@bigstrider/transcodes-cli 0.8.0 → 0.10.0

package/dist/index.js

@@ -3,7 +3,7 @@
 // ../packages/core/dist/stepup/client.js
 var REQUEST_TIMEOUT_MS = 3e4;
 async function request(config, input) {
-  const path2 = input.path.startsWith("/") ? input.path : `/${input.path}`;
+  const path6 = input.path.startsWith("/") ? input.path : `/${input.path}`;
   const params = new URLSearchParams();
   if (input.query) {
     for (const [k, v] of Object.entries(input.query)) {
@@ -13,14 +13,11 @@ async function request(config, input) {
     }
   }
   const qs = params.toString();
-  const url = `${config.apiBaseV1}${path2}${qs ? `?${qs}` : ""}`;
+  const url = `${config.apiBaseV1}${path6}${qs ? `?${qs}` : ""}`;
   const headers = {
     "x-transcodes-token": config.token,
     Accept: "application/json"
   };
-  if (input.stepUpSid) {
-    headers["X-Step-Up-Session-Id"] = input.stepUpSid;
-  }
   let body;
   const sendsBody = input.method !== "GET" && !input.omitBody;
   if (sendsBody) {
@@ -63,6 +60,13 @@ async function request(config, input) {
   }
 }
 
+// ../packages/core/dist/contract/messages.js
+var TRANSCODES_GUARD_REPO_URL = "https://github.com/transcodings/transcodes-guard";
+var CLI_INSTALL_SH_URL = "https://raw.githubusercontent.com/transcodings/transcodes-guard/prod/cli/install.sh";
+var CLI_INSTALL_PS1_URL = "https://raw.githubusercontent.com/transcodings/transcodes-guard/prod/cli/install.ps1";
+var CLI_INSTALL_HINT_UNIX = `curl -fsSL ${CLI_INSTALL_SH_URL} | bash && transcodes install`;
+var CLI_INSTALL_HINT_WIN = `irm ${CLI_INSTALL_PS1_URL} | iex; transcodes install`;
+
 // ../packages/core/dist/stepup/jwt.js
 var REQUIRED_AUDIENCE = "transcodes-mcp";
 function isPlainObject(v) {
@@ -83,8 +87,8 @@ function readString(rec, key) {
   const v = rec[key];
   if (typeof v !== "string")
     return void 0;
-  const t = v.trim();
-  return t || void 0;
+  const t2 = v.trim();
+  return t2 || void 0;
 }
 function readNumericDate(rec, key) {
   const v = rec[key];
@@ -94,8 +98,8 @@ function readNumericDate(rec, key) {
 function readAudience(rec) {
   const aud = rec.aud;
   if (typeof aud === "string") {
-    const t = aud.trim();
-    return t ? [t] : void 0;
+    const t2 = aud.trim();
+    return t2 ? [t2] : void 0;
   }
   if (Array.isArray(aud)) {
     const list = aud.filter((x) => typeof x === "string").map((x) => x.trim()).filter((x) => x.length > 0);
@@ -274,12 +278,12 @@ function writeTokenToFile(token, label) {
     throw new Error("token is empty");
   }
   const nextLabel = normalizeLabel(label);
-  const current = readConfig();
-  const existing = current.tokenList.find((r) => r.token === trimmed);
+  const current2 = readConfig();
+  const existing = current2.tokenList.find((r) => r.token === trimmed);
   if (!existing && !nextLabel) {
     throw new Error("label is required");
   }
-  const tokenList = existing ? current.tokenList.map((r) => r.token === trimmed ? { token: trimmed, label: nextLabel ?? r.label } : r) : [...current.tokenList, { token: trimmed, label: nextLabel }];
+  const tokenList = existing ? current2.tokenList.map((r) => r.token === trimmed ? { token: trimmed, label: nextLabel ?? r.label } : r) : [...current2.tokenList, { token: trimmed, label: nextLabel }];
   writeConfig({ token: trimmed, tokenList });
 }
 function setActiveToken(token) {
@@ -291,22 +295,22 @@ function setTokenLabel(token, label) {
   if (!nextLabel) {
     throw new Error("label is required");
   }
-  const current = readConfig();
-  if (!current.tokenList.some((r) => r.token === trimmed)) {
+  const current2 = readConfig();
+  if (!current2.tokenList.some((r) => r.token === trimmed)) {
     throw new Error("token not found");
   }
-  const tokenList = current.tokenList.map((r) => r.token === trimmed ? { token: r.token, label: nextLabel } : r);
-  writeConfig({ token: current.token, tokenList });
+  const tokenList = current2.tokenList.map((r) => r.token === trimmed ? { token: r.token, label: nextLabel } : r);
+  writeConfig({ token: current2.token, tokenList });
 }
 function removeTokenFromFile(token) {
   const trimmed = token.trim();
-  const current = readConfig();
-  const tokenList = current.tokenList.filter((r) => r.token !== trimmed);
+  const current2 = readConfig();
+  const tokenList = current2.tokenList.filter((r) => r.token !== trimmed);
   if (tokenList.length === 0) {
     clearTokenFile();
     return;
   }
-  const active = current.token && tokenList.some((r) => r.token === current.token) ? current.token : tokenList[0].token;
+  const active = current2.token && tokenList.some((r) => r.token === current2.token) ? current2.token : tokenList[0].token;
   writeConfig({ token: active, tokenList });
 }
 function clearTokenFile() {
@@ -336,7 +340,7 @@ function loadStepupConfig() {
   }
   const { token: tokenRaw } = resolveToken();
   if (!tokenRaw) {
-    throw new Error("No Transcodes token found. Install the CLI (`npm install -g @bigstrider/transcodes-cli`), run `transcodes` to open the dashboard, and paste a token from the Transcodes console (member detail page, https://app.transcodes.io). Non-interactive: `transcodes set <token> -l <label>`.");
+    throw new Error(`No Transcodes token found. Install the CLI (macOS/Linux: \`${CLI_INSTALL_HINT_UNIX}\`; Windows: \`${CLI_INSTALL_HINT_WIN}\`), then run \`transcodes login\` to sign in and choose an organization. Manual fallback: \`transcodes set <token> -l <label>\`.`);
   }
   const parsed = parseMemberAccessToken(tokenRaw);
   for (const w of parsed.warnings) {
@@ -493,11 +497,41 @@ async function openConsoleSession(options) {
   };
 }
 
+// ../packages/core/dist/paths/index.js
+import { copyFileSync, existsSync, mkdirSync as mkdirSync2, renameSync } from "fs";
+import os2 from "os";
+import path2 from "path";
+function transcodesDir() {
+  return path2.join(os2.homedir(), ".transcodes");
+}
+function stateDir() {
+  return path2.join(transcodesDir(), "state");
+}
+function dataDir() {
+  return stateDir();
+}
+
 // src/commands.ts
 var CLI_COMMAND_SPECS = [
+  {
+    usage: "transcodes install",
+    description: "Guided setup: pick host plugins to install, sign in, then open the dashboard (--all / <platforms>)"
+  },
+  {
+    usage: "transcodes update",
+    description: "Update installed host plugins in place and bump this CLI from npm (--cli-only / --plugins-only / --all)"
+  },
   {
     usage: "transcodes",
-    description: "Open the local dashboard (URL printed in terminal; default port 3847; --port N / --no-open)"
+    description: "Open the local dashboard in the background (reuses a running server; default port 3847; --port N / --no-open)"
+  },
+  {
+    usage: "transcodes stop",
+    description: "Stop the background local dashboard daemon"
+  },
+  {
+    usage: "transcodes login",
+    description: "Sign in with Google in your browser, choose an organization, and save the issued member token (-l <label> / --no-open)"
   },
   {
     usage: "transcodes set <token> -l <label>",
@@ -556,15 +590,27 @@ function renderCliCommandsHtml() {
   ).join("\n        ");
 }
 
+// src/dashboard-lifecycle.ts
+import { execFile as execFile2, spawn as spawn3 } from "child_process";
+import {
+  closeSync,
+  mkdirSync as mkdirSync3,
+  openSync,
+  readFileSync as readFileSync2,
+  unlinkSync,
+  writeFileSync as writeFileSync2
+} from "fs";
+import http from "http";
+import path4 from "path";
+import { promisify as promisify2 } from "util";
+
 // src/dashboard.ts
-import { spawn as spawn2 } from "child_process";
+import { execFile, spawn as spawn2 } from "child_process";
 import { createHash } from "crypto";
 import {
   createServer
 } from "http";
-
-// ../packages/core/dist/contract/messages.js
-var TRANSCODES_GUARD_REPO_URL = "https://github.com/transcodings/transcodes-guard";
+import { promisify } from "util";
 
