@openagt/dashboard 0.10.0 → 0.11.0

package/dist/module-types/src/registry.d.ts

@@ -3,8 +3,9 @@ import { type PublishPick } from './publish-levels.js';
  * The multi-project registry (#390): the list of projects the user has
  * installed OpenAgent into, kept as a single JSON file `.bashrc`-style —
  * `$HOME/.openagent.json` — so it is the user's responsibility to re-create
- * per machine. The same file also holds the user's dashboard preferences (#410),
- * so the daemon owns one user file and the UI never needs localStorage.
+ * per machine. The same file also holds the user's dashboard preferences (#410)
+ * and the machines they saved, so the daemon owns one user file and the UI never
+ * needs localStorage.
  */
 /** One registered project. */
 export interface ProjectRecord {
@@ -15,6 +16,25 @@ export interface ProjectRecord {
     /** ISO timestamp the project was added. */
     addedAt: string;
 }
+/**
+ * A saved machine: another computer running OpenAgent that a run can be sent to. Kept in this
+ * file, the person's own, so every browser on this computer shows the same machines and the
+ * key that reaches one never leaves the two machines.
+ */
+export interface MachineRecord {
+    /** The machine's address, which is also what names it: saving the same address again replaces it. */
+    id: string;
+    /** The name the person gave it, or its host when they gave none. */
+    label: string;
+    /** Where its OpenAgent answers, as an origin (`http://studio.local:4201`). */
+    url: string;
+    /** This computer's own key on that machine. Never handed to a browser. */
+    key: string;
+    /** Where this computer was let in there, and where it takes itself out when the machine is removed. */
+    door: string;
+    /** What the machine's key is known by, when its link said: every call goes only to a machine that shows that key. */
+    pin?: string;
+}
 /**
  * The dashboard's Global options (#410), persisted next to the project list so they
  * survive restarts without localStorage — the daemon reads/writes them, the SPA reads
@@ -104,11 +124,16 @@ export interface Registry {
     projects: ProjectRecord[];
     preferences: Preferences;
     /**
-     * The shared daemon token (#1051): generated on the first non-loopback bind and reused after.
-     * A top-level field, deliberately not a {@link Preferences} one, so it is never shipped to the
-     * browser bundle. Absent on a loopback-only machine.
+     * The browser bridge's key (#1237): generated when the bridge is first switched on and reused
+     * after. A top-level field, deliberately not a {@link Preferences} one, so it is never shipped
+     * to the browser bundle. Absent on a machine that never had the bridge on.
      */
-    daemonToken?: string;
+    bridgeToken?: string;
+    /**
+     * The saved machines. Top-level like {@link bridgeToken}, and for the same reason: each one
+     * carries a key, so the list is never part of what the browser is handed.
+     */
+    machines?: MachineRecord[];
 }
 /** A read/write handle for the user preferences, wired into the dashboard's context by the daemon. */
 export interface PreferencesStore {
@@ -122,7 +147,7 @@ export interface PreferencesStore {
 }
 /** The registry file name: a single file under `$XDG_CONFIG_HOME` (dotted under `$HOME`). */
 export declare const REGISTRY_FILE = "openagent.json";
-/** Owner read/write only: the file holds the daemon token (#1051). */
+/** Owner read/write only: the file holds the bridge's key and the saved machines' keys. */
 export declare const REGISTRY_FILE_MODE = 384;
 /**
  * Deterministic, URL-safe id for a project path: the sanitized basename plus a
@@ -151,7 +176,7 @@ export interface RegistryFs {
     rename?(from: string, to: string): Promise<void>;
     /**
      * Narrow a file's permissions. Optional, and best-effort at the call site: this file holds the
-     * daemon token (#1051), so it is written owner-only — but a
+     * bridge's key and the saved machines' keys, so it is written owner-only — but a
      * filesystem that cannot express that (Windows, a FAT volume) must not fail the write.
      */
     chmod?(path: string, mode: number): Promise<void>;
@@ -205,15 +230,33 @@ export declare function writePreferences(preferences: Preferences, fs?: Registry
  */
 export declare function patchPreferences(patch: Preferences, fs?: RegistryFs, env?: NodeJS.ProcessEnv): Promise<Preferences>;
 /**
- * The shared daemon token (#1051): read the persisted one, or generate + persist it now. Called
- * only on a non-loopback bind, so a loopback-only machine never grows one. Serialized with the
- * other mutators so two concurrent binds can't each write a different token. `base64url` of 32
- * random bytes: URL-safe, so it drops straight into a `?token=` without encoding.
+ * The browser bridge's key (#1237): read the persisted one, or generate + persist it now. Called
+ * only with the bridge switched on, so a machine that never had it on never grows one. Serialized
+ * with the other mutators so two concurrent starts can't each write a different key.
+ */
+export declare function ensureBridgeToken(fs?: RegistryFs, env?: NodeJS.ProcessEnv): Promise<string>;
+/** The persisted bridge key, or `undefined` when none exists. A pure read: it never generates one. */
+export declare function readBridgeToken(fs?: RegistryFs, env?: NodeJS.ProcessEnv): Promise<string | undefined>;
+/** The saved machines, newest first. Forgiving like every read of this file: none on a bad file. */
+export declare function listMachines(fs?: RegistryFs, env?: NodeJS.ProcessEnv): Promise<MachineRecord[]>;
+/**
+ * Save a machine, newest first. One per address: saving an address again replaces its name and
+ * its key, which is how a machine whose key changed is fixed. Answers the stored record, and the
+ * records it took the place of (the one saved at that address before, the oldest past the cap):
+ * each still holds a key the caller takes out of its machine.
  */
-export declare function ensureDaemonToken(fs?: RegistryFs, env?: NodeJS.ProcessEnv): Promise<string>;
-/** The persisted daemon token (#1051), or `undefined` when none exists. A pure read, so a process
- * that only prints the reachable URL never generates one. */
-export declare function readDaemonToken(fs?: RegistryFs, env?: NodeJS.ProcessEnv): Promise<string | undefined>;
+export declare function addMachine(machine: {
+    url: string;
+    key: string;
+    door: string;
+    pin?: string;
+    label?: string;
+}, fs?: RegistryFs, env?: NodeJS.ProcessEnv): Promise<{
+    record: MachineRecord;
+    displaced: MachineRecord[];
+}>;
+/** Take a saved machine off the list, by id. Answers the one that was there. */
+export declare function removeMachine(id: string, fs?: RegistryFs, env?: NodeJS.ProcessEnv): Promise<MachineRecord | undefined>;
 /** A {@link PreferencesStore} bound to the real registry file, wired by the daemon so the
  * dashboard's preferences RPCs read/write the user's home file.
  *

