instar 1.3.1645 → 1.3.1646

package/dashboard/console/console.js

@@ -8,7 +8,7 @@
 import {
   failure, buildNeeds, buildDoing, buildPromised, buildRunning, buildAllowed, headline, ago, combineNeeds, machineNames,
 } from './home-model.js';
-import { GROUPS, legacyHref, icon, tabHref } from './nav-model.js';
+import { GROUPS, legacyHref, icon, tabHref, LEGACY_DASHBOARD } from './nav-model.js';
 import { fillPartial } from './home-model.js';
 import { renderPromises, topicLink } from './promises.js';
 import { renderMachines } from './machines.js';
@@ -210,7 +210,7 @@ function navItems(active) {
     nav.append(a);
   }
   nav.append(el('div', { class: 'nav-group-label', text: 'Elsewhere' }));
-  const legacy = el('a', { href: '/dashboard', icon: 'external' });
+  const legacy = el('a', { href: LEGACY_DASHBOARD, icon: 'external' });
   legacy.append(el('span', { text: 'Legacy dashboard' }));
   legacy.classList.add('nav-sub-legacy');
   nav.append(legacy);
@@ -218,7 +218,7 @@ function navItems(active) {
 }
 
 function renderShell(active) {
-  const legacyChip = el('a', { class: 'chip chip-legacy', href: '/dashboard', text: 'Legacy' });
+  const legacyChip = el('a', { class: 'chip chip-legacy', href: LEGACY_DASHBOARD, text: 'Legacy' });
   const brand = el('a', { class: 'brand', href: '#/home' },
     el('img', { src: '/dashboard/logo.png', alt: '' }),
     el('span', { text: 'instar' }),
@@ -607,7 +607,7 @@ function renderGroup(main, g) {
 function footNote() {
   return el('p', { class: 'foot-note' },
     document.createTextNode('The older dashboard is still available: '),
-    el('a', { href: '/dashboard', text: 'open the legacy dashboard' }),
+    el('a', { href: LEGACY_DASHBOARD, text: 'open the legacy dashboard' }),
     document.createTextNode('.'),
   );
 }

package/dashboard/console/index.html

@@ -12,6 +12,6 @@
   <script type="module" src="console.js"></script>
 </head>
 <body>
-  <noscript>The Instar console needs JavaScript. The <a href="/dashboard">legacy dashboard</a> is here.</noscript>
+  <noscript>The Instar console needs JavaScript. The <a href="/dashboard/legacy">legacy dashboard</a> is here.</noscript>
 </body>
 </html>

package/dashboard/console/nav-model.js

@@ -64,7 +64,7 @@ export const GROUPS = [
       { id: 'threadline', label: 'Other agents', icon: 'chat', desc: 'Who is waiting on you, whether each agent I work with is actually there, pairing new ones, and our conversations.' },
       { id: 'origins', label: 'Messages to you', icon: 'chat', desc: 'Who wrote each message I sent you, and the who-wrote-this footer.' },
       { id: 'mandates', label: 'Permission slips', icon: 'stamp', desc: 'What you have let agents do together, who is waiting for your approval, and every allow and refusal.' },
-      { id: 'phones', label: 'Phones', icon: 'phone', desc: 'Pair the Instar iPhone app (the code shows here after a PIN unlock when there is no Telegram), and the phones already paired.' },
+      { id: 'phones', label: 'Phones', icon: 'phone', desc: 'Pair the Instar iPhone app: a waiting phone’s code, large with a Copy button, after your PIN (when there is no Telegram), and the phones already paired.' },
       { id: 'secrets', label: 'Passwords & keys', icon: 'lock', desc: 'Whether the agent is waiting on a password, a safe one-time link to hand one over, and the keys it already holds.' },
     ],
   },
@@ -118,6 +118,8 @@ export const NATIVE_PAGES = {
   features: '#/settings/allowed',
   'preferences-learning': '#/settings/learned',
   files: '#/settings/files',
+  // The pairing code page: its own strict page, outside the console (PIN, then the code + Copy).
+  phones: '/dashboard/pair',
   'pr-pipeline': '#/work/development?s=shipping',
   throughput: '#/work/development?s=pace',
   'feedback-drain': '#/work/development?s=feedback',
@@ -131,9 +133,12 @@ export function tabHref(tabId) {
   return NATIVE_PAGES[tabId] || legacyHref(tabId);
 }
 
