diff --git a/.augment/README.md b/.augment/README.md
deleted file mode 100644
index ab2956a..0000000
--- a/.augment/README.md
+++ /dev/null
@@ -1,3 +0,0 @@
-# .augment
-
-Project AI rules live in the repo root: **CLAUDE.md**. Use it for workflow, branch flow, and critical patterns.
diff --git a/.claude/settings.local.json b/.claude/settings.local.json
deleted file mode 100644
index 231d09c..0000000
--- a/.claude/settings.local.json
+++ /dev/null
@@ -1,59 +0,0 @@
-{
-  "permissions": {
-    "allow": [
-      "Bash(tasklist:*)",
-      "Bash(findstr:*)",
-      "Bash(ipconfig:*)",
-      "Bash(npm start)",
-      "mcp__MCP_DOCKER__browser_navigate",
-      "mcp__MCP_DOCKER__browser_take_screenshot",
-      "Bash(curl:*)",
-      "Bash(1 -H \"Icy-MetaData: 1\")",
-      "Bash(start \"\" \"c:\\\\Users\\\\Username\\\\Documents\\\\github\\\\LANStreamer\\\\Start LANStreamer Server.bat\")",
-      "Bash(timeout /t 5 /nobreak)",
-      "Bash(node:*)",
-      "Bash(cmd /c \"cd /d C:\\\\Users\\\\Username\\\\Documents\\\\github\\\\LANStreamer && dir package.json && dir node_modules >nul 2>&1 && echo node_modules exists || echo node_modules NOT found\")",
-      "mcp__MCP_DOCKER__browser_network_requests",
-      "Bash(cmd /c \"cd /d C:\\\\Users\\\\Username\\\\Documents\\\\github\\\\LANStreamer && Start~1~LAN~1.Server.bat 2>&1\")",
-      "Bash(git branch:*)",
-      "Bash(cmd /c \"node --version && echo Node.js OK\")",
-      "Bash(cmd /c:*)",
-      "Bash(git fetch:*)",
-      "Bash(netstat:*)",
-      "Bash(taskkill:*)",
-      "Bash(powershell -Command \"Stop-Process -Id 57624 -Force\")",
-      "mcp__MCP_DOCKER__fetch",
-      "Bash(cmd.exe /c \"tasklist /FI \"\"IMAGENAME eq icecast.exe\"\"\")",
-      "Bash(cmd.exe /c \"netstat -ano | findstr :8000\")",
-      "Bash(cmd.exe /c \"ffmpeg -version\")",
-      "Bash(git checkout:*)",
-      "Bash(git log:*)",
-      "Bash(for version in v1.2.0 v1.2.2 v1.2.3)",
-      "Bash(do echo \"== $version ==\")",
-      "Bash(done)",
-      "Bash(dir:*)",
-      "Bash(powershell \"Select-Object -Last 5\")",
-      "Bash(npm update:*)",
-      "Bash(if not exist \"C:\\\\Users\\\\Username\\\\.claude\\\\skills\" mkdir \"C:\\\\Users\\\\Username\\\\.claude\\\\skills\")",
-      "Bash(powershell:*)",
-      "Bash(more:*)",
-      "Bash(type:*)",
-      "Bash(del \"C:\\\\Users\\\\Username\\\\Documents\\\\github\\\\LANStreamer\\\\docs\\\\ICECAST_CONFIG_ARCHITECTURE.md\")",
-      "Bash(npm test:*)",
-      "Bash(gh run list:*)",
-      "Bash(gh run view:*)",
-      "Bash(xargs:*)",
-      "Bash(cmd.exe /c \"netstat -ano | findstr :3001\")",
-      "Bash(tail:*)",
-      "Bash(timeout 5 ffmpeg:*)",
-      "Bash(timeout 3 ffmpeg:*)",
-      "Bash(git stash:*)",
-      "Bash(git pull:*)",
-      "Bash(git merge:*)",
-      "Bash(gh pr create:*)",
-      "Bash(gh pr view:*)",
-      "Bash(gh pr edit:*)",
-      "Bash(git rebase:*)"
-    ]
-  }
-}
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 2f5766e..7338566 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -29,5 +29,8 @@ jobs:
       - name: Install dependencies
         run: npm ci
 
+      - name: Integrity check (design tokens + UI rules)
+        run: node scripts/check-design-tokens.mjs
+
       - name: Run tests
         run: npm test
diff --git a/.github/workflows/enforce-prs.yml b/.github/workflows/enforce-prs.yml
new file mode 100644
index 0000000..c195299
--- /dev/null
+++ b/.github/workflows/enforce-prs.yml
@@ -0,0 +1,57 @@
+name: enforce-prs
+
+# Free-tier branch protection (adopted from the devops repo, 2026-10-28):
+# every commit that lands on main must (a) belong to a merged PR and (b)
+# have a green CI run for that exact commit. Direct pushes and red-CI
+# merges are auto-reverted (GITHUB_TOKEN pushes do not re-trigger
+# workflows, so the revert itself doesn't loop). dev stays open for the
+# documented local-merge workflow; only main (the release branch) is
+# protected. Replace with native branch protection if the repo upgrades
+# to GitHub Pro or goes public.
+
+on:
+  workflow_run:
+    workflows: ["CI"]
+    types: [completed]
+
+jobs:
+  verify-pr:
+    if: >
+      github.event.workflow_run.head_branch == 'main' &&
+      github.event.workflow_run.event == 'push'
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: read
+    steps:
+      - name: Require green CI and PR association for this commit
+        env:
+          GH_TOKEN: ${{ github.token }}
+          REPO: ${{ github.repository }}
+          SHA: ${{ github.event.workflow_run.head_sha }}
+          CONCLUSION: ${{ github.event.workflow_run.conclusion }}
+        run: |
+          if [ "$CONCLUSION" != "success" ]; then
+            echo "::error::CI concluded '$CONCLUSION' for $SHA on main. This commit will be reverted."
+            exit 78
+          fi
+          n=$(gh api "repos/$REPO/commits/$SHA/pulls" --jq 'length')
+          echo "associated PRs: $n"
+          if [ "$n" -eq 0 ]; then
+            echo "::error::Direct push to main is not allowed. Open a PR (CI must pass, then merge). This commit will be reverted."
+            exit 78
+          fi
+      - name: Revert the offending push
+        if: failure()
+        env:
+          GH_TOKEN: ${{ github.token }}
+          REPO: ${{ github.repository }}
+          SHA: ${{ github.event.workflow_run.head_sha }}
+        run: |
+          git config --global user.name "ci-guard"
+          git config --global user.email "ci-guard@users.noreply.github.com"
+          git clone "https://x-access-token:${GH_TOKEN}@github.com/${REPO}.git" repo
+          cd repo
+          git revert --no-edit "$SHA" || { echo "revert failed (merge conflict?) — MANUAL ACTION REQUIRED"; exit 1; }
+          git push origin main
+          echo "Reverted $SHA on main."
diff --git a/.gitignore b/.gitignore
index 263e93f..f01d5e9 100644
--- a/.gitignore
+++ b/.gitignore
@@ -123,6 +123,7 @@ dev-docs/
 config/streams.json
 config/device-config.json
 config/contact-details.json
+config/security.json
 config/web/
 config/admin/
 
@@ -133,3 +134,15 @@ Desktop.ini
 
 # Windows reserved name (can appear as accidental file)
 nul
+/release/
+.claude/settings.local.json
+.claude-consult-prompt.md
+# Root config/ holds per-install runtime state — anchored so src/config/ (source
+# code) is never caught by this pattern (it silently blocked `git add` there).
+/config/
+/config/binary-probe.json
+/config/telemetry.json
+electron/telemetry-key.json
+
+# Bundled FFmpeg/Icecast binaries for the installer (fetched, never committed)
+/vendor/
diff --git a/CLAUDE.md b/CLAUDE.md
index 78bfcaf..9fbd895 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -4,8 +4,8 @@ This file provides guidance to Claude Code (claude.ai/code) when working with co
 
 ## Project Context
 
-**Project Type:** Node.js audio streaming server
-**Key Technologies:** FFmpeg, Icecast, Express.js, Socket.io
+**Project Type:** Electron desktop app (LAN audio streaming; Express server embedded in the Electron main process)
+**Key Technologies:** Electron, FFmpeg, Icecast, Express.js, PostHog (voluntary telemetry)
 
 **Architecture:**
 - `src/services/StreamingService.js` → Core FFmpeg process management
@@ -20,6 +20,24 @@ This file provides guidance to Claude Code (claude.ai/code) when working with co
 - **dev** is the integration branch. All changes land here (via merge or PR) before they can go to main.
 - **Feature branches** are created from **main** (or **dev**) when starting new work. Pull from main into your feature branch if you need latest: `git fetch origin main && git merge origin/main` (or rebase).
 - **Flow:** main → create `feature/xyz` → work → **merge feature into dev locally** → test → push dev → merge dev into main (release).
+- **main is now PR-protected (2026-10-28):** `enforce-prs.yml` auto-reverts any main commit that wasn't merged via a PR with green CI. Releases go dev → PR → main (pushing main directly gets reverted). dev stays open for the local-merge workflow above.
+
+### Pre-review gate for streaming features (enforced)
+
+Every PR that adds or changes streaming behavior (stream lifecycle,
+proxying, device capture, listener fanout, start-all, queueing) must
+answer the 7 hostile conditions in **docs/pressure-checklist.md**
+(uneven load, slow-not-down dependency, 10x data, machine dies mid-write,
+poor network, duplicate request, hostile traffic) in the PR description
+for the changed code path. Adopted from the devops practices DB.
+
+### Integrity linter (CI-enforced)
+
+`node scripts/check-design-tokens.mjs` fails CI on NEW violations of the
+UI rules below (hardcoded hex outside token sources, gray-* classes,
+native dialogs, runtime CDN refs). Existing debt is grandfathered in
+`scripts/design-token-baseline.json`; to accept new debt deliberately run
+`--update-baseline` and say why in the commit.
 
 ### Merge feature into dev locally (recommended)
 
@@ -54,6 +72,26 @@ Example: `git merge feature/start-all-and-unique-names`. After pushing dev, you
 - FFmpeg exit codes are unsigned, require conversion to signed
 - Example: 0xA7F00008 needs special handling
 
+## UI rules (enforced)
+
+- **Design tokens are the single source of truth**: `public/assets/css/tokens.css` (`--tok-*`, dark default + `[data-theme="light"]`). Tailwind maps them (`tailwind.config.js` → `bg-surface-1`, `text-muted`, `border-line`, `text-accent`, `rounded-pill`, `shadow-glow`…). **Never hardcode hex colors or dark-only Tailwind grays in new UI code** — use the semantic tokens so both themes work.
+- **Component showcase (dev-only) at `/showcase.html`**: every approved component variant, rendered from live tokens in both themes. New UI must match a pattern shown there — if it doesn't fit, extend the showcase first, then build. Check both themes on that page when touching tokens or `ui.css`.
+- **Shared components live in `public/assets/css/ui.css`**: `.btn-primary/secondary/ghost/danger`, `.play-btn`, `.copy-btn` (IconButton), `.channel-badge`, `.stream-row`, `.live-chip`, `.eq`, `.mq` (marquee), `.tok-label`, `.toast`/`.toast-stack` (via `LSToasts`), `.stream-error` (collapsed row error), `.ls-collapse` (remembered collapsibles via `LSCollapse`). New variants need a shared definition there first — no one-off button styles.
+- **Toasts must stack**: all transient notifications go through `LSToasts.show(message, type, {tag, linkUrl, linkText})` — it appends into `#toast-stack` so simultaneous toasts push down instead of overlapping; same-`tag` toasts replace each other. Never hand-roll `position:fixed` toasts.
+- **One icon family**: Material Symbols Rounded, locally served. Icon-only buttons must have `aria-label` + `title`. Replace decorative emoji used as UI icons; content emoji is fine.
+- **Sharing the listener page happens in ONE place** (header share card: open / copy / QR via `LSShare`). Never per-stream share buttons — we share the page, not individual mounts.
+- **Notifications**: transient confirmations via the page toast; stream failures stay visible near the stream; never `alert()`. Don't report success before the server confirms.
+- **Offline rule**: no runtime CDN dependencies — fonts/icons/styles all self-hosted (`build:css`, `vendor:fonts`).
+- After changing classes anywhere: run `npm run build:css`.
+- **No PWA on the listener page** (decision, 2026-10-28): installed shortcuts are bound to the origin they were made from, so a DHCP IP change kills every listener's shortcut. The page stays a plain bookmarkable URL; `streams.html` actively unregisters any leftover service worker. Don't re-add a manifest/SW without solving dynamic IPs first.
+
+## Telemetry (PostHog)
+
+- `src/services/TelemetryService.js` — opt-in only; **never** capture personal data, audio, stream names, or paths. Events: `app_start`, `stream_started` (format), `stream_stopped`, `stream_failed` (error category), `telemetry_enabled/disabled`. Distinct ID = anonymous install UUID from `config/telemetry.json`.
+- Enabled only when user consented (first-run Electron prompt; toggle in tray menu) **and** `POSTHOG_KEY` env is set (`POSTHOG_HOST` optional). No-op otherwise — keep it that way for any new events.
+- Skipped entirely under `NODE_ENV=test`. All calls are fire-and-forget with catch: telemetry must never break the app.
+- Docs: README "Telemetry & Privacy" (user-facing) + this section (dev-facing).
+
 ## Configuration
 
 - `.env` - Environment variables (use `env.example` as template)
diff --git a/LANStreamer-redesign/README.md b/LANStreamer-redesign/README.md
new file mode 100644
index 0000000..86e5091
--- /dev/null
+++ b/LANStreamer-redesign/README.md
@@ -0,0 +1,36 @@
+# LANStreamer — UI/UX redesign
+
+Open `dashboard.html` or `listener.html` in any browser (no build step). Use the moon icon to switch light/dark; resize to see mobile.
+
+Files
+- `styles.css` — shared design tokens (light + dark) and components. Drop-in replacement for the current token sheet.
+- `app.js` — theme memory, stacked/tagged toasts, icons.
+- `dashboard.html` — admin dashboard (interactive mock: start/stop, filter, new-stream drawer, overflow menu, empty state).
+- `listener.html` — public listener page.
+
+## What changed and why
+
+Admin dashboard
+1. **Status strip at the top** — on-air count, listeners, Icecast status and "needs attention" are visible at a glance instead of buried in collapsed sidebar cards.
+2. **Security banner is actionable** — plain-language risk + a direct "Change password" button, in warning (not error) colour so it doesn't compete with real stream failures.
+3. **Live streams grouped first** — "On air" and "Ready" sections; no more hunting for the one live row among seven.
+4. **Full source names** — the old rows truncated the *start* of device names ("tput (VB-Audio…"). Names now truncate at the end with a tooltip.
+5. **Errors explain the fix** — the error row shows cause + "Change input" / "Retry" inline, instead of a collapsed "Audio Device Not Found" toggle.
+6. **Fewer icons per row** — one play/stop button + a "⋯" menu (copy link, edit, duplicate, delete). Delete no longer sits one click from Play. Up/down arrows replaced by a drag handle on hover.
+7. **Stop is visually distinct from Play** (red square vs neutral play), so the live row is unmistakable.
+8. **New stream as a side drawer** — input list shows which device is already in use and a live level meter; quality chosen by purpose (Speech / Standard / Music); optional auto-start.
+9. **Share card** — QR + copyable LAN address replaces the cramped "Listen to streams:" header pill.
+10. **Audio inputs always visible** — status (in use / idle / missing) per device instead of a "Component unavailable" collapsed panel.
+11. **Filters** (All / Live / Issues) and a friendlier empty state with a 3-step guide.
+
+Listener page
+1. **One big play button** with the current channel, live timer, listener count, waveform and volume.
+2. **Channel picker** for multi-room / multi-language events (designed for interpretation use).
+3. **Help line** for the most common "no sound" causes.
+4. **Mobile mini-player** stays pinned at the bottom after scrolling.
+5. Event artwork is themed from tokens instead of a fixed illustration; About/Contact are native, keyboard-accessible disclosures.
+
+Design system
+- Typography: Space Grotesk (UI) + JetBrains Mono (IDs, bitrates, timers).
+- Warning colour now separate from error; `--onair` reserved for the ON AIR badge.
+- Visible focus rings, `prefers-reduced-motion` respected, colour never the only status signal (text labels on every chip).
diff --git a/LANStreamer-redesign/app.js b/LANStreamer-redesign/app.js
new file mode 100644
index 0000000..a69aa4f
--- /dev/null
+++ b/LANStreamer-redesign/app.js
@@ -0,0 +1,26 @@
+// Shared: theme toggle (remembered), toasts, icons
+(function(){
+  const saved = localStorage.getItem('ls-theme');
+  const prefersDark = matchMedia('(prefers-color-scheme: dark)').matches;
+  document.documentElement.dataset.theme = saved || (prefersDark ? 'dark' : 'light');
+})();
+window.LS = {
+  toggleTheme(){
+    const t = document.documentElement.dataset.theme === 'dark' ? 'light' : 'dark';
+    document.documentElement.dataset.theme = t; localStorage.setItem('ls-theme', t);
+  },
+  toast(msg, tag){
+    let box = document.querySelector('.toasts');
+    if(!box){ box = document.createElement('div'); box.className='toasts'; box.setAttribute('aria-live','polite'); document.body.appendChild(box); }
+    if(tag){ const old = box.querySelector(`[data-tag="${tag}"]`); if(old) old.remove(); }
+    const t = document.createElement('div'); t.className='toast'; t.textContent=msg; if(tag) t.dataset.tag=tag;
+    box.appendChild(t); while(box.children.length>4) box.firstChild.remove();
+    setTimeout(()=>t.remove(), 3200);
+  }
+};
+const I = {
+  logo:'<svg viewBox="0 0 24 24" width="18" height="18" fill="currentColor"><rect x="4" y="13" width="3" height="7" rx="1.5"/><rect x="10" y="9" width="3" height="11" rx="1.5"/><rect x="16" y="5" width="3" height="15" rx="1.5"/></svg>',
+  play:'<svg viewBox="0 0 24 24" width="16" height="16" fill="currentColor"><path d="M8 5.5v13a1 1 0 0 0 1.5.86l10.5-6.5a1 1 0 0 0 0-1.72L9.5 4.64A1 1 0 0 0 8 5.5z"/></svg>',
+  stop:'<svg viewBox="0 0 24 24" width="14" height="14" fill="currentColor"><rect x="6" y="6" width="12" height="12" rx="2"/></svg>',
+  pause:'<svg viewBox="0 0 24 24" width="16" height="16" fill="currentColor"><rect x="6" y="5" width="4" height="14" rx="1.2"/><rect x="14" y="5" width="4" height="14" rx="1.2"/></svg>',
+};
diff --git a/LANStreamer-redesign/dashboard.html b/LANStreamer-redesign/dashboard.html
new file mode 100644
index 0000000..12d13ed
--- /dev/null
+++ b/LANStreamer-redesign/dashboard.html
@@ -0,0 +1,275 @@
+<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1">
+<title>LANStreamer — Admin dashboard</title>
+<link rel="preconnect" href="https://fonts.googleapis.com"><link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
+<link href="https://fonts.googleapis.com/css2?family=JetBrains+Mono:wght@400;500&family=Space+Grotesk:wght@400;500;600;700&display=swap" rel="stylesheet">
+<link rel="stylesheet" href="styles.css">
+<script src="app.js"></script>
+<style>
+/* System strip: replaces the 3 collapsed sidebar cards + scattered status */
+.strip{display:grid;grid-template-columns:repeat(4,minmax(0,1fr));gap:12px;margin:24px 0 16px}
+.stat{padding:14px 16px;display:flex;flex-direction:column;gap:6px;min-width:0}
+.stat .v{font-size:22px;font-weight:600;letter-spacing:-.02em;display:flex;align-items:center;gap:8px}
+.stat .v small{font-size:13px;color:var(--text-3);font-weight:500}
+.stat.alert{border-color:color-mix(in oklab,var(--warn) 40%,transparent)}
+.stat.alert .v{color:var(--warn);font-size:15px}
+/* Security banner: compact, actionable */
+.banner{display:flex;align-items:center;gap:12px;padding:10px 12px 10px 14px;border-radius:12px;background:var(--warn-soft);border:1px solid color-mix(in oklab,var(--warn) 30%,transparent);font-size:14px}
+.banner b{color:var(--warn)}
+.banner .grow{flex:1;min-width:0}
+/* Layout */
+.grid{display:grid;grid-template-columns:minmax(0,1fr) 340px;gap:20px;align-items:start}
+.toolbar{display:flex;align-items:center;gap:8px;padding:14px 18px;border-bottom:1px solid var(--line);flex-wrap:wrap}
+.toolbar h2{font-size:16px;font-weight:600;margin-right:auto}
+.seg{display:inline-flex;background:var(--surface-2);border-radius:10px;padding:3px}
+.seg button{height:28px;padding:0 10px;border-radius:7px;font-size:13px;font-weight:500;color:var(--text-2)}
+.seg button[aria-pressed="true"]{background:var(--surface-1);color:var(--text-1);box-shadow:0 1px 2px rgba(0,0,0,.08)}
+.group-label{padding:12px 18px 6px;display:flex;align-items:center;gap:8px}
+/* Stream row */
+.row{display:grid;grid-template-columns:auto auto minmax(0,1fr) auto;align-items:center;gap:14px;padding:12px 18px;border-top:1px solid var(--line);position:relative}
+.row:hover{background:color-mix(in oklab,var(--surface-2) 55%,transparent)}
+.row:hover .grip{opacity:1}
+.row.is-live::before,.row.is-err::before{content:"";position:absolute;left:0;top:10px;bottom:10px;width:3px;border-radius:0 3px 3px 0;background:var(--live)}
+.row.is-err::before{background:var(--danger)}
+.grip{opacity:0;color:var(--text-3);cursor:grab;width:14px}
+.sid{width:38px;height:38px;border-radius:10px;border:1px solid var(--line-strong);display:grid;place-items:center;font-family:var(--mono);font-size:13px;font-weight:500;color:var(--text-2)}
+.is-live .sid{border-color:color-mix(in oklab,var(--live) 50%,transparent);color:var(--live);background:var(--live-soft)}
+.name{font-weight:600;font-size:15px;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}
+.meta{display:flex;align-items:center;gap:8px;margin-top:3px;flex-wrap:wrap;color:var(--text-2);font-size:13px}
+.meta .src{display:inline-flex;align-items:center;gap:5px;max-width:300px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+.meta .dotsep{width:3px;height:3px;border-radius:50%;background:var(--text-3)}
+.actions{display:flex;align-items:center;gap:4px}
+.playbtn{width:40px;height:40px;border-radius:50%;display:grid;place-items:center;background:var(--surface-2);color:var(--text-1);border:1px solid var(--line-strong);transition:.15s}
+.playbtn:hover{background:var(--accent);color:var(--on-accent);border-color:var(--accent)}
+.playbtn.stop{background:var(--danger-soft);color:var(--danger);border-color:color-mix(in oklab,var(--danger) 30%,transparent)}
+.playbtn.stop:hover{background:var(--danger);color:#fff}
+.menu{position:relative}
+.menu-pop{position:absolute;right:0;top:40px;min-width:180px;padding:6px;z-index:10;display:none}
+.menu.open .menu-pop{display:block}
+.menu-pop button{display:flex;width:100%;align-items:center;gap:10px;padding:8px 10px;border-radius:8px;font-size:14px;text-align:left}
+.menu-pop button:hover{background:var(--surface-2)}
+.menu-pop .del{color:var(--danger)}
+.errbox{grid-column:3/-1;margin-top:4px;padding:10px 12px;border-radius:10px;background:var(--danger-soft);font-size:13px;display:flex;gap:10px;align-items:center;flex-wrap:wrap}
+.errbox b{color:var(--danger)}
+.errbox .grow{flex:1;min-width:200px;color:var(--text-2)}
+/* Side panel */
+.side{display:flex;flex-direction:column;gap:16px;position:sticky;top:84px}
+.share-url{display:flex;align-items:center;gap:8px;padding:8px 8px 8px 12px;border-radius:10px;background:var(--inset);border:1px solid var(--line)}
+.share-url code{flex:1;font-family:var(--mono);font-size:13px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+.qr{width:96px;height:96px;border-radius:10px;background:var(--surface-1);border:1px solid var(--line);padding:8px;flex-shrink:0}
+.kv{display:flex;justify-content:space-between;align-items:center;padding:8px 0;border-top:1px dashed var(--line);font-size:14px}
+.kv:first-child{border-top:0}
+.devices li{list-style:none;display:flex;align-items:center;gap:10px;padding:8px 0;font-size:13px;border-top:1px dashed var(--line)}
+.devices li:first-child{border-top:0}
+.lvl{flex:1;height:4px;border-radius:2px;background:var(--inset);overflow:hidden;max-width:70px}
+.lvl i{display:block;height:100%;background:var(--live)}
+/* Drawer */
+.scrim{position:fixed;inset:0;background:rgba(5,8,12,.5);opacity:0;pointer-events:none;transition:.2s;z-index:40}
+.drawer{position:fixed;top:0;right:0;bottom:0;width:min(440px,100%);background:var(--surface-1);border-left:1px solid var(--line);transform:translateX(100%);transition:.25s ease;z-index:50;display:flex;flex-direction:column}
+body.drawer-open .scrim{opacity:1;pointer-events:auto}
+body.drawer-open .drawer{transform:none}
+.drawer-b{padding:20px;display:flex;flex-direction:column;gap:18px;overflow:auto;flex:1}
+.drawer-f{padding:16px 20px;border-top:1px solid var(--line);display:flex;gap:8px;justify-content:flex-end}
+.src-opt{display:flex;align-items:center;gap:12px;padding:10px 12px;border:1px solid var(--line-strong);border-radius:10px;cursor:pointer}
+.src-opt:has(input:checked){border-color:var(--accent);background:var(--accent-soft)}
+.src-opt input{accent-color:var(--accent)}
+.src-opt .t{flex:1;min-width:0;font-size:14px}
+.src-opt .t div:first-child{font-weight:600;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}
+.quality{display:grid;grid-template-columns:repeat(3,1fr);gap:8px}
+.quality label{border:1px solid var(--line-strong);border-radius:10px;padding:10px;text-align:center;cursor:pointer;font-size:13px}
+.quality label:has(input:checked){border-color:var(--accent);background:var(--accent-soft);color:var(--accent)}
+.quality input{display:none}
+.quality b{display:block;font-size:15px}
+/* Empty state */
+.empty{padding:48px 24px;text-align:center;display:none}
+.empty ol{display:inline-flex;gap:24px;margin:20px 0;list-style:none;text-align:left;flex-wrap:wrap;justify-content:center}
+.empty li{display:flex;gap:10px;align-items:center;font-size:14px;color:var(--text-2)}
+.empty li span{width:24px;height:24px;border-radius:50%;background:var(--accent-soft);color:var(--accent);display:grid;place-items:center;font-family:var(--mono);font-size:12px}
+body.is-empty .empty{display:block}
+body.is-empty .list{display:none}
+@media (max-width:960px){.grid{grid-template-columns:1fr}.side{position:static}.strip{grid-template-columns:repeat(2,1fr)}}
+@media (max-width:560px){
+  .row{grid-template-columns:auto minmax(0,1fr) auto;gap:12px;padding:12px 16px}
+  .grip{display:none}.errbox{grid-column:1/-1}
+  .meta .src{max-width:180px}
+  .toolbar h2{width:100%}
+  .banner{flex-wrap:wrap}.banner .grow{flex-basis:calc(100% - 40px)}
+  .meta .src{flex-basis:100%;max-width:100%}.meta .src + .dotsep{display:none}
+  .toolbar .btn-primary{margin-left:auto}
+}
+</style>
+</head>
+<body>
+<header class="topbar"><div class="wrap">
+  <div class="brand"><span class="brand-mark" id="logo"></span><span><b>LAN</b>Streamer</span><span class="sep hide-sm">/</span><span class="event hide-sm">Sounds For A Beautiful Day</span></div>
+  <div class="spacer"></div>
+  <a class="btn btn-secondary btn-sm hide-sm" href="listener.html" target="_blank">
+    <svg class="svg" viewBox="0 0 24 24" style="width:15px;height:15px"><path d="M3 18v-6a9 9 0 0 1 18 0v6"/><path d="M21 19a2 2 0 0 1-2 2h-1v-6h3zM3 19a2 2 0 0 0 2 2h1v-6H3z"/></svg>Open listener page</a>
+  <button class="iconbtn" aria-label="Notifications (1 unread)"><svg class="svg" viewBox="0 0 24 24"><path d="M6 8a6 6 0 1 1 12 0c0 7 3 9 3 9H3s3-2 3-9"/><path d="M10.3 21a1.94 1.94 0 0 0 3.4 0"/></svg><span class="dot"></span></button>
+  <button class="iconbtn" aria-label="Toggle theme" onclick="LS.toggleTheme()"><svg class="svg" viewBox="0 0 24 24"><path d="M12 3a6 6 0 0 0 9 9 9 9 0 1 1-9-9z"/></svg></button>
+</div></header>
+
+<main class="wrap">
+  <div class="strip">
+    <div class="card stat"><span class="eyebrow">On air</span><span class="v"><span class="eq" style="color:var(--live)"><i></i><i></i><i></i><i></i></span><span id="liveCount">1</span><small>/ 7 streams</small></span></div>
+    <div class="card stat"><span class="eyebrow">Listeners</span><span class="v">23 <small>peak 31</small></span></div>
+    <div class="card stat"><span class="eyebrow">Icecast server</span><span class="v"><span class="chip chip-live"><span class="pip"></span>Online</span><small class="mono">:8000</small></span></div>
+    <div class="card stat alert"><span class="eyebrow">Needs attention</span><span class="v">1 stream · 1 setting</span></div>
+  </div>
+
+  <div class="banner" id="banner" role="alert" style="margin-bottom:20px">
+    <svg class="svg" viewBox="0 0 24 24" style="color:var(--warn)"><path d="M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z"/><path d="M12 8v4M12 16h.01"/></svg>
+    <div class="grow"><b>Default Icecast password in use.</b> <span class="muted">Anyone on your network could take over a stream.</span></div>
+    <button class="btn btn-secondary btn-sm" onclick="LS.toast('Opening server settings…')">Change password</button>
+    <button class="iconbtn" aria-label="Dismiss" onclick="banner.remove()"><svg class="svg" viewBox="0 0 24 24"><path d="M18 6 6 18M6 6l12 12"/></svg></button>
+  </div>
+
+  <div class="grid">
+    <section class="card" aria-label="Audio streams">
+      <div class="toolbar">
+        <h2>Streams</h2>
+        <div class="seg" role="group" aria-label="Filter">
+          <button aria-pressed="true" data-f="all">All 7</button><button aria-pressed="false" data-f="live">Live</button><button aria-pressed="false" data-f="err">Issues</button>
+        </div>
+        <button class="btn btn-ghost btn-sm" onclick="stopAll()">Stop all</button>
+        <button class="btn btn-ghost btn-sm" onclick="document.body.classList.toggle('is-empty')" title="Preview empty state">Empty</button>
+        <button class="btn btn-primary" onclick="openDrawer()"><svg class="svg" viewBox="0 0 24 24" style="width:16px;height:16px"><path d="M12 5v14M5 12h14"/></svg>New stream</button>
+      </div>
+      <div class="list" id="list"></div>
+      <div class="empty">
+        <div class="brand-mark" style="width:48px;height:48px;margin:0 auto 16px;border-radius:14px" id="logo2"></div>
+        <h3 style="font-size:20px;letter-spacing:-.01em">No streams yet</h3>
+        <p class="muted" style="margin-top:6px">Pick an audio input, name it, and go live — listeners on your Wi-Fi hear it instantly.</p>
+        <ol><li><span>1</span>New stream</li><li><span>2</span>Choose input</li><li><span>3</span>Go live</li></ol>
+        <div><button class="btn btn-primary" onclick="openDrawer()">Create first stream</button></div>
+        <p class="faint" style="font-size:13px;margin-top:20px">Tip: route app audio with VB-Audio Cable or Dante Virtual Soundcard.</p>
+      </div>
+    </section>
+
+    <aside class="side">
+      <section class="card">
+        <div class="card-h"><h3>Share with listeners</h3></div>
+        <div class="card-b" style="display:flex;gap:14px;align-items:center">
+          <svg class="qr" viewBox="0 0 21 21" shape-rendering="crispEdges" id="qr"></svg>
+          <div style="min-width:0;flex:1;display:flex;flex-direction:column;gap:8px">
+            <p class="muted" style="font-size:13px">Scan or open on any device on this network.</p>
+            <div class="share-url"><code>192.168.1.24:3001</code><button class="iconbtn" style="width:28px;height:28px" aria-label="Copy link" onclick="LS.toast('Link copied','copy')"><svg class="svg" viewBox="0 0 24 24" style="width:15px;height:15px"><rect x="9" y="9" width="13" height="13" rx="2"/><path d="M5 15H4a2 2 0 0 1-2-2V4a2 2 0 0 1 2-2h9a2 2 0 0 1 2 2v1"/></svg></button></div>
+          </div>
+        </div>
+      </section>
+
+      <section class="card">
+        <div class="card-h"><h3>Event</h3><span class="spacer"></span><button class="btn btn-ghost btn-sm">Edit</button></div>
+        <div class="card-b">
+          <div class="kv"><span class="muted">Title</span><span>Sounds For A Beautiful Day</span></div>
+          <div class="kv"><span class="muted">Feedback contact</span><span>hello@example.com</span></div>
+          <div class="kv"><span class="muted">Show on listener page</span><button class="switch" role="switch" aria-checked="true" onclick="this.ariaChecked=this.ariaChecked!=='true'"></button></div>
+        </div>
+      </section>
+
+      <section class="card">
+        <div class="card-h"><h3>Audio inputs</h3><span class="chip chip-off">4 found</span><span class="spacer"></span><button class="iconbtn" style="width:30px;height:30px" aria-label="Rescan" onclick="LS.toast('Rescanning inputs…','scan')"><svg class="svg" viewBox="0 0 24 24" style="width:15px;height:15px"><path d="M21 12a9 9 0 1 1-3-6.7L21 8"/><path d="M21 3v5h-5"/></svg></button></div>
+        <ul class="card-b devices">
+          <li><span class="chip chip-live" style="height:20px">IN USE</span><span style="flex:1;min-width:0">CABLE Output (VB-Audio Virtual Cable)</span><span class="lvl"><i style="width:70%"></i></span></li>
+          <li><span class="chip chip-off" style="height:20px">IDLE</span><span style="flex:1">CABLE-A Output (VB-Audio Cable A)</span><span class="lvl"><i style="width:0"></i></span></li>
+          <li><span class="chip chip-off" style="height:20px">IDLE</span><span style="flex:1">Microphone (Realtek Audio)</span><span class="lvl"><i style="width:15%"></i></span></li>
+          <li><span class="chip chip-err" style="height:20px">MISSING</span><span style="flex:1" class="muted">OBS Virtual Camera (Audio)</span></li>
+        </ul>
+      </section>
+    </aside>
+  </div>
+</main>
+
+<footer class="foot"><div class="wrap">
+  <span>LANStreamer v1.2.4</span><a href="https://github.com/jerryagenyi/LANStreamer">GitHub</a><a href="#">Troubleshooting</a>
+  <span class="spacer"></span><span>Free &amp; open source · no ads, no listener tracking</span>
+</div></footer>
+
+<!-- New stream drawer -->
+<div class="scrim" onclick="closeDrawer()"></div>
+<aside class="drawer" role="dialog" aria-modal="true" aria-labelledby="dt">
+  <div class="card-h" style="padding:18px 20px"><h2 id="dt" style="font-size:17px">New stream</h2><span class="spacer"></span><button class="iconbtn" aria-label="Close" onclick="closeDrawer()"><svg class="svg" viewBox="0 0 24 24"><path d="M18 6 6 18M6 6l12 12"/></svg></button></div>
+  <form class="drawer-b" id="newForm" onsubmit="event.preventDefault();goLive()">
+    <div class="field"><label for="sn">Name</label><input id="sn" class="input" maxlength="50" placeholder="e.g. Main Room English" required><span class="hint">Listeners see this. Use the room or language.</span></div>
+    <div class="field"><label>Audio input</label>
+      <label class="src-opt"><input type="radio" name="src" checked><div class="t"><div>CABLE Output (VB-Audio Virtual Cable)</div><div class="faint mono">Used by S5 · can share</div></div><span class="lvl"><i style="width:70%"></i></span></label>
+      <label class="src-opt"><input type="radio" name="src"><div class="t"><div>CABLE-A Output (VB-Audio Cable A)</div><div class="faint mono">Idle</div></div><span class="lvl"><i style="width:0"></i></span></label>
+      <label class="src-opt"><input type="radio" name="src"><div class="t"><div>Microphone (Realtek Audio)</div><div class="faint mono">Idle</div></div><span class="lvl"><i style="width:15%"></i></span></label>
+    </div>
+    <div class="field"><label>Quality</label>
+      <div class="quality">
+        <label><input type="radio" name="q"><b>96</b>kbps · Speech</label>
+        <label><input type="radio" name="q"><b>128</b>kbps · Standard</label>
+        <label><input type="radio" name="q" checked><b>192</b>kbps · Music</label>
+      </div>
+      <span class="hint">192 kbps is recommended for music; 96 is plenty for spoken translation.</span>
+    </div>
+    <label style="display:flex;align-items:center;gap:10px;font-size:14px"><button type="button" class="switch" role="switch" aria-checked="false" onclick="this.ariaChecked=this.ariaChecked!=='true'"></button>Start automatically when LANStreamer launches</label>
+  </form>
+  <div class="drawer-f"><button class="btn btn-ghost" onclick="closeDrawer()">Cancel</button><button class="btn btn-secondary" form="newForm" type="button" onclick="LS.toast('Saved as stopped');closeDrawer()">Save</button><button class="btn btn-primary" form="newForm" type="submit">${''}Go live</button></div>
+</aside>
+
+<script>
+logo.innerHTML = I.logo; logo2.innerHTML = I.logo;
+document.querySelector('.drawer-f .btn-primary').innerHTML = I.play + 'Go live';
+let streams = [
+  {id:'S5',name:'Main Room English',state:'live',src:'CABLE Output (VB-Audio Virtual Cable)',kbps:192,t:494,listeners:18},
+  {id:'S6',name:'Side Room French',state:'stopped',src:'CABLE-A Output (VB-Audio Cable A)',kbps:192},
+  {id:'S3',name:'AutoStart Test',state:'err',src:'OBS Virtual Camera (Audio)',kbps:192,err:'Input device not found',hint:'OBS is closed or the virtual audio device was removed.'},
+  {id:'S1',name:'Electron Test 1',state:'stopped',src:'CABLE-A Output (VB-Audio Cable A)',kbps:128},
+  {id:'S2',name:'Redesign Demo Channel',state:'stopped',src:'CABLE Output (VB-Audio Virtual Cable)',kbps:192},
+  {id:'S4',name:'Dashboard Demo',state:'stopped',src:'CABLE Output (VB-Audio Virtual Cable)',kbps:192},
+  {id:'S7',name:'Verify One',state:'stopped',src:'CABLE Output (VB-Audio Virtual Cable)',kbps:192},
+];
+let filter='all';
+const fmt=s=>s<60?s+'s':s<3600?Math.floor(s/60)+'m '+String(s%60).padStart(2,'0')+'s':Math.floor(s/3600)+'h '+Math.floor(s%3600/60)+'m';
+const mic='<svg class="svg" viewBox="0 0 24 24" style="width:13px;height:13px;flex-shrink:0"><rect x="9" y="2" width="6" height="12" rx="3"/><path d="M5 10a7 7 0 0 0 14 0M12 17v5"/></svg>';
+function rowHTML(s){
+  const live=s.state==='live', err=s.state==='err';
+  const status = live?'<span class="chip chip-live"><span class="eq"><i></i><i></i><i></i><i></i></span>LIVE</span>':err?'<span class="chip chip-err">ERROR</span>':'<span class="chip chip-off">Stopped</span>';
+  const extra = live?`<span class="dotsep"></span><span class="mono" data-t="${s.id}">${fmt(s.t)}</span><span class="dotsep"></span><span>${s.listeners} listening</span>`:'';
+  return `<div class="row ${live?'is-live':''} ${err?'is-err':''}" data-id="${s.id}">
+    <span class="grip hide-sm" title="Drag to reorder"><svg class="svg" viewBox="0 0 24 24" style="width:14px"><circle cx="9" cy="6" r="1"/><circle cx="15" cy="6" r="1"/><circle cx="9" cy="12" r="1"/><circle cx="15" cy="12" r="1"/><circle cx="9" cy="18" r="1"/><circle cx="15" cy="18" r="1"/></svg></span>
+    <span class="sid">${s.id}</span>
+    <div style="min-width:0"><div class="name">${s.name}</div>
+      <div class="meta">${status}<span class="src" title="${s.src}">${mic}${s.src}</span><span class="dotsep"></span><span class="mono">${s.kbps}k</span>${extra}</div></div>
+    <div class="actions">
+      <button class="playbtn ${live?'stop':''}" aria-label="${live?'Stop':'Go live'} ${s.name}" onclick="toggle('${s.id}')">${live?I.stop:I.play}</button>
+      <div class="menu"><button class="iconbtn" aria-label="More actions" onclick="this.parentNode.classList.toggle('open')"><svg class="svg" viewBox="0 0 24 24"><circle cx="12" cy="5" r="1"/><circle cx="12" cy="12" r="1"/><circle cx="12" cy="19" r="1"/></svg></button>
+        <div class="menu-pop card"><button onclick="LS.toast('Link to ${s.name} copied','copy')">Copy listener link</button><button>Edit</button><button>Duplicate</button><button class="del" onclick="del('${s.id}')">Delete</button></div></div>
+    </div>
+    ${err?`<div class="errbox"><b>${s.err}</b><span class="grow">${s.hint}</span><button class="btn btn-secondary btn-sm" onclick="openDrawer()">Change input</button><button class="btn btn-ghost btn-sm" onclick="LS.toast('Retrying ${s.id}…','${s.id}')">Retry</button></div>`:''}
+  </div>`;
+}
+function render(){
+  const vis=streams.filter(s=>filter==='all'||s.state===filter);
+  const live=vis.filter(s=>s.state==='live'), rest=vis.filter(s=>s.state!=='live');
+  let h='';
+  if(live.length) h+=`<div class="group-label eyebrow">On air · ${live.length}</div>`+live.map(rowHTML).join('');
+  if(rest.length) h+=`<div class="group-label eyebrow">${filter==='err'?'Issues':'Ready'} · ${rest.length}</div>`+rest.map(rowHTML).join('');
+  if(!vis.length) h=`<p class="muted" style="padding:32px 18px;text-align:center">Nothing here.</p>`;
+  list.innerHTML=h;
+  liveCount.textContent=streams.filter(s=>s.state==='live').length;
+}
+function toggle(id){const s=streams.find(x=>x.id===id);
+  if(s.state==='live'){s.state='stopped';LS.toast(`${s.name} stopped`,id)}
+  else if(s.state==='err'){LS.toast(`Can't start ${s.id}: input missing`,id);return}
+  else{s.state='live';s.t=0;s.listeners=0;LS.toast(`${s.name} is live`,id)}
+  render()}
+function stopAll(){if(!confirm('Stop every live stream?'))return;streams.forEach(s=>{if(s.state==='live')s.state='stopped'});render();LS.toast('All streams stopped')}
+function del(id){streams=streams.filter(s=>s.id!==id);render();LS.toast(`${id} deleted · Undo`)}
+function openDrawer(){document.body.classList.add('drawer-open');setTimeout(()=>sn.focus(),250)}
+function closeDrawer(){document.body.classList.remove('drawer-open')}
+function goLive(){const n='S'+(streams.length+1);streams.unshift({id:n,name:sn.value,state:'live',src:'CABLE Output (VB-Audio Virtual Cable)',kbps:192,t:0,listeners:0});sn.value='';closeDrawer();render();LS.toast(`${n} is live`)}
+document.querySelectorAll('.seg button').forEach(b=>b.onclick=()=>{document.querySelectorAll('.seg button').forEach(x=>x.ariaPressed='false');b.ariaPressed='true';filter=b.dataset.f;render()});
+document.addEventListener('click',e=>{if(!e.target.closest('.menu'))document.querySelectorAll('.menu.open').forEach(m=>m.classList.remove('open'))});
+document.addEventListener('keydown',e=>{if(e.key==='Escape')closeDrawer()});
+setInterval(()=>{streams.forEach(s=>{if(s.state==='live'){s.t++;const el=document.querySelector(`[data-t="${s.id}"]`);if(el)el.textContent=fmt(s.t)}})},1000);
+// decorative QR
+(()=>{let r='';const f=(x,y)=>(x<7&&y<7)||(x>13&&y<7)||(x<7&&y>13);for(let y=0;y<21;y++)for(let x=0;x<21;x++){let on;if(f(x,y)){const lx=x>13?x-14:x,ly=y>13?y-14:y;on=lx==0||lx==6||ly==0||ly==6||(lx>1&&lx<5&&ly>1&&ly<5)}else on=((x*7+y*13+x*y)%5)<2;if(on)r+=`<rect x="${x}" y="${y}" width="1" height="1" fill="currentColor"/>`}qr.innerHTML=r})();
+render();
+</script>
+</body>
+</html>
diff --git a/LANStreamer-redesign/listener.html b/LANStreamer-redesign/listener.html
new file mode 100644
index 0000000..532a115
--- /dev/null
+++ b/LANStreamer-redesign/listener.html
@@ -0,0 +1,130 @@
+<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1">
+<title>Sounds For A Beautiful Day — Live</title>
+<link rel="preconnect" href="https://fonts.googleapis.com"><link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
+<link href="https://fonts.googleapis.com/css2?family=JetBrains+Mono:wght@400;500&family=Space+Grotesk:wght@400;500;600;700&display=swap" rel="stylesheet">
+<link rel="stylesheet" href="styles.css">
+<script src="app.js"></script>
+<style>
+.onair{display:inline-flex;align-items:center;gap:8px;height:30px;padding:0 12px;border-radius:999px;border:1px solid color-mix(in oklab,var(--onair) 45%,transparent);color:var(--onair);font-weight:700;font-size:12px;letter-spacing:.1em}
+.onair .pip{width:8px;height:8px;border-radius:50%;background:var(--onair);animation:pulse 1.6s infinite}
+.hero{padding:48px 0 28px}
+.hero h1{font-size:clamp(30px,5vw,52px);line-height:1.02;letter-spacing:-.035em;font-weight:700;max-width:16ch}
+.hero p{margin-top:12px;font-size:17px;color:var(--text-2)}
+.layout{display:grid;grid-template-columns:minmax(0,1fr) 320px;gap:20px;align-items:start}
+/* Player */
+.player{padding:24px;display:grid;grid-template-columns:auto minmax(0,1fr);gap:24px;align-items:center;overflow:hidden;position:relative}
+.bigplay{width:84px;height:84px;border-radius:50%;background:var(--accent);color:var(--on-accent);display:grid;place-items:center;box-shadow:0 10px 30px -8px color-mix(in oklab,var(--accent) 60%,transparent);transition:transform .15s}
+.bigplay:hover{transform:scale(1.04)}
+.bigplay svg{width:30px;height:30px}
+.now .eyebrow{display:flex;gap:8px;align-items:center}
+.now h2{font-size:26px;letter-spacing:-.02em;margin:6px 0 10px;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}
+.wave{display:flex;align-items:center;gap:3px;height:36px;margin-top:14px}
+.wave i{flex:1;max-width:5px;border-radius:3px;background:var(--line-strong);height:20%;transition:height .12s}
+.playing .wave i{background:var(--accent)}
+.vol{display:flex;align-items:center;gap:10px;margin-top:16px;color:var(--text-2)}
+.vol input{flex:1;max-width:200px;accent-color:var(--accent)}
+/* Channels */
+.chs{margin-top:20px}
+.chs h3{margin-bottom:10px}
+.ch{display:flex;align-items:center;gap:14px;padding:12px 14px;border-radius:12px;border:1px solid var(--line);background:var(--surface-1);margin-bottom:8px;cursor:pointer;width:100%;text-align:left}
+.ch:hover{border-color:var(--line-strong)}
+.ch[aria-current="true"]{border-color:var(--accent);background:var(--accent-soft)}
+.ch .lang{width:40px;height:40px;border-radius:10px;background:var(--surface-2);display:grid;place-items:center;font-family:var(--mono);font-size:13px;font-weight:500}
+.ch[aria-current="true"] .lang{background:var(--accent);color:var(--on-accent)}
+.ch .t{flex:1;min-width:0}.ch .t b{display:block;font-weight:600}
+.ch.off{opacity:.55;cursor:default}
+/* Side */
+.art{aspect-ratio:4/3;border-radius:var(--radius);overflow:hidden;position:relative;background:var(--surface-2)}
+.art svg{width:100%;height:100%;display:block}
+.side{display:flex;flex-direction:column;gap:16px}
+details.card summary{list-style:none;cursor:pointer;display:flex;align-items:center;padding:16px 18px;font-weight:600}
+details.card summary::after{content:"";margin-left:auto;width:8px;height:8px;border-right:1.8px solid var(--text-3);border-bottom:1.8px solid var(--text-3);transform:rotate(45deg);transition:.2s}
+details[open].card summary::after{transform:rotate(-135deg)}
+details .card-b{padding-top:0;font-size:14px;color:var(--text-2)}
+.help{font-size:13px;color:var(--text-3);margin-top:14px;display:flex;gap:8px}
+/* Mini player on mobile */
+.mini{display:none}
+@media (max-width:900px){.layout{grid-template-columns:1fr}.art{aspect-ratio:16/7}}
+@media (max-width:560px){
+  .hero{padding:28px 0 18px}
+  .player{grid-template-columns:1fr;text-align:center;justify-items:center;padding:28px 20px}
+  .now h2{font-size:22px}.now .eyebrow,.vol,.wave{justify-content:center}
+  .mini{display:flex;position:fixed;left:12px;right:12px;bottom:12px;z-index:30;align-items:center;gap:12px;padding:10px 10px 10px 14px;border-radius:16px}
+  body.scrolled.playing .mini{display:flex}
+  body:not(.scrolled) .mini{display:none}
+  .mini .bigplay{width:44px;height:44px;box-shadow:none}.mini .bigplay svg{width:18px;height:18px}
+}
+</style>
+</head>
+<body>
+<header class="topbar"><div class="wrap">
+  <div class="brand"><span class="brand-mark" id="logo"></span><span><b>LAN</b>Streamer</span></div>
+  <div class="spacer"></div>
+  <span class="onair"><span class="pip"></span>ON AIR</span>
+  <button class="iconbtn" aria-label="Toggle theme" onclick="LS.toggleTheme()"><svg class="svg" viewBox="0 0 24 24"><path d="M12 3a6 6 0 0 0 9 9 9 9 0 1 1-9-9z"/></svg></button>
+</div></header>
+
+<main class="wrap">
+  <section class="hero">
+    <span class="eyebrow">Live now · on this network</span>
+    <h1 style="margin-top:10px">Sounds For A Beautiful Day</h1>
+    <p>Livestreaming you into a beautiful day!</p>
+  </section>
+
+  <div class="layout">
+    <div>
+      <section class="card player" id="player" aria-label="Player">
+        <button class="bigplay" id="pb" aria-label="Play"></button>
+        <div class="now">
+          <div class="eyebrow"><span class="chip chip-live"><span class="pip"></span>LIVE</span><span id="dur" class="mono">13m 53s</span></div>
+          <h2 id="chName">Main Room English</h2>
+          <div class="muted" style="font-size:14px"><span class="mono">192 kbps</span> · 18 listening</div>
+          <div class="wave" id="wave" aria-hidden="true"></div>
+          <div class="vol"><svg class="svg" viewBox="0 0 24 24"><path d="M11 5 6 9H2v6h4l5 4zM15.5 8.5a5 5 0 0 1 0 7"/></svg><input type="range" min="0" max="100" value="80" aria-label="Volume"></div>
+        </div>
+      </section>
+
+      <section class="chs">
+        <h3 class="eyebrow">Choose a channel</h3>
+        <button class="ch" aria-current="true" data-n="Main Room English"><span class="lang">EN</span><span class="t"><b>Main Room English</b><span class="faint" style="font-size:13px">Live · 18 listening</span></span><span class="eq" style="color:var(--accent)"><i></i><i></i><i></i><i></i></span></button>
+        <button class="ch" data-n="Side Room French"><span class="lang">FR</span><span class="t"><b>Side Room French</b><span class="faint" style="font-size:13px">Live · 5 listening</span></span></button>
+        <div class="ch off"><span class="lang">ES</span><span class="t"><b>Spanish translation</b><span class="faint" style="font-size:13px">Starts soon</span></span></div>
+      </section>
+      <p class="help"><svg class="svg" viewBox="0 0 24 24" style="width:16px;flex-shrink:0"><circle cx="12" cy="12" r="10"/><path d="M12 16v-4M12 8h.01"/></svg>No sound? Make sure you're on the venue Wi-Fi and your phone isn't on silent. Keep this page open — audio continues with the screen locked.</p>
+    </div>
+
+    <aside class="side">
+      <div class="art card"><svg viewBox="0 0 400 300" preserveAspectRatio="xMidYMid slice">
+        <rect width="400" height="300" fill="var(--accent)"/>
+        <g fill="none" stroke="var(--on-accent)" stroke-opacity=".35" stroke-width="2">
+          <circle cx="320" cy="60" r="30"/><circle cx="320" cy="60" r="60"/><circle cx="320" cy="60" r="95"/><circle cx="320" cy="60" r="135"/><circle cx="320" cy="60" r="180"/>
+        </g>
+        <g fill="var(--on-accent)"><rect x="40" y="190" width="14" height="70" rx="7"/><rect x="66" y="150" width="14" height="110" rx="7"/><rect x="92" y="110" width="14" height="150" rx="7"/></g>
+      </svg></div>
+      <details class="card" open><summary>About this event</summary><div class="card-b">Start your day with a core selection of sounds to tune you into today.</div></details>
+      <details class="card"><summary>Contact &amp; feedback</summary><div class="card-b">Questions or audio issues? Email <a href="#">hello@example.com</a> or find the sound desk at the back of the hall.</div></details>
+    </aside>
+  </div>
+</main>
+
+<div class="mini card"><span class="eq" style="color:var(--accent)"><i></i><i></i><i></i><i></i></span><div style="flex:1;min-width:0"><b id="miniName" style="display:block;white-space:nowrap;overflow:hidden;text-overflow:ellipsis">Main Room English</b><span class="faint mono">LIVE</span></div><button class="bigplay" id="mb" aria-label="Pause"></button></div>
+
+<footer class="foot"><div class="wrap"><span>Powered by LANStreamer</span><a href="https://github.com/jerryagenyi/LANStreamer">GitHub</a><span class="spacer"></span><span>No ads · no tracking</span></div></footer>
+
+<script>
+logo.innerHTML=I.logo;
+let playing=false,t=833;
+const bars=40;wave.innerHTML='<i></i>'.repeat(bars);
+function set(){pb.innerHTML=mb.innerHTML=playing?I.pause:I.play;pb.ariaLabel=mb.ariaLabel=playing?'Pause':'Play';document.body.classList.toggle('playing',playing)}
+pb.onclick=mb.onclick=()=>{playing=!playing;set();LS.toast(playing?'Now playing · '+chName.textContent:'Paused','p')};
+document.querySelectorAll('.ch[data-n]').forEach(c=>c.onclick=()=>{document.querySelectorAll('.ch').forEach(x=>{x.ariaCurrent='false';x.querySelector('.eq')?.remove()});c.ariaCurrent='true';c.insertAdjacentHTML('beforeend','<span class="eq" style="color:var(--accent)"><i></i><i></i><i></i><i></i></span>');chName.textContent=miniName.textContent=c.dataset.n;if(!playing){playing=true;set()}LS.toast('Switched to '+c.dataset.n,'p')});
+setInterval(()=>{t++;dur.textContent=Math.floor(t/60)+'m '+(t%60)+'s';if(playing)wave.querySelectorAll('i').forEach(b=>b.style.height=(15+Math.random()*85)+'%')},1000/1);
+setInterval(()=>{if(playing)wave.querySelectorAll('i').forEach(b=>b.style.height=(15+Math.random()*85)+'%')},140);
+addEventListener('scroll',()=>document.body.classList.toggle('scrolled',scrollY>380));
+set();
+</script>
+</body>
+</html>
diff --git a/LANStreamer-redesign/styles.css b/LANStreamer-redesign/styles.css
new file mode 100644
index 0000000..eee1b00
--- /dev/null
+++ b/LANStreamer-redesign/styles.css
@@ -0,0 +1,110 @@
+/* LANStreamer redesign — shared tokens + components */
+:root{
+  --bg:#F4F5F7; --surface-1:#FFFFFF; --surface-2:#EEF0F3; --inset:#E6E9EE;
+  --text-1:#0E1420; --text-2:#5A6475; --text-3:#8A93A3;
+  --line:rgba(14,20,32,.09); --line-strong:rgba(14,20,32,.16);
+  --accent:#0A84D6; --accent-soft:rgba(10,132,214,.10); --on-accent:#fff;
+  --live:#14A44D; --live-soft:rgba(20,164,77,.12);
+  --warn:#D98A04; --warn-soft:rgba(217,138,4,.12);
+  --danger:#D93025; --danger-soft:rgba(217,48,37,.10);
+  --onair:#E5372B;
+  --radius:14px; --radius-sm:9px;
+  --shadow:0 1px 2px rgba(14,20,32,.04),0 8px 24px -12px rgba(14,20,32,.12);
+  --font:"Space Grotesk",system-ui,sans-serif; --mono:"JetBrains Mono",ui-monospace,monospace;
+}
+[data-theme="dark"]{
+  --bg:#07090D; --surface-1:#0E1117; --surface-2:#141821; --inset:#0A0D12;
+  --text-1:#EEF1F6; --text-2:#97A0B0; --text-3:#636C7C;
+  --line:rgba(255,255,255,.07); --line-strong:rgba(255,255,255,.13);
+  --accent:#1AA6F5; --accent-soft:rgba(26,166,245,.13); --on-accent:#03121C;
+  --live:#2BD46A; --live-soft:rgba(43,212,106,.12);
+  --warn:#F5A524; --warn-soft:rgba(245,165,36,.13);
+  --danger:#F2555A; --danger-soft:rgba(242,85,90,.12);
+  --onair:#FF4A3D;
+  --shadow:0 1px 0 rgba(255,255,255,.03) inset,0 10px 30px -14px rgba(0,0,0,.7);
+}
+*{box-sizing:border-box;margin:0;padding:0}
+html,body{background:var(--bg);color:var(--text-1);font-family:var(--font);font-size:15px;line-height:1.45;-webkit-font-smoothing:antialiased}
+button{font:inherit;color:inherit;background:none;border:0;cursor:pointer}
+a{color:var(--accent);text-decoration:none}
+.mono{font-family:var(--mono);font-size:12px;letter-spacing:.01em}
+.muted{color:var(--text-2)} .faint{color:var(--text-3)}
+.wrap{max-width:1180px;margin:0 auto;padding:0 24px}
+:focus-visible{outline:2px solid var(--accent);outline-offset:2px;border-radius:8px}
+
+/* Top bar */
+.topbar{position:sticky;top:0;z-index:20;background:color-mix(in oklab,var(--bg) 82%,transparent);backdrop-filter:blur(12px);border-bottom:1px solid var(--line)}
+.topbar .wrap{display:flex;align-items:center;gap:16px;height:64px}
+.brand{display:flex;align-items:center;gap:10px;font-weight:600;font-size:17px;letter-spacing:-.01em;min-width:0}
+.brand-mark{width:32px;height:32px;border-radius:9px;background:var(--accent);color:var(--on-accent);display:grid;place-items:center;flex-shrink:0}
+.brand b{font-weight:700}
+.brand .sep{color:var(--text-3);font-weight:400;margin:0 2px}
+.brand .event{color:var(--text-2);font-weight:500;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}
+.spacer{flex:1}
+.iconbtn{width:36px;height:36px;border-radius:10px;display:grid;place-items:center;color:var(--text-2);position:relative;flex-shrink:0}
+.iconbtn:hover{background:var(--surface-2);color:var(--text-1)}
+.iconbtn .dot{position:absolute;top:7px;right:8px;width:7px;height:7px;border-radius:50%;background:var(--danger);box-shadow:0 0 0 2px var(--bg)}
+.svg{width:18px;height:18px;stroke:currentColor;fill:none;stroke-width:1.8;stroke-linecap:round;stroke-linejoin:round}
+
+/* Buttons */
+.btn{display:inline-flex;align-items:center;gap:8px;height:36px;padding:0 14px;border-radius:10px;font-weight:600;font-size:14px;white-space:nowrap;border:1px solid transparent;transition:background .15s,border-color .15s}
+.btn-primary{background:var(--accent);color:var(--on-accent)}
+.btn-primary:hover{filter:brightness(1.08)}
+.btn-secondary{background:var(--surface-1);border-color:var(--line-strong)}
+.btn-secondary:hover{background:var(--surface-2)}
+.btn-ghost{color:var(--text-2)} .btn-ghost:hover{background:var(--surface-2);color:var(--text-1)}
+.btn-danger{color:var(--danger);border-color:color-mix(in oklab,var(--danger) 35%,transparent)}
+.btn-danger:hover{background:var(--danger-soft)}
+.btn:disabled{opacity:.45;cursor:not-allowed}
+.btn-sm{height:30px;padding:0 10px;font-size:13px;border-radius:8px}
+
+/* Chips */
+.chip{display:inline-flex;align-items:center;gap:6px;height:24px;padding:0 9px;border-radius:999px;font-size:12px;font-weight:600;letter-spacing:.02em;white-space:nowrap}
+.chip .pip{width:6px;height:6px;border-radius:50%;background:currentColor}
+.chip-live{background:var(--live-soft);color:var(--live)}
+.chip-live .pip{animation:pulse 1.6s infinite}
+.chip-off{background:var(--surface-2);color:var(--text-2)}
+.chip-err{background:var(--danger-soft);color:var(--danger)}
+.chip-warn{background:var(--warn-soft);color:var(--warn)}
+.chip-accent{background:var(--accent-soft);color:var(--accent)}
+@keyframes pulse{0%{box-shadow:0 0 0 0 color-mix(in oklab,currentColor 60%,transparent)}70%{box-shadow:0 0 0 6px transparent}100%{box-shadow:0 0 0 0 transparent}}
+
+/* Cards */
+.card{background:var(--surface-1);border:1px solid var(--line);border-radius:var(--radius);box-shadow:var(--shadow)}
+.card-h{display:flex;align-items:center;gap:10px;padding:16px 18px;border-bottom:1px solid var(--line)}
+.card-h h2,.card-h h3{font-size:15px;font-weight:600;letter-spacing:-.005em}
+.card-b{padding:16px 18px}
+.eyebrow{font-family:var(--mono);font-size:11px;letter-spacing:.08em;text-transform:uppercase;color:var(--text-3)}
+
+/* Equalizer */
+.eq{display:inline-flex;align-items:flex-end;gap:2px;height:12px}
+.eq i{width:3px;background:currentColor;border-radius:1px;animation:eq 1s ease-in-out infinite}
+.eq i:nth-child(1){height:40%;animation-delay:-.2s}.eq i:nth-child(2){height:100%;animation-delay:-.5s}.eq i:nth-child(3){height:65%;animation-delay:-.1s}.eq i:nth-child(4){height:85%;animation-delay:-.7s}
+@keyframes eq{50%{transform:scaleY(.35)}}
+.eq i{transform-origin:bottom}
+
+/* Toggle */
+.switch{width:38px;height:22px;border-radius:999px;background:var(--inset);border:1px solid var(--line-strong);position:relative;transition:.2s;flex-shrink:0}
+.switch::after{content:"";position:absolute;top:2px;left:2px;width:16px;height:16px;border-radius:50%;background:var(--surface-1);box-shadow:0 1px 2px rgba(0,0,0,.25);transition:.2s}
+.switch[aria-checked="true"]{background:var(--accent);border-color:var(--accent)}
+.switch[aria-checked="true"]::after{left:18px}
+
+/* Inputs */
+.field{display:flex;flex-direction:column;gap:6px}
+.field label{font-size:13px;font-weight:600}
+.field .hint{font-size:12px;color:var(--text-3)}
+.input,.select{height:40px;padding:0 12px;border-radius:10px;background:var(--inset);border:1px solid var(--line-strong);color:var(--text-1);font:inherit;font-size:14px;width:100%}
+.input:focus,.select:focus{outline:none;border-color:var(--accent);box-shadow:0 0 0 3px var(--accent-soft)}
+
+/* Toast */
+.toasts{position:fixed;right:20px;bottom:20px;display:flex;flex-direction:column;gap:8px;z-index:60}
+.toast{display:flex;align-items:center;gap:10px;min-width:260px;max-width:360px;padding:12px 14px;border-radius:12px;background:var(--text-1);color:var(--bg);font-size:14px;box-shadow:0 12px 30px -10px rgba(0,0,0,.4);animation:tin .25s ease}
+@keyframes tin{from{transform:translateY(8px);opacity:0}}
+
+/* Footer */
+.foot{border-top:1px solid var(--line);margin-top:48px}
+.foot .wrap{display:flex;flex-wrap:wrap;gap:12px 20px;align-items:center;padding:20px 24px;font-size:13px;color:var(--text-3)}
+.foot a{color:var(--text-2)} .foot a:hover{color:var(--accent)}
+
+@media (max-width:720px){.wrap{padding:0 16px}.hide-sm{display:none!important}}
+@media (prefers-reduced-motion:reduce){*{animation:none!important;transition:none!important}}
diff --git a/README.md b/README.md
index 0a49eb8..edf6bd6 100644
--- a/README.md
+++ b/README.md
@@ -1,162 +1,156 @@
 # LANStreamer
 
-A comprehensive solution that turns a standard PC into a multi-channel audio streaming server for local area networks (LAN). This project provides a **web-based application** that orchestrates **FFmpeg** and **Icecast** to deliver local, live, low-latency audio broadcasts for events like language interpretation, meetings, or conferences.
+**LAN audio streaming for language interpretation, meetings, and events.** LANStreamer is a desktop app that turns an ordinary PC into a multi-channel audio streaming server for your local network (LAN) — it orchestrates **FFmpeg** and **Icecast** behind the scenes, so a whole room can listen to live, low-latency audio on their phones.
 
-## 📋 Documentation
-
-| Documentation | Description |
-|--------------|-------------|
-| **Quick Start** | This README - get up and running quickly |
-| **[Startup sequence](docs/STARTUP-SEQUENCE.md)** | Step-by-step process order for `npm run dev`; troubleshoot each step |
-| **[Troubleshooting](docs/TROUBLESHOOTING.md)** | Common issues: network, firewall, playback problems |
-| **[System Architecture](docs/LANSTREAMER_SYSTEM_ARCHITECTURE.md)** | ⭐ Complete technical documentation - all services, flows, and architecture |
-| [Installation Guides](docs/guides/README.md) | FFmpeg, Icecast setup guides |
-| [Network Setup](docs/NETWORK-SETUP.md) | Static IP configuration for events |
-| [Developer Guide](CLAUDE.md) | Architecture and contribution guide |
+> **Status: v2.0.0 is released** — download the installer or standalone build from [GitHub Releases](https://github.com/jerryagenyi/LANStreamer/releases) (both bundle FFmpeg + Icecast; nothing to pre-install). Running from source still works: `npm run electron:dev`, or the server-only `Start LANStreamer Server.bat`. Release process and pre-ship checks: [docs/GO-LIVE-CHECKLIST.md](docs/GO-LIVE-CHECKLIST.md).
 
