0; }
+ul { margin: 0; padding-left: 1.25rem; }
+li { margin-bottom: 0.35rem; font-size: 0.85rem; line-height: 1.5; }
+li.empty { opacity: 0.4; list-style: none; padding-left: 0; }
+.page-id { font-family: monospace; font-size: 0.75rem; opacity: 0.5; margin-right: 0.4rem; }
+.page-url { word-break: break-all; }
+hr { border: none; border-top: 1px solid #21262d; width: 100%; margin: 0; }
+</style></head><body><h1>AIT 디버그 Dashboard</h1><p class="updated" id="updated">마지막 갱신: __NOW__</p><section><h2>터널 상태</h2><span class="status __TUNNEL_CLASS__" id="tunnel-status">__TUNNEL_STATUS__</span></section><hr/><section><h2>Attach QR</h2><div id="attach-section">__ATTACH_SECTION__</div></section>__PAGES_SECTION__</body></html>`;
+const attachChromeHtmlKo = `<!DOCTYPE html>
+<html lang="ko"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="preload" as="image" href="__QR_DATA_URL__"/><title>AIT 디버그 세션 — QR 스캔</title><style>
+*, *::before, *::after { box-sizing: border-box; }
+body {
+  font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+  background: #0d1117; color: #c9d1d9;
+  display: flex; flex-direction: column; align-items: center;
+  min-height: 100vh; margin: 0; padding: 2rem 1rem;
+  gap: 1.5rem;
+}
+h1 { font-size: 1.25rem; font-weight: 600; color: #e6edf3; margin: 0; text-align: center; }
+.label { font-size: 0.8rem; opacity: 0.5; font-family: monospace; margin: 0; }
+img.qr {
+  width: min(90vw, 360px); height: auto;
+  image-rendering: pixelated;
+  background: #fff; padding: 1rem; border-radius: 12px;
+}
+section { width: 100%; max-width: 480px; }
+h2 { font-size: 1rem; font-weight: 600; color: #e6edf3; margin: 0 0 0.5rem; }
+ol, ul { margin: 0; padding-left: 1.25rem; }
+li { margin-bottom: 0.4rem; font-size: 0.9rem; line-height: 1.5; }
+.url-box {
+  font-family: monospace; font-size: 0.72rem;
+  word-break: break-all; opacity: 0.4;
+  background: #161b22; padding: 0.75rem 1rem;
+  border-radius: 6px; border: 1px solid #30363d;
+}
+hr { border: none; border-top: 1px solid #21262d; width: 100%; margin: 0.5rem 0; }
+</style></head><body><h1>AIT 디버그 세션 — QR 스캔</h1><p class="label">deployment: __SAFE_LABEL__</p><img class="qr" src="__QR_DATA_URL__" alt="attach QR"/><section><h2>스캔 절차</h2><ol><li>토스 앱을 실행하세요.</li><li>폰 카메라 앱으로 QR 코드를 스캔하세요.</li><li>팝업이 뜨면 <strong>"토스로 열기"</strong>를 탭하세요.</li><li>미니앱이 열리고 디버그 세션이 자동으로 attach됩니다.</li></ol></section><hr/><section><h2>진단 체크리스트</h2><ul><li><strong>토스 앱이 안 열리는 경우</strong> — 앱 버전 확인, 카메라 앱으로 스캔 (토스 앱 내 QR 리더 X)</li><li><strong>미니앱이 PREPARE 상태에서 멈추는 경우</strong> — deep-link에 <code>_deploymentId</code> 파라미터가 있는지 확인</li><li><strong>Chii 주입 실패 / 콘솔이 비어 있는 경우</strong> — 미니앱 번들에 <code>in-app</code> debug import가 있는지 확인</li><li><strong>TOTP gate Layer C가 비활성인 경우</strong> — relay 서버에 <code>AIT_DEBUG_TOTP_SECRET</code>이 설정돼 있는지 확인</li></ul></section><hr/><section><h2>URL (fallback)</h2><p class="url-box">__SAFE_ATTACH_URL__</p></section></body></html>`;