 // src/logo.ts
 var LOGO_DATA_URI = "data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAgAAAAIACAYAAAD0eNT6AAAQAElEQVR4AezdTXrbxrYFUH53Pu7ZE0ovGVDcy4SSngf0XnZk2JJMkQSBAqrqrPtdWOIPquqsAxNbIK387//8jwABAgQIECgn8L+L/xEgQIAAAQLFBC4XAaBcyxVMgAABAgQEAMcAAQIECBAoJ5CCXQGIgo0AAQIECBQTEACKNVy5BAgQIFBd4KV+AeDFwZ8ECBAgQKCUgABQqt2KJUCAAIHqAkv9AsAi4SsBAgQIECgkIAAUarZSCRAgQKC6wM/6BYCfFr4jQIAAAQJlBASAMq1WKAECBAhUF3hdvwDwWsP3BAgQIECgiIAAUKTRyiRAgACB6gJv6xcA3nq4RYAAAQIESggIACXarEgCBAgQqC7wvn4B4L2I2wQIECBAoICAAFCgyUokQIAAgeoCv9YvAPxq4h4CBAgQIDC9gAAwfYsVSIAAAQLVBa7VLwBcU3EfAQIECBCYXEAAmLzByiNAgACB6gLX6xcArru4lwABAgQITC0gAEzdXsURIECAQHWBj+oXAD6ScT8BAgQIEJhYQACYuLlKI0CAAIHqAh/XLwB8bOMRAgQIECAwrYAAMG1rFUaAAAEC1QVu1S8A3NLxGAECBAgQmFRAAJi0scoiQIAAgeoCt+sXAG77eJQAAQIECEwpIABM2VZFESBAgEB1gXv1CwD3hDxOgAABAgQmFBAAJmyqkggQIECgusD9+gWA+0aeQYAAAQIEphMQAKZrqYIIECBAoLrAI/ULAI8oeQ4BAgQIEJhMQACYrKHKIUCAAIHqAo/VLwA85uRZBAgQIEBgKgEBYKp2KoYAAQIEqgs8Wr8A8KiU5xEgQIAAgYkEBICJmqkUAgQIEKgu8Hj9AsDjVp5JgAABAgSmERAApmmlQggQIECgusCa+gWANVqeS4AAAQIEJhEQACZppDIIECBAoLrAuvoFgHVenk2AAAECBKYQEACmaKMiCBAgQKC6wNr6BYC1Yp5PgAABAgQmEBAAJmiiEggQIECgusD6+gWA9Wb2IECAAAECwwsIAMO3UAEECBAgUF3gmfoFgGfU7EOAAAECBAYXEAAGb6DlEyBAgEB1gefqFwCec7MXAQIECBAYWkAAGLp9Fk+AAAEC1QWerV8AeFbOfgQIECBAYGABAWDg5lk6AQIECFQXeL5+AeB5O3sSIECAAIFhBQSAYVtn4QQIECBQXWBL/QLAFj37EiBAgACBQQUEgEEbZ9kECBAgUF1gW/0CwDY/exMgQIAAgSEFBIAh22bRBAgQIFBdYGv9AsBWQfsTIECAAIEBBQSAAZtmyQQIECBQXWB7/QLAdkMjECBAgACB4QQEgOFaZsEECBAgUF1gj/oFgD0UjUGAAAECBAYTEAAGa5jlEiBAgEB1gX3qFwD2cTQKAQIECBAYSkAAGKpdFkuAAAEC1QX2ql8A2EvSOAQIECBAYCABAWCgZlkqAQIECFQX2K9+AWA/SyMRIECAAIFhBASAYVploQQIECBQXWDP+gWAPTWNRYAAAQIEBhEQAAZplGUSIECAQHWBfesXAPb1NBoBAgQIEBhCQAAYok0WSYAAAQLVBfauXwDYW9R4BAgQIEBgAAEBYIAmWSIBAgQIVBfYv34BYH9TIxIgQIAAge4FBIDuW2SBBAgQIFBdoEX9AkALVWMSIECAAIHOBQSAzhtkeQQIECBQXaBN/QJAG1ejEiBAgACBrgUEgK7bY3EECBAgUF2gVf0CQCtZ4xIgQIAAgY4FBICOm2NpBAgQIFBdoF39AkA7WyMTIECAAIFuBQSAbltjYQQIECBQXaBl/QJAS11jEyBAgACBTgUEgE4bY1kECBAgUF2gbf0CQFtfoxMgQIAAgS4FBIAu22JRBAgQIFBdoHX9AkBrYeMTIECAAIEOBQSADptiSQQIECBQXaB9/QJAe2MzECBAgACB7gQEgO5aYkEECBAgUF3giPoFgCOUzUGAAAECBDoTEAA6a4jlECBAgEB1gWPqFwCOcTYLAQIECBDoSkAA6KodFkOAAAEC1QWOql8AOEraPAQIECBAoCMBAaCjZlgKAQIECFQXOK5+AeA4azMRIECAAIFuBASAblphIQQIECBQXeDI+gWAI7XNRYAAAQIEOhEQADpphGUQIECAQHWBY+sXAI71NhsBAgQIEOhCQADoog0WQYAAAQLVBY6uXwA4Wtx8BAgQIECgAwEBoIMmWAIBAgQIVBc4vn4B4HhzMxIgQIAAgdMFBIDTW2ABBAgQIFBd4Iz6BYAz1M1JgAABAgROFhAATm6A6QkQIECgusA59QsA57iblQABAgQInCogAJzKb3ICBAgQqC5wVv0CwFny5iVAgAABAicKCAAn4puaAAECBKoLnFe/AHCevZkJECBAgMBpAgLAafQmJkCAAIHqAmfWLwCcqW9uAgQIECBwkoAAcBK8aQkQIECgusC59QsA5/qbnQABAgQInCIgAJzCvs+kf//998XGYOsxsM/RuM8ot2rZZwajEOhH4OyVCABnd2DF/Hlx/O233y6fPn36b8v3tt8uDLYZ5Hj6888/L9lWHI6bn5rjOVvmTQ+zjnz9aMvjr7c8L/suW8bavCgDECgkIAAM1Oy84HmRG6hhAy3169evl2ytj6+crHMc50Ser9menTdrzb7LlrGWcTNPtoFaYKnlBM4vWAA4vwcPrcCL2UNMnrRRICfTjUPc3T0n7rtP2vCEjJ86sr0OBLl/w7B2JTCdgAAwSEv/+eefQVZqmSMLzHiSTE0JA8sVgoTpbCP3ydrHF+ihAgGghy5YAwEChwkkDGTL1YEEgWyHTW4iAh0JCAAdNePWUvJTzK3HPUZgL4FKx1qCQLYlDOxlaBwCtwX6eFQA6KMPVkGAwMkCr4OAqwInN8P0hwgIAIcwm4QAgVEEEgSyuSowSsfGW2cvKxYAeumEdRAg0J2AINBdSyxoRwEBYEdMQxEgMKeAIDBnX8+pqp9ZBYB+emElBAh0LiAIdN4gy1slIACs4vJkAgQIXP77rYk+I+BIeEagp30EgJ66YS0ECAwl4IrAUO2y2HcCAsA7EDcJECCwViBBIP90sNLvUFhr5PkR6GsTAPrqh9UQIDCoQEJAft1wgsCgJVh2MQEBoFjDlUuAQFuBBAGfD2hrPOrova1bAOitI9ZDgMAUAgkCrgZM0cppixAApm2twggQOFsgIcDVgLO70Mv8/a1DAOivJ1ZEgMBkAgkCrgZM1tQJyhEAJmiiEggQ6F8gIcDVgP771GqFPY4rAPTYFWsiQGBagQQBVwOmbe9QhQkAg7Try5cvg6zUMgkQuCeQEJB/Muj3BtyTmuXxPusQAPrsi1URIDC5QE7+CQGuBkze6I7LEwA6bo6lESAwv0CuBggBc/e51+oEgF47Y10ECJQRSAjI1YBcFShTtEJPFxAATm+BBRAgQOByyck/IcDVgNmOhn7rEQD67Y2VESBQUCBXA4SAgo0/oWQB4AR0UxIgQOCWQEJArgbceo7HxhDoeZUCQM/dsTYCBMoKLG8JlAVQeHMBAaA5sQkIECDwnEBCQH57YL4+N4K9zhXoe3YBoO/+WB0BAgQueTvA5wIcCHsLCAB7ixqPAAECDQTyuQAhoAFswyF7H1oA6L1D1keAAIHvAkLAdwhfdhEQAHZhNAiBeQS839x3L4WAvvvzc3X9fycA9N8jKyRAgMAbgYSAfC7gzZ1uEFgpIACsBPN0AgQI9CCQKzVCQA+duL6GEe4VAEbokjUSIEDgioAQcAXFXQ8LCAAPU3kiAQIE+hMQAvrryeUyxpoEgDH6ZJUECBD4UEAI+JDGAzcEBIAbOB4iQIDAKAJCQD+dGmUlAsAonbJOAgQI3BEQAu4AefiNgADwhsMNAgQIjC0gBJzdv3HmFwDG6ZWVEiBA4CEBIeAhpvJPEgDKHwIACBCYUSAhwH874PjOjjSjADBSt6yVAAECKwTyGwOFgBVgxZ4qABRruHIJEKglIAQc2e+x5hIAxuqX1RIgQGC1QEJA3hJYvaMdphYQAKZur+IIECDwIpD/boAQ8GLR6s/RxhUARuuY9RIgQOBJgVwJeHJXu00oIABM2FQlESBA4JpArgDkSsC1x9y3VWC8/QWA8XpmxQQIEHhaICHAvwx4mm+qHQWAqdqpGAIECNwXyFsBQsB9pzXPGPG5AsAgXfv8+fMgK7VMAgRGEEgIyNWAEdZqjW0EBIA2rruP+uXLl93HNCABArUFEgJqC+xV/ZjjCACD9C0BINsgy7VMAgQGEMgVAG8FDNCoRksUABrBthj2r7/+uvz+++8XQaCFrjGPEMixm+2IuczxmECuAggBj1l99KxR7xcABuvcH3/8cUkQ+Pbt22WEbTDezcvNyS39yTZCf66tMcfYZogPBlh8Mm+MEmiz5f4PdnH3AQIJAbkacMBUpuhIQADoqBmWMrbAclLLySzb2NW0X32MEjayJQzEL1sCQbY83n4VZlgEEgKW731dIzDucwWAcXtn5R0J5ITV0XKGXkoCQbYlFMQ229BFDbD4XAHwVsAAjdpxiQLAjpiGqimQn1RzwqpZffuqY5vt9dWB9rPWnCFXARIEalb/XNUj7yUAjNw9aydQTCBBIFvCQK4QuDKw/wHgVwXvb9rriAJAr52xrmEE/JKmc1q1XHlJGEgQyO1zVjLfrN4KeLSnYz9PABi7f1ZPgMC/ArkqkCsC2RIG/r3L/zcIeCtgA95AuwoAAzXLUgkQuC2QqwAJA8tVgdvP9ugtgYSAW4977HIZ3UAAGL2D1k+AwFUBQeAqy8N35sOA2R7ewROHExAAhmuZBRMgsEZAEFij9fa5PhD41uPtrfFvCQDj91AFBAg8ICAIPIB05Sk+EHgFZZK7BIBJGqkMAgQeE0gQyAcF83mBx/ao/ax8FsBbAb8eAzPcIwDM0EU1ECCwSiAhwL8YeJwsIeDxZ3vmKAICwCidsk4CBHYXWILA7gNPNmCuAGSbrKwN5cyxqwAwRx9VQYDAkwJ5K8A/G7yP5wOB941Ge4YAMFrHrJcAgSYCuRqQzwY0GXySQV0FeGnkLH8KALN0Uh0ECGwWSAjIZwNyVWDzYBMO4LMAczVVAJirn6ohQGCjQE7+CQGuBvwKmSsA2X59pNI989QqAMzTS5UQILCjQK4GCAG/groK8KvJqPcIAKN2zroJEGguIAT8SpwrANl+faTGPTNVKQDM1E21ECCwu4AQ8CupqwC/mox4jwAwYtesmQCBQwWEgLfcuQKQ7e29FW7NVaMAMFc/VUOAQCMBIeAtrKsAbz1GvCUAjNg1ayZA4BQBIeAne64AZPt5z/zfzVahADBbR9VDgEBTASHgJ6+rAD8tRvxOABixa9ZMgMCpAkLAqfwnTT7ftALAfD1VEQECBwgkBOSXBh0wVbdT5C2AbN0u0MJuCggAN3k8SIAAgY8F/KKgy6XK2wAfHwXjPiIAjNs7KydA4GSBXAHIrw0+eRmnTu8KwKn8myYXADbx2ZkAgeoC4ZspHAAAEABJREFUCQHVrwTMHwLmPMoFgDn7qioCBA4UqP55AG8DHHiw7TiVALAjpqEIEKgrkLcCcjWgosDsVwBm7akAMGtn1UWAwOECld8KEAIOP9w2TygAbCY0AAECBF4EcgUg28utWn/O+zbAvH0UAObtrcoIEDhBIG8FnDCtKQmsFhAAVpPZgQABArcFKr4VMOtbALc7PfajAsDY/bP6DgSqXvLtgL7bJVT9VwFCQLeH5NWFCQBXWdxJgACBbQIVrwJsE+tx77nXJADM3V/VESBwkkCuDFULAT4IeNLB9uS0AsCTcHYjQIDAPYG8FXDvOR7vV2D2lQkAs3dYfQQInCpQ6V8F+AzAqYfa6skFgNVkdiBAgMDjAtXeCpgnBDze41GfKQCM2jnrJkBgGIG8FZArAdU+EzBMg4ouVAAo2nhlEyBwrECuBLwOArl97ArazpZ6srWd5bjRK8wkAFToshoJEOhGICfJJQh8+/bt8tGWKwbPbLnKsHVbM++y/mWf1NcNtoXcFBAAbvJ4kAABAucI5ET6zJZwsXVbM+85Oq1nrTG+AFCjz6okQIAAAQJvBASANxxuECBAgEB1gSr1CwBVOq1OAgQIECDwSkAAeIXhWwIECBCoLlCnfgGgTq9VSoAAAQIEfggIAD8ofEOAAAEC1QUq1S8AVOq2WgkQIECAwHcBAeA7hC8ECBAgUF2gVv0CQK1+q5YAAQIECPwnIAD8x+APAgQIEKguUK1+AaBax9VLgAABAgT+FRAA/kXwfwIECBCoLlCvfgGgXs9VTIAAAQIELgKAg4AAAQIEygtUBBAAKnZdzQQIECBQXkAAKH8IANgq8Pfff28dwv4ECJwqUHNyAaBm31VNgAABAsUFBIDiB4DyCRAgUF2gav0CQNXOq5sAAQIESgsIAKXbr3gCBAhUF6hbvwBQt/cq30ngn3/+2WkkwxAgQOA4AQHgOGszESBAgEBnApWXIwBU7r7aCRAgQKCsgABQtvUKJ0CAQHWB2vULALX7r3oCBAgQKCogABRtvLL3E/CbAPezNBKBIwWqzyUAVD8CGtf/5cuXxjMYngABAgSeERAAnlGzDwECBAgMLmD5AoBjgAABAgQIFBQQAAo2XckECBCoLqD+y0UAcBQQ2EHABwF3QDQEAQKHCggAh3KbjAABAgTOF7CCCAgAUbA1E/j8+XOzsQ1MgAABAs8LCADP29mTAAECBAYUsOQXAQHgxcGfBDYJ+AzAJj47EyBwgoAAcAJ6pSmr/CIg/0ngSke1WscWsPpFQABYJHwlQIAAAQKFBASAQs1WKgECBKoLqP+ngADw08J3DQSqvAXgMwANDh5DEiDQVEAAaMpr8AhUCQGp1UaAQM8C1vZaQAB4reF7AhsEXAXYgGdXAgQOFxAADic3IQECBAicIWDOtwICwFsPtxoI+G2ADVANSYAAgY0CAsBGQLvfF6jyGYCvX7/ex/AMAgROEjDtewEB4L2I2wQIECBAoICAAFCgyUo8RsCHAI9xNguBZwTs86uAAPCriXt2FqjyFkDYhIAo2AgQGEFAABihSxOssVIImKBdSiAwmYByrgkIANdU3Le7QJV/CeAKwO6HjgEJEGgkIAA0gjXsW4EqVwD8VwHf9t0tAj0IWMN1AQHguot7CRAgQIDA1AICwNTt7ae4KlcAvAXQzzFnJQReBPz5kYAA8JGM+3cXEAJ2JzUgAQIEnhYQAJ6ms+NaAR8EXCvm+QQIbBWw/8cCAsDHNh7ZWaDKFQAfBNz5wDEcAQJNBASAJqwGvSZQJQD4HMC17ruPwBkC5rwlIADc0vHY7gJCwO6kBiRAgMBTAgLAU2x2InBbwFWA2z4eJXCEgDluCwgAt308urPA77//vvOIfQ7ncwB99sWqCBD4KSAA/LTw3QEC3gI4ANkUBAhcLhcI9wQEgHtCHt9dQAjYndSABAgQWC0gAKwms8NWgSpvA2x1sj8BAs8L2PO+gABw38gzCDwl8PXr16f2sxMBAgSOEBAAjlA2xxuBvAWQ7c2dE97IvwTINmFpSiLQuYDlPSIgADyi5DkECBAgQGAyAQFgsoaOUk6VzwF4G2CUI9I6ZxJQy2MCAsBjTp61s0CFtwBC5i2AKNgIEOhRQADosStF1iQEFGm0MgkcKmCyRwUEgEelPG93AW8D7E5qQAIECDwsIAA8TOWJewvkCkC2vcftbTxvA/TWEeuZWUBtjwsIAI9beWYDgSpXAYSABgePIQkQ2CQgAGzis/NWgQpXAGLkXwNEwUagtYDx1wgIAGu0PLeJQIUQkCsA2ZoAGpQAAQJPCAgAT6DZZV+BKm8DuAqw73FjNALvBdxeJyAArPPy7AYCuQKQrcHQXQ3pCkBX7bAYAuUFBIDyh0AfAJ8/f+5jIY1XIQQ0Bj5p+PR12f7888/Lve233367jL6dRH1jWg+tFRAA1op5fhOBClcAAudtgCiMv+Vkv5zAP3369OZknh7f27L/yFuVwD7+kXq7AgHgto9HDxJIAMh20HSnTbO86J+2ABM/LZDe5aS/nPBzO9vTA9pxVwGDrRcQANab2aORgA8DNoI17CaBnORz4s+W7zcNNsHO+Xv6xx9/TFCJEgQAx0A3ArkCkK2bBTVaiJNII9gGw+a9fCf+BrC7D2nAZwQEgGfU7NNMID9dNBu8o4FzYuloOZbyTiAhLSf+vJf/7qHSN/P300//8xwCAsA8vZyiklwByDZFMTeKcGK5gXPyQwlnOfknBJy8FNM/KOBpzwkIAM+52auhQH7KaDh8N0PnRNPNYizkP4Gc+IWz/yiu/uGn/6ssw94pAAzbunkXnisA2eat8KUyJ5oXhx7+zE/7+XR/vvawnh7X0G8w71FrjDUJAGP0qdwqq7zYOOGcf2jnSkx+8j9/JX2vwE//fffnmdUJAM+o2ae5QK4AZGs+0ckTuApwXgMSvnLi14P7Peg5kN9fvWd8JCAAfCTj/tMFKrzo5CSU7XTsQguId0782fJ9odKfLtVP/0/Tdb2jANB1e2ovLlcAss2u4CfQ4zq8XO534n/cvO8g/ngdnvmrgADwq4l7OhKo8OKTk1FOTB2xT7eUGOcnfmFrfWv99L/ebJQ9BIBROlV0nbkCUCEE5MSUk1TRNjcrO6Y58WfL980mmnTg3v/uTcp+WFkCwGHUJnpWID+BJAg8u/8o+yUEjLLW3teZk31O+tnyfe/r7XV9+bvX69qsa7uAALDd0AgHCFT4SSQnqmwtOHMizNsM2VqM38uY8Uut2fJ9L+sacR39/50bUbWvNQsAffXDaj4QyBWAbB88PM3dra4C5MU8Y2fLL7xJEMg2A1xO9KkldTnx79PR/F3z0/8+lj2PIgD03B1reyOQk9ibOya8kZNZtr1Lywv6X3/99WPYBIFsOWnm5Jntx4ODfBOnnPCzpZZBlj3EMkf4uzYEZOeLFAA6b5Dl/RTISazCC1Ork9lHfpkvW8JATqa9hoGc8LNljctac/vnEeK7PQTydyzHyh5jGaNvAQGg7/5Y3TuBXJac/cUpJ7VWJ+F7fpl7CQM5yWYd2XL/u1YccjPzZv6c9Jct9x0yedFJcoz0X7oV7iEgAOyhaIxDBfITyqETnjBZTsKtTnRr/LKObDn5JhDka07I2fZcX8bKlnEzR7Zlvsyfx05oQ7kp1xwb5XAmLFgAmLCps5eUKwAVXqhy4mvRyy1+ORFnXdmWk3RO1Nlye9lyIr+2LY+//vp634ybObK1qN2YHwvk79QoP/1/XIVH1ggIAGu0PLcbgbxQ5UTWzYIaLCQnwZxEGwx9aeGX9S5bTuTXtuXx119b1GfM9QI5JtbvZY+RBQSAkbtXfO35iWV2gpxEc7JsUefrfxXQYnxjjiMw1t+lcVx7X6kA0HuHrO9DgVwBqPDClRDwIcLGB4SAjYAT7J6/Q376n6CRT5QgADyBZpd+BPLClSDQz4r2X0muALR6KyB2OQHsv2ojjiCQ3ufv0AhrXdbo634CAsB+lkY6SaDCT7G5CtAqBOQEkBPBSe0z7YkC6f2J05v6ZAEB4OQGmH4fgSohIFcD9hF7O0pOBELAW5PZb43Z79m7cmx9AsCx3mZrJFDlUnauBDQibPIvA1qt1bjbBHLyT+jbNoq9RxcQAEbvoPX/EMgLWl7Yftwx4Te5ApB/Q9+qtFxJSZhqNb5xzxfI35H8XTl/JetXYI99BQSAfT2NdrJAXthmP4ElBLT6PEDalxNEvtrmFMjfkTkrU9VaAQFgrZjndy+Qn2K7X+TGBeatgASBjcNc3T0BqoLh1eInv3Psvk7enBPKEwBOQDdle4EKL3Qt3woQAtofo0fPkCs76evR85qvXwEBoN/eWNkGgbzQ5QVvwxBD7CoEDNGm0xeZvwujX/o/HXHCBQgAEzZVSS8CecHLC9/LrTn/zNsAQsCcvd2rqvwdyN+FvcYzzjwCAsA8vVTJFYG88OUF8MpD09yVENDyQ4G5mlLhLZVpDohXhaR3+Tvw6q5Bv7XsFgICQAtVY3YlkBfA2UNAPhQoBHR12J2+mJz8BbfT29D1AgSArttjcXsJCAHbJZ1QthseOcJMJ/8j3SrNJQBU6nbxWoWA7QdAQsC3b98u+bp9NCO0EnDybyU717gCwFz9VM0dgSohIJ8LuEOx6eGcYISATYTNdp6vN82oyg8sAJQ/BOoBJATMfvLKvwxo+ZmAHDU50cz+2YrUOdKWnsx+bI/Uj97XKgD03iHrayJQ4YWy9QcD05iEKSEgEudvsx7T58vOuwIBYN7equyOQIUXzKNCQCzvcHu4oUD8/eTfEHjSoQWASRurrMcE8sI5+0+wR4SAnHzy4cDZLR87qo59Vo7h+B8761GzmaelgADQUtfYQwhUuIx9RAhIsytYps5eNif/Xjox5joEgDH7ZtU7C1Q4cQkBOx80Jw6Xn/hzxSVfT1xG86lN0FZAAGjra/SBBISA/ZoVy/x06i2B/UyXkXLSj+1y21cCzwoIAM/K2W9KgeXENWVx34s66kpATlTxFAK+w+/wJZZ1Tv47gBnipoAAcJPHgxUFcuKa/fJqQkB+V8AR/U0IiGdOXkfMN+sc8YvlrPWp63gBAeB4czMOIpCftPKiO8hyVy8zvy0wISBfV+/8xA45ec3s+QTJw7vELX4P7zDBE5XQXkAAaG9shoEF8qKbF9+BS7i59Jz8jw4BrgbcbMmbB3M1KkE0x+GbB9wgsIOAALADoiHmFsiL78whIN1LCGj9q4Mzz7JVMF1qffZrjrmc/BMCnh1j3P2s/AgBAeAIZXMML5AT1uw/ueZzAUeHgNlNnz3wc/LPMffs/vYj8IiAAPCIkucQ+C6QF+W8OH+/Od2XhIBcDTiysJgKAi/i+Wk/P/XH5OWemn+q+hgBAeAYZ7NMJJAX57xI58V6orJ+lJLPBXz69Oly5NWATB7XykEgwXLm4yo9tvUlIAD01Q+rGUQgJ/+8WOdFe5Alr15mrgYcHQKyyGpBYGCauoIAAAqTSURBVDmWUnfqtxE4SkAAOEraPFMK5EV79hBw9FsCy4ES29mvCOTYSZBMCFjq9pXAUQICwFHS5plWYPYT1VlvCSwHzGvfnDCX+0f+mhN+TvypbeQ6WqzdmMcJCADHWZtpcoG8mOdFfZaT1Pt2nfWWwLKO+GYb/apAjo8cJwkBS22+EjhDQAA4Q92c0wrkRT0nqbzIz1hkQsAZHxB8bxnjJQiMYp1jIyf+rP19PW4vAr4eKSAAHKltrjICeZFfTlAzFp0gcMYHBN9bxjlbz9bLiT8n/3z/vga3CZwlIACcJW/eEgI5OeWFf5SfUtc0JSGgh6sBy5pjnSCweJ99ss38WUu2fL+s09ePBTxyrIAAcKy32QoK5MU/J6cZQ0DamSDQw9WArCXb4p0TbwJB3LPlsSO2zJ+5s+X7I+Y0B4FnBASAZ9TsQ+AJgYSA5YT0xO5d75IQ0NPVgNdYcc8W+5yUEwZanJgzZsbPlu9fr8H3jwh4ztECAsDR4uYrL7CcjHIimg2j5yAQ65yY45+T9OtAkF7ksTznkS3PXbbXY+W+R/b3HAI9CAgAPXTBGkoK5ESUk1BOPrMBJAjkbYH8DoGea8sJO33ItpzI05PXW+7Pdu2+3J8xeq5xlLVZ5/ECAsDx5mYk8EYgJ5+cXBIEZjqZJATktwgmCLwpeLAb6Um2wZZtuQTuCggAd4k8gcAxAgkC+YkyW8LAMbO2nyVBoNfPB7Sv3gyPCXjWGQICwBnq5iRwQyA/bSYMLFcFbjx1qIcEgaHaZbEFBASAAk1W4rgCr4PALFcFBIFxj8dWKzfuOQICwDnuZiWwSiBBINtMVwUEgVWHgCcT2F1AANid1IAE2gosQWD5rEDeMmg7Y9vRBYG2vv2PboVnCQgAZ8mbl8BGgZz4EwYSBJYrAyO/TSAIbDwg7E5gpYAAsBLM0wn0KpAwkG30MCAI9HqEtVmXUc8TEADOszczgWYCCQLZEgZyhSBXBrI1m7DBwAkCo/8OgQYshiSwm4AAsBulgQj0KbC8VbAEgoSChIFseazPVb+sKiEgv0yo998o+LJaf64XsMeZAgLAmfrmJnCSQMJAtlwdSCDIlkCQLaEg2xlLy7zLlrUs2xlrMSeB2QUEgNk7rD4CDwokEGRLKMiWULBsub1sy0l5+bqcsF9/XR776Osy1vL12jxZS7Zl3AfL8LSBBCz1XAEB4Fx/sxMYQmA5CedrTsqvt+Uk/vrr68evfZ9xXm9DIFgkgckEBIDJGqocAgQIjCFglWcLCABnd8D8BAgQIEDgBAEB4AR0UxIgQKC6gPrPFxAAzu+BFRAgQIAAgcMFBIDDyU1IgACB6gLq70FAAOihC9ZAgAABAgQOFhAADgY3HQECBKoLqL8PAQGgjz5YBQECBAgQOFRAADiU22QECBCoLqD+XgQEgF46YR0ECBAgQOBAAQHgQGxTESBAoLqA+vsREAD66YWVECBAgACBwwQEgMOoTUSAAIHqAurvSUAA6Kkb1kKAAAECBA4SEAAOgjYNAQIEqguovy8BAaCvflgNAQIECBA4REAAOITZJAQIEKguoP7eBASA3jpiPQQIECBA4AABAeAAZFMQIECguoD6+xMQAPrriRURIECAAIHmAgJAc2ITECBAoLqA+nsUEAB67Io1ESBAgACBxgICQGNgwxMgQKC6gPr7FBAA+uyLVREgQIAAgaYCAkBTXoMTIECguoD6exUQAHrtjHURIECAAIGGAgJAQ1xDEyBAoLqA+vsVEAD67Y2VESBAgACBZgICQDNaAxMgQKC6gPp7FhAAeu6OtREgQIAAgUYCAkAjWMMSIECguoD6+xYQAPruj9URIECAAIEmAgJAE1aDEiBAoLqA+nsXEAB675D1ESBAgACBBgICQANUQxIgQKC6gPr7FxAA+u+RFRIgQIAAgd0FBIDdSQ1IgACB6gLqH0FAABihS9ZIgAABAgR2FhAAdgY1HAECBKoLqH8MAQFgjD5ZJQECBAgQ2FVAANiV02AECBCoLqD+UQQEgFE6ZZ0ECBAgQGBHAQFgR0xDESBAoLqA+scREADG6ZWVEiBAgACB3QQEgN0oDUSAAIHqAuofSUAAGKlb1kqAAAECBHYSEAB2gjQMAQIEqguofywBAWCsflktAQIECBDYRUAA2IXRIAQIEKguoP7RBASA0TpmvQQIECBAYAcBAWAHREMQIECguoD6xxMQAMbrmRUTIECAAIHNAgLAZkIDECBAoLqA+kcUEABG7Jo1EyBAgACBjQICwEZAuxMgQKC6gPrHFBAAxuybVRMgQIAAgU0CAsAmPjsTIECguoD6RxUQAEbtnHUTIECAAIENAgLABjy7EiBAoLqA+scVEADG7Z2VEyBAgACBpwUEgKfp7EiAAIHqAuofWUAAGLl71k6AAAECBJ4UEACehLMbAQIEqguof2wBAWDs/lk9AQIECBB4SkAAeIrNTgQIEKguoP7RBQSA0Tto/QQIECBA4AkBAeAJNLsQIECguoD6xxcQAMbvoQoIECBAgMBqAQFgNZkdCBAgUF1A/TMICAAzdFENBAgQIEBgpYAAsBLM0wkQIFBdQP1zCAgAc/RRFQQIECBAYJWAALCKy5MJECBQXUD9swgIALN0Uh0ECBAgQGCFgACwAstTCRAgUF1A/fMICADz9FIlBAgQIEDgYQEB4GEqTyRAgEB1AfXPJCAAzNRNtRAgQIAAgQcFBIAHoTyNAAEC1QXUP5eAADBXP1VDgAABAgQeEhAAHmLyJAIECFQXUP9sAgLAbB1VDwECBAgQeEBAAHgAyVMIECBQXUD98wkIAPP1VEUECBAgQOCugABwl8gTCBAgUF1A/TMKCAAzdlVNBAgQIEDgjoAAcAfIwwQIEKguoP45BQSAOfuqKgIECBAgcFNAALjJ40ECBAhUF1D/rAICwKydVRcBAgQIELghIADcwPEQAQIEqguof14BAWDe3qqMAAECBAh8KCAAfEjjAQIECFQXUP/MAgLAzN1VGwECBAgQ+EBAAPgAxt0ECBCoLqD+uQUEgLn7qzoCBAgQIHBVQAC4yuJOAgQIVBdQ/+wCAsDsHVYfAQIECBC4IiAAXEFxFwECBKoLqH9+AQFg/h6rkAABAgQI/CIgAPxC4g4CBAhUF1B/BQEBoEKX1UiAAAECBN4JCADvQNwkQIBAdQH11xAQAGr0WZUECBAgQOCNgADwhsMNAgQIVBdQfxUBAaBKp9VJgAABAgReCQgArzB8S4AAgeoC6q8jIADU6bVKCRAgQIDADwEB4AeFbwgQIFBdQP2VBASASt1WKwECBAgQ+C4gAHyH8IUAAQLVBdRfS0AAqNVv1RIgQIAAgf8EBID/GPxBgACB6gLqryYgAFTruHoJECBAgMC/AgLAvwj+T4AAgeoC6q8nIADU67mKCRAgQIDARQBwEBAgQKC8AICKAgJAxa6rmQABAgTKCwgA5Q8BAAQIVBdQf00BAaBm31VNgAABAsUFBIDiB4DyCRCoLqD+qgICQNXOq5sAAQIESgsIAKXbr3gCBKoLqL+ugABQt/cqJ0CAAIHCAgJA4eYrnQCB6gLqrywgAFTuvtoJECBAoKyAAFC29QonQKC6gPprC/w/AAAA//9uLmvsAAAABklEQVQDALZY4h56k6ktAAAAAElFTkSuQmCC";
@@ -617,9 +663,17 @@ var CLI_PACKAGE_NAME = pkg.name;
 var CLI_VERSION = pkg.version;
 