 ---
 
-## 🚀 Quick Start
+## 🎯 What is LANStreamer?
+
+Think "wireless interpretation booth": the interpreter's PC captures audio (microphone, audio interface, or virtual audio cable) and broadcasts it over Wi-Fi. Anyone on the same network opens a link in their browser and listens — nothing to install.
+
+### Interfaces
+
+| Interface | Purpose | Access |
+|-----------|---------|--------|
+| **Admin Dashboard** | Control center for managing streams | `http://localhost:3001/dashboard` on the operator PC (login: `admin` / `lanstreamer123` by default) |
+| **Listener Interface** | User-friendly page for browsing and playing streams | `http://YOUR-PC-IP:3001/streams` (public, no login) |
+
+### Use Cases
+
+- **Language Interpretation**: Multiple language channels for conferences
+- **Meeting Audio**: Professional audio distribution for events
+- **Training Sessions**: Audio streaming for educational content
+- **Local Broadcasting**: Any situation requiring reliable, low-latency audio distribution
 
-### For Non-Technical Users
+---
 
-**Step 1: Install Prerequisites**
-- **Node.js**: Download from https://nodejs.org/ (choose "LTS" version)
-- **FFmpeg & Icecast**: See [Installation Guides](docs/guides/README.md)
+## 🚀 Quick Start (Desktop App)
 
-**Step 2: Download & Extract**
-1. Go to https://github.com/jerryagenyi/LANStreamer
-2. Click **"Code"** → **"Download ZIP"**
-3. Extract the ZIP file and open the `LANStreamer` folder
+**Step 1: Launch LANStreamer**
+Start the LANStreamer app on the operator PC. It starts the streaming server and opens the dashboard window automatically — no terminal windows to babysit. Closing the window only hides it to the tray: streams keep running for your listeners. To stop for real, use the tray icon → **Stop All & Quit**.
 
-**Step 3: One-Click Start**
-1. Double-click `Start LANStreamer Server.bat`
-2. Wait for dependencies to install and the server to start
-3. Note the URLs shown in the terminal
+> No app package? You can run the same server from a source/ZIP copy: double-click `Start LANStreamer Server.bat` (requires [Node.js](https://nodejs.org/) LTS, plus FFmpeg & Icecast — see the [Installation Guides](docs/guides/README.md)). Building the desktop package from source is covered in the [Developer Guide](docs/README-DEVELOPERS.md).
 
-**Step 4: Access Your Streaming Server**
-- **Admin Dashboard**: `http://YOUR-IP:3001` (login required)
-- **Listener Page**: `http://YOUR-IP:3001/streams` (public access)
+**Step 2: Sign In**
+The dashboard asks you to sign in when it opens.
 
-**Default Admin Credentials** (change these immediately in `.env`):
 - **Username**: `admin`
 - **Password**: `lanstreamer123`
 
-### For Technical Users
+Change these before your event — see [Security Setup](#-security-setup--admin-login) below.
 
-```bash
-# Clone and install
-git clone https://github.com/jerryagenyi/LANStreamer.git
-cd LANStreamer
-npm install
+**Step 3: Create a Stream**
+Click **Add stream**, pick an audio source (your microphone, audio interface, or virtual audio cable), choose a quality, and click **Go live**. Repeat for more channels (e.g. one per language). You can also use **Start All / Stop All**.
 
-# Start the server
-npm start
-```
+**Step 4: Share with Listeners**
+The dashboard's **Share with listeners** card shows the listener link (e.g. `http://192.168.x.x:3001/streams`). Copy it, or tap the QR icon and let people scan it. Share it once — by chat, email, projector slide, or QR on paper.
 
-Then visit `http://localhost:3001` for the admin dashboard.
+---
 
-> **Need more detail?** See [System Architecture](docs/LANSTREAMER_SYSTEM_ARCHITECTURE.md) or [Installation Guides](docs/guides/README.md)
+## 🎧 For Listeners
+
+1. Join the **same Wi-Fi/network** as the operator PC
+2. Open the shared link (or scan the QR code) — no app, no account, no login
+3. Tap the stream they want and press play
+
+The listener page is forgiving: it **auto-resumes** a stream that drops and comes back on air (unless they paused it themselves), and on reload it remembers the stream they played last.
 
 ---
 
-## 🎯 What is LANStreamer?
+## 🔐 Security Setup — Admin Login
 
-LANStreamer creates a complete audio streaming ecosystem with two main interfaces and three core components:
+**Default admin credentials:**
 
-### Interfaces
+| Setting | Value |
+|---------|-------|
+| Username | `admin` |
+| Password | `lanstreamer123` |
 
-| Interface | Purpose | Access |
-|-----------|---------|--------|
-| **Admin Dashboard** | Control center for managing streams | `http://localhost:3001/` (auth required) |
-| **Listener Interface** | User-friendly page for browsing and playing streams | `http://localhost:3001/streams` (public) |
+Sign in at `http://localhost:3001/dashboard` (or the Electron app window) — the login appears automatically when the dashboard is opened. The **listener page (`/streams`) has no login**; phones on the LAN just open the shared link.
 
-### Core Components
+**First run:** while the default credentials are active, the dashboard shows a banner stating them and how to change them — it disappears permanently once you set your own.
 
-1. **Audio Input** - Any detected audio device (microphone, audio interface, virtual audio cable)
-2. **FFmpeg** - Reads audio channels, encodes, and pushes to streaming server
-3. **Icecast** - Open-source streaming server that broadcasts to network clients
+**Forgot your password?** On the operator PC, delete the admin login file and restart LANStreamer — the default login above returns, and you can set a new one from the dashboard (Admin account). Installed app: `%APPDATA%\LANStreamer\security.json` · running from source: `config\security.json`. (The login page carries this same hint — it only opens on the operator's PC, so the path is safe to show there.)
 
-### Use Cases
+Admin access has two layers:
 
-- **Language Interpretation**: Multiple language channels for conferences
-- **Meeting Audio**: Professional audio distribution for events
-- **Training Sessions**: Audio streaming for educational content
-- **Local Broadcasting**: Any situation requiring reliable, low-latency audio distribution
+1. **Login (username + password)** — every admin API call requires a session token from signing in.
+2. **Localhost lock** — the dashboard and admin APIs refuse connections from other machines, so even someone on your LAN with the password cannot reach admin.
 
----
+To change the defaults, use the in-app settings: dashboard → sidebar → **Admin account** card → enter the current password and a new username/password → **Update login**. It applies immediately (no restart), signs out every other session, and is stored in the app's data folder — this works in the packaged desktop app, where there is no `.env` to edit.
 
-## 📁 Project Structure
+Running from source, `.env` also works — copy `env.example` to `.env`, then edit:
 
+```env
+ADMIN_USERNAME=your-new-username
+ADMIN_PASSWORD=your-strong-password
+JWT_SECRET=your-jwt-secret
+SESSION_SECRET=your-session-secret
 ```
-LANStreamer/
-├── Start LANStreamer Server.bat    # Windows startup (double-click to start)
-├── Update LANStreamer.bat          # Update script
-├── src/                            # Backend (Node.js/Express)
-├── public/                         # Frontend (web interface)
-├── config/                         # Runtime config (auto-generated)
-├── docs/                           # Documentation
-└── manual-setup/                   # Hardware-specific guides
-```
 
-> **For developers:** See [CLAUDE.md](CLAUDE.md) for detailed architecture and code structure.
+Restart LANStreamer afterwards. (The in-app change takes precedence over `.env` values. Logins stay valid for 7 days, or set `JWT_EXPIRES_IN` to change that.)
+
+**Icecast (the streaming server LANStreamer drives) is hardened automatically when bundled.** The bundled Icecast binds to `127.0.0.1` only — listeners receive audio through LANStreamer's own play proxy on port 3001, so nothing about Icecast is ever exposed to your network — and its passwords are randomly generated per install (the app reads them itself; nobody ever types them). Someone who knows LANStreamer's defaults cannot reach or control it.
+
+Using your **own Icecast install** instead of the bundled one? That install is on your network as you configured it: if it still has Icecast's stock default passwords, the dashboard shows a security warning until you change them (edit `icecast.xml` in the install folder, e.g. `C:\Program Files (x86)\Icecast\icecast.xml` — the `<authentication>` block — then restart LANStreamer).
 
 ---
 
 ## ⚙️ System Requirements
 
-- **Operating System**: Windows 10/11 (macOS/Linux supported)
-- **Node.js**: Version 18 or higher ([Download](https://nodejs.org/))
-- **FFmpeg**: Audio/video processing toolkit ([Download](https://ffmpeg.org/))
-- **Icecast**: Streaming media server ([Download](https://icecast.org/))
-- **Audio Input**: Any audio device (built-in mic, USB mic, audio interface, etc.)
+**Minimum (operator PC)**
+- Windows 10/11 64-bit (macOS/Linux supported from source)
+- 4 GB RAM, dual-core CPU — encoding one stream uses ~2–5% of a modern CPU
+- Any audio input (built-in mic, USB, or virtual audio cable)
+- FFmpeg + Icecast — **bundled with the desktop installer** (in preparation). Running from source/CLI? Install them separately (see [guides](docs/guides/README.md))
+
+**Listeners:** any phone/PC with a browser and WiFi — nothing to install. ~20–25 listeners per consumer WiFi access point for stable audio; larger events should add access points.
+
+**Recommended:** 8 GB RAM for 4+ simultaneous streams, wired Ethernet from the operator PC to the router, 5 GHz WiFi for listeners (see [Latency guide](docs/LATENCY.md)).
 
 ---
 
-## 🔐 Security Setup
+## 🛠️ Troubleshooting
+
+**Common Issues:**
 
-**⚠️ CRITICAL: Change Default Credentials Immediately!**
+| Problem | Quick Fix |
+|---------|-----------|
+| Stream won't start | Make sure the audio device isn't already in use by another app; rescan devices in the dashboard |
+| Listeners can't connect | Check everyone is on the **same Wi-Fi/network** as the operator PC, and the link uses the PC's LAN IP (not `localhost`). Also see [Firewall Issues](docs/TROUBLESHOOTING.md#firewall-issues) |
+| "This site can't be reached" | Likely subnet mismatch — see [Network Troubleshooting](docs/TROUBLESHOOTING.md#network-connectivity-issues) |
+| "Port 3001 already in use" | A leftover server instance is running — close its terminal window (or quit the app from the tray), or end `node.exe` in Task Manager, then relaunch. The dashboard's stop buttons end streams and Icecast, but no button can stop the server itself |
+| "No audio devices detected" | Ensure device is connected and not in use by another app |
+| "Stream format not supported" | See [Stream Playback Issues](docs/TROUBLESHOOTING.md#stream-playback-issues) |
+| Link/QR stopped working after moving networks | The share card always shows the PC's **current** network address — re-share the link/QR after the network changes; old links point at the old address |
+| Audio reaches listeners ~1–1.5 s after the room | Normal — the low-latency player holds a small buffer that also absorbs Icecast's ½-second delivery rhythm; how it works and how to tune it: [docs/LATENCY.md](docs/LATENCY.md) |
 
-1. Copy `env.example` to `.env`
-2. Edit `.env` and change:
-   - `ADMIN_USERNAME=your-new-username`
-   - `ADMIN_PASSWORD=your-strong-password`
-   - `JWT_SECRET=your-jwt-secret`
-   - `SESSION_SECRET=your-session-secret`
-3. Restart LANStreamer
+> **📖 In-app guide:** LANStreamer ships with a built-in troubleshooting page at `http://localhost:3001/docs` — open it from any browser on the operator PC. For the full guide see [docs/TROUBLESHOOTING.md](docs/TROUBLESHOOTING.md) (subnet issues, firewall configuration, network diagnostics).
 
 ---
 
 ## 🔄 Updating
 
-**For ZIP Users:**
-```bash
-# Double-click this file in your installation folder
-Update LANStreamer.bat
-```
+**Packaged installs (once released):** download the new installer from [GitHub Releases](https://github.com/jerryagenyi/LANStreamer/releases) and run it — your stream configuration is kept.
 
-**For Git Users:**
-```bash
-git pull origin main
-npm install  # If dependencies changed
-```
+**ZIP/source installs:** double-click `Update LANStreamer.bat` in your installation folder.
 
 ---
 
-## 🛠️ Troubleshooting
+## 📊 Telemetry & Privacy
 
-**Common Issues:**
+LANStreamer is **free and open source — no one makes money from it, and no one should** (MIT license).
 
-| Problem | Quick Fix |
-|---------|-----------|
-| "npm not found" | Install Node.js from [nodejs.org](https://nodejs.org/) |
-| "Port 3001 already in use" | Close other apps using port 3001, or change `PORT` in `.env` |
-| "This site can't be reached" | Check [Network Troubleshooting](docs/TROUBLESHOOTING.md#network-connectivity-issues) - likely subnet mismatch |
-| "Connection refused" | Check [Firewall Setup](docs/TROUBLESHOOTING.md#firewall-issues) |
-| "No audio devices detected" | Ensure device is connected and not in use by another app |
-| "Stream format not supported" | See [Stream Playback Issues](docs/TROUBLESHOOTING.md#stream-playback-issues) |
+**Telemetry is ON by default (opt-out).** **What is collected:** anonymous events — app start, stream started/stopped/failed (with the error *category* only), app version, OS, and a random install ID. Every event also carries a fixed `app: lanstreamer` tag (the maintainer's PostHog project is shared across apps; the tag separates this app's events). **Never collected:** audio, stream names, contact details, file paths, IPs, or any personal data.
+
+**Listener failure reports:** when playback fails on a listener's device (audio error, buffer stall, the stream going off-air mid-listen, or the page failing to load), the listener page reports it to the *operator's own server*, which relays it to PostHog **only while the operator's telemetry is on** — carrying the stream label (e.g. "S1"), the media error code, and the browser platform. Listener devices never talk to PostHog directly and never hold any key; with telemetry off, the reports are dropped at the server.
 
-> **📖 Full Troubleshooting Guide:** See [docs/TROUBLESHOOTING.md](docs/TROUBLESHOOTING.md) for detailed solutions including subnet issues, firewall configuration, and network diagnostics.
+- **First run** shows a plain notice that statistics are on, what they contain, and a one-click **Turn it off**.
+- **Change it anytime**: dashboard → sidebar → **Admin account** → *Anonymous usage statistics* switch, or tray icon → **Telemetry → On/Off**.
+- Events go to the maintainer's PostHog over the internet, queued and flushed in the background — nothing is sent while telemetry is off, and a fully offline LAN works either way.
+- Maintainers packaging a distributed build: run `node scripts/prepare-telemetry-key.mjs` before building — it bundles the PostHog key into the app (gitignored) so other operators' installs report too (each with their own off switch).
 
 ---
 
@@ -164,24 +158,19 @@ npm install  # If dependencies changed
 
 | Document | Description |
 |----------|-------------|
-| **[Startup sequence](docs/STARTUP-SEQUENCE.md)** | Process order for `npm run dev`; troubleshoot step-by-step |
+| [In-app Guide](http://localhost:3001/docs) | Troubleshooting & guide page built into the app |
 | **[Troubleshooting Guide](docs/TROUBLESHOOTING.md)** | Common issues and solutions (subnet, firewall, playback) |
-| [Network Setup](docs/NETWORK-SETUP.md) | Static IP configuration for live events |
 | [Installation Guides](docs/guides/README.md) | FFmpeg and Icecast setup guides |
-| [Comprehensive Docs](docs/LANStreamer-Documentation.md) | Complete technical documentation |
-| [Developer Guide](CLAUDE.md) | Architecture and development workflow |
+| [Network Setup](docs/NETWORK-SETUP.md) | Static IP configuration for live events |
+| [Latency Guide](docs/LATENCY.md) | Getting the lowest latency for listeners |
 | [Manual Setup](manual-setup/README.md) | Hardware-specific configuration guides |
 | [Changelog](docs/CHANGELOG.md) | Version history and release notes |
 
 ---
 
-## 🤝 Contributing
-
-We welcome contributions! See [CLAUDE.md](CLAUDE.md) for the development workflow and architecture guide.
-
-**Branch workflow:** We never add to `main` directly. Pull from `main` when starting work; do work on a feature branch; merge into `dev` first; only then does change go to `main`. See [CLAUDE.md](CLAUDE.md) for the full flow.
+## 🧑‍💻 For Developers
 
-For bug reports, include your OS, Node.js version, and steps to reproduce.
+Building from source, running the test suite, architecture notes, and the contribution workflow (branch model, CI, UI rules, telemetry internals) all live in the **[Developer Guide](docs/README-DEVELOPERS.md)**. Preparing a release? Follow **[docs/GO-LIVE-CHECKLIST.md](docs/GO-LIVE-CHECKLIST.md)** (test matrix, packaging, versioning, GitHub release notes). See also [CLAUDE.md](CLAUDE.md) for enforced code patterns.
 
 ---
 
@@ -193,9 +182,9 @@ This project is licensed under the MIT License - see the [LICENSE](LICENSE) file
 
 ## 🆘 Support
 
-1. Check the [Troubleshooting Guide](docs/TROUBLESHOOTING.md) first
-2. Review the [Installation Guides](docs/guides/README.md)
-3. See [Comprehensive Documentation](docs/LANStreamer-Documentation.md) for advanced topics
+1. Check the in-app guide at `http://localhost:3001/docs`
+2. See the [Troubleshooting Guide](docs/TROUBLESHOOTING.md)
+3. Review the [Installation Guides](docs/guides/README.md)
 4. Create an issue on GitHub with detailed information
 
 ---
diff --git a/TODO.md b/TODO.md
index 13fa6e5..6f7c367 100644
--- a/TODO.md
+++ b/TODO.md
@@ -1,66 +1,49 @@
 # LANStreamer – TODO
 
-Context: [CLAUDE.md](CLAUDE.md), [docs/TROUBLESHOOTING.md](docs/TROUBLESHOOTING.md). Delete when done.
+Context: [CLAUDE.md](CLAUDE.md), [docs/APP-FLOW.md](docs/APP-FLOW.md), [docs/TROUBLESHOOTING.md](docs/TROUBLESHOOTING.md). Delete items when done.
 
 ---
 
 ## To do (priority order)
 
-- [ ] **Explore: Listener song requests** — Extend LANStreamer so anyone on the network (mobile or PC) can request to play a song from their device; admin grants the request and the song is listed on the listener page for others to hear. Support multiple user requests.
+- [x] **Latency management — SHIPPED (2026-10-30)** — MSE listener player (~0.5 s buffered-ahead vs ~2.3 s browser default), FFmpeg low-delay flags, proxy no-Nagle/flushHeaders, 16 KB icecast burst. Measured: `scripts/verify-latency.mjs`. Remaining nice-to-have: "latency tips" link on the dashboard pointing at the operator-side guidance (5 GHz, dedicated AP, QoS, wired operator); sub-second would need a WebSocket/WebRTC + Opus transport rewrite (deferred — see docs/LATENCY.md).
 
-- [ ] **Centralize notifications/alerts** — Control all notifications, alerts, and toasts from a single place so one change impacts everywhere (e.g. styling, z-index, behaviour). To be done on branch `fix/error-handling-refactor` or a new dedicated branch (e.g. `refactor/centralize-notifications`).
+- [ ] **Minimum PC specs + cross-OS test story** — README section: minimum requirements (x64, 4 GB RAM, Node 18+ for source runs, FFmpeg, Icecast; packaged app drops the Node requirement). Cross-OS testing: GitHub Actions windows/macos/ubuntu matrix runs the suite + `electron:smoke` online (Phase 4); locally, Playwright covers the web pages on all three OSes; no credible downloadable "test on every PC" tool exists beyond VMs + the CI matrix.
 
-- [ ] **Centralised theming (light/dark, themes)** — UI-UX v2 was implemented with many styles inline in `index.html` and `streams.html` (duplicated variables, hardcoded colours). Refactor to a single theme layer (e.g. shared CSS or design tokens) so themes and light/dark mode can be added without touching every component. Prefer one source of truth for colours, shadows, and glass tokens.
+- [ ] **UI redesign — dashboard deep pass** — Restyle remaining dashboard sections (Icecast panel, event/contact panels, header) to the broadcast language on tokens; a11y sweep (aria, focus rings, 44px targets).
 
-- [x] **Lock admin to localhost** — Admin UI only on localhost; listeners use LAN IP. Implemented: `requireLocalhostAdmin` middleware; listener page and APIs (config, status, play, contact-details) allowed from LAN; integration tests in `lock-admin-localhost.test.js`.
+- [ ] **Centralize notifications/alerts** — All toasts/modals from one module so styling + z-index + behaviour change in one place.
 
-- [x] **Verify 5+ streams** — Confirmed 6/6 live (VB-Cable A/B, mics). Root cause of "5th fails" was bad device choice, not Icecast limit.
+- [ ] **Internet broadcast tunnel (explore; only if feasible)** — Optional outbound-only tunnel so listeners outside the LAN can listen (e.g. self-hosted frp/ngrok-style relay on a VPS the operator controls). Must stay opt-in, off by default — LANStreamer's core is local, low-latency, private. Research latency + NAT constraints before committing.
 
-- [x] **Unique stream names** — No duplicate display names (create/update); case-insensitive, trimmed.
+- [ ] **Explore: Listener song requests** — Anyone on the network can request a song; admin grants; listed on listener page. (From PR #12.)
 
-- [x] **Start/Stop All button** — Start all stopped/error streams; Stop all running; API `POST /api/streams/start-all`; partial-failure toast with names + first error; 150ms delay between success/error toasts.
+- [ ] **Phase 2: cross-platform abstraction** — Device discovery per OS (dshow/avfoundation/pulse; StreamingService hardcodes dshow), config/logs in OS app-data dirs, retire .bat scripts.
 
-- [x] **Listener page uses LAN IP** — Copy URLs and listener page use `config.host` from getPreferredLANHost / icecast.xml. Docs: "Which IP is my LAN / WiFi?" in TROUBLESHOOTING.md.
+- [ ] **Phase 3: bundle binaries — NEARLY DONE (2026-10-30)** — vendor/ (gyan ESSENTIALS ffmpeg + Icecast kit, stock-parity per the §0.1 decision) + extraResources + data-dir runtime + first-run functional probe (BinaryProbeService) all live; `isIcecastRunning` now credential-verified (zombie-proof). Remaining: pin SHA256 checksums, official Icecast 2.5.0 kit download (2.4.4 EOL 2026-12-31; portable 2.5.0 already validated at ~/Tools/icecast-2.5.0), per-install admin values, GPL LICENSES files inside the installer, download-on-demand UI for probe failures.
 
-- [x] **Mobile** — Listener page, "Listen to Streams" header link, and Copy URL use correct LAN IP. HeaderComponent fetches config.host; TROUBLESHOOTING.md "Action Required: Mobile Listener Setup". _QA: Test with real device on same WiFi._
+- [ ] **Phase 4: test/CI** — Playwright `_electron` + listener-page web E2E + axe-core + GitHub Actions 3-OS matrix (use `npm run electron:smoke`); electron-updater replaces UpdateService/.bat at packaging. Add E2E regression: machine IP change must not break status polling (covered by localhost polls; test the contract).
 
-- [x] **Workflow/docs** — Branch workflow: feature → merge into dev locally → push dev → PR dev→main (remote only). Local branches: dev + features only; `main` deleted locally (remote-only). AGENTS.md removed; refs point to CLAUDE.md. PR #6 updated with lock-admin-localhost changes.
-
-- [x] **Notification types** — For duplicate stream name or duplicate source, use a simple modal ("stream already exists") without troubleshooting link; for real failures, existing error handling with diagnosis/link. Implemented in FFmpegStreamsManager: isDuplicateError(), showDuplicateModal(); used for start, restart, update, start-all.
-
-- [x] **Source validation & clear errors** — On stream failure, backend errorDiagnostics provides category (device, connection, auth, etc.), title, solutions; API returns shortMessage; admin dashboard shows error + troubleshooting link. Optional "Test source" button deferred.
-
-- [x] **Timing of Modals** — Alert modals should appear only after the action is performed, not before. All success modals now have 1-second delay after UI updates.
-
-- [x] **Listener: dismiss without reload** — New-stream notification dismisses overlay without full reload (don't stop playback). Hot reload only for the affected stream. Implemented: `dismissNewStreamNotification()` calls `loadStreams()` to refresh without page reload.
-
-- [x] **Error alert UX** — Structured error from API (shortMessage = diagnosis title); admin dashboard shows centred toast with message + link to troubleshooting guide; Start All partial failure lists failed names (up to 5 + "and N more") and first error. Duplicate errors use simple modal without link.
-
-- [x] **Stability** — Confirm 3+ streams stay stable (see TROUBLESHOOTING.md). _CONFIRMED working._
-
-- [x] **Device change mid-stream / Play after edit** — Play proxy now checks Icecast response status; non-200 returns 502 with clear message so listener page no longer shows "Authentication Failed". Listener page shows "Stream not running. Start it on the dashboard, then try Play again." No refresh or delete/recreate needed. _See TROUBLESHOOTING.md §1c._
-
-- [x] **Stream labels (optional)** — Streams show S1, S2, S3 from server order; label in `getStats()` and on listener page / dashboard.
-
-- [x] **Sortable streams (optional)** — Up/down buttons on dashboard; `POST /api/streams/reorder`; order persisted in `config/streams.json` (`_order`); listener page uses same order and S1/S2/S3 labels without refresh.
-
-- [x] **Contact: WhatsApp** — Country code enforced (digits 10–15, no leading zero); validation backend + ContactManager; `wa.me/<digits>` built on listener page; placeholder "e.g. +44 7123 456789 (country code required)". Not working
-
-- [x] **Update notification UX** — Bell icon in header; auto-check on load (HeaderComponent.checkForUpdates); when updateAvailable=true bell shows badge and "Update Available"; click opens modal with update info and link to release. Single button id header-update-bell-btn; manual check on click when no update yet.
-
-- [x] **Event Details & Your Contact components** — Not working as they should; details not saving for contact, and the event details collapsible doesn't open after saving details.
-
-- [x] **UI/UX polish (optional)** — [docs/UI-UX-RECOMMENDATIONS.md](docs/UI-UX-RECOMMENDATIONS.md).
+- [ ] **Phase 6: packaging** — Windows NSIS/portable first; unsigned DMG later for savvy Mac users. Telemetry disclosure + LICENSES in installer. Telemetry key ships via `electron:build:win` (auto-injected from POSTHOG_KEY; also reads ~/.secrets/posthog on dev machines).
 
 ---
 
-## Reference
+## Done (2026-10-28 revival)
 
-- Run `npm test` before releases; [STARTUP-SEQUENCE.md](docs/STARTUP-SEQUENCE.md) for troubleshooting.
-- **Future refactor:** ErrorFactory consistency, remove/trim FFmpegService.js, device mapping extraction, split large HTML/JS — see inline notes in codebase.
+- **Listener page redesigned** — broadcast rows + persistent mini-player (eq bars, both themes, a11y labels); theming foundation (tokens.css, dark/light toggle, pill buttons, logo variants).
+- **Stale-stream / can't-create-stream fixed** — starting a stream now auto-starts Icecast (was: wall-of-text "cannot connect" error). Troubleshooting doc updated.
+- **Doubled audio devices fixed** — FFmpeg 9 changed device-listing format (`[dshow @]`→`[in#0 @]`); parsers updated for both formats + PowerShell fallback output de-duplicated. (Note: `[^]]` regex classes mis-parse on this Node — always use `[^\]]`.)
+- **Add-stream modal decluttered** — Pro-Tip/Virtual-Audio notices moved behind an info icon popover (links to manual-setup docs); redundant "Maximum 50 characters" hints removed (counter exists).
+- **Delete-stream toast** — waits 900ms, verifies the stream is actually gone via status API, then shows `Stream "<name>" deleted`.
+- **Electron: external links** (e.g. "Listen to Streams") open in the system browser.
+- **Telemetry key for packaged builds** — `electron:build:win` injects POSTHOG_KEY from the build environment into the app (scripts/prepare-telemetry-key.mjs); resolution order env → config/telemetry.json → bundled.
+- Reconciled dev/main; merged error-handling branch (68/68 tests); branch cleanup (local = dev only).
+- Dead code removed (SystemService, WebSocketService, FFmpegService); offline UI (vendored Tailwind + fonts, CSP 'self').
+- Phase 1 Electron wrapper (tray, Stop All & Quit, tree-kill, --smoke); stale-hostname bug fixed (localhost polls + hostname auto-sync); log spam fixed; dismissible notices; SVG logo set; env.example; repo cleanup; docs index.
 
 ---
 
-## Earlier (historical)
+## Reference
 
-Notification timing, LANStreamer.bat updater, Claude hooks, custom-instructions, capacity NaN fix, config capacity fields, shortMessage + troubleshooting link.
+- Run `npm test` before releases; `npm run build:css` after changing Tailwind classes.
+- Versions (2026-10): FFmpeg 9.0.2 latest (app runs on 8.x, fine); Icecast 2.5.0 latest — **2.4.4 EOL 2026-12-31**.
diff --git a/analysis_output/README.md b/analysis_output/README.md
deleted file mode 100644
index 408af6a..0000000
--- a/analysis_output/README.md
+++ /dev/null
@@ -1,5 +0,0 @@
-# analysis_output
-
-Historical regression analysis for LANStreamer v1.2.0 → v1.2.2 → v1.2.3.
-
-- **REGRESSION_ANALYSIS_SUMMARY.md** — Root cause summary (port 8000 vs 8001), timeline, and findings. Raw diffs and commit lists were removed during cleanup; see this file for the analysis.
diff --git a/analysis_output/REGRESSION_ANALYSIS_SUMMARY.md b/analysis_output/REGRESSION_ANALYSIS_SUMMARY.md
deleted file mode 100644
index a652e00..0000000
--- a/analysis_output/REGRESSION_ANALYSIS_SUMMARY.md
+++ /dev/null
@@ -1,193 +0,0 @@
-# LANStreamer Regression Analysis: v1.2.0 → v1.2.2 → v1.2.3
-
-**Analysis Date:** 2026-01-26
-**Branch:** `analysis/regression-v1.2.0-to-v1.2.3`
-**Status:** ✅ ROOT CAUSE IDENTIFIED
-
----
-
-## Executive Summary
-
-**ROOT CAUSE FOUND:** The regression from v1.2.2 was caused by a **hardcoded port change** from `8000` to `8001` in the FFmpeg Icecast URL. This was subsequently fixed in v1.2.3 by reverting to port `8000`.
-
-### Timeline of Events
-
-| Version | Port | StreamingService.js Line 178 | Status |
-|---------|------|------------------------------|--------|
-| v1.2.0 | `8000` | `icecast://source:hackme@localhost:8000/` | ✅ Working |
-| v1.2.2 | `8001` | `icecast://source:hackme@localhost:8001/` | ❌ **BROKEN** - Connection refused |
-| v1.2.3 | `8000` | `icecast://source:hackme@localhost:8000/` | ✅ Fixed |
-
-### Commit Evidence
-
-**v1.2.2 Release Commit:** `d3ddd9b`
-- "Release v1.2.2: Critical fixes for port conflicts and streaming stability"
-
-**v1.2.3 Port Revert Commit:** `0dc9916`
-- "fix: Revert to Icecast default port 8000, improve connection error message"
-
----
-
-## Detailed Analysis
-
-### 1. Critical Files Changed
-
-#### StreamingService.js (Primary Regression Source)
-
-**v1.2.0 → v1.2.2 Changes (490 lines):**
-- **Line 178:** Port changed from `8000` to `8001` (BROKEN)
-- Added Icecast status checking before stream start
-- Added stderr capture for error diagnostics
-- Added immediate crash detection
-- Added Windows crash exit code handling (0xA7F00008)
-- Added enhanced error messages with dependency chains
-
-**v1.2.2 → v1.2.3 Changes (46 lines):**
-- **Line 178:** Port reverted from `8001` to `8000` (FIXED)
-- Added AudioDeviceService cache lookup for device names
-- Added VB-Audio Virtual Cable variants
-- Enhanced connection error messages with port mismatch detection
-
-### 2. errorDiagnostics.js Finding
-
-**CRITICAL DISCOVERY:** `errorDiagnostics.js` did NOT exist in v1.2.0, v1.2.2, or v1.2.3.
-
-- Added **after** v1.2.3 in commit `3732460`
-- Therefore, it **cannot be the cause** of the v1.2.0 → v1.2.3 regression
-- This file was added as part of post-v1.2.3 troubleshooting improvements
-
-### 3. Dependency Analysis
-
-**package.json comparison:**
-- v1.2.0: `"version": "1.2.0"`
-- v1.2.2: `"version": "1.2.2"`
-- v1.2.3: `"version": "1.2.3"`
-
-**No dependency changes detected.** All runtime dependencies remained identical across versions.
-
-### 4. Other File Changes
-
-**IcecastService.js:** Only 3 lines changed (minor adjustments)
-
-**FFmpegStreamsManager.js:** Minor UI improvements and timeout adjustments
-
----
-
-## Root Cause Analysis
-
-### The Bug
-
-```javascript
-// v1.2.2 - BROKEN
-const icecastUrl = `icecast://source:hackme@localhost:8001/${streamId}`;
-
-// v1.2.0 and v1.2.3 - WORKING
-const icecastUrl = `icecast://source:hackme@localhost:8000/${streamId}`;
-```
-
-### Why This Caused Failure
-
-1. **Icecast Default Port:** Icecast server runs on port **8000** by default
-2. **icecast.xml Configuration:** The `<port>` setting in icecast.xml defaults to 8000
-3. **Connection Refused:** FFmpeg trying to connect to port 8001 when Icecast listens on 8000
-4. **Error Output:** "connection refused" or "error number -138"
-
-### Impact
-
-- Streams could not connect to Icecast server
-- All stream start attempts failed immediately
-- Error messages were confusing (showed "connection refused" without clear port mismatch indication)
-
----
-
-## Version Status Assessment
-
-Based on the analysis, here's the actual status of each version:
-
-| Version | Functional Status | Notes |
-|---------|------------------|-------|
-| v1.2.0 | ✅ Working | Port 8000, stable baseline |
-| v1.2.2 | ❌ Broken | Port 8001 - connection failures |
-| v1.2.3 | ✅ Working | Port 8000 - port issue fixed |
-
-**Conclusion:** v1.2.3 is **NOT** "less functional" than v1.2.2. v1.2.3 actually **fixed** the port regression introduced in v1.2.2.
-
-If the user is experiencing issues with v1.2.3, those issues are:
-1. Unrelated to the port regression (which was fixed)
-2. Possibly related to other configuration issues
-3. May be due to local environment differences
-
----
-
-## Recommendations
-
-### For Current v1.2.3 Issues
-
-If users are experiencing problems with v1.2.3:
-
-1. **Verify Icecast Port:**
-   ```bash
-   # Check icecast.xml configuration
-   grep -E "<port>|<listen-socket>" config/icecast.xml
-   ```
-
-2. **Verify .env Configuration:**
-   ```bash
-   # Check if ICECAST_PORT is set correctly
-   grep ICECAST_PORT .env
-   ```
-
-3. **Test Icecast Directly:**
-   ```bash
-   # Test if Icecast is responding
-   curl http://localhost:8000
-   ```
-
-### Code Improvements Needed
-
-1. **Remove Hardcoded Port:**
-   - Current code hardcodes `localhost:8000`
-   - Should read from `icecast.xml` or `.env` dynamically
-
-2. **Add Port Configuration Validation:**
-   - Warn if Icecast port doesn't match FFmpeg URL port
-   - Provide clear error messages on port mismatch
-
-3. **Enhanced Error Message (v1.2.3 already improved this):**
-   ```javascript
-   🔧 COMMON CAUSES:
-   1. Icecast not running - Start it from the dashboard
-   2. Port mismatch - LANStreamer uses port 8000 by default
-      • Check <port> in your icecast.xml matches 8000
-      • Or set ICECAST_PORT=xxxx in your .env file
-   ```
-
----
-
-## Files Generated
-
-All analysis outputs saved in `analysis_output/`:
-
-- `CHANGES_1.2.0_to_1.2.2_STAT.txt` - File changes statistics
-- `CHANGES_1.2.2_to_1.2.3_STAT.txt` - File changes statistics
-- `diff_StreamingService_*.patch` - StreamingService.js diffs
-- `diff_errorDiag_*.patch` - errorDiagnostics.js comparisons (empty - didn't exist)
-- `commits_*.txt` - Commit history between versions
-- `all_commits.csv` - All commits with timestamps
-- `package_*.json` - Package.json from each version
-- `error_patterns_comparison.txt` - Error pattern analysis
-- `pattern_order_comparison.txt` - Pattern order verification
-
----
-
-## Next Steps
-
-1. ✅ Root cause identified (port mismatch)
-2. ✅ v1.2.3 already fixed the issue
-3. Consider adding dynamic port configuration
-4. Add port mismatch validation and warnings
-5. Test v1.2.3 with proper Icecast configuration
-
----
-
-**Analysis Complete:** The regression was caused by a port change in v1.2.2 (8000→8001) and was fixed in v1.2.3 (8001→8000).
diff --git a/docs/APP-FLOW.md b/docs/APP-FLOW.md
new file mode 100644
index 0000000..29787d0
--- /dev/null
+++ b/docs/APP-FLOW.md
@@ -0,0 +1,157 @@
+# LANStreamer App Flow
+
+Purpose: single map of every page, user flow, and component — the source of truth for the UI redesign and for generating design prompts (Lovable/Nanobanana/Mobbin references). Last updated: 2026-10-28.
+
+---
+
+## 1. Pages
+
+| Page | URL | Audience | Auth | File |
+|------|-----|----------|------|------|
+| Admin Login | `/login` | Operator | credentials → JWT | `public/login.html` |
+| Admin Dashboard | `/dashboard` (also `/`) | Operator | localhost-only (`requireLocalhostAdmin`) | `public/index.html` |
+| Listener Page | `/streams` | Anyone on LAN | none | `public/streams.html` |
+
+The **Electron desktop app** (packaged) opens `/dashboard` in its own window on the operator's machine; listeners always use their phone/PC browser on the LAN. Same pages either way.
+
+---
+
+## 2. Primary flows
+
+### 2.1 Operator: first run
+
+```mermaid
+flowchart TD
+    A[App installed / first launch] --> B{Telemetry consent prompt}
+    B -->|Allow| C[Telemetry ON]
+    B -->|Decline| D[Telemetry OFF]
+    C --> E[Environment check]
+    D --> E
+    E --> F{FFmpeg found?}
+    F -- no --> F1[Error card: install link + diagnosis]
+    F -- yes --> G{Icecast found?}
+    G -- no --> G1[Setup panel: search / custom path]
+    G -- yes --> H[Dashboard ready state]
+    H --> I[Security warning if default creds]
+```
+
+### 2.2 Operator: start a stream
+
+```mermaid
+flowchart TD
+    A[Dashboard] --> B[Click Start New Stream]
+    B --> C[Add Stream modal]
+    C --> D[Pick audio device / file]
+    D --> E{Optional: Test Source<br/>(Show test tools toggle)}
+    E --> F[Set name, quality, bitrate]
+    F --> G[Click Go Live]
+    G --> H{Capacity check<br/>Icecast running?}
+    H -- no --> X1[Error: start Icecast first<br/>+ quick fix]
+    H -- full --> X2[Error: source limit reached<br/>+ capacity context]
+    H -- ok --> I[Device accessibility test]
+    I -- fail --> X3[Device error + diagnosis modal<br/>(solutions, stderr, guide link)]
+    I -- pass --> J[FFmpeg spawn → push to Icecast]
+    J --> K[Stream card: LIVE badge,<br/>uptime, listeners, stop/edit]
+    K --> L{Duplicate name/source?}
+    L -- yes --> X4[Simple duplicate modal]
+```
+
+### 2.3 Listener: tune in
+
+```mermaid
+flowchart TD
+    A[Phone browser on LAN] --> B[Open http://LAN-IP:3001/streams]
+    B --> C[Event title/subtitle<br/>+ event image or brand mark]
+    C --> D[Stream list S1..Sn<br/>with LIVE state]
+    D --> E[Press Play on a stream]
+    E --> F{Stream actually running?}
+    F -- no --> G[Inline msg: start it on dashboard]
+    F -- yes --> H[Audio plays via play proxy<br/>volume slider + mute persist]
+    H --> I[New stream appears? → dismissible<br/>notification, no reload]
+```
+
+### 2.4 Shutdown (Electron tray mode)
+
+```mermaid
+flowchart TD
+    A[Close window] --> B[Hide to tray<br/>streams keep serving]
+    B --> C{User action}
+    C -- Show Dashboard --> D[Window restored]
+    C -- Stop All & Quit --> E[stopAllStreams → Icecast stop<br/>→ tree-kill leftovers → app exit]
+```
+
+---
+
+## 3. Dashboard layout (current)
+
+```
++----------------------------------------------------------------------+
+| HEADER: logo | Icecast status pill | ffmpeg status | update bell    |
++----------------------------------------------------------------------+
+| SECURITY WARNING (dismissible) — if default creds                    |
++----------------------------------------------------------------------+
+| STREAMS CARD                                          | EVENT PANEL   |
+|  toolbar: [Show test tools][Refresh][Start/Stop All]  |  (image,      |
+|  stream rows: S1..Sn                                  |   title,      |
+|   [LIVE badge] name | uptime | listeners              |   about)      |
+|   [play/stop][edit][reorder ↑↓][delete]               +---------------+
+|   empty state: Quick Start guide (dismissible)        | CONTACT &     |
+|                                                        | FEEDBACK      |
+| ICECAST CARD: start/stop, mounts, capacity            | (collapsed)   |
++----------------------------------------------------------------------+
+| FOOTER: version | GitHub link                                        |
++----------------------------------------------------------------------+
+```
+
+## 4. Listener layout (current)
+
+```
++----------------------------------------------+
+| HEADER: logo | Listen to Streams link        |
++----------------------------------------------+
+| Event title + subtitle                       |
++----------------------+-----------------------+
+| STREAM CARDS         | EVENT IMAGE /         |
+|  S1 [LIVE] name      | brand mark default    |
+|  [▶ Play]            +-----------------------+
+|  per-card: volume,   | ABOUT (default text)  |
+|  mute                +-----------------------+
+|  S2 ...              | CONTACT & FEEDBACK    |
+|                      | (collapsed default)   |
++----------------------+-----------------------+
+| FOOTER: version | GitHub | license           |
++----------------------------------------------+
+```
+
+**Redesign note (Mobbin + Stemtracks direction):** listener page should get a sticky bottom mini-player (Sonos/Spotify pattern) so controls survive scrolling; one dominant Play per card; LIVE = color + text, never dot-only.
+
+---
+
+## 5. Component map
+
+| Component | File | Used by | Notes |
+|-----------|------|---------|-------|
+| FFmpegStreamsManager | `components/FFmpegStreamsManager.js` | Dashboard | stream CRUD, start/stop/reorder, modals, Test Source, Quick Start |
+| IcecastManager | `components/IcecastManager.js` | Dashboard | start/stop, mounts, capacity, install search |
+| EventManager | `components/EventManager.js` | Dashboard | event title/subtitle/about/image (persisted `config/`) |
+| ContactManager | `components/ContactManager.js` | Dashboard | WhatsApp/phone/email shown on listener page |
+| HeaderComponent | `components/HeaderComponent.js` | Both | logo, status pills, update bell |
+| FooterComponent | `components/FooterComponent.js` | Both | version, links |
+| UpdateNotification | `components/UpdateNotification.js` | Dashboard | GitHub release check |
+| LobbyMusicPlayer | `components/LobbyMusicPlayer.js` | Dashboard | file-playback preview |
+| FileBrowser | `components/FileBrowser.js` | Dashboard | pick input file |
+| ComponentManager | `components/ComponentManager.js` | Dashboard | lifecycle orchestration |
+| LSNotices | `assets/js/notice-dismiss.js` | Both | dismissible notices w/ Show stubs |
+| StreamListener (inline) | `streams.html` | Listener | play proxy, volume, new-stream notif |
+
+## 6. Backend services (context for redesigners)
+
+| Service | Role |
+|---------|------|
+| `StreamingService` | FFmpeg spawn/lifecycle, formats (MP3/AAC/OGG), persistence, capacity |
+| `IcecastService` | install detection, start/stop, stats (localhost polls), hostname auto-sync, security check |
+| `AudioDeviceService` | device discovery (dshow; wasapi fallback) |
+| `UpdateService` | GitHub release polling (to be replaced by electron-updater) |
+| `TelemetryService` | PostHog, opt-in, anonymous ID, queue-and-flush |
+
+API surface used by the UI: `/api/streams/*` (status, start, stop, start-all, stop-all, reorder, play/:id proxy), `/api/system/*` (config, icecast start/stop/status, audio-devices, security-check), `/api/settings/*`, `/api/contact-details`, `/api/auth/login`.
diff --git a/docs/CHANGELOG.md b/docs/CHANGELOG.md
index 017dccb..c63a2b6 100644
--- a/docs/CHANGELOG.md
+++ b/docs/CHANGELOG.md
@@ -5,15 +5,25 @@ All notable changes to LANStreamer will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [Unreleased]
-
-### Planned
-- Stream configuration and mount point management
-- FFmpeg integration for audio streaming
-- Listener web player interface
-- QR code generation for listener access
-- Real-time stream monitoring and statistics
-- Final packaging as standalone `.exe`
+## [2.0.0] — 2026-11-01 (first packaged release)
+
+Everything below ships in the Windows installer and standalone builds. For the release process, see [GO-LIVE-CHECKLIST.md](./GO-LIVE-CHECKLIST.md).
+
+### Added — the Electron desktop app
+- Full Electron shell: dashboard window, tray icon (hide-to-tray, Stop All & Quit), single-instance lock, first-run telemetry notice (ON by default, one-click off), graceful shutdown that stops streams + Icecast
+- **Bundled binaries:** the installer ships FFmpeg + the Icecast kit (extraResources), with runtime resolution preferring the bundle over system installs — a fresh machine needs NOTHING pre-installed. Bundled Icecast runs from a writable per-user config/log dir (no more Program Files EPERM), and all mutable state (streams, device config, contact details, uploads, telemetry consent) lives in `%APPDATA%/LANStreamer` on packaged installs
+- Admin authentication: login page, JWT session (7-day), localhost lock so admin APIs/dashboard refuse non-localhost connections; default-credentials banner with change instructions; logout
+- **PostHog telemetry (ON by default, opt-out — owner decision 2026-11-01):** server events (app start, stream started/stopped/failed with error category) and **listener failure reports** (playback error with media code + browser, buffer stalls, off-air grace/give-up, page-load failures) relayed through the operator's server; distributed installs get telemetry via a bundled build key (asar path fix); first run shows an informational notice with one-click Turn-off
+- Event banner system: operator-uploaded artwork with lightbox, bundled default banner when none set
+- In-app guide page (`/docs`), QR code sharing, share card that tracks the PC's current LAN address
+
+### Changed — 2026 redesign
+- Complete UI redesign (operator dashboard + listener page): token-based design system, status strip, grouped stream rows with pinned-right row actions, side drawer for stream creation, listener hero + channel picker with visible play affordances, sticky opaque headers, flat surfaces (no card shadows/hover/animations), full light/dark themes, fully offline (all fonts/assets vendored)
+- Process management hardened: Windows process-tree kills in the right order (no more orphaned FFmpeg holding audio devices), icecast self-healing on stream start/restart, stale LAN IP detection when the network changes
+- **Low-latency playback (2026-10-30):** listener audio delay cut from a reported 4–5 s to ~1 s class — MSE-based player keeps ~0.5 s buffered ahead (vs ~2.3 s browser default, measured) and snaps back to the live edge after WiFi jitter or pauses; FFmpeg capture runs with low-delay flags (`nobuffer`, `low_delay`, `probesize 32k`, `analyzeduration 0`, `flush_packets 1`); the play proxy disables Nagle and flushes headers; bundled Icecast uses a 16 KB join burst. Safari/iOS automatically use the classic direct-stream path
+
+### Known gaps
+- macOS/Linux support is source-only
 
 ---
 
diff --git a/docs/GO-LIVE-CHECKLIST.md b/docs/GO-LIVE-CHECKLIST.md
new file mode 100644
index 0000000..43c165a
--- /dev/null
+++ b/docs/GO-LIVE-CHECKLIST.md
@@ -0,0 +1,126 @@
+# 🚀 Go-Live Checklist — before bundling & shipping LANStreamer
+
+Working document for the first packaged release of the **Electron desktop app**. Version: **2.0.0** (bumped in package.json 2026-10-31 — Jerry's call: the redesign + desktop-app transformation is a MAJOR release; the old `1.2.4 → 1.3.0` minor target is superseded). Work through every section; tick items only with evidence (test run, screenshot, command output).
+
+> Run the automated suite first — it clears most regressions in minutes:
+> `npm test` → then `npm run electron:smoke` → then the verify scripts in [README-DEVELOPERS.md](./README-DEVELOPERS.md) against a fresh server.
+
+---
+
+## 0. Security must-fixes (external review 2026-10-29 — block shipping until done)
+
+1. ~~**Bind bundled Icecast to loopback + random per-install passwords.**~~ **SHIPPED (Jerry's final decision, 2026-10-30 — supersedes the earlier same-day "ship stock" call): public software shipping known-default Icecast credentials is hackable by anyone who knows the app.** The generated bundled config now binds `127.0.0.1` (listeners receive audio through the :3001 play proxy — never Icecast directly) and randomizes source/relay/admin passwords per install (`ensureVendoredIcecastConfig`; the app parses them itself, nobody types them). Unit-tested (`vendorPaths.test.js` hardening contract) + live-verified. OWN system Icecast installs keep their own config — the dashboard warns while stock credentials are active there.
+2. **Binary provenance:** pin SHA256 for the FFmpeg download (fail build on mismatch); replace "copy Icecast kit from maintainer's machine" with a pinned official-kit download + hash; switch to the gyan **essentials** build (clean GPL redistribution, ~48 MB). **Status:** FFmpeg essentials + pinned SHA256 SHIPPED (`src/utils/binaries.js`); Icecast kit still copied from the validated local 2.5.0 portable — pinned official-kit download remains open.
+3. **Icecast 2.4.4 is end-of-support 2026-12-31** (and has CVE history) — bundle 2.5.x. **SHIPPED:** vendor kit is 2.5.0.
+4. ~~**Packaged installs cannot use `.env`** — the "change admin credentials" path is impossible there.~~ **RESOLVED (2026-10-30, final policy): documented defaults + prompt to change + in-app change + documented recovery.** The *Admin account* card changes the login in-app (scrypt-hashed in the data dir, JWT secret rotates). Random per-install admin minting was tried and REVERTED the same day as overkill — the localhost lock already keeps the LAN out of the admin panel, and the operator must stay in full control. Forgot-password recovery: delete `security.json` (path shown on the localhost-only login page + README + /docs) → documented defaults return → change again in-app. E2E: `scripts/verify-admin-creds.mjs`.
+5. **GPL artifacts inside the installer:** ship FFmpeg/Icecast license texts + source-offer, not just release-note credit. **SHIPPED:** `vendor/licenses/` (GPL-2.0/3.0 texts + source-offer README) rides extraResources.
+6. Ship **SHA256SUMS** alongside release artifacts (cheap unsigned-installer mitigation).
+
+---
+
+## 1. Clean-slate functional pass (on the dev machine)
+
+Start from a pristine state — most "bugs" this project has hit were dirty-state artifacts (leftover servers, stale config, cached tabs).
+
+- [ ] Kill every LANStreamer instance first: `netstat -ano | findstr :3001 :3002 :8200` → nothing listening; `tasklist | findstr /i "ffmpeg icecast"` → nothing running
+- [ ] Fresh app launch (`npm run electron:dev`): dashboard window opens, boot screen resolves, version label shows
+- [ ] Login: wrong password rejected; `admin` / `lanstreamer123` accepted; logout works; token survives app restart (7-day session)
+- [ ] First-run banner shows while defaults are active; disappears after changing credentials via `.env`
+- [ ] Stream lifecycle: **Add stream** (Save, stays stopped) → **Go live** → status LIVE + uptime ticking → **Stop** → **Retry** → edit (change input) → duplicate → reorder (Move up/down) → delete. No button ever hangs (all mutating calls have timeouts)
+- [ ] Start All / Stop All with 2+ streams
+- [ ] Every stop/quit leaves **zero orphaned `ffmpeg.exe`** in Task Manager (this was the zombie-device bug — verify after every stop path, including edit-while-live and quit-while-live)
+- [ ] **Crash-path orphan test:** Task Manager → End task on LANStreamer mid-stream → relaunch → stale children are cleaned. *(Startup sweep SHIPPED: Electron main kills orphaned ffmpeg/icecast matched by vendored executable path — never by process name. This item now just verifies it works.)*
+- [x] **Sleep/hibernate mid-broadcast:** SHIPPED — `powerSaveBlocker` (prevent-app-suspension) engages while any stream is live and releases when none are; on resume, streams that were live before suspend are auto-restored after a 5s device-settle delay
+- [ ] **Non-ASCII paths:** test with a Windows username containing spaces + non-ASCII (e.g. `José Müller`) and a Unicode dshow device name — spawn quoting and icecast config paths are classic failure points
+- [ ] Error path: start a stream on a device already held by another app → friendly busy error with **Change input** / **Retry**, full diagnostic collapsed behind a link to /docs
+- [ ] Audio inputs card (under the streams card): collapsed by default, opens/closes, rescan works without toggling the card, IN USE / IDLE / MISSING statuses correct
+- [ ] Event details + feedback contact cards save and show on the listener page; banner upload → cover display → lightbox; remove image → bundled default banner appears
+- [ ] Icecast info card shows running status, listeners count, uptime
+
+## 2. Listener experience (real devices, not just devtools)
+
+- [ ] Open `http://<LAN-IP>:3001/streams` on **Android Chrome, iOS Safari, and a desktop browser**
+- [ ] **iOS specifics:** audio continues on lock screen? Silent-switch behavior? MediaSession/now-playing metadata (nice-to-have)
+- [ ] Channel rows show LIVE chips, uptime, bitrate; visible play circles; icon flips play ⇄ pause correctly on every tap (pause→play flip was a real bug — test the cycle)
+- [ ] Switching channels mid-play; big player reflects the change; mini-player on mobile while scrolled
+- [ ] Kill the stream on the dashboard while a listener is playing → listener sees "went off air — waiting…", grace countdown, then "off air, will resume"; restart the stream → auto-resumes without user action
+- [ ] Pause a listener → it never auto-resumes until they press play
+- [ ] QR code: scan with a phone camera → opens the listener page directly
+- [ ] Both themes (dark/light) on every listener surface — dark-on-dark / light-on-light contrast bugs are this project's most-reported class
+- [ ] 3+ simultaneous listeners for 15+ minutes: audio stays in sync, no memory creep in Task Manager (node + ffmpeg)
+
+## 3. Security pre-flight
+
+- [ ] Change the default admin credentials (`ADMIN_USERNAME` / `ADMIN_PASSWORD` / `JWT_SECRET` in `.env`) and confirm the banner retires
+- [ ] From a **different machine** on the LAN: `/streams` loads (public) but `/dashboard` and admin APIs are refused (localhost lock) — `curl http://<LAN-IP>:3001/dashboard` from another device must NOT render the dashboard
+- [ ] Listener page never displays credentials anywhere
+- [ ] `git status` clean of secrets; `electron/telemetry-key.json` and `.env` are gitignored (verify: `git check-ignore electron/telemetry-key.json .env`)
+- [ ] Rate-limited telemetry endpoint sane: `for i in {1..35}; do curl -s -o /dev/null -w "%{http_code} " -X POST http://localhost:3001/api/telemetry/client-event -H "Content-Type: application/json" -d "{\"event\":\"playback_stalled\"}"; done` → ends in 429
+
+## 4. Telemetry (PostHog — eu.posthog.com)
+
+- [ ] `node scripts/prepare-telemetry-key.mjs` reports "Injected for packaged build" (bundles the key from the credential store; file gitignored)
+- [ ] With telemetry ON (tray toggle): events visible in PostHog Live within ~30s — `lanstreamer_app_start`, `stream_started` / `stream_failed` when you exercise streams
+- [ ] Trigger a listener playback failure (or run `scripts/verify-client-telemetry.mjs`) → `lanstreamer_client_*` events arrive with `surface=listener`
+- [ ] With telemetry OFF (tray toggle): no events arrive at all; app behaves identically (telemetry must never affect function)
+- [ ] README "Telemetry & Privacy" matches what's actually collected (it does as of this writing — re-read after any telemetry change)
+
+## 5. Resilience & environment
+
+- [ ] Quit app mid-stream (tray → Stop All & Quit) → zero orphaned processes; relaunch → auto-start streams restore (if `autoStart` set)
+- [ ] Close the window (not quit) → app hides to tray, streams keep serving; listeners confirm audio continues
+- [ ] Change network (different subnet / hotspot): share card + QR update to the new LAN IP; old links fail gracefully
+- [ ] Port collision: start a second instance → it must not corrupt the first (single-instance lock) and the "port in use" guidance appears in /docs
+- [ ] Windows Firewall prompt on first run: accept for **Private networks**; listener on another device confirms reachability
+- [ ] **Public-profile gotcha:** café/conference/hotspot networks default to the Public profile → inbound 3001 silently blocked. Verify reachability on a hotspot; document "set network profile to Private" for operators
+- [ ] **AV/MOTW pass:** clean-VM test with Defender real-time protection ON — unsigned vendored exes spawning from `resources\` are false-positive territory; verify the downloaded-from-GitHub flow end-to-end (Mark-of-the-Web can block child exes from extracted archives)
+- [ ] Offline check: `node scripts/verify-offline.mjs` — app fully renders with all non-localhost requests blocked (fonts/assets vendored)
+- [ ] Reboot the operator PC with the app configured: relaunch and confirm streams/config persist (config/ survives)
+
+## 6. Packaging (NSIS installer + portable — bundles FFmpeg + Icecast)
+
+The installer carries everything: `electron:build:win` auto-runs `fetch-vendor-binaries.mjs` (fills gitignored `vendor/` with FFmpeg + the Icecast kit and a **clean stock** icecast.xml — never the local machine's passwords) then `prepare-telemetry-key.mjs`, then electron-builder packs `vendor/` as extraResources. At runtime the app prefers the bundled binaries (explicit `FFMPEG_PATH` / `ICECAST_EXE_PATH` env still wins) and keeps all mutable state in `%APPDATA%/LANStreamer` — nothing writes next to the exe.
+
+- [ ] `npm test` green immediately before building
+- [ ] `npm run electron:build:win` → installer + portable in `release/`; installer size sane (target ~100 MB once the bundle switches FULL → essentials ffmpeg and drops ffplay/ffprobe; ~230 MB with today's FULL build)
+- [x] **Binary strategy — SHIPPED (2026-10-30):** first-run functional probe (dshow devices / encoder chain / 2 s end-to-end against a throwaway loopback icecast; ~3.7 s measured, non-blocking) with the result pinned to `binary-probe.json` and re-run only on stale pins; resolution order env → vendored → probe-passed system → download prompt; `GET /api/system/binary-probe` for support. Essentials FFmpeg verified on the maintainer's real machine (all stages pass, real stream, listener playback). Remaining: the download-on-demand UI for the (rare) probe-failure tier.
+- [x] Electron locales trimmed to en-US (`electronLanguages`) — shipped 07f2d6e
+- [x] Default event banner recompressed (1.27 MB → 188 KB, 2400 px) — shipped 07f2d6e
+- [ ] **Install on a clean Windows machine (or VM) with NOTHING pre-installed** — no Node, no FFmpeg, no Icecast. This is the single most important check ("works on my PC" insurance). On that machine:
+  - [ ] App launches, dashboard opens, login works, version shows correctly (from package.json, not "unknown")
+  - [ ] First-run telemetry consent dialog appears (bundled key resolves) — test BOTH Allow and Decline paths
+  - [ ] Create a stream and go live **using only the bundled binaries**; a phone plays it (check Task Manager: ffmpeg.exe and icecast.exe run from the install's `resources\vendor\`)
+  - [ ] All config/uploads land in `%APPDATA%/LANStreamer` (delete + reinstall the app → streams and settings survive)
+- [ ] Confirm the build does NOT contain `.env`, the dev machine's `config/`, `public/uploads/`, or a real-credential icecast.xml (inspect the installer's resources)
+- [ ] SmartScreen will warn on an unsigned exe — decide: accept for now (document in release notes: "More info → Run anyway") or invest in code signing later
+- [ ] Portable build: runs from a folder without installing; config lands somewhere sensible and persists between runs (decide: true-portable via `PORTABLE_EXECUTABLE_DIR` vs `%APPDATA%`, and document)
+- [ ] **Upgrade path:** build two dummy versions, NSIS over-install test (old → new: settings survive, no duplicate entries)
+- [ ] **Uninstall story:** what uninstall leaves behind (`%APPDATA%/LANStreamer` stays — intentional? document)
+- [ ] **Source-install migration:** existing source/ZIP users have config in `./config/` — either migrate to `%APPDATA%` on first packaged run or document "not migrated, set streams up again"
+- [ ] **Build the release artifact the way CI would** (or add CI packaging) — don't ship from an environment CI never exercised
+- [ ] Release notes must credit the bundled GPL binaries (FFmpeg gyan.dev build, Icecast) with their licenses
+
+## 7. Release: version, tag, notes on GitHub
+
+- [ ] Bump `version` in **package.json** (already bumped to 2.0.0 — verify the installer filename says 2.0.0)
+- [ ] Move `[Unreleased]` in [CHANGELOG.md](./CHANGELOG.md) to `## [2.0.0] - <date>`; write the user-facing highlights (Electron app, admin login, redesign, listener page, telemetry opt-in, default event banner)
+- [ ] Update README if anything user-facing changed (credentials section, download link once releases exist)
+- [ ] Merge `dev` → `main` via PR (never push straight to main); CI green on the PR
+- [ ] Tag and push: `git tag v2.0.0 && git push origin v2.0.0`
+- [ ] Create the GitHub release with the installers attached and real release notes:
+  ```bash
+  gh release create v2.0.0 release/*.exe release/*.yml SHA256SUMS.txt \
+    --title "LANStreamer v2.0.0 — desktop app" \
+    --notes-file release-notes-v2.0.0.md
+  ```
+- [ ] Generate and attach **SHA256SUMS.txt** for all release artifacts (partial SmartScreen mitigation for an unsigned installer)
+- [ ] Release notes template (user-facing, non-technical): **What's new** (5–8 bullets) · **Installing** (nothing to pre-install — FFmpeg + Icecast come bundled; SmartScreen note) · **Upgrading from a source/ZIP install** · **Known issues** · **Telemetry disclosure** (opt-in, what's collected, how to decline; Decline must persist across app updates) · **Licenses** (bundled FFmpeg/Icecast are GPL — offer in notes, texts inside the installer)
+- [ ] Smoke the release as a stranger would: fresh VM, download the installer **from the GitHub release page**, install, run one stream end-to-end
+- [ ] Post-release: watch PostHog for `app_start` from install IDs that aren't yours; triage `stream_failed` / `lanstreamer_client_*` events as user reports come in
+
+## 8. Deferred (explicitly NOT blocking this release)
+
+- Code signing certificate (SmartScreen reputation builds over time; signing is a follow-up)
+- macOS/Linux packaging (source-only for now)
+- Auto-update via electron-updater (update checks point at GitHub releases today)
+- PWA for listeners (deliberately removed — DHCP IP changes break it; see docs)
diff --git a/docs/LATENCY.md b/docs/LATENCY.md
new file mode 100644
index 0000000..c3f828a
--- /dev/null
+++ b/docs/LATENCY.md
@@ -0,0 +1,57 @@
+# Latency in LANStreamer
+
+What affects the delay between the operator's audio and what listeners hear, and what can be done about it — split into what **we control** (app side) and what **the operator/event setup controls** (their side). Research date: 2026-10-28. References at the end.
+
+## Where latency comes from (total = sum of all stages)
+
+```mermaid
+flowchart LR
+    A[Audio device capture] --> B[FFmpeg encode buffer]
+    B --> C[Icecast server queue + burst/prebuffer]
+    C --> D[Network transfer LAN]
+    D --> E[Browser player buffer]
+    E --> F[Listener hears it]
+```
+
+Encoder buffer + server queue + burst/prebuffer + player buffer dominate; the LAN network itself is usually < 5 ms.
+
+## App side (what LANStreamer can do)
+
+**Status 2026-10-30: the low-latency round SHIPPED.** Measured on a live stream (Chromium, `scripts/verify-latency.mjs`): buffered-ahead in the player dropped from **~2.3 s (browser default) to ~0.5 s steady**, time-to-first-audio ~1.6 s after the tap. Architecture floor with MP3-over-HTTP is ~0.8–1.2 s end-to-end; going below that means changing transport (WebSocket/WebRTC + Opus), not tuning.
+
+| Lever | Status (2026-10-30) | Trade-off |
+|---|---|---|
+| **Listener player (the big lever)** | ✅ SHIPPED — MSE-based playback (`public/assets/js/lowlatency.js`): the page fetches the play-proxy stream itself and appends ~0.5 s chunks to a MediaSource buffer, snapping the playhead back to the live edge whenever drift exceeds ~0.65 s (rate-limited to 1/s). Safari/iOS (no MP3-in-MSE) and any MSE failure fall back to the plain `<audio src>` path automatically | Occasional tiny audible skip when snapping back to live after WiFi jitter — the cost of staying live instead of drifting seconds behind |
+| **FFmpeg capture flags** | ✅ SHIPPED — `-fflags nobuffer -flags low_delay -probesize 32k -analyzeduration 0` before the dshow input, `-flush_packets 1` on output (both input paths). Validated live against a real VB-Cable capture | Validated on this machine's devices; exotic capture devices should be re-tested (regression test: `tests/integration/ffmpeg-spawn.test.js`) |
+| **Express play proxy** | ✅ SHIPPED — `flushHeaders()`, `socket.setNoDelay(true)` (Nagle cost 40–200 ms per small MP3 frame), `Cache-Control: no-store` | — |
+| **Icecast `burst-on-connect` / `burst-size`** | ✅ SHIPPED (bundled template) — burst stays ON with a 16 KB burst (≈0.7 s at 128k) instead of the stock 64 KB (≈4 s pre-pushed on join) | 0 would shave a little more but listeners take 1–2 s longer to first hear audio |
+| **Icecast `queue-size`** | Stock 512 KB (it is a backlog CAP, not added latency — leave it) | — |
+| **Bitrate / codec** | MP3 128–192 kbps stays the balance; Opus would cut ~0.1–0.3 s but Icecast+browser support is spotty | Lower bitrate (64–96 kbps) for many-listener events |
+| **FFmpeg pacing (`-re`)** | Device capture is inherently real-time; `-re` only on the file-input path | — |
+
+**Remaining idea (bigger rewrite):** WebSocket/WebRTC + Opus transport for ~200–400 ms — see the UX audit P4/deferred list; only worth it if same-room interpretation demands sub-second.
+
+## Operator/event side (beyond our control — guide them)
+
+From research on wireless audio latency (see references):
+
+1. **Use 5 GHz WiFi** for listeners where available; 2.4 GHz is congested (microwaves, neighbouring networks).
+2. **Router QoS**: prioritize the server machine's traffic; or better —
+3. **Dedicated WiFi network / hotspot** for the event. A phone-hotspot or spare router purely for streaming beats a busy venue network.
+4. **Wired where possible**: the *operator* machine to the router via Ethernet removes the biggest variable. Listeners are inherently wireless.
+5. **Placement**: line of sight between listeners and the AP; elevate the AP; keep it away from microwaves/other transmitters; minimise distance.
+6. **Limit listener count per AP** (~20–25 phones per consumer AP for audio); add a second AP on a different channel for larger events.
+7. **Update firmware/drivers** on router and audio devices.
+8. **Measure, don't guess**: latency-testing apps + watching for stutter tells you whether the problem is network (stutter, drops) or config (constant offset).
+
+Constant ~1–3 s offset = buffering config (burst/prebuffer). Stutter/drops = WiFi capacity/interference. That distinction tells you which side to fix.
+
+## References
+
+- [Fixing streaming latency in wireless audio systems — TechTaps](https://techtaps.com/how-to-fix-streaming-latency-issues-in-wireless-audio-systems/)
+- [Icecast config reference (burst-on-connect, burst-size, queue-size)](https://github.com/AzuraCast/icecast-kh-ac/blob/main/doc/icecast2_config_file.html)
+- [Icecast Streaming Handbook](https://we.riseup.net/assets/29773/Icecast-Streaming-Handbook)
+- [LibreTime: Icecast tuning discussion](https://github.com/libretime/libretime/issues/540)
+- [Low-latency Icecast streaming thread (RTLSDR)](https://www.reddit.com/r/RTLSDR/comments/zwv0ut/low_latency_streaming)
+- [FFmpeg to Icecast usage — ffmpeg-user list](https://ffmpeg.org/pipermail/ffmpeg-user/2019-June/044578.html)
+- [Liquidsoap clock docs (source pacing)](https://www.liquidsoap.info/doc-dev/clocks)
diff --git a/docs/README-DEVELOPERS.md b/docs/README-DEVELOPERS.md
new file mode 100644
index 0000000..56d176d
--- /dev/null
+++ b/docs/README-DEVELOPERS.md
@@ -0,0 +1,225 @@
+# LANStreamer — Developer Guide
+
+Technical documentation for anyone working **on** LANStreamer (running from source, testing, contributing). If you just want to install and use the app, see the main [README](../README.md). Shipping a release? Follow **[GO-LIVE-CHECKLIST.md](./GO-LIVE-CHECKLIST.md)**.
+
+---
+
+## 🚀 Technical Quick Start
+
+**Prerequisites:** Node.js 18+, plus FFmpeg and Icecast available on your machine (see [Installation Guides](guides/README.md); paths can be overridden with `ICECAST_EXE_PATH` / `ICECAST_CONFIG_PATH` in `.env`).
+
+```bash
+# Clone and install
+git clone https://github.com/jerryagenyi/LANStreamer.git
+cd LANStreamer
+npm install
+
+# Configure (optional — sane defaults; needed to change admin credentials/secrets)
+cp env.example .env
+
+# Start the backend with live reload
+npm run dev
+
+# Or run the Electron desktop app on top of the backend
+npm run electron:dev
+```
+
+Then open `http://localhost:3001/dashboard` (login: `admin` / `lanstreamer123` by default — see the **Security Setup — Admin Login** section in the main [README](../README.md) for changing these).
+
+To update a source checkout later: `git pull` (work happens on `dev`, releases on `main` — see [Contributing](#-contributing)) followed by `npm install` if dependencies changed.
+
+### 📜 npm Scripts
+
+| Script | Purpose |
+|--------|---------|
+| `npm start` | Run the backend server (`src/server.js`) |
+| `npm run dev` | Backend with nodemon auto-restart |
+| `npm run electron:dev` | Launch the Electron desktop app (`electron/main.js`) |
+| `npm run electron:smoke` | Electron smoke test — boots the app, waits for load, prints `SMOKE_OK`, exits |
+| `npm run electron:build:win` | Build the Windows installer + portable package (`release/`, via electron-builder; runs `scripts/prepare-telemetry-key.mjs` first) |
+| `npm test` | Run the Jest test suite |
+| `npm run test:coverage` | Jest with coverage report |
+| `npm run build:css` | Rebuild the Tailwind bundle (`public/assets/vendor/tailwind.css`) — run after any class/token change |
+| `npm run vendor:fonts` | Self-host font files into `public/assets/vendor/fonts` |
+| `npm run setup` | First-time setup helper (`scripts/setup.js`) |
+| `npm run screenshots` | Generate the screenshot suite (`scripts/generate-screenshots.js`) |
+
+---
+
+## 📁 Project Structure
+
+```
+LANStreamer/
+├── electron/                        # Desktop app shell (main.js: window, tray, lifecycle)
+├── src/                             # Backend (Node.js/Express)
+│   ├── app.js                       # Express app + page routes (/dashboard, /streams, /docs, /login)
+│   ├── server.js                    # Standalone server entry (npm start)
+│   ├── routes/                      # API + system routes
+│   ├── services/                    # StreamingService, IcecastService, TelemetryService, ...
+│   └── utils/                       # errorDiagnostics and friends
+├── public/                          # Frontend (dashboard, listener page, docs page)
+│   ├── assets/css|js/               # Design tokens, shared UI CSS, shared JS (toasts, QR share, ...)
+│   ├── assets/vendor/               # Self-hosted Tailwind build + fonts (no runtime CDNs)
+│   └── components/                  # Frontend components (FFmpegStreamsManager, ...)
+├── tests/                           # Jest suite (unit/ integration/ scenarios/ + fixtures/)
+├── scripts/                         # Verification, diagnostics, build helpers
+├── config/                          # Runtime config, auto-generated (streams.json, icecast.xml, telemetry.json, ...)
+├── docs/                            # Documentation (this file lives here)
+├── manual-setup/                    # Hardware-specific setup guides
+├── Start LANStreamer Server.bat     # Windows one-click start from a source/ZIP copy
+└── Update LANStreamer.bat           # Windows update script for ZIP installs
+```
+
+---
+
+## 🏗️ Architecture Notes
+
+LANStreamer orchestrates three core components:
+
+1. **Audio Input** — any detected audio device (microphone, audio interface, virtual audio cable)
+2. **FFmpeg** — reads audio channels, encodes, and pushes to the streaming server
+3. **Icecast** — open-source streaming server that broadcasts to network clients
+
+Key modules:
+
+- `src/services/StreamingService.js` — core FFmpeg process management (spawn, port detection, exit-code handling)
+- `src/services/IcecastService.js` — Icecast integration (start/stop, config generation, LAN host detection)
+- `src/utils/errorDiagnostics.js` — error pattern matching → user-friendly messages (first-match-wins order is load-bearing)
+- `electron/main.js` — desktop shell: runs the Express server **in-process**, opens the dashboard window, hides to tray on window close (streams keep running for listeners), tree-kills FFmpeg/Icecast on quit, port fallback (3001 → 3002 …) if the port is busy, first-run telemetry consent dialog
+
+Deep dives: [APP-FLOW.md](APP-FLOW.md) (every page, user flow, and component) and [LATENCY.md](LATENCY.md) (how listener audio delay was cut from 4–5 s to ~1 s: the MSE low-latency player, Icecast's ½-second delivery tick, the FFmpeg/proxy tuning, and the measured numbers). [CLAUDE.md](../CLAUDE.md) holds the enforced patterns and UI rules you must follow when changing code.
+
+---
+
+## ⚙️ System Requirements (Development)
+
+- **Node.js 18+** (the packaged desktop app drops this requirement for end users)
+- **FFmpeg + Icecast** installed separately for now (bundling is planned); see [Installation Guides](guides/README.md)
+- **OS:** develop on Windows/macOS/Linux — the web UI and Electron app are cross-platform, though audio device naming (DirectShow on Windows) differs
+- **CI** (`.github/workflows/ci.yml`): runs on every push/PR to `main` and `dev`, on `ubuntu-latest` with Icecast installed — executes the design-token integrity check (`scripts/check-design-tokens.mjs`) and the full Jest suite (`npm test`). Branch protection requires green CI before merge.
+
+---
+
+## 🧪 Testing
+
+### Automated suite (Jest)
+
+```bash
+npm test                # run everything
+npm run test:coverage   # with coverage report
+```
+
+Jest runs with `--experimental-vm-modules` (the project is ESM — `"type": "module"`). Test layout:
+
+| Folder | Contents |
+|--------|----------|
+| `tests/unit/` | `StreamingService`, `IcecastService`, `errorDiagnostics` unit tests |
+| `tests/integration/` | Server startup, auth, admin-localhost lock, telemetry client relay, stream create/start/reorder/proxy, start-all, spawn errors |
+| `tests/scenarios/` | Error-scenario coverage |
+| `tests/fixtures/` | Shared fixtures (`tests/setup.js` is the global setup) |
+
+**Integration-test rule:** mock `StreamingService` (see `auth.test.js` / `telemetry-client.test.js`) — importing the real one spawns ffmpeg/icecast during module load and the worker hangs forever. To test the real auth gate, `delete process.env.AUTH_DISABLED` at the top of the file like those suites do.
+
+### Electron smoke test
+
+```bash
+npm run electron:smoke   # boots the real app, waits for dashboard load, prints SMOKE_OK, exits 0
+```
+
+### Verification & diagnostic scripts (`scripts/`)
+
+Puppeteer-driven checks against the live app (start the server first) — each was built to verify a specific fix round:
+
+- `verify-auth.mjs` — admin login gate (wrong/right credentials, token storage, authed calls, public listener surface)
+- `verify-conflict.mjs` — the canonical E2E: device-conflict busy error, edit-frees-device, blocked stream then starts; asserts ZERO orphaned ffmpeg afterwards
+- `verify-chplay.mjs`, `verify-banner.mjs` — listener channel-row play button; event-banner cover + lightbox
+- `verify-flat.mjs`, `verify-header.mjs` — flat cards (no shadow/hover/animation) and sticky-header layering (toasts/menus above the bar, opaque bg)
+- `verify-sticky-scroll.mjs` — BEHAVIORAL sticky check (computed-style checks pass even when sticky is dead): scrolls both pages, asserts header `top === 0` and no horizontal overflow
+- `verify-host.mjs`, `verify-offline.mjs` — LAN-IP detection overrides stale saved hosts; app renders with ALL non-localhost requests aborted (offline proof)
+- `verify-client-telemetry.mjs` — listener failure relay E2E: real browser error → POST /api/telemetry/client-event → PostHog queue (sends past flushAt so events land in Live). Run against a fresh server (`PORT=3010 node src/server.js` + `BASE_URL=http://localhost:3010`) when the user's Electron app owns 3001
+- `verify-latency.mjs` — the latency proof: MSE player buffered-ahead (~0.5 s steady) vs plain-src baseline (~2.3 s), time-to-first-audio, and the pause→resume snap-back-to-live cycle. **Invariant: listener playback goes through `setAudioSource()`** (`streams.html`) — MSE path via `LSLowLatency` (`assets/js/lowlatency.js`, currently v=3; buffer target 0.75s — do NOT go below ~0.6s, Icecast delivers in 500ms ticks) with plain-src fallback for Safari/iOS or MSE failure; never assign `audioPlayer.src = proxyUrl` directly, or the browser's default prebuffering (the "4–5 seconds" report) returns
+- `prepare-telemetry-key.mjs` — bundles the PostHog key (env or `~/.secrets/posthog`) into gitignored `electron/telemetry-key.json` so packaged/distributed installs report after their first-run consent prompt
+- `verify-lightselect.mjs`, `verify-rowalign.mjs` — light-mode dropdown contrast; stream-row action icons pinned in a fixed RIGHT column (stable right edge across rows and live→stopped flips; ⋯ popup opens leftward inside the card)
+- `verify-fixes.mjs`, `verify-p2p3.mjs`, `verify-p4.mjs`, `verify-round3.mjs` — earlier redesign/fix rounds
+- `diag-listener.mjs`, `diag-toggle.mjs`, `diag-processes.ps1` — console/network forensics on the listener page, collapse-toggle timing, and stray FFmpeg/Icecast process inspection
+- `check-design-tokens.mjs` — the CI-enforced UI integrity linter (see below)
+
+Also in `scripts/`: `setup.js` (first-run setup), `generate-screenshots.js` / `generate-screenshot-suite.mjs` (screenshot suite), `stitch-screenshot-pdf.py`, `vendor-fonts.mjs`, `prepare-telemetry-key.mjs` (build step for the Windows package).
+
+The manual pre-release test pass lives in [GO-LIVE-CHECKLIST.md](./GO-LIVE-CHECKLIST.md) (the old manual TEST-PLAN is archived).
+
+---
+
+## 🎨 UI Rules & Integrity Linter (CI-enforced)
+
+- **Design tokens are the single source of truth** (`public/assets/css/tokens.css`); Tailwind maps them to semantic classes. Never hardcode hex colors or dark-only grays in new UI code.
+- **Shared components live in `public/assets/css/ui.css`** — new variants need a shared definition there first.
+- **Toasts stack** via `LSToasts.show(...)`; never hand-roll `position:fixed` toasts. Never use `alert()`.
+- **No runtime CDN dependencies** — fonts/icons/styles are self-hosted (`npm run vendor:fonts`, `npm run build:css`). `verify-offline.mjs` enforces this.
+- **Sharing the listener page happens in ONE place** (header share card with open/copy/QR via `LSShare`) — never per-stream share buttons.
+- **Flat surfaces (2026-10-29, explicit owner rule):** cards get NO hover effects, NO shadows, NO animations; collapse chevrons snap. The ONLY shadowed surface is the sticky header (`0 2px 8px rgba(0,0,0,.15)`). Status indicators (LIVE pip, eq bars, boot dots) and button accents are controls and keep their motion.
+- **Z-index ladder (keep to it):** menu-pop/bell panel 120 · scrim 130 · drawer 140 · lightbox 150 · **toasts 200** · boot overlay 9999 — everything above the sticky header (100). Anything below 100 will be hidden behind the header.
+- **`position: sticky` dies silently** in TWO ways — and `getComputedStyle(el).position === 'sticky'` proves NEITHER: (1) any ancestor with `overflow: hidden/auto/scroll` becomes the containing block instead of the page; (2) the sticky element's parent is only as tall as the element itself (e.g. a flex item like `#header-container`) — zero slack, nothing to stick within. Fix (2) by making the parent sticky (`#header-container{position:sticky;top:0}` in ui.css). Always verify BEHAVIORALLY — scroll the page and assert the header's `getBoundingClientRect().top === 0` (`scripts/verify-sticky-scroll.mjs`).
+- **Buttons cannot nest.** A `<button>` inside a `<button>` gets ejected by the HTML parser (icons fly out of rows). Use `span[role=button]` + `stopPropagation` for controls inside a toggle (see the Audio-inputs rescan in `public/index.html`).
+- **Bust the asset cache on every change:** all local CSS/JS includes carry `?v=N` per page — bump it on every page whenever that asset changes, or open tabs serve stale code mixed with new markup (has caused multiple false bug reports).
+- `node scripts/check-design-tokens.mjs` fails CI on **new** violations; existing debt is grandfathered in `scripts/design-token-baseline.json` (update deliberately with `--update-baseline` and say why in the commit).
+- Component showcase (dev-only) at `/showcase.html` — new UI must match a pattern shown there.
+
+The full, current rules are in [CLAUDE.md](../CLAUDE.md) — read them before touching UI.
+
+---
+
+## 📊 Telemetry Implementation (PostHog)
+
+- `src/services/TelemetryService.js` — **opt-in only**; sends nothing unless (a) the user consented (first-run Electron prompt; toggle in the tray menu) **and** (b) `POSTHOG_KEY` is set in the environment (`POSTHOG_HOST` optional). No-op otherwise — keep it that way for any new events.
+- Events: `app_start`, `stream_started` (format), `stream_stopped`, `stream_failed` (error *category* only), `telemetry_enabled`/`telemetry_disabled`. Every event carries a fixed `app: lanstreamer` tag (the maintainer's PostHog project is shared across apps).
+- **Never** capture personal data, audio, stream names, or file paths. Distinct ID = anonymous install UUID stored in `config/telemetry.json`.
+- Skipped entirely under `NODE_ENV=test`. All calls are fire-and-forget with `catch` — telemetry must never break the app.
+- Consent prompt lives in `electron/main.js` (`maybeAskTelemetryConsent`); the build injects the key via `scripts/prepare-telemetry-key.mjs`.
+- User-facing wording lives in the **Telemetry & Privacy** section of the main [README](../README.md) — keep the two in sync when changing what is collected.
+
+---
+
+## 🤝 Contributing
+
+**Branch workflow (do not bypass):**
+
+- `main` is the stable release branch — **never commit to main directly**. It is PR-protected: `enforce-prs.yml` auto-reverts any main commit that wasn't merged via a PR with green CI.
+- `dev` is the integration branch — all changes land here before main.
+- Flow: `main` → create `feature/xyz` → work → merge feature into `dev` locally → `npm test` → push `dev` → merge `dev` → PR → `main` (release).
+
+**Pre-review gate for streaming features:** every PR that adds or changes streaming behavior (stream lifecycle, proxying, device capture, listener fanout, start-all, queueing) must answer the 7 hostile conditions in [pressure-checklist.md](pressure-checklist.md) in the PR description for the changed code path.
+
+**Before submitting:** run `npm test`, and `npm run build:css` if you touched any classes. For bug reports, include your OS, Node.js version, and steps to reproduce.
+
+---
+
+## 🛠️ Developer Troubleshooting & Gotchas
+
+- **Startup order:** Icecast must be running before streams are created (the app auto-starts it; keep the order if you refactor).
+- **Icecast source limit:** Icecast defaults to 2 concurrent streams — raise `<sources>` in the generated `config/icecast.xml` when testing many streams.
+- **Windows FFmpeg exit codes are unsigned** and need conversion to signed (e.g. `0xA7F00008`) — handled in `StreamingService.js`; don't remove.
+- **DirectShow device names:** Windows requires device name mapping when spawning FFmpeg.
+- **Logs:** `logs/combined.log` (winston, daily rotation) is the first place to look when a stream fails silently.
+- **Port detection:** Icecast port is auto-detected from config, default 8000.
+- **Zombie processes:** on Windows, killing the server does not kill FFmpeg/Icecast children — the Electron shell tree-kills them (`taskkill /T /F`); when testing from source, check Task Manager or run `scripts/diag-processes.ps1`.
+- **Kill order invariant:** `killProcessTree` must run `taskkill /PID <pid> /T /F` BEFORE any `.kill()` on the child — a lone SIGTERM only ends the `cmd.exe` wrapper (streams spawn with `shell:true`) and orphans FFmpeg holding the audio device exclusively. Every path that stops a stream (stop, restart-failure, update, delete) must go through `killProcessTree`, never a bare `.kill()`. `verify-conflict.mjs` asserts zero orphans after its run.
+- **Startup is owned by the Electron shell** (`electron/main.js`: port fallback, orphan sweep, ordered teardown). The old server-only boot sequence doc is archived.
+
+---
+
+## 📚 Developer Documentation
+
+| Document | Description |
+|----------|-------------|
+| [GO-LIVE-CHECKLIST.md](GO-LIVE-CHECKLIST.md) | Pre-release checklist — test matrix, packaging, security blockers, release process |
+| [APP-FLOW.md](APP-FLOW.md) | Every page, user flow (mermaid), wireframe, and component |
+| [pressure-checklist.md](pressure-checklist.md) | Pre-review gate for streaming PRs |
+| [TROUBLESHOOTING.md](TROUBLESHOOTING.md) | Deep troubleshooting (network, firewall, Icecast, playback) |
+| [CLAUDE.md](../CLAUDE.md) | Enforced patterns, UI rules, and contribution workflow |
+| [archive/](./archive/) | Superseded docs (pre-Electron architecture, shipped plans) — indexed, not current |
+| [docs index](README.md) | Full documentation index |
+
+---
+
+**LANStreamer** — developer documentation. For usage, installation, and the listener experience, see the main [README](../README.md).
diff --git a/docs/README.md b/docs/README.md
index b7e916f..1bee8b6 100644
--- a/docs/README.md
+++ b/docs/README.md
@@ -1,127 +1,40 @@
 # LANStreamer Documentation
 
-This directory contains comprehensive documentation for the LANStreamer project.
-
-## 📚 Documentation Index
-
-### Core Documentation
-
-| Document | Description | Audience |
-|----------|-------------|----------|
-| **[LANSTREAMER_SYSTEM_ARCHITECTURE.md](./LANSTREAMER_SYSTEM_ARCHITECTURE.md)** | ⭐ **Complete system architecture** - Detailed technical documentation covering all services, startup sequence, configuration, and troubleshooting | Developers, AI assistants, advanced users |
-| **[TROUBLESHOOTING.md](./TROUBLESHOOTING.md)** | Common issues and solutions - Practical troubleshooting guide for real-world problems | All users |
-| **[NETWORK-SETUP.md](./NETWORK-SETUP.md)** | Network configuration guide - Static IP setup for events and conferences | Event organisers, network admins |
-| **[CHANGELOG.md](./CHANGELOG.md)** | Version history - Release notes, updates, and compatibility information | All users |
-
-### Installation Guides
-
-| Guide | Description |
-|-------|-------------|
-| **[guides/README.md](./guides/README.md)** | Installation guides index |
-| **[guides/ffmpeg-installation.md](./guides/ffmpeg-installation.md)** | FFmpeg installation and setup |
-| **[guides/icecast-installation.md](./guides/icecast-installation.md)** | Icecast server installation |
-| **[guides/audio-pipeline-simple.md](./guides/audio-pipeline-simple.md)** | Simple audio pipeline setup |
-
-### Archived Documentation
-
-Old documentation files are preserved in the `archive/` folder for reference:
-- `archive/ARCHIVED_ICECAST_CONFIGURATION_AND_RUNTIME_ARCHITECTURE.md` - Previous Icecast-focused architecture doc (content merged into SYSTEM_ARCHITECTURE.md)
-
----
-
-## 🚀 Quick Start
-
-1. **Install dependencies:** `npm install`
-2. **Configure environment:** Copy `.env.example` to `.env` and modify as needed
-3. **Start development server:**
-   - **With live reload:** `npm run dev:live` → `http://localhost:3002` ⚡
-   - **Regular mode:** `npm run dev` → `http://localhost:3001`
-4. **Access dashboard:** Add `/dashboard` to either URL
-
-### 🔄 Development Mode
-
-For the best development experience, use `npm run dev:live`:
-- **Auto-refresh** on file changes (no more manual refresh!)
-- **BrowserSync** dashboard for development tools
-- **Multi-device testing** support
-- **Network access** for testing on other devices
-
----
-
-## 📖 Documentation Structure
-
+LANStreamer is an **Electron desktop app in active development** — most people will install the packaged app; it also runs straight from this repo for contributors and source users. Documentation below is split the same way. Current status: no installer released yet — see the status block in the [main README](../README.md).
+
+## 📦 Using the app
+
+| Document | Description |
+|----------|-------------|
+| **[../README.md](../README.md)** | Start here — quick start (desktop app or source), admin login, telemetry & privacy |
+| **[TROUBLESHOOTING.md](./TROUBLESHOOTING.md)** | Common issues — subnet, firewall, playback (plus the in-app guide at `/docs`) |
+| **[NETWORK-SETUP.md](./NETWORK-SETUP.md)** | Static-IP setup for events and conferences |
+| **[LATENCY.md](./LATENCY.md)** | Where audio delay comes from and how to cut it |
+| **[CHANGELOG.md](./CHANGELOG.md)** | Version history and release notes |
+| **[manual-setup/](../manual-setup/)** | Hardware-specific guides (Behringer DVS, XR18, and friends) |
+| **[guides/](./guides/)** | FFmpeg / Icecast installation — **packaged app: not needed (binaries are bundled)**; source/server-only installs: required |
+
+## 🛠️ Developing & running from source
+
+| Document | Description |
+|----------|-------------|
+| **[README-DEVELOPERS.md](./README-DEVELOPERS.md)** | ⭐ Start here — dev loop (`electron:dev`), tests, architecture notes, UI rules, telemetry internals |
+| **[GO-LIVE-CHECKLIST.md](./GO-LIVE-CHECKLIST.md)** | Pre-release checklist — test matrix, packaging, security blockers, GitHub release process |
+| **[APP-FLOW.md](./APP-FLOW.md)** | Every page, user flow (mermaid), and component — the UI map |
+| **[pressure-checklist.md](./pressure-checklist.md)** | PR review gate for streaming-behavior changes |
+| **[UX-AUDIT-2026-10.md](./UX-AUDIT-2026-10.md)** | Holistic UX assessment (IxDF framework) — scores, prioritized issues, redesign roadmap |
+| **[benchmark-report-v1.md](./benchmark-report-v1.md)** | Performance baseline (kept current until the latency round lands v2) |
+| **[../CLAUDE.md](../CLAUDE.md)** | Code conventions for AI-assisted contributors |
+
+```bash
+npm install                # dependencies
+npm run electron:dev       # the DESKTOP APP (what users run)
+npm run dev                # server-only (no Electron shell) → http://localhost:3001
+npm test                   # Jest suite
 ```
-docs/
-├── README.md                          # This file - documentation index
-├── LANSTREAMER_SYSTEM_ARCHITECTURE.md # ⭐ Core architecture documentation
-├── TROUBLESHOOTING.md                 # Practical troubleshooting guide
-├── NETWORK-SETUP.md                   # Network configuration guide
-├── CHANGELOG.md                       # Version history
-├── guides/                            # Installation guides
-│   ├── README.md                      # Guides index
-│   ├── ffmpeg-installation.md
-│   ├── icecast-installation.md
-│   └── audio-pipeline-simple.md
-└── archive/                           # Archived documentation
-    └── ARCHIVED_ICECAST_CONFIGURATION_AND_RUNTIME_ARCHITECTURE.md
-```
-
----
-
-## 🎯 Finding What You Need
-
-### For Users
-- **Getting started?** → See main [README.md](../README.md)
-- **Having problems?** → Start with [TROUBLESHOOTING.md](./TROUBLESHOOTING.md)
-- **Setting up network?** → See [NETWORK-SETUP.md](./NETWORK-SETUP.md)
-- **Installing components?** → See [guides/](./guides/)
-
-### For Developers
-- **Understanding the system?** → Read [LANSTREAMER_SYSTEM_ARCHITECTURE.md](./LANSTREAMER_SYSTEM_ARCHITECTURE.md)
-- **Contributing code?** → See [CLAUDE.md](../CLAUDE.md) for development workflow
-- **API reference?** → See architecture doc Section 5 (Stream Creation Flow)
-
-### For AI Assistants
-- **System architecture?** → [LANSTREAMER_SYSTEM_ARCHITECTURE.md](./LANSTREAMER_SYSTEM_ARCHITECTURE.md) contains complete technical details
-- **Error diagnostics?** → Architecture doc Section 6 (Error Handling & Diagnostics)
-- **Service interactions?** → Architecture doc Section 3 (Core Services)
-
----
-
-## 🔍 Quick Reference
-
-### Common Tasks
-
-| Task | Document | Section |
-|------|----------|---------|
-| Understand system architecture | SYSTEM_ARCHITECTURE.md | Section 1: System Overview |
-| Trace stream creation flow | SYSTEM_ARCHITECTURE.md | Section 5: Stream Creation Flow |
-| Debug connection issues | TROUBLESHOOTING.md | Icecast Connection Issues |
-| Configure static IP | NETWORK-SETUP.md | Full guide |
-| Install FFmpeg | guides/ffmpeg-installation.md | Full guide |
-| Install Icecast | guides/icecast-installation.md | Full guide |
-
----
-
-## 📝 Documentation Standards
-
-- **Architecture docs** include file names, line numbers, and function names for precision
-- **Troubleshooting guides** include step-by-step solutions with commands
-- **Installation guides** are platform-specific with screenshots where helpful
-- **All docs** are kept up-to-date with codebase changes
-
----
-
-## 🤝 Contributing to Documentation
 
