@wipcomputer/wip-ldm-os 0.4.85-alpha.3 → 0.4.85-alpha.32

package/shared/templates/install-prompt.md

@@ -6,7 +6,19 @@ Open your AI and paste this:
 
 Read https://wip.computer/install/wip-ldm-os.txt
 
-Check if LDM OS is already installed. If it is, run ldm install --dry-run and show me what I have and what's new.
+Use the install document and live local checks as the source of truth.
+Do not search memory or prior notes for this install. Do not pre-load context from `MEMORY.md`, `crystal_search`, local skill dev guides, or other local memory before fetching the install document.
+Do not run GitHub commands during this install flow. Do not run or request approval for `gh release`, `gh api`, or `gh search`. If release notes are not available from local or npm metadata, say that and do not fetch them from GitHub.
+
+Check if LDM OS is installed (`which ldm && ldm --version`). Branch.
+
+If installed: run `ldm status`, check available npm tracks from the install document, and show me the version table, what's new for each component, and which stable/current, beta, and alpha versions are available. Then ask:
+- Do you have questions?
+- Want to see a dry run?
+
+If yes to dry run, use the selected track's dry-run path from the install document.
+
+If I say install, use the selected track's install path from the install document, then run `ldm doctor`.
 
 If not, walk me through setup and explain:
 
@@ -19,7 +31,13 @@ Then ask:
 - Do you have questions?
 - Want to see a dry run?
 
-If I say yes: Install the CLI first (npm install -g @wipcomputer/wip-ldm-os) and then run ldm install --dry-run.
+If yes to dry run, install the CLI first using the selected track's bootstrap command from the install document.
+
+Then run:
+`ldm init --dry-run`
+
+If I say install, run:
+`ldm init`
 
 Show me exactly what will change. Don't install anything until I say "install".
 

package/src/boot/README.md

@@ -8,7 +8,24 @@ Reads 9 files from the Dream Weaver Boot Sequence (SHARED-CONTEXT.md, SOUL.md, C
 
 ## Content Budget
 
-~700 lines, ~3,500 tokens. Under 2% of the context window. Large files (journals, daily logs) are truncated. Missing files are skipped gracefully.
+Large files are line-capped and stale journals are dropped to path-only lines, so the payload stays small. Missing files are skipped gracefully. The last line of every boot payload is a one-line summary (`== Boot payload: N bytes, M lines, K sections. Capped: ... Stale/path-only: ... ==`) so future slowness triage is trivial.
+
+### Per-step line caps
+
+Every step has a line cap. If `boot-config.json` sets `maxLines` for a step, that wins. Otherwise these code defaults apply. They live in `boot-hook.mjs`, not just the config template, because the installer preserves an existing user `boot-config.json` and never overwrites it, so a config-only change would never reach existing installs:
+
+- `sharedContext`: 80
+- `soul`: 80
+- `context`: 60
+- `repoLocations`: 80
+
+When a file is truncated, the injected content ends with a marker naming the full path so the rest can be read on demand.
+
+### Staleness cutoffs
+
+`most-recent` steps (journals) inject the newest dated file only if it is fresh. If the newest file is older than `stalenessDays` (default 14, overridable top-level or per-step), the body is NOT injected: a single line with the file path, date, and age is emitted instead. This stops a four-month-old "most recent" journal from being re-injected every session.
+
+`daily-logs` steps have the same guard via `dailyLogStalenessDays` (default 2). Day files are today/yesterday by construction, so this is defensive.
 
 ## Deploy
 
@@ -49,6 +66,12 @@ Should output JSON with `hookSpecificOutput.additionalContext` containing all bo
 
 `boot-config.json` defines paths and limits for each boot step. Uses `~` shorthand (resolved at runtime). To support a different agent (cc-air), deploy a different config alongside the same script.
 