+const dashboardChromeHtmlEn = `<!DOCTYPE html>
+<html lang="en"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><title>AIT Debug Dashboard</title><style>
+*, *::before, *::after { box-sizing: border-box; }
+body {
+  font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+  background: #0d1117; color: #c9d1d9;
+  display: flex; flex-direction: column; align-items: center;
+  min-height: 100vh; margin: 0; padding: 2rem 1rem;
+  gap: 1.5rem;
+}
+h1 { font-size: 1.25rem; font-weight: 600; color: #e6edf3; margin: 0; text-align: center; }
+.updated { font-size: 0.75rem; opacity: 0.4; font-family: monospace; margin: 0; }
+section { width: 100%; max-width: 520px; }
+h2 { font-size: 1rem; font-weight: 600; color: #e6edf3; margin: 0 0 0.5rem; }
+.status { display: inline-block; padding: 0.25rem 0.75rem; border-radius: 999px; font-size: 0.8rem; font-weight: 600; }
+.status-up { background: #238636; color: #fff; }
+.status-down { background: #6e7681; color: #fff; }
+img.qr {
+  width: min(80vw, 300px); height: auto;
+  image-rendering: pixelated;
+  background: #fff; padding: 0.75rem; border-radius: 10px;
+  display: block; margin: 0.5rem auto;
+}
+.url-box {
+  font-family: monospace; font-size: 0.7rem;
+  word-break: break-all; opacity: 0.45;
+  background: #161b22; padding: 0.6rem 0.85rem;
+  border-radius: 6px; border: 1px solid #30363d; margin: 0.5rem 0 0;
+}
+.hint { font-size: 0.85rem; opacity: 0.5; margin: 0.25rem 0 0; }
+ul { margin: 0; padding-left: 1.25rem; }
+li { margin-bottom: 0.35rem; font-size: 0.85rem; line-height: 1.5; }
+li.empty { opacity: 0.4; list-style: none; padding-left: 0; }
+.page-id { font-family: monospace; font-size: 0.75rem; opacity: 0.5; margin-right: 0.4rem; }
+.page-url { word-break: break-all; }
+hr { border: none; border-top: 1px solid #21262d; width: 100%; margin: 0; }
+</style></head><body><h1>AIT Debug Dashboard</h1><p class="updated" id="updated">Last updated: __NOW__</p><section><h2>Tunnel status</h2><span class="status __TUNNEL_CLASS__" id="tunnel-status">__TUNNEL_STATUS__</span></section><hr/><section><h2>Attach QR</h2><div id="attach-section">__ATTACH_SECTION__</div></section>__PAGES_SECTION__</body></html>`;
+const attachChromeHtmlEn = `<!DOCTYPE html>
+<html lang="en"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="preload" as="image" href="__QR_DATA_URL__"/><title>AIT Debug Session — QR Scan</title><style>
+*, *::before, *::after { box-sizing: border-box; }
+body {
+  font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+  background: #0d1117; color: #c9d1d9;
+  display: flex; flex-direction: column; align-items: center;
+  min-height: 100vh; margin: 0; padding: 2rem 1rem;
+  gap: 1.5rem;
+}
+h1 { font-size: 1.25rem; font-weight: 600; color: #e6edf3; margin: 0; text-align: center; }
+.label { font-size: 0.8rem; opacity: 0.5; font-family: monospace; margin: 0; }
+img.qr {
+  width: min(90vw, 360px); height: auto;
