@wipcomputer/wip-ldm-os 0.4.85-alpha.30 → 0.4.85-alpha.32

package/src/hosted-mcp/demo/login.html

@@ -48,7 +48,7 @@ html, body {
 .login-card {
   position: relative;
   max-width: 380px;
-  width: 100%;
+  width: calc(100vw - 48px);
   text-align: center;
 }
 
@@ -150,11 +150,10 @@ html, body {
     <!-- Success view (legacy login flow) -->
     <div id="success-view" style="display:none">
       <p style="font-size:18px;margin-bottom:12px;color:var(--text);">Welcome, <span id="welcome-name"></span>.</p>
-      <p style="color:var(--text-muted);font-size:15px;margin-bottom:8px;">Your passkey has been saved to your phone.</p>
-      <p style="color:var(--text-muted);font-size:15px;margin-bottom:24px;">You can use it to sign in to any WIP Computer service.</p>
       <div class="login-buttons">
-        <a href="/demo/" onclick="sessionStorage.clear();" class="btn btn-primary" style="text-decoration:none;text-align:center;">Try the Demo</a>
+        <a href="/demo/" class="btn btn-primary" style="text-decoration:none;text-align:center;">Try the Demo</a>
       </div>
+      <p style="color:var(--text-muted);font-size:15px;margin:18px 0 0;">Your passkey has been saved to your phone. You can use it to sign in to any WIP Computer service.</p>
     </div>
 
     <!-- Pair-approved view (CRC pair-mode, desktop-side after phone approves) -->
@@ -163,6 +162,15 @@ html, body {
       <p style="color:var(--text-muted);font-size:15px;margin-bottom:24px;">Continue pairing on your phone. Your laptop will pick this up after you confirm.</p>
     </div>
 
+    <!-- QR authenticator confirmation view (phone-side after approving another device) -->
+    <div id="qr-auth-confirm-view" style="display:none">
+      <p style="font-size:18px;margin:0 0 24px;color:var(--text);">Your authenticated Kaleidoscope session is available on your other device.</p>
+      <div class="login-buttons">
+        <button class="btn btn-primary" id="qrAuthPrimaryBtn" onclick="backToLoginAfterQrScan()">Back to login</button>
+      </div>
+      <p id="qr-auth-close-message" style="display:none;color:var(--text-muted);font-size:15px;margin:20px 0 0;">You can close this page.</p>
+    </div>
+
     <div class="login-status" id="loginStatus" style="position:absolute;left:0;right:0;margin-top:16px;text-align:center;"></div>
   </div>
   </div>
@@ -234,12 +242,22 @@ function isSafariDesktop() {
 }
 
 function needsCustomQR() {
-  return !isMobileDevice() && !isSafariDesktop() && !isLocalPasskeysOn();
+  return !isLocalPasskeysOn();
 }
 
 // ── Local passkeys toggle (persisted in localStorage) ──
+function defaultLocalPasskeysOn() {
+  return isMobileDevice();
+}
+
+function getLocalPasskeysPreference() {
+  var stored = localStorage.getItem('localPasskeys');
+  if (stored === 'on' || stored === 'off') return stored;
+  return defaultLocalPasskeysOn() ? 'on' : 'off';
+}
+
 function isLocalPasskeysOn() {
-  return localStorage.getItem('localPasskeys') === 'on';
+  return getLocalPasskeysPreference() === 'on';
 }
 
 function toggleLocalPasskeys() {
@@ -265,7 +283,7 @@ function updatePasskeysDot() {
 
