wherdr 1.3.1 → 1.3.3

package/README.md

@@ -7,13 +7,28 @@
 <p align="center"><b>A complete workspace for the coding agents running in <a href="https://herdr.dev">Herdr</a>, on your
 computer and on your phone.</b></p>
 
-<p align="center"><a href="https://wherdr.dev"><b>wherdr.dev</b></a> · <code>curl -fsSL https://wherdr.dev/install | sh</code> · <code>herdr plugin install afloury/wherdr</code></p>
+<p align="center"><a href="https://wherdr.dev"><b>wherdr.dev</b></a> · <a href="#ask-your-ai-agent">Ask your AI agent</a></p>
+
+<p align="center"><a href="https://wherdr.dev/demo/"><b>Try it in your browser — no install</b></a>: the real app on scripted agents, nothing runs.</p>
 
 <p align="center"><a href="https://github.com/afloury/wherdr/actions/workflows/ci.yml"><img src="https://github.com/afloury/wherdr/actions/workflows/ci.yml/badge.svg?branch=main" alt="CI"></a></p>
 
 ## Quick start
 
-On the computer that runs [Herdr](https://herdr.dev) (≥ 0.9.1), macOS or Linux, one command:
+### Ask your AI agent
+
+**Recommended.** Paste this into Claude Code, Codex or any coding agent: it installs and sets up wherdr for you.
+
+```text
+Read https://wherdr.dev/agent.md and help me set up wherdr. Check what is already installed first, and ask me before installing anything.
+```
+
+It follows [our setup guide for agents](https://wherdr.dev/agent.md): checks what you already have,
+asks before installing anything, sets up your phone over Tailscale, never exposes wherdr to the Internet.
+
+### Or run the installer yourself
+
+On the computer that runs [Herdr](https://herdr.dev) (≥ 0.9.1), macOS or Linux:
 
 ```sh
 curl -fsSL https://wherdr.dev/install | sh
@@ -36,6 +51,13 @@ saved on the server (`data/onboarding.json`), so your other devices do not show
 it from Settings › About › **Setup guide**. On a phone that already opens wherdr through its
 tailnet address, the phone step becomes Add to Home Screen.
 
+**Passkeys are tied to the address they are created on.** Once wherdr's tailnet address is
+published and answers, the guide opened on `localhost` shows **Continue on
+<machine>.<tailnet>.ts.net**, which reopens it at the same step on that address, and its Security
+step (like Settings › Security) sends the passkey lock there. Nothing redirects on its own:
+`localhost` stays valid on the computer. The installer, the Herdr plugin and `wherdr open` open
+that address too when it is already published.
+
 wherdr is a small self-hosted web app that talks to the Herdr server on your machine. **On a
 computer**, it can replace the Herdr terminal client day to day: your spaces, tabs and split panes
 side by side, live conversations and real terminals, drag-and-drop layout, keyboard shortcuts
@@ -69,13 +91,32 @@ it on `localhost`, or from your other devices over Tailscale.
 *Unofficial project. Not affiliated with or endorsed by Herdr, Anthropic or OpenAI. Claude,
 Claude Code, Codex and other product names are trademarks of their respective owners.*
 
+## Why wherdr
+
+- **Herdr's splits, live.** A tab with several panes is drawn in Herdr's real layout, every pane
+  live; drag a pane to move it or a divider to resize, and the change goes to Herdr itself.
+- **A passkey lock.** Face ID, Touch ID, Windows Hello or Android unlock the app; once a passkey
+  exists, nothing about your agents is served to a locked session.
+- **The agent's diff.** Git status and diff of each agent's working folder, one click away from
+  its conversation.
+- **The herdr-projects board.** A coordinator and its threads grouped under their project, with
+  the project's task lists as a live board and one-click replies.
+- **Keyboard and global search.** One shortcut searches every agent and conversation; next
+  agent, new tab, pane swaps and `1`–`9` answers never need the mouse.
+- **Real time, and private.** The real terminal over a WebSocket, a push when an agent needs
+  you, and your phone through Tailscale: nothing is on the Internet.
+
+Details in [Features](#features) and [Security](#security).
+
 ## Contents
 
 - [Quick start](#quick-start)
+- [Why wherdr](#why-wherdr)
 - [Features](#features)
 - [How it works](#how-it-works)
 - [Requirements](#requirements)
-- [Installation](#installation): [the one command](#the-one-command) ·
+- [Installation](#installation): [ask your AI agent](#ask-your-ai-agent-1) ·
+  [or run the installer yourself](#the-one-command) ·
   [which setup?](#which-setup) ·
   [always-on server + Tailscale](#recommended-always-on-server--tailscale) ·
   [other private networks](#other-private-networks) ·
@@ -99,16 +140,22 @@ Claude Code, Codex and other product names are trademarks of their respective ow
 
 ### Everywhere
 
-- **Live agent list**, one line per Herdr space, grouped by state (your turn, working, ready),
-  with a preview of each agent's last answer. When an agent asks for permission or asks a
-  question, the options show on its card: **answer in one tap** without opening it.
+- **Live agent list**, one line per Herdr space, grouped by state (your turn, working, ready).
+  The list is compact by default: agent, title, project badge and state. When an agent asks for
+  permission or asks a question, its card opens on the question and its options: **answer in one
+  tap** without opening it; the card is one line again once answered. Turn off Settings ›
+  Appearance › Home screen › **Compact list** for detailed cards, with the folder, the model and
+  a preview of each agent's last answer.
 - **Conversation view**: the agent's real transcript (Claude Code, Codex and omp), rendered as
   Markdown, with grouped tool calls, images (full-screen viewer with pinch / wheel zoom and pan), timestamps, search and infinite scroll back to the
   first message. Reading a conversation never touches the terminal, so it never resizes a pane.
   A command the agent proposes (shell code block, or inline `! command`) can be copied without
   its prompt, or run in the agent's shell mode (`!`, Claude Code, Codex and omp) after you
   confirm the full command.
-- **Terminal view**: the real terminal (xterm.js, WebGL or DOM renderer) with take-over. On a
+- **Terminal view**: the real terminal (xterm.js, WebGL or DOM renderer) with take-over. Opening
+  it resizes the real pane to your screen (or its cell in a split); closing it gives the pane the size it had before
+  (after 30 seconds when the connection just dropped, e.g. a locked phone), unless a Herdr
+  client attached meanwhile laid it out its own way. On a
   computer, drag over the text on screen to select it: releasing the button copies it, as do
   `⌘C` / `Ctrl+Shift+C`. The history is browsed with the wheel, not by dragging past the edge.
   Links (OSC 8 hyperlinks and plain `http(s)://` URLs, even wrapped over several rows) open in a
@@ -116,10 +163,28 @@ Claude Code, Codex and other product names are trademarks of their respective ow
   line wrapped by the width is copied in one piece, without the breaks between its rows. An image
   pasted with `⌘V` (Mac), here or in a side-by-side terminal, goes to the agent's machine and its
   path is pasted, which omp and Claude Code attach as an image, as in the conversation.
+- **Interactive agent screens**: in a conversation, an uncertain menu or panel opens the
+  pane's real terminal in a modal window, with arrows, Enter, Escape, Tab, digits and y/n.
+  The rest of the app waits behind a scrim (the window fills the screen on a phone); in a
+  split, only the cell in use opens it. It closes after the agent's message field returns.
+  Close it yourself at any time with its button or a click on the scrim: that releases the
+  terminal without pressing Escape, which goes to the agent, and the same interaction stays
+  closed until you reopen it. Existing native questions, approvals, menus, waiting screens and
+  Claude settings cards keep their controls. The window is a fallback after those
+  recognizers, with two explicit exceptions: Codex's two-column `/usage` menu and
+  its Agent Command Center. The slash menu still lists and sends commands. On a phone, the window
+  temporarily fits the real pane to its width and restores its size on release, using
+  the same lease as Terminal view; it does not shrink 120 columns into unreadable text.
+  A pane already shown in Terminal keeps its existing live view. Try `/usage` on the
+  Codex agent in the browser demo (scripted, no account data).
+  In the compact list, native questions keep their preview and one-tap answers.
+  Unrecognized blocking screens offer an **Open interactive terminal** button.
 - **Composer**: send messages while the agent works (queued, cancellable), attach or paste
   photos and the files the agent can read (Claude Code: PDFs, notebooks, text and code of any
   extension; Codex: notebooks, text and code), run slash commands (`/compact`, `/clear`, `/context`, `/usage`…) and see the output
-  of local commands. Stop button while the agent works.
+  of local commands. Stop button while the agent works. A long pasted text (log, output) becomes
+  a "Pasted text · N lines" card, sent to the agent as it is and shown the same way in the
+  conversation, where it opens in full with Copy; long typed messages fold with Show more.
 - **Codex updates and limits**: in a Codex conversation, a new Codex version shows above the
   field with an **Update** button (runs Codex's official update command on that machine, after
   confirmation), then **Restart to update** on the same conversation. When wherdr cannot run it
@@ -127,6 +192,20 @@ Claude Code, Codex and other product names are trademarks of their respective ow
   resumes the same conversation (only while Codex is idle). Codex's own weekly-limit warning
   (its footer gauge, or its startup heads-up) is repeated above the field, with its values, while
   Codex shows it.
+- **After Codex updates itself and exits**: a **Your turn** card offers **Restart Codex**
+  for a new conversation, with the original launch arguments. For an existing conversation,
+  choose **Resume conversation** (its exact session, with the original options) or **Start
+  fresh**. If wherdr cannot identify the session, Resume opens Codex's picker rather than
+  choosing another pane's latest conversation. The usual attention notification applies.
+  Nothing restarts automatically: the pane must still show the same empty shell prompt,