+  image-rendering: pixelated;
+  background: #fff; padding: 1rem; border-radius: 12px;
+}
+section { width: 100%; max-width: 480px; }
+h2 { font-size: 1rem; font-weight: 600; color: #e6edf3; margin: 0 0 0.5rem; }
+ol, ul { margin: 0; padding-left: 1.25rem; }
+li { margin-bottom: 0.4rem; font-size: 0.9rem; line-height: 1.5; }
+.url-box {
+  font-family: monospace; font-size: 0.72rem;
+  word-break: break-all; opacity: 0.4;
+  background: #161b22; padding: 0.75rem 1rem;
+  border-radius: 6px; border: 1px solid #30363d;
+}
+hr { border: none; border-top: 1px solid #21262d; width: 100%; margin: 0.5rem 0; }
+</style></head><body><h1>AIT Debug Session — QR Scan</h1><p class="label">deployment: __SAFE_LABEL__</p><img class="qr" src="__QR_DATA_URL__" alt="attach QR"/><section><h2>How to scan</h2><ol><li>Open the Toss app.</li><li>Scan the QR code with your phone camera app.</li><li>Tap <strong>"Open in Toss"</strong> when the popup appears.</li><li>The mini-app opens and the debug session attaches automatically.</li></ol></section><hr/><section><h2>Troubleshooting checklist</h2><ul><li><strong>Toss app does not open</strong> — check app version; scan with the system camera app (not the Toss in-app QR reader)</li><li><strong>Mini-app stuck in PREPARE state</strong> — verify the deep-link has a <code>_deploymentId</code> parameter</li><li><strong>Chii injection failure / console is empty</strong> — verify the mini-app bundle has an <code>in-app</code> debug import</li><li><strong>TOTP gate Layer C is inactive</strong> — check that <code>AIT_DEBUG_TOTP_SECRET</code> is set on the relay server</li></ul></section><hr/><section><h2>URL (fallback)</h2><p class="url-box">__SAFE_ATTACH_URL__</p></section></body></html>`;
+/** Map from Locale to the precompiled dashboard chrome string. */
+const dashboardChromeByLocale = {
+	ko: dashboardChromeHtmlKo,
+	en: dashboardChromeHtmlEn
+};
+/** Map from Locale to the precompiled attach page chrome string. */
+const attachChromeByLocale = {
+	ko: attachChromeHtmlKo,
+	en: attachChromeHtmlEn
+};
+//#endregion
+//#region src/mcp/qr-http-server.ts
+/** HTML 특수문자를 이스케이프한다. */
+function escapeHtml(s) {
+	return s.replace(/[<>&"']/g, (c) => `&#${c.charCodeAt(0)};`);
+}
+/**
+* Dashboard HTML — precompiled chrome에 per-request 동적 값을 채워 완성한다.
+*
+* 토큰 채우기 순서:
+*   1. chrome string(locale별 precompile)을 가져온다.
+*   2. 동적 부분을 단순 replaceAll로 채운다 (토큰이 HTML context 밖에 있으므로 안전).
+*   3. inline SSE <script>를 </body> 직전에 주입한다.
+*
+* 동적 파트 분류:
+*   - "token-fill": 단일 값 교체 (__NOW__, __TUNNEL_CLASS__, __TUNNEL_STATUS__,
+*     __ATTACH_SECTION__)
+*   - "runtime builder": 가변 길이 구조 (__PAGES_SECTION__ — 조건부 렌더 + 가변 rows)
+*   - "suffix": inline SSE <script> (빌드 파이프라인 없는 클라이언트 스크립트, locale
+*     aware 문자열 포함)
+*
+* SECRET-HANDLING:
+*   - attachUrl은 url-box 안에서만 노출 (TOTP at= 코드 캡슐 그대로).
+*   - tunnel wssUrl은 "터널 연결됨" 상태 표시에서 UP/DOWN만 노출.
+*     wssUrl 값 자체는 dashboard HTML에 넣지 않는다.