+Optional keys:
+
+- Top-level `stalenessDays` (default 14) and `dailyLogStalenessDays` (default 2): staleness cutoffs for `most-recent` and `daily-logs` steps. Per-step keys of the same name override the top-level value.
+- Per-step `maxLines`: line cap for that step. Overrides the code default (see Content Budget).
+- Top-level `maxTotalLines` (default 2000): hard safety cap across all steps.
+
 ## Adding a Boot Step
 
 1. Add an entry to `boot-config.json` under `steps`

package/src/boot/boot-config.json

@@ -2,19 +2,23 @@
   "agentId": "cc-mini",
   "timezone": "America/Los_Angeles",
   "maxTotalLines": 2000,
+  "stalenessDays": 14,
+  "dailyLogStalenessDays": 2,
   "steps": {
     "sharedContext": {
       "path": "~/.openclaw/workspace/SHARED-CONTEXT.md",
       "label": "SHARED-CONTEXT.md",
       "stepNumber": 2,
-      "critical": true
+      "critical": true,
+      "maxLines": 80
     },
     "journals": {
       "dir": "~/Documents/wipcomputer--mac-mini-01/staff/Parker/Claude Code - Mini/documents/journals",
       "label": "Most Recent Journal (Parker)",
       "stepNumber": 3,
       "maxLines": 80,
-      "strategy": "most-recent"
+      "strategy": "most-recent",
+      "stalenessDays": 14
     },
     "workspaceDailyLogs": {
       "dir": "~/.openclaw/workspace/memory",
@@ -22,7 +26,8 @@
       "stepNumber": 4,
       "maxLines": 40,
       "strategy": "daily-logs",
-      "days": ["today", "yesterday"]
+      "days": ["today", "yesterday"],
+      "dailyLogStalenessDays": 2
     },
     "fullHistory": {
       "label": "Full History",
@@ -33,19 +38,22 @@
       "path": "~/.ldm/agents/cc-mini/CONTEXT.md",
       "label": "CC CONTEXT.md",
       "stepNumber": 6,
-      "critical": true
+      "critical": true,
+      "maxLines": 60
     },
     "soul": {
       "path": "~/.ldm/agents/cc-mini/SOUL.md",
       "label": "CC SOUL.md",
-      "stepNumber": 7
+      "stepNumber": 7,
+      "maxLines": 80
     },
     "ccJournals": {
       "dir": "~/.ldm/agents/cc-mini/memory/journals",
       "label": "Most Recent CC Journal",
       "stepNumber": 8,
       "maxLines": 80,
-      "strategy": "most-recent"
+      "strategy": "most-recent",
+      "stalenessDays": 14
     },
     "ccDailyLog": {
       "dir": "~/.ldm/agents/cc-mini/memory/daily",
@@ -53,13 +61,15 @@
       "stepNumber": 9,
       "maxLines": 60,
       "strategy": "daily-logs",
-      "days": ["today", "yesterday"]
+      "days": ["today", "yesterday"],
+      "dailyLogStalenessDays": 2
     },
     "repoLocations": {
       "path": "~/.claude/projects/-Users-lesa--openclaw/memory/repo-locations.md",
       "label": "repo-locations.md",
       "stepNumber": 10,
-      "critical": true
+      "critical": true,
+      "maxLines": 80
     }
   }
 }

package/src/boot/boot-hook.mjs

@@ -38,18 +38,63 @@ function listDirSafe(dirPath) {
   }
 }
 
-function truncateTop(content, maxLines) {
-  if (!maxLines || !content) return content;
+// Per-step default line caps applied when boot-config.json does not set
+// maxLines for the step. Keyed by the step key in config.steps. Any of these
+// can be overridden per-step via a maxLines value in boot-config.json.
+// Lives in code (not just the config template) because the installer preserves
+// an existing user boot-config.json, so config-template changes never reach
+// existing installs. Defaults must ride along with the hook.
+const DEFAULT_MAX_LINES = {
+  sharedContext: 80,
+  soul: 80,
+  context: 60,
+  repoLocations: 80,
+};
+
+// Default staleness cutoffs. Overridable via top-level config keys
+// (stalenessDays, dailyLogStalenessDays) or per-step keys of the same name.
+const DEFAULT_STALENESS_DAYS = 14; // most-recent strategy (journals)
+const DEFAULT_DAILY_LOG_STALENESS_DAYS = 2; // daily-logs strategy guard
+
+function resolveMaxLines(key, step) {
+  if (step.maxLines != null) return step.maxLines;
+  if (DEFAULT_MAX_LINES[key] != null) return DEFAULT_MAX_LINES[key];
+  return null;
+}
+
+// Returns { text, capped }. When truncation happens, the marker names the
+// full path so a future reader can pull the rest.
+function truncateTop(content, maxLines, fullPath) {
+  if (!maxLines || !content) return { text: content, capped: false };
   const lines = content.split('\n');
-  if (lines.length <= maxLines) return content;
-  return lines.slice(0, maxLines).join('\n') + `\n[... truncated at ${maxLines} lines, ${lines.length} total ...]`;
+  if (lines.length <= maxLines) return { text: content, capped: false };
+  const where = fullPath || '(path unknown)';
+  const marker = `\n[... truncated at ${maxLines} of ${lines.length} lines. Read the rest: ${where} ...]`;
+  return { text: lines.slice(0, maxLines).join('\n') + marker, capped: true };
 }
 