 // ── `next` continuation carrier ──
 //
-// Two whitelisted next shapes:
+// Three whitelisted next shapes:
 //
 //   PAIR_NEXT_REGEX            /pair/<CODE> using the daemon alphabet
 //                              (CODEX_PAIR_ALPHABET, length 6, L is
@@ -278,14 +296,18 @@ function updatePasskeysDot() {
 //                              desktop and mobile (this is navigation
 //                              continuation, not authority transfer).
 //
+//   DEMO_NEXT_REGEX            /demo. Standard post-login continuation
+//                              from the homepage CTA.
+//
 // Anything else is silently dropped. `next` is NOT a general redirect
 // primitive. The server validates authoritatively; this client-side
 // check is defense-in-depth.
 var PAIR_NEXT_REGEX = /^\/pair\/[ABCDEFGHJKLMNPQRSTUVWXYZ23456789]{6}$/;
 var REMOTE_CONTROL_NEXT_REGEX = /^\/codex-remote-control\/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+var DEMO_NEXT_REGEX = /^\/demo$/;
 
 function isWhitelistedNext(raw) {
-  return typeof raw === 'string' && (PAIR_NEXT_REGEX.test(raw) || REMOTE_CONTROL_NEXT_REGEX.test(raw));
+  return typeof raw === 'string' && (PAIR_NEXT_REGEX.test(raw) || REMOTE_CONTROL_NEXT_REGEX.test(raw) || DEMO_NEXT_REGEX.test(raw));
 }
 
 function readPairNextFromQuery() {
@@ -367,7 +389,7 @@ function redirectToRemoteControlIfDirectLogin(result) {
 // authority rules from plan C6 + C8:
 //
 //   - QR-scan path (approveResponse.next from the server): follow it for
-//     either whitelisted shape. The phone scanned the desktop's QR,
+//     a whitelisted next. The phone scanned the desktop's QR,
 //     signed in, and the server returned a sanitized `next`.
 //
 //   - URL fallback path (no approveResponse.next):
@@ -385,10 +407,13 @@ function redirectToRemoteControlIfDirectLogin(result) {
 // rule because it's a navigation continuation, not authority transfer.
 //
 // Returns true if it redirected (caller should not run other view-switching).
-async function followPairNextIfPresent(approveResponse, identity) {
+async function followPairNextIfPresent(approveResponse, identity, isNewAccount) {
   var next = null;
-  // Path 1: QR phone-side approve. Server-blessed next, either shape.
+  // Path 1: QR phone-side approve. Server-blessed next.
   if (approveResponse && typeof approveResponse.next === 'string' && isWhitelistedNext(approveResponse.next)) {
+    if (DEMO_NEXT_REGEX.test(approveResponse.next)) {
+      return showQrAuthenticatorConfirmation(identity, isNewAccount === true);
+    }
     next = approveResponse.next;
   } else {
     // Path 2: URL ?next= fallback (no approveResponse). Branch by
@@ -396,7 +421,7 @@ async function followPairNextIfPresent(approveResponse, identity) {
     // restricted to mobile per C8.
     var urlNext = readPairNextFromQuery();
     if (urlNext) {
-      if (REMOTE_CONTROL_NEXT_REGEX.test(urlNext)) {
+      if (REMOTE_CONTROL_NEXT_REGEX.test(urlNext) || DEMO_NEXT_REGEX.test(urlNext)) {
         next = urlNext;
       } else if (PAIR_NEXT_REGEX.test(urlNext) && isMobileDevice()) {
         next = urlNext;
@@ -418,17 +443,50 @@ async function followPairNextIfPresent(approveResponse, identity) {
   }
   sessionStorage.setItem('wip_api_key', identity.apiKey);
   if (identity.agentId) sessionStorage.setItem('wip_handle', identity.agentId);
+  storeDemoHandoffIfNeeded(next, identity, isNewAccount === true);
   location.replace(next);
   return true;
 }
 