+/** The legacy dashboard's own address (/dashboard itself opens this console). */
+export const LEGACY_DASHBOARD = '/dashboard/legacy';
+
 /** The legacy URL for a tab. Ordinary link; nothing is embedded. */
 export function legacyHref(tabId) {
-  return `/dashboard?tab=${encodeURIComponent(tabId)}`;
+  return `${LEGACY_DASHBOARD}?tab=${encodeURIComponent(tabId)}`;
 }
 
 export function icon(name) {

package/dashboard-pair/pair-model.js

@@ -0,0 +1,66 @@
+// Pure helpers for the pairing code page (docs/specs/dashboard-console-default-and-pair-page.md §3.2).
+// No DOM, no network: unit-tested directly.
+
+/** The device id named in the page's fragment (`#d=<id>`), or null. Never sent to the server. */
+export function deviceFromHash(hash) {
+  const raw = String(hash || '').replace(/^#/, '');
+  if (!raw) return null;
+  let id = null;
+  try { id = new URLSearchParams(raw).get('d'); } catch { return null; }
+  if (!id || id.length > 200 || !/^[A-Za-z0-9_.:-]+$/.test(id)) return null;
+  return id;
+}
+
+/**
+ * Which waiting phones to show. With a named device: only it, or `missing: true` when it is not
+ * waiting any more. Without one: every waiting phone.
+ */
+export function shownApprovals(approvals, deviceId) {
+  const list = Array.isArray(approvals) ? approvals.filter((a) => a && typeof a === 'object' && a.deviceId) : [];
+  if (!deviceId) return { list, missing: false };
+  const one = list.filter((a) => a.deviceId === deviceId);
+  return { list: one, missing: one.length === 0 };
+}
+
+/** The code as shown: a word code as sent (`KITE-4172`), six digits as `123 456`. */
+export function prettyCode(code) {
+  const raw = String(code ?? '');
+  if (/[A-Za-z]/.test(raw)) return raw;
+  const c = raw.replace(/\D/g, '');
+  return c.length === 6 ? `${c.slice(0, 3)} ${c.slice(3)}` : c;
+}
+
+/** The code as copied: what the app accepts, without display spacing (`KITE-4172`, `123456`). */
+export function copyText(code) {
+  const raw = String(code ?? '').trim();
+  if (/[A-Za-z]/.test(raw)) return raw;
+  return raw.replace(/\D/g, '');
+}
+
+/** Minutes left, in words. */
+export function minutesLeft(iso, now = Date.now()) {
+  const ms = Date.parse(iso) - now;
+  if (!(ms > 0)) return 'expired';
+  return `${Math.max(1, Math.round(ms / 60_000))} min left`;
+}
+
+/** Whose phone: " — Ann (owner)", " — Sam (MSP)", or a removed person. */
+export function personText(d) {
+  if (!d) return '';
+  if (d.unassigned) return ' — no longer assigned to anyone';
+  if (!d.personName) return '';
+  return ` — ${d.personName}${d.role === 'msp' ? ' (MSP)' : ' (owner)'}`;
+}
+
+/** One line naming a waiting phone. */
+export function waitingLine(a, now = Date.now()) {
+  return `${a.deviceName || 'A phone'}${a.label ? ` (${a.label})` : ''}${personText(a)} · ${minutesLeft(a.expiresAt, now)}`;
+}
+
+/** What the page says above the waiting list, from the approvals answer. */
+export function waitingHeadline({ approval, shown, missing }) {
+  if (approval === 'telegram') return 'This agent sends pairing codes to your private Telegram chat, not to this page.';
+  if (missing) return 'That phone is no longer waiting: it was paired, declined, or its link expired.';
+  if (!shown.length) return 'No phone is waiting. Open the pairing link on the phone; its code appears here by itself.';
+  return shown.length === 1 ? 'A phone is waiting to pair.' : `${shown.length} phones are waiting to pair.`;
+}

package/dashboard-pair/pair.css

@@ -0,0 +1,30 @@
+:root {
+  --bg: #0a0e17; --card: #121826; --text: #e8ecf3; --muted: #9aa4b5; --accent: #5b8cff; --line: #243049; --warn: #f2b84b;
+  color-scheme: dark light;
+}
+@media (prefers-color-scheme: light) {
+  :root { --bg: #f6f7fb; --card: #ffffff; --text: #141a26; --muted: #5b6577; --accent: #2f5fe0; --line: #d9deea; --warn: #9a6a00; }
+}
+* { box-sizing: border-box; }
+body { margin: 0; background: var(--bg); color: var(--text); font: 16px/1.5 -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif; }
+#pair-root { max-width: 560px; margin: 0 auto; padding: 24px 16px 48px; }
+.pair-head h1 { font-size: 1.3rem; margin: 0 0 4px; }
+.pair-host { font-size: 1.6rem; font-weight: 700; margin: 0; word-break: break-all; }
+.pair-hint { color: var(--muted); margin: 4px 0 20px; font-size: .9rem; }
+.pair-pin { display: grid; gap: 10px; }
+.pair-pin input { font-size: 1.4rem; padding: 12px; border-radius: 10px; border: 1px solid var(--line); background: var(--card); color: var(--text); letter-spacing: .2em; }
+.pair-button { font: inherit; font-weight: 600; padding: 12px 18px; border-radius: 10px; border: 0; background: var(--accent); color: #fff; cursor: pointer; text-decoration: none; display: inline-block; text-align: center; }
+.pair-button:disabled { opacity: .6; }
+.pair-link-button { font: inherit; background: none; border: 0; color: var(--accent); padding: 8px 0; cursor: pointer; text-decoration: underline; }
+.pair-error { color: var(--warn); min-height: 1.5em; margin: 0; }
+.pair-card { background: var(--card); border: 1px solid var(--line); border-radius: 14px; padding: 16px; margin: 12px 0; }
+.pair-device { margin: 0 0 8px; color: var(--muted); }
+.pair-code { font: 700 2.6rem/1.2 ui-monospace, SFMono-Regular, Menlo, monospace; letter-spacing: .06em; margin: 8px 0 12px; user-select: all; -webkit-user-select: all; word-break: break-all; }
+.pair-copied { margin-left: 12px; color: var(--muted); }
+.pair-fp { color: var(--muted); font-size: .85rem; word-break: break-all; }
+.pair-paired { margin-top: 32px; }
+.pair-paired h2, section h2 { font-size: 1.05rem; }
+.pair-row { display: flex; justify-content: space-between; align-items: center; gap: 12px; padding: 8px 0; border-bottom: 1px solid var(--line); }
+.pair-status { min-height: 1.5em; color: var(--muted); }
+.pair-foot { margin-top: 32px; font-size: .9rem; }
+.pair-foot a, section a { color: var(--accent); }