-When updating documentation:
-1. Keep technical accuracy - verify file paths and line numbers
-2. Update cross-references if moving content
-3. Test all commands and examples
-4. Follow the existing structure and formatting
-5. Update this README if adding new documents
+Dashboard login: `admin` / `lanstreamer123` by default (README → Security Setup).
 
----
+## 🗄️ Archive
 
-**Last Updated:** 2026-01-27  
-**Documentation Version:** Aligned with codebase v1.2.3
+Superseded docs (pre-Electron architecture, shipped redesign plans, old test plans) live in **[archive/](./archive/)** with an index stating what replaced each one.
diff --git a/docs/TROUBLESHOOTING.md b/docs/TROUBLESHOOTING.md
index 5e94de3..88bc926 100644
--- a/docs/TROUBLESHOOTING.md
+++ b/docs/TROUBLESHOOTING.md
@@ -13,6 +13,29 @@ Common issues and solutions for LANStreamer.
 
 ---
 
+## Stale streams after tool upgrades or network changes
+
+**Symptom:** a stream that worked before won't start; the dashboard shows a red "Cannot connect to Icecast" error; creating a new stream also fails.
+
+**Cause:** Icecast isn't running (common after upgrading/moving the Icecast install, a reboot, or a network change). Streams need a live Icecast to push into.
+
+**Fix (automatic since 2026-10-28):** starting a stream now **auto-starts Icecast** if it is installed and not running — normally you never see this. If it still fails:
+
+1. Check the Icecast panel on the dashboard — does the path/version look right? After moving or upgrading Icecast, click **Search Installations** (or delete `config/device-config.json` and restart) so the app re-detects it.
+2. Networks that use DHCP change the machine's IP; LANStreamer polls Icecast over `localhost` (immune to IP changes) and auto-syncs the hostname in `icecast.xml`. No manual step needed.
+
+**Do you need to delete and recreate the stream?** No — streams persist their device + settings and start fine once Icecast is reachable. Only recreate if the audio device itself no longer exists.
+
+## Audio devices listed twice (or missing) after a FFmpeg upgrade
+
+**Symptom:** every device appears twice in the dropdown, or only odd "ps-*" devices appear.
+
+**Cause:** FFmpeg 9 changed its device-listing output format (`[dshow @ …]` became `[in#0 @ …]`), which older LANStreamer versions could not parse — they fell back to PowerShell discovery, which lists each device as both input and output.
+
+**Fix (automatic since 2026-10-28):** the parsers accept both formats and results are de-duplicated. Click **Refresh Devices** once after upgrading FFmpeg. If duplicates persist, restart the server.
+
+---
+
 ## Admin only on localhost
 
 Admin (login, dashboard, stream management) is **only available from this computer** (localhost).
@@ -499,7 +522,7 @@ When troubleshooting, check these in order:
 
 ## Still Having Issues?
 
-1. Check the [System Architecture Documentation](LANSTREAMER_SYSTEM_ARCHITECTURE.md) for detailed technical information
+1. Check the [developer guide](README-DEVELOPERS.md) for architecture notes and the diagnostic script inventory
 2. Review [Network Setup Guide](NETWORK-SETUP.md) for network configuration
 3. Check [Installation Guides](guides/README.md) for component setup
 4. Create an issue on GitHub with:
diff --git a/docs/UI-UX-RECOMMENDATIONS.md b/docs/UI-UX-RECOMMENDATIONS.md
deleted file mode 100644
index ef28ed6..0000000
--- a/docs/UI-UX-RECOMMENDATIONS.md
+++ /dev/null
@@ -1,189 +0,0 @@
-# UI/UX Recommendations for LANStreamer Dashboard
-
-Suggestions for modernising the admin dashboard (e.g. [localhost:3001](http://localhost:3001/)). Implement after stability items in [TODO.md](../TODO.md) are done.
-
----
-
-## Current state
-
-The dashboard has a solid dark theme. Action buttons in the Audio Streams section (Refresh Devices, Stop All, Start New Stream) could use clearer hierarchy and more consistent, modern styling.
-
----
-
-## 1. Action button modernisation
-
-**Issues:** Flat buttons, inconsistent visual weight, limited iconography; "Stop All" and future "Start All" don’t stand out enough.
-
-**Suggestions:**
-
-```css
-/* Primary actions – rounded, elevated */
-.primary-action-btn {
-  background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
-  border-radius: 12px;
-  padding: 12px 24px;
-  box-shadow: 0 4px 12px rgba(102, 126, 234, 0.4);
-  transition: all 0.3s ease;
-}
-
-.primary-action-btn:hover {
-  transform: translateY(-2px);
-  box-shadow: 0 6px 20px rgba(102, 126, 234, 0.6);
-}
-
-/* Success/Start */
-.success-action-btn {
-  background: linear-gradient(135deg, #11998e 0%, #38ef7d 100%);
-  border-radius: 12px;
-}
-
-/* Danger/Stop */
-.danger-action-btn {
-  background: linear-gradient(135deg, #eb3349 0%, #f45c43 100%);
-  border-radius: 12px;
-}
-
-/* Secondary */
-.secondary-action-btn {
-  background: rgba(255, 255, 255, 0.05);
-  border: 1px solid rgba(255, 255, 255, 0.1);
-  border-radius: 10px;
-  backdrop-filter: blur(10px);
-}
-```
-
----
-
-## 2. Icons
-
-- Consider **Lucide Icons** or **Heroicons** instead of Material Icons for consistency.
-- Use 20–24px for better visibility; add subtle hover animation.
-- **Start New Stream:** play circle or + in circle.
-- **Stop All:** stop/pause with warning colour.
-- **Start All:** stacked play or fast-forward.
-- **Refresh Devices:** rotating arrow with spin on click.
-- **Live:** pulsing dot instead of static.
-
----
-
-## 3. Button layout
-
-Group actions with clear hierarchy and spacing, e.g.:
-
-- Section: “Audio Streams” with “4/4 Live” badge (animated).
-- Row: [Refresh] [Start All] [Stop All], then [Start New Stream] as primary.
-
----
-
-## 4. Status badge (“4/4 Live”)
-
-- Larger, more prominent.
-- Pulsing animation for active streams.
-- Optional: gradient + glass effect.
-
-```css
-.live-badge {
-  background: rgba(56, 239, 125, 0.15);
-  border: 2px solid rgba(56, 239, 125, 0.5);
-  border-radius: 20px;
-  padding: 8px 16px;
-  backdrop-filter: blur(10px);
-  animation: pulse 2s ease-in-out infinite;
-}
-
-@keyframes pulse {
-  0%, 100% { opacity: 1; }
-  50% { opacity: 0.7; }
-}
-```
-
----
-
-## 5. Stream cards
-
-- Border-radius 12–16px.
-- Subtle hover elevation and separation between cards.
-- Optional glass-morphism.
-
----
-
-## 6. Page layout
-
-- **Header:** More padding; optional glass bar; logo with subtle emphasis.
-- **Security warning:** Clearer treatment, optional dismiss; amber/orange.
-- **Server status:** Animated “online” indicator; card style; colour-coded controls.
-
----
-
-## 7. Responsive button group (markup)
-
-```html
-<div class="action-button-group">
-  <button class="action-btn secondary">
-    <svg class="icon">...</svg>
-    <span>Refresh Devices</span>
-  </button>
-  <button class="action-btn success">
-    <svg class="icon">...</svg>
-    <span>Start All</span>
-  </button>
-  <button class="action-btn danger">
-    <svg class="icon">...</svg>
-    <span>Stop All</span>
-  </button>
-  <button class="action-btn primary highlight">
-    <svg class="icon">...</svg>
-    <span>Start New Stream</span>
-  </button>
-</div>
-```
-
----
-
-## 8. Animation and micro-interactions
-
-- Button hover: slight lift and glow.
-- Live indicators: pulse.
-- Uptime: smooth value updates.
-- Loading: skeleton or shimmer.
-- Success: short confirmation feedback.
-
----
-
-## 9. Colour palette (CSS variables)
-
-```css
-:root {
-  --primary-gradient: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
-  --success-gradient: linear-gradient(135deg, #11998e 0%, #38ef7d 100%);
-  --danger-gradient: linear-gradient(135deg, #eb3349 0%, #f45c43 100%);
-  --warning-gradient: linear-gradient(135deg, #f093fb 0%, #f5576c 100%);
-
-  --glass-bg: rgba(255, 255, 255, 0.05);
-  --glass-border: rgba(255, 255, 255, 0.1);
-
-  --shadow-soft: 0 2px 8px rgba(0, 0, 0, 0.1);
-  --shadow-medium: 0 4px 16px rgba(0, 0, 0, 0.2);
-  --shadow-large: 0 8px 32px rgba(0, 0, 0, 0.3);
-}
-```
-
----
-
-## 10. Accessibility
-
-- Buttons: min-height 44px for touch.
-- Clear focus outlines.
-- Sufficient contrast (WCAG).
-- ARIA labels for icon-only buttons.
-- Keyboard navigation.
-
----
-
-## Implementation priority
-
-1. **High:** Button styling and icons.
-2. **Medium:** Glass effects, animations.
-3. **Low:** Advanced micro-interactions.
-
-Focus on stability and feature completeness (see [TODO.md](../TODO.md)) before deep UI polish.
diff --git a/docs/UX-AUDIT-2026-10.md b/docs/UX-AUDIT-2026-10.md
new file mode 100644
index 0000000..3585ea3
--- /dev/null
+++ b/docs/UX-AUDIT-2026-10.md
@@ -0,0 +1,75 @@
+# UX Audit — LANStreamer (2026-10-30)
+
+Holistic assessment using the IxDF framework (7 UX factors · 5 usability characteristics · 5 interaction dimensions). Evidence: fresh screenshots of all surfaces (this file's sibling evidence in `screenshots/ux-*.png`), a year of operator feedback (Jerry's rounds), and the shipped 2026-10 redesign. Audited state: dev tip `a2fa9f8`.
+
+**Personas** (from actual usage): **Jerry-operator** — sets up streams at events, semi-technical, wants zero babysitting mid-event. **Event listener** — congregation/meeting attendee, any phone, zero patience, opens a link once. **Novice operator** — gets the app from GitHub, first event next week.
+
+---
+
+## Executive summary
+
+**Overall: 68/85 — B (Good).** The redesign landed a genuinely strong operator console (status strip, classified actionable errors, forgiving listener page with auto-resume). The product's biggest UX liability is not visual — it is **time**: measured ~5 s end-to-end audio latency (user report; browser-buffer dominated) directly undermines the core same-room interpretation use case. Second: the first-run path now stacks up to four gates before the operator controls anything. Third: accessibility is untested systematically.
+
+---
+
+## 1. UX Factors (29/35)
+
+| Factor | Score | Evidence |
+|---|---|---|
+| Useful | 5 | Solves a real, otherwise-expensive problem (interpretation hardware); persistent streams, auto-start, QR sharing |
+| Usable | 4 | Core flows (add stream → go live → share) are short; icon-only controls with tooltips everywhere; ⋯ menus group row actions |
+| Findable | 4 | Status strip answers "is it working?" at a glance; share surface is one card; in-app /docs discoverable from error boxes |
+| Credible | 3.5→4* | Opt-in telemetry well disclosed; per-install credentials now minted; *the latency itself and (pending) unsigned-installer SmartScreen warning erode trust |
+| Desirable | 4 | Post-redesign token system, both themes, flat surfaces read as intentional |
+| Accessible | 3 | aria-labels on icon buttons, color-scheme per theme; but no systematic keyboard/focus/contrast pass (see issues) |
+| Valuable | 5 | Free/OSS, LAN-private, no listener install — clear value story |
+
+## 2. Usability Characteristics (20/25)
+
+| Characteristic | Score | Evidence |
+|---|---|---|
+| Effectiveness | 5 | Stream lifecycle (create/live/stop/retry/edit/duplicate/reorder) all work; conflict + error paths verified E2E repeatedly |
+| Efficiency | 4 | One-click go-live; Start All; rescan without opening the card; row actions never shift |
+| Engagement | 4 | Eq/status motion only where meaningful (and frozen on pause); boot screen resolves fast |
+| Error Tolerance | 4.5 | Best-in-class errors: classified cause + plain-language fix + inline Change input/Retry + collapsed diagnostics + /docs link. Half point off: dirty-state traps (leftover instances, device holders) still confuse — mitigated by the new port-fallback dialog + orphan sweep |
+| Ease of Learning | 3 | First-run stacks gates (login → credentials dialog → telemetry prompt → default-creds banner); concepts like "virtual audio cable" arrive unexplained outside guides |
+
+## 3. Interaction Dimensions (19/25)
+
+| Dimension | Score | Evidence |
+|---|---|---|
+| Words | 4 | Friendly, short microcopy; listener errors say what to do ("ask the operator to check it"); minor jargon residue (bitrate chips, "S1" labels) |
+| Visual | 4 | Consistent tokens, both themes verified; default event banner removes the broken-looking empty state |
+| Physical/Space | 4 | Listener mobile layout solid (mini-player, touch-sized rows); dashboard is desktop-first (acceptable — operator uses a PC) |
+| Time | 3 | **The latency lives here.** ~5 s reported (≈3–4.5 s browser buffer + encoder/icecast contributions); the fix (MSE player + FFmpeg flags + proxy tweaks) is planned and specced — see docs/LATENCY.md + the Claude latency review |
+| Behavior | 4 | Buttons respond with toasts + row state; play/pause icons reflect reality (incl. the pause-flip and eq-freeze fixes); auto-resume behavior matches user intent |
+
+---
+
+## 4. Prioritized issues
+
+| # | Severity | Issue | Where |
+|---|---|---|---|
+| 1 | **Critical** | Audio latency (~5 s → target ≤1 s) undermines the core same-room use case; users hear it as "broken" | Listener playback path |
+| 2 | High | First-run gate stack: login + show-once credentials dialog + telemetry prompt + default-creds banner before first stream | Electron shell + dashboard |
+| 3 | Medium | No systematic accessibility pass (focus order, visible focus rings, contrast ratios, keyboard-only stream start) | All surfaces |
+| 4 | Medium | Unsigned installer will trigger SmartScreen — first impression for exe users is a security warning (SHA256SUMS + notes mitigate partially) | Release |
+| 5 | Low | Dashboard on phones stacks but is cramped — operators occasionally want a status glance from their phone | Dashboard responsive |
+| 6 | Low | /docs page is long unbroken text; collapsible sections would help scanning | public/docs.html |
+
+## 5. Redesign proposals (evolution, not revolution — the 2026-10 redesign holds)
+
+1. **Latency round (P1, specced):** MSE-based listener player with ~0.3–0.5 s buffer + drift resync; FFmpeg low-delay flags; proxy `flushHeaders`/`setNoDelay`; Icecast burst 16 KB. Measure with a clap test before/after. Expected 5 s → ~1 s.
+2. **First-run sequence (P2):** replace the native-dialog stack with one in-dashboard welcome card: "1. save your admin login (shown once, copy button) → 2. telemetry choice → 3. create your first stream". Native dialogs remain the fallback.
+3. **Accessibility sweep (P3):** axe pass on both surfaces, visible focus rings (tokens already have accent), keyboard path for play/stop/add-stream, contrast audit in light theme.
+4. **Listener trust nicety (P4):** small "live" indicator pulse is already there; consider showing stream *labels* more prominently than S-numbers on the picker.
+
+## 6. Research recommendations
+
+- **Clap-test latency measurement** (planned with the latency round) — replaces anecdote with frames.
+- **One real-event observation** of a novice operator (where do they hesitate?).
+- **axe-core automated a11y** in CI (also on the go-live checklist).
+
+## 7. Roadmap fit
+
+Issue #1 is the already-planned latency round. #2 is a small Electron/dashboard round. #3 pairs with the pre-release a11y item in GO-LIVE-CHECKLIST. #4 is release hygiene (SHA256SUMS step exists). Nothing here invalidates the current design direction.
diff --git a/docs/LANSTREAMER_SYSTEM_ARCHITECTURE.md b/docs/archive/LANSTREAMER_SYSTEM_ARCHITECTURE.md
similarity index 100%
rename from docs/LANSTREAMER_SYSTEM_ARCHITECTURE.md
rename to docs/archive/LANSTREAMER_SYSTEM_ARCHITECTURE.md
diff --git a/docs/archive/README.md b/docs/archive/README.md
new file mode 100644
index 0000000..8f3ede3
--- /dev/null
+++ b/docs/archive/README.md
@@ -0,0 +1,16 @@
+# Archive — superseded documentation
+
+Historical documents kept for reference. **None of this describes the current
+app** — each line says what replaced it. Current documentation: [../README.md](../README.md).
+
+| File | What it was | Superseded by |
+|------|-------------|---------------|
+| `LANSTREAMER_SYSTEM_ARCHITECTURE.md` | Complete pre-Electron architecture (server-first app) | [../README-DEVELOPERS.md](../README-DEVELOPERS.md) + the Electron shell itself (`electron/main.js`); predates admin auth, the 2026-10 redesign, and binary bundling |
+| `STARTUP-SEQUENCE.md` | Pre-Electron boot sequence | Startup is now owned by the Electron main process (ordered teardown, port fallback, orphan sweep — see `electron/main.js`) |
+| `TEST-PLAN.md` | Early manual test plan | The Jest suite (`npm test`) + [../GO-LIVE-CHECKLIST.md](../GO-LIVE-CHECKLIST.md) + the `scripts/verify-*.mjs` inventory in the developer guide |
+| `UI-UX-RECOMMENDATIONS-2026-10.md` | Design analysis that fed the 2026-10 redesign | The redesign SHIPPED — the live token system (`public/assets/css/tokens.css`) and [../APP-FLOW.md](../APP-FLOW.md) are the current truth |
+| `REDESIGN-PLAN.md` | The shipped redesign's plan | Same — shipped 2026-10 (see [../CHANGELOG.md](../CHANGELOG.md)) |
+| `ROBUSTNESS-PLAN.md` | 2026-02 robustness plan (8 layers) | Largely implemented (kill-order, error diagnostics, persistence); open items live in [../../TODO.md](../../TODO.md) and [../GO-LIVE-CHECKLIST.md](../GO-LIVE-CHECKLIST.md) |
+| `UI-UX-RECOMMENDATIONS.md` | Earlier (pre-2026-10) UI analysis | Same as the 2026-10 version above |
+| `ARCHIVED_ICECAST_CONFIGURATION_AND_RUNTIME_ARCHITECTURE.md` | 2026-01 Icecast-focused architecture | Icecast bundling + the generated-config system (`src/utils/vendorPaths.js`) replaced the "configure Program Files icecast.xml" world |
+| `legacy-images/` | Visual history: original concept art, the pre-redesign web UI (terminal + dashboard screenshots), the 2026-10-28 design-review PDF, and the redesign-round evidence set (`screenshots/redesign-2026-10-28/`) | The current UI — fresh post-redesign screenshots belong in the main README before the first release (go-live checklist) |
diff --git a/docs/archive/REDESIGN-PLAN.md b/docs/archive/REDESIGN-PLAN.md
new file mode 100644
index 0000000..457675d
--- /dev/null
+++ b/docs/archive/REDESIGN-PLAN.md
@@ -0,0 +1,96 @@
+# LANStreamer redesign adoption plan
+
+Source: `LANStreamer-redesign/` (designer mock, 2026-10-28) — interactive HTML/CSS
+mocks (dashboard + listener) with a shared token sheet. This plan merges it into
+the shipped app WITHOUT losing the behavior we built this cycle (notification
+bell, boot screen, off-air auto-resume, error classification, stacked toasts,
+/docs, telemetry, Electron, tests).
+
+## Why this is an upgrade (per screen)
+
+Dashboard
+1. **Status strip** (On air x/7 · Listeners+peak · Icecast :port · Needs attention)
+   replaces status scattered across the header pill and collapsed sidebar cards.
+   The operator's first glance now answers "is the event healthy?"
+2. **Security banner demoted to warning** (not error-red) with a direct
+   "Change password" action — it stops competing with real stream failures.
+3. **Grouped + filterable stream list** ("On air" / "Ready", All·Live·Issues)
+   — the live row can no longer hide among seven stopped ones.
+4. **Source names truncate at the END with tooltip** — replaces the marquee;
+   listeners/operators read the distinguishing part of the name first.
+5. **Error rows are actionable inline** (cause + fix hint + "Change input" /
+   "Retry") instead of a collapsed toggle; the full diagnostic stays in a
+   details disclosure behind it (fed by our `errorShort` classification).
+6. **One play/stop + "⋯" menu** (copy link, edit, duplicate, delete) — Delete
+   is no longer one misclick from Play; Stop is a red square, unmistakable
+   vs Play.
+7. **New stream as a side drawer**: source list marks which device is already
+   in use, quality chosen by purpose (Speech 96 / Standard 128 / Music 192),
+   explicit **Save** (stopped) vs **Go live**, and an auto-start toggle
+   (maps to the existing `autoStart` config field).
+8. **Share card** (QR + LAN URL + copy) promoted to the sidebar at full size.
+9. **Audio inputs always visible** with IN USE / IDLE / MISSING per device.
+10. **Friendly empty state** with a 3-step guide.
+
+Listener
+1. **One big play + channel picker** with language badges (EN/FR/ES) — designed
+   for interpretation events, the app's actual purpose; far friendlier than a
+   list of identical rows.
+2. Help line for the two real "no sound" causes (wrong Wi-Fi, silent mode).
+3. Mobile mini-player pinned on scroll; ON AIR pill in the top bar.
+
+Design system
+- Space Grotesk + JetBrains Mono typography; warning split from danger;
+  `--onair` red reserved for the ON AIR badge; text label on every chip
+  (color never the sole signal); focus-visible rings; reduced-motion honored.
+
+## What we keep from the current build (mock lacks it)
+Notification bell + panel, boot screen + failure state, typed/linked stacked
+toasts (LSToasts), 15s off-air grace + auto-resume + last-stream memory,
+device-error classification (errorShort), /docs page, real QR endpoint,
+duplicate-source guard, collapse persistence, telemetry consent, Electron,
+71-test suite, showcase page.
+
+## Decisions (recommended, reversible)
+| Topic | Mock | Ours | Decision |
+|---|---|---|---|
+| Fonts | Google Fonts CDN | vendored Inter | **Adopt Space Grotesk + JetBrains Mono, vendored** (offline rule; extend `vendor:fonts` script) |
+| Icons | inline stroke SVGs | Material Symbols (vendored) | **Keep Material Symbols** — already offline + enforced; adopt only the brand mark |
+| Theme default | light | dark | **Keep dark default** + system preference (existing user expectation) |
+| Toasts | bottom-right, tag-replace, max 4 | top-center stack, tags, types, links | **Adopt bottom-right placement + styling; keep LSToasts engine** (types/links/bell integration) |
+| Device name overflow | end-truncate + tooltip | marquee | **Adopt end-truncate; drop marquee** |
+| Tailwind | none (pure CSS) | Tailwind + tokens | **Keep Tailwind** this pass; port the mock's component CSS into `ui.css` (ripping out Tailwind now would rewrite everything we just stabilized) |
+
+## Phases (each: build → GUI-verify both themes → tests → commit)
+
+**P1 — Token merge (small, low risk).** Port the mock's palette values
+(light+dark), warn/danger/onair split, radius+shadow scale, vendored fonts
+into `tokens.css`/`tailwind.config.js`; update `/showcase.html`; regenerate
+screenshots for the designer. Nothing structural changes yet.
+
+**P2 — Dashboard structure (large).** Status strip, security banner restyle,
+grouped+filtered list, new row anatomy (⋯ menu, red stop, end-truncated
+source), errbox with inline actions + details, empty state, share card,
+audio-inputs card (real IN USE/IDLE/MISSING chips). Bell/boot/collapsibles
+stay. Reorder keeps up/down (inside ⋯ menu) until P5.
+
+**P3 — New-stream drawer (medium).** Replaces the modal. Radio-card sources
+annotated "Used by S5" from live streams; purpose-based quality; auto-start
+toggle → existing `autoStart` field; **Save-as-stopped needs one small backend
+endpoint** (persist stream without starting; today streams only persist on a
+successful start).
+
+**P4 — Listener page (medium-large).** Hero + big play + channel picker +
+help line + scroll-pinned mini-player + ON AIR pill, with ALL current
+playback logic ported onto it (grace, auto-resume, last-stream, toasts, boot,
+play-failure notices).
+
+**P5 — Polish (optional).** Drag-handle reorder (keep keyboard fallback),
+listener peak tracking (session localStorage), real input level meters
+(requires an FFmpeg per-device probe — skip rather than show fake levels).
+
+## Explicitly not adopted
+- Google Fonts CDN links (offline rule) — vendored instead.
+- Decorative QR in the mock (we keep the real `/api/system/qr`).
+- Fake level-meter widths (either real backend probe in P5 or omitted).
+- Pure-CSS rewrite / Tailwind removal (revisit after P4 if desired).
diff --git a/docs/archive/ROBUSTNESS-PLAN.md b/docs/archive/ROBUSTNESS-PLAN.md
new file mode 100644
index 0000000..442dd4d
--- /dev/null
+++ b/docs/archive/ROBUSTNESS-PLAN.md
@@ -0,0 +1,319 @@
+# LANStreamer robustness plan
+
+Breaking the system down by domain with explicit failure-mode analysis. Each layer has clear boundaries, enumerated failure modes, and testable mitigation.
+
+---
+
+## Layer 1: Environment detection & setup
+
+### 1.1 Icecast discovery
+
+- **What could go wrong?**
+  - Not installed
+  - Installed but not in PATH
+  - Installed but wrong version (flags changed)
+  - Multiple versions on system
+  - Config file missing or corrupted
+  - Port conflicts (8000 already in use)
+  - Permissions issues (can't write to config/logs)
+- **How do you test for it?**
+  - `which icecast` / `where icecast`
+  - `icecast --version` and parse output
+  - Try to load/warm-start the config and catch errors
+  - Check port availability before starting
+- **Mitigation**
+  - Clear error messages with install links
+  - Prompt to download missing binary
+  - Auto-generate config from template
+  - Offer alternative port if 8000 taken
+  - Validate config before launching
+
+### 1.2 FFmpeg discovery
+
+- **What could go wrong?**
+  - Not installed
+  - In PATH but lacking codecs (libmp3lame, libopus, etc.)
+  - Wrong version (some flag changes between versions)
+  - FFmpeg exists but ffprobe doesn't (or vice versa)
+- **How do you test for it?**
+  - `ffmpeg -version` and parse for codecs
+  - `ffprobe -version` for metadata capabilities
+  - Try a dummy encode to verify codec support
+- **Mitigation**
+  - Codec-specific error messages ("You need FFmpeg with libmp3lame")
+  - Offer bundled/config instructions for common OSs
+  - Graceful degradation if some codecs missing
+
+### 1.3 Audio device discovery
+
+- **What could go wrong?**
+  - No audio devices found
+  - Device name has special characters that break CLI
+  - Device disconnected mid-stream
+  - Device name changes between sessions (Windows "Microphone (2)" vs "Microphone (3)")
+  - Permission denied (macOS/Windows privacy controls)
+- **How do you test for it?**
+  - `ffmpeg -list_devices true -f dshow -i dummy` (Windows)
+  - `ffmpeg -f avfoundation -list_devices true -i ""` (macOS)
+  - `pactl list sources` (Linux PulseAudio)
+  - Store device fingerprint/hash to detect renaming
+- **Mitigation**
+  - Cache device mappings with stable IDs
+  - Device aliasing/user-friendly names
+  - Graceful reconnection attempts
+  - Clear permission prompts
+
+---
+
+## Layer 2: Stream lifecycle management
+
+### 2.1 Stream creation
+
+- **What could go wrong?**
+  - Duplicate stream name
+  - Invalid characters in stream name (Icecast mount point restrictions)
+  - Source limit reached (Icecast default: 2 sources)
+  - Port collision if assigning unique ports per stream
+- **Testing & mitigation**
+  - Validate name against regex before creating
+  - Check Icecast `<sources>` limit before creating
+  - Pre-flight checks: "Can this stream actually start?"
+
+### 2.2 Stream start (spawn FFmpeg)
+
+- **What could go wrong?**
+  - FFmpeg exits immediately (codec issue, device busy)
+  - FFmpeg starts but no audio (silent stream)
+  - FFmpeg starts but wrong sample rate/channels
+  - Icecast rejects the connection (wrong password, mount exists)
+- **Testing & mitigation**
+  - Health check: verify FFmpeg process stays alive > 5 seconds
+  - Probe Icecast mount point to confirm audio is flowing
+  - Parse FFmpeg stderr for known error patterns
+  - Exponential backoff on retry
+
+### 2.3 Stream stop/cleanup
+
+- **What could go wrong?**
+  - FFmpeg won't die (zombie process)
+  - Icecast mount point stays active
+  - Port not released
+  - State desync (UI thinks stopped, but still running)
+- **Testing & mitigation**
+  - Force-kill if graceful shutdown fails
+  - Explicit Icecast mount unregister
+  - State reconciliation on startup ("What streams are actually running?")
+  - Cleanup orphaned processes on server start
+
+### 2.4 Stream restart (hot reload)
+
+- **What could go wrong?**
+  - Old process dies but new one fails to start
+  - Brief downtime that drops all listeners
+  - Config change invalidates active stream
+- **Testing & mitigation**
+  - Atomic switch: start new before killing old (if source allows)
+  - Graceful handoff with listener notification
+  - Rollback on failure
+
+---
+
+## Layer 3: Audio pipeline
+
+### 3.1 Audio capture
+
+- **What could go wrong?**
+  - Sample rate mismatch (device 48 kHz, expect 44.1 kHz)
+  - Channel mismatch (stereo vs mono)
+  - Device goes silent (mic unplugged, app stops granting permission)
+  - Clipping/distortion (gain too high)
+- **Testing & mitigation**
+  - Auto-detect device capabilities and configure accordingly
+  - Audio level monitoring (alert if silent for > X seconds)
+  - Auto-normalize or gain controls
+  - Fall back to default device if selected fails
+
+### 3.2 Encoding
+
+- **What could go wrong?**
+  - Wrong codec for format (MP3 vs Opus vs AAC)
+  - Bitrate too high for listeners' bandwidth
+  - CPU overload (encoding quality too high)
+- **Testing & mitigation**
+  - Codec compatibility matrix (what works where)
+  - Adaptive bitrate based on listener count
+  - CPU monitoring, quality stepping down if needed
+
+### 3.3 Icecast integration
+
+- **What could go wrong?**
+  - Authentication failure (wrong password in config)
+  - Mount point already exists
+  - Icecast crashes or restarts
+  - Network hiccup between FFmpeg and Icecast
+- **Testing & mitigation**
+  - Connection health monitoring
+  - Auto-reconnect with backoff
+  - Heartbeat/ping to detect Icecast aliveness
+  - Config validation before use
+
+---
+
+## Layer 4: Listener delivery
+
+### 4.1 Stream discovery
+
+- **What could go wrong?**
+  - Listener can't find server (wrong IP, firewall)
+  - Server IP changes (DHCP)
+  - mDNS/Bonjour not working
+- **Testing & mitigation**
+  - Display server IP prominently, include QR code
+  - Link-local addresses (hostname.local)
+  - Simple connectivity test on listener page ("Can I reach the server?")
+
+### 4.2 Playback
+
+- **What could go wrong?**
+  - Browser doesn't support codec
+  - Buffer underruns (stuttering)
+  - High latency (not suitable for translation)
+  - Listener device goes to sleep, loses connection
+- **Testing & mitigation**
+  - Codec fallback cascade (Opus → MP3 → AAC)
+  - Adaptive buffering based on network conditions
+  - Auto-reconnect with UI indication
+  - Latency display (so admin knows if there's an issue)
+
+---
+
+## Layer 5: State & configuration
+
+### 5.1 Persistent state
+
+- **What could go wrong?**
+  - Config file corrupted (bad JSON)
+  - Config file permissions issue
+  - Multiple processes writing to same config
+  - Config schema changes break old configs
+- **Testing & mitigation**
+  - Config validation on load (schema, JSON parse)
+  - Backup/rollback before writes
+  - Atomic file writes (write temp, then rename)
+  - Schema migration path
+
+### 5.2 Runtime state
+
+- **What could go wrong?**
+  - State desync (what's running vs. what we think is running)
+  - Memory leak in long-running process
+  - Event listeners not cleaned up
+- **Testing & mitigation**
+  - State reconciliation function (ask OS "what's actually running")
+  - Regular health checks
+  - Explicit cleanup on all state changes
+
+---
+
+## Layer 6: Error handling & diagnostics
+
+### 6.1 Error detection
+
+- **What could go wrong?**
+  - FFmpeg error patterns not recognized
+  - False positives (normal noise treated as error)
+  - Errors swallowed somewhere in the stack
+- **Testing & mitigation**
+  - Comprehensive error pattern library (errorDiagnostics.js)
+  - Error taxonomy (fatal, recoverable, warning, info)
+  - Error context (stream name, device, timestamp)
+
+### 6.2 Error recovery
+
+- **What could go wrong?**
+  - Retry loop never succeeds (hammering resources)
+  - Recovery makes things worse
+  - User not informed what's happening
+- **Testing & mitigation**
+  - Max retry limits with exponential backoff
+  - Recovery strategies per error type (some need manual intervention)
+  - User-facing messages with actionable next steps
+
+---
+
+## Layer 7: Admin UI
+
+### 7.1 Dashboard
+
+- **What could go wrong?**
+  - UI shows stale state (not synced to backend)
+  - Controls don't work (but don't show error)
+  - Overwhelming amount of information
+- **Testing & mitigation**
+  - Real-time state sync (Socket.io or polling)
+  - Optimistic UI updates with rollback on failure
+  - Progressive disclosure (show essentials, details on demand)
+
+### 7.2 Stream controls
+
+- **What could go wrong?**
+  - Click "Start" but nothing happens
+  - Click "Stop" and it asks "Are you sure?" every time
+  - No indication of what's happening (starting... started... failed)
+- **Testing & mitigation**
+  - Loading states for all async actions
+  - Clear success/error feedback
+  - Keyboard shortcuts for power users
+  - Bulk operations (start all, stop all)
+
+---
+
+## Layer 8: Listener UI
+
+### 8.1 Accessibility
+
+- **What could go wrong?**
+  - Not keyboard navigable
+  - No screen reader support
+  - Poor contrast
+  - Small touch targets on mobile
+- **Testing & mitigation**
+  - WCAG 2.1 AA compliance
+  - Keyboard navigation audit
+  - Screen reader testing
+  - Touch target minimum 44×44 px
+
+### 8.2 Usability
+
+- **What could go wrong?**
+  - Too much information (what do I click?)
+  - No volume control
+  - Can't tell which stream is which
+  - No error state ("Why isn't it playing?")
+- **Testing & mitigation**
+  - Simple primary action: "Play stream"
+  - Stream metadata (name, source, listener count)
+  - Clear error messages with next steps
+  - Mobile-first responsive design
+
+---
+
+## Refactoring path
+
+1. **Layer 1** — Solid environment detection and validation. Everything else depends on this.
+2. **Layer 2 (Lifecycle)** — Clean up how streams are created/started/stopped. Core orchestration.
+3. **Layer 6 (Errors)** — Build the diagnostic system alongside each layer, not after.
+4. **Layer 3 (Audio pipeline)** — Once FFmpeg is reliable, make the audio flow reliable.
+5. **Layers 4, 7, 8 (UI/UX)** — Once the backend is solid, improve the UI thoughtfully.
+
+---
+
+## Scope note: internet streaming
+
+Building internet streaming from scratch is reinventing the wheel. For streaming to the world, use:
+
+- YouTube Live (RTMP)
+- Twitch (RTMP)
+- Restream.io / Castr (multi-platform)
+
+**LANStreamer's strength is local, low-latency, private streaming. Lean into that.**
diff --git a/docs/STARTUP-SEQUENCE.md b/docs/archive/STARTUP-SEQUENCE.md
similarity index 100%
rename from docs/STARTUP-SEQUENCE.md
rename to docs/archive/STARTUP-SEQUENCE.md
diff --git a/docs/TEST-PLAN.md b/docs/archive/TEST-PLAN.md
similarity index 100%
rename from docs/TEST-PLAN.md
rename to docs/archive/TEST-PLAN.md
diff --git a/docs/UI-UX-RECOMMENDATIONS-v2.md b/docs/archive/UI-UX-RECOMMENDATIONS-2026-10.md
similarity index 94%
rename from docs/UI-UX-RECOMMENDATIONS-v2.md
rename to docs/archive/UI-UX-RECOMMENDATIONS-2026-10.md
index 1ba6f51..7df0aba 100644
--- a/docs/UI-UX-RECOMMENDATIONS-v2.md
+++ b/docs/archive/UI-UX-RECOMMENDATIONS-2026-10.md
@@ -1,6 +1,16 @@
-# UI/UX Recommendations for LANStreamer Dashboard v2
+# UI/UX Recommendations for LANStreamer Dashboard
 
-**Enhanced glassmorphism edition** - inspired by premium frosted glass UI with softer transparency, layered depth, and elegant gradients.
+<!--
+Versioning (adopted from the devops repo's supersedes convention, 2026-10-28):
+this file is append-only. New recommendations land as a new Version section;
+never fork a *-v2 filename again — git history plus the version log IS the
+versioning.
+-->
+
+**Version 2 — Enhanced glassmorphism edition** (renamed 2026-10-28):
+inspired by premium frosted glass UI with softer transparency, layered
+depth, and elegant gradients. Supersedes Version 1, preserved at
+`docs/archive/UI-UX-RECOMMENDATIONS.md`.
 