 // src/dashboard.ts
-var DEFAULT_PORT = 3847;
-var HOST = "127.0.0.1";
+var DEFAULT_DASHBOARD_PORT = 3847;
+var DASHBOARD_HOST = "127.0.0.1";
+var DASHBOARD_PORT_ATTEMPTS = 10;
+var DEFAULT_PORT = DEFAULT_DASHBOARD_PORT;
+var HOST = DASHBOARD_HOST;
+var PORT_ATTEMPTS = DASHBOARD_PORT_ATTEMPTS;
+var DASHBOARD_HEALTH_MARKER = "transcodes-dashboard";
 var GUIDELINE_MUX_PLAYBACK_ID = "h1vOCPmFDA02fGhcout01FZWD4lpKNTzLFk7vybxvrc3M";
+var APP_ORG_URL = "https://app.transcodes.io/en/org";
+var APP_HOME_URL = "https://app.transcodes.io";
+var execFileAsync = promisify(execFile);
 function fingerprint(token) {
   return createHash("sha256").update(token).digest("hex").slice(0, 12);
 }
@@ -699,7 +753,7 @@ async function buildStatus() {
   };
 }
 function tokenById(id) {
-  return readTokenList().find((t) => fingerprint(t) === id);
+  return readTokenList().find((t2) => fingerprint(t2) === id);
 }
 function sendJson(res, status, body) {
   res.writeHead(status, {
@@ -827,6 +881,24 @@ function dashboardHtml() {
       font-weight: 600;
       line-height: 1.45;
     }
+    .header-token-empty-title { margin: 0; }
+    .header-token-empty-cmds {
+      margin: 10px 0 0;
+      display: flex;
+      flex-direction: column;
+      align-items: flex-start;
+      gap: 6px;
+    }
+    .header-token-empty-cmds code {
+      font-family: ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, monospace;
+      font-size: var(--text-2xs);
+      font-weight: 600;
+      color: var(--accent);
+      background: #fff;
+      border: 1px solid #f5c6cb;
+      padding: 3px 9px;
+      border-radius: 7px;
+    }
     .header-profile {
       display: flex;
       align-items: center;
@@ -862,6 +934,9 @@ function dashboardHtml() {
     }
     .btn-manage-auth {
       flex-shrink: 0;
+      display: inline-flex;
+      align-items: center;
+      gap: 6px;
       border: none;
       border-radius: 10px;
       padding: 10px 16px;
@@ -872,11 +947,38 @@ function dashboardHtml() {
       cursor: pointer;
       transition: opacity 0.15s ease, transform 0.15s ease;
     }
+    .btn-manage-auth svg {
+      width: 20px;
+      height: 20px;
+      flex-shrink: 0;
+    }
     .btn-manage-auth:hover:not(:disabled) { opacity: 0.92; }
     .btn-manage-auth:disabled {
       opacity: 0.55;
       cursor: not-allowed;
     }
+    .btn-manage-tokens {
+      margin-left: auto;
+      flex-shrink: 0;
+      display: inline-flex;
+      align-items: center;
+      gap: 6px;
+      border: none;
+      border-radius: 10px;
+      padding: 10px 16px;
+      font-size: var(--text-sm);
+      font-weight: 600;
+      color: #fff;
+      background: var(--accent);
+      cursor: pointer;
+      transition: opacity 0.15s ease;
+    }
+    .btn-manage-tokens svg {
+      width: 20px;
+      height: 20px;
+      flex-shrink: 0;
+    }
+    .btn-manage-tokens:hover { opacity: 0.92; }
     .header-profile-actions {
       flex-shrink: 0;
       display: flex;
@@ -953,6 +1055,18 @@ function dashboardHtml() {
       margin: 0 0 4px;
       letter-spacing: -0.01em;
     }
+    .section-title--spaced {
+      margin: 26px 0 4px;
+    }
+    .section-title-row {
+      display: flex;
+      align-items: center;
+      justify-content: space-between;
+      gap: 12px;
+      margin: 0 0 4px;
+    }
+    .section-title-row .section-title { margin: 0; }
+    .section-title-row .guide-video-toggle { flex-shrink: 0; }
     .section-sub {
       font-size: var(--text-base);
       color: var(--muted);
@@ -1223,8 +1337,8 @@ function dashboardHtml() {
     .list-label {
       margin: 26px 0 10px;
       font-size: var(--text-sm);
-      font-weight: 600;
-      color: var(--muted);
+      font-weight: 700;
+      color: var(--ink);
       letter-spacing: 0.01em;
     }
     .token-list { display: flex; flex-direction: column; gap: 10px; }
@@ -1524,6 +1638,32 @@ function dashboardHtml() {
       line-height: 1.5;
       margin: 0;
     }
+    .guide-video-wrap {
+      margin: 0;
+    }
+    .guide-video-toggle {
+      display: inline-flex;
+      align-items: center;
+      gap: 6px;
+      border: 1px solid var(--line);
+      border-radius: 999px;
+      padding: 6px 12px;
+      font-size: var(--text-xs);
+      font-weight: 600;
+      color: var(--ink);
+      background: #fff;
+      cursor: pointer;
+      transition: background 0.15s ease, border-color 0.15s ease;
+    }
+    .guide-video-toggle:hover {
+      background: #f7f7f9;
+      border-color: #d8d8de;
+    }
+    .guide-video-toggle[aria-expanded="true"] {
+      color: var(--accent);
+      border-color: rgba(91, 84, 230, 0.35);
+      background: var(--accent-soft);
+    }
     .guide-video {
       margin: 0 0 22px;
       border-radius: 14px;
@@ -1533,6 +1673,7 @@ function dashboardHtml() {
       aspect-ratio: 16 / 9;
       box-shadow: 0 8px 28px rgba(22, 22, 26, 0.08);
     }
+    .guide-video[hidden] { display: none !important; }
     .guide-video mux-player {
       width: 100%;
       height: 100%;
@@ -1598,6 +1739,37 @@ function dashboardHtml() {
       border: 1px solid var(--line);
       border-radius: 14px;
     }
+    .guide-step--accordion {
+      display: block;
+      padding: 0;
+      overflow: hidden;
+    }
+    .guide-step-summary {
+      display: flex;
+      align-items: center;
+      gap: 14px;
+      padding: 14px 16px;
+      cursor: pointer;
+      list-style: none;
+      user-select: none;
+    }
+    .guide-step-summary::-webkit-details-marker { display: none; }
+    .guide-step-summary::marker { content: ''; }
+    .guide-step-summary:hover { background: #f7f7f9; }
+    .guide-step--accordion[open] .guide-step-summary {
+      border-bottom: 1px solid var(--line);
+    }
+    .guide-step-chevron {
+      margin-left: auto;
+      flex-shrink: 0;
+      width: 16px;
+      height: 16px;
+      color: var(--muted);
+      transition: transform 0.15s ease;
+    }
+    .guide-step--accordion[open] .guide-step-chevron {
+      transform: rotate(180deg);
+    }
     .guide-step-num {
       flex: 0 0 28px;
       width: 28px;
@@ -1612,18 +1784,35 @@ function dashboardHtml() {
       justify-content: center;
     }
     .guide-step-body { min-width: 0; }
+    .guide-step--accordion > .guide-step-body {
+      padding: 12px 16px 14px 58px;
+    }
     .guide-step-title {
       font-size: var(--text-sm);
       font-weight: 700;
       color: var(--ink);
       margin: 0 0 4px;
     }
+    .guide-step-summary .guide-step-title { margin: 0; flex: 1; min-width: 0; }
     .guide-step-desc {
       font-size: var(--text-sm);
       color: var(--muted);
       line-height: 1.5;
       margin: 0;
     }
+    .guide-step-desc a,
+    .guide-console-link {
+      color: var(--accent);
+      font-weight: 600;
+      text-decoration: underline;
+      background: none;
+      border: none;
+      padding: 0;
+      font: inherit;
+      cursor: pointer;
+    }
+    .guide-step-desc a:hover,
+    .guide-console-link:hover { opacity: 0.88; }
     .guide-step-desc code {
       font-family: ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, monospace;
       font-size: var(--text-2xs);
@@ -1677,13 +1866,49 @@ function dashboardHtml() {
     }
     .guide-help {
       margin: 0 0 18px;
-      padding: 16px 18px;
+      padding: 0;
       background: var(--accent-soft);
       border: 1px solid rgba(91, 84, 230, 0.18);
       border-radius: 14px;
+      overflow: hidden;
     }
-    .guide-help-line {
+    .guide-help-accordion { margin: 0; }
+    .guide-help-summary {
+      display: flex;
+      align-items: center;
+      gap: 10px;
+      padding: 14px 18px;
+      cursor: pointer;
+      list-style: none;
+      user-select: none;
+    }
+    .guide-help-summary::-webkit-details-marker { display: none; }
+    .guide-help-summary::marker { content: ''; }
+    .guide-help-summary:hover { background: rgba(91, 84, 230, 0.06); }
+    .guide-help-summary .guide-help-heading {
       margin: 0;
+      flex: 1;
+      min-width: 0;
+      font-size: var(--text-sm);
+      font-weight: 700;
+      color: var(--ink);
+    }
+    .guide-help-chevron {
+      width: 18px;
+      height: 18px;
+      flex-shrink: 0;
+      color: var(--muted);
+      transition: transform 0.15s ease;
+    }
+    .guide-help-accordion[open] .guide-help-chevron {
+      transform: rotate(180deg);
+    }
+    .guide-help-body {
+      padding: 0 18px 16px;
+      border-top: 1px solid rgba(91, 84, 230, 0.12);
+    }
+    .guide-help-line {
+      margin: 12px 0 0;
       font-size: var(--text-sm);
       color: #4a4a52;
       line-height: 1.6;
@@ -1703,7 +1928,7 @@ function dashboardHtml() {
       color: #4a4a52;
       line-height: 1.6;
     }
-    .guide-help-heading:first-child { margin-top: 0; }
+    .guide-help-body > .guide-help-heading:first-child { margin-top: 12px; }
     .guide-help-list {
       margin: 6px 0 0;
       padding-left: 18px;
@@ -1717,12 +1942,56 @@ function dashboardHtml() {
       font-family: ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, monospace;
       font-size: var(--text-xs);
     }
+    .guide-prefix-note {
+      margin: 0 0 14px;
+      font-size: var(--text-sm);
+      color: var(--muted);
+      line-height: 1.6;
+    }
+    .guide-prefix-note code.cli-cmd { white-space: nowrap; }
     .guide-help-examples {
       margin: 10px 0 0;
       display: flex;
       flex-direction: column;
       gap: 8px;
     }
+    .guide-cmd-row {
+      display: flex;
+      flex-direction: column;
+      gap: 4px;
+    }
+    .guide-cmd-hosts {
+      font-size: var(--text-2xs);
+      font-weight: 600;
+      color: var(--muted);
+      text-transform: uppercase;
+      letter-spacing: 0.04em;
+    }
+    .guide-classify-list {
+      margin: 10px 0 0;
+      padding: 0;
+      list-style: none;
+      display: flex;
+      flex-direction: column;
+      gap: 8px;
+    }
+    .guide-classify-list li {
+      display: flex;
+      align-items: center;
+      flex-wrap: wrap;
+      gap: 8px;
+      font-size: var(--text-sm);
+      color: var(--muted);
+      line-height: 1.5;
+    }
+    .guide-classify-prompt { color: var(--ink); }
+    .guide-classify-arrow { color: var(--muted); }
+    .guide-classify-note {
+      margin: 10px 0 0;
+      font-size: var(--text-sm);
+      color: var(--muted);
+      line-height: 1.55;
+    }
     .guide-help-examples code.cli-cmd {
       display: block;
       width: fit-content;
@@ -1782,12 +2051,27 @@ function dashboardHtml() {
       display: flex;
       align-items: center;
       justify-content: center;
+      flex-wrap: wrap;
       gap: 8px;
       font-size: var(--text-2xs);
       color: var(--muted);
       text-align: center;
       line-height: 1.6;
     }
+    .dashboard-footer a {
+      display: inline-flex;
+      align-items: center;
+      gap: 5px;
+      color: var(--accent);
+      font-weight: 600;
+      text-decoration: none;
+    }
+    .dashboard-footer a:hover { text-decoration: underline; }
+    .dashboard-footer-github-icon {
+      width: 14px;
+      height: 14px;
+      flex-shrink: 0;
+    }
   </style>
   <script type="module" src="https://cdn.jsdelivr.net/npm/@mux/mux-player"></script>
 </head>
@@ -1809,14 +2093,25 @@ function dashboardHtml() {
           <p class="header-tagline">Manage credentials and view RBAC from one panel \u2014 no CLI typing required</p>
         </div>
       </div>
-      <p id="header-token-empty" class="header-token-empty" hidden>Please register a token first</p>
+      <div id="header-token-empty" class="header-token-empty" hidden>
+        <p class="header-token-empty-title">No Transcodes CLI authorization found</p>
+        <p class="header-token-empty-title">Sign in with Google and choose an organization:</p>
+        <div class="header-token-empty-cmds">
+          <code>transcodes login</code>
+        </div>
+      </div>
       <div class="header-profile" id="header-profile" hidden>
         <div class="header-profile-info">
           <div class="header-profile-name" id="header-profile-name"></div>
           <div class="header-profile-meta" id="header-profile-meta"></div>
         </div>
         <div class="header-profile-actions">
-          <button type="button" class="btn-manage-auth" id="manage-auth-btn">Manage Auth</button>
+          <button type="button" class="btn-manage-auth" id="manage-auth-btn" data-console-open aria-label="Open Transcodes console">
+            <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor" aria-hidden="true">
+              <path stroke-linecap="round" stroke-linejoin="round" d="M7.864 4.243A7.5 7.5 0 0 1 19.5 10.5c0 2.92-.556 5.709-1.568 8.268M5.742 6.364A7.465 7.465 0 0 0 4.5 10.5a7.464 7.464 0 0 1-1.15 3.993m1.989 3.559A11.209 11.209 0 0 0 8.25 10.5a3.75 3.75 0 1 1 7.5 0c0 .527-.021 1.049-.064 1.565M12 10.5a14.94 14.94 0 0 1-3.6 9.75m6.633-4.596a18.666 18.666 0 0 1-2.485 5.33" />
+            </svg>
+            Console
+          </button>
           <p class="header-profile-cli-hint"><code>transcodes console</code></p>
         </div>
       </div>
@@ -1829,99 +2124,160 @@ function dashboardHtml() {
     </div>
 
     <div class="panel active" id="panel-guideline">
-      <p class="section-title">Getting Started</p>
-      <p class="section-sub">New to Transcodes? Watch the walkthrough, then follow the steps below</p>
-      <div class="guide-help">
-        <p class="guide-help-line"><strong>For LLM agents</strong> \u2014 prefix prompts with <code class="cli-cmd">/transcodes</code> or <code class="cli-cmd">$transcodes</code> to reduce hallucinations</p>
-        <div class="guide-help-examples">
-          <code class="cli-cmd">/transcodes add signin / stepup / console in our admin dashboard</code>
-          <code class="cli-cmd">/transcodes summarize member audit logs for the past 2 weeks</code>
-        </div>
+      <div class="section-title-row">
+        <p class="section-title">Getting Started</p>
+        <button type="button" class="guide-video-toggle" id="guide-video-toggle" aria-expanded="false" aria-controls="guide-video">
+          Watch Intro Video
+        </button>
       </div>
-      <div class="guide-video">
-        <mux-player
-          playback-id="${GUIDELINE_MUX_PLAYBACK_ID}"
-          stream-type="on-demand"
-          accent-color="#5b54e6"
-          primary-color="#ffffff"
-          metadata-video-title="Transcodes CLI onboarding"
-        ></mux-player>
+      <p class="section-sub">Transcodes CLI Dashboard,Set it up visually \u2014 no terminal required. New to Transcodes? Watch the video.</p>
+      <div class="guide-video-wrap">
+        <div class="guide-video" id="guide-video" hidden>
+          <mux-player
+            playback-id="${GUIDELINE_MUX_PLAYBACK_ID}"
+            stream-type="on-demand"
+            accent-color="#5b54e6"
+            primary-color="#ffffff"
+            metadata-video-title="Transcodes CLI onboarding"
+          ></mux-player>
+        </div>
       </div>
-      <p class="list-label">Quick setup</p>
+      <p class="section-title section-title--spaced">Quick Demo</p>
+      <p class="guide-prefix-note">Try the quick demo to see how Transcodes works</p>
+      <p class="guide-prefix-note">Prefix prompts with <code class="cli-cmd">/transcodes</code> on Claude, Cursor, and Antigravity \u2014 use <code class="cli-cmd">$transcodes</code> on ChatGPT (Codex).</p>
       <div class="guide-groups">
-        <section class="guide-group guide-group--console">
-          <a class="guide-group-label" href="https://app.transcodes.io/" target="_blank" rel="noopener noreferrer">Transcodes Console<span class="guide-group-link-icon" aria-hidden="true"><svg width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"/><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"/></svg></span></a>
+        <section class="guide-group guide-group--panel">
           <ol class="guide-steps">
-            <li class="guide-step">
-              <span class="guide-step-num">1</span>
-              <div class="guide-step-body">
-                <p class="guide-step-title">Set up project, auth cluster &amp; member</p>
-                <p class="guide-step-desc">Create a project, add an authentication cluster for how members sign in, then invite or add a member so they can be issued an access token</p>
-              </div>
+            <li>
+              <details class="guide-step guide-step--accordion">
+                <summary class="guide-step-summary">
+                  <span class="guide-step-num">1</span>
+                  <span class="guide-step-title">Open your CLI or desktop app (Claude, Cursor, Antigravity, ChatGPT)</span>
+                  <svg class="guide-step-chevron" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="m6 9 6 6 6-6"/></svg>
+                </summary>
+                <div class="guide-step-body">
+                  <p class="guide-step-desc">If it's already running, restart it so the latest plugin and token are loaded</p>
+                </div>
+              </details>
             </li>
-            <li class="guide-step">
-              <span class="guide-step-num">2</span>
-              <div class="guide-step-body">
-                <p class="guide-step-title">Issue an access token</p>
-                <p class="guide-step-desc">Open the member detail page and issue a Member Access Token (MAT) for the agent</p>
-              </div>
+            <li>
+              <details class="guide-step guide-step--accordion">
+                <summary class="guide-step-summary">
+                  <span class="guide-step-num">2</span>
+                  <span class="guide-step-title">Trigger a step-up test</span>
+                  <svg class="guide-step-chevron" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="m6 9 6 6 6-6"/></svg>
+                </summary>
+                <div class="guide-step-body">
+                  <p class="guide-step-desc">Ask the agent to run a protected action \u2014 it should prompt for step-up authentication</p>
+                  <div class="guide-help-examples">
+                    <div class="guide-cmd-row">
+                      <span class="guide-cmd-hosts">Claude \xB7 Cursor \xB7 Antigravity</span>
+                      <code class="cli-cmd">/transcodes open step-up authentication for testing</code>
+                    </div>
+                    <div class="guide-cmd-row">
+                      <span class="guide-cmd-hosts">ChatGPT (Codex)</span>
+                      <code class="cli-cmd">$transcodes open step-up authentication for testing</code>
+                    </div>
+                  </div>
+                </div>
+              </details>
             </li>
           </ol>
         </section>
+      </div>
 