package/dist/module-types/src/repository-address.d.ts

@@ -0,0 +1,22 @@
+import { type GitRunner } from '@openagt/agent-data';
+/**
+ * The one name a project has on every machine: where its repository was cloned from, as
+ * `host/path` (`github.com/me/shop`). A project's id is made from its folder's path, which is
+ * another path on another machine, so a run sent to a machine names its project by this.
+ *
+ * The same repository reads the same whichever way it was cloned: the scheme, a user before the
+ * host, a port, a trailing `.git` or slash are dropped, and letters are lowered, since the git
+ * hosts match names without regard to case. Not an address at all (a path on this disk, a
+ * `file:` address) is none.
+ *
+ * What it does not see through: a host that serves the two ways under two names or two paths
+ * (`ssh.github.com`, Azure DevOps). Such a project reads as two, and the other machine says it
+ * does not have it.
+ */
+export declare function addressOfRemote(remote: string): string | undefined;
+/**
+ * The address of the repository at `cwd`: its `origin` remote, the one every push goes to. A
+ * project with no `origin`, or one that is a folder on this disk, has none and runs on this
+ * machine only.
+ */
+export declare function repositoryAddress(cwd: string, git?: GitRunner): Promise<string | undefined>;

package/dist/module-types/src/screens.d.ts

@@ -0,0 +1,13 @@
+import type { OpenAgentEvent } from './events.js';
+/**
+ * Which of a run's `screen` lines are live and which are hidden. Live: the newest line at its
+ * address with no `ended` line for it after, and no run `end` after it other than one waiting on
+ * an answer. Every `ended` line is hidden: the screen going is said by its line no longer being
+ * live.
+ */
+export declare function foldScreenRows(events: readonly OpenAgentEvent[]): {
+    live: Set<OpenAgentEvent>;
+    hidden: Set<OpenAgentEvent>;
+};
+/** Where a run's live screen answers: the address of its newest live `screen` line, or nothing. */
+export declare function liveScreen(events: readonly OpenAgentEvent[]): string | undefined;

package/dist/module-types/src/store/agent-store.d.ts

@@ -157,12 +157,12 @@ export interface AgentMeta {
     browserStreamPort?: number;
     /**
      * Where this run executes (#1050/#1053/#610): `actions` for a GitHub Actions run, `web` for a
-     * Claude Code cloud session, `remote` when relayed to a connected device (#1067), absent for a
+     * Claude Code cloud session, `remote` when relayed to a saved machine (#1067), absent for a
      * local run. Persisted so the agent view can tell a burst-mode Actions run from a stalled live
      * feed, show a cloud agent's session link after a reload, and gate the browser pane off (#1053).
      */
     target?: 'local' | 'actions' | 'remote' | 'web';
-    /** The connected device a remote agent (#1067) executes on, for the session list + notice after a reload. */
+    /** The saved machine a remote agent (#1067) executes on, for the session list + notice after a reload. */
     remoteLabel?: string;
     /**
      * The flow this agent started under (#1467): `build` for the scope→build orchestration, `prompt`

package/dist/module-types/src/version.d.ts

@@ -0,0 +1 @@
+export declare function openagentVersion(): string;