-function truncateBottom(content, maxLines) {
-  if (!maxLines || !content) return content;
+function truncateBottom(content, maxLines, fullPath) {
+  if (!maxLines || !content) return { text: content, capped: false };
   const lines = content.split('\n');
-  if (lines.length <= maxLines) return content;
-  return `[... showing last ${maxLines} of ${lines.length} lines ...]\n` + lines.slice(-maxLines).join('\n');
+  if (lines.length <= maxLines) return { text: content, capped: false };
+  const where = fullPath || '(path unknown)';
+  const marker = `[... showing last ${maxLines} of ${lines.length} lines. Read the rest: ${where} ...]\n`;
+  return { text: marker + lines.slice(-maxLines).join('\n'), capped: true };
+}
+
+// Extract a YYYY-MM-DD prefix from a filename, or null if none.
+function dateStrFromName(fileName) {
+  const m = /^(\d{4}-\d{2}-\d{2})/.exec(fileName || '');
+  return m ? m[1] : null;
+}
+
+// Whole-day difference (todayStr - dateStr) in days. Both are YYYY-MM-DD.
+// Positive means dateStr is in the past. null if either is unparseable.
+function ageInDays(dateStr, todayStr) {
+  const a = Date.parse(`${dateStr}T00:00:00Z`);
+  const b = Date.parse(`${todayStr}T00:00:00Z`);
+  if (Number.isNaN(a) || Number.isNaN(b)) return null;
+  return Math.round((b - a) / 86400000);
 }
 
 function getTodayAndYesterday(timezone) {
@@ -99,6 +144,8 @@ function getDefaultConfig() {
     agentId: 'cc-mini',
     timezone: 'America/Los_Angeles',
     maxTotalLines: 2000,
+    stalenessDays: DEFAULT_STALENESS_DAYS,
+    dailyLogStalenessDays: DEFAULT_DAILY_LOG_STALENESS_DAYS,
     steps: {
       sharedContext: { path: '~/.openclaw/workspace/SHARED-CONTEXT.md', label: 'SHARED-CONTEXT.md', stepNumber: 2, critical: true },
       journals: { dir: '~/.ldm/agents/cc-mini/memory/journals', label: 'Most Recent CC Journal (Legacy)', stepNumber: 3, maxLines: 80, strategy: 'most-recent' },
@@ -113,52 +160,79 @@ function getDefaultConfig() {
   };
 }
 
-function processStep(key, step, dates) {
+function processStep(key, step, dates, config) {
   // Reminder-only step (e.g. full history)
   if (step.reminder) {
-    return { content: step.reminder, loaded: true, fileName: null };
+    return { content: step.reminder, loaded: true, fileName: null, capped: false, stale: false };
   }
 
+  const maxLines = resolveMaxLines(key, step);
+
   // Single file step
   if (step.path) {
+    const resolved = resolvePath(step.path);
     const content = readFileSafe(step.path);
-    if (!content) return { content: null, loaded: false, fileName: resolvePath(step.path) };
-    const trimmed = step.maxLines ? truncateTop(content, step.maxLines) : content;
-    return { content: trimmed, loaded: true, fileName: resolvePath(step.path) };
+    if (!content) return { content: null, loaded: false, fileName: resolved, capped: false, stale: false };
+    const { text, capped } = truncateTop(content, maxLines, resolved);
+    return { content: text, loaded: true, fileName: resolved, capped, stale: false };
   }
 