+      <p class="section-title section-title--spaced">Steps</p>
+      <div class="guide-groups">
         <section class="guide-group guide-group--panel">
-          <p class="guide-group-label">This CLI panel</p>
           <ol class="guide-steps">
-            <li class="guide-step">
-              <span class="guide-step-num">3</span>
-              <div class="guide-step-body">
-                <p class="guide-step-title">Save the token</p>
-                <p class="guide-step-desc">Paste the token in the Tokens tab with a label (e.g. <code>transcodes-myapp-dev</code>) \u2014 the plugin reads it from <code>{{HOME_DIR}}/.transcodes/config.json</code></p>
-              </div>
+            <li>
+              <details class="guide-step guide-step--accordion">
+                <summary class="guide-step-summary">
+                  <span class="guide-step-num">1</span>
+                  <span class="guide-step-title">Configure RBAC in the Transcodes app</span>
+                  <svg class="guide-step-chevron" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="m6 9 6 6 6-6"/></svg>
+                </summary>
+                <div class="guide-step-body">
+                  <p class="guide-step-desc">Set up resources, actions, and roles in the <a href="${APP_ORG_URL}" data-app-tab="rbac" target="_blank" rel="noopener noreferrer">Transcodes app</a>. You can review the resulting RBAC permissions read-only in this CLI panel's RBAC tab</p>
+                </div>
+              </details>
             </li>
-            <li class="guide-step">
-              <span class="guide-step-num">4</span>
-              <div class="guide-step-body">
-                <p class="guide-step-title">Configure &amp; view RBAC</p>
-                <p class="guide-step-desc">In the Transcodes app Role Management, add resources (key, name, description), create roles, and set the permission matrix \u2014 0 deny \xB7 1 allow \xB7 2 step-up MFA. Then open the RBAC tab here to inspect them read-only \u2014 create, update, and delete stay in the app (logo or Transcodes at the top)</p>
-              </div>
+            <li>
+              <details class="guide-step guide-step--accordion">
+                <summary class="guide-step-summary">
+                  <span class="guide-step-num">2</span>
+                  <span class="guide-step-title">Register a passkey or biometrics</span>
+                  <svg class="guide-step-chevron" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="m6 9 6 6 6-6"/></svg>
+                </summary>
+                <div class="guide-step-body">
+                  <p class="guide-step-desc">Click the <button type="button" class="guide-console-link" data-console-open>Console</button> button (or run <code class="cli-cmd">transcodes console</code> in your terminal), sign in, then register a passkey or biometrics \u2014 these are used for step-up authentication</p>
+                </div>
+              </details>
             </li>
-          </ol>
-        </section>
-
-        <section class="guide-group guide-group--agent">
-          <a class="guide-group-label" href="${TRANSCODES_GUARD_REPO_URL}" target="_blank" rel="noopener noreferrer">LLM Agent or Admin Back Office<span class="guide-group-link-icon" aria-hidden="true"><svg width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"/><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"/></svg></span></a>
-          <ol class="guide-steps">
-            <li class="guide-step">
-              <span class="guide-step-num">5</span>
-              <div class="guide-step-body">
-                <p class="guide-step-title">Add the transcodes-guard plugin</p>
-                <p class="guide-step-desc">Install the transcodes-guard plugin on Claude, Codex, Cursor (beta), and Antigravity (beta). For more plugins info, visit the repository</p>
-                <p class="guide-step-opensource">
-                  <a class="guide-opensource-link" href="${TRANSCODES_GUARD_REPO_URL}" target="_blank" rel="noopener noreferrer" aria-label="transcodes-guard on GitHub">
-                    <svg class="guide-opensource-icon" viewBox="0 0 24 24" aria-hidden="true" fill="currentColor"><path d="M12 0C5.37 0 0 5.37 0 12c0 5.31 3.435 9.795 8.205 11.385.6.105.825-.255.825-.57 0-.285-.015-1.23-.015-2.235-3.015.555-3.795-.735-4.035-1.41-.135-.345-.72-1.41-1.23-1.695-.42-.225-1.02-.78-.015-.795.945-.015 1.62.87 1.845 1.23 1.08 1.815 2.805 1.305 3.495.99.105-.78.42-1.305.765-1.605-2.67-.3-5.46-1.335-5.46-5.925 0-1.305.465-2.385 1.23-3.225-.12-.3-.54-1.53.12-3.18 0 0 1.005-.315 3.3 1.23.96-.27 1.98-.405 3-.405s2.04.135 3 .405c2.295-1.56 3.3-1.23 3.3-1.23.66 1.65.24 2.88.12 3.18.765.84 1.23 1.905 1.23 3.225 0 4.605-2.805 5.625-5.475 5.925.435.375.81 1.095.81 2.22 0 1.605-.015 2.895-.015 3.3 0 .315.225.69.825.57A12.02 12.02 0 0 0 24 12c0-6.63-5.37-12-12-12z"/></svg>
-                    We support Open Source, <span class="guide-opensource-accent">More Info</span>
-                  </a>
-                </p>
-              </div>
+            <li>
+              <details class="guide-step guide-step--accordion">
+                <summary class="guide-step-summary">
+                  <span class="guide-step-num">3</span>
+                  <span class="guide-step-title">Open your CLI or desktop app (Claude, Cursor, Antigravity, ChatGPT)</span>
+                  <svg class="guide-step-chevron" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="m6 9 6 6 6-6"/></svg>
+                </summary>
+                <div class="guide-step-body">
+                  <p class="guide-step-desc">If it's already running, restart it so the latest plugin and token are loaded</p>
+                </div>
+              </details>
             </li>
-            <li class="guide-step">
-              <span class="guide-step-num">6</span>
-              <div class="guide-step-body">
-                <p class="guide-step-title">Prompt-driven permissions</p>
-                <p class="guide-step-desc">Once installed, when you give the agent a command, Transcodes AI interprets the prompt using the role, resource, and action settings you configured and determines the permission \u2014 deny, allow, or step-up MFA</p>
-              </div>
+            <li>
+              <details class="guide-step guide-step--accordion">
+                <summary class="guide-step-summary">
+                  <span class="guide-step-num">4</span>
+                  <span class="guide-step-title">Run an action from the agent</span>
+                  <svg class="guide-step-chevron" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="m6 9 6 6 6-6"/></svg>
+                </summary>
+                <div class="guide-step-body">
+                  <p class="guide-step-desc">Try an action in your CLI or desktop app. Transcodes classifies each prompt into a <code>resource:action</code> pair, then applies the permission matrix \u2014 <strong>0 deny</strong> \xB7 <strong>1 allow (pass)</strong> \xB7 <strong>2 step-up MFA</strong>.</p>
+                  <ul class="guide-classify-list">
+                    <li><span class="guide-classify-prompt">"Create a Google Calendar event"</span> <span class="guide-classify-arrow">\u2192</span> <code class="cli-cmd">google:create</code></li>
+                    <li><span class="guide-classify-prompt">"Change James's role in Transcodes"</span> <span class="guide-classify-arrow">\u2192</span> <code class="cli-cmd">transcodes:update</code></li>
+                    <li><span class="guide-classify-prompt">"Delete files on my computer"</span> <span class="guide-classify-arrow">\u2192</span> <code class="cli-cmd">system:delete</code></li>
+                  </ul>
+                  <p class="guide-classify-note">No matching resource? It falls back to <code class="cli-cmd">system</code> automatically \u2014 e.g. if there's no <code>google</code> resource, "Create a Google Calendar event" becomes <code class="cli-cmd">system:create</code>.</p>
+                </div>
+              </details>
+            </li>
+            <li>
+              <details class="guide-step guide-step--accordion">
+                <summary class="guide-step-summary">
+                  <span class="guide-step-num">5</span>
+                  <span class="guide-step-title">Pull the audit log report</span>
+                  <svg class="guide-step-chevron" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="m6 9 6 6 6-6"/></svg>
+                </summary>
+                <div class="guide-step-body">
+                  <p class="guide-step-desc">Ask the agent for a member audit / security log report \u2014 Transcodes maps the prompt to the right resource and enforces RBAC</p>
+                  <p class="guide-step-desc">Every action is logged \u2014 whether it was 0 deny, 1 allow, or 2 step-up MFA.</p>
+                  <div class="guide-help-examples">
+                    <div class="guide-cmd-row">
+                      <span class="guide-cmd-hosts">Claude \xB7 Cursor \xB7 Antigravity</span>
+                      <code class="cli-cmd">/transcodes show audit logs report</code>
+                    </div>
+                    <div class="guide-cmd-row">
+                      <span class="guide-cmd-hosts">ChatGPT (Codex)</span>
+                      <code class="cli-cmd">$transcodes show audit logs report</code>
+                    </div>
+                  </div>
+                </div>
+              </details>
             </li>
-            <li class="guide-step">
-              <span class="guide-step-num">7</span>
-              <div class="guide-step-body">
-                <p class="guide-step-title">Ask the agent for log history</p>
-                <p class="guide-step-desc">After setup, ask your installed AI agent \u2014 such as Claude, ChatGPT, or Antigravity \u2014 to pull member audit / security log history. Transcodes AI maps the prompt to the right resource and enforces RBAC</p>
-                <div class="guide-help-examples">
-                  <code class="cli-cmd">/transcodes show log history for the past 2 weeks</code>
-                  <code class="cli-cmd">/transcodes summarize member audit logs for the past 2 weeks</code>
+            <li>
+              <details class="guide-step guide-step--accordion">
+                <summary class="guide-step-summary">
+                  <span class="guide-step-num">6</span>
+                  <span class="guide-step-title">Receive step-up links and notifications on Slack or Discord</span>
+                  <svg class="guide-step-chevron" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="m6 9 6 6 6-6"/></svg>
+                </summary>
+                <div class="guide-step-body">
+                  <p class="guide-step-desc">Want step-up links delivered to Slack or Discord? Go to <a href="${APP_ORG_URL}" data-app-tab="settings" target="_blank" rel="noopener noreferrer">Transcodes Settings</a> and set up a webhook. (More channels coming soon.)</p>
                 </div>
-              </div>
+              </details>
             </li>
           </ol>
         </section>
@@ -1936,8 +2292,14 @@ function dashboardHtml() {
       <p class="cli-map-row cli-map-row--section">
         <span class="cli-map-label cli-map-label--title">MCP Access Token</span>
         <code>transcodes set &lt;token&gt; -l &lt;label&gt;</code>
+        <button type="button" class="btn-manage-tokens" id="manage-tokens-btn" aria-label="Open Transcodes members page">
+          <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 24 24" stroke-width="1.5" stroke="currentColor" aria-hidden="true">
+            <path stroke-linecap="round" stroke-linejoin="round" d="M15.75 5.25a3 3 0 0 1 3 3m3 0a6 6 0 0 1-7.029 5.912c-.563-.097-1.159.026-1.563.43L10.5 17.25H8.25v2.25H6v2.25H2.25v-2.818c0-.597.237-1.17.659-1.591l6.499-6.499c.404-.404.527-1 .43-1.563A6 6 0 1 1 21.75 8.25Z" />
+          </svg>
+          Manage Tokens
+        </button>
       </p>
-      <p class="section-sub">Paste the token from your Transcodes console member detail page</p>
+      <p class="section-sub">Browser login is recommended: <code>transcodes login</code>. Manual token entry remains available for scripts and recovery.</p>
       <textarea id="token" placeholder="eyJhbGciOi\u2026" spellcheck="false" autocomplete="off"></textarea>
       <input type="text" id="label" class="label-input" placeholder="Label (required) \u2014 e.g. transcodes-{project_name}-{env}" autocomplete="off" required />
       <div class="actions">
@@ -1960,7 +2322,7 @@ function dashboardHtml() {
         </div>
         <button type="button" class="btn-danger" id="reset-all">Reset all</button>
       </div>
-      <p class="hint">Saved to <code>{{HOME_DIR}}/.transcodes/config.json</code><br />Press Ctrl+C in the terminal to stop</p>
+      <p class="hint">Please read the Guideline tab to learn how to use Transcodes CLI.<br />Stop the background dashboard with <code>transcodes stop</code>.</p>
     </div>
 
     <div class="panel" id="panel-cli">
@@ -1969,21 +2331,40 @@ function dashboardHtml() {
       <div class="cmd-list">
         ${renderCliCommandsHtml()}
       </div>
-      <p class="hint">Token file: <code>{{HOME_DIR}}/.transcodes/config.json</code></p>
+      <p class="hint">Please read the Guideline tab first if you are new to Transcodes CLI.</p>
     </div>
 
     <div class="panel" id="panel-rbac">
-      <p id="rbac-token-warning" class="rbac-token-warning" hidden>Save a token on the Tokens tab first</p>
+      <p id="rbac-token-warning" class="rbac-token-warning" hidden>Save a Transcodes token(MAT) first</p>
       <div class="guide-help">
-        <p class="guide-help-heading">How it works</p>
-        <p class="guide-help-line">Transcodes AI interprets the prompt and maps it to a resource / action pair. Based on the member's role, it applies deny / allow / step-up from the permission matrix. Resources are matched by name and description \u2014 if nothing matches, it falls back to <code>system</code>. When integrating with your own back office, you can pass <code>resource</code> and <code>action</code> as params to control permissions directly.</p>
-        <p class="guide-help-heading">Action Classification</p>
-        <ul class="guide-help-list">
-          <li><strong>read</strong> \u2014 inspect data without changing it (list, get, query, cat, grep, status, describe)</li>
-          <li><strong>update</strong> \u2014 modify existing data (edit, patch, set, rename, move, config change)</li>
-          <li><strong>delete</strong> \u2014 remove or destroy data (rm, drop, truncate, purge)</li>
-          <li><strong>create</strong> \u2014 any other state-changing action (new records, sends, posts, uploads, installs)</li>
-        </ul>
+        <details class="guide-help-accordion">
+          <summary class="guide-help-summary">
+            <span class="guide-help-heading">How it works</span>
+            <svg class="guide-help-chevron" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="m6 9 6 6 6-6"/></svg>
+          </summary>
+          <div class="guide-help-body">
+            <p class="guide-help-line">Try an action in your CLI or desktop app. Transcodes classifies each prompt into a <code class="cli-cmd">resource:action</code> pair, then applies the permission matrix \u2014 <strong>0 deny</strong> \xB7 <strong>1 allow (pass)</strong> \xB7 <strong>2 step-up MFA</strong>.</p>
+            <p class="guide-help-line">Resources are matched by <strong>name</strong> and <strong>description</strong>. If nothing matches, it falls back to <code class="cli-cmd">system</code>. Write a concrete description (what the resource covers \u2014 e.g. tools, domains, verbs) so the classifier can match accurately. When integrating with your own back office, you can pass <code>resource</code> and <code>action</code> as params to control permissions directly.</p>
+            <p class="guide-help-heading">Action Classification</p>
+            <ul class="guide-help-list">
+              <li><strong>read</strong> \u2014 inspect data without changing it (list, get, query, cat, grep, status, describe)</li>
+              <li><strong>update</strong> \u2014 modify existing data (edit, patch, set, rename, move, config change)</li>
+              <li><strong>delete</strong> \u2014 remove or destroy data (rm, drop, truncate, purge). Also used for destructive / irreversible mutations (force-push, reset --hard, DROP/TRUNCATE, prod overwrite)</li>
+              <li><strong>create</strong> \u2014 any other state-changing action (new records, sends, posts, uploads, installs)</li>
+            </ul>
+            <p class="guide-help-heading">Examples</p>
+            <ul class="guide-classify-list">
+              <li><span class="guide-classify-prompt">"Create a Google Calendar event"</span> <span class="guide-classify-arrow">\u2192</span> <code class="cli-cmd">google:create</code> <span class="guide-classify-arrow">if <code>google</code> is registered</span> \xB7 otherwise <code class="cli-cmd">system:create</code></li>
+              <li><span class="guide-classify-prompt">"Post a message to #eng on Slack"</span> <span class="guide-classify-arrow">\u2192</span> <code class="cli-cmd">slack:create</code> <span class="guide-classify-arrow">if <code>slack</code> is registered</span> \xB7 otherwise <code class="cli-cmd">system:create</code></li>
+              <li><span class="guide-classify-prompt">"Change James's role in Transcodes"</span> <span class="guide-classify-arrow">\u2192</span> <code class="cli-cmd">transcodes:update</code></li>
+              <li><span class="guide-classify-prompt">"Retire a Transcodes member"</span> <span class="guide-classify-arrow">\u2192</span> <code class="cli-cmd">transcodes:delete</code></li>
+              <li><span class="guide-classify-prompt">"Push this branch to GitHub"</span> <span class="guide-classify-arrow">\u2192</span> <code class="cli-cmd">github:update</code> <span class="guide-classify-arrow">if <code>github</code> is registered</span> \xB7 otherwise <code class="cli-cmd">system:update</code></li>
+              <li><span class="guide-classify-prompt">"Delete files on my computer"</span> <span class="guide-classify-arrow">\u2192</span> <code class="cli-cmd">system:delete</code></li>
+              <li><span class="guide-classify-prompt">"Bash/Shell cat .env" / "read ~/.ssh/id_rsa"</span> <span class="guide-classify-arrow">\u2192</span> <code class="cli-cmd">system:update</code></li>
+            </ul>
+            <p class="guide-classify-note">Registered resources only. Name/description must match \u2014 if the project has no <code>google</code> / <code>slack</code> / <code>github</code> resource, that prompt is classified under <code class="cli-cmd">system</code> instead.</p>
+          </div>
+        </details>
       </div>
       <div class="rbac-legend">
         <p class="rbac-legend-title">Permission matrix</p>
@@ -1998,7 +2379,7 @@ function dashboardHtml() {
         <button type="button" class="tab" data-rbac="roles" role="tab">Roles</button>
       </div>
       <div class="rbac-pane active" id="rbac-pane-resources">
-        <p class="section-sub">Configure resources, roles, and permissions. <a href="https://app.transcodes.io/" target="_blank" rel="noopener noreferrer">Edit RBAC permissions</a></p>
+        <p class="section-sub">Configure resources, roles, and permissions. <a href="${APP_ORG_URL}" data-app-tab="rbac" target="_blank" rel="noopener noreferrer">Edit RBAC Permissions</a></p>
         <div class="rbac-table-wrap">
           <table class="rbac-table" id="resources-table">
             <thead><tr><th>Resource</th><th>Description</th></tr></thead>
@@ -2007,7 +2388,7 @@ function dashboardHtml() {
         </div>
       </div>
       <div class="rbac-pane" id="rbac-pane-roles">
-        <p class="section-sub">Select a role to view its permission matrix \xB7 <a href="https://app.transcodes.io/" target="_blank" rel="noopener noreferrer">Configure RBAC permissions</a></p>
+        <p class="section-sub">Select a role to view its permission matrix \xB7 <a href="${APP_ORG_URL}" data-app-tab="rbac" target="_blank" rel="noopener noreferrer">Edit RBAC Permissions</a></p>
         <div class="role-picker" id="role-picker"></div>
         <div id="matrix-wrap" hidden>
           <p class="list-label" id="matrix-role-label"></p>
@@ -2031,7 +2412,14 @@ function dashboardHtml() {
     </div>
   </div>
 