package/dashboard-pair/pair.html

@@ -0,0 +1,17 @@
+<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover">
+  <meta name="color-scheme" content="dark light">
+  <meta name="referrer" content="no-referrer">
+  <title>Pair a phone</title>
+  <link rel="icon" href="/dashboard/favicon.png">
+  <link rel="stylesheet" href="/dashboard/pair.css">
+  <script type="module" src="/dashboard/pair.js"></script>
+</head>
+<body>
+  <div id="pair-root"></div>
+  <noscript>This page needs JavaScript. The <a href="/dashboard/legacy?tab=phones">legacy dashboard's Phones tab</a> shows the same code.</noscript>
+</body>
+</html>

package/dashboard-pair/pair.js

@@ -0,0 +1,332 @@
+// The pairing code page (docs/specs/dashboard-console-default-and-pair-page.md §3.2).
+//
+// SAFETY CONTRACT
+// - A code is shown only after a PIN unlock made on THIS page load. The Bearer token and the
+//   operator session live in page memory only; nothing is written to localStorage or
+//   sessionStorage, and a refused PIN, a 403 or session expiry wipes every code from the page.
+// - Every dynamic value reaches the DOM through textContent. No innerHTML anywhere.
+// - The page is served with a strict Content-Security-Policy (no inline script, nothing
+//   third-party); keep it that way: no inline handlers, no style attributes, no external URLs.
+
+import { deviceFromHash, shownApprovals, prettyCode, copyText, waitingLine, waitingHeadline } from './pair-model.js';
+
+const POLL_MS = 10_000;
+const MAX_FAILURES = 5;
+const REQUEST_MS = 15_000;   // one authenticated call never holds the page longer than this
+const CLOCK_MARGIN_MS = 5_000; // network transit and the Date header's one-second precision
+const STATUS_WORDS = { pending: 'Waiting to confirm', active: 'Paired' };
+
+export function mountPairPage(doc, {
+  fetchFn = (...a) => fetch(...a),
+  location: loc = doc.defaultView.location,
+  // Monotonic where available, so a clock change on the phone moves no deadline.
+  now = () => { const p = doc.defaultView.performance; return p && typeof p.now === 'function' && p.timeOrigin ? p.timeOrigin + p.now() : Date.now(); },
+  clipboard = doc.defaultView.navigator && doc.defaultView.navigator.clipboard,
+  confirmFn = (q) => doc.defaultView.confirm(q),
+  setTimer = (fn, ms) => doc.defaultView.setInterval(fn, ms),
+  clearTimer = (t) => doc.defaultView.clearInterval(t),
+  setDeadline = (fn, ms) => doc.defaultView.setTimeout(fn, ms),
+  clearDeadline = (t) => doc.defaultView.clearTimeout(t),
+  setRequestTimer = (fn, ms) => doc.defaultView.setTimeout(fn, ms),
+  clearRequestTimer = (t) => doc.defaultView.clearTimeout(t),
+} = {}) {
+  const root = doc.getElementById('pair-root') || doc.body;
+  const make = (tag, opts = {}, parent) => {
+    const el = doc.createElement(tag);
+    if (opts.text !== undefined) el.textContent = String(opts.text);
+    if (opts.cls) el.className = opts.cls;
+    if (opts.type) el.type = opts.type;
+    for (const [k, v] of Object.entries(opts.attrs || {})) el.setAttribute(k, v);
+    if (parent) parent.append(el);
+    return el;
+  };
+
+  let auth = null;           // { token, session, expiresAt } — page memory only
+  let timer = null;
+  let deadline = null;       // one-shot: wipes the page when the operator session runs out
+  let failures = 0;
+  let busy = false;
+  let again = false;
+  let gen = 0;              // bumped by every reset         // a refresh asked for while one was running: run once more after it
+  let wanted = deviceFromHash(loc.hash);
+  const SESSION_MS = 15 * 60_000;
+
+  root.replaceChildren();
+  const head = make('header', { cls: 'pair-head' }, root);
+  make('h1', { text: 'Pair a phone with this agent' }, head);
+  make('p', { cls: 'pair-host', text: loc.host, attrs: { 'aria-label': 'This page’s address' } }, head);
+  make('p', { cls: 'pair-hint', text: 'Only type your PIN here if this is your agent’s usual address.' }, head);
+  const body = make('main', { cls: 'pair-body' }, root);
+  const status = make('p', { cls: 'pair-status', attrs: { role: 'status', 'aria-live': 'polite' } }, root);
+  const foot = make('p', { cls: 'pair-foot' }, root);
+  const back = make('a', { text: 'Back to the dashboard', attrs: { href: '/dashboard' } }, foot);
+  void back;
+
+  // The two calls made before there is a session (unlock-check, unlock): same time limit, body included.
+  async function plain(url, options = {}) {
+    let fail = () => {};
+    const timedOut = new Promise((_, reject) => { fail = () => reject(new Error('timeout')); });
+    const t = setRequestTimer(() => fail(), REQUEST_MS);
+    try {
+      return await Promise.race([(async () => {
+        const r = await fetchFn(url, { cache: 'no-store', ...options });