   // Directory-based step
   if (step.dir) {
     if (step.strategy === 'most-recent') {
       const fileName = findMostRecent(step.dir);
-      if (!fileName) return { content: null, loaded: false, fileName: resolvePath(step.dir) };
+      if (!fileName) return { content: null, loaded: false, fileName: resolvePath(step.dir), capped: false, stale: false };
       const fullPath = join(resolvePath(step.dir), fileName);
       const content = readFileSafe(fullPath);
-      if (!content) return { content: null, loaded: false, fileName: fullPath };
-      const trimmed = step.maxLines ? truncateTop(content, step.maxLines) : content;
-      return { content: trimmed, loaded: true, fileName: `${fileName}` };
+      if (!content) return { content: null, loaded: false, fileName: fullPath, capped: false, stale: false };
+
+      // Staleness cutoff: if the newest file is older than the cutoff, do not
+      // inject its body. Emit a single line with the path and date instead.
+      const stalenessDays = step.stalenessDays ?? config.stalenessDays ?? DEFAULT_STALENESS_DAYS;
+      const fileDate = dateStrFromName(fileName);
+      const age = fileDate ? ageInDays(fileDate, dates.today) : null;
+      if (age != null && age > stalenessDays) {
+        const line = `[stale: newest file is ${fileDate} (${age}d old, cutoff ${stalenessDays}d). Body not injected. Read if needed: ${fullPath}]`;
+        return { content: line, loaded: true, fileName, capped: false, stale: true };
+      }
+
+      const { text, capped } = truncateTop(content, maxLines, fullPath);
+      return { content: text, loaded: true, fileName, capped, stale: false };
     }
 
     if (step.strategy === 'daily-logs') {
+      const dailyStalenessDays = step.dailyLogStalenessDays ?? config.dailyLogStalenessDays ?? DEFAULT_DAILY_LOG_STALENESS_DAYS;
       const parts = [];
       let anyLoaded = false;
+      let anyCapped = false;
+      let anyStale = false;
       for (const day of (step.days || ['today'])) {
         const dateStr = day === 'today' ? dates.today : dates.yesterday;
         const fileName = `${dateStr}.md`;
         const fullPath = join(resolvePath(step.dir), fileName);
         const content = readFileSafe(fullPath);
-        if (content) {
-          const trimmed = step.maxLines ? truncateBottom(content, step.maxLines) : content;
-          parts.push(`--- ${day} (${dateStr}) ---\n${trimmed}`);
-          anyLoaded = true;
+        if (!content) continue;
+        anyLoaded = true;
+
+        // Guard: a day file dated older than the cutoff should not normally
+        // happen (days are today/yesterday), but if it does, emit path-only.
+        const age = ageInDays(dateStr, dates.today);
+        if (age != null && age > dailyStalenessDays) {
+          parts.push(`--- ${day} (${dateStr}) ---\n[stale: ${age}d old, cutoff ${dailyStalenessDays}d. Body not injected. Read if needed: ${fullPath}]`);
+          anyStale = true;
+          continue;
         }
+
+        const { text, capped } = truncateBottom(content, maxLines, fullPath);
+        if (capped) anyCapped = true;
+        parts.push(`--- ${day} (${dateStr}) ---\n${text}`);
       }
-      if (!anyLoaded) return { content: null, loaded: false, fileName: resolvePath(step.dir) };
-      return { content: parts.join('\n\n'), loaded: true, fileName: null };
+      if (!anyLoaded) return { content: null, loaded: false, fileName: resolvePath(step.dir), capped: false, stale: false };
+      return { content: parts.join('\n\n'), loaded: true, fileName: null, capped: anyCapped, stale: anyStale };
     }
   }
 
-  return { content: null, loaded: false, fileName: null };
+  return { content: null, loaded: false, fileName: null, capped: false, stale: false };
 }
 
 async function main() {
@@ -181,6 +255,8 @@ async function main() {
   const sections = [];
   const loaded = [];
   const skipped = [];
+  const cappedSteps = [];
+  const staleSteps = [];
   let totalLines = 0;
 