-  <p class="dashboard-footer">Ver ${CLI_VERSION} <code class="cli-cmd">transcodes version</code></p>
+  <p class="dashboard-footer">
+    Ver ${CLI_VERSION} <code class="cli-cmd">transcodes version</code>
+    <span aria-hidden="true">\xB7</span>
+    <a href="${TRANSCODES_GUARD_REPO_URL}" target="_blank" rel="noopener noreferrer">
+      <svg class="dashboard-footer-github-icon" viewBox="0 0 24 24" aria-hidden="true" fill="currentColor"><path d="M12 0C5.37 0 0 5.37 0 12c0 5.31 3.435 9.795 8.205 11.385.6.105.825-.255.825-.57 0-.285-.015-1.23-.015-2.235-3.015.555-3.795-.735-4.035-1.41-.135-.345-.72-1.41-1.23-1.695-.42-.225-1.02-.78-.015-.795.945-.015 1.62.87 1.845 1.23 1.08 1.815 2.805 1.305 3.495.99.105-.78.42-1.305.765-1.605-2.67-.3-5.46-1.335-5.46-5.925 0-1.305.465-2.385 1.23-3.225-.12-.3-.54-1.53.12-3.18 0 0 1.005-.315 3.3 1.23.96-.27 1.98-.405 3-.405s2.04.135 3 .405c2.295-1.56 3.3-1.23 3.3-1.23.66 1.65.24 2.88.12 3.18.765.84 1.23 1.905 1.23 3.225 0 4.605-2.805 5.625-5.475 5.925.435.375.81 1.095.81 2.22 0 1.605-.015 2.895-.015 3.3 0 .315.225.69.825.57A12.02 12.02 0 0 0 24 12c0-6.63-5.37-12-12-12z"/></svg>
+      GitHub
+    </a>
+  </p>
   <script>
     const tokenEl = document.getElementById("token");
     const labelEl = document.getElementById("label");
@@ -2043,7 +2431,8 @@ function dashboardHtml() {
     const headerProfileEl = document.getElementById("header-profile");
     const headerProfileNameEl = document.getElementById("header-profile-name");
     const headerProfileMetaEl = document.getElementById("header-profile-meta");
-    const manageAuthBtn = document.getElementById("manage-auth-btn");
+    const APP_ORG_URL = ${JSON.stringify(APP_ORG_URL)};
+    const APP_HOME_URL = ${JSON.stringify(APP_HOME_URL)};
 
     let lastStatus = { tokens: [], activeMember: null };
     let editingId = null;
@@ -2052,14 +2441,92 @@ function dashboardHtml() {
       return Array.isArray(s.tokens) && s.tokens.length > 0;
     }
 
+    function appTabToSegment(tab) {
+      if (tab === "rbac") return "permissions";
+      if (tab === "settings" || tab === "logs" || tab === "members") return tab;
+      return "members";
+    }
+
+    function appWorkspaceUrl(organizationId, projectId, tab) {
+      return (
+        APP_ORG_URL +
+        "/" +
+        encodeURIComponent(organizationId) +
+        "/project/" +
+        encodeURIComponent(projectId) +
+        "/" +
+        encodeURIComponent(appTabToSegment(tab))
+      );
+    }
+
+    function updateAppDeepLinks(s) {
+      const oid = s && s.activeMember && s.activeMember.organizationId;
+      const pid = s && s.activeMember && s.activeMember.projectId;
+      document.querySelectorAll("[data-app-tab]").forEach((a) => {
+        const tab = a.getAttribute("data-app-tab");
+        if (oid && pid && tab) {
+          a.href = appWorkspaceUrl(oid, pid, tab);
+        } else if (oid) {
+          a.href = APP_ORG_URL + "/" + encodeURIComponent(oid);
+        } else {
+          a.href = APP_ORG_URL;
+        }
+      });
+    }
+
     function updateTokenEmptyState() {
       const empty = !hasSavedTokens(lastStatus);
       headerTokenEmptyEl.hidden = !empty;
       if (empty) {
         headerProfileEl.hidden = true;
+        updateAppDeepLinks(lastStatus);
         return;
       }
       renderHeaderProfile(lastStatus);
+      updateAppDeepLinks(lastStatus);
+    }
+
+    async function openConsole() {
+      const consoleBtns = document.querySelectorAll("[data-console-open]");
+      consoleBtns.forEach((btn) => { btn.disabled = true; });
+      try {
+        const res = await fetch("/api/console/open", { method: "POST" });
+        const data = await res.json();
+        if (!res.ok) throw new Error(data.error || "Could not open auth settings");
+        if (data.browserUrl) window.open(data.browserUrl, "_blank", "noopener,noreferrer");
+        showToast("Opening auth settings in your browser", "success");
+      } catch (e) {
+        showToast(e.message || "Failed to open auth settings", "error");
+      } finally {
+        consoleBtns.forEach((btn) => { btn.disabled = false; });
+      }
+    }
+
+    function openManageTokens() {
+      const member = lastStatus && lastStatus.activeMember;
+      const oid = member && member.organizationId;
+      const pid = member && member.projectId;
+      const url =
+        oid && pid
+          ? appWorkspaceUrl(oid, pid, "members")
+          : oid
+            ? APP_ORG_URL + "/" + encodeURIComponent(oid)
+            : APP_HOME_URL;
+      window.open(url, "_blank", "noopener,noreferrer");
+    }
+
+    const guideVideoToggle = document.getElementById("guide-video-toggle");
+    const guideVideo = document.getElementById("guide-video");
+    if (guideVideoToggle && guideVideo) {
+      guideVideoToggle.addEventListener("click", () => {
+        const open = guideVideoToggle.getAttribute("aria-expanded") === "true";
+        const next = !open;
+        guideVideoToggle.setAttribute("aria-expanded", String(next));
+        guideVideo.hidden = !next;
+        guideVideoToggle.textContent = next
+          ? "Hide Intro Video"
+          : "Watch Intro Video";
+      });
     }
 
     document.querySelectorAll(".tab[data-tab]").forEach((tab) => {
@@ -2170,21 +2637,15 @@ function dashboardHtml() {
       renderTokens(lastStatus);
     }
 
-    manageAuthBtn.addEventListener("click", async () => {
-      manageAuthBtn.disabled = true;
-      try {
-        const res = await fetch("/api/console/open", { method: "POST" });
-        const data = await res.json();
-        if (!res.ok) throw new Error(data.error || "Could not open auth settings");
-        if (data.browserUrl) window.open(data.browserUrl, "_blank", "noopener,noreferrer");
-        showToast("Opening auth settings in your browser", "success");
-      } catch (e) {
-        showToast(e.message || "Failed to open auth settings", "error");
-      } finally {
-        manageAuthBtn.disabled = false;
-      }
+    document.querySelectorAll("[data-console-open]").forEach((btn) => {
+      btn.addEventListener("click", () => { openConsole(); });
     });
 