+        return { ok: r.ok, status: r.status, headers: r.headers, data: await r.json().catch(() => ({})) };
+      })(), timedOut]);
+    } finally { clearRequestTimer(t); }
+  }
+
+  function stopPolling() { if (timer !== null) { clearTimer(timer); timer = null; } }
+
+  // The one reset: credentials, every rendered code and copy button, timers. Runs on a refused
+  // session (403), at the session deadline (even while hidden or not polling), and on return to a
+  // page whose session ran out meanwhile.
+  function forget(message) {
+    auth = null; stopPolling(); failures = 0; again = false;
+    gen++; busy = false; pairedBusy = false; // a refresh still unwinding from the old session can no longer hold the page
+    for (const e of [...inflight]) e.abort();
+    inflight.clear();
+    if (deadline !== null) { clearDeadline(deadline); deadline = null; }
+    body.replaceChildren(); status.textContent = '';
+    showPin(message);
+  }
+  const EXPIRED = 'Your unlock ran out. Type your PIN again.';
+  doc.addEventListener('visibilitychange', () => {
+    if (auth && now() >= auth.expiresAt) forget(EXPIRED);
+  });
+
+  async function showPin(message) {
+    body.replaceChildren();
+    let check = { accepted: true };
+    try {
+      const r = await plain('/dashboard/unlock-check');
+      if (r.ok && r.data && r.data.accepted === false) check = r.data;
+    } catch { /* unreadable or slow check: offer the box; the server still decides */ }
+    if (auth) return; // unlocked meanwhile
+    body.replaceChildren();
+    if (check.accepted === false) {
+      make('p', { text: typeof check.reason === 'string' ? check.reason : 'Your PIN cannot be accepted on this address.' }, body);
+      if (typeof check.secureUrl === 'string' && /^https:\/\//i.test(check.secureUrl)) {
+        try {
+          const u = new URL(check.secureUrl);
+          make('a', { cls: 'pair-button', text: 'Open the secure address', attrs: { href: `${u.origin}/dashboard/pair${loc.hash || ''}` } }, body);
+        } catch { /* malformed: no link */ }
+      }
+      return;
+    }
+    const form = make('form', { cls: 'pair-pin' }, body);
+    make('label', { text: 'Dashboard PIN', attrs: { for: 'pair-pin-input' } }, form);
+    const input = make('input', { attrs: { id: 'pair-pin-input', type: 'password', inputmode: 'numeric', autocomplete: 'off', maxlength: '12' } }, form);
+    const go = make('button', { cls: 'pair-button', text: 'Show the code', type: 'submit' }, form);
+    const err = make('p', { cls: 'pair-error', text: message || '', attrs: { role: 'alert' } }, form);
+    form.addEventListener('submit', async (ev) => {
+      ev.preventDefault();
+      const pin = input.value;
+      if (!pin) { err.textContent = 'Type your PIN.'; return; }
+      go.disabled = true; err.textContent = '';
+      try {
+        const r = await plain('/dashboard/unlock', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ pin }) });
+        input.value = '';
+        const d = r.data || {};
+        if (!r.ok || typeof d.token !== 'string' || typeof d.operatorSessionToken !== 'string') {
+          err.textContent = d && d.error ? `${d.error}${typeof d.attemptsRemaining === 'number' ? ` · ${d.attemptsRemaining} tries left` : ''}` : 'That did not work. Try again.';
+          go.disabled = false; return;
+        }
+        // The session's remaining life, measured on the server's clock (its Date header), so a
+        // phone clock that runs fast or slow neither locks the page nor keeps a code too long.
+        const serverExp = Date.parse(d.operatorSessionExpiresAt);
+        const serverNow = Date.parse(r.headers && typeof r.headers.get === 'function' ? r.headers.get('Date') : '');
+        const life = Number.isFinite(serverExp) && Number.isFinite(serverNow) ? serverExp - serverNow : SESSION_MS;
+        auth = { token: d.token, session: d.operatorSessionToken, expiresAt: now() + Math.min(SESSION_MS, Math.max(0, life - CLOCK_MARGIN_MS)) };
+        if (deadline !== null) clearDeadline(deadline);
+        deadline = setDeadline(() => { deadline = null; if (auth) forget(EXPIRED); }, Math.max(0, auth.expiresAt - now()));
+        await refresh();
+        stopPolling();
+        if (auth) timer = setTimer(() => { if (doc.visibilityState !== 'hidden') void refresh(); }, POLL_MS);
+      } catch { input.value = ''; err.textContent = 'The agent did not answer. Try again.'; go.disabled = false; }
+    });
+    try { input.focus(); } catch { /* not focusable in this environment */ }
+  }
+
+  // ── Authenticated calls ──────────────────────────────────────────────────────────────────
+  // One rule for every call made with the session: bound to the session it was made under,
+  // bounded in time, cancelled by the reset, and any 403 runs the reset.