+  with the shell in the foreground. Unrecognized shell prompts require a manual restart
+  in the terminal. wherdr must have observed Codex before it exited.
+  **Dismiss** puts the card away for good: the pane is a plain shell again, to use as you like.
+  Project panel messages wait in the queue until the agent returns; if it does not (Dismiss, or
+  a Codex that simply left), their text goes back into the pane's message field. Continuation
+  prompts (unfinished quotes or heredocs) refuse a restart too. If the final
+  transcript read fails, both conversation choices remain available; a session
+  contradicted by a guessed match is resumed through Codex's picker.
 - **Model and effort pickers** for Claude Code, Codex and omp (omp: its
   "Switch Model" selector, `/switch` or `/model`, and its thinking level, changed with its own
   ⇧⇥ cycle). Changes apply **to the current session only**; wherdr never changes your default
@@ -134,6 +213,30 @@ Claude Code, Codex and other product names are trademarks of their respective ow
 - **New agent**: pick an installed agent (or a plain terminal), a folder, optionally a separate
   Git **worktree** and branch, resume the last conversation, and queue a first message.
 - **Changes view**: Git status and diff of an agent's working folder; worktree management.
+  Review the diff like a pull request: comment on one line or on a **block of lines**. The code
+  itself is plain text — a click on it does nothing, so it can be selected and copied.
+  - **Mouse**: a **+** appears in the gutter of the hovered line; click it to comment that line,
+    or press it and drag over other lines to comment the block. With an editor open, Shift+click
+    another line to change its block.
+  - **Touch**: tap a line number to choose the line, tap another line to extend the block, then
+    **Comment** in the bar pinned at the bottom. Nothing is written by the first tap.
+  - **Keyboard**: one tab stop per file; arrow keys move between lines, Shift+arrows choose a
+    block, Enter opens the editor. In the editor, ⌘/Ctrl+Enter saves and Escape cancels (a second
+    Escape if text would be lost); the window stays open.
+
+  A block stays within one hunk (the other hunks dim while it is chosen) and may mix deleted and
+  new lines. Each comment is a thread under the last line of its block, headed by its lines
+  ("Lines 12–18"), with **Edit** and a two-step **Delete**; the lines it covers are marked in
+  the gutter. Comments, including the text of an editor left open, are saved on this device for
+  that agent, across refreshes and reloads. A block that leaves the diff, or whose code changed
+  between its first and last lines, is flagged above the diff and keeps the excerpt that was
+  commented.
+  **Send review** stays pinned with the number of comments; it groups them by file as
+  `file:12-18 — remark` (`file:12` for one line) followed by a short excerpt of the block, and
+  appends them to the conversation's message draft, preserving existing text; it never sends a
+  message. Deleted lines use the old file's numbers, explicitly labelled. **Discard** clears the
+  local review. Works on remote agents and in the demo too, with no writes to the agent's
+  machine. Browser storage must be available to retain comments after closing the view.
 - **Several machines**: agents of the SSH machines registered in Herdr (`herdr machine add`)
   appear in their own section; everything works the same on a remote agent.
 - **Named Herdr sessions**, **quotas** (remaining Claude and Codex usage limits), **Herdr plugin
@@ -144,7 +247,10 @@ Claude Code, Codex and other product names are trademarks of their respective ow
 ### On a computer
 
 - **Split panes, live**: a tab with several panes is drawn with Herdr's real layout; every pane
-  shows its conversation or terminal live, and the one you click becomes interactive.
+  shows its conversation or terminal live. Every visible terminal fills its cell and follows
+  window and divider resizing, keeping its instance and connection when focus changes.
+  Click a cell to give it the keyboard. Leaving the tab restores each terminal's original size,
+  unless a Herdr client has resized it meanwhile.
 - **Rearrange the layout**: drag a pane onto another to move it, drag a divider to resize
   (arrow keys work on a focused divider); changes go to Herdr itself.
 - **Spaces and tabs**: sidebar with every space, tabs at the top, active tab remembered per space.
@@ -153,7 +259,8 @@ Claude Code, Codex and other product names are trademarks of their respective ow
 - **Keyboard shortcuts** (`Mod` is ⌘ on macOS, Ctrl elsewhere; `Mod+/` or `?` lists them all,
   also in Settings › Computer):
   - `Ctrl/⌘+K` global search across agents and conversations, `Alt+↑/↓` previous / next agent
-    in the list, `Mod+,` settings.
+    in the list, `Mod+,` settings, `H` the [Board](#works-great-with-herdr-projects) (outside a
+    text field and the terminal).
   - `Mod+Alt+N` new agent in a new space, `Mod+Alt+T` new tab in the current space,
     `Mod+Alt+W` close the current pane (after confirmation). They work from the terminal too.
   - With [herdr-projects](#works-great-with-herdr-projects) on the agent's machine: `Mod+Alt+P`
@@ -170,6 +277,9 @@ Claude Code, Codex and other product names are trademarks of their respective ow
   under their project, and a side panel with the project's task lists (to test, to decide,
   to review, in progress, in queue, blocked, to do, backlog — each optional) and one-click
   replies to the coordinator.
+- **Board**: every agent, and with herdr-projects every project, thread and task, in four columns
+  (Blocked, Todo, Ongoing, Finished). Drag a task card to another column, or use its **Move
+  to…** menu, to ask the coordinator to move it.
 - **Settings** in a sidebar, with desktop-only options such as the content width.
 
 ### On a phone
@@ -199,7 +309,10 @@ phone / laptop ──private network──> HTTPS (tailscale serve, private prox
 
 wherdr runs on the same machine as the Herdr server (the "server" below). It uses Herdr's local
 socket API and CLI, reads the agents' transcript files, and serves a client-only Nuxt app. Data
-it keeps (VAPID keys, push subscriptions, passkeys, recent folders) lives in `data/`.
+it keeps (VAPID keys, push subscriptions, passkeys, recent folders) lives in `data/`. So do the
+long texts pasted into the message field, which the server keeps to show them as cards on every
+device: `data/pastes.json`, in clear, readable by the server's user only (mode 600), at most the
+last 100 texts and 2 MB, each one deleted 30 days after it was last sent.
 
 Built with Nuxt 4, Nuxt UI 4, Tailwind 4 and TypeScript; the Herdr gateway (API, WebSockets,
 Web Push, lock) runs in Nitro.
@@ -220,7 +333,20 @@ Web Push, lock) runs in Nitro.
 
 ## Installation
 
-### The one command
+### Ask your AI agent
+
+**Recommended.** Paste this into Claude Code, Codex or any coding agent: it installs and sets up wherdr for you.
+
+```text
+Read https://wherdr.dev/agent.md and help me set up wherdr. Check what is already installed first, and ask me before installing anything.
+```
+
+It follows [our setup guide for agents](https://wherdr.dev/agent.md): checks what you already have,
+asks before installing anything, sets up your phone over Tailscale, never exposes wherdr to the Internet.
+
+<a id="the-one-command"></a>
+
+### Or run the installer yourself
 
 On the computer that runs Herdr, as your user, on macOS or Linux:
 
@@ -243,7 +369,10 @@ The script ([read it first](https://wherdr.dev/install), source in
    opens the setup guide in your browser (first install) and binds **prefix+i** to its panel;
 5. on a computer **without a screen** (no `DISPLAY` on Linux, or an SSH session): opens nothing,
    prints the local address, an `ssh -L` tunnel to reach it from your computer, and the phone
-   steps (`wherdr phone`: Tailscale state, the address, the QR code once it answers).
+   steps (`wherdr phone`: Tailscale state, the address, the QR code once it answers). With
+   Docker, it offers to run `tailscale serve` for you (asked first), and wherdr enables the
+   published address by itself: no browser is needed on the server. Run the command again at
+   any time to check the phone address.
 
 Settings, as environment variables (`curl -fsSL https://wherdr.dev/install | WHERDR_PORT=7684 sh`):
 
@@ -254,7 +383,7 @@ Settings, as environment variables (`curl -fsSL https://wherdr.dev/install | WHE
 | `WHERDR_MODE` | — | `native`: Node.js even when Docker is there. `docker`: no plugin, Docker Compose by hand in `WHERDR_DIR` (Linux; see below). |
 | `WHERDR_YES` | — | `1` answers yes to every question (non-interactive use). |
 | `WHERDR_NO_BROWSER` | — | `1` never opens a browser. |
-| `WHERDR_REF` | latest | Git tag or branch of the plugin (or of `docker-compose.yml` with `WHERDR_MODE=docker`). |
+| `WHERDR_REF` | main | Git tag or branch of the plugin (or of `docker-compose.yml` with `WHERDR_MODE=docker`). |
 | `WHERDR_PLUGIN` | `afloury/wherdr` | A local checkout to link and build instead (development, tests). |
 
 **Docker by hand, with the script:** `curl -fsSL https://wherdr.dev/install | WHERDR_MODE=docker sh`
@@ -302,7 +431,7 @@ Edit `.env` (every value has a default; `HOST_HOME` defaults to your `$HOME`):
 | `HOST_HOME` | `/home/alice` | Your home folder on the server (default: `$HOME`). Mounted at the same path, read-only. |
 | `PUID` / `PGID` | `1000` | Your user and group IDs (`id -u`, `id -g`). |
 | `PORT` | `7683` | Listening port, published on `127.0.0.1` only. |
-| `APP_URL` | `https://server.example.ts.net:7683/` | Private HTTPS address of the app (step 3; also used as the Web Push contact and an allowed host). Use `http://localhost:7683/` for local testing. |
+| `APP_URL` | `http://localhost:7683/` | Leave it with Tailscale: wherdr adopts the address of step 3 by itself. Set a private HTTPS address only for [another private network](#other-private-networks) (Web Push contact and allowed host; it then always wins). |
 | `HOST_LABEL` | `server` | Name of this machine in the app. |
 | `TZ` | `Europe/Paris` | Time zone for timestamps and logs. |
 | `WHERDR_UPDATE_CHECK` | `off` | Disable the daily check for a new release (default `on`). |
@@ -340,11 +469,38 @@ tailscale serve --bg --https=7683 http://127.0.0.1:7683
 ```
 