 // ── QR Login (Chrome desktop fallback) ──
 var qrLoginPollTimer = null;
+var qrLoginMode = null;
+
+function storeDemoHandoffIfNeeded(next, identity, isNewAccount) {
+  if (!DEMO_NEXT_REGEX.test(next) || !identity || !identity.apiKey) return;
+  sessionStorage.setItem('lesa-token', identity.apiKey);
+  if (identity.agentId) sessionStorage.setItem('lesa-agent', identity.agentId);
+  if (identity.tenantId) sessionStorage.setItem('lesa-tenant', identity.tenantId);
+  if (isNewAccount) sessionStorage.setItem('lesa-new-account', 'true');
+}
+
+function showQrAuthenticatorConfirmation(identity, isNewAccount) {
+  ['signup-view', 'qr-view', 'success-view', 'pair-approved-view'].forEach(function(id) {
+    var el = document.getElementById(id);
+    if (el) el.style.display = 'none';
+  });
+  var primary = document.getElementById('qrAuthPrimaryBtn');
+  if (primary) primary.textContent = 'Back to login';
+  var closeMessage = document.getElementById('qr-auth-close-message');
+  if (closeMessage) closeMessage.style.display = 'none';
+  document.getElementById('qr-auth-confirm-view').style.display = 'block';
+  setStatus('', '');
+  return true;
+}
+
+function backToLoginAfterQrScan() {
+  qrSessionId = null;
+  qrHandle = null;
+  qrMode = 'register';
+  qrSessionMode = false;
+  location.replace('/login?next=/demo');
+}
 
 async function startQrLogin(handle, mode) {
   var btn = document.getElementById('createBtn');
   btn.disabled = true;
   setStatus('', '');
+  qrLoginMode = mode || 'register';
 
   try {
     var pairNext = readPairNextFromQuery();
@@ -499,13 +557,15 @@ async function pollQrLogin(sessionId) {
       var urlNext = readPairNextFromQuery();
       if (urlNext && PAIR_NEXT_REGEX.test(urlNext)) {
         document.getElementById('pair-approved-view').style.display = 'block';
-      } else if (data.next && REMOTE_CONTROL_NEXT_REGEX.test(data.next) && data.apiKey) {
-        // Codex remote control: pick up the credentials so the
-        // destination page is authenticated, then redirect.
+      } else if (data.next && (REMOTE_CONTROL_NEXT_REGEX.test(data.next) || DEMO_NEXT_REGEX.test(data.next)) && data.apiKey) {
+        // Standard post-login continuation: pick up the credentials
+        // so the destination page is authenticated, then redirect.
         sessionStorage.setItem('wip_api_key', data.apiKey);
         if (data.agentId) sessionStorage.setItem('wip_handle', data.agentId);
+        storeDemoHandoffIfNeeded(data.next, data, qrLoginMode === 'register');
         location.replace(data.next);
       } else {
+        storeDemoHandoffIfNeeded('/demo', data, qrLoginMode === 'register');
         document.getElementById('success-view').style.display = 'block';
         // Use credentialLabel (matches the saved-passkey label the user
         // sees in iOS Passwords / 1Password). Falls back to agentId for
@@ -523,6 +583,7 @@ function cancelQrLogin() {
     clearInterval(qrLoginPollTimer);
     qrLoginPollTimer = null;
   }
+  qrLoginMode = null;
   document.getElementById('qr-view').style.display = 'none';
   document.getElementById('signup-view').style.display = 'block';
   document.getElementById('createBtn').disabled = false;
@@ -594,7 +655,7 @@ async function doCreateAccount() {
     return;
   }
 
-  // Chrome desktop without local passkeys: use custom QR code
+  // Local passkeys off means use WIP's QR cross-device login on any device.
   if (needsCustomQR() && !qrSessionMode) {
     startQrLogin(username);
     return;
@@ -672,6 +733,7 @@ async function doCreateAccount() {
             sessionId: qrSessionId,
             agentId: result.agentId,
             apiKey: result.apiKey,
+            tenantId: result.tenantId,
             credentialLabel: result.credentialLabel,
           }),
         });
@@ -682,13 +744,13 @@ async function doCreateAccount() {
       // CRC pair-mode: if the server returned a sanitized `next`, store
       // the api_key on the phone and redirect to /pair/<CODE>. Phone is
       // the actor that completes pair-complete (plan C6).
-      if (await followPairNextIfPresent(approveResponse, result)) return;
+      if (await followPairNextIfPresent(approveResponse, result, true)) return;
+      storeDemoHandoffIfNeeded('/demo', result, true);
       document.getElementById('signup-view').style.display = 'none';
       document.getElementById('success-view').style.display = 'block';
-      // Use credentialLabel from the server, which matches the userName
-      // saved by iOS Passwords / 1Password. Falls back to the typed
-      // username, then agentId, then "you".
-      document.getElementById('welcome-name').textContent = result.credentialLabel || username || result.agentId || 'you';
+      // Prefer the typed handle for the welcome view. credentialLabel
+      // is the saved-passkey label and can be a generated user id.
+      document.getElementById('welcome-name').textContent = username || result.credentialLabel || result.agentId || 'you';
       setStatus('', '');
     } else {
       setStatus(result.error || 'Registration failed', 'error');
@@ -727,7 +789,7 @@ async function doSignIn() {
     return;
   }
 