+    const manageTokensBtn = document.getElementById("manage-tokens-btn");
+    if (manageTokensBtn) {
+      manageTokensBtn.addEventListener("click", () => { openManageTokens(); });
+    }
+
     async function saveLabel(id) {
       const input = listEl.querySelector('[data-edit-input="' + id + '"]');
       const label = input ? input.value.trim() : "";
@@ -2449,7 +2910,7 @@ function dashboardHtml() {
 </body>
 </html>`;
 }
-function openBrowser2(url) {
+function openDashboardBrowser(url) {
   const opener = process.platform === "darwin" ? "open" : process.platform === "win32" ? "cmd" : "xdg-open";
   const args = process.platform === "win32" ? ["/c", "start", "", url] : [url];
   try {
@@ -2472,6 +2933,16 @@ function listen(port) {
         return;
       }
       try {
+        if (method === "GET" && url === "/health") {
+          res.writeHead(200, {
+            "Content-Type": "application/json; charset=utf-8",
+            "Cache-Control": "no-store",
+            Connection: "close",
+            "X-Transcodes-Dashboard": DASHBOARD_HEALTH_MARKER
+          });
+          res.end(JSON.stringify({ ok: true }));
+          return;
+        }
         if (method === "GET" && (url === "/" || url === "/index.html")) {
           res.writeHead(200, {
             "Content-Type": "text/html; charset=utf-8",
@@ -2594,56 +3065,68 @@ function listen(port) {
     server.listen(port, HOST, () => resolve(server));
   });
 }
-function waitForDashboardShutdown(server) {
-  return new Promise((resolve) => {
-    let shuttingDown = false;
-    let forceTimer;
-    const cleanup = () => {
-      if (forceTimer) clearTimeout(forceTimer);
-      process.removeListener("SIGINT", onSignal);
-      process.removeListener("SIGTERM", onSignal);
-    };
-    const finish = () => {
-      cleanup();
-      resolve();
-    };
-    const forceExit = () => {
-      cleanup();
-      process.stderr.write("\nForce stopping dashboard.\n");
-      process.exit(0);
-    };
-    const onSignal = () => {
-      if (shuttingDown) {
-        forceExit();
-        return;
+async function pidsListeningOnPorts(from, to) {
+  const pids = /* @__PURE__ */ new Set();
+  if (process.platform === "win32") {
+    for (let port = from; port <= to; port++) {
+      try {
+        const { stdout } = await execFileAsync(
+          "powershell",
+          [
+            "-NoProfile",
+            "-Command",
+            `(Get-NetTCPConnection -LocalPort ${port} -State Listen -ErrorAction SilentlyContinue).OwningProcess`
+          ],
+          { timeout: 5e3 }
+        );
+        for (const line of stdout.split(/\r?\n/)) {
+          const pid = Number(line.trim());
+          if (Number.isInteger(pid) && pid > 0) pids.add(pid);
+        }
+      } catch {
       }
-      shuttingDown = true;
-      process.stderr.write("\nStopping dashboard\u2026\n");
-      forceTimer = setTimeout(forceExit, 1500);
-      forceTimer.unref();
-      server.closeAllConnections?.();
-      server.close((err) => {
-        if (err) {
-          process.stderr.write(
-            `Shutdown error: ${err instanceof Error ? err.message : String(err)}
-`
-          );
-        }
-        finish();
-      });
-    };
-    process.on("SIGINT", onSignal);
-    process.on("SIGTERM", onSignal);
-  });
+    }
+    return [...pids];
+  }
+  for (let port = from; port <= to; port++) {
+    try {
+      const { stdout } = await execFileAsync(
+        "lsof",
+        ["-ti", `tcp:${port}`, "-sTCP:LISTEN"],
+        { timeout: 5e3 }
+      );
+      for (const token of stdout.trim().split(/\s+/)) {
+        const pid = Number(token);
+        if (Number.isInteger(pid) && pid > 0) pids.add(pid);
+      }
+    } catch {
+    }
+  }
+  return [...pids];
 }
-async function runDashboard(options) {
-  const preferred = options.port ?? DEFAULT_PORT;
-  let server;
+async function freePortRange(from, to) {
+  process.stdout.write(`Freeing ports ${from}\u2013${to} \u2026
+`);
+  const pids = await pidsListeningOnPorts(from, to);
+  if (pids.length === 0) {
+    process.stdout.write("  (no listeners found)\n");
+    return;
+  }
+  for (const pid of pids) {
+    try {
+      process.kill(pid, "SIGKILL");
+      process.stdout.write(`  killed pid ${pid}
+`);
+    } catch {
+    }
+  }
+}
+async function tryBindPortRange(preferred) {
   let port = preferred;
-  for (let attempt = 0; attempt < 10; attempt++) {
+  for (let attempt = 0; attempt < PORT_ATTEMPTS; attempt++) {
     try {
-      server = await listen(port);
-      break;
+      const server = await listen(port);
+      return { server, port };
     } catch (err) {
       const code = err.code;
       if (code === "EADDRINUSE") {
@@ -2653,29 +3136,1544 @@ async function runDashboard(options) {
       throw err;
     }
   }
-  if (!server) {
-    const last = preferred + 9;
+  return null;
+}
+async function serveDashboardHttp(options) {
+  const preferred = options.port ?? DEFAULT_PORT;
+  const last = preferred + PORT_ATTEMPTS - 1;
+  let bound = await tryBindPortRange(preferred);
+  if (!bound) {
+    await freePortRange(preferred, last);
+    bound = await tryBindPortRange(preferred);
+  }
+  if (!bound) {
     throw new Error(
       `could not find a free port in ${preferred}-${last} (all in use).
-  A previous dashboard is probably still running.
-  Tip: Ctrl+Z only suspends the process (port stays taken) \u2014 run \`kill %1\` or \`fg\` then Ctrl+C.
-  Free the ports and retry:
+  Stop a previous dashboard with:  transcodes stop
     macOS/Linux:  lsof -ti tcp:${preferred}-${last} | xargs kill -9
-    any platform: npx kill-port ${preferred} ${preferred + 1}  # repeat per port
   Or choose another port:  transcodes --port <N>`
     );
   }
-  const url = `http://${HOST}:${port}/`;
+  return bound;
+}
+
+// src/i18n.ts
+import fs from "fs";
+import os3 from "os";
+import path3 from "path";
+var LOCALE_FILE = path3.join(os3.homedir(), ".transcodes", "locale");
+var current = "en";
+var MESSAGES = {
+  en: {
+    installBanner: "transcodes install \u2014 set up plugins and dashboard.",
+    langTitle: "Select language / \uC5B8\uC5B4\uB97C \uC120\uD0DD\uD558\uC138\uC694:",
+    chooseKeys: "\u2191/\u2193 move \xB7 enter select",
+    platformTitle: "Please select platforms that you want to install:",
+    platformHint1: "Installing a plugin enables both its CLI and desktop app.",
+    platformInstalledApps: "Currently installed applications: {list}",
+    platformInstalledNone: "No applications are installed yet.",
+    nextStep: "Next Step \u2192",
+    platformKeys: "\u2191/\u2193 move \xB7 space select \xB7 a all/none \xB7 enter confirm \xB7 q quit/exit",
+    platformNumberedHint: 'Enter numbers to install (e.g. 1,2), "all" or Enter to install all.',
+    platformNumberedNext: 'Type {n} (or "next") for Next Step, "exit"/"q" to quit.',
+    installed: "[Installed \u2713]",
+    nothingSelected: "Nothing selected.",
+    noPlatforms: "No platforms selected \u2014 nothing to install.",
+    installing: "Installing: {list}",
+    cancelHint: "To open the dashboard later, type `transcodes`",
+    nonInteractive: "Non-interactive shell detected. Specify platforms explicitly, e.g.:",
+    loginPleaseSignIn: "Please sign in to Transcodes in your browser first.",
+    loginWaiting: "Waiting for authorization to finish\u2026",
+    loginBrowserOpenFailed: "Could not open the browser automatically. Run `transcodes login` again and complete sign-in when the browser opens.",
+    loginNoOpenHint: "Browser open was skipped (--no-open). Run `transcodes login` without --no-open to continue.",
+    tokenWhy: "The MAT is the ID card / key attached to every request to Transcodes. It verifies your identity so you can use Transcodes.",
+    tokenQuestion: "Do you have a Member Access Token (MAT) to access Transcodes?",
+    tokenYes: "Yes",
+    tokenNo: "No",
+    tokenSkip: "Skip \u2014 token already configured",
+    tokenChoose123: "Please choose 1, 2, or 3.",
+    tokenSkipLog: "Skipping token setup \u2014 using the token already configured.",
+    tokenNoIntro1: "No token yet \u2014 open the Transcodes console to create a project and issue a MAT.",
+    tokenNoIntro2: "When you return, paste the token here (or run `transcodes install` again).",
+    tokenPressEnterConsole: "Press ENTER to open the console ({url}) \u2026",
+    tokenOpening: "Opening {url} \u2026",
+    tokenSteps1: "1) After sign-in, create a new project on the dashboard.",
+    tokenSteps2: '2) Open the "Members & Tokens" tab and add a new member.',
+    tokenSteps3: "3) Generate a new token for that member, or ask your manager to get a token.",
+    tokenSteps4: "4) Paste it here.",
+    registerTitle: "\u2500\u2500 Register MAT token \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500",
+    pasteToken: "Paste your token: ",
+    tokenRequired: "Token is required.",
+    tokenRejected: "Token rejected: {err}",
+    labelPrompt: "Label (e.g. transcodes-myproject-prod): ",
+    labelRequired: "Label is required.",
+    tokenSaved: "Saved token to {path} (label={label}).",
+    tokenTooMany: "Too many invalid attempts \u2014 run `transcodes install` again later.",
+    congratsBar: "\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500",
+    congrats1: "Authenticated successfully.",
+    congrats2: "You are ready to use Transcodes.",
+    congratsBody: "Plugins are installed and authenticated successfully",
+    pressEnterDashboard: "Press ENTER to open the transcodes CLI dashboard \u2026 ",
+    installSummary: "\u2500\u2500 Install summary \u2500\u2500",
+    dashboardOpened: "Transcodes dashboard is open: {url}",
+    dashboardHowToUse: "Please read how to use Transcodes in the CLI dashboard.",
+    dashboardStopHint: "Running in the background \u2014 stop with: transcodes stop",
+    dashboardStopped: "Transcodes dashboard stopped.",
+    dashboardNotRunning: "Transcodes dashboard is not running.",
+    loginTokenSaved: "Login complete. Your Transcodes access is ready."
+  },
+  ko: {
+    installBanner: "transcodes install \u2014 \uD50C\uB7EC\uADF8\uC778\uACFC \uB300\uC2DC\uBCF4\uB4DC\uB97C \uC124\uC815\uD569\uB2C8\uB2E4.",
+    langTitle: "Select language / \uC5B8\uC5B4\uB97C \uC120\uD0DD\uD558\uC138\uC694:",
+    chooseKeys: "\u2191/\u2193 \uC774\uB3D9 \xB7 enter \uC120\uD0DD",
+    platformTitle: "\uC124\uCE58\uD560 \uD50C\uB7AB\uD3FC\uC744 \uC120\uD0DD\uD558\uC138\uC694:",
+    platformHint1: "\uD50C\uB7EC\uADF8\uC778 \uC124\uCE58 \uC2DC CLI\xB7\uB370\uC2A4\uD06C\uD1B1 \uC571\uC5D0 \uBAA8\uB450 \uC801\uC6A9\uB429\uB2C8\uB2E4.",
+    platformInstalledApps: "\uD604\uC7AC \uC124\uCE58\uB418\uC5B4 \uC788\uB294 \uC5B4\uD50C\uB9AC\uCF00\uC774\uC158: {list}",
+    platformInstalledNone: "\uC544\uC9C1 \uC124\uCE58\uB41C Application\uC774 \uC5C6\uC2B5\uB2C8\uB2E4.",
+    nextStep: "\uB2E4\uC74C \uB2E8\uACC4 \u2192",
+    platformKeys: "\u2191/\u2193 \uC774\uB3D9 \xB7 space \uC120\uD0DD \xB7 a \uC804\uCCB4 \xB7 enter \uD655\uC778 \xB7 q \uC885\uB8CC",
+    platformNumberedHint: '\uC124\uCE58\uD560 \uBC88\uD638\uB97C \uC785\uB825\uD558\uC138\uC694 (\uC608: 1,2). "all" \uB610\uB294 Enter\uBA74 \uC804\uCCB4 \uC124\uCE58.',
+    platformNumberedNext: '{n} (\uB610\uB294 "next")\uB294 \uB2E4\uC74C \uB2E8\uACC4, "exit"/"q"\uB294 \uC885\uB8CC\uC785\uB2C8\uB2E4.',
+    installed: "[\uC124\uCE58\uB428 \u2713]",
+    nothingSelected: "\uC120\uD0DD\uB41C \uD56D\uBAA9\uC774 \uC5C6\uC2B5\uB2C8\uB2E4.",
+    noPlatforms: "\uC120\uD0DD\uB41C \uD50C\uB7AB\uD3FC\uC774 \uC5C6\uC5B4 \uC124\uCE58\uB97C \uAC74\uB108\uB701\uB2C8\uB2E4.",
+    installing: "\uC124\uCE58 \uC911: {list}",
+    cancelHint: "\uB098\uC911\uC5D0 \uB300\uC2DC\uBCF4\uB4DC\uB97C \uC5F4\uB824\uBA74 `transcodes`\uB97C \uC785\uB825\uD558\uC138\uC694",
+    nonInteractive: "\uBE44\uB300\uD654\uD615 \uC178\uC785\uB2C8\uB2E4. \uD50C\uB7AB\uD3FC\uC744 \uC9C1\uC811 \uC9C0\uC815\uD558\uC138\uC694. \uC608:",
+    loginPleaseSignIn: "\uBA3C\uC800 \uBE0C\uB77C\uC6B0\uC800\uC5D0\uC11C Transcodes\uC5D0 \uB85C\uADF8\uC778\uD574 \uC8FC\uC138\uC694.",
+    loginWaiting: "\uC2B9\uC778 \uC644\uB8CC\uB97C \uAE30\uB2E4\uB9AC\uB294 \uC911\u2026",
+    loginBrowserOpenFailed: "\uBE0C\uB77C\uC6B0\uC800\uB97C \uC790\uB3D9\uC73C\uB85C \uC5F4\uC9C0 \uBABB\uD588\uC2B5\uB2C8\uB2E4. `transcodes login`\uC744 \uB2E4\uC2DC \uC2E4\uD589\uD55C \uB4A4, \uC5F4\uB9B0 \uBE0C\uB77C\uC6B0\uC800\uC5D0\uC11C \uB85C\uADF8\uC778\uC744 \uC644\uB8CC\uD574 \uC8FC\uC138\uC694.",
+    loginNoOpenHint: "\uBE0C\uB77C\uC6B0\uC800 \uC790\uB3D9 \uC5F4\uAE30\uAC00 \uAC74\uB108\uB6F0\uC5B4\uC84C\uC2B5\uB2C8\uB2E4 (--no-open). `--no-open` \uC5C6\uC774 `transcodes login`\uC744 \uB2E4\uC2DC \uC2E4\uD589\uD574 \uC8FC\uC138\uC694.",
+    tokenWhy: "MAT\uB294 Transcodes\uC5D0 \uC694\uCCAD\uD560 \uB54C \uAC19\uC774 \uCCA8\uBD80\uB418\uB294 ID Card / Key\uC785\uB2C8\uB2E4. Transcodes\uB97C \uC774\uC6A9\uD558\uAE30 \uC704\uD574 \uC2E0\uC6D0\uC744 \uD655\uC778\uD558\uB294 \uB370 \uD544\uC694\uD569\uB2C8\uB2E4.",
+    tokenQuestion: "Transcodes \uC5D0 \uC811\uC18D\uD558\uAE30 \uC704\uD55C Member Access Token(MAT)\uC774 \uC788\uB098\uC694?",
+    tokenYes: "\uC608",
+    tokenNo: "\uC544\uB2C8\uC624",
+    tokenSkip: "\uAC74\uB108\uB6F0\uAE30 \u2014 \uD1A0\uD070\uC774 \uC774\uBBF8 \uC124\uC815\uB418\uC5B4 \uC788\uC74C",
+    tokenChoose123: "1, 2, \uB610\uB294 3\uC744 \uC120\uD0DD\uD558\uC138\uC694.",
+    tokenSkipLog: "\uD1A0\uD070 \uC124\uC815\uC744 \uAC74\uB108\uB701\uB2C8\uB2E4 \u2014 \uC774\uBBF8 \uC124\uC815\uB41C \uD1A0\uD070\uC744 \uC0AC\uC6A9\uD569\uB2C8\uB2E4.",
+    tokenNoIntro1: "\uD1A0\uD070\uC774 \uC5C6\uC2B5\uB2C8\uB2E4 \u2014 Transcodes \uCF58\uC194\uC5D0\uC11C \uD504\uB85C\uC81D\uD2B8\uB97C \uB9CC\uB4E4\uACE0 MAT\uB97C \uBC1C\uAE09\uD558\uC138\uC694.",
+    tokenNoIntro2: "\uB3CC\uC544\uC628 \uB4A4 \uC5EC\uAE30\uC5D0 \uD1A0\uD070\uC744 \uBD99\uC5EC\uB123\uAC70\uB098 `transcodes install`\uC744 \uB2E4\uC2DC \uC2E4\uD589\uD558\uC138\uC694.",
+    tokenPressEnterConsole: "ENTER\uB97C \uB204\uB974\uBA74 \uCF58\uC194\uC744 \uC5FD\uB2C8\uB2E4 ({url}) \u2026",
+    tokenOpening: "{url} \uC5EC\uB294 \uC911 \u2026",
+    tokenSteps1: "1) \uB85C\uADF8\uC778 \uD6C4 \uB300\uC2DC\uBCF4\uB4DC\uC5D0\uC11C \uC0C8 \uD504\uB85C\uC81D\uD2B8\uB97C \uB9CC\uB4DC\uC138\uC694.",
+    tokenSteps2: '2) "Members & Tokens" \uD0ED\uC5D0\uC11C \uBA64\uBC84\uB97C \uCD94\uAC00\uD558\uC138\uC694.',
+    tokenSteps3: "3) \uD574\uB2F9 \uBA64\uBC84\uC758 \uD1A0\uD070\uC744 \uBC1C\uAE09\uD558\uAC70\uB098, \uAD00\uB9AC\uC790\uC5D0\uAC8C \uD1A0\uD070\uC744 \uC694\uCCAD\uD558\uC138\uC694.",
+    tokenSteps4: "4) \uC5EC\uAE30\uC5D0 \uBD99\uC5EC\uB123\uC73C\uC138\uC694.",
+    registerTitle: "\u2500\u2500 MAT \uD1A0\uD070 \uB4F1\uB85D \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500",
+    pasteToken: "\uD1A0\uD070\uC744 \uBD99\uC5EC\uB123\uC73C\uC138\uC694: ",
+    tokenRequired: "\uD1A0\uD070\uC774 \uD544\uC694\uD569\uB2C8\uB2E4.",
+    tokenRejected: "\uD1A0\uD070\uC774 \uAC70\uBD80\uB418\uC5C8\uC2B5\uB2C8\uB2E4: {err}",
+    labelPrompt: "\uB77C\uBCA8 (\uC608: transcodes-myproject-prod): ",
+    labelRequired: "\uB77C\uBCA8\uC774 \uD544\uC694\uD569\uB2C8\uB2E4.",
+    tokenSaved: "\uD1A0\uD070\uC744 {path}\uC5D0 \uC800\uC7A5\uD588\uC2B5\uB2C8\uB2E4 (label={label}).",
+    tokenTooMany: "\uC798\uBABB\uB41C \uC785\uB825\uC774 \uB108\uBB34 \uB9CE\uC2B5\uB2C8\uB2E4 \u2014 \uB098\uC911\uC5D0 `transcodes install`\uC744 \uB2E4\uC2DC \uC2E4\uD589\uD558\uC138\uC694.",
+    congratsBar: "\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500",
+    congrats1: "Authenticated successfully.",
+    congrats2: "\uC774\uC81C Transcodes\uB97C \uC0AC\uC6A9\uD560 \uC218 \uC788\uC2B5\uB2C8\uB2E4.",
+    congratsBody: "\uC124\uC815\uC774 \uC644\uB8CC\uB418\uC5C8\uC2B5\uB2C8\uB2E4.",
+    pressEnterDashboard: "ENTER\uB97C \uB204\uB974\uBA74 transcodes CLI \uB300\uC2DC\uBCF4\uB4DC\uB97C \uC5FD\uB2C8\uB2E4 \u2026 ",
+    installSummary: "\u2500\u2500 \uC124\uCE58 \uC694\uC57D \u2500\u2500",
+    dashboardOpened: "Transcodes \uB300\uC2DC\uBCF4\uB4DC\uAC00 \uC5F4\uB838\uC2B5\uB2C8\uB2E4: {url}",
+    dashboardHowToUse: "CLI \uB300\uC2DC\uBCF4\uB4DC\uC5D0\uC11C \uC0AC\uC6A9 \uBC29\uBC95\uC744 \uC77D\uC5B4\uBCF4\uC2DC\uAE30 \uBC14\uB78D\uB2C8\uB2E4.",
+    dashboardStopHint: "\uBC31\uADF8\uB77C\uC6B4\uB4DC\uC5D0\uC11C \uC2E4\uD589 \uC911 \u2014 \uC885\uB8CC: transcodes stop",
+    dashboardStopped: "Transcodes \uB300\uC2DC\uBCF4\uB4DC\uB97C \uC885\uB8CC\uD588\uC2B5\uB2C8\uB2E4.",
+    dashboardNotRunning: "\uC2E4\uD589 \uC911\uC778 Transcodes \uB300\uC2DC\uBCF4\uB4DC\uAC00 \uC5C6\uC2B5\uB2C8\uB2E4.",
+    loginTokenSaved: "\uB85C\uADF8\uC778\uC774 \uC644\uB8CC\uB418\uC5C8\uC2B5\uB2C8\uB2E4. \uC774\uC81C Transcodes\uB97C \uC0AC\uC6A9\uD560 \uC218 \uC788\uC2B5\uB2C8\uB2E4."
+  }
+};
+function setLocale(locale) {
+  current = locale;
+  try {
+    const dir = path3.dirname(LOCALE_FILE);
+    fs.mkdirSync(dir, { recursive: true, mode: 448 });
+    fs.writeFileSync(LOCALE_FILE, `${locale}
+`, { mode: 384 });
+  } catch {
+  }
+}
+function readSavedLocale() {
+  try {
+    const raw = fs.readFileSync(LOCALE_FILE, "utf8").trim().toLowerCase();
+    if (raw === "en" || raw === "ko") return raw;
+  } catch {
+  }
+  return null;
+}
+function t(key, vars) {
+  let s = MESSAGES[current][key] ?? MESSAGES.en[key];
+  if (vars) {
+    for (const [k, v] of Object.entries(vars)) {
+      s = s.replaceAll(`{${k}}`, String(v));
+    }
+  }
+  return s;
+}
+
+// src/dashboard-lifecycle.ts
+var DASHBOARD_MARKER = "transcodes-dashboard";
+var HEALTH_PATH = "/health";
+var execFileAsync2 = promisify2(execFile2);
+function pidFilePath() {
+  return path4.join(dataDir(), "dashboard.pid");
+}
+function sleep(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+function readPidRecord() {
+  try {
+    const raw = readFileSync2(pidFilePath(), "utf8");
+    const parsed = JSON.parse(raw);
+    if (typeof parsed.pid === "number" && Number.isInteger(parsed.pid) && parsed.pid > 0 && typeof parsed.port === "number" && Number.isInteger(parsed.port) && parsed.port > 0) {
+      return { pid: parsed.pid, port: parsed.port };
+    }
+  } catch {
+  }
+  return null;
+}
+function writePidRecord(record) {
+  mkdirSync3(dataDir(), { recursive: true });
+  writeFileSync2(pidFilePath(), `${JSON.stringify(record)}
+`, { mode: 384 });
+}
+function clearPidRecord() {
+  try {
+    unlinkSync(pidFilePath());
+  } catch {
+  }
+}
+function isProcessAlive(pid) {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function probeHealth(port) {
+  return new Promise((resolve) => {
+    const req = http.get(
+      {
+        host: DASHBOARD_HOST,
+        port,
+        path: HEALTH_PATH,
+        timeout: 500
+      },
+      (res) => {
+        const marker = res.headers["x-transcodes-dashboard"];
+        res.resume();
+        resolve(res.statusCode === 200 && marker === DASHBOARD_MARKER);
+      }
+    );
+    req.on("error", () => resolve(false));
+    req.on("timeout", () => {
+      req.destroy();
+      resolve(false);
+    });
+  });
+}
+async function findRunningDashboard(preferred) {
+  const record = readPidRecord();
+  if (record && isProcessAlive(record.pid)) {
+    if (await probeHealth(record.port)) {
+      return {
+        port: record.port,
+        url: `http://${DASHBOARD_HOST}:${record.port}/`
+      };
+    }
+  }
+  for (let i = 0; i < DASHBOARD_PORT_ATTEMPTS; i++) {
+    const port = preferred + i;
+    if (await probeHealth(port)) {
+      return { port, url: `http://${DASHBOARD_HOST}:${port}/` };
+    }
+  }
+  return null;
+}
+function spawnDaemon(port) {
+  const entry = process.argv[1];
+  if (!entry) {
+    throw new Error("cannot resolve CLI entry path to spawn dashboard daemon");
+  }
+  mkdirSync3(dataDir(), { recursive: true });
+  const logPath = path4.join(dataDir(), "dashboard.log");
+  const logFd = openSync(logPath, "a");
+  try {
+    const child = spawn3(
+      process.execPath,
+      [entry, "dashboard", "--daemon", "--port", String(port)],
+      {
+        detached: true,
+        stdio: ["ignore", logFd, logFd],
+        env: process.env
+      }
+    );
+    child.unref();
+  } finally {
+    try {
+      closeSync(logFd);
+    } catch {
+    }
+  }
+}
+async function killPortListener(port) {
+  try {
+    if (process.platform === "win32") {
+      await execFileAsync2(
+        "powershell",
+        [
+          "-NoProfile",
+          "-Command",
+          `$p=(Get-NetTCPConnection -LocalPort ${port} -State Listen -ErrorAction SilentlyContinue).OwningProcess; if($p){ Stop-Process -Id $p -Force }`
+        ],
+        { timeout: 5e3 }
+      );
+      return;
+    }
+    const { stdout } = await execFileAsync2(
+      "lsof",
+      ["-ti", `tcp:${port}`, "-sTCP:LISTEN"],
+      { timeout: 5e3 }
+    );
+    for (const token of stdout.trim().split(/\s+/)) {
+      const pid = Number(token);
+      if (Number.isInteger(pid) && pid > 0) {
+        try {
+          process.kill(pid, "SIGKILL");
+        } catch {
+        }
+      }
+    }
+  } catch {
+  }
+}
+async function serveDashboard(options) {
+  const preferred = options.port ?? DEFAULT_DASHBOARD_PORT;
+  const bound = await serveDashboardHttp({ port: preferred });
+  writePidRecord({ pid: process.pid, port: bound.port });
+  const cleanup = () => clearPidRecord();
+  process.once("exit", cleanup);
+  await new Promise((resolve) => {
+    let shuttingDown = false;
+    const onSignal = () => {
+      if (shuttingDown) {
+        cleanup();
+        process.exit(0);
+      }
+      shuttingDown = true;
+      bound.server.closeAllConnections?.();
+      bound.server.close(() => {
+        cleanup();
+        resolve();
+      });
+      setTimeout(() => {
+        cleanup();
+        process.exit(0);
+      }, 1500).unref();
+    };
+    process.on("SIGINT", onSignal);
+    process.on("SIGTERM", onSignal);
+  });
+}
+async function killRunningDashboard(preferred) {
+  const record = readPidRecord();
+  if (record && isProcessAlive(record.pid)) {
+    try {
+      process.kill(record.pid, "SIGTERM");
+      for (let i = 0; i < 20; i++) {
+        await sleep(100);
+        if (!isProcessAlive(record.pid)) break;
+      }
+      if (isProcessAlive(record.pid)) {
+        process.kill(record.pid, "SIGKILL");
+      }
+    } catch {
+    }
+  }
+  for (let i = 0; i < DASHBOARD_PORT_ATTEMPTS; i++) {
+    const port = preferred + i;
+    if (!await probeHealth(port)) continue;
+    await killPortListener(port);
+  }
+  clearPidRecord();
+}
+async function ensureDashboard(options) {
+  const preferred = options.port ?? DEFAULT_DASHBOARD_PORT;
+  const open = options.open !== false;
+  await killRunningDashboard(preferred);
+  spawnDaemon(preferred);
+  let running = null;
+  for (let i = 0; i < 50; i++) {
+    await sleep(100);
+    running = await findRunningDashboard(preferred);
+    if (running) break;
+  }
+  if (!running) {
+    throw new Error(
+      `could not start dashboard on ${DASHBOARD_HOST}:${preferred}.
+  Check ${path4.join(dataDir(), "dashboard.log")} or run:
+    transcodes dashboard --daemon --port ${preferred}
+  Stop a stuck instance with:  transcodes stop`
+    );
+  }
   process.stdout.write(
-    `Transcodes dashboard running at ${url}
-  Config file: ${transcodesConfigFile()}
-  Press Ctrl+C to stop
+    `${t("dashboardOpened", { url: running.url })}
+  ${t("dashboardHowToUse")}
+  ${t("dashboardStopHint")}
 `
   );
-  if (options.open !== false) {
-    openBrowser2(url);
+  if (open) {
+    openDashboardBrowser(running.url);
+  }
+}
+async function stopDashboard() {
+  const preferred = readPidRecord()?.port ?? DEFAULT_DASHBOARD_PORT;
+  const record = readPidRecord();
+  const wasRunning = record !== null && isProcessAlive(record.pid) || await findRunningDashboard(preferred) !== null;
+  await killRunningDashboard(preferred);
+  process.stdout.write(
+    wasRunning ? `${t("dashboardStopped")}
+` : `${t("dashboardNotRunning")}
+`
+  );
+}
+
+// src/install.ts
+import { spawn as spawn5 } from "child_process";
+import fs2 from "fs";
+import os5 from "os";
+import path5 from "path";
+import { createInterface, moveCursor } from "readline";
+
+// src/login.ts
+import { spawn as spawn4 } from "child_process";
+import { createHash as createHash2, randomBytes } from "crypto";
+import os4 from "os";
+var REQUEST_TIMEOUT_MS2 = 3e4;
+var TransientPollError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "TransientPollError";
+  }
+};
+var FatalPollError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "FatalPollError";
+  }
+};
+function parseOptions(args) {
+  let label = `transcodes-${os4.hostname() || "cli"}`;
+  let open = true;
+  for (let i = 0; i < args.length; i++) {
+    const arg = args[i];
+    if (arg === "-l" || arg === "--label") {
+      const value = args[++i]?.trim();
+      if (!value) {
+        throw new Error("missing label. Usage: transcodes login [-l <label>]");
+      }
+      label = value;
+    } else if (arg === "--no-open") {
+      open = false;
+    } else {
+      throw new Error(
+        `unknown flag "${arg}". Usage: transcodes login [-l <label>] [--no-open]`
+      );
+    }
+  }
+  return { label, open };
+}
+function openBrowser2(url) {
+  const opener = process.platform === "darwin" ? "open" : process.platform === "win32" ? "cmd" : "xdg-open";
+  const args = process.platform === "win32" ? ["/c", "start", "", url] : [url];
+  try {
+    const child = spawn4(opener, args, { stdio: "ignore", detached: true });
+    child.on("error", () => {
+    });
+    child.unref();
+    return true;
+  } catch {
+    return false;
+  }
+}
+function apiBaseV1() {
+  const backend = process.env.TRANSCODES_BACKEND_URL?.trim() || DEFAULT_BACKEND_URL;
+  return `${backend.replace(/\/$/, "")}/v1`;
+}
+async function postJson(path6, body) {
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), REQUEST_TIMEOUT_MS2);
+  try {
+    const response = await fetch(`${apiBaseV1()}${path6}`, {
+      method: "POST",
+      headers: {
+        Accept: "application/json",
+        "Content-Type": "application/json"
+      },
+      body: JSON.stringify(body),
+      signal: controller.signal
+    });
+    let envelope;
+    try {
+      envelope = await response.json();
+    } catch {
+      throw new TransientPollError(
+        `CLI authorization response was not JSON (${response.status})`
+      );
+    }
+    return { status: response.status, envelope };
+  } catch (error) {
+    if (error instanceof TransientPollError) throw error;
+    const aborted = error instanceof Error && (error.name === "AbortError" || error.name === "TimeoutError");
+    throw new TransientPollError(
+      aborted ? "CLI authorization request timed out" : error instanceof Error ? error.message : "CLI authorization request failed"
+    );
+  } finally {
+    clearTimeout(timer);
+  }
+}
+async function createSession(body) {
+  const { status, envelope } = await postJson(
+    "/auth/temp-session/cli/session",
+    body
+  );
+  const value = envelope.payload?.[0];
+  if (status < 200 || status >= 300 || !value) {
+    throw new Error(
+      envelope.message || envelope.error || `CLI authorization request failed (${status})`
+    );
+  }
+  return value;
+}
+async function pollToken(params) {
+  const { status, envelope } = await postJson(
+    `/auth/temp-session/cli/session/${encodeURIComponent(params.sid)}/token`,
+    { code_verifier: params.verifier }
+  );
+  if (status === 404) {
+    throw new FatalPollError(
+      envelope.message || envelope.error || "CLI authorization session expired or was already used"
+    );
+  }
+  if (status === 403) {
+    throw new FatalPollError(
+      envelope.message || envelope.error || "CLI authorization verifier was rejected"
+    );
+  }
+  if (status >= 500 || status === 0) {
+    throw new TransientPollError(
+      envelope.message || envelope.error || `CLI authorization temporary failure (${status})`
+    );
+  }
+  const value = envelope.payload?.[0];
+  if (status < 200 || status >= 300 || !value) {
+    throw new FatalPollError(
+      envelope.message || envelope.error || `CLI authorization request failed (${status})`
+    );
+  }
+  return value;
+}
+function delay(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+async function waitForToken(params) {
+  const deadline = new Date(params.expiresAt).getTime();
+  if (!Number.isFinite(deadline)) {
+    throw new Error("CLI authorization session has an invalid expiry");
+  }
+  while (Date.now() < deadline) {
+    try {
+      const result = await pollToken({
+        sid: params.sid,
+        verifier: params.verifier
+      });
+      if (result.status === "authorized" && result.token) return result;
+    } catch (error) {
+      if (error instanceof FatalPollError) throw error;
+    }
+    await delay(Math.max(1, params.interval) * 1e3);
+  }
+  throw new Error("CLI authorization timed out");
+}
+async function cmdLogin(args) {
+  const options = parseOptions(args);
+  const verifier = randomBytes(32).toString("base64url");
+  const challenge = createHash2("sha256").update(verifier).digest("base64url");
+  const session = await createSession({
+    code_challenge: challenge,
+    label: options.label
+  });
+  process.stdout.write(`${t("loginPleaseSignIn")}
+`);
+  if (!options.open) {
+    process.stdout.write(`${t("loginNoOpenHint")}
+`);
+  } else if (!openBrowser2(session.url)) {
+    process.stdout.write(`${t("loginBrowserOpenFailed")}
+`);
+  } else {
+    process.stdout.write(`${t("loginWaiting")}
+`);
   }
-  await waitForDashboardShutdown(server);
+  const result = await waitForToken({
+    sid: session.sid,
+    verifier,
+    expiresAt: session.expires_at,
+    interval: session.interval
+  });
+  const token = result.token;
+  if (!token) throw new Error("CLI authorization completed without a token");
+  const label = result.label || options.label;
+  parseMemberAccessToken(token);
+  writeTokenToFile(token, label);