   // Sort steps by stepNumber
@@ -189,7 +265,7 @@ async function main() {
   );
 
   for (const [key, step] of stepEntries) {
-    const result = processStep(key, step, dates);
+    const result = processStep(key, step, dates, config);
 
     if (result.loaded && result.content) {
       const criticalTag = step.critical ? ' (CRITICAL)' : '';
@@ -198,6 +274,8 @@ async function main() {
       sections.push(`${header}\n${result.content}`);
       loaded.push(`Step ${step.stepNumber}: ${step.label}`);
       totalLines += result.content.split('\n').length;
+      if (result.capped) cappedSteps.push(`Step ${step.stepNumber}`);
+      if (result.stale) staleSteps.push(`Step ${step.stepNumber}`);
     } else {
       skipped.push(`Step ${step.stepNumber}: ${step.label}`);
       if (result.fileName) {
@@ -275,16 +353,28 @@ async function main() {
   } catch {}
 
   const elapsed = Date.now() - startTime;
-  const footer = `== Boot complete. Loaded ${loaded.length}/9 files in ${elapsed}ms. ==`;
+  const footer = `== Boot complete. Loaded ${loaded.length} sections in ${elapsed}ms. ==`;
   if (skipped.length > 0) {
     sections.push(`${footer}\nSkipped: ${skipped.join(', ')}`);
   } else {
     sections.push(footer);
   }
 
-  const additionalContext =
+  // Body first, then a one-line payload summary so future slowness triage is
+  // trivial: total bytes/lines injected, which steps were line-capped, and
+  // which were skipped as stale (path-only).
+  const bodyText =
     `== LDM OS BOOT SEQUENCE (loaded automatically by SessionStart hook) ==\n\n` +
     sections.join('\n\n');
+  const payloadBytes = Buffer.byteLength(bodyText, 'utf-8');
+  const payloadLines = bodyText.split('\n').length;
+  const summary =
+    `== Boot payload: ${payloadBytes} bytes, ${payloadLines} lines, ${loaded.length} sections. ` +
+    `Capped: ${cappedSteps.length ? cappedSteps.join(', ') : 'none'}. ` +
+    `Stale/path-only: ${staleSteps.length ? staleSteps.join(', ') : 'none'}. ` +
+    `Missing: ${skipped.length ? skipped.length : 'none'}. ==`;
+
+  const additionalContext = `${bodyText}\n\n${summary}`;
 
   const output = {
     hookSpecificOutput: {
@@ -294,7 +384,7 @@ async function main() {
   };
 
   process.stdout.write(JSON.stringify(output));
-  process.stderr.write(`${TAG} loaded ${loaded.length}/9 files in ${elapsed}ms\n`);
+  process.stderr.write(`${TAG} loaded ${loaded.length} sections, ${payloadBytes} bytes in ${elapsed}ms\n`);
   process.exit(0);
 }
 

package/src/boot/installer.mjs

@@ -142,13 +142,20 @@ export function configureSessionStartHook() {
   if (!settings.hooks) settings.hooks = {};
   if (!Array.isArray(settings.hooks.SessionStart)) settings.hooks.SessionStart = [];
 
-  // Find existing boot-hook entry
-  const existingIdx = settings.hooks.SessionStart.findIndex((entry) => {
+  const isBootEntry = (entry) => {
     const hooks = entry?.hooks;
     if (!Array.isArray(hooks)) return false;
     return hooks.some((h) =>
       h?.command?.includes('boot-hook') || h?.command?.includes('shared/boot')
     );
+  };
+
+  // Find ALL boot-hook entries. Duplicate registrations accumulate across
+  // installs (10 copies observed 2026-07-04, each running the boot script
+  // once per session), so this owns the whole set, not just the first.
+  const ownedIdxs = [];
+  settings.hooks.SessionStart.forEach((entry, i) => {
+    if (isBootEntry(entry)) ownedIdxs.push(i);
   });
 
   const hookEntry = {
@@ -160,16 +167,32 @@ export function configureSessionStartHook() {
     }],
   };
 