 Reference: [Gradient UI/UX Elements](https://www.freepik.com/free-vector/gradient-ui-ux-elements-background_16829080.htm)
 
@@ -744,3 +754,15 @@ button[aria-label=""] {
 
 - **v2** - Enhanced glassmorphism with premium frosted glass, layered depth, and professional animation curves
 - [v1](./UI-UX-RECOMMENDATIONS.md) - Original recommendations with basic glass effects
+
+
+## Version log
+
+- **v2 (2026-10-28)** — glassmorphism edition; renamed from
+  `UI-UX-RECOMMENDATIONS-v2.md` (append-only versioning adopted; v1 archived).
+
+## Version log
+
+- **v2 (2026-10-28)** — glassmorphism edition; renamed from
+  `UI-UX-RECOMMENDATIONS-v2.md` to this append-only file (v1 archived at
+  `docs/archive/UI-UX-RECOMMENDATIONS.md`).
diff --git a/images/.gitkeep b/docs/archive/legacy-images/.gitkeep
similarity index 100%
rename from images/.gitkeep
rename to docs/archive/legacy-images/.gitkeep
diff --git a/images/README.md b/docs/archive/legacy-images/README.md
similarity index 100%
rename from images/README.md
rename to docs/archive/legacy-images/README.md
diff --git a/images/lanstreamer-local-audio-concept-1.jpg b/docs/archive/legacy-images/lanstreamer-local-audio-concept-1.jpg
similarity index 100%
rename from images/lanstreamer-local-audio-concept-1.jpg
rename to docs/archive/legacy-images/lanstreamer-local-audio-concept-1.jpg
diff --git a/images/lanstreamer-local-audio-concept-2.jpg b/docs/archive/legacy-images/lanstreamer-local-audio-concept-2.jpg
similarity index 100%
rename from images/lanstreamer-local-audio-concept-2.jpg
rename to docs/archive/legacy-images/lanstreamer-local-audio-concept-2.jpg
diff --git a/images/lanstreamer-server-terminal.png b/docs/archive/legacy-images/lanstreamer-server-terminal.png
similarity index 100%
rename from images/lanstreamer-server-terminal.png
rename to docs/archive/legacy-images/lanstreamer-server-terminal.png
diff --git a/docs/archive/legacy-images/screenshots/LANStreamer-UI-Review-2026-10-28.pdf b/docs/archive/legacy-images/screenshots/LANStreamer-UI-Review-2026-10-28.pdf
new file mode 100644
index 0000000..0f8dcc8
Binary files /dev/null and b/docs/archive/legacy-images/screenshots/LANStreamer-UI-Review-2026-10-28.pdf differ
diff --git a/images/screenshots/README.md b/docs/archive/legacy-images/screenshots/README.md
similarity index 100%
rename from images/screenshots/README.md
rename to docs/archive/legacy-images/screenshots/README.md
diff --git a/images/screenshots/lanstreamer-dashboard.png b/docs/archive/legacy-images/screenshots/lanstreamer-dashboard.png
similarity index 100%
rename from images/screenshots/lanstreamer-dashboard.png
rename to docs/archive/legacy-images/screenshots/lanstreamer-dashboard.png
diff --git a/images/screenshots/lanstreamer-event-details-form.png b/docs/archive/legacy-images/screenshots/lanstreamer-event-details-form.png
similarity index 100%
rename from images/screenshots/lanstreamer-event-details-form.png
rename to docs/archive/legacy-images/screenshots/lanstreamer-event-details-form.png
diff --git a/images/screenshots/lanstreamer-feedback-contact-details-form.png b/docs/archive/legacy-images/screenshots/lanstreamer-feedback-contact-details-form.png
similarity index 100%
rename from images/screenshots/lanstreamer-feedback-contact-details-form.png
rename to docs/archive/legacy-images/screenshots/lanstreamer-feedback-contact-details-form.png
diff --git a/images/screenshots/lanstreamer-icecast-server-info.png b/docs/archive/legacy-images/screenshots/lanstreamer-icecast-server-info.png
similarity index 100%
rename from images/screenshots/lanstreamer-icecast-server-info.png
rename to docs/archive/legacy-images/screenshots/lanstreamer-icecast-server-info.png
diff --git a/images/screenshots/lanstreamer-login.png b/docs/archive/legacy-images/screenshots/lanstreamer-login.png
similarity index 100%
rename from images/screenshots/lanstreamer-login.png
rename to docs/archive/legacy-images/screenshots/lanstreamer-login.png
diff --git a/images/screenshots/lanstreamer-server-terminal.png b/docs/archive/legacy-images/screenshots/lanstreamer-server-terminal.png
similarity index 100%
rename from images/screenshots/lanstreamer-server-terminal.png
rename to docs/archive/legacy-images/screenshots/lanstreamer-server-terminal.png
diff --git a/images/screenshots/lanstreamer-streams.png b/docs/archive/legacy-images/screenshots/lanstreamer-streams.png
similarity index 100%
rename from images/screenshots/lanstreamer-streams.png
rename to docs/archive/legacy-images/screenshots/lanstreamer-streams.png
diff --git a/images/screenshots/login.png b/docs/archive/legacy-images/screenshots/login.png
similarity index 100%
rename from images/screenshots/login.png
rename to docs/archive/legacy-images/screenshots/login.png
diff --git a/docs/archive/legacy-images/screenshots/redesign-2026-10-28/01-dashboard-multi-dark.png b/docs/archive/legacy-images/screenshots/redesign-2026-10-28/01-dashboard-multi-dark.png
new file mode 100644
index 0000000..8d31c65
Binary files /dev/null and b/docs/archive/legacy-images/screenshots/redesign-2026-10-28/01-dashboard-multi-dark.png differ
diff --git a/docs/archive/legacy-images/screenshots/redesign-2026-10-28/02-dashboard-multi-light.png b/docs/archive/legacy-images/screenshots/redesign-2026-10-28/02-dashboard-multi-light.png
new file mode 100644
index 0000000..4ad2077
Binary files /dev/null and b/docs/archive/legacy-images/screenshots/redesign-2026-10-28/02-dashboard-multi-light.png differ
diff --git a/docs/archive/legacy-images/screenshots/redesign-2026-10-28/03-dashboard-add-modal-dark.png b/docs/archive/legacy-images/screenshots/redesign-2026-10-28/03-dashboard-add-modal-dark.png
new file mode 100644
index 0000000..c4db135
Binary files /dev/null and b/docs/archive/legacy-images/screenshots/redesign-2026-10-28/03-dashboard-add-modal-dark.png differ
diff --git a/docs/archive/legacy-images/screenshots/redesign-2026-10-28/04-dashboard-add-modal-light.png b/docs/archive/legacy-images/screenshots/redesign-2026-10-28/04-dashboard-add-modal-light.png
new file mode 100644
index 0000000..db65202
Binary files /dev/null and b/docs/archive/legacy-images/screenshots/redesign-2026-10-28/04-dashboard-add-modal-light.png differ
diff --git a/docs/archive/legacy-images/screenshots/redesign-2026-10-28/05-dashboard-empty-dark.png b/docs/archive/legacy-images/screenshots/redesign-2026-10-28/05-dashboard-empty-dark.png
new file mode 100644
index 0000000..e077755
Binary files /dev/null and b/docs/archive/legacy-images/screenshots/redesign-2026-10-28/05-dashboard-empty-dark.png differ
diff --git a/docs/archive/legacy-images/screenshots/redesign-2026-10-28/06-dashboard-empty-light.png b/docs/archive/legacy-images/screenshots/redesign-2026-10-28/06-dashboard-empty-light.png
new file mode 100644
index 0000000..94c7b56
Binary files /dev/null and b/docs/archive/legacy-images/screenshots/redesign-2026-10-28/06-dashboard-empty-light.png differ
diff --git a/docs/archive/legacy-images/screenshots/redesign-2026-10-28/07-listener-desktop-dark.png b/docs/archive/legacy-images/screenshots/redesign-2026-10-28/07-listener-desktop-dark.png
new file mode 100644
index 0000000..8420764
Binary files /dev/null and b/docs/archive/legacy-images/screenshots/redesign-2026-10-28/07-listener-desktop-dark.png differ
diff --git a/docs/archive/legacy-images/screenshots/redesign-2026-10-28/08-listener-desktop-light.png b/docs/archive/legacy-images/screenshots/redesign-2026-10-28/08-listener-desktop-light.png
new file mode 100644
index 0000000..2c17872
Binary files /dev/null and b/docs/archive/legacy-images/screenshots/redesign-2026-10-28/08-listener-desktop-light.png differ
diff --git a/docs/archive/legacy-images/screenshots/redesign-2026-10-28/09-listener-mobile-dark.png b/docs/archive/legacy-images/screenshots/redesign-2026-10-28/09-listener-mobile-dark.png
new file mode 100644
index 0000000..65ac73d
Binary files /dev/null and b/docs/archive/legacy-images/screenshots/redesign-2026-10-28/09-listener-mobile-dark.png differ
diff --git a/docs/archive/legacy-images/screenshots/redesign-2026-10-28/10-listener-mobile-light.png b/docs/archive/legacy-images/screenshots/redesign-2026-10-28/10-listener-mobile-light.png
new file mode 100644
index 0000000..8ba29a1
Binary files /dev/null and b/docs/archive/legacy-images/screenshots/redesign-2026-10-28/10-listener-mobile-light.png differ
diff --git a/docs/benchmark-report-v1.md b/docs/benchmark-report-v1.md
new file mode 100644
index 0000000..9205569
--- /dev/null
+++ b/docs/benchmark-report-v1.md
@@ -0,0 +1,103 @@
+# LANStreamer benchmark report v1 — vs devops practices DB
+
+Date: 2026-10-28 · Procedure: devops `benchmark-practices` skill (Mode B,
+repo filesystem) · DB: 155 records (141 live) post 2026-10-28 promotion.
+Reviewer: ZCode agent, evidence from the committed dev tree (90819e7),
+not any dirty working state.
+
+**Purpose:** first run of the devops↔LANStreamer flywheel — LANStreamer is
+the practices DB's first verified external consumer. Gaps found here feed
+back into the DB as draft records (noted at the end).
+
+Scope: Express API surface (~68 routes across 7 routers), streaming core
+(FFmpeg/Icecast services), uploads, listener static pages, shutdown/startup
+path. Out of scope: Electron shell, PWA assets.
+
+## Verdict: SHIP on LAN · FIX BEFORE ANY WIDER EXPOSURE
+
+0 blockers (LAN threat model) · 3 should-fix · 1 nice · 4 compliant ·
+3 undetermined · 2 DB gaps surfaced.
+
+## Should-fix (fix before exposing beyond the LAN)
+
+1. **Upload extension/content-type allowlist missing** (uploads land in a
+   static-served dir) — `src/routes/contact.js:18` writes to
+   `public/uploads/events`, served by `express.static` (`src/app.js:25`);
+   `filename()` keeps the user-controlled extension (`contact.js:27-31`,
+   `settings.js:25-32`). `event_<ts>.html` / `.svg` = stored scriptable
+   content any LAN device can be lured to. `path.basename` blocks traversal
+   (good) but nothing restricts type. Fix: multer `fileFilter` allowlist
+   (jpg/png/webp/mp3 per route) + serve uploads with
+   `Content-Disposition: attachment` or a separate non-executable handler.
+   *(No devops record exists for upload validation — gap #1 below.)*
+2. **Rate limiting configured but not wired** — `src/config/index.js:95-96`
+   defines RATE_LIMIT_* (100/15min defaults) but no limiter middleware is
+   applied anywhere (no express-rate-limit dep, no usage). Remaining
+   auth/login/setup endpoints are unlimited. Violates **SEC-AUTH-001**
+   (rate-limit every auth endpoint) — mitigated by LAN-only exposure and
+   the localhost admin lock, but the config suggests an intent that was
+   never landed. Fix: wire `express-rate-limit` on `/api/auth`, `/api/setup`.
+3. **Config persistence is not atomic** — `config/streams.json` and
+   `data/streams.json` written in place by StreamingService (no tmp+rename
+   found). A crash mid-write corrupts stream definitions. Violates the
+   atomic-write discipline referenced by **REL-ASY-009** / **DATA-001**
+   (wrap multi-write state changes atomically; for file stores that means
+   write-temp-then-rename). Fix: `fs.writeFile(tmp)` + `fs.rename`.
+
+## Nice
+
+4. **PERF-006 (health checks must mean work, not liveness)** —
+   `src/app.js:30` `/api/health` exists and is used by tests; verify it
+   reflects Icecast/FFmpeg ability (current shape undetermined from route
+   stub — if it only returns 200, add a degraded state when the source
+   engine is down).
+
+## Compliant (evidence)
+
+- **Graceful shutdown wired** — SIGINT/SIGTERM handlers stop streams then
+  exit (`src/server.js:72,127-135`), services stop ordered with timeout
+  (`src/app.js` shutdown). *(Pattern has no DB record — gap #2.)*
+- **Admin surface locked to localhost** — `requireLocalhostAdmin`
+  middleware (`src/app.js:27`), integration-tested
+  (`tests/integration/lock-admin-localhost.test.js`). Authorization
+  boundary consistent with **SEC-AUTHZ-001/002** intent.
+- **REL-ASY-009 (test by making the world miserable)** — errorScenarios,
+  stream-start-error, ffmpeg-spawn, reorder tests exist
+  (`tests/integration/`, `tests/scenarios/`) — genuinely strong for this
+  category.
+- **Upload size limits set** — 2MB images / 200MB music
+  (`contact.js:36-40`, `settings.js:33-37`).
+
+## Undetermined (check next round)
+
+- **REL-ASY-001 (non-essential out of request cycle)** — is FFmpeg spawn
+  async relative to the HTTP response? Tests suggest yes; not verified
+  line-level.
+- **REL-ASY-006 (timeouts/backoff on downstream)** — Icecast/FFmpeg
+  dependency timeouts not audited.
+- JWT middleware remains (`src/middleware/auth.js`) after the auth-removal
+  commit — confirm no dead privileged path still trusts it.
+
+## DB gaps surfaced (feed back into devops)
+
+1. **Upload validation record** — allowlist type+extension, randomize
+   stored name, never serve user uploads as executable content. (Source
+   candidate: this benchmark + OWASP unrestr. upload guidance.)
+2. **Graceful shutdown record** — SIGTERM → stop accepting → drain/stop
+  children → bounded timeout → exit; health endpoint flips first.
+   (Source candidates: LANStreamer server.js, 12-factor disposability.)
+
+Both are queued as draft candidates for the next ingestion round, keeping
+SCHEMA rule 1 in mind: this report is the source, so future LANStreamer
+compliance is self-consistent, not independent.
+
+## Scorecard
+
+| severity | count |
+|---|---|
+| blocker | 0 |
+| should (fix) | 3 |
+| nice | 1 |
+| compliant evidenced | 4 |
+| undetermined | 3 |
+| DB gaps surfaced | 2 |
diff --git a/docs/guides/README.md b/docs/guides/README.md
index f996ca6..02a72d2 100644
--- a/docs/guides/README.md
+++ b/docs/guides/README.md
@@ -2,15 +2,16 @@
 
 > **Simple, step-by-step guides for non-technical users**
 
-## 📦 Required Software Installation
+> **Packaged app (installer):** you can skip this page — FFmpeg and Icecast are bundled with the app.
+> **Running from source (repo/ZIP or server-only):** install both programs below first.
 
-**Before using LANStreamer, you need to install these two programs:**
+## 📦 Required Software Installation (source installs)
 
 ### Essential Components
 - **[FFmpeg Installation](./ffmpeg-installation.md)** - Audio processor (5 minutes) ⭐ **Start here**
 - **[Icecast Installation](./icecast-installation.md)** - Streaming server (5 minutes)
 
-> **💡 Why do I need these?** LANStreamer is a web application that coordinates these two powerful tools to create your streaming server. Think of LANStreamer as the "control panel" and FFmpeg/Icecast as the "engines" that do the actual work.
+> **💡 Why do I need these?** LANStreamer coordinates these two powerful tools to create your streaming server. Think of LANStreamer as the "control panel" and FFmpeg/Icecast as the "engines" that do the actual work.
 