-  // Chrome desktop without local passkeys: use QR code for sign-in.
+  // Local passkeys off means use WIP's QR cross-device login on any device.
   // With local passkeys on, let Chrome show native dialog (supports YubiKey).
   if (needsCustomQR() && !qrSessionMode) {
     startQrLogin('', 'signin');
@@ -791,6 +853,7 @@ async function doSignIn() {
             sessionId: qrSessionId,
             agentId: result.agentId,
             apiKey: result.apiKey,
+            tenantId: result.tenantId,
             credentialLabel: result.credentialLabel,
           }),
         });
@@ -799,7 +862,8 @@ async function doSignIn() {
       // CRC pair-mode: if the server returned a sanitized `next`, store
       // the api_key on the phone and redirect to /pair/<CODE>. Phone is
       // the actor that completes pair-complete (plan C6).
-      if (await followPairNextIfPresent(approveResponse, result)) return;
+      if (await followPairNextIfPresent(approveResponse, result, false)) return;
+      storeDemoHandoffIfNeeded('/demo', result, false);
       document.getElementById('signup-view').style.display = 'none';
       document.getElementById('success-view').style.display = 'block';
       // Use credentialLabel from the server, which matches the saved-

package/src/hosted-mcp/demo/privacy.html

@@ -3,221 +3,11 @@
 <head>
 <meta charset="utf-8">
 <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover">
-<title>Privacy Policy - Kaleidoscope Demo</title>
-<style>
-*, *::before, *::after { margin: 0; padding: 0; box-sizing: border-box; }
-
-body {
-  font-family: -apple-system, BlinkMacSystemFont, "SF Pro Text", system-ui, sans-serif;
-  background: #FFFDF5;
-  color: #1a1a1a;
-  -webkit-font-smoothing: antialiased;
-  -webkit-text-size-adjust: 100%;
-  line-height: 1.6;
-}
-
-.container {
-  max-width: 980px;
-  margin: 0 auto;
-  padding: 16px 24px 80px;
-}
-
-.header {
-  position: sticky;
-  top: 0;
-  z-index: 100;
-  padding: calc(12px + env(safe-area-inset-top, 0px)) 20px 12px;
-  background: rgba(255, 253, 245, 0.8);
-  -webkit-backdrop-filter: saturate(180%) blur(20px);
-  backdrop-filter: saturate(180%) blur(20px);
-  border-bottom: 1px solid rgba(0, 0, 0, 0.06);
-  display: flex;
-  align-items: center;
-}
-
-.header a {
-  display: flex;
-  align-items: center;
-  text-decoration: none;
-}
-
-h1 {
-  font-size: 28px;
-  font-weight: 700;
-  letter-spacing: -0.02em;
-  margin-bottom: 4px;
-}
-
-.subtitle {
-  font-size: 17px;
-  color: #8a8580;
-  margin-bottom: 8px;
-}
-
-.updated {
-  font-size: 13px;
-  color: #b0aaa4;
-  margin-bottom: 40px;
-}
-
-section {
-  padding: 28px 0;
-  border-top: 1px solid #e8e5de;
-}
-
-section:last-of-type {
-  border-bottom: 1px solid #e8e5de;
-}
-
-h2 {
-  font-size: 16px;
-  font-weight: 600;
-  letter-spacing: -0.01em;
-  margin-bottom: 12px;
-}
-
-p {
-  font-size: 15px;
-  line-height: 1.65;
-  color: #3a3a3a;
-  margin-bottom: 12px;
-}
-
-p:last-child {
-  margin-bottom: 0;
-}
-
-ul {
-  list-style: none;
-  padding: 0;
-  margin-bottom: 12px;
-}
-
-ul li {
-  font-size: 15px;
-  line-height: 1.65;
-  color: #3a3a3a;
-  padding-left: 16px;
-  position: relative;
-  margin-bottom: 4px;
-}
-
-ul li::before {
-  content: "\2022";
-  position: absolute;
-  left: 0;
-  color: #b0aaa4;
-}
-
-a {
-  color: #1a1a1a;
-}
-
-footer {
-  margin-top: 48px;
-  padding-bottom: 160px;
-}
-</style>
+<meta http-equiv="refresh" content="0; url=/legal/privacy/">
+<link rel="canonical" href="/legal/privacy/">
+<title>Privacy Policy - WIP Computer</title>
 </head>
 <body>
-<div class="header">
-  <a id="navIcon" href="/demo/"></a>
-</div>
-<div class="container">
-
-  <h1>Privacy Policy</h1>