+*/
+function buildDashboardHtml(state, qrDataUrl, locale) {
+	const s = resolveLocaleStrings(locale);
+	const now = (/* @__PURE__ */ new Date()).toISOString();
+	const tunnelStatus = state.tunnel.up ? s("dashboard.tunnel.up") : s("dashboard.tunnel.down");
+	const tunnelClass = state.tunnel.up ? "status-up" : "status-down";
+	let attachSection;
+	if (qrDataUrl && state.attachUrl) attachSection = `<img class="qr" src="${qrDataUrl}" alt="attach QR" /><p class="url-box">${escapeHtml(state.attachUrl)}</p>`;
+	else attachSection = `<p class="hint">${escapeHtml(s("dashboard.attach.hint"))}</p>`;
+	const pagesSection = state.pages === null ? "" : `<hr /><section id="pages-section"><h2>${escapeHtml(s("dashboard.pages.section"))}</h2><ul id="pages-list">${state.pages.length > 0 ? state.pages.map((p) => {
+		return `<li><span class="page-id">${escapeHtml(p.id)}</span> <span class="page-url">${escapeHtml(p.url.slice(0, 120))}</span></li>`;
+	}).join("\n") : `<li class="empty">${escapeHtml(s("dashboard.pages.empty"))}</li>`}</ul></section>`;
+	const sseStrings = {
+		tunnelUp: JSON.stringify(s("dashboard.tunnel.up")),
+		tunnelDown: JSON.stringify(s("dashboard.tunnel.down")),
+		pagesEmpty: JSON.stringify(s("dashboard.pages.empty")),
+		attachHint: JSON.stringify(s("dashboard.attach.hint"))
+	};
+	const filled = dashboardChromeByLocale[locale].replaceAll("__NOW__", escapeHtml(now)).replaceAll("__TUNNEL_CLASS__", tunnelClass).replaceAll("__TUNNEL_STATUS__", escapeHtml(tunnelStatus)).replaceAll("__ATTACH_SECTION__", attachSection).replaceAll("__PAGES_SECTION__", pagesSection);
+	const sseScript = buildSseScript(sseStrings);
+	return filled.replace("</body>", `${sseScript}\n</body>`);
+}
+/**
+* Inline SSE client <script> — injected into the dashboard HTML at runtime.
+*
+* Subscribes to /events and updates the DOM without a build pipeline.
+* client side: attachUrl은 DOM에 렌더링, wssUrl은 절대 렌더링하지 않는다.
+* pages === null 이면 섹션을 건드리지 않는다 (#411).
+*
+* 문자열 인자는 빌드타임에 ko/en 테이블에서 가져와 JSON.stringify로 이미 escape됨.
+*/
+function buildSseScript(strings) {
+	return `<script>
+    // SSE — /events 구독해 상태 자동 갱신. 빌드 파이프라인 없는 인라인 스크립트.
+    (function () {
+      var TUNNEL_UP = ${strings.tunnelUp};
+      var TUNNEL_DOWN = ${strings.tunnelDown};
+      var PAGES_EMPTY = ${strings.pagesEmpty};
+      var ATTACH_HINT = ${strings.attachHint};
+      var src = new EventSource('/events');
+      src.onmessage = function (e) {
+        try {
+          var s = JSON.parse(e.data);
+          // 터널 상태 갱신
+          var el = document.getElementById('tunnel-status');
+          if (el) {
+            el.textContent = s.tunnel && s.tunnel.up ? TUNNEL_UP : TUNNEL_DOWN;
+            el.className = 'status ' + (s.tunnel && s.tunnel.up ? 'status-up' : 'status-down');
+          }
+          // page 목록 갱신 — pages === null(env 2)이면 섹션 자체를 숨긴 채 둔다.
+          // 정적 렌더가 #pages-section을 아예 안 그렸으므로 여기서도 손대지 않아
+          // SSE push 때 섹션이 되살아나지 않는다(#411). 배열일 때만 목록을 채운다.
+          if (s.pages !== null && s.pages !== undefined) {
+            var ul = document.getElementById('pages-list');
+            if (ul) {
+              if (s.pages.length === 0) {
+                ul.innerHTML = '<li class="empty">' + PAGES_EMPTY + '</li>';
+              } else {
+                ul.innerHTML = s.pages.map(function (p) {
+                  var sid = String(p.id || '').slice(0, 36).replace(/[<>&"']/g, function (c) { return '&#' + c.charCodeAt(0) + ';'; });
+                  var su = String(p.url || '').slice(0, 120).replace(/[<>&"']/g, function (c) { return '&#' + c.charCodeAt(0) + ';'; });
+                  return '<li><span class="page-id">' + sid + '</span> <span class="page-url">' + su + '</span></li>';
+                }).join('');
+              }
+            }
+          }
+          // attachUrl QR 갱신 — attachUrl이 없으면 hint 표시.
+          var sec = document.getElementById('attach-section');
+          if (sec) {
+            if (s.attachUrl) {
+              // QR은 서버에서 새로 렌더한 /qr.png?u= 로 img src 교체.
+              // TOTP at= 코드는 attachUrl 안에 캡슐화 — 별도 노출 없음.
+              // wssUrl은 절대 DOM에 렌더하지 않는다 (SECRET-HANDLING).