 ### 🎧 Understanding LANStreamer
 - **[Audio Pipeline Concepts](./audio-pipeline-simple.md)** - How audio flows from source to listeners
diff --git a/docs/pressure-checklist.md b/docs/pressure-checklist.md
new file mode 100644
index 0000000..cd19531
--- /dev/null
+++ b/docs/pressure-checklist.md
@@ -0,0 +1,41 @@
+# Pressure Checklist (pre-review gate for streaming features)
+
+Adopted from the devops practices database (playbook: pressure-checklist,
+originally from system-design-book@ Ch 0.3), 2026-10-28.
+
+**Gate rule:** every PR that adds or changes streaming behavior (stream
+lifecycle, proxying, device capture, listener fanout, start-all, queueing)
+must answer these 7 conditions for the changed code path in the PR
+description — not in the reviewer's head. A design that only survives on
+paper (untested fallbacks, guessed timeout numbers) counts as failing.
+
+1. **Load is uneven** — month end, holiday peaks, campaign spikes.
+   Design target: peak-to-average ratio (often 3x+).
+2. **A dependency is SLOW, not down** — 8 seconds. Worse than down:
+   callers keep waiting, resources fill, failure travels upward.
+   Ask: what is my capacity at concurrency ÷ 8s?
+   (LANStreamer shape: Icecast slow-but-alive, FFmpeg device stalls,
+   SMB/network drive source reads.)
+3. **Data is 10x expected** — the table you never thought would grow.
+   Ask: do indexes, partitions, and queries survive 10x?
+   (LANStreamer shape: config/streams.json entries, uploads dir, logs.)
+4. **A machine disappears mid-write / mid-transaction** — is the
+   invariant preserved? (atomicity, durable execution)
+   (LANStreamer shape: FFmpeg killed mid-spawn, stream state file
+   rewritten during crash, lock-file races.)
+5. **The network is poor** — high latency, packet loss, flaky mobile.
+   Round-trip count becomes the dominant cost.
+   (LANStreamer shape: listener page over WAN/LAN, QR-share links.)
+6. **The same request arrives twice** — user tapped Send again.
+   Ask: idempotency key? dedupe committed with the side effect?
+   (LANStreamer shape: start/stop double-clicks, start-all re-entry,
+   reorder + delete racing.)
+7. **Traffic is hostile** — someone is enumerating endpoints,
+   spamming auth routes, replaying webhooks.
+   (LANStreamer shape: LAN exposure, uploads endpoint abuse.)
+
+## Why a fixed set
+
+So quality doesn't depend on who happens to be in the room. The same
+seven questions every time, and the answers live in the PR record, not in
+chat scrollback.
diff --git a/electron/icon.ico b/electron/icon.ico
new file mode 100644
index 0000000..65d1e73
Binary files /dev/null and b/electron/icon.ico differ
diff --git a/electron/main.js b/electron/main.js
new file mode 100644
index 0000000..cc935f6
--- /dev/null
+++ b/electron/main.js
@@ -0,0 +1,493 @@
+import { app, BrowserWindow, Tray, Menu, nativeImage, dialog, shell, powerSaveBlocker, powerMonitor, ipcMain } from 'electron';
+import path from 'path';
+import { fileURLToPath } from 'url';
+import { spawn, execSync } from 'child_process';
+import { createRequire } from 'module';
+
+const require = createRequire(import.meta.url);
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+
+const SMOKE = process.argv.includes('--smoke') || process.env.ELECTRON_SMOKE === '1';
+const BASE_PORT = parseInt(process.env.PORT || '3001', 10);
+
+// Bundled binaries + writable data dir for PACKAGED installs — must be set
+// before the server code below imports, so services resolve the vendored
+// FFmpeg/Icecast (resources/vendor) and keep config/logs in userData.
+if (app.isPackaged && !process.env.LANSTREAMER_VENDOR_DIR) {
+  process.env.LANSTREAMER_VENDOR_DIR = path.join(process.resourcesPath, 'vendor');
+  process.env.LANSTREAMER_DATA_DIR = app.getPath('userData');
+}
+
+let mainWindow = null;
+let tray = null;
+let serverHandle = null;
+let isQuitting = false;
+
+// ---------------------------------------------------------------------------
+// Server lifecycle (Express in-process; listeners on the LAN keep working)
+// ---------------------------------------------------------------------------
+
+// Credential policy (owner decision 2026-10-30): DOCUMENTED defaults + prompt
+// to change (dashboard banner + Admin account card) + a documented recovery
+// path (delete the security file → defaults return). Random per-install
+// minting was tried and reverted as overkill: the localhost lock already
+// keeps the LAN out of the admin panel, and the operator must stay in full
+// control. The LAN-facing hardening lives on bundled Icecast instead
+// (loopback bind + per-install random passwords in its generated config).
+
+const { startServer } = await import('../src/app.js');
+
+function listenWithFallback(basePort, attempts = 5) {
+  return new Promise((resolve, reject) => {
+    const tryPort = (port, left) => {
+      const handle = startServer({ port });
+      handle.server.once('error', (err) => {
+        try { handle.server.close(); } catch { /* not listening anyway */ }
+        if (err.code === 'EADDRINUSE' && left > 0) {
+          tryPort(port + 1, left - 1);
+        } else {
+          reject(err);
+        }
+      });
+      handle.server.once('listening', () => resolve(handle));
+    };
+    tryPort(basePort, attempts);
+  });
+}
+
+/**
+ * Kill a process and its whole tree. Windows child_process does NOT kill
+ * descendants on parent exit, so orphaned FFmpeg/Icecast would keep the audio
+ * device and ports locked after the app closes.
+ */
+function treeKill(pid) {
+  if (!pid) return;
+  if (process.platform === 'win32') {
+    spawn('taskkill', ['/pid', String(pid), '/T', '/F'], { stdio: 'ignore', windowsHide: true });
+  } else {
+    try { process.kill(pid, 'SIGTERM'); } catch { /* already gone */ }
+  }
+}
+
+/**
+ * Startup sweep after a crash / End-Task (Windows never reaps children of a
+ * dead parent): stale ffmpeg/icecast keep the audio device and ports locked.
+ * Matched by EXECUTABLE PATH under a LANStreamer vendor dir — never by
+ * process name, so the user's own FFmpeg/VoiceMeeter processes are untouchable.
+ */
+function sweepOrphanChildren() {
+  if (process.platform !== 'win32') return 0;
+  try {
+    // No nested double quotes: cmd.exe strips the outer pair, and an inner
+    // pair would terminate the -Command string early (the smoke run hit
+    // "positional parameter cannot be found that accepts argument 'or'").
+    // Single quotes only inside; filter via Where-Object instead of -Filter.
+    const out = execSync(
+      `powershell -NoProfile -Command "Get-CimInstance Win32_Process | ` +
+      `Where-Object { $_.Name -eq 'ffmpeg.exe' -or $_.Name -eq 'icecast.exe' } | ` +
+      `Where-Object { $_.ExecutablePath -like '*LANStreamer*vendor*' } | ` +
+      `ForEach-Object { Stop-Process -Id $_.ProcessId -Force -ErrorAction SilentlyContinue; $_.ProcessId }"`,
+      { encoding: 'utf8', windowsHide: true, timeout: 15000 }
+    ).trim();
+    const pids = out.split(/\s+/).filter(Boolean);
+    if (pids.length) console.log(`[electron] startup sweep killed ${pids.length} orphaned vendor process(es): ${pids.join(', ')}`);
+    return pids.length;
+  } catch {
+    return 0; // sweep is best-effort — never block startup on it
+  }
+}
+
+async function shutdownBackend() {
+  const streamingService = (await import('../src/services/StreamingService.js')).default;
+  const icecastService = (await import('../src/services/IcecastService.js')).default;
+
+  try {
+    await streamingService.stopAllStreams();
+  } catch (err) {
+    console.error('[electron] stopAllStreams failed:', err.message);
+  }
+
+  // Belt-and-braces: tree-kill anything the services left behind
+  // (activeStreams entries carry ffmpegProcess — entry.process was a typo
+  // that made this safety net a no-op)
+  for (const entry of Object.values(streamingService.activeStreams || {})) {
+    const proc = entry?.ffmpegProcess;
+    if (proc?.pid && proc.exitCode === null) treeKill(proc.pid);
+  }
+  if (icecastService.process?.pid && !icecastService.process.killed) {
+    try { await icecastService.stop(false); } catch { /* ignore */ }
+    // stop() NULLS the process reference on success — re-read defensively
+    // (a bare .killed here crashed the smoke shutdown: "reading 'killed' of null")
+    if (icecastService.process?.pid && !icecastService.process.killed) {
+      treeKill(icecastService.process.pid);
+    }
+  }
+
+  if (serverHandle) {
+    // Streams + icecast were already stopped above (ordered, with belt-and-
+    // braces tree-kills) — skip the duplicate pass inside shutdown.
+    await serverHandle.shutdown({ timeoutMs: 4000, stopStreams: false });
+    serverHandle = null;
+  }
+
+  const telemetry = (await import('../src/services/TelemetryService.js')).default;
+  await telemetry.shutdown();
+}
+
+// ---------------------------------------------------------------------------
+// Window + tray
+// ---------------------------------------------------------------------------
+
+function getIcon() {
+  const img = nativeImage.createFromPath(path.join(__dirname, '..', 'public', 'assets', 'favicon.png'));
+  if (img.isEmpty()) console.warn('[electron] icon image is empty/missing — tray may be invisible');
+  return img;
+}
+
+function createWindow() {
+  mainWindow = new BrowserWindow({
+    width: 1280,
+    height: 800,
+    minWidth: 1024,
+    minHeight: 600,
+    icon: getIcon(),
+    backgroundColor: '#0f0c29',
+    autoHideMenuBar: true,
+    show: false,
+    webPreferences: {
+      contextIsolation: true,
+      nodeIntegration: false,
+      preload: path.join(__dirname, 'preload.js'), // window.LSApp — minimize/shutdown bridge
+    },
+  });
+
+  mainWindow.once('ready-to-show', () => mainWindow.show());
+
+  // A dead renderer with hide-on-close + tray-only quit = white window with no
+  // recovery. Reload instead.
+  mainWindow.webContents.on('render-process-gone', (_e, details) => {
+    if (details.reason !== 'clean-exit') {
+      console.error('[electron] renderer gone:', details.reason, '— reloading');
+      mainWindow.reload();
+    }
+  });
+
+  // Links like "Listen to Streams" (and any external URL) open in the user's
+  // system browser, not a child Electron window. The listener page is meant
+  // for phones/other machines anyway.
+  mainWindow.webContents.setWindowOpenHandler(({ url }) => {
+    if (url.startsWith('http://') || url.startsWith('https://')) {
+      shell.openExternal(url);
+    }
+    return { action: 'deny' };
+  });
+  mainWindow.webContents.on('will-navigate', (e, url) => {
+    // Keep in-app navigation confined to our own dashboard
+    if (!url.startsWith(`http://localhost:`)) {
+      e.preventDefault();
+      shell.openExternal(url);
+    }
+  });
+
+  mainWindow.loadURL(`http://localhost:${serverHandle.port}/dashboard`);
+
+  // Alt-accessible menu with a real Exit — insurance for the worst case of an
+  // invisible tray icon + hide-on-close, which would otherwise be unexitable.
+  Menu.setApplicationMenu(Menu.buildFromTemplate([
+    { label: 'File', submenu: [{ label: 'Exit', click: () => { isQuitting = true; shutdownBackend().finally(() => app.quit()); } }] },
+    { role: 'editMenu' },
+    { role: 'viewMenu' },
+  ]));
+
+  // Tray mode: closing the window must NOT stop streams for LAN listeners.
+  // Real exit only happens through the tray's "Stop All & Quit".
+  mainWindow.on('close', (e) => {
+    if (!isQuitting) {
+      e.preventDefault();
+      mainWindow.hide();
+    }
+  });
+
+  mainWindow.on('closed', () => { mainWindow = null; });
+}
+
+async function createTray() {
+  const telemetry = (await import('../src/services/TelemetryService.js')).default;
+  const telemetryItem = {
+    label: `Telemetry: ${telemetry.getConsentState().enabled ? 'On' : 'Off'}`,
+    click: async () => {
+      const state = telemetry.getConsentState();
+      telemetry.setConsented(!state.enabled);
+      createTray().catch(err => console.error('[electron] tray refresh failed:', err.message));
+    },
+  };
+
+  // Tray is a native handle — destroy the old one before reassigning, or every
+  // telemetry toggle leaks it (and stacks ghost icons on some Windows builds).
+  if (tray) { try { tray.destroy(); } catch { /* already gone */ } tray = null; }
+  tray = new Tray(getIcon());
+  tray.setToolTip('LANStreamer');
+
+  const menu = Menu.buildFromTemplate([
+    { label: 'Show Dashboard', click: () => { if (mainWindow) { mainWindow.show(); mainWindow.focus(); } } },
+    { type: 'separator' },
+    { label: 'Telemetry', submenu: [telemetryItem] },
+    { type: 'separator' },
+    {
+      label: 'Stop All & Quit',
+      click: async () => {
+        isQuitting = true;
+        await shutdownBackend();
+        app.quit();
+      },
+    },
+  ]);
+
+  tray.setContextMenu(menu);
+  tray.on('double-click', () => { if (mainWindow) mainWindow.show(); });
+}
+
+// ---------------------------------------------------------------------------
+// App control from the dashboard header (window.LSApp via preload.js)
+// ---------------------------------------------------------------------------
+
+ipcMain.on('ls:minimize', () => {
+  if (!mainWindow || isQuitting) return;
+  mainWindow.hide();
+  // Windows balloon: self-expiring toast from the tray — tells the operator
+  // the app is alive in the tray and listeners keep their audio.
+  try {
+    if (tray && typeof tray.displayBalloon === 'function') {
+      tray.displayBalloon({
+        iconType: 'info',
+        title: 'LANStreamer is still running',
+        content: 'It lives in the tray now — streams keep playing for your listeners. Double-click the tray icon to reopen the dashboard.'
+      });
+    }
+  } catch { /* balloons are best-effort (older Windows may suppress them) */ }
+});
+
+ipcMain.on('ls:shutdown', async () => {
+  if (!mainWindow || isQuitting) return;
+  // cheap read: any live stream means listeners lose audio on shutdown
+  // (dynamic import — module already loaded in-process, resolves instantly)
+  let running = false;
+  try {
+    const streamingService = (await import('../src/services/StreamingService.js')).default;
+    running = Object.values(streamingService.activeStreams || {}).some(s => s.status === 'running');
+  } catch { /* default to the calmer wording */ }
+
+  const { response } = await dialog.showMessageBox(mainWindow, {
+    type: 'warning',
+    title: 'Shut down LANStreamer?',
+    message: 'Shut down LANStreamer?',
+    detail: running
+      ? 'Streams are LIVE — shutting down stops them all and every listener loses audio. The dashboard, streams and Icecast all close.'
+      : 'The dashboard, streams and Icecast all close. (No streams are live right now.)',
+    buttons: ['Cancel', 'Shut down'],
+    defaultId: 0,
+    cancelId: 0,
+    noLink: true,
+  });
+  if (response !== 1) return;
+
+  isQuitting = true;
+  await shutdownBackend().catch(err => console.error('[electron] shutdown error:', err.message));
+  app.quit();
+});
+
+/**
+ * First-run telemetry NOTICE (owner decision 2026-11-01: opt-out — telemetry
+ * is ON unless explicitly turned off). Shows once, states plainly what is
+ * collected, and offers a one-click "Turn off". Change anytime: dashboard
+ * Admin account card switch, or tray icon → Telemetry → On/Off.
+ *
+ * FIX (2026-11-01, Jerry's install report): this check RACES the telemetry
+ * service's async init — getKey() read before _loadState finishes returns
+ * null and the prompt silently never shows (and never retries). init() is
+ * idempotent, so await it here first: the prompt is guaranteed to see the
+ * real key + consent state.
+ */
+async function maybeAskTelemetryConsent() {
+  const telemetry = (await import('../src/services/TelemetryService.js')).default;
+  await telemetry.init(); // idempotent — ensures key/consent state is loaded
+  const state = telemetry.getConsentState();
+  if (state.consented !== null || !telemetry.getKey()) return; // decided, or nothing to enable
+
+  const { response } = await dialog.showMessageBox(mainWindow, {
+    type: 'info',
+    title: 'LANStreamer — anonymous usage statistics: ON',
+    message: 'Anonymous usage statistics are ON for this install.',
+    detail: 'LANStreamer is free and open source — no one profits from it. '
+      + 'To keep improving it, this install sends anonymous events '
+      + '(app start/stop, stream started/stopped/failed, app version, OS) to the '
+      + 'maintainer\u2019s PostHog.\n\n'
+      + 'No audio, no stream names, no personal data — and listeners\u2019 phones never send anything.\n\n'
+      + 'Turn it off anytime: the dashboard Admin account card switch, or tray icon \u2192 Telemetry \u2192 On/Off.',
+    buttons: ['OK, keep it on', 'Turn it off'],
+    defaultId: 0,
+    cancelId: 0,
+    noLink: true,
+  });
+
+  telemetry.setConsented(response !== 1); // 0 = keep on (persisted), 1 = off
+  createTray(); // refresh the tray label
+}
+
+// ---------------------------------------------------------------------------
+// App lifecycle
+// ---------------------------------------------------------------------------
+
+const gotLock = app.requestSingleInstanceLock();
+if (!gotLock) {
+  app.quit();
+} else {
+  app.on('second-instance', () => {
+    if (mainWindow) {
+      mainWindow.show();
+      mainWindow.focus();
+    }
+  });
+
+  // Tray mode: closing all windows never quits the app
+  app.on('window-all-closed', (e) => { /* keep running for LAN listeners */ });
+
+  app.whenReady().then(async () => {
+    // Packaged data dir must exist before server code writes config/logs into it
+    if (app.isPackaged) {
+      try { require('node:fs').mkdirSync(process.env.LANSTREAMER_DATA_DIR, { recursive: true }); } catch { /* best effort */ }
+    }
+
+    // Free audio devices/ports held by children of a previous crashed session
+    sweepOrphanChildren();
+
+    try {
+      serverHandle = await listenWithFallback(BASE_PORT);
+    } catch (err) {
+      dialog.showErrorBox('LANStreamer', `Could not start the local server: ${err.message}`);
+      app.quit();
+      return;
+    }
+
+    // Port fallback = a leftover LANStreamer/server almost certainly owns the
+    // base port. Two instances sharing one config cause stream conflicts —
+    // surface it instead of silently running on 3002+.
+    if (serverHandle.port !== BASE_PORT && !SMOKE) {
+      dialog.showMessageBox(null, {
+        type: 'warning',
+        title: 'LANStreamer',
+        message: `LANStreamer started on port ${serverHandle.port} (port ${BASE_PORT} was already in use).`,
+        detail: 'Another LANStreamer server — probably a leftover instance — is likely still running. Two servers sharing one configuration cause stream conflicts and "device busy" errors.\n\nStop the other instance (close its terminal window, or quit the other app from its tray), then relaunch. See the in-app guide (/docs) → "port already in use".',
+        buttons: ['Continue anyway', 'Quit now'],
+        defaultId: 1,
+        noLink: true,
+      }).then(({ response }) => {
+        if (response === 1) { isQuitting = true; shutdownBackend().finally(() => app.quit()); }
+      }).catch(() => { /* dialog never blocks boot */ });
+    }
+
+    const os = require('node:os');
+    const lanIp = Object.values(os.networkInterfaces())
+      .flat()
+      .find(i => i && i.family === 'IPv4' && !i.internal && /^(192\.168|10\.|172\.(1[6-9]|2\d|3[01]))/.test(i.address));
+    console.log(`[electron] server ready on port ${serverHandle.port}`);
+    console.log(`[electron] listener page: http://${lanIp ? lanIp.address : 'localhost'}:${serverHandle.port}/streams`);
+
+    createWindow();
+    createTray().catch(err => console.error('[electron] tray creation failed:', err.message));
+    maybeAskTelemetryConsent().catch(err => console.error('[electron] telemetry prompt failed:', err.message));
+
+    startPowerManagement();
+
+    if (SMOKE) {
+      mainWindow.webContents.once('did-finish-load', () => {
+        console.log('SMOKE_OK');
+        setTimeout(() => {
+          isQuitting = true;
+          shutdownBackend().catch(err => console.error('[electron] smoke shutdown error:', err.message)).finally(() => app.exit(0));
+        }, 1500);
+      });
+    }
+  }).catch(err => {
+    dialog.showErrorBox('LANStreamer', `Startup failed: ${err && err.message}`);
+    app.quit();
+  });
+
+  app.on('before-quit', (e) => {
+    if (!isQuitting) {
+      e.preventDefault();
+      isQuitting = true;
+      shutdownBackend().catch(err => console.error('[electron] shutdown error:', err.message)).finally(() => app.quit());
+    }
+  });
+
+  // One policy for the unexpected in a packaged app (no console to see it in):
+  // surface it, then take the ordered shutdown path instead of orphaning children.
+  const crashPolicy = (label) => (err) => {
+    console.error(`[electron] ${label}:`, err);
+    try {
+      dialog.showErrorBox('LANStreamer', `An unexpected error occurred:\n\n${err && (err.stack || err.message)}\n\nThe app will now shut down.`);
+    } catch { /* dialogs can fail headless */ }
+    isQuitting = true;
+    shutdownBackend().catch(() => {}).finally(() => app.exit(1));
+  };
+  process.on('uncaughtException', crashPolicy('uncaught exception'));
+  // The smoke run surfaced this class separately: async failures reject, they
+  // don't throw — without this handler they surface only as console noise.
+  process.on('unhandledRejection', crashPolicy('unhandled rejection'));
+}
+
+/**
+ * Power edge cases: Windows suspending mid-broadcast kills the stream silently
+ * (the event-killer), and after resume, FFmpeg has usually died on the device.
+ * - While ANY stream is live: block system suspension (audio keeps flowing
+ *   with the display off — 'prevent-app-suspension', not screen-wake).
+ * - On resume: bring back streams that were live before suspend.
+ */
+async function startPowerManagement() {
+  // Module is already loaded (server boots it) — this import resolves instantly
+  const streamingService = (await import('../src/services/StreamingService.js')).default;
+  let blockerId = null;
+  let liveBeforeSuspend = [];
+
+  setInterval(() => {
+    try {
+      const running = (streamingService.getStats().streams || []).filter(s => s.status === 'running').length;
+      if (running > 0 && blockerId === null) {
+        blockerId = powerSaveBlocker.start('prevent-app-suspension');
+        console.log(`[electron] powerSaveBlocker on (${running} live stream${running > 1 ? 's' : ''})`);
+      } else if (running === 0 && blockerId !== null) {
+        powerSaveBlocker.stop(blockerId);
+        blockerId = null;
+        console.log('[electron] powerSaveBlocker off (no live streams)');
+      }
+    } catch { /* stats unavailable during teardown */ }
+  }, 5000).unref?.();
+
+  powerMonitor.on('suspend', () => {
+    try {
+      liveBeforeSuspend = (streamingService.getStats().streams || []).filter(s => s.status === 'running').map(s => s.id);
+      if (liveBeforeSuspend.length) console.log(`[electron] suspend with ${liveBeforeSuspend.length} live stream(s) — will restore on resume`);
+    } catch { liveBeforeSuspend = []; }
+  });
+
+  powerMonitor.on('resume', async () => {
+    if (!liveBeforeSuspend.length) return;
+    const ids = liveBeforeSuspend;
+    liveBeforeSuspend = [];
+    console.log('[electron] resume — restoring streams in 5s:', ids.join(', '));
+    await new Promise(r => setTimeout(r, 5000)); // let devices/network settle
+    for (const id of ids) {
+      try {
+        const current = (streamingService.getStats().streams || []).find(s => s.id === id);
+        if (current && current.status !== 'running') {
+          await streamingService.restartStream(id);
+          console.log(`[electron] restored stream ${id} after resume`);
+        }
+      } catch (err) {
+        console.error(`[electron] could not restore stream ${id} after resume:`, err.message);
+      }
+    }
+  });
+}
diff --git a/electron/preload.js b/electron/preload.js
new file mode 100644
index 0000000..5b8eb42
--- /dev/null
+++ b/electron/preload.js
@@ -0,0 +1,16 @@
+/**
+ * Preload bridge — the ONLY surface the dashboard renderer gets for app
+ * control (contextIsolation stays on, nodeIntegration stays off).
+ *
+ *   window.LSApp.minimize()  → hide to tray (streams keep running) + balloon
+ *   window.LSApp.shutdown()  → confirmation dialog → ordered app shutdown
+ *
+ * Pages served to plain browsers (no preload) see no LSApp and hide the
+ * app-control buttons accordingly.
+ */
+const { contextBridge, ipcRenderer } = require('electron');
+
+contextBridge.exposeInMainWorld('LSApp', {
+  minimize: () => ipcRenderer.send('ls:minimize'),
+  shutdown: () => ipcRenderer.send('ls:shutdown')
+});
diff --git a/env.example b/env.example
new file mode 100644
index 0000000..297e83f
--- /dev/null
+++ b/env.example
@@ -0,0 +1,22 @@
+# LANStreamer environment template.
+# Copy to .env and fill in real values. NEVER commit your real .env.
+
+# --- Admin credentials (CHANGE THESE before any real event) ---
+ADMIN_USERNAME=admin
+ADMIN_PASSWORD=change-me-now
+JWT_SECRET=generate-a-long-random-string
+SESSION_SECRET=generate-another-long-random-string
+
+# --- Server ---
+PORT=3001
+HOST=0.0.0.0
+
+# --- External tools (optional; auto-detected when omitted) ---
+# ICECAST_EXE_PATH=C:\path\to\icecast.exe
+# ICECAST_CONFIG_PATH=C:\path\to\icecast.xml
+
+# --- Telemetry (optional; off unless users consent) ---
+# Get the key from your PostHog project settings. Nothing is sent without
+# per-install consent (first-run prompt; toggle in the tray menu).
+# POSTHOG_KEY=phc_xxxxxxxxxxxxxxxxxxxxxxxx
+# POSTHOG_HOST=https://eu.i.posthog.com
diff --git a/gui-test-screenshots/fix-dashboard.jpg b/gui-test-screenshots/fix-dashboard.jpg
new file mode 100644
index 0000000..c79f7b6
Binary files /dev/null and b/gui-test-screenshots/fix-dashboard.jpg differ
diff --git a/gui-test-screenshots/fix-listener-playing.jpg b/gui-test-screenshots/fix-listener-playing.jpg
new file mode 100644
index 0000000..17d5a5d
Binary files /dev/null and b/gui-test-screenshots/fix-listener-playing.jpg differ
diff --git a/gui-test-screenshots/p1-dashboard-light.jpg b/gui-test-screenshots/p1-dashboard-light.jpg
new file mode 100644
index 0000000..6fc936c
Binary files /dev/null and b/gui-test-screenshots/p1-dashboard-light.jpg differ
diff --git a/gui-test-screenshots/p2-dashboard.jpg b/gui-test-screenshots/p2-dashboard.jpg
new file mode 100644
index 0000000..7dbf0b1
Binary files /dev/null and b/gui-test-screenshots/p2-dashboard.jpg differ
diff --git a/gui-test-screenshots/p3-drawer.jpg b/gui-test-screenshots/p3-drawer.jpg
new file mode 100644
index 0000000..10ccc66
Binary files /dev/null and b/gui-test-screenshots/p3-drawer.jpg differ
diff --git a/gui-test-screenshots/p4-listener-dark.jpg b/gui-test-screenshots/p4-listener-dark.jpg
new file mode 100644
index 0000000..557735e
Binary files /dev/null and b/gui-test-screenshots/p4-listener-dark.jpg differ
diff --git a/gui-test-screenshots/p4-listener-light.jpg b/gui-test-screenshots/p4-listener-light.jpg
new file mode 100644
index 0000000..00086b5
Binary files /dev/null and b/gui-test-screenshots/p4-listener-light.jpg differ
diff --git a/gui-test-screenshots/p4-listener-mobile.jpg b/gui-test-screenshots/p4-listener-mobile.jpg
new file mode 100644
index 0000000..824ad78
Binary files /dev/null and b/gui-test-screenshots/p4-listener-mobile.jpg differ
diff --git a/gui-test-screenshots/probe-drawer-light.jpg b/gui-test-screenshots/probe-drawer-light.jpg
new file mode 100644
index 0000000..7daf79d
Binary files /dev/null and b/gui-test-screenshots/probe-drawer-light.jpg differ
diff --git a/gui-test-screenshots/r3-duplicate-error.jpg b/gui-test-screenshots/r3-duplicate-error.jpg
new file mode 100644
index 0000000..9018bd8
Binary files /dev/null and b/gui-test-screenshots/r3-duplicate-error.jpg differ
diff --git a/gui-test-screenshots/t2-showcase-light.jpg b/gui-test-screenshots/t2-showcase-light.jpg
new file mode 100644
index 0000000..e056dfe
Binary files /dev/null and b/gui-test-screenshots/t2-showcase-light.jpg differ
diff --git a/gui-test-screenshots/t3-after-burst.jpg b/gui-test-screenshots/t3-after-burst.jpg
new file mode 100644
index 0000000..e250b40
Binary files /dev/null and b/gui-test-screenshots/t3-after-burst.jpg differ
diff --git a/gui-test-screenshots/t3-before.jpg b/gui-test-screenshots/t3-before.jpg
new file mode 100644
index 0000000..4995b33
Binary files /dev/null and b/gui-test-screenshots/t3-before.jpg differ
diff --git a/gui-test-screenshots/t4-connecting.jpg b/gui-test-screenshots/t4-connecting.jpg
new file mode 100644
index 0000000..0a8d868
Binary files /dev/null and b/gui-test-screenshots/t4-connecting.jpg differ
diff --git a/gui-test-screenshots/t4-replaced.jpg b/gui-test-screenshots/t4-replaced.jpg
new file mode 100644
index 0000000..694e158
Binary files /dev/null and b/gui-test-screenshots/t4-replaced.jpg differ
diff --git a/gui-test-screenshots/t5-bell-panel-fixed.jpg b/gui-test-screenshots/t5-bell-panel-fixed.jpg
new file mode 100644
index 0000000..04bdfa7
Binary files /dev/null and b/gui-test-screenshots/t5-bell-panel-fixed.jpg differ
diff --git a/gui-test-screenshots/t6-modal-dark.jpg b/gui-test-screenshots/t6-modal-dark.jpg
new file mode 100644
index 0000000..471aa8a
Binary files /dev/null and b/gui-test-screenshots/t6-modal-dark.jpg differ
diff --git a/gui-test-screenshots/t6-modal-light.jpg b/gui-test-screenshots/t6-modal-light.jpg
new file mode 100644
index 0000000..0b6f1aa
Binary files /dev/null and b/gui-test-screenshots/t6-modal-light.jpg differ
diff --git a/package-lock.json b/package-lock.json
index 25f5263..ec541c9 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "lanstreamer-server",
-  "version": "1.2.3",
+  "version": "1.2.4",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "lanstreamer-server",
-      "version": "1.2.3",
+      "version": "1.2.4",
       "license": "ISC",
       "dependencies": {
         "dotenv": "^17.2.1",
@@ -15,17 +15,36 @@
         "jsonwebtoken": "^9.0.2",
         "multer": "^2.0.2",
         "node-fetch": "^3.3.2",
+        "posthog-node": "^5.56.4",
+        "qrcode": "^1.5.4",
         "winston": "^3.17.0",
         "winston-daily-rotate-file": "^5.0.0",
         "xml2js": "^0.6.2"
       },
       "devDependencies": {
+        "@tailwindcss/container-queries": "^0.1.1",
+        "@tailwindcss/forms": "^0.5.11",
         "@types/jest": "^30.0.0",
-        "browser-sync": "^3.0.4",
+        "electron": "^45.0.0",
+        "electron-builder": "^26.18.0",
         "jest": "^30.2.0",
         "nodemon": "^2.0.0",
         "puppeteer": "^24.0.0",
-        "supertest": "^7.2.2"
+        "supertest": "^7.2.2",
+        "tailwindcss": "^3.4.19"
+      }
+    },
+    "node_modules/@alloc/quick-lru": {
+      "version": "5.3.0",
+      "resolved": "https://registry.npmjs.org/@alloc/quick-lru/-/quick-lru-5.3.0.tgz",
+      "integrity": "sha512-U4+70Pc5ZS9osnCBCE5Jha/ciHM+Yp+CNMNC/7HvYbNRk1Ldd+f7qO65W5qfhu/TCv+/ozljlXXe9Nj8419DMA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=10"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
       }
     },
     "node_modules/@babel/code-frame": {
@@ -617,2585 +636,4074 @@
         "kuler": "^2.0.0"
       }
     },
-    "node_modules/@emnapi/core": {
-      "version": "1.8.1",
-      "resolved": "https://registry.npmjs.org/@emnapi/core/-/core-1.8.1.tgz",
-      "integrity": "sha512-AvT9QFpxK0Zd8J0jopedNm+w/2fIzvtPKPjqyw9jwvBaReTTqPBk9Hixaz7KbjimP+QNz605/XnjFcDAL2pqBg==",
+    "node_modules/@electron-internal/extract-zip": {
+      "version": "1.0.5",
+      "resolved": "https://registry.npmjs.org/@electron-internal/extract-zip/-/extract-zip-1.0.5.tgz",
+      "integrity": "sha512-+bqFCP98pLI0Tt0XQo1TmlXtwjWchISndDOxCkEcIuUgXWpBnLyRI+2DU+mesvnMMX6L1XDqYNA0lXNDHd/yiA==",
       "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "dependencies": {
-        "@emnapi/wasi-threads": "1.1.0",
-        "tslib": "^2.4.0"
+      "license": "BSD-2-Clause",
+      "engines": {
+        "node": ">=22.12.0"
       }
     },
-    "node_modules/@emnapi/runtime": {
-      "version": "1.8.1",
-      "resolved": "https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.8.1.tgz",
-      "integrity": "sha512-mehfKSMWjjNol8659Z8KxEMrdSJDDot5SXMq00dM8BN4o+CLNXQ0xH2V7EchNHV4RmbZLmmPdEaXZc5H2FXmDg==",
+    "node_modules/@electron/asar": {
+      "version": "3.4.1",
+      "resolved": "https://registry.npmjs.org/@electron/asar/-/asar-3.4.1.tgz",
+      "integrity": "sha512-i4/rNPRS84t0vSRa2HorerGRXWyF4vThfHesw0dmcWHp+cspK743UanA0suA5Q5y8kzY2y6YKrvbIUn69BCAiA==",
       "dev": true,
       "license": "MIT",
-      "optional": true,
       "dependencies": {
-        "tslib": "^2.4.0"
+        "commander": "^5.0.0",
+        "glob": "^7.1.6",
+        "minimatch": "^3.0.4"
+      },
+      "bin": {
+        "asar": "bin/asar.js"
+      },
+      "engines": {
+        "node": ">=10.12.0"
       }
     },
-    "node_modules/@emnapi/wasi-threads": {
-      "version": "1.1.0",
-      "resolved": "https://registry.npmjs.org/@emnapi/wasi-threads/-/wasi-threads-1.1.0.tgz",
-      "integrity": "sha512-WI0DdZ8xFSbgMjR1sFsKABJ/C5OnRrjT06JXbZKexJGrDuPTzZdDYfFlsgcCXCyf+suG5QU2e/y1Wo2V/OapLQ==",
+    "node_modules/@electron/asar/node_modules/commander": {
+      "version": "5.1.0",
+      "resolved": "https://registry.npmjs.org/commander/-/commander-5.1.0.tgz",
+      "integrity": "sha512-P0CysNDQ7rtVw4QIQtm+MRxV66vKFSvlsQvGYXZWR3qFU0jlMKHZZZgw8e+8DSah4UDKMqnknRDQz+xuQXQ/Zg==",
       "dev": true,
       "license": "MIT",
-      "optional": true,
-      "dependencies": {
-        "tslib": "^2.4.0"
+      "engines": {
+        "node": ">= 6"
       }
     },
-    "node_modules/@isaacs/cliui": {
-      "version": "8.0.2",
-      "resolved": "https://registry.npmjs.org/@isaacs/cliui/-/cliui-8.0.2.tgz",
-      "integrity": "sha512-O8jcjabXaleOG9DQ0+ARXWZBTfnP4WNAqzuiJK7ll44AmxGKv/J2M4TPjxjY3znBCfvBXFzucm1twdyFybFqEA==",
+    "node_modules/@electron/asar/node_modules/glob": {
+      "version": "7.2.3",
+      "resolved": "https://registry.npmjs.org/glob/-/glob-7.2.3.tgz",
+      "integrity": "sha512-nFR0zLpU2YCaRxwoCJvL6UvCH2JFyFVIvwTLsIf21AuHlMskA1hhTdk+LlYJtOlYt9v6dvszD2BGRqBL+iQK9Q==",
+      "deprecated": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me",
       "dev": true,
       "license": "ISC",
       "dependencies": {
-        "string-width": "^5.1.2",
-        "string-width-cjs": "npm:string-width@^4.2.0",
-        "strip-ansi": "^7.0.1",
-        "strip-ansi-cjs": "npm:strip-ansi@^6.0.1",
-        "wrap-ansi": "^8.1.0",
-        "wrap-ansi-cjs": "npm:wrap-ansi@^7.0.0"
+        "fs.realpath": "^1.0.0",
+        "inflight": "^1.0.4",
+        "inherits": "2",
+        "minimatch": "^3.1.1",
+        "once": "^1.3.0",
+        "path-is-absolute": "^1.0.0"
       },
       "engines": {
-        "node": ">=12"
+        "node": "*"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/isaacs"
       }
     },
-    "node_modules/@isaacs/cliui/node_modules/ansi-regex": {
-      "version": "6.2.2",
-      "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-6.2.2.tgz",
-      "integrity": "sha512-Bq3SmSpyFHaWjPk8If9yc6svM8c56dB5BAtW4Qbw5jHTwwXXcTLoRMkpDJp6VL0XzlWaCHTXrkFURMYmD0sLqg==",
+    "node_modules/@electron/fuses": {
+      "version": "1.8.0",
+      "resolved": "https://registry.npmjs.org/@electron/fuses/-/fuses-1.8.0.tgz",
+      "integrity": "sha512-zx0EIq78WlY/lBb1uXlziZmDZI4ubcCXIMJ4uGjXzZW0nS19TjSPeXPAjzzTmKQlJUZm0SbmZhPKP7tuQ1SsEw==",
       "dev": true,
       "license": "MIT",
-      "engines": {
-        "node": ">=12"
+      "dependencies": {
+        "chalk": "^4.1.1",
+        "fs-extra": "^9.0.1",
+        "minimist": "^1.2.5"
       },
-      "funding": {
-        "url": "https://github.com/chalk/ansi-regex?sponsor=1"
+      "bin": {
+        "electron-fuses": "dist/bin.js"
       }
     },
-    "node_modules/@isaacs/cliui/node_modules/ansi-styles": {
-      "version": "6.2.3",
-      "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-6.2.3.tgz",
-      "integrity": "sha512-4Dj6M28JB+oAH8kFkTLUo+a2jwOFkuqb3yucU0CANcRRUbxS0cP0nZYCGjcc3BNXwRIsUVmDGgzawme7zvJHvg==",
+    "node_modules/@electron/fuses/node_modules/fs-extra": {
+      "version": "9.1.0",
+      "resolved": "https://registry.npmjs.org/fs-extra/-/fs-extra-9.1.0.tgz",
+      "integrity": "sha512-hcg3ZmepS30/7BSFqRvoo3DOMQu7IjqxO5nCDt+zM9XWjb33Wg7ziNT+Qvqbuc3+gWpzO02JubVyk2G4Zvo1OQ==",
       "dev": true,
       "license": "MIT",
-      "engines": {
-        "node": ">=12"
+      "dependencies": {
+        "at-least-node": "^1.0.0",
+        "graceful-fs": "^4.2.0",
+        "jsonfile": "^6.0.1",
+        "universalify": "^2.0.0"
       },
-      "funding": {
-        "url": "https://github.com/chalk/ansi-styles?sponsor=1"
+      "engines": {
+        "node": ">=10"
       }
     },
-    "node_modules/@isaacs/cliui/node_modules/emoji-regex": {
-      "version": "9.2.2",
-      "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-9.2.2.tgz",
-      "integrity": "sha512-L18DaJsXSUk2+42pv8mLs5jJT2hqFkFE4j21wOmgbUqsZ2hL72NsUU785g9RXgo3s0ZNgVl42TiHp3ZtOv/Vyg==",
-      "dev": true,
-      "license": "MIT"
-    },
-    "node_modules/@isaacs/cliui/node_modules/string-width": {
-      "version": "5.1.2",
-      "resolved": "https://registry.npmjs.org/string-width/-/string-width-5.1.2.tgz",
-      "integrity": "sha512-HnLOCR3vjcY8beoNLtcjZ5/nxn2afmME6lhrDrebokqMap+XbeW8n9TXpPDOqdGK5qcI3oT0GKTW6wC7EMiVqA==",
+    "node_modules/@electron/get": {
+      "version": "5.1.0",
+      "resolved": "https://registry.npmjs.org/@electron/get/-/get-5.1.0.tgz",
+      "integrity": "sha512-3kSBtG8ObcTVfXanm5vVJ6UnBLEVmVsRk1M+vGqCuMBV+XLCbJYuWQful+yIy0GQDsSlK0kHEriEHn7SPk4EnA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "eastasianwidth": "^0.2.0",
-        "emoji-regex": "^9.2.2",
-        "strip-ansi": "^7.0.1"
+        "debug": "^4.1.1",
+        "env-paths": "^3.0.0",
+        "graceful-fs": "^4.2.11",
+        "progress": "^2.0.3",
+        "semver": "^7.6.3",
+        "sumchecker": "^3.0.1"
       },
       "engines": {
-        "node": ">=12"
+        "node": ">=22.12.0"
       },
-      "funding": {
-        "url": "https://github.com/sponsors/sindresorhus"
+      "optionalDependencies": {
+        "undici": "^7.24.4"
       }
     },
-    "node_modules/@isaacs/cliui/node_modules/strip-ansi": {
-      "version": "7.1.2",
-      "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-7.1.2.tgz",
-      "integrity": "sha512-gmBGslpoQJtgnMAvOVqGZpEz9dyoKTCzy2nfz/n8aIFhN/jCE/rCmcxabB6jOOHV+0WNnylOxaxBQPSvcWklhA==",
+    "node_modules/@electron/get/node_modules/debug": {
+      "version": "4.4.3",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
+      "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "ansi-regex": "^6.0.1"
+        "ms": "^2.1.3"
       },
       "engines": {
-        "node": ">=12"
+        "node": ">=6.0"
       },
-      "funding": {
-        "url": "https://github.com/chalk/strip-ansi?sponsor=1"
+      "peerDependenciesMeta": {
+        "supports-color": {
+          "optional": true
+        }
       }
     },
-    "node_modules/@isaacs/cliui/node_modules/wrap-ansi": {
-      "version": "8.1.0",
-      "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-8.1.0.tgz",
-      "integrity": "sha512-si7QWI6zUMq56bESFvagtmzMdGOtoxfR+Sez11Mobfc7tm+VkUckk9bW2UeffTGVUbOksxmSw0AA2gs8g71NCQ==",
+    "node_modules/@electron/get/node_modules/env-paths": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/env-paths/-/env-paths-3.0.0.tgz",
+      "integrity": "sha512-dtJUTepzMW3Lm/NPxRf3wP4642UWhjL2sQxc+ym2YMj1m/H2zDNQOlezafzkHwn6sMstjHTwG6iQQsctDW/b1A==",
       "dev": true,
       "license": "MIT",
-      "dependencies": {
-        "ansi-styles": "^6.1.0",
-        "string-width": "^5.0.1",
-        "strip-ansi": "^7.0.1"
-      },
       "engines": {
-        "node": ">=12"
+        "node": "^12.20.0 || ^14.13.1 || >=16.0.0"
       },
       "funding": {
-        "url": "https://github.com/chalk/wrap-ansi?sponsor=1"
+        "url": "https://github.com/sponsors/sindresorhus"
       }
     },
-    "node_modules/@istanbuljs/load-nyc-config": {
-      "version": "1.1.0",
-      "resolved": "https://registry.npmjs.org/@istanbuljs/load-nyc-config/-/load-nyc-config-1.1.0.tgz",
-      "integrity": "sha512-VjeHSlIzpv/NyD3N0YuHfXOPDIixcA1q2ZV98wsMqcYlPmv2n3Yb2lYP9XMElnaFVXg5A7YLTeLu6V84uQDjmQ==",
+    "node_modules/@electron/get/node_modules/semver": {
+      "version": "7.8.5",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.8.5.tgz",
+      "integrity": "sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA==",
       "dev": true,
       "license": "ISC",
-      "dependencies": {
-        "camelcase": "^5.3.1",
-        "find-up": "^4.1.0",
-        "get-package-type": "^0.1.0",
-        "js-yaml": "^3.13.1",
-        "resolve-from": "^5.0.0"
+      "bin": {
+        "semver": "bin/semver.js"
       },
       "engines": {
-        "node": ">=8"
+        "node": ">=10"
       }
     },
-    "node_modules/@istanbuljs/load-nyc-config/node_modules/argparse": {
-      "version": "1.0.10",
-      "resolved": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz",
-      "integrity": "sha512-o5Roy6tNG4SL/FOkCAN6RzjiakZS25RLYFrcMttJqbdd8BWrnA+fGz57iN5Pb06pvBGvl5gQ0B48dJlslXvoTg==",
+    "node_modules/@electron/notarize": {
+      "version": "2.5.0",
+      "resolved": "https://registry.npmjs.org/@electron/notarize/-/notarize-2.5.0.tgz",
+      "integrity": "sha512-jNT8nwH1f9X5GEITXaQ8IF/KdskvIkOFfB2CvwumsveVidzpSc+mvhhTMdAGSYF3O+Nq49lJ7y+ssODRXu06+A==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "sprintf-js": "~1.0.2"
+        "debug": "^4.1.1",
+        "fs-extra": "^9.0.1",
+        "promise-retry": "^2.0.1"
+      },
+      "engines": {
+        "node": ">= 10.0.0"
       }
     },
-    "node_modules/@istanbuljs/load-nyc-config/node_modules/js-yaml": {
-      "version": "3.14.2",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.2.tgz",
-      "integrity": "sha512-PMSmkqxr106Xa156c2M265Z+FTrPl+oxd/rgOQy2tijQeK5TxQ43psO1ZCwhVOSdnn+RzkzlRz/eY4BgJBYVpg==",
+    "node_modules/@electron/notarize/node_modules/debug": {
+      "version": "4.4.3",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
+      "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "argparse": "^1.0.7",
-        "esprima": "^4.0.0"
+        "ms": "^2.1.3"
       },
-      "bin": {
-        "js-yaml": "bin/js-yaml.js"
+      "engines": {
+        "node": ">=6.0"
+      },
+      "peerDependenciesMeta": {
+        "supports-color": {
+          "optional": true
+        }
       }
     },
-    "node_modules/@istanbuljs/load-nyc-config/node_modules/resolve-from": {
-      "version": "5.0.0",
-      "resolved": "https://registry.npmjs.org/resolve-from/-/resolve-from-5.0.0.tgz",
-      "integrity": "sha512-qYg9KP24dD5qka9J47d0aVky0N+b4fTU89LN9iDnjB5waksiC49rvMB0PrUJQGoTmH50XPiqOvAjDfaijGxYZw==",
+    "node_modules/@electron/notarize/node_modules/fs-extra": {
+      "version": "9.1.0",
+      "resolved": "https://registry.npmjs.org/fs-extra/-/fs-extra-9.1.0.tgz",
+      "integrity": "sha512-hcg3ZmepS30/7BSFqRvoo3DOMQu7IjqxO5nCDt+zM9XWjb33Wg7ziNT+Qvqbuc3+gWpzO02JubVyk2G4Zvo1OQ==",
       "dev": true,
       "license": "MIT",
+      "dependencies": {
+        "at-least-node": "^1.0.0",
+        "graceful-fs": "^4.2.0",
+        "jsonfile": "^6.0.1",
+        "universalify": "^2.0.0"
+      },
       "engines": {
-        "node": ">=8"
+        "node": ">=10"
       }
     },
-    "node_modules/@istanbuljs/schema": {
-      "version": "0.1.3",
-      "resolved": "https://registry.npmjs.org/@istanbuljs/schema/-/schema-0.1.3.tgz",
-      "integrity": "sha512-ZXRY4jNvVgSVQ8DL3LTcakaAtXwTVUxE81hslsyD2AtoXW/wVob10HkOJ1X/pAlcI7D+2YoZKg5do8G/w6RYgA==",
+    "node_modules/@electron/osx-sign": {
+      "version": "1.3.3",
+      "resolved": "https://registry.npmjs.org/@electron/osx-sign/-/osx-sign-1.3.3.tgz",
+      "integrity": "sha512-KZ8mhXvWv2rIEgMbWZ4y33bDHyUKMXnx4M0sTyPNK/vcB81ImdeY9Ggdqy0SWbMDgmbqyQ+phgejh6V3R2QuSg==",
+      "dev": true,
+      "license": "BSD-2-Clause",
+      "dependencies": {
+        "compare-version": "^0.1.2",
+        "debug": "^4.3.4",
+        "fs-extra": "^10.0.0",
+        "isbinaryfile": "^4.0.8",
+        "minimist": "^1.2.6",
+        "plist": "^3.0.5"
+      },
+      "bin": {
+        "electron-osx-flat": "bin/electron-osx-flat.js",
+        "electron-osx-sign": "bin/electron-osx-sign.js"
+      },
+      "engines": {
+        "node": ">=12.0.0"
+      }
+    },
+    "node_modules/@electron/osx-sign/node_modules/debug": {
+      "version": "4.4.3",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
+      "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
       "dev": true,
       "license": "MIT",
+      "dependencies": {
+        "ms": "^2.1.3"
+      },
       "engines": {
-        "node": ">=8"
+        "node": ">=6.0"
+      },
+      "peerDependenciesMeta": {
+        "supports-color": {
+          "optional": true
+        }
       }
     },
-    "node_modules/@jest/console": {
-      "version": "30.2.0",
-      "resolved": "https://registry.npmjs.org/@jest/console/-/console-30.2.0.tgz",
-      "integrity": "sha512-+O1ifRjkvYIkBqASKWgLxrpEhQAAE7hY77ALLUufSk5717KfOShg6IbqLmdsLMPdUiFvA2kTs0R7YZy+l0IzZQ==",
+    "node_modules/@electron/osx-sign/node_modules/fs-extra": {
+      "version": "10.1.0",
+      "resolved": "https://registry.npmjs.org/fs-extra/-/fs-extra-10.1.0.tgz",
+      "integrity": "sha512-oRXApq54ETRj4eMiFzGnHWGy+zo5raudjuxN0b8H7s/RU2oW0Wvsx9O0ACRN/kRq9E8Vu/ReskGB5o3ji+FzHQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@jest/types": "30.2.0",
-        "@types/node": "*",
-        "chalk": "^4.1.2",
-        "jest-message-util": "30.2.0",
-        "jest-util": "30.2.0",
-        "slash": "^3.0.0"
+        "graceful-fs": "^4.2.0",
+        "jsonfile": "^6.0.1",
+        "universalify": "^2.0.0"
       },
       "engines": {
-        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
+        "node": ">=12"
       }
     },
-    "node_modules/@jest/core": {
-      "version": "30.2.0",
-      "resolved": "https://registry.npmjs.org/@jest/core/-/core-30.2.0.tgz",
-      "integrity": "sha512-03W6IhuhjqTlpzh/ojut/pDB2LPRygyWX8ExpgHtQA8H/3K7+1vKmcINx5UzeOX1se6YEsBsOHQ1CRzf3fOwTQ==",
+    "node_modules/@electron/osx-sign/node_modules/isbinaryfile": {
+      "version": "4.0.10",
+      "resolved": "https://registry.npmjs.org/isbinaryfile/-/isbinaryfile-4.0.10.tgz",
+      "integrity": "sha512-iHrqe5shvBUcFbmZq9zOQHBoeOhZJu6RQGrDpBgenUm/Am+F3JM2MgQj+rK3Z601fzrL5gLZWtAPH2OBaSVcyw==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">= 8.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/gjtorikian/"
+      }
+    },
+    "node_modules/@electron/rebuild": {
+      "version": "4.2.1",
+      "resolved": "https://registry.npmjs.org/@electron/rebuild/-/rebuild-4.2.1.tgz",
+      "integrity": "sha512-IS4pG3BysRrCLJ8xTAfvg+IQDbiUoAzdJy2SfjcYKnLDy5DpCdjnPdhS5Zf5UMfrkB24xu0KC+TqcOxg+eG+6w==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@jest/console": "30.2.0",
-        "@jest/pattern": "30.0.1",
-        "@jest/reporters": "30.2.0",
-        "@jest/test-result": "30.2.0",
-        "@jest/transform": "30.2.0",
-        "@jest/types": "30.2.0",
-        "@types/node": "*",
-        "ansi-escapes": "^4.3.2",
-        "chalk": "^4.1.2",
-        "ci-info": "^4.2.0",
-        "exit-x": "^0.2.2",
-        "graceful-fs": "^4.2.11",
-        "jest-changed-files": "30.2.0",
-        "jest-config": "30.2.0",
-        "jest-haste-map": "30.2.0",
-        "jest-message-util": "30.2.0",
-        "jest-regex-util": "30.0.1",
-        "jest-resolve": "30.2.0",
-        "jest-resolve-dependencies": "30.2.0",
-        "jest-runner": "30.2.0",
-        "jest-runtime": "30.2.0",
-        "jest-snapshot": "30.2.0",
-        "jest-util": "30.2.0",
-        "jest-validate": "30.2.0",
-        "jest-watcher": "30.2.0",
-        "micromatch": "^4.0.8",
-        "pretty-format": "30.2.0",
-        "slash": "^3.0.0"
-      },
-      "engines": {
-        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
+        "@malept/cross-spawn-promise": "^2.0.0",
+        "debug": "^4.1.1",
+        "node-abi": "^4.2.0",
+        "node-api-version": "^0.2.1",
+        "node-gyp": "^12.2.0",
+        "read-binary-file-arch": "^1.0.6"
       },
-      "peerDependencies": {
-        "node-notifier": "^8.0.1 || ^9.0.0 || ^10.0.0"
+      "bin": {
+        "electron-rebuild": "lib/cli.js"
       },
-      "peerDependenciesMeta": {
-        "node-notifier": {
-          "optional": true
-        }
-      }
-    },
-    "node_modules/@jest/diff-sequences": {
-      "version": "30.0.1",
-      "resolved": "https://registry.npmjs.org/@jest/diff-sequences/-/diff-sequences-30.0.1.tgz",
-      "integrity": "sha512-n5H8QLDJ47QqbCNn5SuFjCRDrOLEZ0h8vAHCK5RL9Ls7Xa8AQLa/YxAc9UjFqoEDM48muwtBGjtMY5cr0PLDCw==",
-      "dev": true,
-      "license": "MIT",
       "engines": {
-        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
+        "node": ">=22.12.0"
       }
     },
-    "node_modules/@jest/environment": {
-      "version": "30.2.0",
-      "resolved": "https://registry.npmjs.org/@jest/environment/-/environment-30.2.0.tgz",
-      "integrity": "sha512-/QPTL7OBJQ5ac09UDRa3EQes4gt1FTEG/8jZ/4v5IVzx+Cv7dLxlVIvfvSVRiiX2drWyXeBjkMSR8hvOWSog5g==",
+    "node_modules/@electron/rebuild/node_modules/debug": {
+      "version": "4.4.3",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
+      "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@jest/fake-timers": "30.2.0",
-        "@jest/types": "30.2.0",
-        "@types/node": "*",
-        "jest-mock": "30.2.0"
+        "ms": "^2.1.3"
       },
       "engines": {
-        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
+        "node": ">=6.0"
+      },
+      "peerDependenciesMeta": {
+        "supports-color": {
+          "optional": true
+        }
       }
     },
-    "node_modules/@jest/expect": {
-      "version": "30.2.0",
-      "resolved": "https://registry.npmjs.org/@jest/expect/-/expect-30.2.0.tgz",
-      "integrity": "sha512-V9yxQK5erfzx99Sf+7LbhBwNWEZ9eZay8qQ9+JSC0TrMR1pMDHLMY+BnVPacWU6Jamrh252/IKo4F1Xn/zfiqA==",
+    "node_modules/@electron/universal": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/@electron/universal/-/universal-2.0.3.tgz",
+      "integrity": "sha512-Wn9sPYIVFRFl5HmwMJkARCCf7rqK/EurkfQ/rJZ14mHP3iYTjZSIOSVonEAnhWeAXwtw7zOekGRlc6yTtZ0t+g==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "expect": "30.2.0",
-        "jest-snapshot": "30.2.0"
+        "@electron/asar": "^3.3.1",
+        "@malept/cross-spawn-promise": "^2.0.0",
+        "debug": "^4.3.1",
+        "dir-compare": "^4.2.0",
+        "fs-extra": "^11.1.1",
+        "minimatch": "^9.0.3",
+        "plist": "^3.1.0"
       },
       "engines": {
-        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
+        "node": ">=16.4"
       }
     },
-    "node_modules/@jest/expect-utils": {
-      "version": "30.2.0",
-      "resolved": "https://registry.npmjs.org/@jest/expect-utils/-/expect-utils-30.2.0.tgz",
-      "integrity": "sha512-1JnRfhqpD8HGpOmQp180Fo9Zt69zNtC+9lR+kT7NVL05tNXIi+QC8Csz7lfidMoVLPD3FnOtcmp0CEFnxExGEA==",
+    "node_modules/@electron/universal/node_modules/brace-expansion": {
+      "version": "2.1.7",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.7.tgz",
+      "integrity": "sha512-uZbew1NqdmPDTMJ8ah1y+b+9QEJrfkXFk3RcTQw3X0jW/xRUvFKsg1CfQdSYGdTbXZWExtU3J3ccxtnfw1Fi0g==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@jest/get-type": "30.1.0"
-      },
-      "engines": {
-        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
+        "balanced-match": "^1.0.0"
       }
     },
-    "node_modules/@jest/fake-timers": {
-      "version": "30.2.0",
-      "resolved": "https://registry.npmjs.org/@jest/fake-timers/-/fake-timers-30.2.0.tgz",
-      "integrity": "sha512-HI3tRLjRxAbBy0VO8dqqm7Hb2mIa8d5bg/NJkyQcOk7V118ObQML8RC5luTF/Zsg4474a+gDvhce7eTnP4GhYw==",
+    "node_modules/@electron/universal/node_modules/debug": {
+      "version": "4.4.3",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
+      "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@jest/types": "30.2.0",
-        "@sinonjs/fake-timers": "^13.0.0",
-        "@types/node": "*",
-        "jest-message-util": "30.2.0",
-        "jest-mock": "30.2.0",
-        "jest-util": "30.2.0"
+        "ms": "^2.1.3"
       },
       "engines": {
-        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
-      }
-    },
-    "node_modules/@jest/get-type": {
-      "version": "30.1.0",
-      "resolved": "https://registry.npmjs.org/@jest/get-type/-/get-type-30.1.0.tgz",
-      "integrity": "sha512-eMbZE2hUnx1WV0pmURZY9XoXPkUYjpc55mb0CrhtdWLtzMQPFvu/rZkTLZFTsdaVQa+Tr4eWAteqcUzoawq/uA==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
+        "node": ">=6.0"
+      },
+      "peerDependenciesMeta": {
+        "supports-color": {
+          "optional": true
+        }
       }
     },
-    "node_modules/@jest/globals": {
-      "version": "30.2.0",
-      "resolved": "https://registry.npmjs.org/@jest/globals/-/globals-30.2.0.tgz",
-      "integrity": "sha512-b63wmnKPaK+6ZZfpYhz9K61oybvbI1aMcIs80++JI1O1rR1vaxHUCNqo3ITu6NU0d4V34yZFoHMn/uoKr/Rwfw==",
+    "node_modules/@electron/universal/node_modules/minimatch": {
+      "version": "9.0.9",
+      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.9.tgz",
+      "integrity": "sha512-OBwBN9AL4dqmETlpS2zasx+vTeWclWzkblfZk7KTA5j3jeOONz/tRCnZomUyvNg83wL5Zv9Ss6HMJXAgL8R2Yg==",
       "dev": true,
-      "license": "MIT",
+      "license": "ISC",
       "dependencies": {
-        "@jest/environment": "30.2.0",
-        "@jest/expect": "30.2.0",
-        "@jest/types": "30.2.0",
-        "jest-mock": "30.2.0"
+        "brace-expansion": "^2.0.2"
       },
       "engines": {
-        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
+        "node": ">=16 || 14 >=14.17"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/isaacs"
       }
     },
-    "node_modules/@jest/pattern": {
-      "version": "30.0.1",
-      "resolved": "https://registry.npmjs.org/@jest/pattern/-/pattern-30.0.1.tgz",
-      "integrity": "sha512-gWp7NfQW27LaBQz3TITS8L7ZCQ0TLvtmI//4OwlQRx4rnWxcPNIYjxZpDcN4+UlGxgm3jS5QPz8IPTCkb59wZA==",
+    "node_modules/@electron/windows-sign": {
+      "version": "1.2.2",
+      "resolved": "https://registry.npmjs.org/@electron/windows-sign/-/windows-sign-1.2.2.tgz",
+      "integrity": "sha512-dfZeox66AvdPtb2lD8OsIIQh12Tp0GNCRUDfBHIKGpbmopZto2/A8nSpYYLoedPIHpqkeblZ/k8OV0Gy7PYuyQ==",
       "dev": true,
-      "license": "MIT",
+      "license": "BSD-2-Clause",
+      "optional": true,
+      "peer": true,
       "dependencies": {
-        "@types/node": "*",
-        "jest-regex-util": "30.0.1"
+        "cross-dirname": "^0.1.0",
+        "debug": "^4.3.4",
+        "fs-extra": "^11.1.1",
+        "minimist": "^1.2.8",
+        "postject": "^1.0.0-alpha.6"
+      },
+      "bin": {
+        "electron-windows-sign": "bin/electron-windows-sign.js"
       },
       "engines": {
-        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
+        "node": ">=14.14"
       }
     },
-    "node_modules/@jest/reporters": {
-      "version": "30.2.0",
-      "resolved": "https://registry.npmjs.org/@jest/reporters/-/reporters-30.2.0.tgz",
-      "integrity": "sha512-DRyW6baWPqKMa9CzeiBjHwjd8XeAyco2Vt8XbcLFjiwCOEKOvy82GJ8QQnJE9ofsxCMPjH4MfH8fCWIHHDKpAQ==",
+    "node_modules/@electron/windows-sign/node_modules/debug": {
+      "version": "4.4.3",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
+      "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
       "dev": true,
       "license": "MIT",
+      "optional": true,
+      "peer": true,
       "dependencies": {
-        "@bcoe/v8-coverage": "^0.2.3",
-        "@jest/console": "30.2.0",
-        "@jest/test-result": "30.2.0",
-        "@jest/transform": "30.2.0",
-        "@jest/types": "30.2.0",
-        "@jridgewell/trace-mapping": "^0.3.25",
-        "@types/node": "*",
-        "chalk": "^4.1.2",
-        "collect-v8-coverage": "^1.0.2",
-        "exit-x": "^0.2.2",
-        "glob": "^10.3.10",
-        "graceful-fs": "^4.2.11",
-        "istanbul-lib-coverage": "^3.0.0",
-        "istanbul-lib-instrument": "^6.0.0",
-        "istanbul-lib-report": "^3.0.0",
-        "istanbul-lib-source-maps": "^5.0.0",
-        "istanbul-reports": "^3.1.3",
-        "jest-message-util": "30.2.0",
-        "jest-util": "30.2.0",
-        "jest-worker": "30.2.0",
-        "slash": "^3.0.0",
-        "string-length": "^4.0.2",
-        "v8-to-istanbul": "^9.0.1"
+        "ms": "^2.1.3"
       },
       "engines": {
-        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
-      },
-      "peerDependencies": {
-        "node-notifier": "^8.0.1 || ^9.0.0 || ^10.0.0"
+        "node": ">=6.0"
       },
       "peerDependenciesMeta": {
-        "node-notifier": {
+        "supports-color": {
           "optional": true
         }
       }
     },
-    "node_modules/@jest/schemas": {
-      "version": "30.0.5",
-      "resolved": "https://registry.npmjs.org/@jest/schemas/-/schemas-30.0.5.tgz",
-      "integrity": "sha512-DmdYgtezMkh3cpU8/1uyXakv3tJRcmcXxBOcO0tbaozPwpmh4YMsnWrQm9ZmZMfa5ocbxzbFk6O4bDPEc/iAnA==",
+    "node_modules/@emnapi/core": {
+      "version": "1.8.1",
+      "resolved": "https://registry.npmjs.org/@emnapi/core/-/core-1.8.1.tgz",
+      "integrity": "sha512-AvT9QFpxK0Zd8J0jopedNm+w/2fIzvtPKPjqyw9jwvBaReTTqPBk9Hixaz7KbjimP+QNz605/XnjFcDAL2pqBg==",
       "dev": true,
       "license": "MIT",
+      "optional": true,
       "dependencies": {
-        "@sinclair/typebox": "^0.34.0"
-      },
-      "engines": {
-        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
+        "@emnapi/wasi-threads": "1.1.0",
+        "tslib": "^2.4.0"
       }
     },
-    "node_modules/@jest/snapshot-utils": {
-      "version": "30.2.0",
-      "resolved": "https://registry.npmjs.org/@jest/snapshot-utils/-/snapshot-utils-30.2.0.tgz",
-      "integrity": "sha512-0aVxM3RH6DaiLcjj/b0KrIBZhSX1373Xci4l3cW5xiUWPctZ59zQ7jj4rqcJQ/Z8JuN/4wX3FpJSa3RssVvCug==",
+    "node_modules/@emnapi/runtime": {
+      "version": "1.8.1",
+      "resolved": "https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.8.1.tgz",
+      "integrity": "sha512-mehfKSMWjjNol8659Z8KxEMrdSJDDot5SXMq00dM8BN4o+CLNXQ0xH2V7EchNHV4RmbZLmmPdEaXZc5H2FXmDg==",
       "dev": true,
       "license": "MIT",
+      "optional": true,
       "dependencies": {
-        "@jest/types": "30.2.0",
-        "chalk": "^4.1.2",
-        "graceful-fs": "^4.2.11",
-        "natural-compare": "^1.4.0"
-      },
-      "engines": {
-        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
+        "tslib": "^2.4.0"
       }
     },
-    "node_modules/@jest/source-map": {
-      "version": "30.0.1",
-      "resolved": "https://registry.npmjs.org/@jest/source-map/-/source-map-30.0.1.tgz",
-      "integrity": "sha512-MIRWMUUR3sdbP36oyNyhbThLHyJ2eEDClPCiHVbrYAe5g3CHRArIVpBw7cdSB5fr+ofSfIb2Tnsw8iEHL0PYQg==",
+    "node_modules/@emnapi/wasi-threads": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/@emnapi/wasi-threads/-/wasi-threads-1.1.0.tgz",
+      "integrity": "sha512-WI0DdZ8xFSbgMjR1sFsKABJ/C5OnRrjT06JXbZKexJGrDuPTzZdDYfFlsgcCXCyf+suG5QU2e/y1Wo2V/OapLQ==",
       "dev": true,
       "license": "MIT",
+      "optional": true,
       "dependencies": {
-        "@jridgewell/trace-mapping": "^0.3.25",
-        "callsites": "^3.1.0",
-        "graceful-fs": "^4.2.11"
-      },
-      "engines": {
-        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
+        "tslib": "^2.4.0"
       }
     },
-    "node_modules/@jest/test-result": {
-      "version": "30.2.0",
-      "resolved": "https://registry.npmjs.org/@jest/test-result/-/test-result-30.2.0.tgz",
-      "integrity": "sha512-RF+Z+0CCHkARz5HT9mcQCBulb1wgCP3FBvl9VFokMX27acKphwyQsNuWH3c+ojd1LeWBLoTYoxF0zm6S/66mjg==",
+    "node_modules/@isaacs/cliui": {
+      "version": "8.0.2",
+      "resolved": "https://registry.npmjs.org/@isaacs/cliui/-/cliui-8.0.2.tgz",
+      "integrity": "sha512-O8jcjabXaleOG9DQ0+ARXWZBTfnP4WNAqzuiJK7ll44AmxGKv/J2M4TPjxjY3znBCfvBXFzucm1twdyFybFqEA==",
       "dev": true,
-      "license": "MIT",
+      "license": "ISC",
       "dependencies": {
-        "@jest/console": "30.2.0",
-        "@jest/types": "30.2.0",
-        "@types/istanbul-lib-coverage": "^2.0.6",
-        "collect-v8-coverage": "^1.0.2"
+        "string-width": "^5.1.2",
+        "string-width-cjs": "npm:string-width@^4.2.0",
+        "strip-ansi": "^7.0.1",
+        "strip-ansi-cjs": "npm:strip-ansi@^6.0.1",
+        "wrap-ansi": "^8.1.0",
+        "wrap-ansi-cjs": "npm:wrap-ansi@^7.0.0"
       },
       "engines": {
-        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
+        "node": ">=12"
       }
     },
-    "node_modules/@jest/test-sequencer": {
-      "version": "30.2.0",
-      "resolved": "https://registry.npmjs.org/@jest/test-sequencer/-/test-sequencer-30.2.0.tgz",
-      "integrity": "sha512-wXKgU/lk8fKXMu/l5Hog1R61bL4q5GCdT6OJvdAFz1P+QrpoFuLU68eoKuVc4RbrTtNnTL5FByhWdLgOPSph+Q==",
+    "node_modules/@isaacs/cliui/node_modules/ansi-regex": {
+      "version": "6.2.2",
+      "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-6.2.2.tgz",
+      "integrity": "sha512-Bq3SmSpyFHaWjPk8If9yc6svM8c56dB5BAtW4Qbw5jHTwwXXcTLoRMkpDJp6VL0XzlWaCHTXrkFURMYmD0sLqg==",
       "dev": true,
       "license": "MIT",
-      "dependencies": {
-        "@jest/test-result": "30.2.0",
-        "graceful-fs": "^4.2.11",
-        "jest-haste-map": "30.2.0",
-        "slash": "^3.0.0"
-      },
       "engines": {
-        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://github.com/chalk/ansi-regex?sponsor=1"
       }
     },
-    "node_modules/@jest/transform": {
-      "version": "30.2.0",
-      "resolved": "https://registry.npmjs.org/@jest/transform/-/transform-30.2.0.tgz",
-      "integrity": "sha512-XsauDV82o5qXbhalKxD7p4TZYYdwcaEXC77PPD2HixEFF+6YGppjrAAQurTl2ECWcEomHBMMNS9AH3kcCFx8jA==",
+    "node_modules/@isaacs/cliui/node_modules/ansi-styles": {
+      "version": "6.2.3",
+      "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-6.2.3.tgz",
+      "integrity": "sha512-4Dj6M28JB+oAH8kFkTLUo+a2jwOFkuqb3yucU0CANcRRUbxS0cP0nZYCGjcc3BNXwRIsUVmDGgzawme7zvJHvg==",
       "dev": true,
       "license": "MIT",
-      "dependencies": {
-        "@babel/core": "^7.27.4",
-        "@jest/types": "30.2.0",
-        "@jridgewell/trace-mapping": "^0.3.25",
-        "babel-plugin-istanbul": "^7.0.1",
-        "chalk": "^4.1.2",
-        "convert-source-map": "^2.0.0",
-        "fast-json-stable-stringify": "^2.1.0",
-        "graceful-fs": "^4.2.11",
-        "jest-haste-map": "30.2.0",
-        "jest-regex-util": "30.0.1",
-        "jest-util": "30.2.0",
-        "micromatch": "^4.0.8",
-        "pirates": "^4.0.7",
-        "slash": "^3.0.0",
-        "write-file-atomic": "^5.0.1"
-      },
       "engines": {
-        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://github.com/chalk/ansi-styles?sponsor=1"
       }
     },
-    "node_modules/@jest/types": {
-      "version": "30.2.0",
-      "resolved": "https://registry.npmjs.org/@jest/types/-/types-30.2.0.tgz",
-      "integrity": "sha512-H9xg1/sfVvyfU7o3zMfBEjQ1gcsdeTMgqHoYdN79tuLqfTtuu7WckRA1R5whDwOzxaZAeMKTYWqP+WCAi0CHsg==",
+    "node_modules/@isaacs/cliui/node_modules/emoji-regex": {
+      "version": "9.2.2",
+      "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-9.2.2.tgz",
+      "integrity": "sha512-L18DaJsXSUk2+42pv8mLs5jJT2hqFkFE4j21wOmgbUqsZ2hL72NsUU785g9RXgo3s0ZNgVl42TiHp3ZtOv/Vyg==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@isaacs/cliui/node_modules/string-width": {
+      "version": "5.1.2",
+      "resolved": "https://registry.npmjs.org/string-width/-/string-width-5.1.2.tgz",
+      "integrity": "sha512-HnLOCR3vjcY8beoNLtcjZ5/nxn2afmME6lhrDrebokqMap+XbeW8n9TXpPDOqdGK5qcI3oT0GKTW6wC7EMiVqA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@jest/pattern": "30.0.1",
-        "@jest/schemas": "30.0.5",
-        "@types/istanbul-lib-coverage": "^2.0.6",
-        "@types/istanbul-reports": "^3.0.4",
-        "@types/node": "*",
-        "@types/yargs": "^17.0.33",
-        "chalk": "^4.1.2"
+        "eastasianwidth": "^0.2.0",
+        "emoji-regex": "^9.2.2",
+        "strip-ansi": "^7.0.1"
       },
       "engines": {
-        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
       }
     },
-    "node_modules/@jridgewell/gen-mapping": {
-      "version": "0.3.13",
-      "resolved": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.13.tgz",
-      "integrity": "sha512-2kkt/7niJ6MgEPxF0bYdQ6etZaA+fQvDcLKckhy1yIQOzaoKjBBjSj63/aLVjYE3qhRt5dvM+uUyfCg6UKCBbA==",
+    "node_modules/@isaacs/cliui/node_modules/strip-ansi": {
+      "version": "7.1.2",
+      "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-7.1.2.tgz",
+      "integrity": "sha512-gmBGslpoQJtgnMAvOVqGZpEz9dyoKTCzy2nfz/n8aIFhN/jCE/rCmcxabB6jOOHV+0WNnylOxaxBQPSvcWklhA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@jridgewell/sourcemap-codec": "^1.5.0",
-        "@jridgewell/trace-mapping": "^0.3.24"
+        "ansi-regex": "^6.0.1"
+      },
+      "engines": {
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://github.com/chalk/strip-ansi?sponsor=1"
       }
     },
-    "node_modules/@jridgewell/remapping": {
-      "version": "2.3.5",
-      "resolved": "https://registry.npmjs.org/@jridgewell/remapping/-/remapping-2.3.5.tgz",
-      "integrity": "sha512-LI9u/+laYG4Ds1TDKSJW2YPrIlcVYOwi2fUC6xB43lueCjgxV4lffOCZCtYFiH6TNOX+tQKXx97T4IKHbhyHEQ==",
+    "node_modules/@isaacs/cliui/node_modules/wrap-ansi": {
+      "version": "8.1.0",
+      "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-8.1.0.tgz",
+      "integrity": "sha512-si7QWI6zUMq56bESFvagtmzMdGOtoxfR+Sez11Mobfc7tm+VkUckk9bW2UeffTGVUbOksxmSw0AA2gs8g71NCQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@jridgewell/gen-mapping": "^0.3.5",
-        "@jridgewell/trace-mapping": "^0.3.24"
-      }
-    },