+  const inflight = new Set();
+  class SessionGone extends Error {}
+  async function request(url, options = {}) {
+    const mine = auth;
+    if (!mine) throw new SessionGone();
+    let abort = () => {};
+    const aborted = new Promise((_, reject) => { abort = () => reject(new Error('aborted')); });
+    const ctl = typeof AbortController === 'function' ? new AbortController() : null;
+    const entry = { abort: () => { if (ctl) ctl.abort(); abort(); } };
+    inflight.add(entry);
+    const t = setRequestTimer(entry.abort, REQUEST_MS);
+    try {
+      // Headers AND body inside the same time limit and cancellation; the caller gets parsed data.
+      const out = await Promise.race([(async () => {
+        const r = await fetchFn(url, {
+          ...options, cache: 'no-store', ...(ctl ? { signal: ctl.signal } : {}),
+          headers: { Authorization: `Bearer ${mine.token}`, 'X-Instar-Operator-Session': mine.session, ...(options.headers || {}) },
+        });
+        const data = r.status === 403 ? null : await r.json().catch(() => null);
+        return { status: r.status, ok: r.ok, data };
+      })(), aborted]);
+      // Only the live session that made the call, before its deadline, may use the answer.
+      if (auth !== mine || now() >= mine.expiresAt) throw new SessionGone();
+      if (out.status === 403) { forget(EXPIRED); throw new SessionGone(); }
+      return out;
+    } finally { clearRequestTimer(t); inflight.delete(entry); }
+  }
+  const gone = (e) => e instanceof SessionGone || !auth;
+
+  // ── Layout: the waiting phones first, the paired phones below, filled independently ────────
+  const waitingBox = doc.createElement('section'); waitingBox.setAttribute('aria-label', 'Phones waiting to pair');
+  const pairedBox = doc.createElement('section'); pairedBox.className = 'pair-paired'; pairedBox.setAttribute('aria-label', 'Paired phones');
+  let lastData = null;
+  function ensureLayout() {
+    if (body.contains(waitingBox)) return;
+    waitingBox.replaceChildren(); pairedBox.replaceChildren();
+    make('h2', { text: 'Paired phones' }, pairedBox);
+    make('p', { text: 'Reading the paired phones…' }, pairedBox);
+    body.replaceChildren(waitingBox, pairedBox);
+  }
+
+  async function refresh() {
+    if (!auth) return;
+    if (busy) { again = true; return; }
+    if (now() >= auth.expiresAt) { forget(EXPIRED); return; }
+    busy = true;
+    const myGen = gen; // a refresh belongs to the unlock that started it
+    try {
+      const a = await request('/mobile/pairing-approvals');
+      if (a.status === 503) { body.replaceChildren(); make('p', { text: 'Phone pairing is turned off on this agent.' }, body); failures = 0; return; }
+      if (!a.ok || !a.data) throw new Error(`approvals ${a.status}`);
+      const data = a.data;
+      failures = 0; status.textContent = '';
+      lastData = data;
+      renderWaiting(data); // the code shows now; the paired-phones read runs on its own
+      void refreshPaired();
+    } catch (e) {
+      if (gone(e)) return;
+      failures++;
+      if (failures >= MAX_FAILURES) {
+        stopPolling();
+        status.replaceChildren();
+        make('span', { text: 'Lost contact with the agent. ' }, status);
+        const retry = make('button', { cls: 'pair-link-button', text: 'Retry', type: 'button' }, status);
+        retry.addEventListener('click', () => {
+          failures = 0; status.textContent = '';
+          void refresh();
+          stopPolling();
+          timer = setTimer(() => { if (doc.visibilityState !== 'hidden') void refresh(); }, POLL_MS);
+        });
+      } else status.textContent = 'Could not reach the agent; trying again.';
+    } finally {
+      if (gen === myGen) {
+        busy = false;
+        if (again) { again = false; if (auth) void refresh(); }
+      }
+    }
+  }
+
+  // The paired-phones list: its own read, never holding up the codes above it.
+  let pairedBusy = false;
+  async function refreshPaired() {
+    if (!auth || pairedBusy) return;
+    pairedBusy = true;
+    const myGen = gen;
+    try {
+      const d = await request('/mobile/devices');
+      renderPaired(d.ok && d.data && Array.isArray(d.data.devices) ? d.data.devices : null);
+    } catch (e) { if (!gone(e)) renderPaired(null); }
+    finally { if (gen === myGen) pairedBusy = false; }
+  }
+
+  // Taps on the page's buttons: a reset deadline first, then the call; the result is shown only
+  // while the session that made it is still the live one.
+  async function act(path, done, failed, onDone) {
+    if (!auth || now() >= auth.expiresAt) { forget(EXPIRED); return; }
+    try {
+      const r = await request(path, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: '{}' });