package/dist/package-services.d.ts

@@ -0,0 +1,27 @@
+import { type ChildProcess } from 'node:child_process';
+import type { ProvidedCommand } from '@openagt/agent-data';
+/**
+ * The services of OpenAgent's own packages: each declared command's `serve`, run as a process of
+ * its own for as long as OpenAgent runs, and told where OpenAgent is (`OPENAGENT_URL`). OpenAgent
+ * knows nothing of what a service does. One that ends by itself is started again after a
+ * while; all of them end with OpenAgent. Each is started in a process group of its own, so a
+ * Ctrl-C in OpenAgent's terminal reaches OpenAgent alone, which then ends them in its own order.
+ */
+export interface PackageServicesOptions {
+    /** The commands to run, each a package's declared service. */
+    commands: readonly ProvidedCommand[];
+    /** OpenAgent's own address on this computer. */
+    url: string;
+    env: NodeJS.ProcessEnv;
+    log: (line: string) => void;
+    /** How a service's process is started; the real one when unsaid. */
+    spawn?: (bin: string, env: NodeJS.ProcessEnv) => ChildProcess;
+    /** After how long a service that ended by itself is started again. */
+    restartMs?: number;
+}
+export interface PackageServices {
+    /** End every service, and wait until each is gone. */
+    stop(): Promise<void>;
+}
+export declare function startPackageServices(opts: PackageServicesOptions): PackageServices;
+//# sourceMappingURL=package-services.d.ts.map

package/dist/package-services.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-services.d.ts","sourceRoot":"","sources":["../src/package-services.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAC1E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAE1D;;;;;;GAMG;AAEH,MAAM,WAAW,sBAAsB;IACrC,8DAA8D;IAC9D,QAAQ,EAAE,SAAS,eAAe,EAAE,CAAA;IACpC,gDAAgD;IAChD,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAC,UAAU,CAAA;IACtB,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC3B,oEAAoE;IACpE,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,KAAK,YAAY,CAAA;IAC7D,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,sDAAsD;IACtD,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACtB;AAKD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,sBAAsB,GAAG,eAAe,CAwDlF"}

package/dist/package-services.js

@@ -0,0 +1,62 @@
+import { spawn as nodeSpawn } from 'node:child_process';
+/** How long a service gets to end by itself once asked, before it is killed. */
+const STOP_GRACE_MS = 3_000;
+export function startPackageServices(opts) {
+    const spawn = opts.spawn ?? ((bin, env) => nodeSpawn(process.execPath, [bin, 'serve'], { env, stdio: ['ignore', 'ignore', 'pipe'], detached: true }));
+    const env = { ...opts.env, OPENAGENT_URL: opts.url };
+    let stopping = false;
+    const running = new Map();
+    const timers = new Set();
+    const start = (command) => {
+        if (stopping)
+            return;
+        const child = spawn(command.bin, env);
+        running.set(command.package, child);
+        child.stderr?.setEncoding('utf8').on('data', (said) => {
+            for (const line of said.split('\n'))
+                if (line.trim())
+                    opts.log(line.trim());
+        });
+        const ended = (why) => {
+            if (running.get(command.package) !== child)
+                return;
+            running.delete(command.package);
+            if (stopping)
+                return;
+            opts.log(`${command.package}: its service ended (${why}); it is started again shortly`);
+            const timer = setTimeout(() => {
+                timers.delete(timer);
+                start(command);
+            }, opts.restartMs ?? 5_000);
+            timers.add(timer);
+        };
+        child.once('error', err => ended(err.message));
+        child.once('exit', (code, signal) => ended(signal ?? `exit ${code}`));
+    };
+    for (const command of opts.commands)
+        start(command);
+    return {
+        async stop() {
+            stopping = true;
+            for (const timer of timers)
+                clearTimeout(timer);
+            timers.clear();
+            await Promise.all([...running.values()].map(child => new Promise(resolve => {
+                if (child.exitCode !== null || child.signalCode !== null)
+                    return resolve();
+                const kill = setTimeout(() => child.kill('SIGKILL'), STOP_GRACE_MS);
+                child.once('exit', () => {
+                    clearTimeout(kill);
+                    resolve();
+                });
+                child.once('error', () => {
+                    clearTimeout(kill);
+                    resolve();
+                });
+                child.kill('SIGTERM');
+            })));
+            running.clear();
+        },
+    };
+}
+//# sourceMappingURL=package-services.js.map