-  <p class="subtitle">Kaleidoscope Demo</p>
-  <p class="updated">Last updated: April 2, 2026</p>
-
-  <section>
-    <p>WIP Computer, Inc. ("we", "us") operates the Kaleidoscope demo at wip.computer/demo.</p>
-  </section>
-
-  <section>
-    <h2>What We Collect</h2>
-    <ul>
-      <li>Passkey credential ID and public key (for authentication)</li>
-      <li>Username (optional, if you provide one)</li>
-      <li>Wallet balance (simulated, for demo purposes)</li>
-    </ul>
-  </section>
-
-  <section>
-    <h2>What We Do NOT Collect</h2>
-    <ul>
-      <li>Email addresses (unless voluntarily provided later)</li>
-      <li>Passwords (passkeys only, no passwords exist)</li>
-      <li>Biometric data (Face ID / fingerprint verification happens on your device, we never receive biometric data)</li>
-      <li>Photos (camera captures are processed in your browser, never uploaded)</li>
-      <li>Browsing history or tracking data</li>
-      <li>Cookies (we use sessionStorage only, cleared when you close the browser)</li>
-    </ul>
-  </section>
-
-  <section>
-    <h2>How We Use Your Data</h2>
-    <ul>
-      <li>Authentication: verifying your passkey when you sign in</li>
-      <li>Demo functionality: tracking simulated wallet balance</li>
-      <li>Product improvement: aggregate usage patterns (no personal data)</li>
-    </ul>
-  </section>
-
-  <section>
-    <h2>Third-Party Services</h2>
-    <ul>
-      <li>xAI (Grok Imagine API): receives text prompts for image generation. Does not receive your photos or personal data.</li>
-      <li>No analytics services</li>
-      <li>No advertising networks</li>
-      <li>No data brokers</li>
-    </ul>
-  </section>
-
-  <section>
-    <h2>Data Storage</h2>
-    <p>Your passkey data is stored on our server at wip.computer. It is not encrypted at rest in this demo version. Production versions will implement end-to-end encryption where we architecturally cannot read your data.</p>
-  </section>
-
-  <section>
-    <h2>Data Deletion</h2>
-    <p>Contact <a href="mailto:hello@wip.computer">hello@wip.computer</a> to request deletion of your passkey data.</p>
-  </section>
-
-  <section>
-    <h2>Your Rights</h2>
-    <p>You can delete your passkey from your device at any time through your device settings (Settings > Passwords on iOS, chrome://settings/passwords on Chrome).</p>
-  </section>
-
-  <section>
-    <h2>Changes</h2>
-    <p>We may update this policy. Changes will be reflected in the "Last updated" date.</p>
-  </section>
-
-  <section>
-    <h2>Contact</h2>
-    <p><a href="mailto:hello@wip.computer">hello@wip.computer</a></p>
-  </section>
-
-  <footer>
-    <div id="kscope-footer"></div>
-  </footer>
-  <script src="/demo/footer.js"></script>
-</div>
-<script>
-var SPRITE_COLS = 8, SPRITE_ROWS = 3, SPRITE_TOTAL = 24;
-var navIdx = Math.floor(Math.random() * SPRITE_TOTAL);
-function updateNavIcon() {
-  var el = document.getElementById('navIcon');
-  if (!el) return;
-  var col = navIdx % SPRITE_COLS;
-  var row = Math.floor(navIdx / SPRITE_COLS);
-  var bgPosX = (col / (SPRITE_COLS - 1)) * 100;
-  var bgPosY = (row / (SPRITE_ROWS - 1)) * 100;
-  el.innerHTML = '<div style="width:28px;height:28px;overflow:hidden;"><div style="width:100%;height:100%;background:url(/demo/sprites.png);background-size:' + (SPRITE_COLS * 100) + '% ' + (SPRITE_ROWS * 100) + '%;background-position:' + bgPosX + '% ' + bgPosY + '%;"></div></div>';
-  navIdx = (navIdx + 1) % SPRITE_TOTAL;
-}
-updateNavIcon();
-setInterval(updateNavIcon, 6000);
-</script>
+<p>The WIP Computer Privacy Policy has moved to <a href="/legal/privacy/">/legal/privacy/</a>.</p>
 </body>
 </html>