-    "node_modules/@jridgewell/resolve-uri": {
-      "version": "3.1.2",
-      "resolved": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz",
-      "integrity": "sha512-bRISgCIjP20/tbWSPWMEi54QVPRZExkuD9lJL+UIxUKtwVJA8wW1Trb1jMs1RFXo1CBTNZ/5hpC9QvmKWdopKw==",
-      "dev": true,
-      "license": "MIT",
+        "ansi-styles": "^6.1.0",
+        "string-width": "^5.0.1",
+        "strip-ansi": "^7.0.1"
+      },
       "engines": {
-        "node": ">=6.0.0"
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://github.com/chalk/wrap-ansi?sponsor=1"
       }
     },
-    "node_modules/@jridgewell/sourcemap-codec": {
-      "version": "1.5.5",
-      "resolved": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.5.5.tgz",
-      "integrity": "sha512-cYQ9310grqxueWbl+WuIUIaiUaDcj7WOq5fVhEljNVgRfOUhY9fy2zTvfoqWsnebh8Sl70VScFbICvJnLKB0Og==",
-      "dev": true,
-      "license": "MIT"
-    },
-    "node_modules/@jridgewell/trace-mapping": {
-      "version": "0.3.31",
-      "resolved": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.31.tgz",
-      "integrity": "sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw==",
+    "node_modules/@isaacs/fs-minipass": {
+      "version": "4.0.1",
+      "resolved": "https://registry.npmjs.org/@isaacs/fs-minipass/-/fs-minipass-4.0.1.tgz",
+      "integrity": "sha512-wgm9Ehl2jpeqP3zw/7mo3kRHFp5MEDhqAdwy1fTGkHAwnkGOVsgpvQhL8B5n1qlb01jV3n/bI0ZfZp5lWA1k4w==",
       "dev": true,
-      "license": "MIT",
+      "license": "ISC",
       "dependencies": {
-        "@jridgewell/resolve-uri": "^3.1.0",
-        "@jridgewell/sourcemap-codec": "^1.4.14"
+        "minipass": "^7.0.4"
+      },
+      "engines": {
+        "node": ">=18.0.0"
       }
     },
-    "node_modules/@napi-rs/wasm-runtime": {
-      "version": "0.2.12",
-      "resolved": "https://registry.npmjs.org/@napi-rs/wasm-runtime/-/wasm-runtime-0.2.12.tgz",
-      "integrity": "sha512-ZVWUcfwY4E/yPitQJl481FjFo3K22D6qF0DuFH6Y/nbnE11GY5uguDxZMGXPQ8WQ0128MXQD7TnfHyK4oWoIJQ==",
+    "node_modules/@istanbuljs/load-nyc-config": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/@istanbuljs/load-nyc-config/-/load-nyc-config-1.1.0.tgz",
+      "integrity": "sha512-VjeHSlIzpv/NyD3N0YuHfXOPDIixcA1q2ZV98wsMqcYlPmv2n3Yb2lYP9XMElnaFVXg5A7YLTeLu6V84uQDjmQ==",
       "dev": true,
-      "license": "MIT",
-      "optional": true,
+      "license": "ISC",
       "dependencies": {
-        "@emnapi/core": "^1.4.3",
-        "@emnapi/runtime": "^1.4.3",
-        "@tybys/wasm-util": "^0.10.0"
+        "camelcase": "^5.3.1",
+        "find-up": "^4.1.0",
+        "get-package-type": "^0.1.0",
+        "js-yaml": "^3.13.1",
+        "resolve-from": "^5.0.0"
+      },
+      "engines": {
+        "node": ">=8"
       }
     },
-    "node_modules/@noble/hashes": {
-      "version": "1.8.0",
-      "resolved": "https://registry.npmjs.org/@noble/hashes/-/hashes-1.8.0.tgz",
-      "integrity": "sha512-jCs9ldd7NwzpgXDIf6P3+NrHh9/sD6CQdxHyjQI+h/6rDNo88ypBxxz45UDuZHz9r3tNz7N/VInSVoVdtXEI4A==",
+    "node_modules/@istanbuljs/load-nyc-config/node_modules/argparse": {
+      "version": "1.0.10",
+      "resolved": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz",
+      "integrity": "sha512-o5Roy6tNG4SL/FOkCAN6RzjiakZS25RLYFrcMttJqbdd8BWrnA+fGz57iN5Pb06pvBGvl5gQ0B48dJlslXvoTg==",
       "dev": true,
       "license": "MIT",
-      "engines": {
-        "node": "^14.21.3 || >=16"
-      },
-      "funding": {
-        "url": "https://paulmillr.com/funding/"
+      "dependencies": {
+        "sprintf-js": "~1.0.2"
       }
     },
-    "node_modules/@paralleldrive/cuid2": {
-      "version": "2.3.1",
-      "resolved": "https://registry.npmjs.org/@paralleldrive/cuid2/-/cuid2-2.3.1.tgz",
-      "integrity": "sha512-XO7cAxhnTZl0Yggq6jOgjiOHhbgcO4NqFqwSmQpjK3b6TEE6Uj/jfSk6wzYyemh3+I0sHirKSetjQwn5cZktFw==",
+    "node_modules/@istanbuljs/load-nyc-config/node_modules/js-yaml": {
+      "version": "3.14.2",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.2.tgz",
+      "integrity": "sha512-PMSmkqxr106Xa156c2M265Z+FTrPl+oxd/rgOQy2tijQeK5TxQ43psO1ZCwhVOSdnn+RzkzlRz/eY4BgJBYVpg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@noble/hashes": "^1.1.5"
+        "argparse": "^1.0.7",
+        "esprima": "^4.0.0"
+      },
+      "bin": {
+        "js-yaml": "bin/js-yaml.js"
       }
     },
-    "node_modules/@pkgjs/parseargs": {
-      "version": "0.11.0",
-      "resolved": "https://registry.npmjs.org/@pkgjs/parseargs/-/parseargs-0.11.0.tgz",
-      "integrity": "sha512-+1VkjdD0QBLPodGrJUeqarH8VAIvQODIbwh9XpP5Syisf7YoQgsJKPNFoqqLQlu+VQ/tVSshMR6loPMn8U+dPg==",
+    "node_modules/@istanbuljs/load-nyc-config/node_modules/resolve-from": {
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/resolve-from/-/resolve-from-5.0.0.tgz",
+      "integrity": "sha512-qYg9KP24dD5qka9J47d0aVky0N+b4fTU89LN9iDnjB5waksiC49rvMB0PrUJQGoTmH50XPiqOvAjDfaijGxYZw==",
       "dev": true,
       "license": "MIT",
-      "optional": true,
       "engines": {
-        "node": ">=14"
+        "node": ">=8"
       }
     },
-    "node_modules/@pkgr/core": {
-      "version": "0.2.9",
-      "resolved": "https://registry.npmjs.org/@pkgr/core/-/core-0.2.9.tgz",
-      "integrity": "sha512-QNqXyfVS2wm9hweSYD2O7F0G06uurj9kZ96TRQE5Y9hU7+tgdZwIkbAKc5Ocy1HxEY2kuDQa6cQ1WRs/O5LFKA==",
+    "node_modules/@istanbuljs/schema": {
+      "version": "0.1.3",
+      "resolved": "https://registry.npmjs.org/@istanbuljs/schema/-/schema-0.1.3.tgz",
+      "integrity": "sha512-ZXRY4jNvVgSVQ8DL3LTcakaAtXwTVUxE81hslsyD2AtoXW/wVob10HkOJ1X/pAlcI7D+2YoZKg5do8G/w6RYgA==",
       "dev": true,
       "license": "MIT",
       "engines": {
-        "node": "^12.20.0 || ^14.18.0 || >=16.0.0"
-      },
-      "funding": {
-        "url": "https://opencollective.com/pkgr"
+        "node": ">=8"
       }
     },
-    "node_modules/@puppeteer/browsers": {
-      "version": "2.10.8",
-      "resolved": "https://registry.npmjs.org/@puppeteer/browsers/-/browsers-2.10.8.tgz",
-      "integrity": "sha512-f02QYEnBDE0p8cteNoPYHHjbDuwyfbe4cCIVlNi8/MRicIxFW4w4CfgU0LNgWEID6s06P+hRJ1qjpBLMhPRCiQ==",
+    "node_modules/@jest/console": {
+      "version": "30.2.0",
+      "resolved": "https://registry.npmjs.org/@jest/console/-/console-30.2.0.tgz",
+      "integrity": "sha512-+O1ifRjkvYIkBqASKWgLxrpEhQAAE7hY77ALLUufSk5717KfOShg6IbqLmdsLMPdUiFvA2kTs0R7YZy+l0IzZQ==",
       "dev": true,
-      "license": "Apache-2.0",
+      "license": "MIT",
       "dependencies": {
-        "debug": "^4.4.1",
-        "extract-zip": "^2.0.1",
-        "progress": "^2.0.3",
-        "proxy-agent": "^6.5.0",
-        "semver": "^7.7.2",
-        "tar-fs": "^3.1.0",
-        "yargs": "^17.7.2"
-      },
-      "bin": {
-        "browsers": "lib/cjs/main-cli.js"
+        "@jest/types": "30.2.0",
+        "@types/node": "*",
+        "chalk": "^4.1.2",
+        "jest-message-util": "30.2.0",
+        "jest-util": "30.2.0",
+        "slash": "^3.0.0"
       },
       "engines": {
-        "node": ">=18"
+        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
       }
     },
-    "node_modules/@puppeteer/browsers/node_modules/debug": {
-      "version": "4.4.1",
-      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.1.tgz",
-      "integrity": "sha512-KcKCqiftBJcZr++7ykoDIEwSa3XWowTfNPo92BYxjXiyYEVrUQh2aLyhxBCwww+heortUFxEJYcRzosstTEBYQ==",
+    "node_modules/@jest/core": {
+      "version": "30.2.0",
+      "resolved": "https://registry.npmjs.org/@jest/core/-/core-30.2.0.tgz",
+      "integrity": "sha512-03W6IhuhjqTlpzh/ojut/pDB2LPRygyWX8ExpgHtQA8H/3K7+1vKmcINx5UzeOX1se6YEsBsOHQ1CRzf3fOwTQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "ms": "^2.1.3"
-      },
-      "engines": {
-        "node": ">=6.0"
-      },
-      "peerDependenciesMeta": {
-        "supports-color": {
+        "@jest/console": "30.2.0",
+        "@jest/pattern": "30.0.1",
+        "@jest/reporters": "30.2.0",
+        "@jest/test-result": "30.2.0",
+        "@jest/transform": "30.2.0",
+        "@jest/types": "30.2.0",
+        "@types/node": "*",
+        "ansi-escapes": "^4.3.2",
+        "chalk": "^4.1.2",
+        "ci-info": "^4.2.0",
+        "exit-x": "^0.2.2",
+        "graceful-fs": "^4.2.11",
+        "jest-changed-files": "30.2.0",
+        "jest-config": "30.2.0",
+        "jest-haste-map": "30.2.0",
+        "jest-message-util": "30.2.0",
+        "jest-regex-util": "30.0.1",
+        "jest-resolve": "30.2.0",
+        "jest-resolve-dependencies": "30.2.0",
+        "jest-runner": "30.2.0",
+        "jest-runtime": "30.2.0",
+        "jest-snapshot": "30.2.0",
+        "jest-util": "30.2.0",
+        "jest-validate": "30.2.0",
+        "jest-watcher": "30.2.0",
+        "micromatch": "^4.0.8",
+        "pretty-format": "30.2.0",
+        "slash": "^3.0.0"
+      },
+      "engines": {
+        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
+      },
+      "peerDependencies": {
+        "node-notifier": "^8.0.1 || ^9.0.0 || ^10.0.0"
+      },
+      "peerDependenciesMeta": {
+        "node-notifier": {
           "optional": true
         }
       }
     },
-    "node_modules/@puppeteer/browsers/node_modules/semver": {
-      "version": "7.7.2",
-      "resolved": "https://registry.npmjs.org/semver/-/semver-7.7.2.tgz",
-      "integrity": "sha512-RF0Fw+rO5AMf9MAyaRXI4AV0Ulj5lMHqVxxdSgiVbixSCXoEmmX/jk0CuJw4+3SqroYO9VoUh+HcuJivvtJemA==",
+    "node_modules/@jest/diff-sequences": {
+      "version": "30.0.1",
+      "resolved": "https://registry.npmjs.org/@jest/diff-sequences/-/diff-sequences-30.0.1.tgz",
+      "integrity": "sha512-n5H8QLDJ47QqbCNn5SuFjCRDrOLEZ0h8vAHCK5RL9Ls7Xa8AQLa/YxAc9UjFqoEDM48muwtBGjtMY5cr0PLDCw==",
       "dev": true,
-      "license": "ISC",
-      "bin": {
-        "semver": "bin/semver.js"
-      },
+      "license": "MIT",
       "engines": {
-        "node": ">=10"
+        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
       }
     },
-    "node_modules/@sinclair/typebox": {
-      "version": "0.34.48",
-      "resolved": "https://registry.npmjs.org/@sinclair/typebox/-/typebox-0.34.48.tgz",
-      "integrity": "sha512-kKJTNuK3AQOrgjjotVxMrCn1sUJwM76wMszfq1kdU4uYVJjvEWuFQ6HgvLt4Xz3fSmZlTOxJ/Ie13KnIcWQXFA==",
-      "dev": true,
-      "license": "MIT"
-    },
-    "node_modules/@sinonjs/commons": {
-      "version": "3.0.1",
-      "resolved": "https://registry.npmjs.org/@sinonjs/commons/-/commons-3.0.1.tgz",
-      "integrity": "sha512-K3mCHKQ9sVh8o1C9cxkwxaOmXoAMlDxC1mYyHrjqOWEcBjYr76t96zL2zlj5dUGZ3HSw240X1qgH3Mjf1yJWpQ==",
+    "node_modules/@jest/environment": {
+      "version": "30.2.0",
+      "resolved": "https://registry.npmjs.org/@jest/environment/-/environment-30.2.0.tgz",
+      "integrity": "sha512-/QPTL7OBJQ5ac09UDRa3EQes4gt1FTEG/8jZ/4v5IVzx+Cv7dLxlVIvfvSVRiiX2drWyXeBjkMSR8hvOWSog5g==",
       "dev": true,
-      "license": "BSD-3-Clause",
+      "license": "MIT",
       "dependencies": {
-        "type-detect": "4.0.8"
+        "@jest/fake-timers": "30.2.0",
+        "@jest/types": "30.2.0",
+        "@types/node": "*",
+        "jest-mock": "30.2.0"
+      },
+      "engines": {
+        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
       }
     },
-    "node_modules/@sinonjs/fake-timers": {
-      "version": "13.0.5",
-      "resolved": "https://registry.npmjs.org/@sinonjs/fake-timers/-/fake-timers-13.0.5.tgz",
-      "integrity": "sha512-36/hTbH2uaWuGVERyC6da9YwGWnzUZXuPro/F2LfsdOsLnCojz/iSH8MxUt/FD2S5XBSVPhmArFUXcpCQ2Hkiw==",
+    "node_modules/@jest/expect": {
+      "version": "30.2.0",
+      "resolved": "https://registry.npmjs.org/@jest/expect/-/expect-30.2.0.tgz",
+      "integrity": "sha512-V9yxQK5erfzx99Sf+7LbhBwNWEZ9eZay8qQ9+JSC0TrMR1pMDHLMY+BnVPacWU6Jamrh252/IKo4F1Xn/zfiqA==",
       "dev": true,
-      "license": "BSD-3-Clause",
+      "license": "MIT",
       "dependencies": {
-        "@sinonjs/commons": "^3.0.1"
+        "expect": "30.2.0",
+        "jest-snapshot": "30.2.0"
+      },
+      "engines": {
+        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
       }
     },
-    "node_modules/@socket.io/component-emitter": {
-      "version": "3.1.2",
-      "resolved": "https://registry.npmjs.org/@socket.io/component-emitter/-/component-emitter-3.1.2.tgz",
-      "integrity": "sha512-9BCxFwvbGg/RsZK9tjXd8s4UcwR0MWeFQ1XEKIQVVvAGJyINdrqKMcTRyLoK8Rse1GjzLV9cwjWV1olXRWEXVA==",
-      "dev": true,
-      "license": "MIT"
-    },
-    "node_modules/@tootallnate/quickjs-emscripten": {
-      "version": "0.23.0",
-      "resolved": "https://registry.npmjs.org/@tootallnate/quickjs-emscripten/-/quickjs-emscripten-0.23.0.tgz",
-      "integrity": "sha512-C5Mc6rdnsaJDjO3UpGW/CQTHtCKaYlScZTly4JIu97Jxo/odCiH0ITnDXSJPTOrEKk/ycSZ0AOgTmkDtkOsvIA==",
-      "dev": true,
-      "license": "MIT"
-    },
-    "node_modules/@tybys/wasm-util": {
-      "version": "0.10.1",
-      "resolved": "https://registry.npmjs.org/@tybys/wasm-util/-/wasm-util-0.10.1.tgz",
-      "integrity": "sha512-9tTaPJLSiejZKx+Bmog4uSubteqTvFrVrURwkmHixBo0G4seD0zUxp98E1DzUBJxLQ3NPwXrGKDiVjwx/DpPsg==",
+    "node_modules/@jest/expect-utils": {
+      "version": "30.2.0",
+      "resolved": "https://registry.npmjs.org/@jest/expect-utils/-/expect-utils-30.2.0.tgz",
+      "integrity": "sha512-1JnRfhqpD8HGpOmQp180Fo9Zt69zNtC+9lR+kT7NVL05tNXIi+QC8Csz7lfidMoVLPD3FnOtcmp0CEFnxExGEA==",
       "dev": true,
       "license": "MIT",
-      "optional": true,
       "dependencies": {
-        "tslib": "^2.4.0"
+        "@jest/get-type": "30.1.0"
+      },
+      "engines": {
+        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
       }
     },
-    "node_modules/@types/babel__core": {
-      "version": "7.20.5",
-      "resolved": "https://registry.npmjs.org/@types/babel__core/-/babel__core-7.20.5.tgz",
-      "integrity": "sha512-qoQprZvz5wQFJwMDqeseRXWv3rqMvhgpbXFfVyWhbx9X47POIA6i/+dXefEmZKoAgOaTdaIgNSMqMIU61yRyzA==",
+    "node_modules/@jest/fake-timers": {
+      "version": "30.2.0",
+      "resolved": "https://registry.npmjs.org/@jest/fake-timers/-/fake-timers-30.2.0.tgz",
+      "integrity": "sha512-HI3tRLjRxAbBy0VO8dqqm7Hb2mIa8d5bg/NJkyQcOk7V118ObQML8RC5luTF/Zsg4474a+gDvhce7eTnP4GhYw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@babel/parser": "^7.20.7",
-        "@babel/types": "^7.20.7",
-        "@types/babel__generator": "*",
-        "@types/babel__template": "*",
-        "@types/babel__traverse": "*"
+        "@jest/types": "30.2.0",
+        "@sinonjs/fake-timers": "^13.0.0",
+        "@types/node": "*",
+        "jest-message-util": "30.2.0",
+        "jest-mock": "30.2.0",
+        "jest-util": "30.2.0"
+      },
+      "engines": {
+        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
       }
     },
-    "node_modules/@types/babel__generator": {
-      "version": "7.27.0",
-      "resolved": "https://registry.npmjs.org/@types/babel__generator/-/babel__generator-7.27.0.tgz",
-      "integrity": "sha512-ufFd2Xi92OAVPYsy+P4n7/U7e68fex0+Ee8gSG9KX7eo084CWiQ4sdxktvdl0bOPupXtVJPY19zk6EwWqUQ8lg==",
+    "node_modules/@jest/get-type": {
+      "version": "30.1.0",
+      "resolved": "https://registry.npmjs.org/@jest/get-type/-/get-type-30.1.0.tgz",
+      "integrity": "sha512-eMbZE2hUnx1WV0pmURZY9XoXPkUYjpc55mb0CrhtdWLtzMQPFvu/rZkTLZFTsdaVQa+Tr4eWAteqcUzoawq/uA==",
       "dev": true,
       "license": "MIT",
-      "dependencies": {
-        "@babel/types": "^7.0.0"
+      "engines": {
+        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
       }
     },
-    "node_modules/@types/babel__template": {
-      "version": "7.4.4",
-      "resolved": "https://registry.npmjs.org/@types/babel__template/-/babel__template-7.4.4.tgz",
-      "integrity": "sha512-h/NUaSyG5EyxBIp8YRxo4RMe2/qQgvyowRwVMzhYhBCONbW8PUsg4lkFMrhgZhUe5z3L3MiLDuvyJ/CaPa2A8A==",
+    "node_modules/@jest/globals": {
+      "version": "30.2.0",
+      "resolved": "https://registry.npmjs.org/@jest/globals/-/globals-30.2.0.tgz",
+      "integrity": "sha512-b63wmnKPaK+6ZZfpYhz9K61oybvbI1aMcIs80++JI1O1rR1vaxHUCNqo3ITu6NU0d4V34yZFoHMn/uoKr/Rwfw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@babel/parser": "^7.1.0",
-        "@babel/types": "^7.0.0"
+        "@jest/environment": "30.2.0",
+        "@jest/expect": "30.2.0",
+        "@jest/types": "30.2.0",
+        "jest-mock": "30.2.0"
+      },
+      "engines": {
+        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
       }
     },
-    "node_modules/@types/babel__traverse": {
-      "version": "7.28.0",
-      "resolved": "https://registry.npmjs.org/@types/babel__traverse/-/babel__traverse-7.28.0.tgz",
-      "integrity": "sha512-8PvcXf70gTDZBgt9ptxJ8elBeBjcLOAcOtoO/mPJjtji1+CdGbHgm77om1GrsPxsiE+uXIpNSK64UYaIwQXd4Q==",
+    "node_modules/@jest/pattern": {
+      "version": "30.0.1",
+      "resolved": "https://registry.npmjs.org/@jest/pattern/-/pattern-30.0.1.tgz",
+      "integrity": "sha512-gWp7NfQW27LaBQz3TITS8L7ZCQ0TLvtmI//4OwlQRx4rnWxcPNIYjxZpDcN4+UlGxgm3jS5QPz8IPTCkb59wZA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@babel/types": "^7.28.2"
+        "@types/node": "*",
+        "jest-regex-util": "30.0.1"
+      },
+      "engines": {
+        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
       }
     },
-    "node_modules/@types/cors": {
-      "version": "2.8.19",
-      "resolved": "https://registry.npmjs.org/@types/cors/-/cors-2.8.19.tgz",
-      "integrity": "sha512-mFNylyeyqN93lfe/9CSxOGREz8cpzAhH+E93xJ4xWQf62V8sQ/24reV2nyzUWM6H6Xji+GGHpkbLe7pVoUEskg==",
+    "node_modules/@jest/reporters": {
+      "version": "30.2.0",
+      "resolved": "https://registry.npmjs.org/@jest/reporters/-/reporters-30.2.0.tgz",
+      "integrity": "sha512-DRyW6baWPqKMa9CzeiBjHwjd8XeAyco2Vt8XbcLFjiwCOEKOvy82GJ8QQnJE9ofsxCMPjH4MfH8fCWIHHDKpAQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@types/node": "*"
+        "@bcoe/v8-coverage": "^0.2.3",
+        "@jest/console": "30.2.0",
+        "@jest/test-result": "30.2.0",
+        "@jest/transform": "30.2.0",
+        "@jest/types": "30.2.0",
+        "@jridgewell/trace-mapping": "^0.3.25",
+        "@types/node": "*",
+        "chalk": "^4.1.2",
+        "collect-v8-coverage": "^1.0.2",
+        "exit-x": "^0.2.2",
+        "glob": "^10.3.10",
+        "graceful-fs": "^4.2.11",
+        "istanbul-lib-coverage": "^3.0.0",
+        "istanbul-lib-instrument": "^6.0.0",
+        "istanbul-lib-report": "^3.0.0",
+        "istanbul-lib-source-maps": "^5.0.0",
+        "istanbul-reports": "^3.1.3",
+        "jest-message-util": "30.2.0",
+        "jest-util": "30.2.0",
+        "jest-worker": "30.2.0",
+        "slash": "^3.0.0",
+        "string-length": "^4.0.2",
+        "v8-to-istanbul": "^9.0.1"
+      },
+      "engines": {
+        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
+      },
+      "peerDependencies": {
+        "node-notifier": "^8.0.1 || ^9.0.0 || ^10.0.0"
+      },
+      "peerDependenciesMeta": {
+        "node-notifier": {
+          "optional": true
+        }
       }
     },
-    "node_modules/@types/istanbul-lib-coverage": {
-      "version": "2.0.6",
-      "resolved": "https://registry.npmjs.org/@types/istanbul-lib-coverage/-/istanbul-lib-coverage-2.0.6.tgz",
-      "integrity": "sha512-2QF/t/auWm0lsy8XtKVPG19v3sSOQlJe/YHZgfjb/KBBHOGSV+J2q/S671rcq9uTBrLAXmZpqJiaQbMT+zNU1w==",
-      "dev": true,
-      "license": "MIT"
-    },
-    "node_modules/@types/istanbul-lib-report": {
-      "version": "3.0.3",
-      "resolved": "https://registry.npmjs.org/@types/istanbul-lib-report/-/istanbul-lib-report-3.0.3.tgz",
-      "integrity": "sha512-NQn7AHQnk/RSLOxrBbGyJM/aVQ+pjj5HCgasFxc0K/KhoATfQ/47AyUl15I2yBUpihjmas+a+VJBOqecrFH+uA==",
+    "node_modules/@jest/schemas": {
+      "version": "30.0.5",
+      "resolved": "https://registry.npmjs.org/@jest/schemas/-/schemas-30.0.5.tgz",
+      "integrity": "sha512-DmdYgtezMkh3cpU8/1uyXakv3tJRcmcXxBOcO0tbaozPwpmh4YMsnWrQm9ZmZMfa5ocbxzbFk6O4bDPEc/iAnA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@types/istanbul-lib-coverage": "*"
+        "@sinclair/typebox": "^0.34.0"
+      },
+      "engines": {
+        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
       }
     },
-    "node_modules/@types/istanbul-reports": {
-      "version": "3.0.4",
-      "resolved": "https://registry.npmjs.org/@types/istanbul-reports/-/istanbul-reports-3.0.4.tgz",
-      "integrity": "sha512-pk2B1NWalF9toCRu6gjBzR69syFjP4Od8WRAX+0mmf9lAjCRicLOWc+ZrxZHx/0XRjotgkF9t6iaMJ+aXcOdZQ==",
+    "node_modules/@jest/snapshot-utils": {
+      "version": "30.2.0",
+      "resolved": "https://registry.npmjs.org/@jest/snapshot-utils/-/snapshot-utils-30.2.0.tgz",
+      "integrity": "sha512-0aVxM3RH6DaiLcjj/b0KrIBZhSX1373Xci4l3cW5xiUWPctZ59zQ7jj4rqcJQ/Z8JuN/4wX3FpJSa3RssVvCug==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@types/istanbul-lib-report": "*"
-      }
-    },
-    "node_modules/@types/jest": {
-      "version": "30.0.0",
-      "resolved": "https://registry.npmjs.org/@types/jest/-/jest-30.0.0.tgz",
-      "integrity": "sha512-XTYugzhuwqWjws0CVz8QpM36+T+Dz5mTEBKhNs/esGLnCIlGdRy+Dq78NRjd7ls7r8BC8ZRMOrKlkO1hU0JOwA==",
+        "@jest/types": "30.2.0",
+        "chalk": "^4.1.2",
+        "graceful-fs": "^4.2.11",
+        "natural-compare": "^1.4.0"
+      },
+      "engines": {
+        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
+      }
+    },
+    "node_modules/@jest/source-map": {
+      "version": "30.0.1",
+      "resolved": "https://registry.npmjs.org/@jest/source-map/-/source-map-30.0.1.tgz",
+      "integrity": "sha512-MIRWMUUR3sdbP36oyNyhbThLHyJ2eEDClPCiHVbrYAe5g3CHRArIVpBw7cdSB5fr+ofSfIb2Tnsw8iEHL0PYQg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "expect": "^30.0.0",
-        "pretty-format": "^30.0.0"
+        "@jridgewell/trace-mapping": "^0.3.25",
+        "callsites": "^3.1.0",
+        "graceful-fs": "^4.2.11"
+      },
+      "engines": {
+        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
       }
     },
-    "node_modules/@types/node": {
-      "version": "24.3.0",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-24.3.0.tgz",
-      "integrity": "sha512-aPTXCrfwnDLj4VvXrm+UUCQjNEvJgNA8s5F1cvwQU+3KNltTOkBm1j30uNLyqqPNe7gE3KFzImYoZEfLhp4Yow==",
+    "node_modules/@jest/test-result": {
+      "version": "30.2.0",
+      "resolved": "https://registry.npmjs.org/@jest/test-result/-/test-result-30.2.0.tgz",
+      "integrity": "sha512-RF+Z+0CCHkARz5HT9mcQCBulb1wgCP3FBvl9VFokMX27acKphwyQsNuWH3c+ojd1LeWBLoTYoxF0zm6S/66mjg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "undici-types": "~7.10.0"
+        "@jest/console": "30.2.0",
+        "@jest/types": "30.2.0",
+        "@types/istanbul-lib-coverage": "^2.0.6",
+        "collect-v8-coverage": "^1.0.2"
+      },
+      "engines": {
+        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
       }
     },
-    "node_modules/@types/stack-utils": {
-      "version": "2.0.3",
-      "resolved": "https://registry.npmjs.org/@types/stack-utils/-/stack-utils-2.0.3.tgz",
-      "integrity": "sha512-9aEbYZ3TbYMznPdcdr3SmIrLXwC/AKZXQeCf9Pgao5CKb8CyHuEX5jzWPTkvregvhRJHcpRO6BFoGW9ycaOkYw==",
+    "node_modules/@jest/test-sequencer": {
+      "version": "30.2.0",
+      "resolved": "https://registry.npmjs.org/@jest/test-sequencer/-/test-sequencer-30.2.0.tgz",
+      "integrity": "sha512-wXKgU/lk8fKXMu/l5Hog1R61bL4q5GCdT6OJvdAFz1P+QrpoFuLU68eoKuVc4RbrTtNnTL5FByhWdLgOPSph+Q==",
       "dev": true,
-      "license": "MIT"
-    },
-    "node_modules/@types/triple-beam": {
-      "version": "1.3.5",
-      "resolved": "https://registry.npmjs.org/@types/triple-beam/-/triple-beam-1.3.5.tgz",
-      "integrity": "sha512-6WaYesThRMCl19iryMYP7/x2OVgCtbIVflDGFpWnb9irXI3UjYE4AzmYuiUKY1AJstGijoY+MgUszMgRxIYTYw==",
-      "license": "MIT"
+      "license": "MIT",
+      "dependencies": {
+        "@jest/test-result": "30.2.0",
+        "graceful-fs": "^4.2.11",
+        "jest-haste-map": "30.2.0",
+        "slash": "^3.0.0"
+      },
+      "engines": {
+        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
+      }
     },
-    "node_modules/@types/yargs": {
-      "version": "17.0.35",
-      "resolved": "https://registry.npmjs.org/@types/yargs/-/yargs-17.0.35.tgz",
-      "integrity": "sha512-qUHkeCyQFxMXg79wQfTtfndEC+N9ZZg76HJftDJp+qH2tV7Gj4OJi7l+PiWwJ+pWtW8GwSmqsDj/oymhrTWXjg==",
+    "node_modules/@jest/transform": {
+      "version": "30.2.0",
+      "resolved": "https://registry.npmjs.org/@jest/transform/-/transform-30.2.0.tgz",
+      "integrity": "sha512-XsauDV82o5qXbhalKxD7p4TZYYdwcaEXC77PPD2HixEFF+6YGppjrAAQurTl2ECWcEomHBMMNS9AH3kcCFx8jA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@types/yargs-parser": "*"
+        "@babel/core": "^7.27.4",
+        "@jest/types": "30.2.0",
+        "@jridgewell/trace-mapping": "^0.3.25",
+        "babel-plugin-istanbul": "^7.0.1",
+        "chalk": "^4.1.2",
+        "convert-source-map": "^2.0.0",
+        "fast-json-stable-stringify": "^2.1.0",
+        "graceful-fs": "^4.2.11",
+        "jest-haste-map": "30.2.0",
+        "jest-regex-util": "30.0.1",
+        "jest-util": "30.2.0",
+        "micromatch": "^4.0.8",
+        "pirates": "^4.0.7",
+        "slash": "^3.0.0",
+        "write-file-atomic": "^5.0.1"
+      },
+      "engines": {
+        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
       }
     },
-    "node_modules/@types/yargs-parser": {
-      "version": "21.0.3",
-      "resolved": "https://registry.npmjs.org/@types/yargs-parser/-/yargs-parser-21.0.3.tgz",
-      "integrity": "sha512-I4q9QU9MQv4oEOz4tAHJtNz1cwuLxn2F3xcc2iV5WdqLPpUnj30aUuxt1mAxYTG+oe8CZMV/+6rU4S4gRDzqtQ==",
+    "node_modules/@jest/types": {
+      "version": "30.2.0",
+      "resolved": "https://registry.npmjs.org/@jest/types/-/types-30.2.0.tgz",
+      "integrity": "sha512-H9xg1/sfVvyfU7o3zMfBEjQ1gcsdeTMgqHoYdN79tuLqfTtuu7WckRA1R5whDwOzxaZAeMKTYWqP+WCAi0CHsg==",
       "dev": true,
-      "license": "MIT"
+      "license": "MIT",
+      "dependencies": {
+        "@jest/pattern": "30.0.1",
+        "@jest/schemas": "30.0.5",
+        "@types/istanbul-lib-coverage": "^2.0.6",
+        "@types/istanbul-reports": "^3.0.4",
+        "@types/node": "*",
+        "@types/yargs": "^17.0.33",
+        "chalk": "^4.1.2"
+      },
+      "engines": {
+        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
+      }
     },
-    "node_modules/@types/yauzl": {
-      "version": "2.10.3",
-      "resolved": "https://registry.npmjs.org/@types/yauzl/-/yauzl-2.10.3.tgz",
-      "integrity": "sha512-oJoftv0LSuaDZE3Le4DbKX+KS9G36NzOeSap90UIK0yMA/NhKJhqlSGtNDORNRaIbQfzjXDrQa0ytJ6mNRGz/Q==",
+    "node_modules/@jridgewell/gen-mapping": {
+      "version": "0.3.13",
+      "resolved": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.13.tgz",
+      "integrity": "sha512-2kkt/7niJ6MgEPxF0bYdQ6etZaA+fQvDcLKckhy1yIQOzaoKjBBjSj63/aLVjYE3qhRt5dvM+uUyfCg6UKCBbA==",
       "dev": true,
       "license": "MIT",
-      "optional": true,
       "dependencies": {
-        "@types/node": "*"
+        "@jridgewell/sourcemap-codec": "^1.5.0",
+        "@jridgewell/trace-mapping": "^0.3.24"
       }
     },
-    "node_modules/@ungap/structured-clone": {
-      "version": "1.3.0",
-      "resolved": "https://registry.npmjs.org/@ungap/structured-clone/-/structured-clone-1.3.0.tgz",
-      "integrity": "sha512-WmoN8qaIAo7WTYWbAZuG8PYEhn5fkz7dZrqTBZ7dtt//lL2Gwms1IcnQ5yHqjDfX8Ft5j4YzDM23f87zBfDe9g==",
+    "node_modules/@jridgewell/remapping": {
+      "version": "2.3.5",
+      "resolved": "https://registry.npmjs.org/@jridgewell/remapping/-/remapping-2.3.5.tgz",
+      "integrity": "sha512-LI9u/+laYG4Ds1TDKSJW2YPrIlcVYOwi2fUC6xB43lueCjgxV4lffOCZCtYFiH6TNOX+tQKXx97T4IKHbhyHEQ==",
       "dev": true,
-      "license": "ISC"
+      "license": "MIT",
+      "dependencies": {
+        "@jridgewell/gen-mapping": "^0.3.5",
+        "@jridgewell/trace-mapping": "^0.3.24"
+      }
     },
-    "node_modules/@unrs/resolver-binding-android-arm-eabi": {
-      "version": "1.11.1",
-      "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-android-arm-eabi/-/resolver-binding-android-arm-eabi-1.11.1.tgz",
-      "integrity": "sha512-ppLRUgHVaGRWUx0R0Ut06Mjo9gBaBkg3v/8AxusGLhsIotbBLuRk51rAzqLC8gq6NyyAojEXglNjzf6R948DNw==",
-      "cpu": [
-        "arm"
-      ],
+    "node_modules/@jridgewell/resolve-uri": {
+      "version": "3.1.2",
+      "resolved": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz",
+      "integrity": "sha512-bRISgCIjP20/tbWSPWMEi54QVPRZExkuD9lJL+UIxUKtwVJA8wW1Trb1jMs1RFXo1CBTNZ/5hpC9QvmKWdopKw==",
       "dev": true,
       "license": "MIT",
-      "optional": true,
-      "os": [
-        "android"
-      ]
+      "engines": {
+        "node": ">=6.0.0"
+      }
     },
-    "node_modules/@unrs/resolver-binding-android-arm64": {
-      "version": "1.11.1",
-      "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-android-arm64/-/resolver-binding-android-arm64-1.11.1.tgz",
-      "integrity": "sha512-lCxkVtb4wp1v+EoN+HjIG9cIIzPkX5OtM03pQYkG+U5O/wL53LC4QbIeazgiKqluGeVEeBlZahHalCaBvU1a2g==",
-      "cpu": [
-        "arm64"
-      ],
+    "node_modules/@jridgewell/sourcemap-codec": {
+      "version": "1.5.5",
+      "resolved": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.5.5.tgz",
+      "integrity": "sha512-cYQ9310grqxueWbl+WuIUIaiUaDcj7WOq5fVhEljNVgRfOUhY9fy2zTvfoqWsnebh8Sl70VScFbICvJnLKB0Og==",
       "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "android"
-      ]
+      "license": "MIT"
     },
-    "node_modules/@unrs/resolver-binding-darwin-arm64": {
-      "version": "1.11.1",
-      "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-darwin-arm64/-/resolver-binding-darwin-arm64-1.11.1.tgz",
-      "integrity": "sha512-gPVA1UjRu1Y/IsB/dQEsp2V1pm44Of6+LWvbLc9SDk1c2KhhDRDBUkQCYVWe6f26uJb3fOK8saWMgtX8IrMk3g==",
-      "cpu": [
-        "arm64"
-      ],
+    "node_modules/@jridgewell/trace-mapping": {
+      "version": "0.3.31",
+      "resolved": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.31.tgz",
+      "integrity": "sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw==",
       "dev": true,
       "license": "MIT",
-      "optional": true,
-      "os": [
-        "darwin"
-      ]
+      "dependencies": {
+        "@jridgewell/resolve-uri": "^3.1.0",
+        "@jridgewell/sourcemap-codec": "^1.4.14"
+      }
     },
-    "node_modules/@unrs/resolver-binding-darwin-x64": {
-      "version": "1.11.1",
-      "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-darwin-x64/-/resolver-binding-darwin-x64-1.11.1.tgz",
-      "integrity": "sha512-cFzP7rWKd3lZaCsDze07QX1SC24lO8mPty9vdP+YVa3MGdVgPmFc59317b2ioXtgCMKGiCLxJ4HQs62oz6GfRQ==",
-      "cpu": [
-        "x64"
+    "node_modules/@malept/cross-spawn-promise": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/@malept/cross-spawn-promise/-/cross-spawn-promise-2.0.0.tgz",
+      "integrity": "sha512-1DpKU0Z5ThltBwjNySMC14g0CkbyhCaz9FkhxqNsZI6uAPJXFS8cMXlBKo26FJ8ZuW6S9GCMcR9IO5k2X5/9Fg==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "individual",
+          "url": "https://github.com/sponsors/malept"
+        },
+        {
+          "type": "tidelift",
+          "url": "https://tidelift.com/subscription/pkg/npm-.malept-cross-spawn-promise?utm_medium=referral&utm_source=npm_fund"
+        }
       ],
+      "license": "Apache-2.0",
+      "dependencies": {
+        "cross-spawn": "^7.0.1"
+      },
+      "engines": {
+        "node": ">= 12.13.0"
+      }
+    },
+    "node_modules/@malept/flatpak-bundler": {
+      "version": "0.4.0",
+      "resolved": "https://registry.npmjs.org/@malept/flatpak-bundler/-/flatpak-bundler-0.4.0.tgz",
+      "integrity": "sha512-9QOtNffcOF/c1seMCDnjckb3R9WHcG34tky+FHpNKKCW0wc/scYLwMtO+ptyGUfMW0/b/n4qRiALlaFHc9Oj7Q==",
       "dev": true,
       "license": "MIT",
-      "optional": true,
-      "os": [
-        "darwin"
-      ]
+      "dependencies": {
+        "debug": "^4.1.1",
+        "fs-extra": "^9.0.0",
+        "lodash": "^4.17.15",
+        "tmp-promise": "^3.0.2"
+      },
+      "engines": {
+        "node": ">= 10.0.0"
+      }
     },
-    "node_modules/@unrs/resolver-binding-freebsd-x64": {
-      "version": "1.11.1",
-      "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-freebsd-x64/-/resolver-binding-freebsd-x64-1.11.1.tgz",
-      "integrity": "sha512-fqtGgak3zX4DCB6PFpsH5+Kmt/8CIi4Bry4rb1ho6Av2QHTREM+47y282Uqiu3ZRF5IQioJQ5qWRV6jduA+iGw==",
-      "cpu": [
-        "x64"
-      ],
+    "node_modules/@malept/flatpak-bundler/node_modules/debug": {
+      "version": "4.4.3",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
+      "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
       "dev": true,
       "license": "MIT",
-      "optional": true,
-      "os": [
-        "freebsd"
-      ]
+      "dependencies": {
+        "ms": "^2.1.3"
+      },
+      "engines": {
+        "node": ">=6.0"
+      },
+      "peerDependenciesMeta": {
+        "supports-color": {
+          "optional": true
+        }
+      }
     },
-    "node_modules/@unrs/resolver-binding-linux-arm-gnueabihf": {
-      "version": "1.11.1",
-      "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-arm-gnueabihf/-/resolver-binding-linux-arm-gnueabihf-1.11.1.tgz",
-      "integrity": "sha512-u92mvlcYtp9MRKmP+ZvMmtPN34+/3lMHlyMj7wXJDeXxuM0Vgzz0+PPJNsro1m3IZPYChIkn944wW8TYgGKFHw==",
-      "cpu": [
-        "arm"
-      ],
+    "node_modules/@malept/flatpak-bundler/node_modules/fs-extra": {
+      "version": "9.1.0",
+      "resolved": "https://registry.npmjs.org/fs-extra/-/fs-extra-9.1.0.tgz",
+      "integrity": "sha512-hcg3ZmepS30/7BSFqRvoo3DOMQu7IjqxO5nCDt+zM9XWjb33Wg7ziNT+Qvqbuc3+gWpzO02JubVyk2G4Zvo1OQ==",
       "dev": true,
       "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ]
+      "dependencies": {
+        "at-least-node": "^1.0.0",
+        "graceful-fs": "^4.2.0",
+        "jsonfile": "^6.0.1",
+        "universalify": "^2.0.0"
+      },
+      "engines": {
+        "node": ">=10"
+      }
     },
-    "node_modules/@unrs/resolver-binding-linux-arm-musleabihf": {
-      "version": "1.11.1",
-      "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-arm-musleabihf/-/resolver-binding-linux-arm-musleabihf-1.11.1.tgz",
-      "integrity": "sha512-cINaoY2z7LVCrfHkIcmvj7osTOtm6VVT16b5oQdS4beibX2SYBwgYLmqhBjA1t51CarSaBuX5YNsWLjsqfW5Cw==",
-      "cpu": [
-        "arm"
-      ],
+    "node_modules/@napi-rs/wasm-runtime": {
+      "version": "0.2.12",
+      "resolved": "https://registry.npmjs.org/@napi-rs/wasm-runtime/-/wasm-runtime-0.2.12.tgz",
+      "integrity": "sha512-ZVWUcfwY4E/yPitQJl481FjFo3K22D6qF0DuFH6Y/nbnE11GY5uguDxZMGXPQ8WQ0128MXQD7TnfHyK4oWoIJQ==",
       "dev": true,
       "license": "MIT",
       "optional": true,
-      "os": [
-        "linux"
-      ]
+      "dependencies": {
+        "@emnapi/core": "^1.4.3",
+        "@emnapi/runtime": "^1.4.3",
+        "@tybys/wasm-util": "^0.10.0"
+      }
     },
-    "node_modules/@unrs/resolver-binding-linux-arm64-gnu": {
-      "version": "1.11.1",
-      "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-arm64-gnu/-/resolver-binding-linux-arm64-gnu-1.11.1.tgz",
-      "integrity": "sha512-34gw7PjDGB9JgePJEmhEqBhWvCiiWCuXsL9hYphDF7crW7UgI05gyBAi6MF58uGcMOiOqSJ2ybEeCvHcq0BCmQ==",
-      "cpu": [
-        "arm64"
-      ],
+    "node_modules/@noble/hashes": {
+      "version": "1.8.0",
+      "resolved": "https://registry.npmjs.org/@noble/hashes/-/hashes-1.8.0.tgz",
+      "integrity": "sha512-jCs9ldd7NwzpgXDIf6P3+NrHh9/sD6CQdxHyjQI+h/6rDNo88ypBxxz45UDuZHz9r3tNz7N/VInSVoVdtXEI4A==",
       "dev": true,
       "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ]
+      "engines": {
+        "node": "^14.21.3 || >=16"
+      },
+      "funding": {
+        "url": "https://paulmillr.com/funding/"
+      }
     },
-    "node_modules/@unrs/resolver-binding-linux-arm64-musl": {
-      "version": "1.11.1",
-      "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-arm64-musl/-/resolver-binding-linux-arm64-musl-1.11.1.tgz",
-      "integrity": "sha512-RyMIx6Uf53hhOtJDIamSbTskA99sPHS96wxVE/bJtePJJtpdKGXO1wY90oRdXuYOGOTuqjT8ACccMc4K6QmT3w==",
-      "cpu": [
-        "arm64"
-      ],
+    "node_modules/@nodelib/fs.scandir": {
+      "version": "2.1.5",
+      "resolved": "https://registry.npmjs.org/@nodelib/fs.scandir/-/fs.scandir-2.1.5.tgz",
+      "integrity": "sha512-vq24Bq3ym5HEQm2NKCr3yXDwjc7vTsEThRDnkp2DK9p1uqLR+DHurm/NOTo0KG7HYHU7eppKZj3MyqYuMBf62g==",
       "dev": true,
       "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ]
+      "dependencies": {
+        "@nodelib/fs.stat": "2.0.5",
+        "run-parallel": "^1.1.9"
+      },
+      "engines": {
+        "node": ">= 8"
+      }
     },
-    "node_modules/@unrs/resolver-binding-linux-ppc64-gnu": {
-      "version": "1.11.1",
-      "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-ppc64-gnu/-/resolver-binding-linux-ppc64-gnu-1.11.1.tgz",
-      "integrity": "sha512-D8Vae74A4/a+mZH0FbOkFJL9DSK2R6TFPC9M+jCWYia/q2einCubX10pecpDiTmkJVUH+y8K3BZClycD8nCShA==",
-      "cpu": [
-        "ppc64"
-      ],
+    "node_modules/@nodelib/fs.stat": {
+      "version": "2.0.5",
+      "resolved": "https://registry.npmjs.org/@nodelib/fs.stat/-/fs.stat-2.0.5.tgz",
+      "integrity": "sha512-RkhPPp2zrqDAQA/2jNhnztcPAlv64XdhIp7a7454A5ovI7Bukxgt7MX7udwAu3zg1DcpPU0rz3VV1SeaqvY4+A==",
       "dev": true,
       "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ]
+      "engines": {
+        "node": ">= 8"
+      }
     },
-    "node_modules/@unrs/resolver-binding-linux-riscv64-gnu": {
-      "version": "1.11.1",
-      "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-riscv64-gnu/-/resolver-binding-linux-riscv64-gnu-1.11.1.tgz",
-      "integrity": "sha512-frxL4OrzOWVVsOc96+V3aqTIQl1O2TjgExV4EKgRY09AJ9leZpEg8Ak9phadbuX0BA4k8U5qtvMSQQGGmaJqcQ==",
-      "cpu": [
-        "riscv64"
-      ],
+    "node_modules/@nodelib/fs.walk": {
+      "version": "1.2.8",
+      "resolved": "https://registry.npmjs.org/@nodelib/fs.walk/-/fs.walk-1.2.8.tgz",
+      "integrity": "sha512-oGB+UxlgWcgQkgwo8GcEGwemoTFt3FIO9ababBmaGwXIoBKZ+GTy0pP185beGg7Llih/NSHSV2XAs1lnznocSg==",
       "dev": true,
       "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ]
+      "dependencies": {
+        "@nodelib/fs.scandir": "2.1.5",
+        "fastq": "^1.6.0"
+      },
+      "engines": {
+        "node": ">= 8"
+      }
     },
-    "node_modules/@unrs/resolver-binding-linux-riscv64-musl": {
-      "version": "1.11.1",
-      "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-riscv64-musl/-/resolver-binding-linux-riscv64-musl-1.11.1.tgz",
-      "integrity": "sha512-mJ5vuDaIZ+l/acv01sHoXfpnyrNKOk/3aDoEdLO/Xtn9HuZlDD6jKxHlkN8ZhWyLJsRBxfv9GYM2utQ1SChKew==",
-      "cpu": [
-        "riscv64"
-      ],
+    "node_modules/@paralleldrive/cuid2": {
+      "version": "2.3.1",
+      "resolved": "https://registry.npmjs.org/@paralleldrive/cuid2/-/cuid2-2.3.1.tgz",
+      "integrity": "sha512-XO7cAxhnTZl0Yggq6jOgjiOHhbgcO4NqFqwSmQpjK3b6TEE6Uj/jfSk6wzYyemh3+I0sHirKSetjQwn5cZktFw==",
       "dev": true,
       "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ]
+      "dependencies": {
+        "@noble/hashes": "^1.1.5"
+      }
     },
-    "node_modules/@unrs/resolver-binding-linux-s390x-gnu": {
-      "version": "1.11.1",
-      "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-s390x-gnu/-/resolver-binding-linux-s390x-gnu-1.11.1.tgz",
-      "integrity": "sha512-kELo8ebBVtb9sA7rMe1Cph4QHreByhaZ2QEADd9NzIQsYNQpt9UkM9iqr2lhGr5afh885d/cB5QeTXSbZHTYPg==",
-      "cpu": [
-        "s390x"
-      ],
+    "node_modules/@peculiar/asn1-schema": {
+      "version": "2.11.0",
+      "resolved": "https://registry.npmjs.org/@peculiar/asn1-schema/-/asn1-schema-2.11.0.tgz",
+      "integrity": "sha512-8xh4avo53/vXO6UEv9yaoJ83hY581geaLTygf61NPIXP5AeIZCPjJhpTaYU23IZkG+NpLN/C9FYzWp7hphIT9A==",
       "dev": true,
       "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ]
+      "dependencies": {
+        "@peculiar/utils": "^2.0.2",
+        "asn1js": "^3.0.10",
+        "tslib": "^2.8.1"
+      },
+      "engines": {
+        "node": ">=14"
+      }
     },
-    "node_modules/@unrs/resolver-binding-linux-x64-gnu": {
-      "version": "1.11.1",
-      "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-x64-gnu/-/resolver-binding-linux-x64-gnu-1.11.1.tgz",
-      "integrity": "sha512-C3ZAHugKgovV5YvAMsxhq0gtXuwESUKc5MhEtjBpLoHPLYM+iuwSj3lflFwK3DPm68660rZ7G8BMcwSro7hD5w==",
-      "cpu": [
-        "x64"
-      ],
+    "node_modules/@peculiar/json-schema": {
+      "version": "1.1.12",
+      "resolved": "https://registry.npmjs.org/@peculiar/json-schema/-/json-schema-1.1.12.tgz",
+      "integrity": "sha512-coUfuoMeIB7B8/NMekxaDzLhaYmp0HZNPEjYRm9goRou8UZIC3z21s0sL9AWoCw4EG876QyO3kYrc61WNF9B/w==",
       "dev": true,
       "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ]
+      "dependencies": {
+        "tslib": "^2.0.0"
+      },
+      "engines": {
+        "node": ">=8.0.0"
+      }
     },
-    "node_modules/@unrs/resolver-binding-linux-x64-musl": {
-      "version": "1.11.1",
-      "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-x64-musl/-/resolver-binding-linux-x64-musl-1.11.1.tgz",
-      "integrity": "sha512-rV0YSoyhK2nZ4vEswT/QwqzqQXw5I6CjoaYMOX0TqBlWhojUf8P94mvI7nuJTeaCkkds3QE4+zS8Ko+GdXuZtA==",
-      "cpu": [
-        "x64"
-      ],
+    "node_modules/@peculiar/utils": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/@peculiar/utils/-/utils-2.0.3.tgz",
+      "integrity": "sha512-+oL3HPFRIZ1St2K50lWCXiioIgSoxzz7R1J3uF6neO2yl1sgmpgY6XXJH4BdpoDkMWznQTeYF6oWNDZLCdQ4eQ==",
       "dev": true,
       "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ]
+      "dependencies": {
+        "tslib": "^2.8.1"
+      }
     },
-    "node_modules/@unrs/resolver-binding-wasm32-wasi": {
-      "version": "1.11.1",
-      "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-wasm32-wasi/-/resolver-binding-wasm32-wasi-1.11.1.tgz",
-      "integrity": "sha512-5u4RkfxJm+Ng7IWgkzi3qrFOvLvQYnPBmjmZQ8+szTK/b31fQCnleNl1GgEt7nIsZRIf5PLhPwT0WM+q45x/UQ==",
-      "cpu": [
-        "wasm32"
-      ],
+    "node_modules/@peculiar/webcrypto": {
+      "version": "1.7.1",
+      "resolved": "https://registry.npmjs.org/@peculiar/webcrypto/-/webcrypto-1.7.1.tgz",
+      "integrity": "sha512-ODOov0sGMJMf3jPonOkgGqPknTsu+DdQ7kD++gz8aI+aFMOMHFbWAA2taqXXVTdP+OTOQR/znGvSpmkeI0WTYQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@peculiar/asn1-schema": "^2.7.0",
+        "@peculiar/json-schema": "^1.1.12",
+        "@peculiar/utils": "^2.0.2",
+        "tslib": "^2.8.1",
+        "webcrypto-core": "^1.9.2"
+      },
+      "engines": {
+        "node": ">=14.18.0"
+      }
+    },
+    "node_modules/@pkgjs/parseargs": {
+      "version": "0.11.0",
+      "resolved": "https://registry.npmjs.org/@pkgjs/parseargs/-/parseargs-0.11.0.tgz",
+      "integrity": "sha512-+1VkjdD0QBLPodGrJUeqarH8VAIvQODIbwh9XpP5Syisf7YoQgsJKPNFoqqLQlu+VQ/tVSshMR6loPMn8U+dPg==",
       "dev": true,
       "license": "MIT",
       "optional": true,
+      "engines": {
+        "node": ">=14"
+      }
+    },
+    "node_modules/@pkgr/core": {
+      "version": "0.2.9",
+      "resolved": "https://registry.npmjs.org/@pkgr/core/-/core-0.2.9.tgz",
+      "integrity": "sha512-QNqXyfVS2wm9hweSYD2O7F0G06uurj9kZ96TRQE5Y9hU7+tgdZwIkbAKc5Ocy1HxEY2kuDQa6cQ1WRs/O5LFKA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": "^12.20.0 || ^14.18.0 || >=16.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/pkgr"
+      }
+    },
+    "node_modules/@posthog/core": {
+      "version": "1.59.3",
+      "resolved": "https://registry.npmjs.org/@posthog/core/-/core-1.59.3.tgz",
+      "integrity": "sha512-XbfpD82YSms/asHU44xQq5vqadi6rHTRg6fyoTqjdGTiC1NiPRCeO8xhtANT682BkvlKJo+JwRDBu3Q8oEqQpw==",
+      "license": "MIT",
       "dependencies": {
-        "@napi-rs/wasm-runtime": "^0.2.11"
+        "@posthog/types": "^1.416.0"
+      }
+    },
+    "node_modules/@posthog/types": {
+      "version": "1.416.0",
+      "resolved": "https://registry.npmjs.org/@posthog/types/-/types-1.416.0.tgz",
+      "integrity": "sha512-0/9+02s/0uDyrH4G/qUg1yyl6gXUg8Uuxw/PlDad3KLzo9FFS9zS/kAQaEshx/saVGupj1aAy/4EUBxWisBogw==",
+      "license": "MIT"
+    },
+    "node_modules/@puppeteer/browsers": {
+      "version": "2.10.8",
+      "resolved": "https://registry.npmjs.org/@puppeteer/browsers/-/browsers-2.10.8.tgz",
+      "integrity": "sha512-f02QYEnBDE0p8cteNoPYHHjbDuwyfbe4cCIVlNi8/MRicIxFW4w4CfgU0LNgWEID6s06P+hRJ1qjpBLMhPRCiQ==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "dependencies": {
+        "debug": "^4.4.1",
+        "extract-zip": "^2.0.1",
+        "progress": "^2.0.3",
+        "proxy-agent": "^6.5.0",
+        "semver": "^7.7.2",
+        "tar-fs": "^3.1.0",
+        "yargs": "^17.7.2"
+      },
+      "bin": {
+        "browsers": "lib/cjs/main-cli.js"
       },
       "engines": {
-        "node": ">=14.0.0"
+        "node": ">=18"
+      }
+    },
+    "node_modules/@puppeteer/browsers/node_modules/debug": {
+      "version": "4.4.1",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.1.tgz",
+      "integrity": "sha512-KcKCqiftBJcZr++7ykoDIEwSa3XWowTfNPo92BYxjXiyYEVrUQh2aLyhxBCwww+heortUFxEJYcRzosstTEBYQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "ms": "^2.1.3"
+      },
+      "engines": {
+        "node": ">=6.0"
+      },
+      "peerDependenciesMeta": {
+        "supports-color": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/@puppeteer/browsers/node_modules/semver": {
+      "version": "7.7.2",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.7.2.tgz",
+      "integrity": "sha512-RF0Fw+rO5AMf9MAyaRXI4AV0Ulj5lMHqVxxdSgiVbixSCXoEmmX/jk0CuJw4+3SqroYO9VoUh+HcuJivvtJemA==",
+      "dev": true,
+      "license": "ISC",
+      "bin": {
+        "semver": "bin/semver.js"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/@sinclair/typebox": {
+      "version": "0.34.48",
+      "resolved": "https://registry.npmjs.org/@sinclair/typebox/-/typebox-0.34.48.tgz",
+      "integrity": "sha512-kKJTNuK3AQOrgjjotVxMrCn1sUJwM76wMszfq1kdU4uYVJjvEWuFQ6HgvLt4Xz3fSmZlTOxJ/Ie13KnIcWQXFA==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@sindresorhus/is": {
+      "version": "4.6.0",
+      "resolved": "https://registry.npmjs.org/@sindresorhus/is/-/is-4.6.0.tgz",
+      "integrity": "sha512-t09vSN3MdfsyCHoFcTRCH/iUtG7OJ0CsjzB8cjAmKc/va/kIgeDI/TxsigdncE/4be734m0cvIYwNaV4i2XqAw==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=10"
+      },
+      "funding": {
+        "url": "https://github.com/sindresorhus/is?sponsor=1"
+      }
+    },
+    "node_modules/@sinonjs/commons": {
+      "version": "3.0.1",
+      "resolved": "https://registry.npmjs.org/@sinonjs/commons/-/commons-3.0.1.tgz",
+      "integrity": "sha512-K3mCHKQ9sVh8o1C9cxkwxaOmXoAMlDxC1mYyHrjqOWEcBjYr76t96zL2zlj5dUGZ3HSw240X1qgH3Mjf1yJWpQ==",
+      "dev": true,
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "type-detect": "4.0.8"
+      }
+    },
+    "node_modules/@sinonjs/fake-timers": {
+      "version": "13.0.5",
+      "resolved": "https://registry.npmjs.org/@sinonjs/fake-timers/-/fake-timers-13.0.5.tgz",
+      "integrity": "sha512-36/hTbH2uaWuGVERyC6da9YwGWnzUZXuPro/F2LfsdOsLnCojz/iSH8MxUt/FD2S5XBSVPhmArFUXcpCQ2Hkiw==",
+      "dev": true,
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "@sinonjs/commons": "^3.0.1"
+      }
+    },
+    "node_modules/@szmarczak/http-timer": {
+      "version": "4.0.6",
+      "resolved": "https://registry.npmjs.org/@szmarczak/http-timer/-/http-timer-4.0.6.tgz",
+      "integrity": "sha512-4BAffykYOgO+5nzBWYwE3W90sBgLJoUPRWWcL8wlyiM8IB8ipJz3UMJ9KXQd1RKQXpKp8Tutn80HZtWsu2u76w==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "defer-to-connect": "^2.0.0"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/@tailwindcss/container-queries": {
+      "version": "0.1.1",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/container-queries/-/container-queries-0.1.1.tgz",
+      "integrity": "sha512-p18dswChx6WnTSaJCSGx6lTmrGzNNvm2FtXmiO6AuA1V4U5REyoqwmT6kgAsIMdjo07QdAfYXHJ4hnMtfHzWgA==",
+      "dev": true,
+      "license": "MIT",
+      "peerDependencies": {
+        "tailwindcss": ">=3.2.0"
+      }
+    },
+    "node_modules/@tailwindcss/forms": {
+      "version": "0.5.11",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/forms/-/forms-0.5.11.tgz",
+      "integrity": "sha512-h9wegbZDPurxG22xZSoWtdzc41/OlNEUQERNqI/0fOwa2aVlWGu7C35E/x6LDyD3lgtztFSSjKZyuVM0hxhbgA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "mini-svg-data-uri": "^1.2.3"
+      },
+      "peerDependencies": {
+        "tailwindcss": ">=3.0.0 || >= 3.0.0-alpha.1 || >= 4.0.0-alpha.20 || >= 4.0.0-beta.1"
+      }
+    },
+    "node_modules/@tootallnate/quickjs-emscripten": {
+      "version": "0.23.0",
+      "resolved": "https://registry.npmjs.org/@tootallnate/quickjs-emscripten/-/quickjs-emscripten-0.23.0.tgz",
+      "integrity": "sha512-C5Mc6rdnsaJDjO3UpGW/CQTHtCKaYlScZTly4JIu97Jxo/odCiH0ITnDXSJPTOrEKk/ycSZ0AOgTmkDtkOsvIA==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@tybys/wasm-util": {
+      "version": "0.10.1",
+      "resolved": "https://registry.npmjs.org/@tybys/wasm-util/-/wasm-util-0.10.1.tgz",
+      "integrity": "sha512-9tTaPJLSiejZKx+Bmog4uSubteqTvFrVrURwkmHixBo0G4seD0zUxp98E1DzUBJxLQ3NPwXrGKDiVjwx/DpPsg==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "tslib": "^2.4.0"
+      }
+    },
+    "node_modules/@types/babel__core": {
+      "version": "7.20.5",
+      "resolved": "https://registry.npmjs.org/@types/babel__core/-/babel__core-7.20.5.tgz",
+      "integrity": "sha512-qoQprZvz5wQFJwMDqeseRXWv3rqMvhgpbXFfVyWhbx9X47POIA6i/+dXefEmZKoAgOaTdaIgNSMqMIU61yRyzA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/parser": "^7.20.7",
+        "@babel/types": "^7.20.7",
+        "@types/babel__generator": "*",
+        "@types/babel__template": "*",
+        "@types/babel__traverse": "*"
+      }
+    },
+    "node_modules/@types/babel__generator": {
+      "version": "7.27.0",
+      "resolved": "https://registry.npmjs.org/@types/babel__generator/-/babel__generator-7.27.0.tgz",
+      "integrity": "sha512-ufFd2Xi92OAVPYsy+P4n7/U7e68fex0+Ee8gSG9KX7eo084CWiQ4sdxktvdl0bOPupXtVJPY19zk6EwWqUQ8lg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/types": "^7.0.0"
+      }
+    },
+    "node_modules/@types/babel__template": {
+      "version": "7.4.4",
+      "resolved": "https://registry.npmjs.org/@types/babel__template/-/babel__template-7.4.4.tgz",
+      "integrity": "sha512-h/NUaSyG5EyxBIp8YRxo4RMe2/qQgvyowRwVMzhYhBCONbW8PUsg4lkFMrhgZhUe5z3L3MiLDuvyJ/CaPa2A8A==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/parser": "^7.1.0",
+        "@babel/types": "^7.0.0"
+      }
+    },
+    "node_modules/@types/babel__traverse": {
+      "version": "7.28.0",
+      "resolved": "https://registry.npmjs.org/@types/babel__traverse/-/babel__traverse-7.28.0.tgz",
+      "integrity": "sha512-8PvcXf70gTDZBgt9ptxJ8elBeBjcLOAcOtoO/mPJjtji1+CdGbHgm77om1GrsPxsiE+uXIpNSK64UYaIwQXd4Q==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/types": "^7.28.2"
+      }
+    },
+    "node_modules/@types/cacheable-request": {
+      "version": "6.0.3",
+      "resolved": "https://registry.npmjs.org/@types/cacheable-request/-/cacheable-request-6.0.3.tgz",
+      "integrity": "sha512-IQ3EbTzGxIigb1I3qPZc1rWJnH0BmSKv5QYTalEwweFvyBDLSAe24zP0le/hyi7ecGfZVlIVAg4BZqb8WBwKqw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/http-cache-semantics": "*",
+        "@types/keyv": "^3.1.4",
+        "@types/node": "*",
+        "@types/responselike": "^1.0.0"
+      }
+    },
+    "node_modules/@types/debug": {
+      "version": "4.1.13",
+      "resolved": "https://registry.npmjs.org/@types/debug/-/debug-4.1.13.tgz",
+      "integrity": "sha512-KSVgmQmzMwPlmtljOomayoR89W4FynCAi3E8PPs7vmDVPe84hT+vGPKkJfThkmXs0x0jAaa9U8uW8bbfyS2fWw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/ms": "*"
+      }
+    },
+    "node_modules/@types/fs-extra": {
+      "version": "9.0.13",
+      "resolved": "https://registry.npmjs.org/@types/fs-extra/-/fs-extra-9.0.13.tgz",
+      "integrity": "sha512-nEnwB++1u5lVDM2UI4c1+5R+FYaKfaAzS4OococimjVm3nQw3TuzH5UNsocrcTBbhnerblyHj4A49qXbIiZdpA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/node": "*"
+      }
+    },
+    "node_modules/@types/http-cache-semantics": {
+      "version": "4.2.0",
+      "resolved": "https://registry.npmjs.org/@types/http-cache-semantics/-/http-cache-semantics-4.2.0.tgz",
+      "integrity": "sha512-L3LgimLHXtGkWikKnsPg0/VFx9OGZaC+eN1u4r+OB1XRqH3meBIAVC2zr1WdMH+RHmnRkqliQAOHNJ/E0j/e0Q==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@types/istanbul-lib-coverage": {
+      "version": "2.0.6",
+      "resolved": "https://registry.npmjs.org/@types/istanbul-lib-coverage/-/istanbul-lib-coverage-2.0.6.tgz",
+      "integrity": "sha512-2QF/t/auWm0lsy8XtKVPG19v3sSOQlJe/YHZgfjb/KBBHOGSV+J2q/S671rcq9uTBrLAXmZpqJiaQbMT+zNU1w==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@types/istanbul-lib-report": {
+      "version": "3.0.3",
+      "resolved": "https://registry.npmjs.org/@types/istanbul-lib-report/-/istanbul-lib-report-3.0.3.tgz",
+      "integrity": "sha512-NQn7AHQnk/RSLOxrBbGyJM/aVQ+pjj5HCgasFxc0K/KhoATfQ/47AyUl15I2yBUpihjmas+a+VJBOqecrFH+uA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/istanbul-lib-coverage": "*"
+      }
+    },
+    "node_modules/@types/istanbul-reports": {
+      "version": "3.0.4",
+      "resolved": "https://registry.npmjs.org/@types/istanbul-reports/-/istanbul-reports-3.0.4.tgz",
+      "integrity": "sha512-pk2B1NWalF9toCRu6gjBzR69syFjP4Od8WRAX+0mmf9lAjCRicLOWc+ZrxZHx/0XRjotgkF9t6iaMJ+aXcOdZQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/istanbul-lib-report": "*"
+      }
+    },
+    "node_modules/@types/jest": {
+      "version": "30.0.0",
+      "resolved": "https://registry.npmjs.org/@types/jest/-/jest-30.0.0.tgz",
+      "integrity": "sha512-XTYugzhuwqWjws0CVz8QpM36+T+Dz5mTEBKhNs/esGLnCIlGdRy+Dq78NRjd7ls7r8BC8ZRMOrKlkO1hU0JOwA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "expect": "^30.0.0",
+        "pretty-format": "^30.0.0"
+      }
+    },
+    "node_modules/@types/keyv": {
+      "version": "3.1.4",
+      "resolved": "https://registry.npmjs.org/@types/keyv/-/keyv-3.1.4.tgz",
+      "integrity": "sha512-BQ5aZNSCpj7D6K2ksrRCTmKRLEpnPvWDiLPfoGyhZ++8YtiK9d/3DBKPJgry359X/P1PfruyYwvnvwFjuEiEIg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/node": "*"
+      }
+    },
+    "node_modules/@types/ms": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/@types/ms/-/ms-2.1.0.tgz",
+      "integrity": "sha512-GsCCIZDE/p3i96vtEqx+7dBUGXrc7zeSK3wwPHIaRThS+9OhWIXRqzs4d6k1SVU8g91DrNRWxWUGhp5KXQb2VA==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@types/node": {
+      "version": "24.19.2",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-24.19.2.tgz",
+      "integrity": "sha512-93d49wCWJkCyN87MxLpNN6KXPCwFw7bVUg79mGUV1OS40JGWwVCr8n61DXCSqz7CV6/VfPkb7xec7uP2M+QHWQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "undici-types": ">=7.24.0 <7.24.7"
+      }
+    },
+    "node_modules/@types/responselike": {
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/@types/responselike/-/responselike-1.0.3.tgz",
+      "integrity": "sha512-H/+L+UkTV33uf49PH5pCAUBVPNj2nDBXTN+qS1dOwyyg24l3CcicicCA7ca+HMvJBZcFgl5r8e+RR6elsb4Lyw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/node": "*"
+      }
+    },
+    "node_modules/@types/stack-utils": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/@types/stack-utils/-/stack-utils-2.0.3.tgz",
+      "integrity": "sha512-9aEbYZ3TbYMznPdcdr3SmIrLXwC/AKZXQeCf9Pgao5CKb8CyHuEX5jzWPTkvregvhRJHcpRO6BFoGW9ycaOkYw==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@types/triple-beam": {
+      "version": "1.3.5",
+      "resolved": "https://registry.npmjs.org/@types/triple-beam/-/triple-beam-1.3.5.tgz",
+      "integrity": "sha512-6WaYesThRMCl19iryMYP7/x2OVgCtbIVflDGFpWnb9irXI3UjYE4AzmYuiUKY1AJstGijoY+MgUszMgRxIYTYw==",
+      "license": "MIT"
+    },
+    "node_modules/@types/yargs": {
+      "version": "17.0.35",
+      "resolved": "https://registry.npmjs.org/@types/yargs/-/yargs-17.0.35.tgz",
+      "integrity": "sha512-qUHkeCyQFxMXg79wQfTtfndEC+N9ZZg76HJftDJp+qH2tV7Gj4OJi7l+PiWwJ+pWtW8GwSmqsDj/oymhrTWXjg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/yargs-parser": "*"
+      }
+    },
+    "node_modules/@types/yargs-parser": {
+      "version": "21.0.3",
+      "resolved": "https://registry.npmjs.org/@types/yargs-parser/-/yargs-parser-21.0.3.tgz",
+      "integrity": "sha512-I4q9QU9MQv4oEOz4tAHJtNz1cwuLxn2F3xcc2iV5WdqLPpUnj30aUuxt1mAxYTG+oe8CZMV/+6rU4S4gRDzqtQ==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@types/yauzl": {
+      "version": "2.10.3",
+      "resolved": "https://registry.npmjs.org/@types/yauzl/-/yauzl-2.10.3.tgz",
+      "integrity": "sha512-oJoftv0LSuaDZE3Le4DbKX+KS9G36NzOeSap90UIK0yMA/NhKJhqlSGtNDORNRaIbQfzjXDrQa0ytJ6mNRGz/Q==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "@types/node": "*"
+      }
+    },
+    "node_modules/@ungap/structured-clone": {
+      "version": "1.3.0",
+      "resolved": "https://registry.npmjs.org/@ungap/structured-clone/-/structured-clone-1.3.0.tgz",
+      "integrity": "sha512-WmoN8qaIAo7WTYWbAZuG8PYEhn5fkz7dZrqTBZ7dtt//lL2Gwms1IcnQ5yHqjDfX8Ft5j4YzDM23f87zBfDe9g==",
+      "dev": true,
+      "license": "ISC"
+    },
+    "node_modules/@unrs/resolver-binding-android-arm-eabi": {
+      "version": "1.11.1",
+      "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-android-arm-eabi/-/resolver-binding-android-arm-eabi-1.11.1.tgz",
+      "integrity": "sha512-ppLRUgHVaGRWUx0R0Ut06Mjo9gBaBkg3v/8AxusGLhsIotbBLuRk51rAzqLC8gq6NyyAojEXglNjzf6R948DNw==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ]
+    },
+    "node_modules/@unrs/resolver-binding-android-arm64": {
+      "version": "1.11.1",
+      "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-android-arm64/-/resolver-binding-android-arm64-1.11.1.tgz",
+      "integrity": "sha512-lCxkVtb4wp1v+EoN+HjIG9cIIzPkX5OtM03pQYkG+U5O/wL53LC4QbIeazgiKqluGeVEeBlZahHalCaBvU1a2g==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ]
+    },
+    "node_modules/@unrs/resolver-binding-darwin-arm64": {
+      "version": "1.11.1",
+      "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-darwin-arm64/-/resolver-binding-darwin-arm64-1.11.1.tgz",
+      "integrity": "sha512-gPVA1UjRu1Y/IsB/dQEsp2V1pm44Of6+LWvbLc9SDk1c2KhhDRDBUkQCYVWe6f26uJb3fOK8saWMgtX8IrMk3g==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ]
+    },
+    "node_modules/@unrs/resolver-binding-darwin-x64": {
+      "version": "1.11.1",
+      "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-darwin-x64/-/resolver-binding-darwin-x64-1.11.1.tgz",
+      "integrity": "sha512-cFzP7rWKd3lZaCsDze07QX1SC24lO8mPty9vdP+YVa3MGdVgPmFc59317b2ioXtgCMKGiCLxJ4HQs62oz6GfRQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ]
+    },
+    "node_modules/@unrs/resolver-binding-freebsd-x64": {
+      "version": "1.11.1",
+      "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-freebsd-x64/-/resolver-binding-freebsd-x64-1.11.1.tgz",
+      "integrity": "sha512-fqtGgak3zX4DCB6PFpsH5+Kmt/8CIi4Bry4rb1ho6Av2QHTREM+47y282Uqiu3ZRF5IQioJQ5qWRV6jduA+iGw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ]
+    },
+    "node_modules/@unrs/resolver-binding-linux-arm-gnueabihf": {
+      "version": "1.11.1",
+      "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-arm-gnueabihf/-/resolver-binding-linux-arm-gnueabihf-1.11.1.tgz",
+      "integrity": "sha512-u92mvlcYtp9MRKmP+ZvMmtPN34+/3lMHlyMj7wXJDeXxuM0Vgzz0+PPJNsro1m3IZPYChIkn944wW8TYgGKFHw==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@unrs/resolver-binding-linux-arm-musleabihf": {
+      "version": "1.11.1",
+      "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-arm-musleabihf/-/resolver-binding-linux-arm-musleabihf-1.11.1.tgz",
+      "integrity": "sha512-cINaoY2z7LVCrfHkIcmvj7osTOtm6VVT16b5oQdS4beibX2SYBwgYLmqhBjA1t51CarSaBuX5YNsWLjsqfW5Cw==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@unrs/resolver-binding-linux-arm64-gnu": {
+      "version": "1.11.1",
+      "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-arm64-gnu/-/resolver-binding-linux-arm64-gnu-1.11.1.tgz",
+      "integrity": "sha512-34gw7PjDGB9JgePJEmhEqBhWvCiiWCuXsL9hYphDF7crW7UgI05gyBAi6MF58uGcMOiOqSJ2ybEeCvHcq0BCmQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@unrs/resolver-binding-linux-arm64-musl": {
+      "version": "1.11.1",
+      "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-arm64-musl/-/resolver-binding-linux-arm64-musl-1.11.1.tgz",
+      "integrity": "sha512-RyMIx6Uf53hhOtJDIamSbTskA99sPHS96wxVE/bJtePJJtpdKGXO1wY90oRdXuYOGOTuqjT8ACccMc4K6QmT3w==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@unrs/resolver-binding-linux-ppc64-gnu": {
+      "version": "1.11.1",
+      "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-ppc64-gnu/-/resolver-binding-linux-ppc64-gnu-1.11.1.tgz",
+      "integrity": "sha512-D8Vae74A4/a+mZH0FbOkFJL9DSK2R6TFPC9M+jCWYia/q2einCubX10pecpDiTmkJVUH+y8K3BZClycD8nCShA==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@unrs/resolver-binding-linux-riscv64-gnu": {
+      "version": "1.11.1",
+      "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-riscv64-gnu/-/resolver-binding-linux-riscv64-gnu-1.11.1.tgz",
+      "integrity": "sha512-frxL4OrzOWVVsOc96+V3aqTIQl1O2TjgExV4EKgRY09AJ9leZpEg8Ak9phadbuX0BA4k8U5qtvMSQQGGmaJqcQ==",
+      "cpu": [
+        "riscv64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@unrs/resolver-binding-linux-riscv64-musl": {
+      "version": "1.11.1",
+      "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-riscv64-musl/-/resolver-binding-linux-riscv64-musl-1.11.1.tgz",
+      "integrity": "sha512-mJ5vuDaIZ+l/acv01sHoXfpnyrNKOk/3aDoEdLO/Xtn9HuZlDD6jKxHlkN8ZhWyLJsRBxfv9GYM2utQ1SChKew==",
+      "cpu": [
+        "riscv64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@unrs/resolver-binding-linux-s390x-gnu": {
+      "version": "1.11.1",
+      "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-s390x-gnu/-/resolver-binding-linux-s390x-gnu-1.11.1.tgz",
+      "integrity": "sha512-kELo8ebBVtb9sA7rMe1Cph4QHreByhaZ2QEADd9NzIQsYNQpt9UkM9iqr2lhGr5afh885d/cB5QeTXSbZHTYPg==",
+      "cpu": [
+        "s390x"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@unrs/resolver-binding-linux-x64-gnu": {
+      "version": "1.11.1",
+      "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-x64-gnu/-/resolver-binding-linux-x64-gnu-1.11.1.tgz",
+      "integrity": "sha512-C3ZAHugKgovV5YvAMsxhq0gtXuwESUKc5MhEtjBpLoHPLYM+iuwSj3lflFwK3DPm68660rZ7G8BMcwSro7hD5w==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@unrs/resolver-binding-linux-x64-musl": {
+      "version": "1.11.1",
+      "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-linux-x64-musl/-/resolver-binding-linux-x64-musl-1.11.1.tgz",
+      "integrity": "sha512-rV0YSoyhK2nZ4vEswT/QwqzqQXw5I6CjoaYMOX0TqBlWhojUf8P94mvI7nuJTeaCkkds3QE4+zS8Ko+GdXuZtA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@unrs/resolver-binding-wasm32-wasi": {
+      "version": "1.11.1",
+      "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-wasm32-wasi/-/resolver-binding-wasm32-wasi-1.11.1.tgz",
+      "integrity": "sha512-5u4RkfxJm+Ng7IWgkzi3qrFOvLvQYnPBmjmZQ8+szTK/b31fQCnleNl1GgEt7nIsZRIf5PLhPwT0WM+q45x/UQ==",
+      "cpu": [
+        "wasm32"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "@napi-rs/wasm-runtime": "^0.2.11"
+      },
+      "engines": {
+        "node": ">=14.0.0"
+      }
+    },
+    "node_modules/@unrs/resolver-binding-win32-arm64-msvc": {
+      "version": "1.11.1",
+      "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-win32-arm64-msvc/-/resolver-binding-win32-arm64-msvc-1.11.1.tgz",
+      "integrity": "sha512-nRcz5Il4ln0kMhfL8S3hLkxI85BXs3o8EYoattsJNdsX4YUU89iOkVn7g0VHSRxFuVMdM4Q1jEpIId1Ihim/Uw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ]
+    },
+    "node_modules/@unrs/resolver-binding-win32-ia32-msvc": {
+      "version": "1.11.1",
+      "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-win32-ia32-msvc/-/resolver-binding-win32-ia32-msvc-1.11.1.tgz",
+      "integrity": "sha512-DCEI6t5i1NmAZp6pFonpD5m7i6aFrpofcp4LA2i8IIq60Jyo28hamKBxNrZcyOwVOZkgsRp9O2sXWBWP8MnvIQ==",
+      "cpu": [
+        "ia32"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ]
+    },
+    "node_modules/@unrs/resolver-binding-win32-x64-msvc": {
+      "version": "1.11.1",
+      "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-win32-x64-msvc/-/resolver-binding-win32-x64-msvc-1.11.1.tgz",
+      "integrity": "sha512-lrW200hZdbfRtztbygyaq/6jP6AKE8qQN2KvPcJ+x7wiD038YtnYtZ82IMNJ69GJibV7bwL3y9FgK+5w/pYt6g==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ]
+    },
+    "node_modules/@xmldom/xmldom": {
+      "version": "0.8.15",
+      "resolved": "https://registry.npmjs.org/@xmldom/xmldom/-/xmldom-0.8.15.tgz",
+      "integrity": "sha512-/5NV/vDALVFDXgLmfsy9TRCBlKwO2LNBFzpzvb9iIj+jR+eSc6DLYYvVOdivT/jm7MtU6TebYuRmzEOI7w40UA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=10.0.0"
+      }
+    },
+    "node_modules/abbrev": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/abbrev/-/abbrev-4.0.0.tgz",
+      "integrity": "sha512-a1wflyaL0tHtJSmLSOVybYhy22vRih4eduhhrkcjgrWGnRfrZtovJ2FRjxuTtkkj47O/baf0R86QU5OuYpz8fA==",
+      "dev": true,
+      "license": "ISC",
+      "engines": {
+        "node": "^20.17.0 || >=22.9.0"
+      }
+    },
+    "node_modules/accepts": {
+      "version": "1.3.8",
+      "resolved": "https://registry.npmjs.org/accepts/-/accepts-1.3.8.tgz",
+      "integrity": "sha512-PYAthTa2m2VKxuvSD3DPC/Gy+U+sOA1LAuT8mkmRuvw+NACSaeXEQ+NHcVF7rONl6qcaxV3Uuemwawk+7+SJLw==",
+      "license": "MIT",
+      "dependencies": {
+        "mime-types": "~2.1.34",
+        "negotiator": "0.6.3"
+      },
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/agent-base": {
+      "version": "7.1.4",
+      "resolved": "https://registry.npmjs.org/agent-base/-/agent-base-7.1.4.tgz",
+      "integrity": "sha512-MnA+YT8fwfJPgBx3m60MNqakm30XOkyIoH1y6huTQvC0PwZG7ki8NacLBcrPbNoo8vEZy7Jpuk7+jMO+CUovTQ==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">= 14"
+      }
+    },
+    "node_modules/ajv": {
+      "version": "8.20.0",