 Tailscale Serve listens on HTTPS port 7683 of your tailnet name, with a valid certificate, and
-forwards to wherdr's local HTTP port. Only devices of your tailnet can reach it. Then open
-**Settings › Phone** in wherdr on the server (`http://localhost:7683/#/settings?section=phone`),
-paste that address: wherdr checks it answers, sets it as `APP_URL` (saved in `data/app-url.json`;
-an HTTPS `APP_URL` in `.env` wins) and shows its QR code. Without Docker, the same page publishes
-wherdr itself: one button, asked first.
+forwards to wherdr's local HTTP port. Only devices of your tailnet can reach it.
+
+**wherdr enables that address by itself**, on a server without a screen too: at startup, every
+30 seconds, and when an address it does not know yet is opened, it reads what `tailscale serve`
+publishes on this machine and adopts the HTTPS address that points to its own port (allowed
+host and `APP_URL`, saved in `data/app-url.json`; an HTTPS `APP_URL` in `.env` wins). An address
+removed from `tailscale serve` is refused again. Nothing a request says can enable an address:
+only Tailscale's own state on the machine does, and an address that `tailscale funnel` opens to
+the Internet is never adopted. Without Docker, wherdr runs the `tailscale` command; in Docker
+it reads Tailscale's socket, mounted by `docker-compose.yml` (`/var/run/tailscale`). After
+Tailscale itself restarts (an update), restart the container.
+
+What that mount gives: Tailscale's local API, with the rights of the host user the container
+runs as. Anyone may read it; if that user is Tailscale's operator
+(`tailscale set --operator=$USER`), the API also accepts changes from it (serve, funnel…), and
+`:ro` on the folder does not prevent that. wherdr itself only sends `GET` requests. This is not
+a new privilege: the container already drives Herdr, which is a shell of that same user. To do
+without it, remove the line from `docker-compose.yml`: wherdr then no longer finds the address
+by itself, and the one command (or the plugin's phone step) run after `tailscale serve` hands
+it over.
+
+**Settings › Phone** on the server (`http://localhost:7683/#/settings?section=phone`) shows the
+state and the QR code; without Docker it also publishes wherdr itself: one button, asked first.
+From a terminal, `wherdr phone` (npm, Homebrew) or the [one command](#the-one-command) run again
+(Docker, Herdr plugin) checks the same thing, and
+`curl -fsS http://127.0.0.1:7683/api/phone` prints the state as JSON. A container started from
+an older `docker-compose.yml` has no Tailscale socket: paste the address in Settings › Phone,
+or run the one command again, which sends it.
+
+If the phone shows **"This address isn't enabled yet"** (403), the address it opened is not one
+`tailscale serve` publishes for wherdr's port on that machine: the page gives the command to run
+there.
 