+  process.stdout.write(`${t("loginTokenSaved")}
+`);
+}
+
+// src/install.ts
+var REPO_SLUG = "transcodings/transcodes-guard";
+var REPO_GIT_URL = "https://github.com/transcodings/transcodes-guard.git";
+var MARKETPLACE = "bigstrider";
+var PLUGIN_NAME = "transcodes-guard";
+var MIN_NODE_MAJOR = 20;
+var PLATFORMS = [
+  { id: "claude", label: "Claude Code" },
+  { id: "codex", label: "ChatGPT (Codex)" },
+  {
+    id: "cursor",
+    label: "Cursor",
+    installerRel: "plugins/cursor/install.mjs"
+  },
+  {
+    id: "antigravity",
+    label: "Antigravity",
+    installerRel: "plugins/antigravity/install.mjs"
+  }
+];
+function log(line = "") {
+  process.stdout.write(`${line}
+`);
+}
+function clearScreen() {
+  process.stdout.write("\x1B[2J\x1B[H");
+}
+function displayWidth(s) {
+  let w = 0;
+  for (const ch of s) {
+    const code = ch.codePointAt(0) ?? 0;
+    if (code >= 4352 && code <= 4447 || code >= 11904 && code <= 42191 || code >= 44032 && code <= 55203 || code >= 63744 && code <= 64255 || code >= 65040 && code <= 65135 || code >= 65280 && code <= 65376 || code >= 65504 && code <= 65510) {
+      w += 2;
+    } else {
+      w += 1;
+    }
+  }
+  return w;
+}
+function physicalRowCount(lines) {
+  const cols = Math.max(1, process.stdout.columns || 80);
+  let rows = 0;
+  for (const line of lines) {
+    const w = Math.max(1, displayWidth(line));
+    rows += Math.ceil(w / cols);
+  }
+  return rows;
+}
+function redrawBlock(stdout, lines, previousPhysicalRows) {
+  if (previousPhysicalRows > 0) {
+    moveCursor(stdout, 0, -previousPhysicalRows);
+    stdout.write("\x1B[J");
+  }
+  stdout.write(`${lines.map((line) => `${line}\x1B[K`).join("\n")}
+`);
+  return physicalRowCount(lines);
+}
+function isTty() {
+  return Boolean(process.stdin.isTTY && process.stdout.isTTY);
+}
+function openUrl(url) {
+  const opener = process.platform === "darwin" ? "open" : process.platform === "win32" ? "cmd" : "xdg-open";
+  const args = process.platform === "win32" ? ["/c", "start", "", url] : [url];
+  try {
+    const child = spawn5(opener, args, { stdio: "ignore", detached: true });
+    child.on("error", () => {
+    });
+    child.unref();
+  } catch {
+  }
+}
+function refreshPathHints() {
+  const home = os5.homedir();
+  const extras = [
+    path5.join(home, ".local", "bin"),
+    path5.join(home, ".claude", "bin"),
+    path5.join(home, ".codex", "bin"),
+    path5.join(home, ".cursor", "bin"),
+    path5.join(home, ".gemini", "bin"),
+    path5.join(home, "bin"),
+    "/usr/local/bin",
+    "/opt/homebrew/bin"
+  ];
+  const current2 = process.env.PATH ?? "";
+  const parts = current2.split(path5.delimiter).filter(Boolean);
+  const merged = [...extras.filter((p) => !parts.includes(p)), ...parts];
+  process.env.PATH = merged.join(path5.delimiter);
+}
+function commandExists(cmd) {
+  return new Promise((resolve) => {
+    const child = process.platform === "win32" ? spawn5("where", [cmd], { stdio: "ignore" }) : spawn5("sh", ["-c", `command -v ${JSON.stringify(cmd)}`], {
+      stdio: "ignore"
+    });
+    child.on("error", () => resolve(false));
+    child.on("close", (code) => resolve(code === 0));
+  });
+}
+async function anyCommandExists(cmds) {
+  for (const cmd of cmds) {
+    if (await commandExists(cmd)) return cmd;
+  }
+  return null;
+}
+function run(cmd, args) {
+  return new Promise((resolve) => {
+    log(`
+$ ${cmd} ${args.join(" ")}`);
+    const child = spawn5(cmd, args, { stdio: "inherit", env: process.env });
+    child.on("error", (err) => {
+      log(`  (failed to start: ${err.message})`);
+      resolve(1);
+    });
+    child.on("close", (code) => resolve(code ?? 1));
+  });
+}
+function runShell(script) {
+  return new Promise((resolve) => {
+    log(`
+$ ${script}`);
+    const child = spawn5("sh", ["-c", script], {
+      stdio: "inherit",
+      env: process.env
+    });
+    child.on("error", (err) => {
+      log(`  (failed to start: ${err.message})`);
+      resolve(1);
+    });
+    child.on("close", (code) => resolve(code ?? 1));
+  });
+}
+async function runAll(steps) {
+  for (const step of steps) {
+    const code = await run(step.cmd, step.args);
+    if (code !== 0) return false;
+  }
+  return true;
+}
+function nodeMajor(version = process.versions.node) {
+  const major = Number(version.split(".")[0]);
+  return Number.isFinite(major) ? major : 0;
+}
+async function ensureNode() {
+  log("\u2500\u2500 Prerequisites \u2500\u2500");
+  const major = nodeMajor();
+  const onPath = await commandExists("node");
+  if (major >= MIN_NODE_MAJOR && onPath) {
+    log(`  \u2713 Node.js v${process.versions.node} (>= ${MIN_NODE_MAJOR})`);
+    return true;
+  }
+  if (major >= MIN_NODE_MAJOR && !onPath) {
+    log(
+      `  ! Node.js v${process.versions.node} is running this CLI but \`node\` is not on PATH.`
+    );
+    log("    Prepending common bin dirs and continuing\u2026");
+    refreshPathHints();
+    if (await commandExists("node")) {
+      log("  \u2713 Node.js now on PATH");
+      return true;
+    }
+  }
+  log(
+    major > 0 && major < MIN_NODE_MAJOR ? `  Node.js v${process.versions.node} is below ${MIN_NODE_MAJOR} \u2014 installing LTS\u2026` : "  Node.js not found \u2014 installing LTS\u2026"
+  );
+  let installed = false;
+  if (process.platform === "darwin" && await commandExists("brew")) {
+    installed = await run("brew", ["install", "node"]) === 0;
+  }
+  if (!installed && await commandExists("nvm")) {
+    installed = await runShell("nvm install --lts && nvm use --lts") === 0;
+  }
+  if (!installed) {
+    const nvmInstall = [
+      "curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.3/install.sh | bash",
+      'export NVM_DIR="$HOME/.nvm"',
+      '[ -s "$NVM_DIR/nvm.sh" ] && . "$NVM_DIR/nvm.sh"',
+      "nvm install --lts",
+      'nvm alias default "lts/*"'
+    ].join(" && ");
+    installed = await runShell(nvmInstall) === 0;
+  }
+  refreshPathHints();
+  const nvmDefaultBin = path5.join(os5.homedir(), ".nvm", "versions", "node");
+  if (fs2.existsSync(nvmDefaultBin)) {
+    try {
+      const versions = fs2.readdirSync(nvmDefaultBin).filter((v) => v.startsWith("v")).sort().reverse();
+      if (versions[0]) {
+        const bin = path5.join(nvmDefaultBin, versions[0], "bin");
+        process.env.PATH = `${bin}${path5.delimiter}${process.env.PATH ?? ""}`;
+      }
+    } catch {
+    }
+  }
+  if (await commandExists("node")) {
+    const ver = await new Promise((resolve) => {
+      const child = spawn5("node", ["-v"], {
+        stdio: ["ignore", "pipe", "ignore"]
+      });
+      let out = "";
+      child.stdout?.on("data", (c) => {
+        out += c.toString();
+      });
+      child.on("close", () => resolve(out.trim().replace(/^v/, "")));
+      child.on("error", () => resolve(""));
+    });
+    const installedMajor = nodeMajor(ver || "0");
+    if (installedMajor >= MIN_NODE_MAJOR) {
+      log(`  \u2713 Node.js v${ver} installed`);
+      return true;
+    }
+  }
+  log("");
+  log("Could not install Node.js LTS automatically.");
+  log(
+    `Install Node.js ${MIN_NODE_MAJOR}+ from https://nodejs.org then re-run:`
+  );
+  log("  transcodes install");
+  openUrl("https://nodejs.org");
+  return false;
+}
+var HOST_CLIS = {
+  claude: {
+    binaries: ["claude"],
+    label: "Claude Code CLI (`claude`)",
+    install: async () => {
+      if (process.platform === "win32") {
+        return await run("npm", ["install", "-g", "@anthropic-ai/claude-code"]) === 0;
+      }
+      const native = await runShell("curl -fsSL https://claude.ai/install.sh | bash") === 0;
+      if (native) return true;
+      return await run("npm", ["install", "-g", "@anthropic-ai/claude-code"]) === 0;
+    }
+  },
+  codex: {
+    binaries: ["codex"],
+    label: "Codex CLI (`codex`)",
+    install: async () => {
+      if (process.platform !== "win32") {
+        const native = await runShell(
+          "curl -fsSL https://chatgpt.com/codex/install.sh | sh"
+        ) === 0;
+        if (native) return true;
+      }
+      return await run("npm", ["install", "-g", "@openai/codex"]) === 0;
+    }
+  },
+  cursor: {
+    // Docs: `agent` is primary; `cursor-agent` is the backward-compatible name.
+    binaries: ["cursor-agent", "agent"],
+    label: "Cursor Agent CLI (`cursor-agent` / `agent`)",
+    install: async () => {
+      if (process.platform === "win32") {
+        return await runShell(
+          `powershell -NoProfile -Command "irm 'https://cursor.com/install?win32=true' | iex"`
+        ) === 0;
+      }
+      return await runShell("curl https://cursor.com/install -fsS | bash") === 0;
+    }
+  },
+  antigravity: {
+    binaries: ["agy"],
+    label: "Antigravity CLI (`agy`)",
+    install: async () => await runShell(
+      "curl -fsSL https://antigravity.google/cli/install.sh | bash"
+    ) === 0
+  }
+};
+async function ensureHostCli(id) {
+  const spec = HOST_CLIS[id];
+  refreshPathHints();
+  const found = await anyCommandExists(spec.binaries);
+  if (found) {
+    log(`  \u2713 ${spec.label} found (\`${found}\`)`);
+    return true;
+  }
+  log(`  ${spec.label} not found \u2014 installing\u2026`);
+  const ok = await spec.install();
+  refreshPathHints();
+  const after = await anyCommandExists(spec.binaries);
+  if (ok && after) {
+    log(`  \u2713 ${spec.label} installed (\`${after}\`)`);
+    return true;
+  }
+  log(`  \u2717 Failed to install ${spec.label}.`);
+  log("    Install it manually, then re-run `transcodes install`.");
+  return false;
+}
+function promptLine(question) {
+  return new Promise((resolve) => {
+    const rl = createInterface({
+      input: process.stdin,
+      output: process.stdout
+    });
+    rl.question(question, (answer) => {
+      rl.close();
+      resolve(answer);
+    });
+  });
+}
+function safeExists(p) {
+  try {
+    return fs2.existsSync(p);
+  } catch {
+    return false;
+  }
+}
+function dirHasMatch(dir, needles) {
+  try {
+    return fs2.readdirSync(dir).some((entry) => needles.some((n) => entry.includes(n)));
+  } catch {
+    return false;
+  }
+}
+function fileHas(file, needle) {
+  try {
+    return fs2.readFileSync(file, "utf8").includes(needle);
+  } catch {
+    return false;
+  }
+}
+function isPluginInstalled(id) {
+  const home = os5.homedir();
+  switch (id) {
+    case "cursor":
+      return safeExists(
+        path5.join(home, ".cursor", "plugins", "local", "transcodes-guard")
+      );
+    case "antigravity":
+      return safeExists(
+        path5.join(home, ".gemini", "config", "plugins", "transcodes-guard")
+      );
+    case "claude":
+      return dirHasMatch(path5.join(home, ".claude", "plugins"), [
+        "transcodes-guard",
+        "bigstrider"
+      ]) || dirHasMatch(path5.join(home, ".claude", "plugins", "marketplaces"), [
+        "bigstrider",
+        "transcodes-guard"
+      ]) || fileHas(
+        path5.join(home, ".claude", "settings.json"),
+        "transcodes-guard"
+      ) || fileHas(path5.join(home, ".claude.json"), "transcodes-guard");
+    case "codex":
+      return dirHasMatch(path5.join(home, ".codex", "plugins"), [
+        "transcodes-guard",
+        "bigstrider"
+      ]) || fileHas(path5.join(home, ".codex", "config.toml"), "transcodes-guard") || fileHas(path5.join(home, ".codex", "config.json"), "transcodes-guard");
+  }
+}
+function commandExistsSync(cmd) {
+  const pathEnv = process.env.PATH ?? "";
+  const exts = process.platform === "win32" ? [".exe", ".cmd", ".bat", ".ps1", ""] : [""];
+  for (const dir of pathEnv.split(path5.delimiter)) {
+    if (!dir) continue;
+    for (const ext of exts) {
+      if (safeExists(path5.join(dir, `${cmd}${ext}`))) return true;
+    }
+  }
+  return false;
+}
+function hostDesktopPresent(id) {
+  const home = os5.homedir();
+  if (process.platform === "darwin") {
+    const candidates = {
+      claude: [
+        "/Applications/Claude.app",
+        "/Applications/Claude Code.app",
+        path5.join(home, "Applications", "Claude.app"),
+        path5.join(home, "Applications", "Claude Code.app")
+      ],
+      cursor: [
+        "/Applications/Cursor.app",
+        path5.join(home, "Applications", "Cursor.app")
+      ],
+      codex: [
+        "/Applications/ChatGPT.app",
+        "/Applications/Codex.app",
+        path5.join(home, "Applications", "ChatGPT.app"),
+        path5.join(home, "Applications", "Codex.app")
+      ],
+      antigravity: [
+        "/Applications/Antigravity.app",
+        "/Applications/Google Antigravity.app",
+        path5.join(home, "Applications", "Antigravity.app"),
+        path5.join(home, "Applications", "Google Antigravity.app")
+      ]
+    };
+    return candidates[id].some(safeExists);
+  }
+  if (process.platform === "win32") {
+    const local = process.env.LOCALAPPDATA ?? "";
+    const prog = process.env.PROGRAMFILES ?? "C:\\Program Files";
+    const candidates = {
+      claude: [
+        path5.join(local, "Programs", "Claude", "Claude.exe"),
+        path5.join(local, "AnthropicClaude", "claude.exe")
+      ],
+      cursor: [
+        path5.join(local, "Programs", "cursor", "Cursor.exe"),
+        path5.join(prog, "Cursor", "Cursor.exe")
+      ],
+      codex: [
+        path5.join(local, "Programs", "ChatGPT", "ChatGPT.exe"),
+        path5.join(local, "Programs", "codex", "Codex.exe")
+      ],
+      antigravity: [
+        path5.join(local, "Programs", "Antigravity", "Antigravity.exe"),
+        path5.join(local, "Programs", "Google Antigravity", "Antigravity.exe")
+      ]
+    };
+    return candidates[id].some(safeExists);
+  }
+  return false;
+}
+function isHostAppInstalled(id) {
+  refreshPathHints();
+  if (HOST_CLIS[id].binaries.some(commandExistsSync)) return true;
+  return hostDesktopPresent(id);
+}
+function platformShortName(id) {
+  switch (id) {
+    case "claude":
+      return "Claude";
+    case "codex":
+      return "ChatGPT";
+    case "cursor":
+      return "Cursor";
+    case "antigravity":
+      return "Antigravity";
+  }
+}
+function installedAppsHint() {
+  const names = PLATFORMS.filter((p) => isHostAppInstalled(p.id)).map(
+    (p) => platformShortName(p.id)
+  );
+  if (names.length === 0) return t("platformInstalledNone");
+  return t("platformInstalledApps", { list: names.join(", ") });
+}
+function renderMenu() {
+  log("");
+  log(t("platformTitle"));
+  log(t("platformHint1"));
+  log(installedAppsHint());
+  log("");
+  PLATFORMS.forEach((p, i) => {
+    const onDevice = isHostAppInstalled(p.id);
+    const dot = onDevice ? "\u25CF" : "\u25CB";
+    const mark = onDevice ? `   ${t("installed")}` : "";
+    log(`  ${i + 1}. ${dot} ${p.label}${mark}`);
+  });
+  log(`  ${PLATFORMS.length + 1}. ${t("nextStep")}`);
+  log("");
+  log(t("platformNumberedHint"));
+  log(t("platformNumberedNext", { n: String(PLATFORMS.length + 1) }));
+}
+async function promptMenu() {
+  const nextNum = String(PLATFORMS.length + 1);
+  for (; ; ) {
+    const answer = (await promptLine("> ")).trim().toLowerCase();
+    if (answer === "exit" || answer === "q") return { kind: "cancel" };
+    if (answer === "next" || answer === "n" || answer === nextNum) {
+      return { kind: "next" };
+    }
+    if (answer === "" || answer === "all" || answer === "a") {
+      return { kind: "install", ids: PLATFORMS.map((p) => p.id) };
+    }
+    const tokens = answer.split(/[\s,]+/).filter(Boolean);
+    const ids = [];
+    let invalid = false;
+    for (const token of tokens) {
+      const num = Number(token);
+      if (!Number.isInteger(num) || num < 1 || num > PLATFORMS.length) {
+        log(
+          `  Invalid choice "${token}". Use 1\u2013${PLATFORMS.length}, ${nextNum} (Next Step), all, or exit.`
+        );
+        invalid = true;
+        break;
+      }
+      const pid = PLATFORMS[num - 1].id;
+      if (!ids.includes(pid)) ids.push(pid);
+    }
+    if (invalid) continue;
+    return { kind: "install", ids };
+  }
+}
+function supportsArrowSelect() {
+  return isTty() && typeof process.stdin.setRawMode === "function";
+}
+function arrowSelect(checked) {
+  return new Promise((resolve) => {
+    const rowCount = PLATFORMS.length + 1;
+    let cursor = 0;
+    let rendered = 0;
+    const { stdin, stdout } = process;
+    const draw = () => {
+      const lines = [];
+      lines.push(t("platformTitle"));
+      lines.push(t("platformHint1"));
+      lines.push(installedAppsHint());
+      lines.push("");
+      PLATFORMS.forEach((p, i) => {
+        const pointer = cursor === i ? "\u276F" : " ";
+        const onDevice = isHostAppInstalled(p.id);
+        const box = checked.has(p.id) ? "\u25CF" : "\u25EF";
+        const mark = onDevice ? `   ${t("installed")}` : "";
+        lines.push(`${pointer} ${box} ${p.label}${mark}`);
+      });
+      const nextPointer = cursor === PLATFORMS.length ? "\u276F" : " ";
+      lines.push(`${nextPointer}   ${t("nextStep")}`);
+      lines.push("");
+      lines.push(t("platformKeys"));
+      rendered = redrawBlock(stdout, lines, rendered);
+    };
+    const cleanup = () => {
+      stdout.write("\x1B[?25h");
+      stdin.setRawMode?.(false);
+      stdin.pause();
+      stdin.removeListener("data", onData);
+    };
+    const onData = (buf) => {
+      const key = buf.toString();
+      if (key === "" || key === "q") {
+        cleanup();
+        resolve({ kind: "cancel" });
+        return;
+      }
+      if (key === "\r" || key === "\n") {
+        cleanup();
+        if (cursor === PLATFORMS.length) {
+          resolve({ kind: "next" });
+        } else {
+          resolve({
+            kind: "install",
+            ids: PLATFORMS.filter((p) => checked.has(p.id)).map((p) => p.id)
+          });
+        }
+        return;
+      }
+      if (key === " ") {
+        if (cursor < PLATFORMS.length) {
+          const id = PLATFORMS[cursor].id;
+          if (checked.has(id)) checked.delete(id);
+          else checked.add(id);
+        }
+      } else if (key === "a") {
+        if (PLATFORMS.every((p) => checked.has(p.id))) checked.clear();
+        else for (const p of PLATFORMS) checked.add(p.id);
+      } else if (key === "\x1B[A" || key === "k") {
+        cursor = (cursor - 1 + rowCount) % rowCount;
+      } else if (key === "\x1B[B" || key === "j") {
+        cursor = (cursor + 1) % rowCount;
+      } else {
+        return;
+      }
+      draw();
+    };
+    stdin.setRawMode?.(true);
+    stdin.resume();
+    stdin.setEncoding("utf8");
+    stdin.on("data", onData);
+    stdout.write("\x1B[?25l");
+    draw();
+  });
+}
+function arrowChoose(title, options, defaultIndex = 0) {
+  return new Promise((resolve) => {
+    let cursor = Math.max(0, Math.min(defaultIndex, options.length - 1));
+    let rendered = 0;
+    const { stdin, stdout } = process;
+    const draw = () => {
+      const lines = [title];
+      options.forEach((opt, i) => {
+        const pointer = cursor === i ? "\u276F" : " ";
+        const radio = cursor === i ? "\u25C9" : "\u25EF";
+        lines.push(`${pointer} ${radio} ${opt}`);
+      });
+      lines.push("");
+      lines.push(t("chooseKeys"));
+      rendered = redrawBlock(stdout, lines, rendered);
+    };
+    const cleanup = () => {
+      stdout.write("\x1B[?25h");
+      stdin.setRawMode?.(false);
+      stdin.pause();
+      stdin.removeListener("data", onData);
+    };
+    const onData = (buf) => {
+      const key = buf.toString();
+      if (key === "") {
+        cleanup();
+        resolve(-1);
+        return;
+      }
+      if (key === "\r" || key === "\n") {
+        cleanup();
+        resolve(cursor);
+        return;
+      }
+      if (key === "\x1B[A" || key === "k") {
+        cursor = (cursor - 1 + options.length) % options.length;
+      } else if (key === "\x1B[B" || key === "j") {
+        cursor = (cursor + 1) % options.length;
+      } else {
+        return;
+      }
+      draw();
+    };
+    stdin.setRawMode?.(true);
+    stdin.resume();
+    stdin.setEncoding("utf8");
+    stdin.on("data", onData);
+    stdout.write("\x1B[?25l");
+    draw();
+  });
+}
+async function runInstalls(ids) {
+  const clonedRepoDir = await cloneRepoIfNeeded(ids);
+  const results = /* @__PURE__ */ new Map();
+  try {
+    for (const id of ids) {
+      const label = PLATFORMS.find((p) => p.id === id)?.label ?? id;
+      log(`
+\u2500\u2500 ${label} \u2500\u2500`);
+      results.set(id, await installPlatform(id, clonedRepoDir));
+    }
+  } finally {
+    if (clonedRepoDir) {
+      fs2.rmSync(clonedRepoDir, { recursive: true, force: true });
+    }
+  }
+  log(`
+${t("installSummary")}`);
+  for (const id of ids) {
+    const label = PLATFORMS.find((p) => p.id === id)?.label ?? id;
+    log(`  ${results.get(id) ? "\u2713" : "\u2717"} ${label}`);
+  }
+}
+async function installPlatform(id, clonedRepoDir) {
+  if (!await ensureHostCli(id)) return false;
+  if (id === "claude") {
+    return runAll([
+      { cmd: "claude", args: ["plugin", "marketplace", "add", REPO_SLUG] },
+      {
+        cmd: "claude",
+        args: [
+          "plugin",
+          "install",
+          `${PLUGIN_NAME}@${MARKETPLACE}`,
+          "--scope",
+          "user"
+        ]
+      }
+    ]);
+  }
+  if (id === "codex") {
+    return runAll([
+      { cmd: "codex", args: ["plugin", "marketplace", "add", REPO_SLUG] },
+      {
+        cmd: "codex",
+        args: ["plugin", "add", `${PLUGIN_NAME}@${MARKETPLACE}`]
+      }
+    ]);
+  }
+  const platform = PLATFORMS.find((p) => p.id === id);
+  if (!clonedRepoDir || !platform?.installerRel) {
+    log(`  Skipped ${platform?.label ?? id} \u2014 repo clone unavailable.`);
+    return false;
+  }
+  const installer = path5.join(clonedRepoDir, platform.installerRel);
+  if (!fs2.existsSync(installer)) {
+    log(`  Skipped ${platform.label} \u2014 installer missing at ${installer}.`);
+    return false;
+  }
+  return await run("node", [installer]) === 0;
+}
+async function cloneRepoIfNeeded(platforms) {
+  const needsClone = platforms.some(
+    (id) => PLATFORMS.find((p) => p.id === id)?.installerRel
+  );
+  if (!needsClone) return null;
+  if (!await commandExists("git")) {
+    log("\n`git` not found on PATH \u2014 cannot install Cursor / Antigravity.");
+    log("Install git and re-run, or use the one-liners from the README.");
+    return null;
+  }
+  const tmpDir = fs2.mkdtempSync(path5.join(os5.tmpdir(), "tg-install-"));
+  const ok = await run("git", ["clone", "--depth", "1", REPO_GIT_URL, tmpDir]) === 0;
+  if (!ok) {
+    fs2.rmSync(tmpDir, { recursive: true, force: true });
+    log("\nRepo clone failed \u2014 skipping Cursor / Antigravity.");
+    return null;
+  }
+  return tmpDir;
+}
+function printSetupComplete() {
+  clearScreen();
+  log(t("congratsBar"));
+  log(`  ${t("congrats1")}`);
+  log(`  ${t("congrats2")}`);
+  log(t("congratsBar"));
+  log("");
+  log(t("congratsBody"));
+  log("");
+}
+async function tokenFlow() {
+  log("");
+  try {
+    await cmdLogin([]);
+    return true;
+  } catch (error) {
+    log(`  ${error instanceof Error ? error.message : String(error)}`);
+    return false;
+  }
+}
+async function promptLocale() {
+  if (!isTty()) {
+    setLocale(readSavedLocale() ?? "en");
+    return;
+  }
+  const saved = readSavedLocale();
+  const defaultIndex = saved === "ko" ? 1 : 0;
+  const options = ["English", "\uD55C\uAD6D\uC5B4"];
+  if (supportsArrowSelect()) {
+    const idx = await arrowChoose(t("langTitle"), [...options], defaultIndex);
+    if (idx < 0) {
+      setLocale(saved ?? "en");
+      return;
+    }
+    setLocale(idx === 1 ? "ko" : "en");
+    log("");
+    return;
+  }
+  for (; ; ) {
+    log(t("langTitle"));
+    log("  1. English");
+    log("  2. \uD55C\uAD6D\uC5B4");
+    const answer = (await promptLine("> ")).trim().toLowerCase();
+    if (answer === "1" || answer === "en" || answer === "english") {
+      setLocale("en");
+      log("");
+      return;
+    }
+    if (answer === "2" || answer === "ko" || answer === "kr" || answer === "\uD55C\uAD6D\uC5B4") {
+      setLocale("ko");
+      log("");
+      return;
+    }
+    if (answer === "" && saved) {
+      setLocale(saved);
+      log("");
+      return;
+    }
+    log("  1 or 2 / 1 \uB610\uB294 2");
+  }
+}
+function parseSelection(args) {
+  const ids = [];
+  let explicit = false;
+  for (const arg of args) {
+    if (arg === "--all") {
+      return PLATFORMS.map((p) => p.id);
+    }
+    const match = PLATFORMS.find(
+      (p) => p.id === arg || arg === "chatgpt" && p.id === "codex"
+    );
+    if (match) {
+      explicit = true;
+      if (!ids.includes(match.id)) ids.push(match.id);
+    }
+  }
+  return explicit ? ids : "interactive";
+}
+async function cmdInstall(args) {
+  await promptLocale();
+  log(`${t("installBanner")}
+`);
+  if (!await ensureNode()) {
+    process.exit(1);
+  }
+  log("");
+  const selection = parseSelection(args);
+  let openDashboard = false;
+  if (selection === "interactive") {
+    if (!isTty()) {
+      log(t("nonInteractive"));
+      log("  transcodes install --all");
+      log("  transcodes install claude codex cursor antigravity");
+      process.exit(1);
+    }
+    const useArrows = supportsArrowSelect();
+    const checked = new Set(
+      PLATFORMS.filter((p) => isHostAppInstalled(p.id)).map((p) => p.id)
+    );
+    for (; ; ) {
+      clearScreen();
+      let choice;
+      if (useArrows) {
+        choice = await arrowSelect(checked);
+      } else {
+        renderMenu();
+        choice = await promptMenu();
+      }
+      if (choice.kind === "cancel") {
+        log("");
+        log(t("cancelHint"));
+        process.exit(0);
+      }
+      if (choice.kind === "next") {
+        clearScreen();
+        break;
+      }
+      if (choice.ids.length === 0) {
+        log(`  ${t("nothingSelected")}`);
+        continue;
+      }
+      checked.clear();
+      for (const id of choice.ids) checked.add(id);
+      await runInstalls(choice.ids);
+    }
+  } else {
+    if (selection.length === 0) {
+      log(t("noPlatforms"));
+      process.exit(0);
+    }
+    log(
+      `
+${t("installing", {
+        list: selection.map((id) => PLATFORMS.find((p) => p.id === id)?.label ?? id).join(", ")
+      })}`
+    );
+    await runInstalls(selection);
+    clearScreen();
+  }
+  openDashboard = await tokenFlow();
+  if (!openDashboard) {
+    process.exit(0);
+  }
+  printSetupComplete();
+  await promptLine(t("pressEnterDashboard"));
+  await ensureDashboard({});
+  process.exit(0);
+}
+function installedPlatforms() {
+  return PLATFORMS.filter((p) => isPluginInstalled(p.id)).map((p) => p.id);
+}
+async function updateCliPackage() {
+  log(`
+\u2500\u2500 ${CLI_PACKAGE_NAME} (CLI) \u2500\u2500`);
+  log(`  Current version: ${CLI_VERSION}`);
+  if (!await commandExists("npm")) {
+    log("  \u2717 `npm` not found on PATH \u2014 cannot update the CLI.");
+    log(
+      `    Install Node.js / npm, then: npm install -g ${CLI_PACKAGE_NAME}@latest`
+    );
+    return false;
+  }
+  const ok = await run("npm", ["install", "-g", `${CLI_PACKAGE_NAME}@latest`]) === 0;
+  if (ok) {
+    log("  \u2713 CLI updated (run `transcodes version` to confirm).");
+  } else {
+    log("  \u2717 CLI update failed.");
+  }
+  return ok;
+}
+async function cmdUpdate(args) {
+  log("transcodes update \u2014 refresh plugins and CLI.\n");
+  if (!await ensureNode()) {
+    process.exit(1);
+  }
+  let cliOnly = false;
+  let pluginsOnly = false;
+  let forceAll = false;
+  const platformArgs = [];
+  for (const arg of args) {
+    if (arg === "--cli-only") cliOnly = true;
+    else if (arg === "--plugins-only") pluginsOnly = true;
+    else if (arg === "--all") forceAll = true;
+    else if (arg.startsWith("-")) {
+      log(`Unknown flag "${arg}".`);
+      log(
+        "Usage: transcodes update [--cli-only|--plugins-only|--all] [claude|codex|cursor|antigravity \u2026]"
+      );
+      process.exit(1);
+    } else {
+      platformArgs.push(arg);
+    }
+  }
+  if (cliOnly && pluginsOnly) {
+    log("Cannot combine --cli-only and --plugins-only.");
+    process.exit(1);
+  }
+  const results = [];
+  if (!cliOnly) {
+    let targets;
+    if (forceAll) {
+      targets = PLATFORMS.map((p) => p.id);
+    } else if (platformArgs.length > 0) {
+      const parsed = parseSelection(platformArgs);
+      if (parsed === "interactive" || parsed.length === 0) {
+        log(
+          "No valid platforms. Use: claude, codex, cursor, antigravity (or chatgpt)."
+        );
+        process.exit(1);
+      }
+      targets = parsed;
+    } else {
+      targets = installedPlatforms();
+    }
+    if (targets.length === 0) {
+      log("No installed plugins detected.");
+      log("  Run `transcodes install` first, or `transcodes update --all`.");
+    } else {
+      log(
+        `Updating plugins: ${targets.map((id) => PLATFORMS.find((p) => p.id === id)?.label ?? id).join(", ")}`
+      );
+      const clonedRepoDir = await cloneRepoIfNeeded(targets);
+      try {
+        for (const id of targets) {
+          const label = PLATFORMS.find((p) => p.id === id)?.label ?? id;
+          log(`
+\u2500\u2500 ${label} \u2500\u2500`);
+          const ok = await installPlatform(id, clonedRepoDir);
+          results.push({ name: label, ok });
+        }
+      } finally {
+        if (clonedRepoDir) {
+          fs2.rmSync(clonedRepoDir, { recursive: true, force: true });
+        }
+      }
+    }
+  }
+  if (!pluginsOnly) {
+    const ok = await updateCliPackage();
+    results.push({ name: `${CLI_PACKAGE_NAME} (CLI)`, ok });
+  }
+  log("\n\u2500\u2500 Update summary \u2500\u2500");
+  if (results.length === 0) {
+    log("  (nothing to update)");
+  } else {
+    for (const r of results) {
+      log(`  ${r.ok ? "\u2713" : "\u2717"} ${r.name}`);
+    }
+  }
+  log("");
+  log("Done. Restart your host apps/CLIs so they pick up the new plugin.");
+  process.exit(results.some((r) => !r.ok) ? 1 : 0);
 }
 