+      "resolved": "https://registry.npmjs.org/ajv/-/ajv-8.20.0.tgz",
+      "integrity": "sha512-Thbli+OlOj+iMPYFBVBfJ3OmCAnaSyNn4M1vz9T6Gka5Jt9ba/HIR56joy65tY6kx/FCF5VXNB819Y7/GUrBGA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "fast-deep-equal": "^3.1.3",
+        "fast-uri": "^3.0.1",
+        "json-schema-traverse": "^1.0.0",
+        "require-from-string": "^2.0.2"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/epoberezkin"
+      }
+    },
+    "node_modules/ansi-escapes": {
+      "version": "4.3.2",
+      "resolved": "https://registry.npmjs.org/ansi-escapes/-/ansi-escapes-4.3.2.tgz",
+      "integrity": "sha512-gKXj5ALrKWQLsYG9jlTRmR/xKluxHV+Z9QEwNIgCfM1/uwPMCuzVVnh5mwTd+OuBZcwSIMbqssNWRm1lE51QaQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "type-fest": "^0.21.3"
+      },
+      "engines": {
+        "node": ">=8"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/ansi-regex": {
+      "version": "5.0.1",
+      "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz",
+      "integrity": "sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/ansi-styles": {
+      "version": "4.3.0",
+      "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz",
+      "integrity": "sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==",
+      "license": "MIT",
+      "dependencies": {
+        "color-convert": "^2.0.1"
+      },
+      "engines": {
+        "node": ">=8"
+      },
+      "funding": {
+        "url": "https://github.com/chalk/ansi-styles?sponsor=1"
+      }
+    },
+    "node_modules/ansi-styles/node_modules/color-convert": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz",
+      "integrity": "sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==",
+      "license": "MIT",
+      "dependencies": {
+        "color-name": "~1.1.4"
+      },
+      "engines": {
+        "node": ">=7.0.0"
+      }
+    },
+    "node_modules/ansi-styles/node_modules/color-name": {
+      "version": "1.1.4",
+      "resolved": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz",
+      "integrity": "sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==",
+      "license": "MIT"
+    },
+    "node_modules/any-promise": {
+      "version": "1.3.0",
+      "resolved": "https://registry.npmjs.org/any-promise/-/any-promise-1.3.0.tgz",
+      "integrity": "sha512-7UvmKalWRt1wgjL1RrGxoSJW/0QZFIegpeGvZG9kjp8vrRu55XTHbwnqq2GpXm9uLbcuhxm3IqX9OB4MZR1b2A==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/anymatch": {
+      "version": "3.1.3",
+      "resolved": "https://registry.npmjs.org/anymatch/-/anymatch-3.1.3.tgz",
+      "integrity": "sha512-KMReFUr0B4t+D+OBkjR3KYqvocp2XaSzO55UcB6mgQMd3KbcE+mWTyvVV7D/zsdEbNnV6acZUutkiHQXvTr1Rw==",
+      "dev": true,
+      "license": "ISC",
+      "dependencies": {
+        "normalize-path": "^3.0.0",
+        "picomatch": "^2.0.4"
+      },
+      "engines": {
+        "node": ">= 8"
+      }
+    },
+    "node_modules/app-builder-lib": {
+      "version": "26.18.0",
+      "resolved": "https://registry.npmjs.org/app-builder-lib/-/app-builder-lib-26.18.0.tgz",
+      "integrity": "sha512-lx+KkuCSZHcbECf4R3IAcC9VOFk0+cMUwljO63s5y8yqS1Lw0sRGmjPaWsPwP3zv3ohZYbMhUvjXeiQXXZhJXA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@electron/asar": "3.4.1",
+        "@electron/fuses": "^1.8.0",
+        "@electron/get": "^3.0.0",
+        "@electron/notarize": "2.5.0",
+        "@electron/osx-sign": "1.3.3",
+        "@electron/rebuild": "^4.2.1",
+        "@electron/universal": "2.0.3",
+        "@malept/flatpak-bundler": "^0.4.0",
+        "@noble/hashes": "^1.8.0",
+        "@peculiar/webcrypto": "^1.7.1",
+        "@types/fs-extra": "9.0.13",
+        "ajv": "^8.18.0",
+        "asn1js": "^3.0.10",
+        "async-exit-hook": "^2.0.1",
+        "builder-util": "26.16.0",
+        "builder-util-runtime": "9.7.0",
+        "chromium-pickle-js": "^0.2.0",
+        "ci-info": "4.3.1",
+        "debug": "^4.3.4",
+        "dotenv": "^16.4.5",
+        "dotenv-expand": "^11.0.6",
+        "ejs": "^3.1.8",
+        "electron-publish": "26.18.0",
+        "fs-extra": "^10.1.0",
+        "hosted-git-info": "^4.1.0",
+        "isbinaryfile": "^5.0.0",
+        "jiti": "^2.4.2",
+        "js-yaml": "^4.1.0",
+        "json5": "^2.2.3",
+        "lazy-val": "^1.0.5",
+        "minimatch": "^10.2.5",
+        "pkijs": "^3.4.0",
+        "plist": "3.1.0",
+        "proper-lockfile": "^4.1.2",
+        "resedit": "^1.7.0",
+        "semver": "~7.7.3",
+        "tar": "^7.5.7",
+        "temp-file": "^3.4.0",
+        "tiny-async-pool": "1.3.0",
+        "unzipper": "^0.12.3",
+        "which": "^5.0.0"
+      },
+      "engines": {
+        "node": ">=14.0.0"
+      },
+      "peerDependencies": {
+        "dmg-builder": "26.18.0",
+        "electron-builder-squirrel-windows": "26.18.0"
+      }
+    },
+    "node_modules/app-builder-lib/node_modules/@electron/get": {
+      "version": "3.1.0",
+      "resolved": "https://registry.npmjs.org/@electron/get/-/get-3.1.0.tgz",
+      "integrity": "sha512-F+nKc0xW+kVbBRhFzaMgPy3KwmuNTYX1fx6+FxxoSnNgwYX6LD7AKBTWkU0MQ6IBoe7dz069CNkR673sPAgkCQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "debug": "^4.1.1",
+        "env-paths": "^2.2.0",
+        "fs-extra": "^8.1.0",
+        "got": "^11.8.5",
+        "progress": "^2.0.3",
+        "semver": "^6.2.0",
+        "sumchecker": "^3.0.1"
+      },
+      "engines": {
+        "node": ">=14"
+      },
+      "optionalDependencies": {
+        "global-agent": "^3.0.0"
+      }
+    },
+    "node_modules/app-builder-lib/node_modules/@electron/get/node_modules/fs-extra": {
+      "version": "8.1.0",
+      "resolved": "https://registry.npmjs.org/fs-extra/-/fs-extra-8.1.0.tgz",
+      "integrity": "sha512-yhlQgA6mnOJUKOsRUFsgJdQCvkKhcz8tlZG5HBQfReYZy46OwLcY+Zia0mtdHsOo9y/hP+CxMN0TU9QxoOtG4g==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "graceful-fs": "^4.2.0",
+        "jsonfile": "^4.0.0",
+        "universalify": "^0.1.0"
+      },
+      "engines": {
+        "node": ">=6 <7 || >=8"
+      }
+    },
+    "node_modules/app-builder-lib/node_modules/@electron/get/node_modules/jsonfile": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/jsonfile/-/jsonfile-4.0.0.tgz",
+      "integrity": "sha512-m6F1R3z8jjlf2imQHS2Qez5sjKWQzbuuhuJ/FKYFRZvPE3PuHcSMVZzfsLhGVOkfd20obL5SWEBew5ShlquNxg==",
+      "dev": true,
+      "license": "MIT",
+      "optionalDependencies": {
+        "graceful-fs": "^4.1.6"
+      }
+    },
+    "node_modules/app-builder-lib/node_modules/@electron/get/node_modules/semver": {
+      "version": "6.3.1",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-6.3.1.tgz",
+      "integrity": "sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA==",
+      "dev": true,
+      "license": "ISC",
+      "bin": {
+        "semver": "bin/semver.js"
+      }
+    },
+    "node_modules/app-builder-lib/node_modules/@electron/get/node_modules/universalify": {
+      "version": "0.1.2",
+      "resolved": "https://registry.npmjs.org/universalify/-/universalify-0.1.2.tgz",
+      "integrity": "sha512-rBJeI5CXAlmy1pV+617WB9J63U6XcazHHF2f2dbJix4XzpUF0RS3Zbj0FGIOCAva5P/d/GBOYaACQ1w+0azUkg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">= 4.0.0"
+      }
+    },
+    "node_modules/app-builder-lib/node_modules/balanced-match": {
+      "version": "4.0.4",
+      "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-4.0.4.tgz",
+      "integrity": "sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": "18 || 20 || >=22"
+      }
+    },
+    "node_modules/app-builder-lib/node_modules/brace-expansion": {
+      "version": "5.0.12",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.12.tgz",
+      "integrity": "sha512-YovQ3rzhaLMIrDjNDMkNS01tea93qhEhG5xy8f6+R0l+dw3Ki+5sCoIoI942iuLZTHWogWktgwVDhU09iNEimQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "balanced-match": "^4.0.2"
+      },
+      "engines": {
+        "node": "20 || >=22"
+      }
+    },
+    "node_modules/app-builder-lib/node_modules/ci-info": {
+      "version": "4.3.1",
+      "resolved": "https://registry.npmjs.org/ci-info/-/ci-info-4.3.1.tgz",
+      "integrity": "sha512-Wdy2Igu8OcBpI2pZePZ5oWjPC38tmDVx5WKUXKwlLYkA0ozo85sLsLvkBbBn/sZaSCMFOGZJ14fvW9t5/d7kdA==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/sibiraj-s"
+        }
+      ],
+      "license": "MIT",
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/app-builder-lib/node_modules/debug": {
+      "version": "4.4.3",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
+      "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "ms": "^2.1.3"
+      },
+      "engines": {
+        "node": ">=6.0"
+      },
+      "peerDependenciesMeta": {
+        "supports-color": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/app-builder-lib/node_modules/dotenv": {
+      "version": "16.6.1",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.6.1.tgz",
+      "integrity": "sha512-uBq4egWHTcTt33a72vpSG0z3HnPuIl6NqYcTrKEg2azoEyl2hpW0zqlxysq2pK9HlDIHyHyakeYaYnSAwd8bow==",
+      "dev": true,
+      "license": "BSD-2-Clause",
+      "engines": {
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://dotenvx.com"
+      }
+    },
+    "node_modules/app-builder-lib/node_modules/fs-extra": {
+      "version": "10.1.0",
+      "resolved": "https://registry.npmjs.org/fs-extra/-/fs-extra-10.1.0.tgz",
+      "integrity": "sha512-oRXApq54ETRj4eMiFzGnHWGy+zo5raudjuxN0b8H7s/RU2oW0Wvsx9O0ACRN/kRq9E8Vu/ReskGB5o3ji+FzHQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "graceful-fs": "^4.2.0",
+        "jsonfile": "^6.0.1",
+        "universalify": "^2.0.0"
+      },
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/app-builder-lib/node_modules/isexe": {
+      "version": "3.1.5",
+      "resolved": "https://registry.npmjs.org/isexe/-/isexe-3.1.5.tgz",
+      "integrity": "sha512-6B3tLtFqtQS4ekarvLVMZ+X+VlvQekbe4taUkf/rhVO3d/h0M2rfARm/pXLcPEsjjMsFgrFgSrhQIxcSVrBz8w==",
+      "dev": true,
+      "license": "BlueOak-1.0.0",
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/app-builder-lib/node_modules/jiti": {
+      "version": "2.7.0",
+      "resolved": "https://registry.npmjs.org/jiti/-/jiti-2.7.0.tgz",
+      "integrity": "sha512-AC/7JofJvZGrrneWNaEnJeOLUx+JlGt7tNa0wZiRPT4MY1wmfKjt2+6O2p2uz2+skll8OZZmJMNqeke7kKbNgQ==",
+      "dev": true,
+      "license": "MIT",
+      "bin": {
+        "jiti": "lib/jiti-cli.mjs"
+      }
+    },
+    "node_modules/app-builder-lib/node_modules/minimatch": {
+      "version": "10.2.6",
+      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-10.2.6.tgz",
+      "integrity": "sha512-vpLQEs+VLCr1nU0BXS07maYoFwlDAH0gngQuuttxIwutDFEMHq2blX+8vpgxDdK3J1PwjCJiep77OitTZ4Ll1A==",
+      "dev": true,
+      "license": "BlueOak-1.0.0",
+      "dependencies": {
+        "brace-expansion": "^5.0.8"
+      },
+      "engines": {
+        "node": "18 || 20 || >=22"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/isaacs"
+      }
+    },
+    "node_modules/app-builder-lib/node_modules/semver": {
+      "version": "7.7.4",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.7.4.tgz",
+      "integrity": "sha512-vFKC2IEtQnVhpT78h1Yp8wzwrf8CM+MzKMHGJZfBtzhZNycRFnXsHk6E5TxIkkMsgNS7mdX3AGB7x2QM2di4lA==",
+      "dev": true,
+      "license": "ISC",
+      "bin": {
+        "semver": "bin/semver.js"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/app-builder-lib/node_modules/which": {
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/which/-/which-5.0.0.tgz",
+      "integrity": "sha512-JEdGzHwwkrbWoGOlIHqQ5gtprKGOenpDHpxE9zVR1bWbOtYRyPPHMe9FaP6x61CmNaTThSkb0DAJte5jD+DmzQ==",
+      "dev": true,
+      "license": "ISC",
+      "dependencies": {
+        "isexe": "^3.1.1"
+      },
+      "bin": {
+        "node-which": "bin/which.js"
+      },
+      "engines": {
+        "node": "^18.17.0 || >=20.5.0"
+      }
+    },
+    "node_modules/append-field": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/append-field/-/append-field-1.0.0.tgz",
+      "integrity": "sha512-klpgFSWLW1ZEs8svjfb7g4qWY0YS5imI82dTg+QahUvJ8YqAY0P10Uk8tTyh9ZGuYEZEMaeJYCF5BFuX552hsw==",
+      "license": "MIT"
+    },
+    "node_modules/arg": {
+      "version": "5.0.2",
+      "resolved": "https://registry.npmjs.org/arg/-/arg-5.0.2.tgz",
+      "integrity": "sha512-PYjyFOLKQ9y57JvQ6QLo8dAgNqswh8M1RMJYdQduT6xbWSgK36P/Z/v+p888pM69jMMfS8Xd8F6I1kQ/I9HUGg==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/argparse": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/argparse/-/argparse-2.0.1.tgz",
+      "integrity": "sha512-8+9WqebbFzpX9OR+Wa6O29asIogeRMzcGtAINdpMHHyAg10f05aSFVBbcEqGf/PXw1EjAZ+q2/bEBg3DvurK3Q==",
+      "dev": true,
+      "license": "Python-2.0"
+    },
+    "node_modules/array-flatten": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/array-flatten/-/array-flatten-1.1.1.tgz",
+      "integrity": "sha512-PCVAQswWemu6UdxsDFFX/+gVeYqKAod3D3UVm91jHwynguOwAvYPhx8nNlM++NqRcK6CxxpUafjmhIdKiHibqg==",
+      "license": "MIT"
+    },
+    "node_modules/asap": {
+      "version": "2.0.6",
+      "resolved": "https://registry.npmjs.org/asap/-/asap-2.0.6.tgz",
+      "integrity": "sha512-BSHWgDSAiKs50o2Re8ppvp3seVHXSRM44cdSsT9FfNEUUZLOGWVCsiWaRPWM1Znn+mqZ1OfVZ3z3DWEzSp7hRA==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/asn1js": {
+      "version": "3.1.0",
+      "resolved": "https://registry.npmjs.org/asn1js/-/asn1js-3.1.0.tgz",
+      "integrity": "sha512-HWYi1THkOqguCiO+vwj09ZkQFD2kKEsejYHAYCtX0D80WVdoDnvRc9IukXX/jeb0T9NRWJnRtqwdbHltnFjwXA==",
+      "dev": true,
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "pvtsutils": "^1.3.6",
+        "pvutils": "^1.2.0",
+        "tslib": "^2.8.1"
+      },
+      "engines": {
+        "node": ">=12.0.0"
+      }
+    },
+    "node_modules/ast-types": {
+      "version": "0.13.4",
+      "resolved": "https://registry.npmjs.org/ast-types/-/ast-types-0.13.4.tgz",
+      "integrity": "sha512-x1FCFnFifvYDDzTaLII71vG5uvDwgtmDTEVWAxrgeiR8VjMONcCXJx7E+USjDtHlwFmt9MysbqgF9b9Vjr6w+w==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "tslib": "^2.0.1"
+      },
+      "engines": {
+        "node": ">=4"
+      }
+    },
+    "node_modules/async": {
+      "version": "3.2.6",
+      "resolved": "https://registry.npmjs.org/async/-/async-3.2.6.tgz",
+      "integrity": "sha512-htCUDlxyyCLMgaM3xXg0C0LW2xqfuQ6p05pCEIsXuyQ+a1koYKTuBMzRNwmybfLgvJDMd0r1LTn4+E0Ti6C2AA==",
+      "license": "MIT"
+    },
+    "node_modules/async-exit-hook": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/async-exit-hook/-/async-exit-hook-2.0.1.tgz",
+      "integrity": "sha512-NW2cX8m1Q7KPA7a5M2ULQeZ2wR5qI5PAbw5L0UOMxdioVk9PMZ0h1TmyZEkPYrCvYjDlFICusOu1dlEKAAeXBw==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.12.0"
+      }
+    },
+    "node_modules/asynckit": {
+      "version": "0.4.0",
+      "resolved": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz",
+      "integrity": "sha512-Oei9OH4tRh0YqU3GxhX79dM/mwVgvbZJaSNaRk+bshkj0S5cfHcgYakreBjrHwatXKbz+IoIdYLxrKim2MjW0Q==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/at-least-node": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/at-least-node/-/at-least-node-1.0.0.tgz",
+      "integrity": "sha512-+q/t7Ekv1EDY2l6Gda6LLiX14rU9TV20Wa3ofeQmwPFZbOMo9DXrLbOjFaaclkXKWidIaopwAObQDqwWtGUjqg==",
+      "dev": true,
+      "license": "ISC",
+      "engines": {
+        "node": ">= 4.0.0"
+      }
+    },
+    "node_modules/aws4": {
+      "version": "1.13.2",
+      "resolved": "https://registry.npmjs.org/aws4/-/aws4-1.13.2.tgz",
+      "integrity": "sha512-lHe62zvbTB5eEABUVi/AwVh0ZKY9rMMDhmm+eeyuuUQbQ3+J+fONVQOZyj+DdrvD4BY33uYniyRJ4UJIaSKAfw==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/b4a": {
+      "version": "1.6.7",
+      "resolved": "https://registry.npmjs.org/b4a/-/b4a-1.6.7.tgz",
+      "integrity": "sha512-OnAYlL5b7LEkALw87fUVafQw5rVR9RjwGd4KUwNQ6DrrNmaVaUCgLipfVlzrPQ4tWOR9P0IXGNOx50jYCCdSJg==",
+      "dev": true,
+      "license": "Apache-2.0"
+    },
+    "node_modules/babel-jest": {
+      "version": "30.2.0",
+      "resolved": "https://registry.npmjs.org/babel-jest/-/babel-jest-30.2.0.tgz",
+      "integrity": "sha512-0YiBEOxWqKkSQWL9nNGGEgndoeL0ZpWrbLMNL5u/Kaxrli3Eaxlt3ZtIDktEvXt4L/R9r3ODr2zKwGM/2BjxVw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@jest/transform": "30.2.0",
+        "@types/babel__core": "^7.20.5",
+        "babel-plugin-istanbul": "^7.0.1",
+        "babel-preset-jest": "30.2.0",
+        "chalk": "^4.1.2",
+        "graceful-fs": "^4.2.11",
+        "slash": "^3.0.0"
+      },
+      "engines": {
+        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
+      },
+      "peerDependencies": {
+        "@babel/core": "^7.11.0 || ^8.0.0-0"
+      }
+    },
+    "node_modules/babel-plugin-istanbul": {
+      "version": "7.0.1",
+      "resolved": "https://registry.npmjs.org/babel-plugin-istanbul/-/babel-plugin-istanbul-7.0.1.tgz",
+      "integrity": "sha512-D8Z6Qm8jCvVXtIRkBnqNHX0zJ37rQcFJ9u8WOS6tkYOsRdHBzypCstaxWiu5ZIlqQtviRYbgnRLSoCEvjqcqbA==",
+      "dev": true,
+      "license": "BSD-3-Clause",
+      "workspaces": [
+        "test/babel-8"
+      ],
+      "dependencies": {
+        "@babel/helper-plugin-utils": "^7.0.0",
+        "@istanbuljs/load-nyc-config": "^1.0.0",
+        "@istanbuljs/schema": "^0.1.3",
+        "istanbul-lib-instrument": "^6.0.2",
+        "test-exclude": "^6.0.0"
+      },
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/babel-plugin-jest-hoist": {
+      "version": "30.2.0",
+      "resolved": "https://registry.npmjs.org/babel-plugin-jest-hoist/-/babel-plugin-jest-hoist-30.2.0.tgz",
+      "integrity": "sha512-ftzhzSGMUnOzcCXd6WHdBGMyuwy15Wnn0iyyWGKgBDLxf9/s5ABuraCSpBX2uG0jUg4rqJnxsLc5+oYBqoxVaA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/babel__core": "^7.20.5"
+      },
+      "engines": {
+        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
+      }
+    },
+    "node_modules/babel-preset-current-node-syntax": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/babel-preset-current-node-syntax/-/babel-preset-current-node-syntax-1.2.0.tgz",
+      "integrity": "sha512-E/VlAEzRrsLEb2+dv8yp3bo4scof3l9nR4lrld+Iy5NyVqgVYUJnDAmunkhPMisRI32Qc4iRiz425d8vM++2fg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@babel/plugin-syntax-async-generators": "^7.8.4",
+        "@babel/plugin-syntax-bigint": "^7.8.3",
+        "@babel/plugin-syntax-class-properties": "^7.12.13",
+        "@babel/plugin-syntax-class-static-block": "^7.14.5",
+        "@babel/plugin-syntax-import-attributes": "^7.24.7",
+        "@babel/plugin-syntax-import-meta": "^7.10.4",
+        "@babel/plugin-syntax-json-strings": "^7.8.3",
+        "@babel/plugin-syntax-logical-assignment-operators": "^7.10.4",
+        "@babel/plugin-syntax-nullish-coalescing-operator": "^7.8.3",
+        "@babel/plugin-syntax-numeric-separator": "^7.10.4",
+        "@babel/plugin-syntax-object-rest-spread": "^7.8.3",
+        "@babel/plugin-syntax-optional-catch-binding": "^7.8.3",
+        "@babel/plugin-syntax-optional-chaining": "^7.8.3",
+        "@babel/plugin-syntax-private-property-in-object": "^7.14.5",
+        "@babel/plugin-syntax-top-level-await": "^7.14.5"
+      },
+      "peerDependencies": {
+        "@babel/core": "^7.0.0 || ^8.0.0-0"
+      }
+    },
+    "node_modules/babel-preset-jest": {
+      "version": "30.2.0",
+      "resolved": "https://registry.npmjs.org/babel-preset-jest/-/babel-preset-jest-30.2.0.tgz",
+      "integrity": "sha512-US4Z3NOieAQumwFnYdUWKvUKh8+YSnS/gB3t6YBiz0bskpu7Pine8pPCheNxlPEW4wnUkma2a94YuW2q3guvCQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "babel-plugin-jest-hoist": "30.2.0",
+        "babel-preset-current-node-syntax": "^1.2.0"
+      },
+      "engines": {
+        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
+      },
+      "peerDependencies": {
+        "@babel/core": "^7.11.0 || ^8.0.0-beta.1"
+      }
+    },
+    "node_modules/balanced-match": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz",
+      "integrity": "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/bare-events": {
+      "version": "2.6.1",
+      "resolved": "https://registry.npmjs.org/bare-events/-/bare-events-2.6.1.tgz",
+      "integrity": "sha512-AuTJkq9XmE6Vk0FJVNq5QxETrSA/vKHarWVBG5l/JbdCL1prJemiyJqUS0jrlXO0MftuPq4m3YVYhoNc5+aE/g==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true
+    },
+    "node_modules/bare-fs": {
+      "version": "4.2.3",
+      "resolved": "https://registry.npmjs.org/bare-fs/-/bare-fs-4.2.3.tgz",
+      "integrity": "sha512-1aGs5pRVLToMQ79elP+7cc0u0s/wXAzfBv/7hDloT7WFggLqECCas5qqPky7WHCFdsBH5WDq6sD4fAoz5sJbtA==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "dependencies": {
+        "bare-events": "^2.5.4",
+        "bare-path": "^3.0.0",
+        "bare-stream": "^2.6.4"
+      },
+      "engines": {
+        "bare": ">=1.16.0"
+      },
+      "peerDependencies": {
+        "bare-buffer": "*"
+      },
+      "peerDependenciesMeta": {
+        "bare-buffer": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/bare-os": {
+      "version": "3.6.2",
+      "resolved": "https://registry.npmjs.org/bare-os/-/bare-os-3.6.2.tgz",
+      "integrity": "sha512-T+V1+1srU2qYNBmJCXZkUY5vQ0B4FSlL3QDROnKQYOqeiQR8UbjNHlPa+TIbM4cuidiN9GaTaOZgSEgsvPbh5A==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "engines": {
+        "bare": ">=1.14.0"
+      }
+    },
+    "node_modules/bare-path": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/bare-path/-/bare-path-3.0.0.tgz",
+      "integrity": "sha512-tyfW2cQcB5NN8Saijrhqn0Zh7AnFNsnczRcuWODH0eYAXBsJ5gVxAUuNr7tsHSC6IZ77cA0SitzT+s47kot8Mw==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "dependencies": {
+        "bare-os": "^3.0.1"
+      }
+    },
+    "node_modules/bare-stream": {
+      "version": "2.7.0",
+      "resolved": "https://registry.npmjs.org/bare-stream/-/bare-stream-2.7.0.tgz",
+      "integrity": "sha512-oyXQNicV1y8nc2aKffH+BUHFRXmx6VrPzlnaEvMhram0nPBrKcEdcyBg5r08D0i8VxngHFAiVyn1QKXpSG0B8A==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "dependencies": {
+        "streamx": "^2.21.0"
+      },
+      "peerDependencies": {
+        "bare-buffer": "*",
+        "bare-events": "*"
+      },
+      "peerDependenciesMeta": {
+        "bare-buffer": {
+          "optional": true
+        },
+        "bare-events": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/base64-js": {
+      "version": "1.5.1",
+      "resolved": "https://registry.npmjs.org/base64-js/-/base64-js-1.5.1.tgz",
+      "integrity": "sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/feross"
+        },
+        {
+          "type": "patreon",
+          "url": "https://www.patreon.com/feross"
+        },
+        {
+          "type": "consulting",
+          "url": "https://feross.org/support"
+        }
+      ],
+      "license": "MIT"
+    },
+    "node_modules/baseline-browser-mapping": {
+      "version": "2.9.19",
+      "resolved": "https://registry.npmjs.org/baseline-browser-mapping/-/baseline-browser-mapping-2.9.19.tgz",
+      "integrity": "sha512-ipDqC8FrAl/76p2SSWKSI+H9tFwm7vYqXQrItCuiVPt26Km0jS+NzSsBWAaBusvSbQcfJG+JitdMm+wZAgTYqg==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "bin": {
+        "baseline-browser-mapping": "dist/cli.js"
       }
     },
-    "node_modules/@unrs/resolver-binding-win32-arm64-msvc": {
-      "version": "1.11.1",
-      "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-win32-arm64-msvc/-/resolver-binding-win32-arm64-msvc-1.11.1.tgz",
-      "integrity": "sha512-nRcz5Il4ln0kMhfL8S3hLkxI85BXs3o8EYoattsJNdsX4YUU89iOkVn7g0VHSRxFuVMdM4Q1jEpIId1Ihim/Uw==",
-      "cpu": [
-        "arm64"
-      ],
+    "node_modules/basic-ftp": {
+      "version": "5.0.5",
+      "resolved": "https://registry.npmjs.org/basic-ftp/-/basic-ftp-5.0.5.tgz",
+      "integrity": "sha512-4Bcg1P8xhUuqcii/S0Z9wiHIrQVPMermM1any+MX5GeGD7faD3/msQUDGLol9wOcz4/jbg/WJnGqoJF6LiBdtg==",
       "dev": true,
       "license": "MIT",
-      "optional": true,
-      "os": [
-        "win32"
-      ]
+      "engines": {
+        "node": ">=10.0.0"
+      }
     },
-    "node_modules/@unrs/resolver-binding-win32-ia32-msvc": {
-      "version": "1.11.1",
-      "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-win32-ia32-msvc/-/resolver-binding-win32-ia32-msvc-1.11.1.tgz",
-      "integrity": "sha512-DCEI6t5i1NmAZp6pFonpD5m7i6aFrpofcp4LA2i8IIq60Jyo28hamKBxNrZcyOwVOZkgsRp9O2sXWBWP8MnvIQ==",
-      "cpu": [
-        "ia32"
-      ],
+    "node_modules/binary-extensions": {
+      "version": "2.3.0",
+      "resolved": "https://registry.npmjs.org/binary-extensions/-/binary-extensions-2.3.0.tgz",
+      "integrity": "sha512-Ceh+7ox5qe7LJuLHoY0feh3pHuUDHAcRUeyL2VYghZwfpkNIy/+8Ocg0a3UuSoYzavmylwuLWQOf3hl0jjMMIw==",
       "dev": true,
       "license": "MIT",
-      "optional": true,
-      "os": [
-        "win32"
-      ]
+      "engines": {
+        "node": ">=8"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
     },
-    "node_modules/@unrs/resolver-binding-win32-x64-msvc": {
-      "version": "1.11.1",
-      "resolved": "https://registry.npmjs.org/@unrs/resolver-binding-win32-x64-msvc/-/resolver-binding-win32-x64-msvc-1.11.1.tgz",
-      "integrity": "sha512-lrW200hZdbfRtztbygyaq/6jP6AKE8qQN2KvPcJ+x7wiD038YtnYtZ82IMNJ69GJibV7bwL3y9FgK+5w/pYt6g==",
-      "cpu": [
-        "x64"
-      ],
+    "node_modules/bluebird": {
+      "version": "3.7.2",
+      "resolved": "https://registry.npmjs.org/bluebird/-/bluebird-3.7.2.tgz",
+      "integrity": "sha512-XpNj6GDQzdfW+r2Wnn7xiSAd7TM3jzkxGXBGTtWKuSXv1xUV+azxAm8jdWZN06QTQk+2N2XB9jRDkvbmQmcRtg==",
       "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "win32"
-      ]
+      "license": "MIT"
     },
-    "node_modules/accepts": {
-      "version": "1.3.8",
-      "resolved": "https://registry.npmjs.org/accepts/-/accepts-1.3.8.tgz",
-      "integrity": "sha512-PYAthTa2m2VKxuvSD3DPC/Gy+U+sOA1LAuT8mkmRuvw+NACSaeXEQ+NHcVF7rONl6qcaxV3Uuemwawk+7+SJLw==",
+    "node_modules/body-parser": {
+      "version": "1.20.3",
+      "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.3.tgz",
+      "integrity": "sha512-7rAxByjUMqQ3/bHJy7D6OGXvx/MMc4IqBn/X0fcM1QUcAItpZrBEYhWGem+tzXH90c+G01ypMcYJBO9Y30203g==",
       "license": "MIT",
       "dependencies": {
-        "mime-types": "~2.1.34",
-        "negotiator": "0.6.3"
+        "bytes": "3.1.2",
+        "content-type": "~1.0.5",
+        "debug": "2.6.9",
+        "depd": "2.0.0",
+        "destroy": "1.2.0",
+        "http-errors": "2.0.0",
+        "iconv-lite": "0.4.24",
+        "on-finished": "2.4.1",
+        "qs": "6.13.0",
+        "raw-body": "2.5.2",
+        "type-is": "~1.6.18",
+        "unpipe": "1.0.0"
       },
       "engines": {
-        "node": ">= 0.6"
+        "node": ">= 0.8",
+        "npm": "1.2.8000 || >= 1.4.16"
       }
     },
-    "node_modules/agent-base": {
-      "version": "7.1.4",
-      "resolved": "https://registry.npmjs.org/agent-base/-/agent-base-7.1.4.tgz",
-      "integrity": "sha512-MnA+YT8fwfJPgBx3m60MNqakm30XOkyIoH1y6huTQvC0PwZG7ki8NacLBcrPbNoo8vEZy7Jpuk7+jMO+CUovTQ==",
-      "dev": true,
+    "node_modules/body-parser/node_modules/debug": {
+      "version": "2.6.9",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
+      "integrity": "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==",
       "license": "MIT",
-      "engines": {
-        "node": ">= 14"
+      "dependencies": {
+        "ms": "2.0.0"
       }
     },
-    "node_modules/ansi-escapes": {
-      "version": "4.3.2",
-      "resolved": "https://registry.npmjs.org/ansi-escapes/-/ansi-escapes-4.3.2.tgz",
-      "integrity": "sha512-gKXj5ALrKWQLsYG9jlTRmR/xKluxHV+Z9QEwNIgCfM1/uwPMCuzVVnh5mwTd+OuBZcwSIMbqssNWRm1lE51QaQ==",
-      "dev": true,
-      "license": "MIT",
+    "node_modules/body-parser/node_modules/ms": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
+      "integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==",
+      "license": "MIT"
+    },
+    "node_modules/body-parser/node_modules/qs": {
+      "version": "6.13.0",
+      "resolved": "https://registry.npmjs.org/qs/-/qs-6.13.0.tgz",
+      "integrity": "sha512-+38qI9SOr8tfZ4QmJNplMUxqjbe7LKvvZgWdExBOmd+egZTtjLB67Gu0HRX3u/XOq7UU2Nx6nsjvS16Z9uwfpg==",
+      "license": "BSD-3-Clause",
       "dependencies": {
-        "type-fest": "^0.21.3"
+        "side-channel": "^1.0.6"
       },
       "engines": {
-        "node": ">=8"
+        "node": ">=0.6"
       },
       "funding": {
-        "url": "https://github.com/sponsors/sindresorhus"
+        "url": "https://github.com/sponsors/ljharb"
       }
     },
-    "node_modules/ansi-regex": {
-      "version": "5.0.1",
-      "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz",
-      "integrity": "sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==",
+    "node_modules/boolean": {
+      "version": "3.2.0",
+      "resolved": "https://registry.npmjs.org/boolean/-/boolean-3.2.0.tgz",
+      "integrity": "sha512-d0II/GO9uf9lfUHH2BQsjxzRJZBdsjgsBiW4BvhWk/3qoKwQFjIDVN19PfX8F2D/r9PCMTtLWjYVCFrpeYUzsw==",
+      "deprecated": "Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.",
       "dev": true,
       "license": "MIT",
-      "engines": {
-        "node": ">=8"
+      "optional": true
+    },
+    "node_modules/brace-expansion": {
+      "version": "1.1.12",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.12.tgz",
+      "integrity": "sha512-9T9UjW3r0UW5c1Q7GTwllptXwhvYmEzFhzMfZ9H7FQWt+uZePjZPjBP/W1ZEyZ1twGWom5/56TF4lPcqjnDHcg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "balanced-match": "^1.0.0",
+        "concat-map": "0.0.1"
       }
     },
-    "node_modules/ansi-styles": {
-      "version": "4.3.0",
-      "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz",
-      "integrity": "sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==",
+    "node_modules/braces": {
+      "version": "3.0.3",
+      "resolved": "https://registry.npmjs.org/braces/-/braces-3.0.3.tgz",
+      "integrity": "sha512-yQbXgO/OSZVD2IsiLlro+7Hf6Q18EJrKSEsdoMzKePKXct3gvD8oLcOQdIzGupr5Fj+EDe8gO/lxc1BzfMpxvA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "color-convert": "^2.0.1"
+        "fill-range": "^7.1.1"
       },
       "engines": {
         "node": ">=8"
-      },
-      "funding": {
-        "url": "https://github.com/chalk/ansi-styles?sponsor=1"
       }
     },
-    "node_modules/ansi-styles/node_modules/color-convert": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz",
-      "integrity": "sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==",
+    "node_modules/browserslist": {
+      "version": "4.28.1",
+      "resolved": "https://registry.npmjs.org/browserslist/-/browserslist-4.28.1.tgz",
+      "integrity": "sha512-ZC5Bd0LgJXgwGqUknZY/vkUQ04r8NXnJZ3yYi4vDmSiZmC/pdSN0NbNRPxZpbtO4uAfDUAFffO8IZoM3Gj8IkA==",
       "dev": true,
+      "funding": [
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/browserslist"
+        },
+        {
+          "type": "tidelift",
+          "url": "https://tidelift.com/funding/github/npm/browserslist"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
       "license": "MIT",
       "dependencies": {
-        "color-name": "~1.1.4"
+        "baseline-browser-mapping": "^2.9.0",
+        "caniuse-lite": "^1.0.30001759",
+        "electron-to-chromium": "^1.5.263",
+        "node-releases": "^2.0.27",
+        "update-browserslist-db": "^1.2.0"
+      },
+      "bin": {
+        "browserslist": "cli.js"
       },
       "engines": {
-        "node": ">=7.0.0"
+        "node": "^6 || ^7 || ^8 || ^9 || ^10 || ^11 || ^12 || >=13.7"
       }
     },
-    "node_modules/ansi-styles/node_modules/color-name": {
-      "version": "1.1.4",
-      "resolved": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz",
-      "integrity": "sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==",
+    "node_modules/bser": {
+      "version": "2.1.1",
+      "resolved": "https://registry.npmjs.org/bser/-/bser-2.1.1.tgz",
+      "integrity": "sha512-gQxTNE/GAfIIrmHLUE3oJyp5FO6HRBfhjnw4/wMmA63ZGDJnWBmgY/lyQBpnDUkGmAhbSe39tx2d/iTOAfglwQ==",
       "dev": true,
-      "license": "MIT"
+      "license": "Apache-2.0",
+      "dependencies": {
+        "node-int64": "^0.4.0"
+      }
     },
-    "node_modules/anymatch": {
-      "version": "3.1.3",
-      "resolved": "https://registry.npmjs.org/anymatch/-/anymatch-3.1.3.tgz",
-      "integrity": "sha512-KMReFUr0B4t+D+OBkjR3KYqvocp2XaSzO55UcB6mgQMd3KbcE+mWTyvVV7D/zsdEbNnV6acZUutkiHQXvTr1Rw==",
+    "node_modules/buffer-crc32": {
+      "version": "0.2.13",
+      "resolved": "https://registry.npmjs.org/buffer-crc32/-/buffer-crc32-0.2.13.tgz",
+      "integrity": "sha512-VO9Ht/+p3SN7SKWqcrgEzjGbRSJYTx+Q1pTQC0wrWqHx0vpJraQ6GtHx8tvcg1rlK1byhU5gccxgOgj7B0TDkQ==",
       "dev": true,
-      "license": "ISC",
-      "dependencies": {
-        "normalize-path": "^3.0.0",
-        "picomatch": "^2.0.4"
-      },
+      "license": "MIT",
       "engines": {
-        "node": ">= 8"
+        "node": "*"
       }
     },
-    "node_modules/append-field": {
-      "version": "1.0.0",
-      "resolved": "https://registry.npmjs.org/append-field/-/append-field-1.0.0.tgz",
-      "integrity": "sha512-klpgFSWLW1ZEs8svjfb7g4qWY0YS5imI82dTg+QahUvJ8YqAY0P10Uk8tTyh9ZGuYEZEMaeJYCF5BFuX552hsw==",
-      "license": "MIT"
-    },
-    "node_modules/argparse": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/argparse/-/argparse-2.0.1.tgz",
-      "integrity": "sha512-8+9WqebbFzpX9OR+Wa6O29asIogeRMzcGtAINdpMHHyAg10f05aSFVBbcEqGf/PXw1EjAZ+q2/bEBg3DvurK3Q==",
-      "dev": true,
-      "license": "Python-2.0"
+    "node_modules/buffer-equal-constant-time": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/buffer-equal-constant-time/-/buffer-equal-constant-time-1.0.1.tgz",
+      "integrity": "sha512-zRpUiDwd/xk6ADqPMATG8vc9VPrkck7T07OIx0gnjmJAnHnTVXNQG3vfvWNuiZIkwu9KrKdA1iJKfsfTVxE6NA==",
+      "license": "BSD-3-Clause"
     },
-    "node_modules/array-flatten": {
-      "version": "1.1.1",
-      "resolved": "https://registry.npmjs.org/array-flatten/-/array-flatten-1.1.1.tgz",
-      "integrity": "sha512-PCVAQswWemu6UdxsDFFX/+gVeYqKAod3D3UVm91jHwynguOwAvYPhx8nNlM++NqRcK6CxxpUafjmhIdKiHibqg==",
+    "node_modules/buffer-from": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/buffer-from/-/buffer-from-1.1.2.tgz",
+      "integrity": "sha512-E+XQCRwSbaaiChtv6k6Dwgc+bx+Bs6vuKJHHl5kox/BaKbhiXzqQOwK4cO22yElGp2OCmjwVhT3HmxgyPGnJfQ==",
       "license": "MIT"
     },
-    "node_modules/asap": {
-      "version": "2.0.6",
-      "resolved": "https://registry.npmjs.org/asap/-/asap-2.0.6.tgz",
-      "integrity": "sha512-BSHWgDSAiKs50o2Re8ppvp3seVHXSRM44cdSsT9FfNEUUZLOGWVCsiWaRPWM1Znn+mqZ1OfVZ3z3DWEzSp7hRA==",
+    "node_modules/builder-util": {
+      "version": "26.16.0",
+      "resolved": "https://registry.npmjs.org/builder-util/-/builder-util-26.16.0.tgz",
+      "integrity": "sha512-RLyJhB7Si3YkzKR9ubQslWuXW3Vhs3CGe1i+SeixBZ0qTd1mk3XBmssvY22TlB6CS5blyko8Gu1JzpYk8UkYAg==",
       "dev": true,
-      "license": "MIT"
+      "license": "MIT",
+      "dependencies": {
+        "@types/debug": "^4.1.6",
+        "builder-util-runtime": "9.7.0",
+        "chalk": "^4.1.2",
+        "cross-spawn": "^7.0.6",
+        "debug": "^4.3.4",
+        "fs-extra": "^10.1.0",
+        "http-proxy-agent": "^7.0.0",
+        "https-proxy-agent": "^7.0.0",
+        "js-yaml": "^4.1.0",
+        "sanitize-filename": "^1.6.3",
+        "source-map-support": "^0.5.19",
+        "stat-mode": "^1.0.0",
+        "temp-file": "^3.4.0",
+        "tiny-async-pool": "1.3.0"
+      },
+      "engines": {
+        "node": ">=14.0.0"
+      }
     },
-    "node_modules/ast-types": {
-      "version": "0.13.4",
-      "resolved": "https://registry.npmjs.org/ast-types/-/ast-types-0.13.4.tgz",
-      "integrity": "sha512-x1FCFnFifvYDDzTaLII71vG5uvDwgtmDTEVWAxrgeiR8VjMONcCXJx7E+USjDtHlwFmt9MysbqgF9b9Vjr6w+w==",
+    "node_modules/builder-util-runtime": {
+      "version": "9.7.0",
+      "resolved": "https://registry.npmjs.org/builder-util-runtime/-/builder-util-runtime-9.7.0.tgz",
+      "integrity": "sha512-g/kR520giAFYkSXTzcmF3kqQq7wi8F6N6SzeDgZrqTBN+VHdmgWOyTdD1yD7AATDId/yXLvuP34CxW46/BwCdw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "tslib": "^2.0.1"
+        "debug": "^4.3.4",
+        "sax": "^1.2.4"
       },
       "engines": {
-        "node": ">=4"
+        "node": ">=12.0.0"
       }
     },
-    "node_modules/async": {
-      "version": "3.2.6",
-      "resolved": "https://registry.npmjs.org/async/-/async-3.2.6.tgz",
-      "integrity": "sha512-htCUDlxyyCLMgaM3xXg0C0LW2xqfuQ6p05pCEIsXuyQ+a1koYKTuBMzRNwmybfLgvJDMd0r1LTn4+E0Ti6C2AA==",
-      "license": "MIT"
-    },
-    "node_modules/async-each-series": {
-      "version": "0.1.1",
-      "resolved": "https://registry.npmjs.org/async-each-series/-/async-each-series-0.1.1.tgz",
-      "integrity": "sha512-p4jj6Fws4Iy2m0iCmI2am2ZNZCgbdgE+P8F/8csmn2vx7ixXrO2zGcuNsD46X5uZSVecmkEy/M06X2vG8KD6dQ==",
+    "node_modules/builder-util-runtime/node_modules/debug": {
+      "version": "4.4.3",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
+      "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
       "dev": true,
       "license": "MIT",
+      "dependencies": {
+        "ms": "^2.1.3"
+      },
       "engines": {
-        "node": ">=0.8.0"
+        "node": ">=6.0"
+      },
+      "peerDependenciesMeta": {
+        "supports-color": {
+          "optional": true
+        }
       }
     },
-    "node_modules/asynckit": {
-      "version": "0.4.0",
-      "resolved": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz",
-      "integrity": "sha512-Oei9OH4tRh0YqU3GxhX79dM/mwVgvbZJaSNaRk+bshkj0S5cfHcgYakreBjrHwatXKbz+IoIdYLxrKim2MjW0Q==",
-      "dev": true,
-      "license": "MIT"
-    },
-    "node_modules/b4a": {
-      "version": "1.6.7",
-      "resolved": "https://registry.npmjs.org/b4a/-/b4a-1.6.7.tgz",
-      "integrity": "sha512-OnAYlL5b7LEkALw87fUVafQw5rVR9RjwGd4KUwNQ6DrrNmaVaUCgLipfVlzrPQ4tWOR9P0IXGNOx50jYCCdSJg==",
-      "dev": true,
-      "license": "Apache-2.0"
-    },
-    "node_modules/babel-jest": {
-      "version": "30.2.0",
-      "resolved": "https://registry.npmjs.org/babel-jest/-/babel-jest-30.2.0.tgz",
-      "integrity": "sha512-0YiBEOxWqKkSQWL9nNGGEgndoeL0ZpWrbLMNL5u/Kaxrli3Eaxlt3ZtIDktEvXt4L/R9r3ODr2zKwGM/2BjxVw==",
+    "node_modules/builder-util/node_modules/debug": {
+      "version": "4.4.3",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
+      "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@jest/transform": "30.2.0",
-        "@types/babel__core": "^7.20.5",
-        "babel-plugin-istanbul": "^7.0.1",
-        "babel-preset-jest": "30.2.0",
-        "chalk": "^4.1.2",
-        "graceful-fs": "^4.2.11",
-        "slash": "^3.0.0"
+        "ms": "^2.1.3"
       },
       "engines": {
-        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
+        "node": ">=6.0"
       },
-      "peerDependencies": {
-        "@babel/core": "^7.11.0 || ^8.0.0-0"
+      "peerDependenciesMeta": {
+        "supports-color": {
+          "optional": true
+        }
       }
     },
-    "node_modules/babel-plugin-istanbul": {
-      "version": "7.0.1",
-      "resolved": "https://registry.npmjs.org/babel-plugin-istanbul/-/babel-plugin-istanbul-7.0.1.tgz",
-      "integrity": "sha512-D8Z6Qm8jCvVXtIRkBnqNHX0zJ37rQcFJ9u8WOS6tkYOsRdHBzypCstaxWiu5ZIlqQtviRYbgnRLSoCEvjqcqbA==",
+    "node_modules/builder-util/node_modules/fs-extra": {
+      "version": "10.1.0",
+      "resolved": "https://registry.npmjs.org/fs-extra/-/fs-extra-10.1.0.tgz",
+      "integrity": "sha512-oRXApq54ETRj4eMiFzGnHWGy+zo5raudjuxN0b8H7s/RU2oW0Wvsx9O0ACRN/kRq9E8Vu/ReskGB5o3ji+FzHQ==",
       "dev": true,
-      "license": "BSD-3-Clause",
-      "workspaces": [
-        "test/babel-8"
-      ],
+      "license": "MIT",
       "dependencies": {
-        "@babel/helper-plugin-utils": "^7.0.0",
-        "@istanbuljs/load-nyc-config": "^1.0.0",
-        "@istanbuljs/schema": "^0.1.3",
-        "istanbul-lib-instrument": "^6.0.2",
-        "test-exclude": "^6.0.0"
+        "graceful-fs": "^4.2.0",
+        "jsonfile": "^6.0.1",
+        "universalify": "^2.0.0"
       },
       "engines": {
         "node": ">=12"
       }
     },
-    "node_modules/babel-plugin-jest-hoist": {
-      "version": "30.2.0",
-      "resolved": "https://registry.npmjs.org/babel-plugin-jest-hoist/-/babel-plugin-jest-hoist-30.2.0.tgz",
-      "integrity": "sha512-ftzhzSGMUnOzcCXd6WHdBGMyuwy15Wnn0iyyWGKgBDLxf9/s5ABuraCSpBX2uG0jUg4rqJnxsLc5+oYBqoxVaA==",
+    "node_modules/builder-util/node_modules/source-map-support": {
+      "version": "0.5.21",
+      "resolved": "https://registry.npmjs.org/source-map-support/-/source-map-support-0.5.21.tgz",
+      "integrity": "sha512-uBHU3L3czsIyYXKX88fdrGovxdSCoTGDRZ6SYXtSRxLZUzHg5P/66Ht6uoUlHu9EZod+inXhKo3qQgwXUT/y1w==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@types/babel__core": "^7.20.5"
+        "buffer-from": "^1.0.0",
+        "source-map": "^0.6.0"
+      }
+    },
+    "node_modules/busboy": {
+      "version": "1.6.0",
+      "resolved": "https://registry.npmjs.org/busboy/-/busboy-1.6.0.tgz",
+      "integrity": "sha512-8SFQbg/0hQ9xy3UNTB0YEnsNBbWfhf7RtnzpL7TkBiTBRfrQ9Fxcnz7VJsleJpyp6rVLvXiuORqjlHi5q+PYuA==",
+      "dependencies": {
+        "streamsearch": "^1.1.0"
       },
       "engines": {
-        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
+        "node": ">=10.16.0"
       }
     },
-    "node_modules/babel-preset-current-node-syntax": {
-      "version": "1.2.0",
-      "resolved": "https://registry.npmjs.org/babel-preset-current-node-syntax/-/babel-preset-current-node-syntax-1.2.0.tgz",
-      "integrity": "sha512-E/VlAEzRrsLEb2+dv8yp3bo4scof3l9nR4lrld+Iy5NyVqgVYUJnDAmunkhPMisRI32Qc4iRiz425d8vM++2fg==",
+    "node_modules/bytes": {
+      "version": "3.1.2",
+      "resolved": "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz",
+      "integrity": "sha512-/Nf7TyzTx6S3yRJObOAV7956r8cr2+Oj8AC5dt8wSP3BQAoeX58NoHyCU8P8zGkNXStjTSi6fzO6F0pBdcYbEg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/bytestreamjs": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/bytestreamjs/-/bytestreamjs-2.0.1.tgz",
+      "integrity": "sha512-U1Z/ob71V/bXfVABvNr/Kumf5VyeQRBEm6Txb0PQ6S7V5GpBM3w4Cbqz/xPDicR5tN0uvDifng8C+5qECeGwyQ==",
+      "dev": true,
+      "license": "BSD-3-Clause",
+      "engines": {
+        "node": ">=6.0.0"
+      }
+    },
+    "node_modules/cacheable-lookup": {
+      "version": "5.0.4",
+      "resolved": "https://registry.npmjs.org/cacheable-lookup/-/cacheable-lookup-5.0.4.tgz",
+      "integrity": "sha512-2/kNscPhpcxrOigMZzbiWF7dz8ilhb/nIHU3EyZiXWXpeq/au8qJ8VhdftMkty3n7Gj6HIGalQG8oiBNB3AJgA==",
       "dev": true,
       "license": "MIT",
-      "dependencies": {
-        "@babel/plugin-syntax-async-generators": "^7.8.4",
-        "@babel/plugin-syntax-bigint": "^7.8.3",
-        "@babel/plugin-syntax-class-properties": "^7.12.13",
-        "@babel/plugin-syntax-class-static-block": "^7.14.5",
-        "@babel/plugin-syntax-import-attributes": "^7.24.7",
-        "@babel/plugin-syntax-import-meta": "^7.10.4",
-        "@babel/plugin-syntax-json-strings": "^7.8.3",
-        "@babel/plugin-syntax-logical-assignment-operators": "^7.10.4",
-        "@babel/plugin-syntax-nullish-coalescing-operator": "^7.8.3",
-        "@babel/plugin-syntax-numeric-separator": "^7.10.4",
-        "@babel/plugin-syntax-object-rest-spread": "^7.8.3",
-        "@babel/plugin-syntax-optional-catch-binding": "^7.8.3",
-        "@babel/plugin-syntax-optional-chaining": "^7.8.3",
-        "@babel/plugin-syntax-private-property-in-object": "^7.14.5",
-        "@babel/plugin-syntax-top-level-await": "^7.14.5"
-      },
-      "peerDependencies": {
-        "@babel/core": "^7.0.0 || ^8.0.0-0"
+      "engines": {
+        "node": ">=10.6.0"
       }
     },
-    "node_modules/babel-preset-jest": {
-      "version": "30.2.0",
-      "resolved": "https://registry.npmjs.org/babel-preset-jest/-/babel-preset-jest-30.2.0.tgz",
-      "integrity": "sha512-US4Z3NOieAQumwFnYdUWKvUKh8+YSnS/gB3t6YBiz0bskpu7Pine8pPCheNxlPEW4wnUkma2a94YuW2q3guvCQ==",
+    "node_modules/cacheable-request": {
+      "version": "7.0.4",
+      "resolved": "https://registry.npmjs.org/cacheable-request/-/cacheable-request-7.0.4.tgz",
+      "integrity": "sha512-v+p6ongsrp0yTGbJXjgxPow2+DL93DASP4kXCDKb8/bwRtt9OEF3whggkkDkGNzgcWy2XaF4a8nZglC7uElscg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "babel-plugin-jest-hoist": "30.2.0",
-        "babel-preset-current-node-syntax": "^1.2.0"
+        "clone-response": "^1.0.2",
+        "get-stream": "^5.1.0",
+        "http-cache-semantics": "^4.0.0",
+        "keyv": "^4.0.0",
+        "lowercase-keys": "^2.0.0",
+        "normalize-url": "^6.0.1",
+        "responselike": "^2.0.0"
       },
       "engines": {
-        "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
-      },
-      "peerDependencies": {
-        "@babel/core": "^7.11.0 || ^8.0.0-beta.1"
+        "node": ">=8"
       }
     },
-    "node_modules/balanced-match": {
+    "node_modules/call-bind-apply-helpers": {
       "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz",
-      "integrity": "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==",
-      "dev": true,
-      "license": "MIT"
-    },
-    "node_modules/bare-events": {
-      "version": "2.6.1",
-      "resolved": "https://registry.npmjs.org/bare-events/-/bare-events-2.6.1.tgz",
-      "integrity": "sha512-AuTJkq9XmE6Vk0FJVNq5QxETrSA/vKHarWVBG5l/JbdCL1prJemiyJqUS0jrlXO0MftuPq4m3YVYhoNc5+aE/g==",
-      "dev": true,
-      "license": "Apache-2.0",
-      "optional": true
-    },
-    "node_modules/bare-fs": {
-      "version": "4.2.3",
-      "resolved": "https://registry.npmjs.org/bare-fs/-/bare-fs-4.2.3.tgz",
-      "integrity": "sha512-1aGs5pRVLToMQ79elP+7cc0u0s/wXAzfBv/7hDloT7WFggLqECCas5qqPky7WHCFdsBH5WDq6sD4fAoz5sJbtA==",
-      "dev": true,
-      "license": "Apache-2.0",
-      "optional": true,
+      "resolved": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz",
+      "integrity": "sha512-Sp1ablJ0ivDkSzjcaJdxEunN5/XvksFJ2sMBFfq6x0ryhQV/2b/KwFe21cMpmHtPOSij8K99/wSfoEuTObmuMQ==",
+      "license": "MIT",
       "dependencies": {
-        "bare-events": "^2.5.4",
-        "bare-path": "^3.0.0",
-        "bare-stream": "^2.6.4"
+        "es-errors": "^1.3.0",
+        "function-bind": "^1.1.2"
       },
       "engines": {
-        "bare": ">=1.16.0"
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/call-bound": {
+      "version": "1.0.4",
+      "resolved": "https://registry.npmjs.org/call-bound/-/call-bound-1.0.4.tgz",
+      "integrity": "sha512-+ys997U96po4Kx/ABpBCqhA9EuxJaQWDQg7295H4hBphv3IZg0boBKuwYpt4YXp6MZ5AmZQnU/tyMTlRpaSejg==",
+      "license": "MIT",
+      "dependencies": {
+        "call-bind-apply-helpers": "^1.0.2",
+        "get-intrinsic": "^1.3.0"
       },
-      "peerDependencies": {
-        "bare-buffer": "*"
+      "engines": {
+        "node": ">= 0.4"
       },
-      "peerDependenciesMeta": {
-        "bare-buffer": {
-          "optional": true
-        }
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
       }
     },
-    "node_modules/bare-os": {
-      "version": "3.6.2",
-      "resolved": "https://registry.npmjs.org/bare-os/-/bare-os-3.6.2.tgz",
-      "integrity": "sha512-T+V1+1srU2qYNBmJCXZkUY5vQ0B4FSlL3QDROnKQYOqeiQR8UbjNHlPa+TIbM4cuidiN9GaTaOZgSEgsvPbh5A==",
+    "node_modules/callsites": {
+      "version": "3.1.0",
+      "resolved": "https://registry.npmjs.org/callsites/-/callsites-3.1.0.tgz",
+      "integrity": "sha512-P8BjAsXvZS+VIDUI11hHCQEv74YT67YUi5JJFNWIqL235sBmjX4+qx9Muvls5ivyNENctx46xQLQ3aTuE7ssaQ==",
       "dev": true,
-      "license": "Apache-2.0",
-      "optional": true,
+      "license": "MIT",
       "engines": {
-        "bare": ">=1.14.0"
+        "node": ">=6"
       }
     },
-    "node_modules/bare-path": {
-      "version": "3.0.0",
-      "resolved": "https://registry.npmjs.org/bare-path/-/bare-path-3.0.0.tgz",
-      "integrity": "sha512-tyfW2cQcB5NN8Saijrhqn0Zh7AnFNsnczRcuWODH0eYAXBsJ5gVxAUuNr7tsHSC6IZ77cA0SitzT+s47kot8Mw==",
+    "node_modules/camelcase": {
+      "version": "5.3.1",
+      "resolved": "https://registry.npmjs.org/camelcase/-/camelcase-5.3.1.tgz",
+      "integrity": "sha512-L28STB170nwWS63UjtlEOE3dldQApaJXZkOI1uMFfzf3rRuPegHaHesyee+YxQ+W6SvRDQV6UrdOdRiR153wJg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=6"
+      }
+    },
+    "node_modules/camelcase-css": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/camelcase-css/-/camelcase-css-2.0.1.tgz",
+      "integrity": "sha512-QOSvevhslijgYwRx6Rv7zKdMF8lbRmx+uQGx2+vDc+KI/eBnsy9kit5aj23AgGu3pa4t9AgwbnXWqS+iOY+2aA==",
       "dev": true,
-      "license": "Apache-2.0",
-      "optional": true,
-      "dependencies": {
-        "bare-os": "^3.0.1"
+      "license": "MIT",
+      "engines": {
+        "node": ">= 6"
       }
     },
-    "node_modules/bare-stream": {
-      "version": "2.7.0",
-      "resolved": "https://registry.npmjs.org/bare-stream/-/bare-stream-2.7.0.tgz",
-      "integrity": "sha512-oyXQNicV1y8nc2aKffH+BUHFRXmx6VrPzlnaEvMhram0nPBrKcEdcyBg5r08D0i8VxngHFAiVyn1QKXpSG0B8A==",
+    "node_modules/caniuse-lite": {
+      "version": "1.0.30001766",
+      "resolved": "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001766.tgz",
+      "integrity": "sha512-4C0lfJ0/YPjJQHagaE9x2Elb69CIqEPZeG0anQt9SIvIoOH4a4uaRl73IavyO+0qZh6MDLH//DrXThEYKHkmYA==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/browserslist"
+        },
+        {
+          "type": "tidelift",
+          "url": "https://tidelift.com/funding/github/npm/caniuse-lite"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "license": "CC-BY-4.0"
+    },
+    "node_modules/chalk": {
+      "version": "4.1.2",
+      "resolved": "https://registry.npmjs.org/chalk/-/chalk-4.1.2.tgz",
+      "integrity": "sha512-oKnbhFyRIXpUuez8iBMmyEa4nbj4IOQyuhc/wy9kY7/WVPcwIO9VA668Pu8RkO7+0G76SLROeyw9CpQ061i4mA==",
       "dev": true,
-      "license": "Apache-2.0",
-      "optional": true,
+      "license": "MIT",
       "dependencies": {
-        "streamx": "^2.21.0"
+        "ansi-styles": "^4.1.0",
+        "supports-color": "^7.1.0"
       },
-      "peerDependencies": {
-        "bare-buffer": "*",
-        "bare-events": "*"
+      "engines": {
+        "node": ">=10"
       },
-      "peerDependenciesMeta": {
-        "bare-buffer": {
-          "optional": true
-        },
-        "bare-events": {
-          "optional": true
-        }
+      "funding": {
+        "url": "https://github.com/chalk/chalk?sponsor=1"
       }
     },
-    "node_modules/base64id": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/base64id/-/base64id-2.0.0.tgz",
-      "integrity": "sha512-lGe34o6EHj9y3Kts9R4ZYs/Gr+6N7MCaMlIFA3F1R2O5/m7K06AxfSeO5530PEERE6/WyEg3lsuyw4GHlPZHog==",
+    "node_modules/chalk/node_modules/has-flag": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz",
+      "integrity": "sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==",
       "dev": true,
       "license": "MIT",
       "engines": {
-        "node": "^4.5.0 || >= 5.9"
+        "node": ">=8"
       }
     },
-    "node_modules/baseline-browser-mapping": {
-      "version": "2.9.19",
-      "resolved": "https://registry.npmjs.org/baseline-browser-mapping/-/baseline-browser-mapping-2.9.19.tgz",
-      "integrity": "sha512-ipDqC8FrAl/76p2SSWKSI+H9tFwm7vYqXQrItCuiVPt26Km0jS+NzSsBWAaBusvSbQcfJG+JitdMm+wZAgTYqg==",
+    "node_modules/chalk/node_modules/supports-color": {
+      "version": "7.2.0",
+      "resolved": "https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz",
+      "integrity": "sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==",
       "dev": true,
-      "license": "Apache-2.0",
-      "bin": {
-        "baseline-browser-mapping": "dist/cli.js"
+      "license": "MIT",
+      "dependencies": {
+        "has-flag": "^4.0.0"
+      },
+      "engines": {
+        "node": ">=8"
       }
     },
-    "node_modules/basic-ftp": {
-      "version": "5.0.5",
-      "resolved": "https://registry.npmjs.org/basic-ftp/-/basic-ftp-5.0.5.tgz",
-      "integrity": "sha512-4Bcg1P8xhUuqcii/S0Z9wiHIrQVPMermM1any+MX5GeGD7faD3/msQUDGLol9wOcz4/jbg/WJnGqoJF6LiBdtg==",
+    "node_modules/char-regex": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/char-regex/-/char-regex-1.0.2.tgz",
+      "integrity": "sha512-kWWXztvZ5SBQV+eRgKFeh8q5sLuZY2+8WUIzlxWVTg+oGwY14qylx1KbKzHd8P6ZYkAg0xyIDU9JMHhyJMZ1jw==",
       "dev": true,
       "license": "MIT",
       "engines": {
-        "node": ">=10.0.0"
+        "node": ">=10"
       }
     },
-    "node_modules/batch": {
-      "version": "0.6.1",
-      "resolved": "https://registry.npmjs.org/batch/-/batch-0.6.1.tgz",
-      "integrity": "sha512-x+VAiMRL6UPkx+kudNvxTl6hB2XNNCG2r+7wixVfIYwu/2HKRXimwQyaumLjMveWvT2Hkd/cAJw+QBMfJ/EKVw==",
-      "dev": true,
-      "license": "MIT"
-    },
-    "node_modules/binary-extensions": {
-      "version": "2.3.0",
-      "resolved": "https://registry.npmjs.org/binary-extensions/-/binary-extensions-2.3.0.tgz",
-      "integrity": "sha512-Ceh+7ox5qe7LJuLHoY0feh3pHuUDHAcRUeyL2VYghZwfpkNIy/+8Ocg0a3UuSoYzavmylwuLWQOf3hl0jjMMIw==",
+    "node_modules/chokidar": {
+      "version": "3.6.0",
+      "resolved": "https://registry.npmjs.org/chokidar/-/chokidar-3.6.0.tgz",
+      "integrity": "sha512-7VT13fmjotKpGipCW9JEQAusEPE+Ei8nl6/g4FBAmIm0GOOLMua9NDDo/DWp0ZAxCr3cPq5ZpBqmPAQgDda2Pw==",
       "dev": true,
       "license": "MIT",
+      "dependencies": {
+        "anymatch": "~3.1.2",
+        "braces": "~3.0.2",
+        "glob-parent": "~5.1.2",
+        "is-binary-path": "~2.1.0",
+        "is-glob": "~4.0.1",
+        "normalize-path": "~3.0.0",
+        "readdirp": "~3.6.0"
+      },
       "engines": {
-        "node": ">=8"
+        "node": ">= 8.10.0"
       },
       "funding": {
-        "url": "https://github.com/sponsors/sindresorhus"
+        "url": "https://paulmillr.com/funding/"
+      },
+      "optionalDependencies": {
+        "fsevents": "~2.3.2"
       }
     },
-    "node_modules/body-parser": {
-      "version": "1.20.3",
-      "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.3.tgz",
-      "integrity": "sha512-7rAxByjUMqQ3/bHJy7D6OGXvx/MMc4IqBn/X0fcM1QUcAItpZrBEYhWGem+tzXH90c+G01ypMcYJBO9Y30203g==",
-      "license": "MIT",
+    "node_modules/chownr": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/chownr/-/chownr-3.0.0.tgz",
+      "integrity": "sha512-+IxzY9BZOQd/XuYPRmrvEVjF/nqj5kgT4kEq7VofrDoM1MxoRjEWkrCC3EtLi59TVawxTAn+orJwFQcrqEN1+g==",
+      "dev": true,
+      "license": "BlueOak-1.0.0",
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/chromium-bidi": {
+      "version": "8.0.0",
+      "resolved": "https://registry.npmjs.org/chromium-bidi/-/chromium-bidi-8.0.0.tgz",
+      "integrity": "sha512-d1VmE0FD7lxZQHzcDUCKZSNRtRwISXDsdg4HjdTR5+Ll5nQ/vzU12JeNmupD6VWffrPSlrnGhEWlLESKH3VO+g==",
+      "dev": true,
+      "license": "Apache-2.0",
       "dependencies": {
-        "bytes": "3.1.2",
-        "content-type": "~1.0.5",
-        "debug": "2.6.9",
-        "depd": "2.0.0",
-        "destroy": "1.2.0",
-        "http-errors": "2.0.0",
-        "iconv-lite": "0.4.24",
-        "on-finished": "2.4.1",
-        "qs": "6.13.0",
-        "raw-body": "2.5.2",
-        "type-is": "~1.6.18",
-        "unpipe": "1.0.0"
+        "mitt": "^3.0.1",
+        "zod": "^3.24.1"
       },
-      "engines": {
-        "node": ">= 0.8",
-        "npm": "1.2.8000 || >= 1.4.16"
+      "peerDependencies": {
+        "devtools-protocol": "*"
       }
     },
-    "node_modules/body-parser/node_modules/debug": {
-      "version": "2.6.9",
-      "resolved": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
-      "integrity": "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==",
+    "node_modules/chromium-bidi/node_modules/mitt": {
+      "version": "3.0.1",
+      "resolved": "https://registry.npmjs.org/mitt/-/mitt-3.0.1.tgz",
+      "integrity": "sha512-vKivATfr97l2/QBCYAkXYDbrIWPM2IIKEl7YPhjCvKlG3kE2gm+uBo6nEXK3M5/Ffh/FLpKExzOQ3JJoJGFKBw==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/chromium-pickle-js": {
+      "version": "0.2.0",
+      "resolved": "https://registry.npmjs.org/chromium-pickle-js/-/chromium-pickle-js-0.2.0.tgz",
+      "integrity": "sha512-1R5Fho+jBq0DDydt+/vHWj5KJNJCKdARKOCwZUen84I5BreWoLqRLANH1U87eJy1tiASPtMnGqJJq0ZsLoRPOw==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/ci-info": {
+      "version": "4.4.0",
+      "resolved": "https://registry.npmjs.org/ci-info/-/ci-info-4.4.0.tgz",
+      "integrity": "sha512-77PSwercCZU2Fc4sX94eF8k8Pxte6JAwL4/ICZLFjJLqegs7kCuAsqqj/70NQF6TvDpgFjkubQB2FW2ZZddvQg==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/sibiraj-s"
+        }
+      ],
       "license": "MIT",
-      "dependencies": {
-        "ms": "2.0.0"
+      "engines": {
+        "node": ">=8"
       }
     },
-    "node_modules/body-parser/node_modules/ms": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
-      "integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==",
+    "node_modules/cjs-module-lexer": {
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/cjs-module-lexer/-/cjs-module-lexer-2.2.0.tgz",
+      "integrity": "sha512-4bHTS2YuzUvtoLjdy+98ykbNB5jS0+07EvFNXerqZQJ89F7DI6ET7OQo/HJuW6K0aVsKA9hj9/RVb2kQVOrPDQ==",
+      "dev": true,
       "license": "MIT"
     },
-    "node_modules/body-parser/node_modules/qs": {
-      "version": "6.13.0",
-      "resolved": "https://registry.npmjs.org/qs/-/qs-6.13.0.tgz",
-      "integrity": "sha512-+38qI9SOr8tfZ4QmJNplMUxqjbe7LKvvZgWdExBOmd+egZTtjLB67Gu0HRX3u/XOq7UU2Nx6nsjvS16Z9uwfpg==",
-      "license": "BSD-3-Clause",
+    "node_modules/cliui": {
+      "version": "8.0.1",
+      "resolved": "https://registry.npmjs.org/cliui/-/cliui-8.0.1.tgz",
+      "integrity": "sha512-BSeNnyus75C4//NQ9gQt1/csTXyo/8Sb+afLAkzAptFuMsod9HFokGNudZpi/oQV73hnVK+sR+5PVRMd+Dr7YQ==",
+      "dev": true,
+      "license": "ISC",
       "dependencies": {
-        "side-channel": "^1.0.6"
+        "string-width": "^4.2.0",
+        "strip-ansi": "^6.0.1",
+        "wrap-ansi": "^7.0.0"
       },
       "engines": {
-        "node": ">=0.6"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/ljharb"
+        "node": ">=12"
       }
     },
-    "node_modules/brace-expansion": {
-      "version": "1.1.12",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.12.tgz",
-      "integrity": "sha512-9T9UjW3r0UW5c1Q7GTwllptXwhvYmEzFhzMfZ9H7FQWt+uZePjZPjBP/W1ZEyZ1twGWom5/56TF4lPcqjnDHcg==",
+    "node_modules/clone-response": {
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/clone-response/-/clone-response-1.0.3.tgz",
+      "integrity": "sha512-ROoL94jJH2dUVML2Y/5PEDNaSHgeOdSDicUyS7izcF63G6sTc/FTjLub4b8Il9S8S0beOfYt0TaA5qvFK+w0wA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "balanced-match": "^1.0.0",
-        "concat-map": "0.0.1"
+        "mimic-response": "^1.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
       }
     },
-    "node_modules/braces": {
-      "version": "3.0.3",
-      "resolved": "https://registry.npmjs.org/braces/-/braces-3.0.3.tgz",
-      "integrity": "sha512-yQbXgO/OSZVD2IsiLlro+7Hf6Q18EJrKSEsdoMzKePKXct3gvD8oLcOQdIzGupr5Fj+EDe8gO/lxc1BzfMpxvA==",
+    "node_modules/co": {
+      "version": "4.6.0",
+      "resolved": "https://registry.npmjs.org/co/-/co-4.6.0.tgz",
+      "integrity": "sha512-QVb0dM5HvG+uaxitm8wONl7jltx8dqhfU33DcqtOZcLSVIKSDDLDi7+0LbAKiyI8hD9u42m2YxXSkMGWThaecQ==",
       "dev": true,
       "license": "MIT",
-      "dependencies": {
-        "fill-range": "^7.1.1"
-      },
       "engines": {
-        "node": ">=8"
+        "iojs": ">= 1.0.0",
+        "node": ">= 0.12.0"
       }
     },
-    "node_modules/browser-sync": {
-      "version": "3.0.4",
-      "resolved": "https://registry.npmjs.org/browser-sync/-/browser-sync-3.0.4.tgz",
-      "integrity": "sha512-mcYOIy4BW6sWSEnTSBjQwWsnbx2btZX78ajTTjdNfyC/EqQVcIe0nQR6894RNAMtvlfAnLaH9L2ka97zpvgenA==",
+    "node_modules/collect-v8-coverage": {
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/collect-v8-coverage/-/collect-v8-coverage-1.0.3.tgz",
+      "integrity": "sha512-1L5aqIkwPfiodaMgQunkF1zRhNqifHBmtbbbxcr6yVxxBnliw4TDOW6NxpO8DJLgJ16OT+Y4ztZqP6p/FtXnAw==",
       "dev": true,
-      "license": "Apache-2.0",
+      "license": "MIT"
+    },
+    "node_modules/color": {
+      "version": "3.2.1",
+      "resolved": "https://registry.npmjs.org/color/-/color-3.2.1.tgz",
+      "integrity": "sha512-aBl7dZI9ENN6fUGC7mWpMTPNHmWUSNan9tuWN6ahh5ZLNk9baLJOnSMlrQkHcrfFgz2/RigjUVAjdx36VcemKA==",
+      "license": "MIT",
       "dependencies": {
-        "browser-sync-client": "^3.0.4",
-        "browser-sync-ui": "^3.0.4",
-        "bs-recipes": "1.3.4",
-        "chalk": "4.1.2",
-        "chokidar": "^3.5.1",
-        "connect": "3.6.6",
-        "connect-history-api-fallback": "^1",
-        "dev-ip": "^1.0.1",
-        "easy-extender": "^2.3.4",
-        "eazy-logger": "^4.1.0",
-        "etag": "^1.8.1",
-        "fresh": "^0.5.2",
-        "fs-extra": "3.0.1",
-        "http-proxy": "^1.18.1",
-        "immutable": "^3",
-        "micromatch": "^4.0.8",
-        "opn": "5.3.0",
-        "portscanner": "2.2.0",
-        "raw-body": "^2.3.2",
-        "resp-modifier": "6.0.2",
-        "rx": "4.1.0",
-        "send": "^0.19.0",
-        "serve-index": "^1.9.1",
-        "serve-static": "^1.16.2",
-        "server-destroy": "1.0.1",
-        "socket.io": "^4.4.1",
-        "ua-parser-js": "^1.0.33",
-        "yargs": "^17.3.1"
-      },
-      "bin": {
-        "browser-sync": "dist/bin.js"
-      },
-      "engines": {
-        "node": ">= 8.0.0"
+        "color-convert": "^1.9.3",
+        "color-string": "^1.6.0"
       }
     },
-    "node_modules/browser-sync-client": {
-      "version": "3.0.4",
-      "resolved": "https://registry.npmjs.org/browser-sync-client/-/browser-sync-client-3.0.4.tgz",
-      "integrity": "sha512-+ew5ubXzGRKVjquBL3u6najS40TG7GxCdyBll0qSRc/n+JRV9gb/yDdRL1IAgRHqjnJTdqeBKKIQabjvjRSYRQ==",
-      "dev": true,
-      "license": "ISC",
+    "node_modules/color-convert": {
+      "version": "1.9.3",
+      "resolved": "https://registry.npmjs.org/color-convert/-/color-convert-1.9.3.tgz",
+      "integrity": "sha512-QfAUtd+vFdAtFQcC8CCyYt1fYWxSqAiK2cSD6zDB8N3cpsEBAvRxp9zOGg6G/SHHJYAT88/az/IuDGALsNVbGg==",
+      "license": "MIT",
       "dependencies": {
-        "etag": "1.8.1",
-        "fresh": "0.5.2",
-        "mitt": "^1.1.3"
-      },
-      "engines": {
-        "node": ">=8.0.0"
+        "color-name": "1.1.3"
       }
     },
-    "node_modules/browser-sync-ui": {
-      "version": "3.0.4",
-      "resolved": "https://registry.npmjs.org/browser-sync-ui/-/browser-sync-ui-3.0.4.tgz",
-      "integrity": "sha512-5Po3YARCZ/8yQHFzvrSjn8+hBUF7ZWac39SHsy8Tls+7tE62iq6pYWxpVU6aOOMAGD21RwFQhQeqmJPf70kHEQ==",
-      "dev": true,
-      "license": "Apache-2.0",
+    "node_modules/color-name": {
+      "version": "1.1.3",
+      "resolved": "https://registry.npmjs.org/color-name/-/color-name-1.1.3.tgz",
+      "integrity": "sha512-72fSenhMw2HZMTVHeCA9KCmpEIbzWiQsjN+BHcBbS9vr1mtt+vJjPdksIBNUmKAW8TFUDPJK5SUU3QhE9NEXDw==",
+      "license": "MIT"
+    },
+    "node_modules/color-string": {
+      "version": "1.9.1",
+      "resolved": "https://registry.npmjs.org/color-string/-/color-string-1.9.1.tgz",
+      "integrity": "sha512-shrVawQFojnZv6xM40anx4CkoDP+fZsw/ZerEMsW/pyzsRbElpsL/DBVW7q3ExxwusdNXI3lXpuhEZkzs8p5Eg==",
+      "license": "MIT",
       "dependencies": {
-        "async-each-series": "0.1.1",
-        "chalk": "4.1.2",
-        "connect-history-api-fallback": "^1",
-        "immutable": "^3",
-        "server-destroy": "1.0.1",
-        "socket.io-client": "^4.4.1",
-        "stream-throttle": "^0.1.3"
+        "color-name": "^1.0.0",
+        "simple-swizzle": "^0.2.2"
       }
     },
-    "node_modules/browser-sync/node_modules/fs-extra": {
-      "version": "3.0.1",
-      "resolved": "https://registry.npmjs.org/fs-extra/-/fs-extra-3.0.1.tgz",
-      "integrity": "sha512-V3Z3WZWVUYd8hoCL5xfXJCaHWYzmtwW5XWYSlLgERi8PWd8bx1kUHUk8L1BT57e49oKnDDD180mjfrHc1yA9rg==",
-      "dev": true,
+    "node_modules/colorspace": {
+      "version": "1.1.4",
+      "resolved": "https://registry.npmjs.org/colorspace/-/colorspace-1.1.4.tgz",
+      "integrity": "sha512-BgvKJiuVu1igBUF2kEjRCZXol6wiiGbY5ipL/oVPwm0BL9sIpMIzM8IK7vwuxIIzOXMV3Ey5w+vxhm0rR/TN8w==",
       "license": "MIT",
       "dependencies": {
-        "graceful-fs": "^4.1.2",
-        "jsonfile": "^3.0.0",
-        "universalify": "^0.1.0"
+        "color": "^3.1.3",
+        "text-hex": "1.0.x"
       }
     },
-    "node_modules/browser-sync/node_modules/jsonfile": {
-      "version": "3.0.1",
-      "resolved": "https://registry.npmjs.org/jsonfile/-/jsonfile-3.0.1.tgz",
-      "integrity": "sha512-oBko6ZHlubVB5mRFkur5vgYR1UyqX+S6Y/oCfLhqNdcc2fYFlDpIoNc7AfKS1KOGcnNAkvsr0grLck9ANM815w==",
+    "node_modules/combined-stream": {
+      "version": "1.0.8",
+      "resolved": "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.8.tgz",
+      "integrity": "sha512-FQN4MRfuJeHf7cBbBMJFXhKSDq+2kAArBlmRBvcvFE5BB1HZKXtSFASDhdlz9zOYwxh8lDdnvmMOe/+5cdoEdg==",
       "dev": true,
       "license": "MIT",
-      "optionalDependencies": {
-        "graceful-fs": "^4.1.6"
+      "dependencies": {
+        "delayed-stream": "~1.0.0"
+      },
+      "engines": {
+        "node": ">= 0.8"
       }
     },
-    "node_modules/browser-sync/node_modules/universalify": {
+    "node_modules/compare-version": {
       "version": "0.1.2",
-      "resolved": "https://registry.npmjs.org/universalify/-/universalify-0.1.2.tgz",
-      "integrity": "sha512-rBJeI5CXAlmy1pV+617WB9J63U6XcazHHF2f2dbJix4XzpUF0RS3Zbj0FGIOCAva5P/d/GBOYaACQ1w+0azUkg==",
+      "resolved": "https://registry.npmjs.org/compare-version/-/compare-version-0.1.2.tgz",
+      "integrity": "sha512-pJDh5/4wrEnXX/VWRZvruAGHkzKdr46z11OlTPN+VrATlWWhSKewNCJ1futCO5C7eJB3nPMFZA1LeYtcFboZ2A==",
       "dev": true,
       "license": "MIT",
       "engines": {
-        "node": ">= 4.0.0"
+        "node": ">=0.10.0"
       }
     },
-    "node_modules/browserslist": {
-      "version": "4.28.1",