 **Why HTTPS matters.** Browsers only allow three things on `https://` (or on `localhost` itself):
 
@@ -384,8 +540,8 @@ works with any private network that gives it an **HTTPS address with a valid cer
 - **`APP_URL` set to that address** (`.env` with Docker, or the environment of `wherdr` /
   `npm start`), then restart wherdr. Its hostname is allowed automatically and it enables Web
   Push. Add `HERDR_WEB_ALLOWED_HOSTS` only if you also open wherdr under another name. The
-  one-click address check in **Settings › Phone** only knows `*.ts.net` addresses; an HTTPS
-  `APP_URL` in the environment always wins.
+  automatic adoption and the address check in **Settings › Phone** only know the `*.ts.net`
+  addresses of `tailscale serve`; an HTTPS `APP_URL` in the environment always wins.
 - **Never exposed without authentication.** wherdr keeps listening on `127.0.0.1`; only the
   proxy listens on the private network. Turn on the passkey lock as soon as another device can
   reach it.
@@ -464,8 +620,8 @@ wherdr phone                # phone state, the app's phone setup page, QR code o
 | `wherdr start` · `stop` · `restart` | Background server, pid and log in `~/wherdr`. `start` says *started* only once the port answers; otherwise it prints the end of the log. With a login service installed, they drive the service. |
 | `wherdr status` | Address, process, service, data folder and log. |
 | `wherdr logs` (`-f` to follow, `-n 100`) | The log, `~/wherdr/wherdr.log`. |
-| `wherdr open` | Opens wherdr in the browser. |
-| `wherdr phone` | Whether your phone can reach wherdr (Tailscale, `tailscale serve`, the address answering), the link to **Settings › Phone** where you publish it in one click, and the QR code once the address answers. |
+| `wherdr open` | Opens wherdr in the browser: its tailnet address when published and answering, else `localhost`. |
+| `wherdr phone` | Whether your phone can reach wherdr (Tailscale, `tailscale serve`, the address answering), the `tailscale serve` command to publish it when it is not (wherdr then enables the address by itself), the link to **Settings › Phone**, and the QR code once the address answers. |
 | `wherdr service install` · `uninstall` | Start at login: a LaunchAgent on macOS (`~/Library/LaunchAgents/dev.wherdr.plist`), a `systemd --user` unit on Linux (`loginctl enable-linger` keeps it running while you are logged out). |
 | `wherdr doctor` | Checks Node/Bun, Herdr and its socket, the port, the service, the data folder and `APP_URL`. |
 
@@ -553,8 +709,8 @@ setup by itself:
   `~/wherdr` (`docker-compose.yml`, `.env`), the same files as `WHERDR_MODE=docker` of
   [the one command](#the-one-command).
 - **Node.js 22** everywhere else, and always on macOS (Docker Desktop cannot reach Herdr's
-  socket): the plugin downloads the prebuilt npm package of its version (or builds wherdr in its
-  own folder when that fails), copies it to `~/wherdr/app` and runs it detached from there, with
+  socket): the plugin downloads the prebuilt package of its version from GitHub Releases and
+  verifies its SHA-256 checksum, copies it to `~/wherdr/app` and runs it detached from there, with
   its pid and log (`wherdr.log`) in `~/wherdr`. Herdr builds plugins in a temporary folder and
   then moves them, so the server never runs from the plugin folder. Bun works too when Node.js 22
   is missing. Without either, the install stops and says so.
@@ -594,7 +750,7 @@ Without a key: `herdr plugin action invoke panel --plugin afloury.wherdr`. The p
 | Action | What it does |
 |---|---|
 | `panel` | The **wherdr** panel (a popup) |
-| `open` | Opens wherdr in the browser |
+| `open` | Opens wherdr in the browser (its tailnet address when published and answering) |
 
 Up to 1.2.0 the panel action was called `wherdr`: change a key bound to `afloury.wherdr.wherdr` to
 `afloury.wherdr.panel` (Herdr has no action aliases; the install warns about such a key and
@@ -676,6 +832,45 @@ home screen and in Settings › About, with the release notes and the exact comm
 Hide it until the next version with ×. Set `WHERDR_UPDATE_CHECK=off` to disable the check. The
 installed version is shown in Settings › About.
 