+      status.textContent = r.ok ? done : failed;
+      if (r.ok && onDone) onDone();
+    } catch (e) { if (gone(e)) return; status.textContent = 'Could not reach the agent.'; }
+    await refresh();
+  }
+  // Phones declined on this page: never drawn again, even by a read that started before the decline.
+  const declined = new Set();
+
+  function renderWaiting(data) {
+    ensureLayout();
+    const approvals = Array.isArray(data && data.approvals) ? data.approvals : [];
+    const { list, missing } = shownApprovals(approvals.filter((x) => x && !declined.has(x.deviceId)), wanted);
+    waitingBox.replaceChildren();
+    make('h2', { text: waitingHeadline({ approval: data && data.approval, shown: list, missing }) }, waitingBox);
+    if (missing && approvals.length) {
+      // Same page, same unlock: drop the fragment in place instead of reloading (a reload would ask for the PIN again).
+      const all = make('button', { cls: 'pair-link-button', text: 'Show every waiting phone', type: 'button' }, waitingBox);
+      all.addEventListener('click', () => {
+        wanted = null;
+        try { doc.defaultView.history.replaceState(null, '', loc.pathname); } catch { /* history unavailable */ }
+        if (lastData && auth) renderWaiting(lastData);
+      });
+    }
+    for (const a of list) {
+      const card = make('div', { cls: 'pair-card' }, waitingBox);
+      make('p', { cls: 'pair-device', text: waitingLine(a, now()) }, card);
+      const code = make('p', { cls: 'pair-code', text: prettyCode(a.code), attrs: { 'aria-label': 'Confirmation code' } }, card);
+      const copy = make('button', { cls: 'pair-button', text: 'Copy', type: 'button' }, card);
+      const copied = make('span', { cls: 'pair-copied', attrs: { role: 'status' } }, card);
+      copy.addEventListener('click', async () => {
+        if (!auth || now() >= auth.expiresAt) { forget(EXPIRED); return; }
+        try {
+          if (!clipboard || typeof clipboard.writeText !== 'function') throw new Error('no clipboard');
+          await clipboard.writeText(copyText(a.code));
+          copied.textContent = 'Copied';
+        } catch {
+          try {
+            const range = doc.createRange(); range.selectNodeContents(code);
+            const sel = doc.defaultView.getSelection(); sel.removeAllRanges(); sel.addRange(range);
+          } catch { /* selection unavailable */ }
+          copied.textContent = 'Press and hold the code to copy it.';
+        }
+      });
+      make('p', { text: 'Paste it into the Instar app on that phone. Never send it to anyone, including me.' }, card);
+      if (a.fingerprint) make('p', { cls: 'pair-fp', text: `Phone key: ${a.fingerprint}. The app shows the same key; check they match.` }, card);
+      const decline = make('button', { cls: 'pair-link-button', text: 'Not my phone — decline', type: 'button' }, card);
+      decline.addEventListener('click', () => {
+        decline.disabled = true;
+        void act(`/mobile/pairing-approvals/${encodeURIComponent(a.deviceId)}/decline`, 'Declined. That phone cannot pair with this code.', 'Could not decline. Try again.',
+          () => { declined.add(a.deviceId); if (lastData && auth) renderWaiting(lastData); });
+      });
+    }
+  }
+
+  function renderPaired(devices) {
+    ensureLayout();
+    pairedBox.replaceChildren();
+    make('h2', { text: 'Paired phones' }, pairedBox);
+    if (devices === null) { make('p', { text: 'Could not read the paired phones.' }, pairedBox); return; }
+    const shown = devices.filter((d) => d && (d.status === 'active' || d.status === 'pending'));
+    if (!shown.length) { make('p', { text: 'No phones are paired with this machine.' }, pairedBox); return; }
+    for (const d of shown) {
+      const row = make('div', { cls: 'pair-row' }, pairedBox);
+      make('span', { text: `${d.deviceName || 'Unnamed phone'} · ${STATUS_WORDS[d.status] || d.status}` }, row);
+      if (d.status !== 'active') continue;
+      const remove = make('button', { cls: 'pair-link-button', text: 'Remove this phone', type: 'button' }, row);
+      remove.addEventListener('click', () => {
+        if (!confirmFn('Remove this phone? It will stop reaching this agent at once.')) return;
+        remove.disabled = true;
+        void act(`/mobile/devices/${encodeURIComponent(d.id)}/revoke`, 'Removed.', 'Could not remove that phone. Try again.', () => { void refreshPaired(); });
+      });
+    }
+  }
+
+  void showPin();
+  return { refresh, forget, stop: stopPolling, isUnlocked: () => Boolean(auth) };
+}
+
+// Boot in a browser; tests import mountPairPage and drive it themselves.
+if (typeof document !== 'undefined' && document.getElementById && document.getElementById('pair-root')) {
+  mountPairPage(document);
+}