 // src/index.ts
@@ -2807,9 +4805,10 @@ async function cmdConsole(args) {
   }
   process.exit(0);
 }
-async function cmdDashboard(args) {
+function parseDashboardFlags(args, usage) {
   let port;
   let open = true;
+  let daemon = false;
   for (let i = 0; i < args.length; i++) {
     if (args[i] === "--port" && args[i + 1]) {
       port = Number(args[++i]);
@@ -2818,14 +4817,49 @@ async function cmdDashboard(args) {
       }
     } else if (args[i] === "--no-open") {
       open = false;
+    } else if (args[i] === "--daemon") {
+      daemon = true;
     } else {
-      fail(
-        `unknown flag "${args[i]}". Usage: transcodes [--port N] [--no-open]`
-      );
+      fail(`unknown flag "${args[i]}". Usage: ${usage}`);
     }
   }
+  return { port, open, daemon };
+}
+async function cmdDashboard(args) {
+  const { port, open, daemon } = parseDashboardFlags(
+    args,
+    "transcodes [--port N] [--no-open]"
+  );
+  if (daemon) {
+    fail("use `transcodes dashboard --daemon` to run the server process");
+  }
   try {
-    await runDashboard({ port, open });
+    await ensureDashboard({ port, open });
+  } catch (err) {
+    fail(err instanceof Error ? err.message : String(err));
+  }
+  process.exit(0);
+}
+async function cmdDashboardSub(args) {
+  const { port, open, daemon } = parseDashboardFlags(
+    args,
+    "transcodes dashboard [--daemon] [--port N] [--no-open]"
+  );
+  try {
+    if (daemon) {
+      await serveDashboard({ port });
+      process.exit(0);
+      return;
+    }
+    await ensureDashboard({ port, open });
+  } catch (err) {
+    fail(err instanceof Error ? err.message : String(err));
+  }
+  process.exit(0);
+}
+async function cmdStop() {
+  try {
+    await stopDashboard();
   } catch (err) {
     fail(err instanceof Error ? err.message : String(err));
   }
@@ -2834,6 +4868,12 @@ async function cmdDashboard(args) {
 function main() {
   const [command, ...rest] = process.argv.slice(2);
   switch (command) {
+    case "install":
+      void cmdInstall(rest);
+      break;
+    case "update":
+      void cmdUpdate(rest);
+      break;
     case "set":
       cmdSet(rest);
       break;
@@ -2846,9 +4886,20 @@ function main() {
     case "tokens":
       cmdTokens();
       break;
+    case "login":
+      void cmdLogin(rest).catch((error) => {
+        fail(error instanceof Error ? error.message : String(error));
+      });
+      break;
     case "console":
       void cmdConsole(rest);
       break;
+    case "dashboard":
+      void cmdDashboardSub(rest);
+      break;
+    case "stop":
+      void cmdStop();
+      break;
     case "version":
     case "--version":
     case "-V":