+GitHub release packages (including the bundled agent skill), Docker images, and Homebrew
+updates are published without waiting for npm moderation. Native plugin installs and updates
+use the GitHub `.tgz` and verify its SHA-256 checksum before extraction. A failed one-tap
+download or checksum check leaves the running version in place. Plugin installation tries
+GitHub first, then the prebuilt npm package of the exact same version (with its registry integrity hash), and only builds from source when neither works.
+This also keeps older 1.3.x releases without GitHub archives installable with Node.js or Bun.
+Packages predating the bundled skill retain the plugin checkout's commands and skill, so
+skill refresh, installation and uninstallation remain available.
+The installer fetches `main` explicitly unless you set `WHERDR_REF`.
+
+The SHA-256 checksum detects damaged downloads. It is served beside the archive, so someone
+who can replace both files can make them match; it does not prove the publisher’s identity
+or protect against replacement of the archive and checksum together.
+
+`npm install -g`, `npx`, `bunx` and `pnpm dlx` still need npm to serve the wherdr package.
+Their banner waits for registry availability; Homebrew's banner waits for its formula.
+Versions through 1.3.2 use GitHub's `latest` marker and an npm-based updater. That marker only
+advances once npm **and** Homebrew are ready, so their existing Update button continues to work.
+To update an older native plugin earlier, rerun the installer or press **U** in its Herdr panel.
+See [Releasing](docs/RELEASING.md) for the publication order and recovery steps.
+
+**Update in one tap.** When wherdr runs from the Herdr plugin (Node.js mode), a global npm install
+or Homebrew, the banner has an **Update** button instead of the command, for a session opened on
+this computer (`localhost`) or unlocked with a passkey. wherdr installs the new version in a
+process of its own, restarts, and checks that `/api/health` reports the new version within 60
+seconds; the app shows the progress and reloads on the new version. If the new version does not
+answer, wherdr goes back to the previous one by itself (the plugin keeps the previous copy in
+`~/wherdr/app.prev`, npm reinstalls the previous version, Homebrew points back to the previous keg)
+and the app says so. Every step is logged in `~/wherdr/update.log`.
+
+| Setup | What Update does |
+| --- | --- |
+| Herdr plugin, Node.js | Verifies and unpacks the GitHub release package of the new version into `~/wherdr/app`, keeps the old copy, restarts |
+| `npm install -g wherdr` | `npm install -g wherdr@X.Y.Z`, then restarts (login service included) |
+| Homebrew | `brew upgrade wherdr`, then `brew services restart wherdr` |
+
+Docker shows the command instead: replacing its own container would need the Docker socket (root
+on the host) inside it. `npx wherdr` runs from a temporary folder: run `npx wherdr@latest` again.
+
 | Setup | Update command (in the wherdr folder) |
 | --- | --- |
 | Docker, published image (default) | `docker compose pull && docker compose up -d` |
@@ -734,8 +929,9 @@ All settings are environment variables (`.env` with Docker).
 | --- | --- | --- |
 | `PORT` | `7683` | Listening port. |
 | `HOST` | `127.0.0.1` (`npm start`) | Listening address without Docker. Keep it on loopback. |
-| `HOST_LABEL` | server hostname (`wherdr` in Docker) | Name of this machine in the app (can be renamed in the app). |
-| `APP_URL` | *(empty)* | App address and allowed host; a valid HTTPS URL enables Web Push. HTTP, empty or invalid values disable Web Push with a warning. |
+| `HOST_LABEL` | server hostname | Name of this machine in the app (can be renamed in the app). In Docker the installer writes the host's short name; left empty, wherdr shows the name Tailscale gives the machine, else `wherdr`. |
+| `APP_URL` | *(empty)* | App address and allowed host; a valid HTTPS URL enables Web Push. HTTP, empty or invalid values disable Web Push with a warning. With Tailscale, leave it empty: wherdr adopts the address `tailscale serve` publishes. |
+| `TAILNET_REFRESH_MS` | `30000` | How often wherdr reads again what `tailscale serve` publishes for its port. |
 | `HERDR_WEB_ALLOWED_HOSTS` | *(empty)* | Additional hostnames or IP addresses allowed to open the app, comma-separated. |
 | `PASSKEY_USER` | `wherdr` | User name stored with the passkeys. |
 | `DATA_DIR` | `./data` | VAPID keys, push subscriptions, passkeys, recent folders. |
@@ -756,6 +952,92 @@ All settings are environment variables (`.env` with Docker).
 In the app, **Settings** holds per-device preferences: language, theme, notifications, terminal
 text size and renderer, typing effect, what the home screen shows, and the passkey lock.
 