package/src/hosted-mcp/demo/tos.html

@@ -3,196 +3,11 @@
 <head>
 <meta charset="utf-8">
 <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover">
-<title>Terms of Service - Kaleidoscope Demo</title>
-<style>
-*, *::before, *::after { margin: 0; padding: 0; box-sizing: border-box; }
-
-body {
-  font-family: -apple-system, BlinkMacSystemFont, "SF Pro Text", system-ui, sans-serif;
-  background: #FFFDF5;
-  color: #1a1a1a;
-  -webkit-font-smoothing: antialiased;
-  -webkit-text-size-adjust: 100%;
-  line-height: 1.6;
-}
-
-.container {
-  max-width: 980px;
-  margin: 0 auto;
-  padding: 16px 24px 80px;
-}
-
-.header {
-  position: sticky;
-  top: 0;
-  z-index: 100;
-  padding: calc(12px + env(safe-area-inset-top, 0px)) 20px 12px;
-  background: rgba(255, 253, 245, 0.8);
-  -webkit-backdrop-filter: saturate(180%) blur(20px);
-  backdrop-filter: saturate(180%) blur(20px);
-  border-bottom: 1px solid rgba(0, 0, 0, 0.06);
-  display: flex;
-  align-items: center;
-}
-
-.header a {
-  display: flex;
-  align-items: center;
-  text-decoration: none;
-}
-
-h1 {
-  font-size: 28px;
-  font-weight: 700;
-  letter-spacing: -0.02em;
-  margin-bottom: 4px;
-}
-
-.subtitle {
-  font-size: 17px;
-  color: #8a8580;
-  margin-bottom: 8px;
-}
-
-.updated {
-  font-size: 13px;
-  color: #b0aaa4;
-  margin-bottom: 40px;
-}
-
-section {
-  padding: 28px 0;
-  border-top: 1px solid #e8e5de;
-}
-
-section:last-of-type {
-  border-bottom: 1px solid #e8e5de;
-}
-
-h2 {
-  font-size: 16px;
-  font-weight: 600;
-  letter-spacing: -0.01em;
-  margin-bottom: 12px;
-}
-
-p {
-  font-size: 15px;
-  line-height: 1.65;
-  color: #3a3a3a;
-  margin-bottom: 12px;
-}
-
-p:last-child {
-  margin-bottom: 0;
-}
-
-ul {
-  list-style: none;
-  padding: 0;
-  margin-bottom: 12px;
-}
-
-ul li {
-  font-size: 15px;
-  line-height: 1.65;
-  color: #3a3a3a;
-  padding-left: 16px;
-  position: relative;
-  margin-bottom: 4px;
-}
-
-ul li::before {
-  content: "\2022";
-  position: absolute;
-  left: 0;
-  color: #b0aaa4;
-}
-
-a {
-  color: #1a1a1a;
-}
-
-footer {
-  margin-top: 48px;
-  padding-bottom: 160px;
-}
-</style>
+<meta http-equiv="refresh" content="0; url=/legal/internet-services/kaleidoscope/">
+<link rel="canonical" href="/legal/internet-services/kaleidoscope/">
+<title>Kaleidoscope Terms of Service - WIP Computer</title>
 </head>
 <body>
-<div class="header">
-  <a id="navIcon" href="/demo/"></a>
-</div>
-<div class="container">
-
-  <h1>Terms of Service</h1>
-  <p class="subtitle">Kaleidoscope Demo</p>
-  <p class="updated">Last updated: April 2, 2026</p>
-
-  <section>
-    <p>This is a technology demonstration by WIP Computer, Inc.</p>
-  </section>
-
-  <section>