package/dist/package-services.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-services.js","sourceRoot":"","sources":["../src/package-services.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,IAAI,SAAS,EAAqB,MAAM,oBAAoB,CAAA;AA6B1E,gFAAgF;AAChF,MAAM,aAAa,GAAG,KAAK,CAAA;AAE3B,MAAM,UAAU,oBAAoB,CAAC,IAA4B;IAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IACrJ,MAAM,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE,CAAA;IACpD,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAA;IAC/C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAA;IAExC,MAAM,KAAK,GAAG,CAAC,OAAwB,EAAQ,EAAE;QAC/C,IAAI,QAAQ;YAAE,OAAM;QACpB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;QACrC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QACnC,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YAC5D,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,IAAI,IAAI,CAAC,IAAI,EAAE;oBAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;QAC7E,CAAC,CAAC,CAAA;QACF,MAAM,KAAK,GAAG,CAAC,GAAW,EAAQ,EAAE;YAClC,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,KAAK;gBAAE,OAAM;YAClD,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;YAC/B,IAAI,QAAQ;gBAAE,OAAM;YACpB,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,OAAO,wBAAwB,GAAG,gCAAgC,CAAC,CAAA;YACvF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;gBACpB,KAAK,CAAC,OAAO,CAAC,CAAA;YAChB,CAAC,EAAE,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,CAAA;YAC3B,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACnB,CAAC,CAAA;QACD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAA;QAC9C,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAA;IACvE,CAAC,CAAA;IACD,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ;QAAE,KAAK,CAAC,OAAO,CAAC,CAAA;IAEnD,OAAO;QACL,KAAK,CAAC,IAAI;YACR,QAAQ,GAAG,IAAI,CAAA;YACf,KAAK,MAAM,KAAK,IAAI,MAAM;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAA;YAC/C,MAAM,CAAC,KAAK,EAAE,CAAA;YACd,MAAM,OAAO,CAAC,GAAG,CACf,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CACvB,KAAK,CAAC,EAAE,CACN,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE;gBAC1B,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI;oBAAE,OAAO,OAAO,EAAE,CAAA;gBAC1E,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC,CAAA;gBACnE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;oBACtB,YAAY,CAAC,IAAI,CAAC,CAAA;oBAClB,OAAO,EAAE,CAAA;gBACX,CAAC,CAAC,CAAA;gBACF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;oBACvB,YAAY,CAAC,IAAI,CAAC,CAAA;oBAClB,OAAO,EAAE,CAAA;gBACX,CAAC,CAAC,CAAA;gBACF,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YACvB,CAAC,CAAC,CACL,CACF,CAAA;YACD,OAAO,CAAC,KAAK,EAAE,CAAA;QACjB,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/registry.d.ts

@@ -3,8 +3,9 @@ import { type PublishPick } from './publish-levels.js';
  * The multi-project registry (#390): the list of projects the user has
  * installed OpenAgent into, kept as a single JSON file `.bashrc`-style —
  * `$HOME/.openagent.json` — so it is the user's responsibility to re-create
- * per machine. The same file also holds the user's dashboard preferences (#410),
- * so the daemon owns one user file and the UI never needs localStorage.
+ * per machine. The same file also holds the user's dashboard preferences (#410)
+ * and the machines they saved, so the daemon owns one user file and the UI never
+ * needs localStorage.
  */
 /** One registered project. */
 export interface ProjectRecord {
@@ -15,6 +16,25 @@ export interface ProjectRecord {
     /** ISO timestamp the project was added. */
     addedAt: string;
 }
+/**
+ * A saved machine: another computer running OpenAgent that a run can be sent to. Kept in this
+ * file, the person's own, so every browser on this computer shows the same machines and the
+ * key that reaches one never leaves the two machines.
+ */
+export interface MachineRecord {
+    /** The machine's address, which is also what names it: saving the same address again replaces it. */
+    id: string;
+    /** The name the person gave it, or its host when they gave none. */
+    label: string;
+    /** Where its OpenAgent answers, as an origin (`http://studio.local:4201`). */
+    url: string;
+    /** This computer's own key on that machine. Never handed to a browser. */
+    key: string;
+    /** Where this computer was let in there, and where it takes itself out when the machine is removed. */
+    door: string;
+    /** What the machine's key is known by, when its link said: every call goes only to a machine that shows that key. */
+    pin?: string;
+}
 /**
  * The dashboard's Global options (#410), persisted next to the project list so they
  * survive restarts without localStorage — the daemon reads/writes them, the SPA reads
@@ -104,11 +124,16 @@ export interface Registry {
     projects: ProjectRecord[];
     preferences: Preferences;
     /**