+**Settings › Conversation › Reply style** chooses how an agent's reply offers to be quoted in
+the field, question by question and point by point (a list item or a paragraph that asks
+nothing), so that one message answers them all:
+
+| Style | A question | A point |
+| --- | --- | --- |
+| **Icon** (default) | A small `↳` after it, in the middle or at the end of the message. | A grey `↳` at its end: on hover on a computer, always there and pale on a phone. |
+| **Tap the text** | No button: the question is underlined, tap or click it. | Click it on a computer. On a phone, tap it, then **↳ Discuss**: a single tap never quotes, so reading, scrolling and selecting text stay as they are. |
+| **List under the message** | A number after it, and the questions listed under the message. | **+ Quote a point** under the message, then the point. Offered when the reply has a list item to quote, or two points or more: not under one paragraph of prose. |
+
+Every one of these is a button reachable with the keyboard (`Tab`, then `Enter`), and selecting a
+passage still offers **Reply** on it. A quoted question or point shows `✓`.
+
+**One syntax for every reference.** Whatever you reply to, the field gets one line that names it,
+and your answer goes on the lines below:
+
+```
+↳ Quote message 11:37 ~k3f : I can merge the PR —
+Go ahead.
+↳ Quote point 11:37 ~k3f : Shall I tag the release today? —
+Yes
+↳ Quote decision 11:37 #3 ~k3f : Publish the release notes on the site? —
+No
+```
+
+| Line | Written by |
+| --- | --- |
+| `↳ Quote message <time> ~<code> : <start of the message> —` | **Reply** under an agent message. |
+| `↳ Quote point <time> ~<code> : <excerpt> —` | `↳` on a question or a point, **Reply** on a selected passage. |
+| `↳ Quote decision <time> #<n> ~<code> : <question> —` | **Yes**, **No** or `↳` on a row of a decision table. |
+| `↳ Quote decisions <time> #<rows> ~<code> : <questions> —` | **OK to all** on a decision table. |
+| `↳ Decision: <task> —`, `↳ Problem: <task> —`, `↳ Question: <task> —`, `↳ Detail on <task> —`, `↳ Feedback on <task> —` (and their French labels) | **Answer**, **Problem**, **Question**, **Clarify** and **Comment** in the Project panel. |
+
+- The time is the one shown on the agent's message, so an answer to an earlier message is never
+  read as an answer to the last one. The types are the same words in every language.
+- The code after `~` is three characters wherdr derives from the message (and the rank of the
+  table, from the second table of a message on). It tells apart two messages of the same minute
+  and two tables of one message, whatever the excerpt shows. The field draws it dimmed, like
+  the words before the excerpt; the quote of a sent message leaves it out. The rows of **OK to
+  all** are the numbers the table really has: `#1-4`, or `#1,4` when rows 2 and 3 do not exist.
+- A reference is a whole line: it starts with `↳` in the first column and ends with ` —` at the
+  end of the line, and only there, so an excerpt may hold dashes of its own. The excerpt is plain
+  text on one line; a long one is cut with `…` (a message keeps its start, a passage its start
+  and its end).
+- Several references fit in one message, each followed by its answer.
+- Anything else is your own text: a `>` at the start of a line, a `↳` line of an unknown type or
+  with words after its dash. Text you paste never becomes a reference either: a pasted line that
+  reads like one gets a `\` before its `↳`. A long paste, shown as a **Pasted text** card, is
+  sent exactly as it was pasted.
+- In the conversation, each reference of a sent message shows as a quote; tap it to see the
+  message it names. Messages sent earlier with `> ` lines still show as quotes.
+
+**Settings › Conversation › Quoted replies** chooses how the field shows these lines: **Tokens,
+native field** (default) draws each one as a token in the usual field, **Plain text** shows the
+same lines as text, a fallback if the tokens misbehave. The message sent is the same.
+
+A **closed question**, one that yes or no answers in full, also gets **Yes** and **No** next to
+its `↳` (at the end of its row in the list style). A tap refers to the question and writes the
+answer under it, in the language of the interface, exactly as Reply and typing would; nothing is sent, so several questions can be
+answered in a row before sending. The keyboard stays down on a phone. Tapping the other answer
+replaces the first; words you typed under a quote are never replaced. The rule is cautious, and
+in doubt only Reply is offered: a single sentence that opens like a yes/no question (`Shall I…`,
+`Do you…`, `Is it…`, `Want me to…`, `Est-ce que…`, `Je lance… ?`, `On…`, `Dois-je…`) or ends
+with `, OK?` / `, d'accord ?`, with no alternative (`or`, `ou`), no interrogative word (`which`,
+`how`, `quel`, `comment`…) and no negation.
+
+A **decision table**, a Markdown table whose rows are numbered questions as a coordinator writes
+them, gets a panel right under it: **OK to all** refers to the whole table and writes `OK to all`
+under it (a second tap takes it back), and each row has **Yes**, **No** and `↳`, which refer to
+the row by its number and write `Yes` or `No` under it, or nothing for an answer in words; a row
+that asks an open question has `↳` alone. Every answer names the message and the row, even for
+the last message: the agent may write another one before you send. In French: `OK tout`, `Oui`,
+`Non`. Here too everything is composed in the field and you send. A table qualifies when it has a
+number column (a header `#`, `N°`, `No`, `Num`, `ID` or `Q` over short numbers, each once) and a
+question column, known by its header (`Question`, `Decision`, `Choix`…), by cells that all end
+with `?`, or by an advice column next to it (`Avis`, `Recommendation`, `Suggestion`…). Any other
+table is left as it is.
+
+Above the field, **N questions unanswered** counts the questions of the agent's last message
+(and the rows of its decision tables) that your draft does not answer yet; tap it to scroll to
+the first one. A question counts once it is quoted, a row once it is answered, quoted or covered
+by **OK to all**; when the message asks one thing only, any words you type answer it. The line
+goes when everything is answered and when you send, and it never shows for earlier messages,
+while the agent is working, or while it waits on a prompt. It hangs from the top edge of the
+field, so nothing moves when it comes or goes.
+
 ## Several machines (SSH)
 
 wherdr also shows the agents of the **SSH machines registered in Herdr** — the ones the Herdr
@@ -838,14 +1120,15 @@ worktree. It is optional; with it installed, wherdr adds:
   grouped by repository (`Repo web-shop · 2 worktrees`), with their thread number and state.
 - **Project panel** next to the coordinator (a side panel on a computer, a tab on a phone). It
   reads the project's `TASKS.md` and shows the lists it has, always in this order, with the open
-  threads live (state, progress, report) and resolved threads under Done:
+  threads live (state, progress, report) and resolved threads under Done (**Tasks** tab; the
+  **Threads**, **Inbox**, **Routines**, **Settings** and **Memory** tabs are described below):
 