-  if (existingIdx >= 0) {
-    // Update in place
-    settings.hooks.SessionStart[existingIdx] = hookEntry;
-    return 'SessionStart hook updated in settings.json';
-  } else {
-    // Append
-    settings.hooks.SessionStart.push(hookEntry);
+  // Collapse duplicates beyond the first. Walk right-to-left so earlier
+  // indices stay valid while splicing.
+  let removed = 0;
+  for (let j = ownedIdxs.length - 1; j >= 1; j--) {
+    settings.hooks.SessionStart.splice(ownedIdxs[j], 1);
+    removed++;
+  }
+
+  if (ownedIdxs.length > 0) {
+    const idx = ownedIdxs[0];
+    const identical =
+      JSON.stringify(settings.hooks.SessionStart[idx]) === JSON.stringify(hookEntry);
+    if (identical && removed === 0) {
+      // Nothing to change; do not touch the file.
+      return 'SessionStart hook already configured';
+    }
+    settings.hooks.SessionStart[idx] = hookEntry;
     writeJSON(CC_SETTINGS, settings);
-    return 'SessionStart hook added to settings.json';
+    return removed > 0
+      ? `SessionStart hook updated in settings.json (removed ${removed} duplicate entr${removed === 1 ? 'y' : 'ies'})`
+      : 'SessionStart hook updated in settings.json';
   }
+
+  settings.hooks.SessionStart.push(hookEntry);
+  writeJSON(CC_SETTINGS, settings);
+  return 'SessionStart hook added to settings.json';
 }
 
 // ── Registry ──

package/src/hosted-mcp/.env.example

@@ -1,3 +1,7 @@
 # Kaleidoscope server environment
 # Copy to .env and fill in values. Never commit .env itself.
 DATABASE_URL=postgresql://kaleidoscope:YOUR_PASSWORD@localhost:5432/kaleidoscope
+KALEIDOSCOPE_LIVE_WALL_FILE=/var/lib/wip/kaleidoscope-live-wall.json
+KALEIDOSCOPE_LIVE_WALL_MEDIA_DIR=/var/www/wip.computer/public_html/media/kaleidoscope/generated
+KALEIDOSCOPE_LIVE_WALL_MAX_IMAGE_BYTES=10485760
+KALEIDOSCOPE_LIVE_WALL_FETCH_TIMEOUT_MS=15000

package/src/hosted-mcp/README.md

@@ -0,0 +1,37 @@
+# Hosted MCP And Relay
+
+This directory contains the public source for the hosted WIP relay that serves `wip.computer`.
+
+It includes:
+
+- OAuth, passkey, and hosted MCP routes in `server.mjs`;
+- Codex Remote Control relay routes under `/api/codex-relay/*`;
+- nginx snippets for the relay, MCP, and site proxy;
+- Prisma schema and migrations for Postgres-backed account, API key, passkey, device, and wallet state;
+- PM2 and deploy helpers for the WIP-operated VPS.
+
+WIP runs the production hosted relay so user setup is easy and works across networks. The source is public so users can inspect the relay path and build their own infrastructure.
+
+## Codex Remote Control WebSocket Abuse Limits
+
+The browser relay path enforces app-layer limits after a Remote Control ticket attaches:
+
+- max browser frame bytes;
+- max messages per rate window;
+- max browser bytes per rate window;
+- max malformed browser frames;
+- max pending bytes on the daemon socket before forwarding;
+- max browser sockets per `(tenant id, thread id)`;
+- idle connection TTL;
+- env-driven operator kill switch for all tenants or selected tenant ids.
+
+Violation logs are metadata-only: reason, tenant id, thread id, and a generated connection id. The relay does not inspect decrypted Remote Control payloads.
+
+Operational notes:
+
+- rate windows are tumbling windows, not sliding windows, so short bursts can straddle a window boundary;
+- kill switch environment changes take effect after the hosted relay process reloads;
+- idle close runs on a timer, so the close can happen up to one polling interval after the configured TTL;
+- daemon-to-browser Codex output is intentionally not throughput-limited in this browser-abuse slice.
+
+For the self-hosting shape, read [docs/self-host.md](docs/self-host.md).