-     * The shared daemon token (#1051): generated on the first non-loopback bind and reused after.
-     * A top-level field, deliberately not a {@link Preferences} one, so it is never shipped to the
-     * browser bundle. Absent on a loopback-only machine.
+     * The browser bridge's key (#1237): generated when the bridge is first switched on and reused
+     * after. A top-level field, deliberately not a {@link Preferences} one, so it is never shipped
+     * to the browser bundle. Absent on a machine that never had the bridge on.
      */
-    daemonToken?: string;
+    bridgeToken?: string;
+    /**
+     * The saved machines. Top-level like {@link bridgeToken}, and for the same reason: each one
+     * carries a key, so the list is never part of what the browser is handed.
+     */
+    machines?: MachineRecord[];
 }
 /** A read/write handle for the user preferences, wired into the dashboard's context by the daemon. */
 export interface PreferencesStore {
@@ -122,7 +147,7 @@ export interface PreferencesStore {
 }
 /** The registry file name: a single file under `$XDG_CONFIG_HOME` (dotted under `$HOME`). */
 export declare const REGISTRY_FILE = "openagent.json";
-/** Owner read/write only: the file holds the daemon token (#1051). */
+/** Owner read/write only: the file holds the bridge's key and the saved machines' keys. */
 export declare const REGISTRY_FILE_MODE = 384;
 /**
  * Deterministic, URL-safe id for a project path: the sanitized basename plus a
@@ -151,7 +176,7 @@ export interface RegistryFs {
     rename?(from: string, to: string): Promise<void>;
     /**
      * Narrow a file's permissions. Optional, and best-effort at the call site: this file holds the
-     * daemon token (#1051), so it is written owner-only — but a
+     * bridge's key and the saved machines' keys, so it is written owner-only — but a
      * filesystem that cannot express that (Windows, a FAT volume) must not fail the write.
      */
     chmod?(path: string, mode: number): Promise<void>;
@@ -205,15 +230,33 @@ export declare function writePreferences(preferences: Preferences, fs?: Registry
  */
 export declare function patchPreferences(patch: Preferences, fs?: RegistryFs, env?: NodeJS.ProcessEnv): Promise<Preferences>;
 /**
- * The shared daemon token (#1051): read the persisted one, or generate + persist it now. Called
- * only on a non-loopback bind, so a loopback-only machine never grows one. Serialized with the
- * other mutators so two concurrent binds can't each write a different token. `base64url` of 32
- * random bytes: URL-safe, so it drops straight into a `?token=` without encoding.
+ * The browser bridge's key (#1237): read the persisted one, or generate + persist it now. Called
+ * only with the bridge switched on, so a machine that never had it on never grows one. Serialized
+ * with the other mutators so two concurrent starts can't each write a different key.
+ */
+export declare function ensureBridgeToken(fs?: RegistryFs, env?: NodeJS.ProcessEnv): Promise<string>;
+/** The persisted bridge key, or `undefined` when none exists. A pure read: it never generates one. */
+export declare function readBridgeToken(fs?: RegistryFs, env?: NodeJS.ProcessEnv): Promise<string | undefined>;
+/** The saved machines, newest first. Forgiving like every read of this file: none on a bad file. */
+export declare function listMachines(fs?: RegistryFs, env?: NodeJS.ProcessEnv): Promise<MachineRecord[]>;
+/**
+ * Save a machine, newest first. One per address: saving an address again replaces its name and
+ * its key, which is how a machine whose key changed is fixed. Answers the stored record, and the
+ * records it took the place of (the one saved at that address before, the oldest past the cap):
+ * each still holds a key the caller takes out of its machine.
  */
-export declare function ensureDaemonToken(fs?: RegistryFs, env?: NodeJS.ProcessEnv): Promise<string>;
-/** The persisted daemon token (#1051), or `undefined` when none exists. A pure read, so a process
- * that only prints the reachable URL never generates one. */
-export declare function readDaemonToken(fs?: RegistryFs, env?: NodeJS.ProcessEnv): Promise<string | undefined>;
+export declare function addMachine(machine: {
+    url: string;
+    key: string;
+    door: string;
+    pin?: string;
+    label?: string;
+}, fs?: RegistryFs, env?: NodeJS.ProcessEnv): Promise<{
+    record: MachineRecord;
+    displaced: MachineRecord[];
+}>;
+/** Take a saved machine off the list, by id. Answers the one that was there. */
+export declare function removeMachine(id: string, fs?: RegistryFs, env?: NodeJS.ProcessEnv): Promise<MachineRecord | undefined>;
 /** A {@link PreferencesStore} bound to the real registry file, wired by the daemon so the
  * dashboard's preferences RPCs read/write the user's home file.
  *