-    <h2>The Demo</h2>
-    <p>This demo showcases passkey authentication, biometric permission, and AI image generation. It is not a production service.</p>
-  </section>
-
-  <section>
-    <h2>Your Account</h2>
-    <p>Your account is created with a passkey. No email or password is stored. Your passkey lives on your device.</p>
-  </section>
-
-  <section>
-    <h2>Your Wallet</h2>
-    <p>The demo wallet starts with $5.00 in simulated credits. No real money is charged. The wallet balance is for demonstration purposes only.</p>
-  </section>
-
-  <section>
-    <h2>Generated Content</h2>
-    <p>Images generated through this demo are created using third-party AI APIs (xAI Grok Imagine). Generated content is dual-licensed:</p>
-    <ul>
-      <li>MIT License for personal, non-commercial use</li>
-      <li>Apache 2.0 License for commercial use</li>
-    </ul>
-    <p>Both you and WIP Computer, Inc. retain rights to generated content. We may use generated images for product development, marketing, and research.</p>
-  </section>
-
-  <section>
-    <h2>Uploaded Media</h2>
-    <p>Photos taken through the camera feature are processed locally in your browser. They are not uploaded to or stored on our servers. Camera access is optional and can be denied.</p>
-  </section>
-
-  <section>
-    <h2>No Warranty</h2>
-    <p>This demo is provided "as is" without warranty of any kind. WIP Computer, Inc. is not liable for any damages arising from use of this demo.</p>
-  </section>
-
-  <section>
-    <h2>Contact</h2>
-    <p><a href="mailto:hello@wip.computer">hello@wip.computer</a></p>
-  </section>
-
-  <footer>
-    <div id="kscope-footer"></div>
-  </footer>
-  <script src="/demo/footer.js"></script>
-</div>
-<script>
-var SPRITE_COLS = 8, SPRITE_ROWS = 3, SPRITE_TOTAL = 24;
-var navIdx = Math.floor(Math.random() * SPRITE_TOTAL);
-function updateNavIcon() {
-  var el = document.getElementById('navIcon');
-  if (!el) return;
-  var col = navIdx % SPRITE_COLS;
-  var row = Math.floor(navIdx / SPRITE_COLS);
-  var bgPosX = (col / (SPRITE_COLS - 1)) * 100;
-  var bgPosY = (row / (SPRITE_ROWS - 1)) * 100;
-  el.innerHTML = '<div style="width:28px;height:28px;overflow:hidden;"><div style="width:100%;height:100%;background:url(/demo/sprites.png);background-size:' + (SPRITE_COLS * 100) + '% ' + (SPRITE_ROWS * 100) + '%;background-position:' + bgPosX + '% ' + bgPosY + '%;"></div></div>';
-  navIdx = (navIdx + 1) % SPRITE_TOTAL;
-}
-updateNavIcon();
-setInterval(updateNavIcon, 6000);
-</script>
+<p>The Kaleidoscope Terms of Service have moved to <a href="/legal/internet-services/kaleidoscope/">/legal/internet-services/kaleidoscope/</a>.</p>
 </body>
 </html>