+              var encoded = encodeURIComponent(s.attachUrl);
+              var safeUrl = String(s.attachUrl).slice(0, 2000).replace(/[<>&"']/g, function (c) { return '&#' + c.charCodeAt(0) + ';'; });
+              sec.innerHTML =
+                '<img class="qr" src="/qr.png?u=' + encoded + '" alt="attach QR" />' +
+                '<p class="url-box">' + safeUrl + '</p>';
+            } else {
+              sec.innerHTML = '<p class="hint">' + ATTACH_HINT + '</p>';
+            }
+          }
+          // 갱신 시각
+          var upd = document.getElementById('updated');
+          if (upd) upd.textContent = upd.textContent.replace(/[^ ]+$/, new Date().toISOString());
+        } catch (_) { /* 파싱 오류 무시 */ }
+      };
+      src.onerror = function () {
+        // 재연결은 EventSource가 자동 처리 (spec 기본 동작).
+      };
+    })();
+  <\/script>`;
+}
+/**
+* Attach 페이지 HTML — precompiled chrome에 per-request 동적 값을 채워 완성한다.
+*
+* 동적 파트:
+*   - __QR_DATA_URL__     : base64 data URL (QR 이미지)
+*   - __SAFE_LABEL__      : HTML-escaped deploymentId label
+*   - __SAFE_ATTACH_URL__ : HTML-escaped attach URL (TOTP at= 코드 포함 — 의도된 전달)
+*
+* SECRET-HANDLING: TOTP at= 코드는 attachUrl 캡슐 안에서만 노출 — 의도된 transport.
+*/
+function buildAttachHtml(qrDataUrl, safeLabel, safeAttachUrl, locale) {
+	return attachChromeByLocale[locale].replaceAll("__QR_DATA_URL__", qrDataUrl).replaceAll("__SAFE_LABEL__", safeLabel).replaceAll("__SAFE_ATTACH_URL__", safeAttachUrl);
+}
+/**
+* 로컬 HTTP 서버를 127.0.0.1 random port(또는 `AIT_DEBUG_HTTP_PORT` env)로 시작한다.
+* MCP debug server 생애주기에 묶어 사용 — `runDebugServer` shutdown 시 `close()`로 정리.
+*
+* @param getDashboardState - dashboard 상태를 반환하는 클로저. 주입 시 `GET /` dashboard와
+*   `GET /events` SSE 스트림이 활성화된다. 미주입 시 두 라우트는 204/서비스 없음으로 응답.
+*/
+async function startQrHttpServer(getDashboardState) {
+	const { default: QRCode } = await import("qrcode");
+	/** SSE 활성 연결 목록 — `notifyStateChange()` 시 전체 push. */
+	const sseClients = [];
+	/** SSE 연결 하나에 상태 이벤트를 flush한다. */
+	function pushStateToClient(res, state) {
+		const payload = JSON.stringify({
+			tunnel: {
+				up: state.tunnel.up,
+				wssUrl: state.tunnel.wssUrl
+			},
+			pages: state.pages,
+			attachUrl: state.attachUrl
+		});
+		res.write(`data: ${payload}\n\n`);
+	}
+	const server = (0, node_http.createServer)(async (req, res) => {
+		const [path, query = ""] = (req.url ?? "/").split("?", 2);
+		const params = new URLSearchParams(query ?? "");
+		const locale = parseAcceptLanguage(req.headers["accept-language"]);
+		if (path === "/") {
+			if (!getDashboardState) {
+				res.writeHead(204, { "Content-Type": "text/plain; charset=utf-8" });
+				res.end();
+				return;
+			}
+			const state = getDashboardState();
+			let qrDataUrl = null;
+			if (state.attachUrl) try {
+				qrDataUrl = await QRCode.toDataURL(state.attachUrl, {
+					type: "image/png",
+					errorCorrectionLevel: "M"
+				});
+			} catch {}
+			const html = buildDashboardHtml(state, qrDataUrl, locale);
+			res.writeHead(200, {
+				"Content-Type": "text/html; charset=utf-8",
+				"Cache-Control": "no-store"
+			});
+			res.end(html);
+			return;
+		}
+		if (path === "/events") {
+			if (!getDashboardState) {
+				res.writeHead(204, { "Content-Type": "text/plain; charset=utf-8" });