package/dist/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAGA,OAAO,EAAiB,KAAK,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAGrE;;;;;;GAMG;AAEH,8BAA8B;AAC9B,MAAM,WAAW,aAAa;IAC5B,iDAAiD;IACjD,EAAE,EAAE,MAAM,CAAA;IACV,0BAA0B;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,2CAA2C;IAC3C,OAAO,EAAE,MAAM,CAAA;CAChB;AAED;;;;;;GAMG;AAEH;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;CACf;AASD,MAAM,WAAW,WAAW;IAC1B,sGAAsG;IACtG,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAC3B;;;;;;OAMG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAA;IACjC,+HAA+H;IAC/H,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,gJAAgJ;IAChJ,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,4QAA4Q;IAC5Q,OAAO,CAAC,EAAE,WAAW,CAAA;IACrB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACnC;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B;gEAC4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,gHAAgH;IAChH,KAAK,CAAC,EAAE,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAA;IACnC;;;;;OAKG;IACH,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,2HAA2H;IAC3H,aAAa,CAAC,EAAE,YAAY,EAAE,CAAA;IAC9B;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAC9B;AAED,4FAA4F;AAC5F,MAAM,WAAW,QAAQ;IACvB,QAAQ,EAAE,aAAa,EAAE,CAAA;IACzB,WAAW,EAAE,WAAW,CAAA;IACxB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,sGAAsG;AACtG,MAAM,WAAW,gBAAgB;IAC/B,IAAI,IAAI,OAAO,CAAC,WAAW,CAAC,CAAA;IAC5B,IAAI,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC7C;;;OAGG;IACH,KAAK,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;CAChD;AAED,6FAA6F;AAC7F,eAAO,MAAM,aAAa,mBAAmB,CAAA;AAE7C,sEAAsE;AACtE,eAAO,MAAM,kBAAkB,MAAQ,CAAA;AAEvC;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAU9C;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAG3D;AAED,8EAA8E;AAC9E,MAAM,WAAW,UAAU;IACzB,uCAAuC;IACvC,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACnC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACpD,yDAAyD;IACzD,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAClC;;;;OAIG;IACH,MAAM,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAChD;;;;OAIG;IACH,KAAK,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAClD;AAED,6EAA6E;AAC7E,wBAAgB,cAAc,IAAI,UAAU,CAG3C;AAkGD;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,YAAY,EAAE,CAiBpE;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAChC,EAAE,GAAE,UAA6B,EACjC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAAC,QAAQ,CAAC,CAiBnB;AA4DD;;;GAGG;AACH,wBAAsB,YAAY,CAChC,EAAE,GAAE,UAA6B,EACjC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAAC,aAAa,EAAE,CAAC,CAE1B;AAED;;;;GAIG;AACH,wBAAsB,UAAU,CAC9B,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,EAAE,GAAE,UAA6B,EACjC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAAC,aAAa,CAAC,CAYxB;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,EAAE,EAAE,MAAM,EACV,EAAE,GAAE,UAA6B,EACjC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CASpC;AAED,6EAA6E;AAC7E,wBAAsB,eAAe,CACnC,EAAE,GAAE,UAA6B,EACjC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAAC,WAAW,CAAC,CAEtB;AAED,wFAAwF;AACxF,wBAAsB,gBAAgB,CACpC,WAAW,EAAE,WAAW,EACxB,EAAE,GAAE,UAA6B,EACjC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAAC,IAAI,CAAC,CAKf;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,WAAW,EAClB,EAAE,GAAE,UAA6B,EACjC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAAC,WAAW,CAAC,CAOtB;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,EAAE,GAAE,UAA6B,EACjC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAAC,MAAM,CAAC,CAQjB;AAED;6DAC6D;AAC7D,wBAAsB,eAAe,CACnC,EAAE,GAAE,UAA6B,EACjC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAE7B;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,EAAE,GAAE,UAA6B,EACjC,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,WAAW,KAAK,IAAI,GACxC,gBAAgB,CAclB"}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAGA,OAAO,EAAiB,KAAK,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAGrE;;;;;;;GAOG;AAEH,8BAA8B;AAC9B,MAAM,WAAW,aAAa;IAC5B,iDAAiD;IACjD,EAAE,EAAE,MAAM,CAAA;IACV,0BAA0B;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,2CAA2C;IAC3C,OAAO,EAAE,MAAM,CAAA;CAChB;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,qGAAqG;IACrG,EAAE,EAAE,MAAM,CAAA;IACV,oEAAoE;IACpE,KAAK,EAAE,MAAM,CAAA;IACb,8EAA8