   | List | Meaning | Buttons |
   | --- | --- | --- |
   | **To test** | You confirm the work | Confirm, Problem, Question |
   | **To decide** | Only you can unblock it | Question, Answer |
   | **To review** | Pull requests for you | Reviewed, Comment |
-  | **In progress** | What threads are really doing | (live threads) |
+  | **In progress** | What threads are really doing | (live threads) Add info |
   | **In queue** | Decided: the coordinator launches the first one as soon as a thread slot frees | Move up / down, Launch now, Clarify, Remove from queue |
   | **Blocked** | Waiting for someone or something external | Unblock, Clarify |
   | **To do** | To do soon, in your priority order; never launched on its own | Move up / down, Queue it, Launch now, Clarify, Back to backlog |
@@ -856,9 +1139,76 @@ worktree. It is optional; with it installed, wherdr adds:
   project may only need Backlog, In progress and Done); any other `##` list shows in a neutral
   style after Backlog. French titles and common synonyms are recognized (À tester, En file,
   À faire, Plus tard…). Every button sends a ready-made message to the coordinator, which edits
-  `TASKS.md` (wherdr never writes it). The In queue header shows the thread slots in use
-  (`max_parallel_threads` in `PROJECT.md`) and the next task, plus the machine's global limit
-  when one is set (`2 of 2 thread slots in use on <machine> (all projects)`).
+  `TASKS.md` (wherdr never writes it). **Add info**, on a working thread, opens a text field:
+  what you type goes to the coordinator, which passes it on to that thread as is. The In queue
+  header shows the thread slots in use (`max_parallel_threads` in `PROJECT.md`) and the next
+  task, plus the machine's global limit when one is set
+  (`2 of 2 thread slots in use on <machine> (all projects)`).
+- **Threads tab** of the Project panel: every thread of the project, resolved ones included.
+  Open threads are grouped as herdr-projects groups them (Your turn, Ready for review, Working…),
+  each with its machine and agent profile; resolved threads stay in their own folded section,
+  shown by pages of 30. One filter covers both (ID, title, machine, profile). A tap opens the
+  thread's record: state, its **Next** list, branch, dates, and these actions:
+
+  | Action | Command | Asks first |
+  | --- | --- | --- |
+  | **Acknowledge** | `thread ack`: you have seen its report | |
+  | **Restart** | `thread restart`: bring back a thread whose pane is gone or whose start failed | |
+  | **Stop** | `thread stop`: Escape in its agent's pane | Yes |
+  | **Resolve** | `thread resolve`: final copy, then its worktree, merged branch and tab are cleaned up (report and library kept) | Yes |
+
+  Open agent, View report and Pull request are there too when they apply. wherdr only runs
+  these `herdr-projects` commands on the coordinator's machine (and reads `thread show --json`);
+  it writes no thread file itself, and herdr-projects has the last word (it refuses to restart a
+  running thread, for instance): its answer is shown as is. With Docker, **Resolve** runs in
+  the container, where the home folder is read-only: a thread of this machine is resolved and
+  its open workspace removed through Herdr, but its merged branch, or a worktree whose workspace
+  was already closed, may stay. herdr-projects lists what it kept, and
+  `herdr-projects sweep <project>` on the host removes it.
+- **Inbox tab**: the project's unhandled inbox items, what herdr-projects tells the coordinator
+  (a thread's new report, a routine due, a machine out of reach…), oldest first, up to 100. An
+  item about a thread shows the thread's title and opens it. **Done** (✓) marks one item as
+  handled with `herdr-projects inbox done`; a coordinator that has not read it yet will not see
+  it any more. Summaries are shown as plain text.
+- **Routines tab**: each routine's schedule, whether it is enabled, its kind (prompt only, or a
+  command and its approval) and its last and next run. Read-only: wherdr never approves,
+  switches or runs a routine, and does not expose the plugin's safety settings.
+- **Settings tab**, read-only: what the project's `PROJECT.md` sets, the keys
+  `herdr-projects set` changes (name, goal, coordinator and thread profiles,
+  `max_parallel_threads`, `auto_resolve_days`, `nudge`, `mute`, repositories). A key the file
+  leaves out shows the plugin's default, marked as such. Safety settings are not shown.
+- **Memory tab**, read-only: `MEMORY.md` (the index) and the `.md` files of `memory/`, with the
+  title and hook the index gives them; a file the index does not mention is listed by name. A
+  tap opens one, rendered as Markdown. The coordinator writes memory, wherdr never does.
+
+  With six tabs, the bar scrolls sideways on a phone and in a narrow side panel; a fade on its
+  edge says there are more.
+
+  herdr-projects (0.2.34) has no JSON output for the inbox or the routines: wherdr reads the
+  front matter of the project's `inbox/*.md` files, and the tab-separated lines of
+  `herdr-projects routine list`, showing the run texts (`last … · next …`) as printed. No command
+  prints a project's settings or memory either: those two tabs read the files named above.
+- **Board** (`H`, or the board button above the agent list): every project, thread, task and
+  agent at a glance, in four columns. Agents outside projects show too. Each card opens what it
+  stands for: a project or task opens its Project panel, a thread opens its agent (or its report
+  once closed), an agent opens its conversation. A project card takes the most urgent column of
+  its cards and counts them; Finished shows the 5 most recent threads and done tasks of each
+  project, **Show all** the rest.
+
+  | Card | Blocked | Todo | Ongoing | Finished |
+  | --- | --- | --- | --- | --- |
+  | **Task** (its `TASKS.md` list) | Blocked | To test, To decide, To review, In queue, To do, Backlog, other lists | In progress without an open thread | Done, or a checked line |
+  | **Thread** | Its agent is your turn, or *waiting on you* | *Ready for review* | Working, landing, idle | Resolved |
+  | **Agent** | Your turn | | Working, starting, restarting | Done, ready |
+
+  Moving a **task** card (drag and drop on a computer, **Move to…** everywhere) sends the
+  coordinator the Project panel's message when one says it (**Launch now** from To do or In
+  queue, **Launch** from Backlog, **Unblock** from Blocked, **Tested** from To test, **Reviewed**
+  from To review), otherwise `↳ Mark blocked: …`, `↳ Move to To do: …` or `↳ Mark done: …`. The
+  card shows *Sent* until the coordinator has moved the line; only the allowed columns are
+  offered, and To decide tasks wait for your answer. Thread, agent and project cards follow
+  what they do and do not move. The server reads every project at once
+  (`GET /api/board`); a project on an offline machine keeps its last read, marked as such.
 - **Max threads per machine**, across all projects: herdr-projects only limits threads per
   project, so three coordinators could still start a dozen threads on one small machine. Set a
   limit per machine in **Settings → Plugins → herdr-projects** (empty `—` = no global limit;
@@ -913,17 +1263,57 @@ worktree. It is optional; with it installed, wherdr adds:
 
 The Project panel only works well when the coordinator follows its conventions: which lists
 mean what, the badges, `(agent → t-NNNN)`, and what to do with each message the buttons send
-(`✓ Tested: …`, `✗ Problem: … — …`, `↳ Queue: …`…). They are written once, as an agent skill:
+(`✓ Tested: …`, `↳ Queue: …`, `↳ Problem: … —` or `↳ Decision: … —` with the answer below it…). They are written once, as an agent skill:
 [`skills/wherdr/SKILL.md`](skills/wherdr/SKILL.md).
 