package/dist/commands/install.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../src/commands/install.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAElE,OAAO,EAAE,qBAAqB,EAAE,CAAC;AACjC,OAAO,EAKL,KAAK,WAAW,EAEhB,KAAK,aAAa,EACnB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAkC,KAAK,WAAW,EAAmB,MAAM,qBAAqB,CAAC;AACxG,OAAO,EASL,KAAK,eAAe,EACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAKL,KAAK,eAAe,EACpB,KAAK,aAAa,EACnB,MAAM,uBAAuB,CAAC;AAE/B,yGAAyG;AACzG,eAAO,MAAM,cAAc,QAAkB,CAAC;AAU9C,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,4GAA4G;AAC5G,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,cAAc,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CA0BpG;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,iEAAiE;AACjE,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQhE;AAED,4GAA4G;AAC5G,wBAAgB,QAAQ,IAAI,OAAO,CAWlC;AAMD,mGAAmG;AACnG,wBAAgB,kBAAkB,CAChC,QAAQ,GAAE,MAAM,CAAC,QAA2B,EAC5C,MAAM,GAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAuB,GACnD,MAAM,EAAE,GAAG,IAAI,CAEjB;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,GAAE,MAAM,CAAC,QAA2B,EAC5C,MAAM,GAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAuB,GACnD,MAAM,EAAE,GAAG,IAAI,CAOjB;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,MAAM,GAAG,IAAI,EAC9B,QAAQ,GAAE,MAAM,CAAC,QAA2B,EAC5C,GAAG,GAAE,MAAM,GAAG,IAAqE,GAClF,MAAM,EAAE,GAAG,IAAI,CAcjB;AAYD,kHAAkH;AAClH,wBAAgB,aAAa,CAAC,IAAI,GAAE,MAAqB,GAAG,MAAM,CAEjE;AAYD,sGAAsG;AACtG,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,EAAE,CAoBpE;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,gEAAgE;IAChE,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,WAAW,EAAE,OAAO,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;IAC/D,QAAQ,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,MAAM,GAAG,IAAI,CAAC;IAC/C,wEAAwE;IACxE,SAAS,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,SAAS,CAAC,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IAClF,4DAA4D;IAC5D,SAAS,EAAE,MAAM,OAAO,CAAC;IACzB,uDAAuD;IACvD,WAAW,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,MAAM,GAAG,IAAI,CAAC;IAChE,+FAA+F;IAC/F,aAAa,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,MAAM,GAAG,IAAI,CAAC;IAClE,iGAAiG;IACjG,YAAY,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IAC7C,WAAW,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,SAAS,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAClD,gBAAgB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAChF;;;OAGG;IACH,WAAW,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;IAC5C,gEAAgE;IAChE,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAClF,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC9B,2EAA2E;IAC3E,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAChD,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,GAAG,EAAE,MAAM,MAAM,CAAC;CACnB;AAUD;;;GAGG;AACH,eAAO,MAAM,8BAA8B;IACzC,OAAO;IACP,UAAU;QAAI,OAAO;;IACrB,MAAM;QAAI,OAAO;QAAQ,KAAK;YAAI,OAAO;;;CAC1C,CAAC;AAEF,MAAM,MAAM,iBAAiB,GACzB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,GAC9D;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,YAAY,GAAG,KAAK,GAAG,aAAa,CAAA;CAAE,CAAC;AAEhE,2EAA2E;AAC3E,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAU7D;AAED,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAW1D;AAED,oGAAoG;AACpG,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAS3D;AAED,sGAAsG;AACtG,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAMlD;AAED,yHAAyH;AACzH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAUxE;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,iCAAiC,EAAE,gBAAgB,EAAE,WAAW,CAAC,CAAC,CAuN9I;AAmGD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,aAAa;IAErD,UAAU;IACV,IAAI;IACJ,SAAS;IACT,IAAI;IACJ,WAAW;IACX,eAAe;IACf,WAAW;EAEd;AAwBD;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAsBtE;AAkHD,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,iGAAiG;AACjG,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAOhG;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,CAQ5D,CAAC;AAEF,qFAAqF;AACrF,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,kBAAkB,GAAG,MAAM,GAAG,IAAI,CAQ1E;AAuBD,4GAA4G;AAC5G,wBAAgB,cAAc,CAAC,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAEvF;AAED,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,aAAa,CAAC,CAkF9F"}