+				res.end();
+				return;
+			}
+			res.writeHead(200, {
+				"Content-Type": "text/event-stream",
+				"Cache-Control": "no-cache",
+				Connection: "keep-alive",
+				"X-Accel-Buffering": "no"
+			});
+			pushStateToClient(res, getDashboardState());
+			sseClients.push(res);
+			req.once("close", () => {
+				const idx = sseClients.indexOf(res);
+				if (idx !== -1) sseClients.splice(idx, 1);
+			});
+			return;
+		}
+		if (path === "/attach") {
+			const encodedU = params.get("u") ?? "";
+			let attachUrl;
+			try {
+				attachUrl = decodeURIComponent(encodedU);
+			} catch {
+				res.writeHead(400, { "Content-Type": "text/plain; charset=utf-8" });
+				res.end("잘못된 u 파라미터입니다.");
+				return;
+			}
+			let deploymentIdLabel = "attach";
+			try {
+				const dpMatch = attachUrl.match(/[?&]_deploymentId=([^&]+)/);
+				if (dpMatch?.[1]) deploymentIdLabel = decodeURIComponent(dpMatch[1]).slice(0, 36);
+			} catch {}
+			QRCode.toDataURL(attachUrl, {
+				type: "image/png",
+				errorCorrectionLevel: "M"
+			}).then((dataUrl) => {
+				const html = buildAttachHtml(dataUrl, escapeHtml(deploymentIdLabel), escapeHtml(attachUrl), locale);
+				res.writeHead(200, {
+					"Content-Type": "text/html; charset=utf-8",
+					"Cache-Control": "no-store"
+				});
+				res.end(html);
+			}).catch(() => {
+				res.writeHead(500, { "Content-Type": "text/plain; charset=utf-8" });
+				res.end("QR 생성에 실패했습니다.");
+			});
+			return;
+		}
+		if (path === "/qr.png") {
+			const encodedU = params.get("u") ?? "";
+			let attachUrl;
+			try {
+				attachUrl = decodeURIComponent(encodedU);
+			} catch {
+				res.writeHead(400, { "Content-Type": "text/plain; charset=utf-8" });
+				res.end("잘못된 u 파라미터입니다.");
+				return;
+			}
+			QRCode.toBuffer(attachUrl, {
+				type: "png",
+				errorCorrectionLevel: "M"
+			}).then((buf) => {
+				res.writeHead(200, {
+					"Content-Type": "image/png",
+					"Cache-Control": "no-store",
+					"Content-Length": String(buf.length)
+				});
+				res.end(buf);
+			}).catch(() => {
+				res.writeHead(500, { "Content-Type": "text/plain; charset=utf-8" });
+				res.end("QR PNG 생성에 실패했습니다.");
+			});
+			return;
+		}
+		res.writeHead(404, { "Content-Type": "text/plain; charset=utf-8" });
+		res.end("Not Found");
+	});
+	const listenPort = Number(process.env.AIT_DEBUG_HTTP_PORT ?? 0);
+	await new Promise((resolve, reject) => {
+		server.listen(listenPort, "127.0.0.1", () => resolve());
+		server.once("error", reject);
+	});
+	const address = server.address();
+	if (!address || typeof address === "string") throw new Error("qr-http-server: server.address()가 예상하지 못한 형태입니다.");
+	const port = address.port;
+	return {
+		port,
+		buildAttachPageUrl(attachUrl) {
+			return `http://127.0.0.1:${port}/attach?u=${encodeURIComponent(attachUrl)}`;
+		},
+		notifyStateChange() {
+			if (!getDashboardState) return;
+			const state = getDashboardState();
+			for (const client of sseClients) try {
+				pushStateToClient(client, state);
+			} catch {}
+		},
+		close() {
+			return new Promise((resolve, reject) => {
+				server.close((err) => err ? reject(err) : resolve());
+			});
+		}
+	};
+}
+//#endregion
+exports.startQrHttpServer = startQrHttpServer;
+
+//# sourceMappingURL=qr-http-server-Byk0Yjk_.cjs.map