-- **Herdr plugin**: the install links the skill for every coordinator, whatever its agent:
-  `~/.claude/skills/wherdr` (Claude Code, or `$CLAUDE_CONFIG_DIR/skills`) and
-  `~/.agents/skills/wherdr` (Codex, omp), each only when that agent is installed. Both point to a
-  copy in `~/wherdr/skills/wherdr`, refreshed on each update. An existing `wherdr` skill that is
-  not this link is left alone. Remove the links with `sh scripts/herdr-plugin.sh skill uninstall`
-  in the plugin folder.
-- **Other installs**: link or copy `skills/wherdr` into your agent's skills folder yourself, or
-  paste **Settings → Plugins → herdr-projects → Copy rules for the coordinator** to it.
+The npm package (also used by Homebrew) and Docker image include the skill from that
+release. Installation is best effort: a missing agent or an unwritable home never blocks
+wherdr. It links `~/.claude/skills/wherdr` (or `$CLAUDE_CONFIG_DIR/skills/wherdr`) only
+when the Claude configuration folder exists, and `~/.agents/skills/wherdr` only when
+`.agents`, `.codex` or `.omp` exists. Links point to a stable copy in
+`${WHERDR_DIR:-$HOME/wherdr}/skills/wherdr`. Existing skills from elsewhere are left alone.
+Relative `WHERDR_DIR` resolves from the working directory; relative `CLAUDE_CONFIG_DIR`
+resolves from HOME, including when saved in a login service. Unchanged content is not rewritten.
+A broken link is repaired only when local metadata proves wherdr created it.
+
+| Install mode | Skill installation and refresh |
+| --- | --- |
+| npm / npx / Bun / pnpm | On `wherdr`, `wherdr run`, `wherdr start` or `wherdr service install`; after updating the package, the next start refreshes it. |
+| Homebrew | On `wherdr` startup, including the Homebrew service; restart the service after `brew upgrade`. |
+| One-tap update (npm, Homebrew, native plugin) | Restarting wherdr refreshes the skill from the newly installed package; rollback restores the previous copy when that package also bundles the skill. |
+| Herdr plugin, Node.js | On plugin installation / reinstallation, and on startup from its installed package. |
+| Herdr plugin, Docker | On plugin installation and Update, extracted from the pulled image on the host. |
+| One-command installer, Docker | After each pull, including reruns and `WHERDR_MODE=docker`; saves host helpers in `$WHERDR_DIR/skill-installer`. |
+| Docker by hand | Run the host-side command below after the initial pull and after each image update. |
+| From source | Use `node bin/wherdr.mjs` after building, or run `sh bin/lib/install-skill.sh` yourself after updating; `npm start` alone does not install the skill. |
+
+Docker cannot write the host's agent folders through its read-only home mount. From the
+repository checkout on the **host**, after pulling your image, run:
+
+```sh
+sh bin/install-docker-skill.sh ghcr.io/afloury/wherdr:latest
+```
+
+Pass your image tag if different. The helper creates a stopped temporary container, copies
+only `/app/skills/wherdr/SKILL.md` out of it, uses the local host installer, then removes
+the container. No host home is mounted into it. Repeat this command after each manual Docker update; Docker has no one-tap
+update in the app. Manual failures (including older images without the skill) return a
+nonzero status with diagnostics; plugin and one-command installation warn and continue. Without a checkout, use
+`sh "${WHERDR_DIR:-$HOME/wherdr}/skill-installer/bin/install-docker-skill.sh" <image>` after the one-command install.
+
+Remove managed links with `sh bin/lib/install-skill.sh uninstall` (or
+`sh scripts/herdr-plugin.sh skill uninstall` in the plugin folder). Uninstall leaves
+`~/.local/state/wherdr/skill-disabled`: subsequent starts and updates respect it, even if
+`WHERDR_DIR` changes. To re-enable, explicitly run `sh bin/lib/install-skill.sh install`
+or the plugin's `skill install` (or the Docker host helper above). `WHERDR_SKILL=off`
+disables all installation and refresh, including explicit install; export it for interactive
+starts or set it when installing the login service to preserve it there.
+
+Two limitations remain: rollback to an older package without the helper (such as 1.3.2)
+leaves the failed release's skill in place. With multiple wherdr versions sharing an account,
+the last one started supplies the skill; there is no version comparison.
+
+You can also paste **Settings → Plugins → herdr-projects → Copy rules for the coordinator** to your agent.
 
 ## Herdr plugins
 
@@ -969,7 +1359,9 @@ container talks to the Herdr server running on the host.
   (port forwarding, public reverse proxy, ngrok…); the only exception is a Cloudflare Tunnel
   behind Cloudflare Access, with its risks.
 - Requests are accepted only for `localhost`, loopback addresses, the runtime's hostname, the
-  hostname in `APP_URL`, and the runtime's network interface addresses (those of the container
+  hostname in `APP_URL`, the tailnet name `tailscale serve` publishes for wherdr's own port
+  (read from Tailscale on the machine, never from a request, and only while it is published),
+  and the runtime's network interface addresses (those of the container
   with Docker). Add other private names or IP addresses to `HERDR_WEB_ALLOWED_HOSTS`
   (comma-separated) before using them. An unlisted name returns HTTP 403 (`host` / "Host not
   allowed"); add it to `HERDR_WEB_ALLOWED_HOSTS`, then restart wherdr. This host check also
@@ -1017,8 +1409,10 @@ See [SECURITY.md](SECURITY.md) to report a vulnerability.
   (`herdr integration install claude|codex|omp`) and start a new agent.
 - **Passkeys or notifications unavailable**: the page must be served over HTTPS (or
   `localhost`). On iPhone, notifications need the app installed on the home screen.
-- **HTTP 403 when opening the app through another name**: add that private hostname or IP
-  address to `HERDR_WEB_ALLOWED_HOSTS`, or use the hostname in `APP_URL`, then restart wherdr.
+- **HTTP 403 "This address isn't enabled yet"**: for a tailnet address, run the command the
+  page gives on the machine: it tells whether `tailscale serve` publishes wherdr's port there.
+  For another private name, add the hostname or IP address to `HERDR_WEB_ALLOWED_HOSTS`, or use
+  the hostname in `APP_URL`, then restart wherdr.
 - **Remote machine offline**: `docker compose logs | grep machine` shows its state. Test SSH as
   wherdr does, from the container:
   `docker compose exec herdr-web ssh -o BatchMode=yes laptop '~/.local/bin/herdr status server'`.