E;IAC9E,GAAG,EAAE,MAAM,CAAA;IACX,0EAA0E;IAC1E,GAAG,EAAE,MAAM,CAAA;IACX,uGAAuG;IACvG,IAAI,EAAE,MAAM,CAAA;IACZ,qHAAqH;IACrH,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAKD;;;;;;GAMG;AAEH;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;CACf;AASD,MAAM,WAAW,WAAW;IAC1B,sGAAsG;IACtG,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAC3B;;;;;;OAMG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAA;IACjC,+HAA+H;IAC/H,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,gJAAgJ;IAChJ,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,4QAA4Q;IAC5Q,OAAO,CAAC,EAAE,WAAW,CAAA;IACrB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACnC;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B;gEAC4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,gHAAgH;IAChH,KAAK,CAAC,EAAE,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAA;IACnC;;;;;OAKG;IACH,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,2HAA2H;IAC3H,aAAa,CAAC,EAAE,YAAY,EAAE,CAAA;IAC9B;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAC9B;AAED,4FAA4F;AAC5F,MAAM,WAAW,QAAQ;IACvB,QAAQ,EAAE,aAAa,EAAE,CAAA;IACzB,WAAW,EAAE,WAAW,CAAA;IACxB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;;OAGG;IACH,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAA;CAC3B;AAED,sGAAsG;AACtG,MAAM,WAAW,gBAAgB;IAC/B,IAAI,IAAI,OAAO,CAAC,WAAW,CAAC,CAAA;IAC5B,IAAI,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC7C;;;OAGG;IACH,KAAK,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;CAChD;AAED,6FAA6F;AAC7F,eAAO,MAAM,aAAa,mBAAmB,CAAA;AAE7C,2FAA2F;AAC3F,eAAO,MAAM,kBAAkB,MAAQ,CAAA;AAEvC;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAU9C;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAG3D;AAED,8EAA8E;AAC9E,MAAM,WAAW,UAAU;IACzB,uCAAuC;IACvC,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACnC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACpD,yDAAyD;IACzD,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAClC;;;;OAIG;IACH,MAAM,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAChD;;;;OAIG;IACH,KAAK,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAClD;AAED,6EAA6E;AAC7E,wBAAgB,cAAc,IAAI,UAAU,CAG3C;AAkGD;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,YAAY,EAAE,CAiBpE;AAmBD;;;;GAIG;AACH,wBAAsB,YAAY,CAChC,EAAE,GAAE,UAA6B,EACjC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAAC,QAAQ,CAAC,CAmBnB;AA6DD;;;GAGG;AACH,wBAAsB,YAAY,CAChC,EAAE,GAAE,UAA6B,EACjC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAAC,aAAa,EAAE,CAAC,CAE1B;AAED;;;;GAIG;AACH,wBAAsB,UAAU,CAC9B,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,EAAE,GAAE,UAA6B,EACjC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAAC,aAAa,CAAC,CAYxB;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,EAAE,EAAE,MAAM,EACV,EAAE,GAAE,UAA6B,EACjC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CASpC;AAED,6EAA6E;AAC7E,wBAAsB,eAAe,CACnC,EAAE,GAAE,UAA6B,EACjC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAAC,WAAW,CAAC,CAEtB;AAED,wFAAwF;AACxF,wBAAsB,gBAAgB,CACpC,WAAW,EAAE,WAAW,EACxB,EAAE,GAAE,UAA6B,EACjC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAAC,IAAI,CAAC,CAKf;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,WAAW,EAClB,EAAE,GAAE,UAA6B,EACjC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAAC,WAAW,CAAC,CAOtB;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,EAAE,GAAE,UAA6B,EACjC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAAC,MAAM,CAAC,CAQjB;AAED,sGAAsG;AACtG,wBAAsB,eAAe,CACnC,EAAE,GAAE,UAA6B,EACjC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAE7B;AAED,oGAAoG;AACpG,wBAAsB,YAAY,CAChC,EAAE,GAAE,UAA6B,EACjC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAAC,aAAa,EAAE,CAAC,CAE1B;AAED;;;;;GAKG;AACH,wBAAsB,UAAU,CAC9B,OAAO,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,EACjF,EAAE,GAAE,UAA6B,EACjC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAAC;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,SAAS,EAAE,aAAa,EAAE,CAAA;CAAE,CAAC,CAgBhE;AAED,gFAAgF;AAChF,wBAAsB,aAAa,CACjC,EAAE,EAAE,MAAM,EACV,EAAE,GAAE,UAA6B,EACjC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAQpC;AAWD;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,EAAE,GAAE,UAA6B,EACjC,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,WAAW,KAAK,IAAI,GACxC,gBAAgB,CAclB"}