package/src/hosted-mcp/app/footer.js

@@ -0,0 +1,74 @@
+// Shared footer for all Kaleidoscope pages (production-owned).
+// Include with: <div id="kscope-footer"></div><script src="/app/footer.js"></script>
+(function() {
+  var container = document.getElementById('kscope-footer');
+  if (!container) return;
+
+  var mobile = navigator.maxTouchPoints > 0 && window.innerWidth < 768;
+
+  // Desktop: fixed at bottom. Mobile: in page flow (below fold).
+  if (mobile) {
+    container.style.cssText = 'background:#FFFDF5;padding:16px 0;';
+  } else {
+    container.style.cssText = 'position:fixed;bottom:0;left:0;right:0;background:#FFFDF5;padding:16px 0;';
+  }
+
+  var inner = document.createElement('div');
+  inner.style.cssText = 'max-width:980px;margin:0 auto;padding:0 24px;border-top:1px solid rgba(0,0,0,0.06);padding-top:16px;text-align:left;font-size:13px;color:#a8a4a0;line-height:1.6;';
+
+  // On mobile, copyright and links on separate lines (like Apple)
+  if (mobile) {
+    inner.innerHTML = '<p style="margin:0;">WIP Computer, Inc.</p>'
+      + '<p style="margin:2px 0 0;">Learning Dreaming Machines</p>'
+      + '<p style="margin:8px 0 0;">Copyright &copy; 2026 WIP Computer, Inc. All rights reserved.</p>'
+      + '<p style="margin:4px 0 0;">'
+      + '<a href="/legal/privacy/" style="color:#a8a4a0;text-decoration:none;">Privacy Policy</a> &nbsp;|&nbsp; '
+      + '<a href="/legal/internet-services/terms/site.html" style="color:#a8a4a0;text-decoration:none;">Terms of Use</a></p>'
+      + '<p style="margin:4px 0 0;">'
+      + '<a href="/agent.txt" style="color:#a8a4a0;text-decoration:none;">Are you an AI Agent?</a></p>'
+      + '<p style="margin:4px 0 0;">Made in California.</p>';
+  } else {
+    inner.innerHTML = '<p style="margin:0;">WIP Computer, Inc.</p>'
+      + '<p style="margin:2px 0 0;">Learning Dreaming Machines</p>'
+      + '<p style="margin:8px 0 0;">Copyright &copy; 2026 WIP Computer, Inc. All rights reserved. &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;'
+      + '<a href="/legal/privacy/" style="color:#a8a4a0;text-decoration:none;">Privacy Policy</a> &nbsp;|&nbsp; '
+      + '<a href="/legal/internet-services/terms/site.html" style="color:#a8a4a0;text-decoration:none;">Terms of Use</a></p>'
+      + '<p style="margin:4px 0 0;">'
+      + '<a href="/agent.txt" style="color:#a8a4a0;text-decoration:none;">Are you an AI Agent?</a> &nbsp;|&nbsp; '
+      + '<a id="localPasskeysToggle" onclick="toggleLocalPasskeys()" style="color:#a8a4a0;text-decoration:none;cursor:pointer;display:inline-flex;align-items:center;gap:4px;vertical-align:middle;">'
+      + '<span id="passkeys-dot" style="display:inline-block;width:8px;height:8px;border-radius:50%;"></span> '
+      + '<span id="passkeys-label">Local passkeys off</span></a></p>'
+      + '<p style="margin:4px 0 0;">Made in California.</p>';
+  }
+
+  container.appendChild(inner);
+
+  // Local passkeys toggle
+  if (!window.isLocalPasskeysOn) {
+    window.isLocalPasskeysOn = function() { return localStorage.getItem('localPasskeys') === 'on'; };
+  }
+  if (!window.toggleLocalPasskeys) {
+    window.toggleLocalPasskeys = function() {
+      var on = isLocalPasskeysOn();
+      localStorage.setItem('localPasskeys', on ? 'off' : 'on');
+      updatePasskeysDot();
+    };
+  }
+  if (!window.updatePasskeysDot) {
+    window.updatePasskeysDot = function() {
+      var dot = document.getElementById('passkeys-dot');
+      var label = document.getElementById('passkeys-label');
+      if (!dot) return;
+      if (isLocalPasskeysOn()) {
+        dot.style.background = '#2E7D32';
+        dot.style.opacity = '1';
+        if (label) label.textContent = 'Local passkeys on';
+      } else {
+        dot.style.background = '#D32F2F';
+        dot.style.opacity = '0.4';
+        if (label) label.textContent = 'Local passkeys off';
+      }
+    };
+  }
+  updatePasskeysDot();
+})();