+{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../src/commands/install.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAElE,OAAO,EAAE,qBAAqB,EAAE,CAAC;AACjC,OAAO,EAKL,KAAK,WAAW,EAEhB,KAAK,aAAa,EACnB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAkC,KAAK,WAAW,EAAmB,MAAM,qBAAqB,CAAC;AACxG,OAAO,EASL,KAAK,eAAe,EACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAKL,KAAK,eAAe,EACpB,KAAK,aAAa,EACnB,MAAM,uBAAuB,CAAC;AAE/B,yGAAyG;AACzG,eAAO,MAAM,cAAc,QAAkB,CAAC;AAU9C,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,4GAA4G;AAC5G,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,cAAc,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CA0BpG;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,iEAAiE;AACjE,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQhE;AAED,4GAA4G;AAC5G,wBAAgB,QAAQ,IAAI,OAAO,CAWlC;AAMD,mGAAmG;AACnG,wBAAgB,kBAAkB,CAChC,QAAQ,GAAE,MAAM,CAAC,QAA2B,EAC5C,MAAM,GAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAuB,GACnD,MAAM,EAAE,GAAG,IAAI,CAEjB;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,GAAE,MAAM,CAAC,QAA2B,EAC5C,MAAM,GAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAuB,GACnD,MAAM,EAAE,GAAG,IAAI,CAOjB;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,MAAM,GAAG,IAAI,EAC9B,QAAQ,GAAE,MAAM,CAAC,QAA2B,EAC5C,GAAG,GAAE,MAAM,GAAG,IAAqE,GAClF,MAAM,EAAE,GAAG,IAAI,CAcjB;AAYD,kHAAkH;AAClH,wBAAgB,aAAa,CAAC,IAAI,GAAE,MAAqB,GAAG,MAAM,CAEjE;AAYD,sGAAsG;AACtG,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,EAAE,CAoBpE;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,gEAAgE;IAChE,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,WAAW,EAAE,OAAO,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;IAC/D,QAAQ,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,MAAM,GAAG,IAAI,CAAC;IAC/C,wEAAwE;IACxE,SAAS,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,SAAS,CAAC,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IAClF,4DAA4D;IAC5D,SAAS,EAAE,MAAM,OAAO,CAAC;IACzB,uDAAuD;IACvD,WAAW,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,MAAM,GAAG,IAAI,CAAC;IAChE,+FAA+F;IAC/F,aAAa,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,MAAM,GAAG,IAAI,CAAC;IAClE,iGAAiG;IACjG,YAAY,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IAC7C,WAAW,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,SAAS,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAClD,gBAAgB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAChF;;;OAGG;IACH,WAAW,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;IAC5C,gEAAgE;IAChE,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAClF,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC9B,2EAA2E;IAC3E,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAChD,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,GAAG,EAAE,MAAM,MAAM,CAAC;CACnB;AAUD;;;GAGG;AACH,eAAO,MAAM,8BAA8B;IACzC,OAAO;IACP,UAAU;QAAI,OAAO;;IACrB,MAAM;QAAI,OAAO;QAAQ,KAAK;YAAI,OAAO;;;CAC1C,CAAC;AAEF,MAAM,MAAM,iBAAiB,GACzB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,GAC9D;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,YAAY,GAAG,KAAK,GAAG,aAAa,CAAA;CAAE,CAAC;AAEhE,2EAA2E;AAC3E,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAU7D;AAED,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAW1D;AAED,oGAAoG;AACpG,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAS3D;AAED,sGAAsG;AACtG,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAMlD;AAED,yHAAyH;AACzH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAUxE;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,iCAAiC,EAAE,gBAAgB,EAAE,WAAW,CAAC,CAAC,CAuN9I;AAmGD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,aAAa;IAErD,UAAU;IACV,IAAI;IACJ,SAAS;IACT,IAAI;IACJ,WAAW;IACX,eAAe;IACf,WAAW;EAEd;AAwBD;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAsBtE;AAkHD,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,iGAAiG;AACjG,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAOhG;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,CAQ5D,CAAC;AAEF,qFAAqF;AACrF,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,kBAAkB,GAAG,MAAM,GAAG,IAAI,CAQ1E;AAuBD,4GAA4G;AAC5G,wBAAgB,cAAc,CAAC,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAEvF;AAED,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,aAAa,CAAC,CAkF9F"}

package/dist/commands/install.js

@@ -5,6 +5,7 @@
  * output goes to a log. The ledger in ./install/progress.ts lets a harness poll it and `--resume`
  * continue it.
  */
+import { codePageUrlForOrigin } from '../server/dashboardPaths.js';
 import { execFileSync, spawn, spawnSync } from 'node:child_process';
 import { randomInt } from 'node:crypto';
 import fs from 'node:fs';
@@ -489,7 +490,7 @@ export function buildInstallHandlers(env) {
                     env.print('  Your iPhone needs Tailscale on, signed in to the same account as this computer.');
                 env.print(telegram
                     ? '  The app then asks for a code. Your agent sends it to you privately in Telegram.'
-                    : `  The app then asks for a code. To see it, open ${origin}/dashboard on your phone, enter your PIN, and open Phones.`);
+                    : `  The app then asks for a code. To see it, open ${codePageUrlForOrigin(origin)} on your phone and enter your PIN. Tap Copy, then paste it into the app.`);
             }
             env.print('');
             return { kind: 'done' };