package/dist/registry.js

@@ -3,6 +3,8 @@ import { randomBytes } from 'node:crypto';
 import { isDriverName } from './driver-names.js';
 import { isPublishPick } from './publish-levels.js';
 import { nodeFs } from './node-fs.js';
+/** The cap on saved machines and on a name's length, so a hand-edited file cannot bloat. */
+const MACHINE_LIMITS = { count: 50, label: 60 };
 /** The cap on saved custom presets, and the per-field lengths — enough for real prompts, bounded
  * so a hand-edited or hostile registry can't bloat the home file. */
 const CUSTOM_PRESET_LIMITS = { count: 30, label: 80, prompt: 20_000 };
@@ -10,7 +12,7 @@ const CUSTOM_PRESET_LIMITS = { count: 30, label: 80, prompt: 20_000 };
 const START_FROM_LIMIT = 200;
 /** The registry file name: a single file under `$XDG_CONFIG_HOME` (dotted under `$HOME`). */
 export const REGISTRY_FILE = 'openagent.json';
-/** Owner read/write only: the file holds the daemon token (#1051). */
+/** Owner read/write only: the file holds the bridge's key and the saved machines' keys. */
 export const REGISTRY_FILE_MODE = 0o600;
 /**
  * Deterministic, URL-safe id for a project path: the sanitized basename plus a
@@ -166,6 +168,27 @@ export function sanitizeCustomPresets(value) {
     }
     return out;
 }
+/** Keep well-formed machines, one per address (first wins), names and count capped. */
+function sanitizeMachines(value) {
+    if (!Array.isArray(value))
+        return [];
+    const machines = [];
+    const seen = new Set();
+    for (const raw of value) {
+        if (machines.length >= MACHINE_LIMITS.count)
+            break;
+        if (typeof raw !== 'object' || raw === null)
+            continue;
+        const { label, url, key, door, pin } = raw;
+        if (typeof label !== 'string' || typeof url !== 'string' || typeof key !== 'string' || typeof door !== 'string')
+            continue;
+        if (!url || !key || !door || seen.has(url))
+            continue;
+        seen.add(url);
+        machines.push({ id: url, label: label.trim().slice(0, MACHINE_LIMITS.label) || url, url, key, door, ...(typeof pin === 'string' && pin ? { pin } : {}) });
+    }
+    return machines;
+}
 /**
  * Read the whole registry. Forgiving: a missing / unreadable / malformed file — or one in a shape
  * this no longer writes — yields an empty registry, never throws. Projects are deduped by resolved
@@ -184,11 +207,13 @@ export async function readRegistry(fs = nodeRegistryFs(), env = process.env) {
         return empty;
     const obj = parsed;
     const projects = Array.isArray(obj.projects) ? dedupeProjects(obj.projects) : [];
+    const machines = sanitizeMachines(obj.machines);
     return {
         projects,
         preferences: sanitizePreferences(obj.preferences),
-        // #1051: kept only as a non-empty string, so a hand-edited registry can't smuggle a junk token.
-        ...(typeof obj.daemonToken === 'string' && obj.daemonToken ? { daemonToken: obj.daemonToken } : {}),
+        // Kept only as a non-empty string, so a hand-edited registry can't smuggle a junk key.
+        ...(typeof obj.bridgeToken === 'string' && obj.bridgeToken ? { bridgeToken: obj.bridgeToken } : {}),
+        ...(machines.length ? { machines } : {}),
     };
 }
 /**
@@ -201,18 +226,19 @@ export async function readRegistry(fs = nodeRegistryFs(), env = process.env) {
  * now only ever damages the temp file. The temp is left behind on failure rather than swept up:
  * one stray file is the cheaper half of that trade.
  *
- * Written owner-only (#1095): the file carries the daemon token, so a default-umask 0644 in a
+ * Written owner-only (#1095): the file carries the bridge's key and the saved machines' keys, so a default-umask 0644 in a
  * shared home would hand it to every other account on the machine.
  * The mode is set on the temp file, before the rename — narrowing after it would leave a window
  * where the real path is readable. Best-effort: a filesystem with no permission bits still writes.
  */
 async function writeRegistry(registry, fs, env) {
     const file = registryPath(env);
-    const { projects, preferences, daemonToken } = registry;
+    const { projects, preferences, bridgeToken, machines } = registry;
     const contents = {
         projects,
         preferences,
-        ...(daemonToken ? { daemonToken } : {}),
+        ...(bridgeToken ? { bridgeToken } : {}),
+        ...(machines?.length ? { machines } : {}),
     };
     const json = JSON.stringify(contents, null, 2);
     await fs.mkdir(dirname(file));
@@ -316,25 +342,70 @@ export async function patchPreferences(patch, fs = nodeRegistryFs(), env = proce
     });
 }
 /**
- * The shared daemon token (#1051): read the persisted one, or generate + persist it now. Called
- * only on a non-loopback bind, so a loopback-only machine never grows one. Serialized with the
- * other mutators so two concurrent binds can't each write a different token. `base64url` of 32
- * random bytes: URL-safe, so it drops straight into a `?token=` without encoding.
+ * The browser bridge's key (#1237): read the persisted one, or generate + persist it now. Called
+ * only with the bridge switched on, so a machine that never had it on never grows one. Serialized
+ * with the other mutators so two concurrent starts can't each write a different key.
+ */
+export async function ensureBridgeToken(fs = nodeRegistryFs(), env = process.env) {
+    return serialize(async () => {
+        const registry = await readRegistry(fs, env);
+        if (registry.bridgeToken)
+            return registry.bridgeToken;
+        const bridgeToken = randomBytes(32).toString('base64url');
+        await writeRegistry({ ...registry, bridgeToken }, fs, env);
+        return bridgeToken;
+    });
+}
+/** The persisted bridge key, or `undefined` when none exists. A pure read: it never generates one. */
+export async function readBridgeToken(fs = nodeRegistryFs(), env = process.env) {
+    return (await readRegistry(fs, env)).bridgeToken;
+}
+/** The saved machines, newest first. Forgiving like every read of this file: none on a bad file. */
+export async function listMachines(fs = nodeRegistryFs(), env = process.env) {
+    return (await readRegistry(fs, env)).machines ?? [];
+}
+/**
+ * Save a machine, newest first. One per address: saving an address again replaces its name and
+ * its key, which is how a machine whose key changed is fixed. Answers the stored record, and the
+ * records it took the place of (the one saved at that address before, the oldest past the cap):
+ * each still holds a key the caller takes out of its machine.
  */
-export async function ensureDaemonToken(fs = nodeRegistryFs(), env = process.env) {
+export async function addMachine(machine, fs = nodeRegistryFs(), env = process.env) {
     return serialize(async () => {
         const registry = await readRegistry(fs, env);
-        if (registry.daemonToken)
-            return registry.daemonToken;
-        const daemonToken = randomBytes(32).toString('base64url');
-        await writeRegistry({ ...registry, daemonToken }, fs, env);
-        return daemonToken;
+        const record = {
+            id: machine.url,
+            label: machine.label?.trim().slice(0, MACHINE_LIMITS.label) || hostOf(machine.url),
+            url: machine.url,
+            key: machine.key,
+            door: machine.door,
+            ...(machine.pin ? { pin: machine.pin } : {}),
+        };
+        const before = registry.machines ?? [];
+        const machines = [record, ...before.filter(saved => saved.id !== record.id)].slice(0, MACHINE_LIMITS.count);
+        await writeRegistry({ ...registry, machines }, fs, env);
+        return { record, displaced: before.filter(saved => !machines.includes(saved)) };
     });
 }
-/** The persisted daemon token (#1051), or `undefined` when none exists. A pure read, so a process
- * that only prints the reachable URL never generates one. */
-export async function readDaemonToken(fs = nodeRegistryFs(), env = process.env) {
-    return (await readRegistry(fs, env)).daemonToken;
+/** Take a saved machine off the list, by id. Answers the one that was there. */
+export async function removeMachine(id, fs = nodeRegistryFs(), env = process.env) {
+    return serialize(async () => {
+        const registry = await readRegistry(fs, env);
+        const removed = (registry.machines ?? []).find(saved => saved.id === id);
+        if (!removed)
+            return undefined;
+        await writeRegistry({ ...registry, machines: (registry.machines ?? []).filter(saved => saved.id !== id) }, fs, env);
+        return removed;
+    });
+}
+/** An address's host and port (`192.168.1.5:4200`): a machine's name when the person gave none. */
+function hostOf(url) {
+    try {
+        return new URL(url).host;
+    }
+    catch {
+        return url;
+    }
 }
 /** A {@link PreferencesStore} bound to the real registry file, wired by the daemon so the
  * dashboard's preferences RPCs read/write the user's home file.