-      "resolved": "https://registry.npmjs.org/browserslist/-/browserslist-4.28.1.tgz",
-      "integrity": "sha512-ZC5Bd0LgJXgwGqUknZY/vkUQ04r8NXnJZ3yYi4vDmSiZmC/pdSN0NbNRPxZpbtO4uAfDUAFffO8IZoM3Gj8IkA==",
+    "node_modules/component-emitter": {
+      "version": "1.3.1",
+      "resolved": "https://registry.npmjs.org/component-emitter/-/component-emitter-1.3.1.tgz",
+      "integrity": "sha512-T0+barUSQRTUQASh8bx02dl+DhF54GtIDY13Y3m9oWTklKbb3Wv974meRpeZ3lp1JpLVECWWNHC4vaG2XHXouQ==",
       "dev": true,
-      "funding": [
-        {
-          "type": "opencollective",
-          "url": "https://opencollective.com/browserslist"
-        },
-        {
-          "type": "tidelift",
-          "url": "https://tidelift.com/funding/github/npm/browserslist"
-        },
-        {
-          "type": "github",
-          "url": "https://github.com/sponsors/ai"
-        }
-      ],
       "license": "MIT",
-      "dependencies": {
-        "baseline-browser-mapping": "^2.9.0",
-        "caniuse-lite": "^1.0.30001759",
-        "electron-to-chromium": "^1.5.263",
-        "node-releases": "^2.0.27",
-        "update-browserslist-db": "^1.2.0"
-      },
-      "bin": {
-        "browserslist": "cli.js"
-      },
-      "engines": {
-        "node": "^6 || ^7 || ^8 || ^9 || ^10 || ^11 || ^12 || >=13.7"
-      }
-    },
-    "node_modules/bs-recipes": {
-      "version": "1.3.4",
-      "resolved": "https://registry.npmjs.org/bs-recipes/-/bs-recipes-1.3.4.tgz",
-      "integrity": "sha512-BXvDkqhDNxXEjeGM8LFkSbR+jzmP/CYpCiVKYn+soB1dDldeU15EBNDkwVXndKuX35wnNUaPd0qSoQEAkmQtMw==",
-      "dev": true,
-      "license": "ISC"
-    },
-    "node_modules/bser": {
-      "version": "2.1.1",
-      "resolved": "https://registry.npmjs.org/bser/-/bser-2.1.1.tgz",
-      "integrity": "sha512-gQxTNE/GAfIIrmHLUE3oJyp5FO6HRBfhjnw4/wMmA63ZGDJnWBmgY/lyQBpnDUkGmAhbSe39tx2d/iTOAfglwQ==",
-      "dev": true,
-      "license": "Apache-2.0",
-      "dependencies": {
-        "node-int64": "^0.4.0"
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
       }
     },
-    "node_modules/buffer-crc32": {
-      "version": "0.2.13",
-      "resolved": "https://registry.npmjs.org/buffer-crc32/-/buffer-crc32-0.2.13.tgz",
-      "integrity": "sha512-VO9Ht/+p3SN7SKWqcrgEzjGbRSJYTx+Q1pTQC0wrWqHx0vpJraQ6GtHx8tvcg1rlK1byhU5gccxgOgj7B0TDkQ==",
+    "node_modules/concat-map": {
+      "version": "0.0.1",
+      "resolved": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz",
+      "integrity": "sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg==",
       "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": "*"
-      }
-    },
-    "node_modules/buffer-equal-constant-time": {
-      "version": "1.0.1",
-      "resolved": "https://registry.npmjs.org/buffer-equal-constant-time/-/buffer-equal-constant-time-1.0.1.tgz",
-      "integrity": "sha512-zRpUiDwd/xk6ADqPMATG8vc9VPrkck7T07OIx0gnjmJAnHnTVXNQG3vfvWNuiZIkwu9KrKdA1iJKfsfTVxE6NA==",
-      "license": "BSD-3-Clause"
-    },
-    "node_modules/buffer-from": {
-      "version": "1.1.2",
-      "resolved": "https://registry.npmjs.org/buffer-from/-/buffer-from-1.1.2.tgz",
-      "integrity": "sha512-E+XQCRwSbaaiChtv6k6Dwgc+bx+Bs6vuKJHHl5kox/BaKbhiXzqQOwK4cO22yElGp2OCmjwVhT3HmxgyPGnJfQ==",
       "license": "MIT"
     },
-    "node_modules/busboy": {
-      "version": "1.6.0",
-      "resolved": "https://registry.npmjs.org/busboy/-/busboy-1.6.0.tgz",
-      "integrity": "sha512-8SFQbg/0hQ9xy3UNTB0YEnsNBbWfhf7RtnzpL7TkBiTBRfrQ9Fxcnz7VJsleJpyp6rVLvXiuORqjlHi5q+PYuA==",
-      "dependencies": {
-        "streamsearch": "^1.1.0"
-      },
-      "engines": {
-        "node": ">=10.16.0"
-      }
-    },
-    "node_modules/bytes": {
-      "version": "3.1.2",
-      "resolved": "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz",
-      "integrity": "sha512-/Nf7TyzTx6S3yRJObOAV7956r8cr2+Oj8AC5dt8wSP3BQAoeX58NoHyCU8P8zGkNXStjTSi6fzO6F0pBdcYbEg==",
+    "node_modules/concat-stream": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/concat-stream/-/concat-stream-2.0.0.tgz",
+      "integrity": "sha512-MWufYdFw53ccGjCA+Ol7XJYpAlW6/prSMzuPOTRnJGcGzuhLn4Scrz7qf6o8bROZ514ltazcIFJZevcfbo0x7A==",
+      "engines": [
+        "node >= 6.0"
+      ],
       "license": "MIT",
-      "engines": {
-        "node": ">= 0.8"
+      "dependencies": {
+        "buffer-from": "^1.0.0",
+        "inherits": "^2.0.3",
+        "readable-stream": "^3.0.2",
+        "typedarray": "^0.0.6"
       }
     },
-    "node_modules/call-bind-apply-helpers": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz",
-      "integrity": "sha512-Sp1ablJ0ivDkSzjcaJdxEunN5/XvksFJ2sMBFfq6x0ryhQV/2b/KwFe21cMpmHtPOSij8K99/wSfoEuTObmuMQ==",
+    "node_modules/content-disposition": {
+      "version": "0.5.4",
+      "resolved": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.4.tgz",
+      "integrity": "sha512-FveZTNuGw04cxlAiWbzi6zTAL/lhehaWbTtgluJh4/E95DqMwTmha3KZN1aAWA8cFIhHzMZUvLevkw5Rqk+tSQ==",
       "license": "MIT",
       "dependencies": {
-        "es-errors": "^1.3.0",
-        "function-bind": "^1.1.2"
+        "safe-buffer": "5.2.1"
       },
       "engines": {
-        "node": ">= 0.4"
+        "node": ">= 0.6"
       }
     },
-    "node_modules/call-bound": {
-      "version": "1.0.4",
-      "resolved": "https://registry.npmjs.org/call-bound/-/call-bound-1.0.4.tgz",
-      "integrity": "sha512-+ys997U96po4Kx/ABpBCqhA9EuxJaQWDQg7295H4hBphv3IZg0boBKuwYpt4YXp6MZ5AmZQnU/tyMTlRpaSejg==",
+    "node_modules/content-type": {
+      "version": "1.0.5",
+      "resolved": "https://registry.npmjs.org/content-type/-/content-type-1.0.5.tgz",
+      "integrity": "sha512-nTjqfcBFEipKdXCv4YDQWCfmcLZKm81ldF0pAopTvyrFGVbcR6P/VAAd5G7N+0tTr8QqiU0tFadD6FK4NtJwOA==",
       "license": "MIT",
-      "dependencies": {
-        "call-bind-apply-helpers": "^1.0.2",
-        "get-intrinsic": "^1.3.0"
-      },
       "engines": {
-        "node": ">= 0.4"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/ljharb"
+        "node": ">= 0.6"
       }
     },
-    "node_modules/callsites": {
-      "version": "3.1.0",
-      "resolved": "https://registry.npmjs.org/callsites/-/callsites-3.1.0.tgz",
-      "integrity": "sha512-P8BjAsXvZS+VIDUI11hHCQEv74YT67YUi5JJFNWIqL235sBmjX4+qx9Muvls5ivyNENctx46xQLQ3aTuE7ssaQ==",
+    "node_modules/convert-source-map": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-2.0.0.tgz",
+      "integrity": "sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg==",
       "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/cookie": {
+      "version": "0.7.1",
+      "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.7.1.tgz",
+      "integrity": "sha512-6DnInpx7SJ2AK3+CTUE/ZM0vWTUboZCegxhC2xiIydHR9jNuTAASBrfEpHhiGOZw/nX51bHt6YQl8jsGo4y/0w==",
       "license": "MIT",
       "engines": {
-        "node": ">=6"
+        "node": ">= 0.6"
       }
     },
-    "node_modules/camelcase": {
-      "version": "5.3.1",
-      "resolved": "https://registry.npmjs.org/camelcase/-/camelcase-5.3.1.tgz",
-      "integrity": "sha512-L28STB170nwWS63UjtlEOE3dldQApaJXZkOI1uMFfzf3rRuPegHaHesyee+YxQ+W6SvRDQV6UrdOdRiR153wJg==",
+    "node_modules/cookie-signature": {
+      "version": "1.0.6",
+      "resolved": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.6.tgz",
+      "integrity": "sha512-QADzlaHc8icV8I7vbaJXJwod9HWYp8uCqf1xa4OfNu1T7JVxQIrUgOWtHdNDtPiywmFbiS12VjotIXLrKM3orQ==",
+      "license": "MIT"
+    },
+    "node_modules/cookiejar": {
+      "version": "2.1.4",
+      "resolved": "https://registry.npmjs.org/cookiejar/-/cookiejar-2.1.4.tgz",
+      "integrity": "sha512-LDx6oHrK+PhzLKJU9j5S7/Y3jM/mUHvD/DeI1WQmJn652iPC5Y4TBzC9l+5OMOXlyTTA+SmVUPm0HQUwpD5Jqw==",
       "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=6"
-      }
+      "license": "MIT"
     },
-    "node_modules/caniuse-lite": {
-      "version": "1.0.30001766",
-      "resolved": "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001766.tgz",
-      "integrity": "sha512-4C0lfJ0/YPjJQHagaE9x2Elb69CIqEPZeG0anQt9SIvIoOH4a4uaRl73IavyO+0qZh6MDLH//DrXThEYKHkmYA==",
+    "node_modules/core-util-is": {
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.3.tgz",
+      "integrity": "sha512-ZQBvi1DcpJ4GDqanjucZ2Hj3wEO5pZDS89BWbkcrvdxksJorwUDDZamX9ldFkp9aw2lmBDLgkObEA4DWNJ9FYQ==",
       "dev": true,
-      "funding": [
-        {
-          "type": "opencollective",
-          "url": "https://opencollective.com/browserslist"
-        },
-        {
-          "type": "tidelift",
-          "url": "https://tidelift.com/funding/github/npm/caniuse-lite"
-        },
-        {
-          "type": "github",
-          "url": "https://github.com/sponsors/ai"
-        }
-      ],
-      "license": "CC-BY-4.0"
+      "license": "MIT"
     },
-    "node_modules/chalk": {
-      "version": "4.1.2",
-      "resolved": "https://registry.npmjs.org/chalk/-/chalk-4.1.2.tgz",
-      "integrity": "sha512-oKnbhFyRIXpUuez8iBMmyEa4nbj4IOQyuhc/wy9kY7/WVPcwIO9VA668Pu8RkO7+0G76SLROeyw9CpQ061i4mA==",
+    "node_modules/cosmiconfig": {
+      "version": "9.0.0",
+      "resolved": "https://registry.npmjs.org/cosmiconfig/-/cosmiconfig-9.0.0.tgz",
+      "integrity": "sha512-itvL5h8RETACmOTFc4UfIyB2RfEHi71Ax6E/PivVxq9NseKbOWpeyHEOIbmAw1rs8Ak0VursQNww7lf7YtUwzg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "ansi-styles": "^4.1.0",
-        "supports-color": "^7.1.0"
+        "env-paths": "^2.2.1",
+        "import-fresh": "^3.3.0",
+        "js-yaml": "^4.1.0",
+        "parse-json": "^5.2.0"
       },
       "engines": {
-        "node": ">=10"
+        "node": ">=14"
       },
       "funding": {
-        "url": "https://github.com/chalk/chalk?sponsor=1"
+        "url": "https://github.com/sponsors/d-fischer"
+      },
+      "peerDependencies": {
+        "typescript": ">=4.9.5"
+      },
+      "peerDependenciesMeta": {
+        "typescript": {
+          "optional": true
+        }
       }
     },
-    "node_modules/chalk/node_modules/has-flag": {
-      "version": "4.0.0",
-      "resolved": "https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz",
-      "integrity": "sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==",
+    "node_modules/cross-dirname": {
+      "version": "0.1.0",
+      "resolved": "https://registry.npmjs.org/cross-dirname/-/cross-dirname-0.1.0.tgz",
+      "integrity": "sha512-+R08/oI0nl3vfPcqftZRpytksBXDzOUveBq/NBVx0sUp1axwzPQrKinNx5yd5sxPu8j1wIy8AfnVQ+5eFdha6Q==",
       "dev": true,
       "license": "MIT",
-      "engines": {
-        "node": ">=8"
-      }
-    },
-    "node_modules/chalk/node_modules/supports-color": {
-      "version": "7.2.0",
-      "resolved": "https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz",
-      "integrity": "sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==",
+      "optional": true,
+      "peer": true
+    },
+    "node_modules/cross-spawn": {
+      "version": "7.0.6",
+      "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz",
+      "integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "has-flag": "^4.0.0"
+        "path-key": "^3.1.0",
+        "shebang-command": "^2.0.0",
+        "which": "^2.0.1"
       },
       "engines": {
-        "node": ">=8"
+        "node": ">= 8"
       }
     },
-    "node_modules/char-regex": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/char-regex/-/char-regex-1.0.2.tgz",
-      "integrity": "sha512-kWWXztvZ5SBQV+eRgKFeh8q5sLuZY2+8WUIzlxWVTg+oGwY14qylx1KbKzHd8P6ZYkAg0xyIDU9JMHhyJMZ1jw==",
+    "node_modules/cssesc": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/cssesc/-/cssesc-3.0.0.tgz",
+      "integrity": "sha512-/Tb/JcjK111nNScGob5MNtsntNM1aCNUDipB/TkwZFhyDrrE47SOx/18wF2bbjgc3ZzCSKW1T5nt5EbFoAz/Vg==",
       "dev": true,
       "license": "MIT",
+      "bin": {
+        "cssesc": "bin/cssesc"
+      },
       "engines": {
-        "node": ">=10"
+        "node": ">=4"
       }
     },
-    "node_modules/chokidar": {
-      "version": "3.6.0",
-      "resolved": "https://registry.npmjs.org/chokidar/-/chokidar-3.6.0.tgz",
-      "integrity": "sha512-7VT13fmjotKpGipCW9JEQAusEPE+Ei8nl6/g4FBAmIm0GOOLMua9NDDo/DWp0ZAxCr3cPq5ZpBqmPAQgDda2Pw==",
-      "dev": true,
+    "node_modules/data-uri-to-buffer": {
+      "version": "4.0.1",
+      "resolved": "https://registry.npmjs.org/data-uri-to-buffer/-/data-uri-to-buffer-4.0.1.tgz",
+      "integrity": "sha512-0R9ikRb668HB7QDxT1vkpuUBtqc53YyAwMwGeUFKRojY/NWKvdZ+9UYtRfGmhqNbRkTSVpMbmyhXipFFv2cb/A==",
       "license": "MIT",
-      "dependencies": {
-        "anymatch": "~3.1.2",
-        "braces": "~3.0.2",
-        "glob-parent": "~5.1.2",
-        "is-binary-path": "~2.1.0",
-        "is-glob": "~4.0.1",
-        "normalize-path": "~3.0.0",
-        "readdirp": "~3.6.0"
-      },
       "engines": {
-        "node": ">= 8.10.0"
-      },
-      "funding": {
-        "url": "https://paulmillr.com/funding/"
-      },
-      "optionalDependencies": {
-        "fsevents": "~2.3.2"
+        "node": ">= 12"
       }
     },
-    "node_modules/chromium-bidi": {
-      "version": "8.0.0",
-      "resolved": "https://registry.npmjs.org/chromium-bidi/-/chromium-bidi-8.0.0.tgz",
-      "integrity": "sha512-d1VmE0FD7lxZQHzcDUCKZSNRtRwISXDsdg4HjdTR5+Ll5nQ/vzU12JeNmupD6VWffrPSlrnGhEWlLESKH3VO+g==",
+    "node_modules/debug": {
+      "version": "3.2.7",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-3.2.7.tgz",
+      "integrity": "sha512-CFjzYYAi4ThfiQvizrFQevTTXHtnCqWfe7x1AhgEscTz6ZbLbfoLRLPugTQyBth6f8ZERVUSyWHFD/7Wu4t1XQ==",
       "dev": true,
-      "license": "Apache-2.0",
+      "license": "MIT",
       "dependencies": {
-        "mitt": "^3.0.1",
-        "zod": "^3.24.1"
-      },
-      "peerDependencies": {
-        "devtools-protocol": "*"
+        "ms": "^2.1.1"
       }
     },
-    "node_modules/chromium-bidi/node_modules/mitt": {
-      "version": "3.0.1",
-      "resolved": "https://registry.npmjs.org/mitt/-/mitt-3.0.1.tgz",
-      "integrity": "sha512-vKivATfr97l2/QBCYAkXYDbrIWPM2IIKEl7YPhjCvKlG3kE2gm+uBo6nEXK3M5/Ffh/FLpKExzOQ3JJoJGFKBw==",
-      "dev": true,
-      "license": "MIT"
-    },
-    "node_modules/ci-info": {
-      "version": "4.4.0",
-      "resolved": "https://registry.npmjs.org/ci-info/-/ci-info-4.4.0.tgz",
-      "integrity": "sha512-77PSwercCZU2Fc4sX94eF8k8Pxte6JAwL4/ICZLFjJLqegs7kCuAsqqj/70NQF6TvDpgFjkubQB2FW2ZZddvQg==",
-      "dev": true,
-      "funding": [
-        {
-          "type": "github",
-          "url": "https://github.com/sponsors/sibiraj-s"
-        }
-      ],
+    "node_modules/decamelize": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/decamelize/-/decamelize-1.2.0.tgz",
+      "integrity": "sha512-z2S+W9X73hAUUki+N+9Za2lBlun89zigOyGrsax+KUQ6wKW4ZoWpEYBkGhQjwAjjDCkWxhY0VKEhk8wzY7F5cA==",
       "license": "MIT",
       "engines": {
-        "node": ">=8"
+        "node": ">=0.10.0"
       }
     },
-    "node_modules/cjs-module-lexer": {
-      "version": "2.2.0",
-      "resolved": "https://registry.npmjs.org/cjs-module-lexer/-/cjs-module-lexer-2.2.0.tgz",
-      "integrity": "sha512-4bHTS2YuzUvtoLjdy+98ykbNB5jS0+07EvFNXerqZQJ89F7DI6ET7OQo/HJuW6K0aVsKA9hj9/RVb2kQVOrPDQ==",
-      "dev": true,
-      "license": "MIT"
-    },
-    "node_modules/cliui": {
-      "version": "8.0.1",
-      "resolved": "https://registry.npmjs.org/cliui/-/cliui-8.0.1.tgz",
-      "integrity": "sha512-BSeNnyus75C4//NQ9gQt1/csTXyo/8Sb+afLAkzAptFuMsod9HFokGNudZpi/oQV73hnVK+sR+5PVRMd+Dr7YQ==",
+    "node_modules/decompress-response": {
+      "version": "6.0.0",
+      "resolved": "https://registry.npmjs.org/decompress-response/-/decompress-response-6.0.0.tgz",
+      "integrity": "sha512-aW35yZM6Bb/4oJlZncMH2LCoZtJXTRxES17vE3hoRiowU2kWHaJKFkSBDnDR+cm9J+9QhXmREyIfv0pji9ejCQ==",
       "dev": true,
-      "license": "ISC",
+      "license": "MIT",
       "dependencies": {
-        "string-width": "^4.2.0",
-        "strip-ansi": "^6.0.1",
-        "wrap-ansi": "^7.0.0"
+        "mimic-response": "^3.1.0"
       },
       "engines": {
-        "node": ">=12"
+        "node": ">=10"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
       }
     },
-    "node_modules/co": {
-      "version": "4.6.0",
-      "resolved": "https://registry.npmjs.org/co/-/co-4.6.0.tgz",
-      "integrity": "sha512-QVb0dM5HvG+uaxitm8wONl7jltx8dqhfU33DcqtOZcLSVIKSDDLDi7+0LbAKiyI8hD9u42m2YxXSkMGWThaecQ==",
+    "node_modules/decompress-response/node_modules/mimic-response": {
+      "version": "3.1.0",
+      "resolved": "https://registry.npmjs.org/mimic-response/-/mimic-response-3.1.0.tgz",
+      "integrity": "sha512-z0yWI+4FDrrweS8Zmt4Ej5HdJmky15+L2e6Wgn3+iK5fWzb6T3fhNFq2+MeTRb064c6Wr4N/wv0DzQTjNzHNGQ==",
       "dev": true,
       "license": "MIT",
       "engines": {
-        "iojs": ">= 1.0.0",
-        "node": ">= 0.12.0"
+        "node": ">=10"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
       }
     },
-    "node_modules/collect-v8-coverage": {
-      "version": "1.0.3",
-      "resolved": "https://registry.npmjs.org/collect-v8-coverage/-/collect-v8-coverage-1.0.3.tgz",
-      "integrity": "sha512-1L5aqIkwPfiodaMgQunkF1zRhNqifHBmtbbbxcr6yVxxBnliw4TDOW6NxpO8DJLgJ16OT+Y4ztZqP6p/FtXnAw==",
+    "node_modules/dedent": {
+      "version": "1.7.1",
+      "resolved": "https://registry.npmjs.org/dedent/-/dedent-1.7.1.tgz",
+      "integrity": "sha512-9JmrhGZpOlEgOLdQgSm0zxFaYoQon408V1v49aqTWuXENVlnCuY9JBZcXZiCsZQWDjTm5Qf/nIvAy77mXDAjEg==",
       "dev": true,
-      "license": "MIT"
-    },
-    "node_modules/color": {
-      "version": "3.2.1",
-      "resolved": "https://registry.npmjs.org/color/-/color-3.2.1.tgz",
-      "integrity": "sha512-aBl7dZI9ENN6fUGC7mWpMTPNHmWUSNan9tuWN6ahh5ZLNk9baLJOnSMlrQkHcrfFgz2/RigjUVAjdx36VcemKA==",
       "license": "MIT",
-      "dependencies": {
-        "color-convert": "^1.9.3",
-        "color-string": "^1.6.0"
+      "peerDependencies": {
+        "babel-plugin-macros": "^3.1.0"
+      },
+      "peerDependenciesMeta": {
+        "babel-plugin-macros": {
+          "optional": true
+        }
       }
     },
-    "node_modules/color-convert": {
-      "version": "1.9.3",
-      "resolved": "https://registry.npmjs.org/color-convert/-/color-convert-1.9.3.tgz",
-      "integrity": "sha512-QfAUtd+vFdAtFQcC8CCyYt1fYWxSqAiK2cSD6zDB8N3cpsEBAvRxp9zOGg6G/SHHJYAT88/az/IuDGALsNVbGg==",
+    "node_modules/deepmerge": {
+      "version": "4.3.1",
+      "resolved": "https://registry.npmjs.org/deepmerge/-/deepmerge-4.3.1.tgz",
+      "integrity": "sha512-3sUqbMEc77XqpdNO7FRyRog+eW3ph+GYCbj+rK+uYyRMuwsVy0rMiVtPn+QJlKFvWP/1PYpapqYn0Me2knFn+A==",
+      "dev": true,
       "license": "MIT",
-      "dependencies": {
-        "color-name": "1.1.3"
+      "engines": {
+        "node": ">=0.10.0"
       }
     },
-    "node_modules/color-name": {
-      "version": "1.1.3",
-      "resolved": "https://registry.npmjs.org/color-name/-/color-name-1.1.3.tgz",
-      "integrity": "sha512-72fSenhMw2HZMTVHeCA9KCmpEIbzWiQsjN+BHcBbS9vr1mtt+vJjPdksIBNUmKAW8TFUDPJK5SUU3QhE9NEXDw==",
-      "license": "MIT"
-    },
-    "node_modules/color-string": {
-      "version": "1.9.1",
-      "resolved": "https://registry.npmjs.org/color-string/-/color-string-1.9.1.tgz",
-      "integrity": "sha512-shrVawQFojnZv6xM40anx4CkoDP+fZsw/ZerEMsW/pyzsRbElpsL/DBVW7q3ExxwusdNXI3lXpuhEZkzs8p5Eg==",
+    "node_modules/defer-to-connect": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/defer-to-connect/-/defer-to-connect-2.0.1.tgz",
+      "integrity": "sha512-4tvttepXG1VaYGrRibk5EwJd1t4udunSOVMdLSAL6mId1ix438oPwPZMALY41FCijukO1L0twNcGsdzS7dHgDg==",
+      "dev": true,
       "license": "MIT",
-      "dependencies": {
-        "color-name": "^1.0.0",
-        "simple-swizzle": "^0.2.2"
+      "engines": {
+        "node": ">=10"
       }
     },
-    "node_modules/colorspace": {
+    "node_modules/define-data-property": {
       "version": "1.1.4",
-      "resolved": "https://registry.npmjs.org/colorspace/-/colorspace-1.1.4.tgz",
-      "integrity": "sha512-BgvKJiuVu1igBUF2kEjRCZXol6wiiGbY5ipL/oVPwm0BL9sIpMIzM8IK7vwuxIIzOXMV3Ey5w+vxhm0rR/TN8w==",
+      "resolved": "https://registry.npmjs.org/define-data-property/-/define-data-property-1.1.4.tgz",
+      "integrity": "sha512-rBMvIzlpA8v6E+SJZoo++HAYqsLrkg7MSfIinMPFhmkorw7X+dOXVJQs+QT69zGkzMyfDnIMN2Wid1+NbL3T+A==",
+      "dev": true,
       "license": "MIT",
+      "optional": true,
       "dependencies": {
-        "color": "^3.1.3",
-        "text-hex": "1.0.x"
+        "es-define-property": "^1.0.0",
+        "es-errors": "^1.3.0",
+        "gopd": "^1.0.1"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
       }
     },
-    "node_modules/combined-stream": {
-      "version": "1.0.8",
-      "resolved": "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.8.tgz",
-      "integrity": "sha512-FQN4MRfuJeHf7cBbBMJFXhKSDq+2kAArBlmRBvcvFE5BB1HZKXtSFASDhdlz9zOYwxh8lDdnvmMOe/+5cdoEdg==",
+    "node_modules/define-properties": {
+      "version": "1.2.1",
+      "resolved": "https://registry.npmjs.org/define-properties/-/define-properties-1.2.1.tgz",
+      "integrity": "sha512-8QmQKqEASLd5nx0U1B1okLElbUuuttJ/AnYmRXbbbGDWh6uS208EjD4Xqq/I9wK7u0v6O08XhTWnt5XtEbR6Dg==",
       "dev": true,
       "license": "MIT",
+      "optional": true,
       "dependencies": {
-        "delayed-stream": "~1.0.0"
+        "define-data-property": "^1.0.1",
+        "has-property-descriptors": "^1.0.0",
+        "object-keys": "^1.1.1"
       },
       "engines": {
-        "node": ">= 0.8"
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
       }
     },
-    "node_modules/commander": {
-      "version": "2.20.3",
-      "resolved": "https://registry.npmjs.org/commander/-/commander-2.20.3.tgz",
-      "integrity": "sha512-GpVkmM8vF2vQUkj2LvZmD35JxeJOLCwJ9cUkugyk2nuhbv3+mJvpLYYt+0+USMxE+oj+ey/lJEnhZw75x/OMcQ==",
-      "dev": true,
-      "license": "MIT"
-    },
-    "node_modules/component-emitter": {
-      "version": "1.3.1",
-      "resolved": "https://registry.npmjs.org/component-emitter/-/component-emitter-1.3.1.tgz",
-      "integrity": "sha512-T0+barUSQRTUQASh8bx02dl+DhF54GtIDY13Y3m9oWTklKbb3Wv974meRpeZ3lp1JpLVECWWNHC4vaG2XHXouQ==",
+    "node_modules/degenerator": {
+      "version": "5.0.1",
+      "resolved": "https://registry.npmjs.org/degenerator/-/degenerator-5.0.1.tgz",
+      "integrity": "sha512-TllpMR/t0M5sqCXfj85i4XaAzxmS5tVA16dqvdkMwGmzI+dXLXnw3J+3Vdv7VKw+ThlTMboK6i9rnZ6Nntj5CQ==",
       "dev": true,
       "license": "MIT",
-      "funding": {
-        "url": "https://github.com/sponsors/sindresorhus"
+      "dependencies": {
+        "ast-types": "^0.13.4",
+        "escodegen": "^2.1.0",
+        "esprima": "^4.0.1"
+      },
+      "engines": {
+        "node": ">= 14"
       }
     },
-    "node_modules/concat-map": {
-      "version": "0.0.1",
-      "resolved": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz",
-      "integrity": "sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg==",
+    "node_modules/delayed-stream": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz",
+      "integrity": "sha512-ZySD7Nf91aLB0RxL4KGrKHBXl7Eds1DAmEdcoVawXnLD7SDhpNgtuII2aAkg7a7QS41jxPSZ17p4VdGnMHk3MQ==",
       "dev": true,
-      "license": "MIT"
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.4.0"
+      }
     },
-    "node_modules/concat-stream": {
+    "node_modules/depd": {
       "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/concat-stream/-/concat-stream-2.0.0.tgz",
-      "integrity": "sha512-MWufYdFw53ccGjCA+Ol7XJYpAlW6/prSMzuPOTRnJGcGzuhLn4Scrz7qf6o8bROZ514ltazcIFJZevcfbo0x7A==",
-      "engines": [
-        "node >= 6.0"
-      ],
+      "resolved": "https://registry.npmjs.org/depd/-/depd-2.0.0.tgz",
+      "integrity": "sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw==",
       "license": "MIT",
-      "dependencies": {
-        "buffer-from": "^1.0.0",
-        "inherits": "^2.0.3",
-        "readable-stream": "^3.0.2",
-        "typedarray": "^0.0.6"
+      "engines": {
+        "node": ">= 0.8"
       }
     },
-    "node_modules/connect": {
-      "version": "3.6.6",
-      "resolved": "https://registry.npmjs.org/connect/-/connect-3.6.6.tgz",
-      "integrity": "sha512-OO7axMmPpu/2XuX1+2Yrg0ddju31B6xLZMWkJ5rYBu4YRmRVlOjvlY6kw2FJKiAzyxGwnrDUAG4s1Pf0sbBMCQ==",
-      "dev": true,
+    "node_modules/destroy": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/destroy/-/destroy-1.2.0.tgz",
+      "integrity": "sha512-2sJGJTaXIIaR1w4iJSNoN0hnMY7Gpc/n8D4qSCJw8QqFWXf7cuAgnEHxBpweaVcPevC2l3KpjYCx3NypQQgaJg==",
       "license": "MIT",
-      "dependencies": {
-        "debug": "2.6.9",
-        "finalhandler": "1.1.0",
-        "parseurl": "~1.3.2",
-        "utils-merge": "1.0.1"
-      },
       "engines": {
-        "node": ">= 0.10.0"
+        "node": ">= 0.8",
+        "npm": "1.2.8000 || >= 1.4.16"
       }
     },
-    "node_modules/connect-history-api-fallback": {
-      "version": "1.6.0",
-      "resolved": "https://registry.npmjs.org/connect-history-api-fallback/-/connect-history-api-fallback-1.6.0.tgz",
-      "integrity": "sha512-e54B99q/OUoH64zYYRf3HBP5z24G38h5D3qXu23JGRoigpX5Ss4r9ZnDk3g0Z8uQC2x2lPaJ+UlWBc1ZWBWdLg==",
+    "node_modules/detect-newline": {
+      "version": "3.1.0",
+      "resolved": "https://registry.npmjs.org/detect-newline/-/detect-newline-3.1.0.tgz",
+      "integrity": "sha512-TLz+x/vEXm/Y7P7wn1EJFNLxYpUD4TgMosxY6fAVJUnJMbupHBOncxyWUG9OpTaH9EBD7uFI5LfEgmMOc54DsA==",
       "dev": true,
       "license": "MIT",
       "engines": {
-        "node": ">=0.8"
+        "node": ">=8"
       }
     },
-    "node_modules/connect/node_modules/debug": {
-      "version": "2.6.9",
-      "resolved": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
-      "integrity": "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==",
+    "node_modules/detect-node": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/detect-node/-/detect-node-2.1.0.tgz",
+      "integrity": "sha512-T0NIuQpnTvFDATNuHN5roPwSBG83rFsuO+MXXH9/3N1eFbn4wcPjttvjMLEPWJ0RGUYgQE7cGgS3tNxbqCGM7g==",
       "dev": true,
       "license": "MIT",
-      "dependencies": {
-        "ms": "2.0.0"
-      }
+      "optional": true
     },
-    "node_modules/connect/node_modules/encodeurl": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/encodeurl/-/encodeurl-1.0.2.tgz",
-      "integrity": "sha512-TPJXq8JqFaVYm2CWmPvnP2Iyo4ZSM7/QKcSmuMLDObfpH5fi7RUGmd/rTDf+rut/saiDiQEeVTNgAmJEdAOx0w==",
+    "node_modules/devtools-protocol": {
+      "version": "0.0.1495869",
+      "resolved": "https://registry.npmjs.org/devtools-protocol/-/devtools-protocol-0.0.1495869.tgz",
+      "integrity": "sha512-i+bkd9UYFis40RcnkW7XrOprCujXRAHg62IVh/Ah3G8MmNXpCGt1m0dTFhSdx/AVs8XEMbdOGRwdkR1Bcta8AA==",
       "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">= 0.8"
-      }
+      "license": "BSD-3-Clause"
     },
-    "node_modules/connect/node_modules/finalhandler": {
-      "version": "1.1.0",
-      "resolved": "https://registry.npmjs.org/finalhandler/-/finalhandler-1.1.0.tgz",
-      "integrity": "sha512-ejnvM9ZXYzp6PUPUyQBMBf0Co5VX2gr5H2VQe2Ui2jWXNlxv+PYZo8wpAymJNJdLsG1R4p+M4aynF8KuoUEwRw==",
+    "node_modules/dezalgo": {
+      "version": "1.0.4",
+      "resolved": "https://registry.npmjs.org/dezalgo/-/dezalgo-1.0.4.tgz",
+      "integrity": "sha512-rXSP0bf+5n0Qonsb+SVVfNfIsimO4HEtmnIpPHY8Q1UCzKlQrDMfdobr8nJOOsRgWCyMRqeSBQzmWUMq7zvVig==",
       "dev": true,
-      "license": "MIT",
+      "license": "ISC",
       "dependencies": {
-        "debug": "2.6.9",
-        "encodeurl": "~1.0.1",
-        "escape-html": "~1.0.3",
-        "on-finished": "~2.3.0",
-        "parseurl": "~1.3.2",
-        "statuses": "~1.3.1",
-        "unpipe": "~1.0.0"
-      },
-      "engines": {
-        "node": ">= 0.8"
+        "asap": "^2.0.0",
+        "wrappy": "1"
       }
     },
-    "node_modules/connect/node_modules/ms": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
-      "integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==",
+    "node_modules/didyoumean": {
+      "version": "1.2.2",
+      "resolved": "https://registry.npmjs.org/didyoumean/-/didyoumean-1.2.2.tgz",
+      "integrity": "sha512-gxtyfqMg7GKyhQmb056K7M3xszy/myH8w+B4RT+QXBQsvAOdc3XymqDDPHx1BgPgsdAA5SIifona89YtRATDzw==",
       "dev": true,
+      "license": "Apache-2.0"
+    },
+    "node_modules/dijkstrajs": {
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/dijkstrajs/-/dijkstrajs-1.0.3.tgz",
+      "integrity": "sha512-qiSlmBq9+BCdCA/L46dw8Uy93mloxsPSbwnm5yrKn2vMPiy8KyAskTF6zuV/j5BMsmOGZDPs7KjU+mjb670kfA==",
       "license": "MIT"
     },
-    "node_modules/connect/node_modules/on-finished": {
-      "version": "2.3.0",
-      "resolved": "https://registry.npmjs.org/on-finished/-/on-finished-2.3.0.tgz",
-      "integrity": "sha512-ikqdkGAAyf/X/gPhXGvfgAytDZtDbr+bkNUJ0N9h5MI/dmdgCs3l6hoHrcUv41sRKew3jIwrp4qQDXiK99Utww==",
+    "node_modules/dir-compare": {
+      "version": "4.2.0",
+      "resolved": "https://registry.npmjs.org/dir-compare/-/dir-compare-4.2.0.tgz",
+      "integrity": "sha512-2xMCmOoMrdQIPHdsTawECdNPwlVFB9zGcz3kuhmBO6U3oU+UQjsue0i8ayLKpgBcm+hcXPMVSGUN9d+pvJ6+VQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "ee-first": "1.1.1"
-      },
-      "engines": {
-        "node": ">= 0.8"
+        "minimatch": "^3.0.5",
+        "p-limit": "^3.1.0 "
       }
     },
-    "node_modules/connect/node_modules/statuses": {
-      "version": "1.3.1",
-      "resolved": "https://registry.npmjs.org/statuses/-/statuses-1.3.1.tgz",
-      "integrity": "sha512-wuTCPGlJONk/a1kqZ4fQM2+908lC7fa7nPYpTC1EhnvqLX/IICbeP1OZGDtA374trpSq68YubKUMo8oRhN46yg==",
+    "node_modules/dlv": {
+      "version": "1.1.3",
+      "resolved": "https://registry.npmjs.org/dlv/-/dlv-1.1.3.tgz",
+      "integrity": "sha512-+HlytyjlPKnIG8XuRG8WvmBP8xs8P71y+SKKS6ZXWoEgLuePxtDoUEiH7WkdePWrQ5JBpE6aoVqfZfJUQkjXwA==",
       "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">= 0.6"
-      }
+      "license": "MIT"
     },
-    "node_modules/content-disposition": {
-      "version": "0.5.4",
-      "resolved": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.4.tgz",
-      "integrity": "sha512-FveZTNuGw04cxlAiWbzi6zTAL/lhehaWbTtgluJh4/E95DqMwTmha3KZN1aAWA8cFIhHzMZUvLevkw5Rqk+tSQ==",
+    "node_modules/dmg-builder": {
+      "version": "26.18.0",
+      "resolved": "https://registry.npmjs.org/dmg-builder/-/dmg-builder-26.18.0.tgz",
+      "integrity": "sha512-ozCGC54wi2C1RkS2v69y9lQxvoQ1Coh+iT8CmWiyY8y1ZuOKVvuNson2Hd+HEOs9+EZNNsOBbzKgQZ4SNqWd0w==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
-        "safe-buffer": "5.2.1"
-      },
-      "engines": {
-        "node": ">= 0.6"
+        "app-builder-lib": "26.18.0",
+        "builder-util": "26.16.0",
+        "fs-extra": "^10.1.0",
+        "js-yaml": "^4.1.0"
       }
     },
-    "node_modules/content-type": {
-      "version": "1.0.5",
-      "resolved": "https://registry.npmjs.org/content-type/-/content-type-1.0.5.tgz",
-      "integrity": "sha512-nTjqfcBFEipKdXCv4YDQWCfmcLZKm81ldF0pAopTvyrFGVbcR6P/VAAd5G7N+0tTr8QqiU0tFadD6FK4NtJwOA==",
+    "node_modules/dmg-builder/node_modules/fs-extra": {
+      "version": "10.1.0",
+      "resolved": "https://registry.npmjs.org/fs-extra/-/fs-extra-10.1.0.tgz",
+      "integrity": "sha512-oRXApq54ETRj4eMiFzGnHWGy+zo5raudjuxN0b8H7s/RU2oW0Wvsx9O0ACRN/kRq9E8Vu/ReskGB5o3ji+FzHQ==",
+      "dev": true,
       "license": "MIT",
+      "dependencies": {
+        "graceful-fs": "^4.2.0",
+        "jsonfile": "^6.0.1",
+        "universalify": "^2.0.0"
+      },
       "engines": {
-        "node": ">= 0.6"
+        "node": ">=12"
       }
     },
-    "node_modules/convert-source-map": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-2.0.0.tgz",
-      "integrity": "sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg==",
-      "dev": true,
-      "license": "MIT"
-    },
-    "node_modules/cookie": {
-      "version": "0.7.1",
-      "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.7.1.tgz",
-      "integrity": "sha512-6DnInpx7SJ2AK3+CTUE/ZM0vWTUboZCegxhC2xiIydHR9jNuTAASBrfEpHhiGOZw/nX51bHt6YQl8jsGo4y/0w==",
-      "license": "MIT",
+    "node_modules/dotenv": {
+      "version": "17.2.1",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-17.2.1.tgz",
+      "integrity": "sha512-kQhDYKZecqnM0fCnzI5eIv5L4cAe/iRI+HqMbO/hbRdTAeXDG+M9FjipUxNfbARuEg4iHIbhnhs78BCHNbSxEQ==",
+      "license": "BSD-2-Clause",
       "engines": {
-        "node": ">= 0.6"
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://dotenvx.com"
       }
     },
-    "node_modules/cookie-signature": {
-      "version": "1.0.6",
-      "resolved": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.6.tgz",
-      "integrity": "sha512-QADzlaHc8icV8I7vbaJXJwod9HWYp8uCqf1xa4OfNu1T7JVxQIrUgOWtHdNDtPiywmFbiS12VjotIXLrKM3orQ==",
-      "license": "MIT"
-    },
-    "node_modules/cookiejar": {
-      "version": "2.1.4",
-      "resolved": "https://registry.npmjs.org/cookiejar/-/cookiejar-2.1.4.tgz",
-      "integrity": "sha512-LDx6oHrK+PhzLKJU9j5S7/Y3jM/mUHvD/DeI1WQmJn652iPC5Y4TBzC9l+5OMOXlyTTA+SmVUPm0HQUwpD5Jqw==",
-      "dev": true,
-      "license": "MIT"
-    },
-    "node_modules/cors": {
-      "version": "2.8.5",
-      "resolved": "https://registry.npmjs.org/cors/-/cors-2.8.5.tgz",
-      "integrity": "sha512-KIHbLJqu73RGr/hnbrO9uBeixNGuvSQjul/jdFvS/KFSIH1hWVd1ng7zOHx+YrEfInLG7q4n6GHQ9cDtxv/P6g==",
+    "node_modules/dotenv-expand": {
+      "version": "11.0.7",
+      "resolved": "https://registry.npmjs.org/dotenv-expand/-/dotenv-expand-11.0.7.tgz",
+      "integrity": "sha512-zIHwmZPRshsCdpMDyVsqGmgyP0yT8GAgXUnkdAoJisxvf33k7yO6OuoKmcTGuXPWSsm8Oh88nZicRLA9Y0rUeA==",
       "dev": true,
-      "license": "MIT",
+      "license": "BSD-2-Clause",
       "dependencies": {
-        "object-assign": "^4",
-        "vary": "^1"
+        "dotenv": "^16.4.5"
       },
       "engines": {
-        "node": ">= 0.10"
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://dotenvx.com"
       }
     },
-    "node_modules/cosmiconfig": {
-      "version": "9.0.0",
-      "resolved": "https://registry.npmjs.org/cosmiconfig/-/cosmiconfig-9.0.0.tgz",
-      "integrity": "sha512-itvL5h8RETACmOTFc4UfIyB2RfEHi71Ax6E/PivVxq9NseKbOWpeyHEOIbmAw1rs8Ak0VursQNww7lf7YtUwzg==",
+    "node_modules/dotenv-expand/node_modules/dotenv": {
+      "version": "16.6.1",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.6.1.tgz",
+      "integrity": "sha512-uBq4egWHTcTt33a72vpSG0z3HnPuIl6NqYcTrKEg2azoEyl2hpW0zqlxysq2pK9HlDIHyHyakeYaYnSAwd8bow==",
       "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "env-paths": "^2.2.1",
-        "import-fresh": "^3.3.0",
-        "js-yaml": "^4.1.0",
-        "parse-json": "^5.2.0"
-      },
+      "license": "BSD-2-Clause",
       "engines": {
-        "node": ">=14"
+        "node": ">=12"
       },
       "funding": {
-        "url": "https://github.com/sponsors/d-fischer"
-      },
-      "peerDependencies": {
-        "typescript": ">=4.9.5"
-      },
-      "peerDependenciesMeta": {
-        "typescript": {
-          "optional": true
-        }
+        "url": "https://dotenvx.com"
       }
     },
-    "node_modules/cross-spawn": {
-      "version": "7.0.6",
-      "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz",
-      "integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==",
-      "dev": true,
+    "node_modules/dunder-proto": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz",
+      "integrity": "sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==",
       "license": "MIT",
       "dependencies": {
-        "path-key": "^3.1.0",
-        "shebang-command": "^2.0.0",
-        "which": "^2.0.1"
+        "call-bind-apply-helpers": "^1.0.1",
+        "es-errors": "^1.3.0",
+        "gopd": "^1.2.0"
       },
       "engines": {
-        "node": ">= 8"
+        "node": ">= 0.4"
       }
     },
-    "node_modules/data-uri-to-buffer": {
-      "version": "4.0.1",
-      "resolved": "https://registry.npmjs.org/data-uri-to-buffer/-/data-uri-to-buffer-4.0.1.tgz",
-      "integrity": "sha512-0R9ikRb668HB7QDxT1vkpuUBtqc53YyAwMwGeUFKRojY/NWKvdZ+9UYtRfGmhqNbRkTSVpMbmyhXipFFv2cb/A==",
-      "license": "MIT",
-      "engines": {
-        "node": ">= 12"
+    "node_modules/duplexer2": {
+      "version": "0.1.4",
+      "resolved": "https://registry.npmjs.org/duplexer2/-/duplexer2-0.1.4.tgz",
+      "integrity": "sha512-asLFVfWWtJ90ZyOUHMqk7/S2w2guQKxUI2itj3d92ADHhxUSbCMGi1f1cBcJ7xM1To+pE/Khbwo1yuNbMEPKeA==",
+      "dev": true,
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "readable-stream": "^2.0.2"
       }
     },
-    "node_modules/debug": {
-      "version": "3.2.7",
-      "resolved": "https://registry.npmjs.org/debug/-/debug-3.2.7.tgz",
-      "integrity": "sha512-CFjzYYAi4ThfiQvizrFQevTTXHtnCqWfe7x1AhgEscTz6ZbLbfoLRLPugTQyBth6f8ZERVUSyWHFD/7Wu4t1XQ==",
+    "node_modules/duplexer2/node_modules/readable-stream": {
+      "version": "2.3.8",
+      "resolved": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.8.tgz",
+      "integrity": "sha512-8p0AUk4XODgIewSi0l8Epjs+EVnWiK7NoDIEGU0HhE7+ZyY8D1IMY7odu5lRrFXGg71L15KG8QrPmum45RTtdA==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "ms": "^2.1.1"
+        "core-util-is": "~1.0.0",
+        "inherits": "~2.0.3",
+        "isarray": "~1.0.0",
+        "process-nextick-args": "~2.0.0",
+        "safe-buffer": "~5.1.1",
+        "string_decoder": "~1.1.1",
+        "util-deprecate": "~1.0.1"
       }
     },
-    "node_modules/dedent": {
-      "version": "1.7.1",
-      "resolved": "https://registry.npmjs.org/dedent/-/dedent-1.7.1.tgz",
-      "integrity": "sha512-9JmrhGZpOlEgOLdQgSm0zxFaYoQon408V1v49aqTWuXENVlnCuY9JBZcXZiCsZQWDjTm5Qf/nIvAy77mXDAjEg==",
+    "node_modules/duplexer2/node_modules/safe-buffer": {
+      "version": "5.1.2",
+      "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz",
+      "integrity": "sha512-Gd2UZBJDkXlY7GbJxfsE8/nvKkUEU1G38c1siN6QP6a9PT9MmHB8GnpscSmMJSoF8LOIrt8ud/wPtojys4G6+g==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/duplexer2/node_modules/string_decoder": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.1.1.tgz",
+      "integrity": "sha512-n/ShnvDi6FHbbVfviro+WojiFzv+s8MPMHBczVePfUpDJLwoLT0ht1l4YwBCbi8pJAveEEdnkHyPyTP/mzRfwg==",
       "dev": true,
       "license": "MIT",
-      "peerDependencies": {
-        "babel-plugin-macros": "^3.1.0"
-      },
-      "peerDependenciesMeta": {
-        "babel-plugin-macros": {
-          "optional": true
-        }
+      "dependencies": {
+        "safe-buffer": "~5.1.0"
       }
     },
-    "node_modules/deepmerge": {
-      "version": "4.3.1",
-      "resolved": "https://registry.npmjs.org/deepmerge/-/deepmerge-4.3.1.tgz",
-      "integrity": "sha512-3sUqbMEc77XqpdNO7FRyRog+eW3ph+GYCbj+rK+uYyRMuwsVy0rMiVtPn+QJlKFvWP/1PYpapqYn0Me2knFn+A==",
+    "node_modules/eastasianwidth": {
+      "version": "0.2.0",
+      "resolved": "https://registry.npmjs.org/eastasianwidth/-/eastasianwidth-0.2.0.tgz",
+      "integrity": "sha512-I88TYZWc9XiYHRQ4/3c5rjjfgkjhLyW2luGIheGERbNQ6OY7yTybanSpDXZa8y7VUP9YmDcYa+eyq4ca7iLqWA==",
       "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=0.10.0"
+      "license": "MIT"
+    },
+    "node_modules/ecdsa-sig-formatter": {
+      "version": "1.0.11",
+      "resolved": "https://registry.npmjs.org/ecdsa-sig-formatter/-/ecdsa-sig-formatter-1.0.11.tgz",
+      "integrity": "sha512-nagl3RYrbNv6kQkeJIpt6NJZy8twLB/2vtz6yN9Z4vRKHN4/QZJIEbqohALSgwKdnksuY3k5Addp5lg8sVoVcQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "safe-buffer": "^5.0.1"
       }
     },
-    "node_modules/degenerator": {
-      "version": "5.0.1",
-      "resolved": "https://registry.npmjs.org/degenerator/-/degenerator-5.0.1.tgz",
-      "integrity": "sha512-TllpMR/t0M5sqCXfj85i4XaAzxmS5tVA16dqvdkMwGmzI+dXLXnw3J+3Vdv7VKw+ThlTMboK6i9rnZ6Nntj5CQ==",
+    "node_modules/ee-first": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz",
+      "integrity": "sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==",
+      "license": "MIT"
+    },
+    "node_modules/ejs": {
+      "version": "3.1.10",
+      "resolved": "https://registry.npmjs.org/ejs/-/ejs-3.1.10.tgz",
+      "integrity": "sha512-UeJmFfOrAQS8OJWPZ4qtgHyWExa088/MtK5UEyoJGFH67cDEXkZSviOiKRCZ4Xij0zxI3JECgYs3oKx+AizQBA==",
       "dev": true,
-      "license": "MIT",
+      "license": "Apache-2.0",
       "dependencies": {
-        "ast-types": "^0.13.4",
-        "escodegen": "^2.1.0",
-        "esprima": "^4.0.1"
+        "jake": "^10.8.5"
+      },
+      "bin": {
+        "ejs": "bin/cli.js"
       },
       "engines": {
-        "node": ">= 14"
+        "node": ">=0.10.0"
       }
     },
-    "node_modules/delayed-stream": {
-      "version": "1.0.0",
-      "resolved": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz",
-      "integrity": "sha512-ZySD7Nf91aLB0RxL4KGrKHBXl7Eds1DAmEdcoVawXnLD7SDhpNgtuII2aAkg7a7QS41jxPSZ17p4VdGnMHk3MQ==",
+    "node_modules/electron": {
+      "version": "45.0.0",
+      "resolved": "https://registry.npmjs.org/electron/-/electron-45.0.0.tgz",
+      "integrity": "sha512-yjz4uhMBcO6L5X7CWgRMobf2EMJPnb9j4zuf+nu/TU/6E4Sqfx7fn/a2eACo4qngjml/0JnsoZhxYroJLxLd2w==",
       "dev": true,
       "license": "MIT",
+      "dependencies": {
+        "@electron-internal/extract-zip": "^1.0.1",
+        "@electron/get": "^5.0.0",
+        "@types/node": "^24.9.0"
+      },
+      "bin": {
+        "electron": "cli.js",
+        "install-electron": "install.js"
+      },
       "engines": {
-        "node": ">=0.4.0"
+        "node": ">= 22.12.0"
       }
     },
-    "node_modules/depd": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/depd/-/depd-2.0.0.tgz",
-      "integrity": "sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw==",
+    "node_modules/electron-builder": {
+      "version": "26.18.0",
+      "resolved": "https://registry.npmjs.org/electron-builder/-/electron-builder-26.18.0.tgz",
+      "integrity": "sha512-ASgIuQnOq4RuD8jMhS9hI0LS3EMRT1I/M5R6utqifB/BHN80IcCjBdt+DED+NmNPvmBgEtrlExXZitNdA7kXOg==",
+      "dev": true,
       "license": "MIT",
+      "dependencies": {
+        "app-builder-lib": "26.18.0",
+        "builder-util": "26.16.0",
+        "builder-util-runtime": "9.7.0",
+        "chalk": "^4.1.2",
+        "ci-info": "^4.2.0",
+        "dmg-builder": "26.18.0",
+        "fs-extra": "^10.1.0",
+        "lazy-val": "^1.0.5",
+        "simple-update-notifier": "2.0.0",
+        "yargs": "^17.6.2"
+      },
+      "bin": {
+        "electron-builder": "cli.js",
+        "install-app-deps": "install-app-deps.js"
+      },
       "engines": {
-        "node": ">= 0.8"
+        "node": ">=14.0.0"
       }
     },
-    "node_modules/destroy": {
-      "version": "1.2.0",
-      "resolved": "https://registry.npmjs.org/destroy/-/destroy-1.2.0.tgz",
-      "integrity": "sha512-2sJGJTaXIIaR1w4iJSNoN0hnMY7Gpc/n8D4qSCJw8QqFWXf7cuAgnEHxBpweaVcPevC2l3KpjYCx3NypQQgaJg==",
+    "node_modules/electron-builder-squirrel-windows": {
+      "version": "26.18.0",
+      "resolved": "https://registry.npmjs.org/electron-builder-squirrel-windows/-/electron-builder-squirrel-windows-26.18.0.tgz",
+      "integrity": "sha512-a2elgTipboXNIsxqS1HOmHMGp4Pd3LJgIZOdIFTOskBSawvxKyZWYWQ1d7KKA4CtINSchYCYEKzhxRqiKZev9Q==",
+      "dev": true,
       "license": "MIT",
-      "engines": {
-        "node": ">= 0.8",
-        "npm": "1.2.8000 || >= 1.4.16"
+      "peer": true,
+      "dependencies": {
+        "app-builder-lib": "26.18.0",
+        "builder-util": "26.16.0",
+        "electron-winstaller": "5.4.0"
       }
     },
-    "node_modules/detect-newline": {
-      "version": "3.1.0",
-      "resolved": "https://registry.npmjs.org/detect-newline/-/detect-newline-3.1.0.tgz",
-      "integrity": "sha512-TLz+x/vEXm/Y7P7wn1EJFNLxYpUD4TgMosxY6fAVJUnJMbupHBOncxyWUG9OpTaH9EBD7uFI5LfEgmMOc54DsA==",
+    "node_modules/electron-builder/node_modules/fs-extra": {
+      "version": "10.1.0",
+      "resolved": "https://registry.npmjs.org/fs-extra/-/fs-extra-10.1.0.tgz",
+      "integrity": "sha512-oRXApq54ETRj4eMiFzGnHWGy+zo5raudjuxN0b8H7s/RU2oW0Wvsx9O0ACRN/kRq9E8Vu/ReskGB5o3ji+FzHQ==",
       "dev": true,
       "license": "MIT",
+      "dependencies": {
+        "graceful-fs": "^4.2.0",
+        "jsonfile": "^6.0.1",
+        "universalify": "^2.0.0"
+      },
       "engines": {
-        "node": ">=8"
+        "node": ">=12"
       }
     },
-    "node_modules/dev-ip": {
-      "version": "1.0.1",
-      "resolved": "https://registry.npmjs.org/dev-ip/-/dev-ip-1.0.1.tgz",
-      "integrity": "sha512-LmVkry/oDShEgSZPNgqCIp2/TlqtExeGmymru3uCELnfyjY11IzpAproLYs+1X88fXO6DBoYP3ul2Xo2yz2j6A==",
+    "node_modules/electron-builder/node_modules/semver": {
+      "version": "7.8.5",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.8.5.tgz",
+      "integrity": "sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA==",
       "dev": true,
+      "license": "ISC",
       "bin": {
-        "dev-ip": "lib/dev-ip.js"
+        "semver": "bin/semver.js"
       },
       "engines": {
-        "node": ">= 0.8.0"
+        "node": ">=10"
       }
     },
-    "node_modules/devtools-protocol": {
-      "version": "0.0.1495869",
-      "resolved": "https://registry.npmjs.org/devtools-protocol/-/devtools-protocol-0.0.1495869.tgz",
-      "integrity": "sha512-i+bkd9UYFis40RcnkW7XrOprCujXRAHg62IVh/Ah3G8MmNXpCGt1m0dTFhSdx/AVs8XEMbdOGRwdkR1Bcta8AA==",
-      "dev": true,
-      "license": "BSD-3-Clause"
-    },
-    "node_modules/dezalgo": {
-      "version": "1.0.4",
-      "resolved": "https://registry.npmjs.org/dezalgo/-/dezalgo-1.0.4.tgz",
-      "integrity": "sha512-rXSP0bf+5n0Qonsb+SVVfNfIsimO4HEtmnIpPHY8Q1UCzKlQrDMfdobr8nJOOsRgWCyMRqeSBQzmWUMq7zvVig==",
+    "node_modules/electron-builder/node_modules/simple-update-notifier": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/simple-update-notifier/-/simple-update-notifier-2.0.0.tgz",
+      "integrity": "sha512-a2B9Y0KlNXl9u/vsW6sTIu9vGEpfKu2wRV6l1H3XEas/0gUIzGzBoP/IouTcUQbm9JWZLH3COxyn03TYlFax6w==",
       "dev": true,
-      "license": "ISC",
+      "license": "MIT",
       "dependencies": {
-        "asap": "^2.0.0",
-        "wrappy": "1"
+        "semver": "^7.5.3"
+      },
+      "engines": {
+        "node": ">=10"
       }
     },
-    "node_modules/dotenv": {
-      "version": "17.2.1",
-      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-17.2.1.tgz",
-      "integrity": "sha512-kQhDYKZecqnM0fCnzI5eIv5L4cAe/iRI+HqMbO/hbRdTAeXDG+M9FjipUxNfbARuEg4iHIbhnhs78BCHNbSxEQ==",
-      "license": "BSD-2-Clause",
-      "engines": {
-        "node": ">=12"
-      },
-      "funding": {
-        "url": "https://dotenvx.com"
+    "node_modules/electron-publish": {
+      "version": "26.18.0",
+      "resolved": "https://registry.npmjs.org/electron-publish/-/electron-publish-26.18.0.tgz",
+      "integrity": "sha512-MagnqaZSALSWjcdKu5HEVhYUZD/2BDL3q7XzrqWwub6gf/UfD3ItMgmthVDv9w5y9E0gH1C3JWqKaXwf6f4ROg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/fs-extra": "^9.0.11",
+        "aws4": "^1.13.2",
+        "builder-util": "26.16.0",
+        "builder-util-runtime": "9.7.0",
+        "chalk": "^4.1.2",
+        "form-data": "^4.0.5",
+        "fs-extra": "^10.1.0",
+        "lazy-val": "^1.0.5",
+        "mime": "^2.5.2"
       }
     },
-    "node_modules/dunder-proto": {
-      "version": "1.0.1",
-      "resolved": "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz",
-      "integrity": "sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==",
+    "node_modules/electron-publish/node_modules/fs-extra": {
+      "version": "10.1.0",
+      "resolved": "https://registry.npmjs.org/fs-extra/-/fs-extra-10.1.0.tgz",
+      "integrity": "sha512-oRXApq54ETRj4eMiFzGnHWGy+zo5raudjuxN0b8H7s/RU2oW0Wvsx9O0ACRN/kRq9E8Vu/ReskGB5o3ji+FzHQ==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
-        "call-bind-apply-helpers": "^1.0.1",
-        "es-errors": "^1.3.0",
-        "gopd": "^1.2.0"
+        "graceful-fs": "^4.2.0",
+        "jsonfile": "^6.0.1",
+        "universalify": "^2.0.0"
       },
       "engines": {
-        "node": ">= 0.4"
+        "node": ">=12"
       }
     },
-    "node_modules/eastasianwidth": {
-      "version": "0.2.0",
-      "resolved": "https://registry.npmjs.org/eastasianwidth/-/eastasianwidth-0.2.0.tgz",
-      "integrity": "sha512-I88TYZWc9XiYHRQ4/3c5rjjfgkjhLyW2luGIheGERbNQ6OY7yTybanSpDXZa8y7VUP9YmDcYa+eyq4ca7iLqWA==",
+    "node_modules/electron-to-chromium": {
+      "version": "1.5.283",
+      "resolved": "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.5.283.tgz",
+      "integrity": "sha512-3vifjt1HgrGW/h76UEeny+adYApveS9dH2h3p57JYzBSXJIKUJAvtmIytDKjcSCt9xHfrNCFJ7gts6vkhuq++w==",
       "dev": true,
-      "license": "MIT"
+      "license": "ISC"
     },
-    "node_modules/easy-extender": {
-      "version": "2.3.4",
-      "resolved": "https://registry.npmjs.org/easy-extender/-/easy-extender-2.3.4.tgz",
-      "integrity": "sha512-8cAwm6md1YTiPpOvDULYJL4ZS6WfM5/cTeVVh4JsvyYZAoqlRVUpHL9Gr5Fy7HA6xcSZicUia3DeAgO3Us8E+Q==",
+    "node_modules/electron-winstaller": {
+      "version": "5.4.0",
+      "resolved": "https://registry.npmjs.org/electron-winstaller/-/electron-winstaller-5.4.0.tgz",
+      "integrity": "sha512-bO3y10YikuUwUuDUQRM4KfwNkKhnpVO7IPdbsrejwN9/AABJzzTQ4GeHwyzNSrVO+tEH3/Np255a3sVZpZDjvg==",
       "dev": true,
+      "hasInstallScript": true,
+      "license": "MIT",
+      "peer": true,
       "dependencies": {
-        "lodash": "^4.17.10"
+        "@electron/asar": "^3.2.1",
+        "debug": "^4.1.1",
+        "fs-extra": "^7.0.1",
+        "lodash": "^4.17.21",
+        "temp": "^0.9.0"
       },
       "engines": {
-        "node": ">= 4.0.0"
+        "node": ">=8.0.0"
+      },
+      "optionalDependencies": {
+        "@electron/windows-sign": "^1.1.2"
       }
     },
-    "node_modules/eazy-logger": {
-      "version": "4.1.0",
-      "resolved": "https://registry.npmjs.org/eazy-logger/-/eazy-logger-4.1.0.tgz",
-      "integrity": "sha512-+mn7lRm+Zf1UT/YaH8WXtpU6PIV2iOjzP6jgKoiaq/VNrjYKp+OHZGe2znaLgDeFkw8cL9ffuaUm+nNnzcYyGw==",
+    "node_modules/electron-winstaller/node_modules/debug": {
+      "version": "4.4.3",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
+      "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
       "dev": true,
+      "license": "MIT",
+      "peer": true,
       "dependencies": {
-        "chalk": "4.1.2"
+        "ms": "^2.1.3"
       },
       "engines": {
-        "node": ">= 0.8.0"
+        "node": ">=6.0"
+      },
+      "peerDependenciesMeta": {
+        "supports-color": {
+          "optional": true
+        }
       }
     },
-    "node_modules/ecdsa-sig-formatter": {
-      "version": "1.0.11",
-      "resolved": "https://registry.npmjs.org/ecdsa-sig-formatter/-/ecdsa-sig-formatter-1.0.11.tgz",
-      "integrity": "sha512-nagl3RYrbNv6kQkeJIpt6NJZy8twLB/2vtz6yN9Z4vRKHN4/QZJIEbqohALSgwKdnksuY3k5Addp5lg8sVoVcQ==",
-      "license": "Apache-2.0",
+    "node_modules/electron-winstaller/node_modules/fs-extra": {
+      "version": "7.0.1",
+      "resolved": "https://registry.npmjs.org/fs-extra/-/fs-extra-7.0.1.tgz",
+      "integrity": "sha512-YJDaCJZEnBmcbw13fvdAM9AwNOJwOzrE4pqMqBq5nFiEqXUqHwlK4B+3pUw6JNvfSPtX05xFHtYy/1ni01eGCw==",
+      "dev": true,
+      "license": "MIT",
+      "peer": true,
       "dependencies": {
-        "safe-buffer": "^5.0.1"
+        "graceful-fs": "^4.1.2",
+        "jsonfile": "^4.0.0",
+        "universalify": "^0.1.0"
+      },
+      "engines": {
+        "node": ">=6 <7 || >=8"
       }
     },
-    "node_modules/ee-first": {
-      "version": "1.1.1",
-      "resolved": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz",
-      "integrity": "sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==",
-      "license": "MIT"
+    "node_modules/electron-winstaller/node_modules/jsonfile": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/jsonfile/-/jsonfile-4.0.0.tgz",
+      "integrity": "sha512-m6F1R3z8jjlf2imQHS2Qez5sjKWQzbuuhuJ/FKYFRZvPE3PuHcSMVZzfsLhGVOkfd20obL5SWEBew5ShlquNxg==",
+      "dev": true,
+      "license": "MIT",
+      "peer": true,
+      "optionalDependencies": {
+        "graceful-fs": "^4.1.6"
+      }
     },
-    "node_modules/electron-to-chromium": {
-      "version": "1.5.283",
-      "resolved": "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.5.283.tgz",
-      "integrity": "sha512-3vifjt1HgrGW/h76UEeny+adYApveS9dH2h3p57JYzBSXJIKUJAvtmIytDKjcSCt9xHfrNCFJ7gts6vkhuq++w==",
+    "node_modules/electron-winstaller/node_modules/universalify": {
+      "version": "0.1.2",
+      "resolved": "https://registry.npmjs.org/universalify/-/universalify-0.1.2.tgz",
+      "integrity": "sha512-rBJeI5CXAlmy1pV+617WB9J63U6XcazHHF2f2dbJix4XzpUF0RS3Zbj0FGIOCAva5P/d/GBOYaACQ1w+0azUkg==",
       "dev": true,
-      "license": "ISC"
+      "license": "MIT",
+      "peer": true,
+      "engines": {
+        "node": ">= 4.0.0"
+      }
     },
     "node_modules/emittery": {
       "version": "0.13.1",
@@ -3214,7 +4722,6 @@
       "version": "8.0.0",
       "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz",
       "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==",
-      "dev": true,
       "license": "MIT"
     },
     "node_modules/enabled": {
@@ -3242,97 +4749,6 @@
         "once": "^1.4.0"
       }
     },
-    "node_modules/engine.io": {
-      "version": "6.6.4",
-      "resolved": "https://registry.npmjs.org/engine.io/-/engine.io-6.6.4.tgz",
-      "integrity": "sha512-ZCkIjSYNDyGn0R6ewHDtXgns/Zre/NT6Agvq1/WobF7JXgFff4SeDroKiCO3fNJreU9YG429Sc81o4w5ok/W5g==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "@types/cors": "^2.8.12",
-        "@types/node": ">=10.0.0",
-        "accepts": "~1.3.4",
-        "base64id": "2.0.0",
-        "cookie": "~0.7.2",
-        "cors": "~2.8.5",
-        "debug": "~4.3.1",
-        "engine.io-parser": "~5.2.1",
-        "ws": "~8.17.1"
-      },
-      "engines": {
-        "node": ">=10.2.0"
-      }
-    },
-    "node_modules/engine.io-client": {
-      "version": "6.6.3",
-      "resolved": "https://registry.npmjs.org/engine.io-client/-/engine.io-client-6.6.3.tgz",
-      "integrity": "sha512-T0iLjnyNWahNyv/lcjS2y4oE358tVS/SYQNxYXGAJ9/GLgH4VCvOQ/mhTjqU88mLZCQgiG8RIegFHYCdVC+j5w==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "@socket.io/component-emitter": "~3.1.0",
-        "debug": "~4.3.1",
-        "engine.io-parser": "~5.2.1",
-        "ws": "~8.17.1",
-        "xmlhttprequest-ssl": "~2.1.1"
-      }
-    },
-    "node_modules/engine.io-client/node_modules/debug": {
-      "version": "4.3.7",
-      "resolved": "https://registry.npmjs.org/debug/-/debug-4.3.7.tgz",
-      "integrity": "sha512-Er2nc/H7RrMXZBFCEim6TCmMk02Z8vLC2Rbi1KEBggpo0fS6l0S1nnapwmIi3yW/+GOJap1Krg4w0Hg80oCqgQ==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "ms": "^2.1.3"
-      },
-      "engines": {
-        "node": ">=6.0"
-      },
-      "peerDependenciesMeta": {
-        "supports-color": {
-          "optional": true
-        }
-      }
-    },
-    "node_modules/engine.io-parser": {
-      "version": "5.2.3",
-      "resolved": "https://registry.npmjs.org/engine.io-parser/-/engine.io-parser-5.2.3.tgz",
-      "integrity": "sha512-HqD3yTBfnBxIrbnM1DoD6Pcq8NECnh8d4As1Qgh0z5Gg3jRRIqijury0CL3ghu/edArpUYiYqQiDUQBIs4np3Q==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=10.0.0"
-      }
-    },
-    "node_modules/engine.io/node_modules/cookie": {
-      "version": "0.7.2",
-      "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.7.2.tgz",
-      "integrity": "sha512-yki5XnKuf750l50uGTllt6kKILY4nQ1eNIQatoXEByZ5dWgnKqbnqmTrBE5B4N7lrMJKQ2ytWMiTO2o0v6Ew/w==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">= 0.6"
-      }
-    },
-    "node_modules/engine.io/node_modules/debug": {
-      "version": "4.3.7",
-      "resolved": "https://registry.npmjs.org/debug/-/debug-4.3.7.tgz",
-      "integrity": "sha512-Er2nc/H7RrMXZBFCEim6TCmMk02Z8vLC2Rbi1KEBggpo0fS6l0S1nnapwmIi3yW/+GOJap1Krg4w0Hg80oCqgQ==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "ms": "^2.1.3"
-      },
-      "engines": {
-        "node": ">=6.0"
-      },
-      "peerDependenciesMeta": {
-        "supports-color": {
-          "optional": true
-        }
-      }
-    },
     "node_modules/env-paths": {
       "version": "2.2.1",
       "resolved": "https://registry.npmjs.org/env-paths/-/env-paths-2.2.1.tgz",
@@ -3343,6 +4759,13 @@
         "node": ">=6"
       }
     },
+    "node_modules/err-code": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/err-code/-/err-code-2.0.3.tgz",
+      "integrity": "sha512-2bmlRpNKBxT/CRmPOlyISQpNj+qSeYvcym/uT0Jx2bMOlKLtSy1ZmLuVxSEKKyor/N5yhvp/ZiG1oE3DEYMSFA==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/error-ex": {
       "version": "1.3.2",
       "resolved": "https://registry.npmjs.org/error-ex/-/error-ex-1.3.2.tgz",
@@ -3406,6 +4829,14 @@
         "node": ">= 0.4"
       }
     },
+    "node_modules/es6-error": {
+      "version": "4.1.1",
+      "resolved": "https://registry.npmjs.org/es6-error/-/es6-error-4.1.1.tgz",
+      "integrity": "sha512-Um/+FxMr9CISWh0bi5Zv0iOD+4cFh5qLeks1qhAopKVAJw3drgKbKySikp7wGhDL0HPeaja0P5ULZrxLkniUVg==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true
+    },
     "node_modules/escalade": {
       "version": "3.2.0",
       "resolved": "https://registry.npmjs.org/escalade/-/escalade-3.2.0.tgz",
@@ -3497,13 +4928,6 @@
         "node": ">= 0.6"
       }
     },
-    "node_modules/eventemitter3": {
-      "version": "4.0.7",
-      "resolved": "https://registry.npmjs.org/eventemitter3/-/eventemitter3-4.0.7.tgz",
-      "integrity": "sha512-8guHBZCwKnFhYdHr2ysuRWErTwhoN2X8XELRlrRwpmfeY2jjuUN4taQMsULKUVo1K4DvZl+0pgfyoysHxvmvEw==",
-      "dev": true,
-      "license": "MIT"
-    },
     "node_modules/execa": {
       "version": "5.1.1",
       "resolved": "https://registry.npmjs.org/execa/-/execa-5.1.1.tgz",
@@ -3576,6 +5000,13 @@
         "node": "^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0"
       }
     },
+    "node_modules/exponential-backoff": {
+      "version": "3.1.3",
+      "resolved": "https://registry.npmjs.org/exponential-backoff/-/exponential-backoff-3.1.3.tgz",
+      "integrity": "sha512-ZgEeZXj30q+I0EN+CbSSpIyPaJ5HVQD18Z1m+u1FXbAeT94mr1zw50q4q6jiiC447Nl/YTcIYSAftiGqetwXCA==",
+      "dev": true,
+      "license": "Apache-2.0"
+    },
     "node_modules/express": {
       "version": "4.21.2",
       "resolved": "https://registry.npmjs.org/express/-/express-4.21.2.tgz",
@@ -3691,6 +5122,13 @@
         }
       }
     },
+    "node_modules/fast-deep-equal": {
+      "version": "3.1.3",
+      "resolved": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz",
+      "integrity": "sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/fast-fifo": {
       "version": "1.3.2",
       "resolved": "https://registry.npmjs.org/fast-fifo/-/fast-fifo-1.3.2.tgz",
@@ -3698,6 +5136,23 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/fast-glob": {
+      "version": "3.3.3",
+      "resolved": "https://registry.npmjs.org/fast-glob/-/fast-glob-3.3.3.tgz",
+      "integrity": "sha512-7MptL8U0cqcFdzIzwOTHoilX9x5BrNqye7Z/LuC7kCMRio1EMSyqRK3BEAUD7sXRq4iT4AzTVuZdhgQ2TCvYLg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@nodelib/fs.stat": "^2.0.2",
+        "@nodelib/fs.walk": "^1.2.3",
+        "glob-parent": "^5.1.2",
+        "merge2": "^1.3.0",
+        "micromatch": "^4.0.8"
+      },
+      "engines": {
+        "node": ">=8.6.0"
+      }
+    },
     "node_modules/fast-json-stable-stringify": {
       "version": "2.1.0",
       "resolved": "https://registry.npmjs.org/fast-json-stable-stringify/-/fast-json-stable-stringify-2.1.0.tgz",
@@ -3712,6 +5167,33 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/fast-uri": {
+      "version": "3.1.9",
+      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.9.tgz",
+      "integrity": "sha512-hS/0Wt3Ya043oKXs0sIxrMpKQITXhMLIrVAKKXi4gozGC9v7YRWVnXIZzjNPTO02M9BdxLCWqK1yRXgNziVyJQ==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/fastify"
+        },
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/fastify"
+        }
+      ],
+      "license": "BSD-3-Clause"
+    },
+    "node_modules/fastq": {
+      "version": "1.20.3",
+      "resolved": "https://registry.npmjs.org/fastq/-/fastq-1.20.3.tgz",
+      "integrity": "sha512-XKv5nnLs6nLF71NgiKJLIZFLkPyIEuOselLG7ujZnGrRfQK8HpvY+WqKhAJUAdLomwVHErVS4LfxFlPq0/FTAw==",
+      "dev": true,
+      "license": "ISC",
+      "dependencies": {
+        "reusify": "^1.0.4"
+      }
+    },
     "node_modules/fb-watchman": {
       "version": "2.0.2",
       "resolved": "https://registry.npmjs.org/fb-watchman/-/fb-watchman-2.0.2.tgz",
@@ -3767,7 +5249,40 @@
       "integrity": "sha512-u+dBid4PvZw17PmDeRcNOtCP9CCK/9lRN2w+r1xIS7yOL9JFrIBKTvrYsxT4P0pGtThYTn++QS5ChHaUov3+zQ==",
       "license": "MIT",
       "dependencies": {
-        "moment": "^2.29.1"
+        "moment": "^2.29.1"
+      }
+    },
+    "node_modules/filelist": {
+      "version": "1.0.6",
+      "resolved": "https://registry.npmjs.org/filelist/-/filelist-1.0.6.tgz",
+      "integrity": "sha512-5giy2PkLYY1cP39p17Ech+2xlpTRL9HLspOfEgm0L6CwBXBTgsK5ou0JtzYuepxkaQ/tvhCFIJ5uXo0OrM2DxA==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "dependencies": {
+        "minimatch": "^5.0.1"
+      }
+    },
+    "node_modules/filelist/node_modules/brace-expansion": {
+      "version": "2.1.7",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.7.tgz",
+      "integrity": "sha512-uZbew1NqdmPDTMJ8ah1y+b+9QEJrfkXFk3RcTQw3X0jW/xRUvFKsg1CfQdSYGdTbXZWExtU3J3ccxtnfw1Fi0g==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "balanced-match": "^1.0.0"
+      }
+    },
+    "node_modules/filelist/node_modules/minimatch": {
+      "version": "5.1.9",
+      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-5.1.9.tgz",
+      "integrity": "sha512-7o1wEA2RyMP7Iu7GNba9vc0RWWGACJOCZBJX2GJWip0ikV+wcOsgVuY9uE8CPiyQhkGFSlhuSkZPavN7u1c2Fw==",
+      "dev": true,
+      "license": "ISC",
+      "dependencies": {
+        "brace-expansion": "^2.0.1"
+      },
+      "engines": {
+        "node": ">=10"
       }
     },
     "node_modules/fill-range": {
@@ -3820,7 +5335,6 @@
       "version": "4.1.0",
       "resolved": "https://registry.npmjs.org/find-up/-/find-up-4.1.0.tgz",
       "integrity": "sha512-PpOwAdQ/YlXQ2vj8a3h8IipDuYRi3wceVQQGYWxNINccq40Anw7BlsEXCMbt1Zt+OLA6Fq9suIpIWD0OsnISlw==",
-      "dev": true,
       "license": "MIT",
       "dependencies": {
         "locate-path": "^5.0.0",
@@ -3836,27 +5350,6 @@
       "integrity": "sha512-GRnmB5gPyJpAhTQdSZTSp9uaPSvl09KoYcMQtsB9rQoOmzs9dH6ffeccH+Z+cv6P68Hu5bC6JjRh4Ah/mHSNRw==",
       "license": "MIT"
     },
-    "node_modules/follow-redirects": {
-      "version": "1.15.11",
-      "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.11.tgz",
-      "integrity": "sha512-deG2P0JfjrTxl50XGCDyfI97ZGVCxIpfKYmfyrQ54n5FO/0gfIES8C/Psl6kWVDolizcaaxZJnTS0QSMxvnsBQ==",
-      "dev": true,
-      "funding": [
-        {
-          "type": "individual",
-          "url": "https://github.com/sponsors/RubenVerborgh"
-        }
-      ],
-      "license": "MIT",
-      "engines": {
-        "node": ">=4.0"
-      },
-      "peerDependenciesMeta": {
-        "debug": {
-          "optional": true
-        }
-      }
-    },
     "node_modules/foreground-child": {
       "version": "3.3.1",
       "resolved": "https://registry.npmjs.org/foreground-child/-/foreground-child-3.3.1.tgz",
@@ -3998,7 +5491,6 @@
       "version": "2.0.5",
       "resolved": "https://registry.npmjs.org/get-caller-file/-/get-caller-file-2.0.5.tgz",
       "integrity": "sha512-DyFP3BM/3YHTQOCUL/w0OZHR0lpKeGrxotcHWcqNEdnltqFwXVfhEBQ94eIo34AfQpo0rGki4cyIiftY06h2Fg==",
-      "dev": true,
       "license": "ISC",
       "engines": {
         "node": "6.* || 8.* || >= 10.*"
@@ -4170,6 +5662,57 @@
         "url": "https://github.com/sponsors/isaacs"
       }
     },
+    "node_modules/global-agent": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/global-agent/-/global-agent-3.0.0.tgz",
+      "integrity": "sha512-PT6XReJ+D07JvGoxQMkT6qji/jVNfX/h364XHZOWeRzy64sSFr+xJ5OX7LI3b4MPQzdL4H8Y8M0xzPpsVMwA8Q==",
+      "dev": true,
+      "license": "BSD-3-Clause",
+      "optional": true,
+      "dependencies": {
+        "boolean": "^3.0.1",
+        "es6-error": "^4.1.1",
+        "matcher": "^3.0.0",
+        "roarr": "^2.15.3",
+        "semver": "^7.3.2",
+        "serialize-error": "^7.0.1"
+      },
+      "engines": {
+        "node": ">=10.0"
+      }
+    },
+    "node_modules/global-agent/node_modules/semver": {
+      "version": "7.8.5",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.8.5.tgz",
+      "integrity": "sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA==",
+      "dev": true,
+      "license": "ISC",
+      "optional": true,
+      "bin": {
+        "semver": "bin/semver.js"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/globalthis": {
+      "version": "1.0.4",
+      "resolved": "https://registry.npmjs.org/globalthis/-/globalthis-1.0.4.tgz",
+      "integrity": "sha512-DpLKbNU4WylpxJykQujfCcwYWiV/Jhm50Goo0wrVILAv5jOr9d+H+UR3PhSCD2rCCEIg0uc+G+muBTwD54JhDQ==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "define-properties": "^1.2.1",
+        "gopd": "^1.0.1"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
     "node_modules/gopd": {
       "version": "1.2.0",
       "resolved": "https://registry.npmjs.org/gopd/-/gopd-1.2.0.tgz",
@@ -4182,6 +5725,32 @@
         "url": "https://github.com/sponsors/ljharb"
       }
     },
+    "node_modules/got": {
+      "version": "11.8.6",
+      "resolved": "https://registry.npmjs.org/got/-/got-11.8.6.tgz",
+      "integrity": "sha512-6tfZ91bOr7bOXnK7PRDCGBLa1H4U080YHNaAQ2KsMGlLEzRbk44nsZF2E1IeRc3vtJHPVbKCYgdFbaGO2ljd8g==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@sindresorhus/is": "^4.0.0",
+        "@szmarczak/http-timer": "^4.0.5",
+        "@types/cacheable-request": "^6.0.1",
+        "@types/responselike": "^1.0.0",
+        "cacheable-lookup": "^5.0.3",
+        "cacheable-request": "^7.0.2",
+        "decompress-response": "^6.0.0",
+        "http2-wrapper": "^1.0.0-beta.5.2",
+        "lowercase-keys": "^2.0.0",
+        "p-cancelable": "^2.0.0",
+        "responselike": "^2.0.0"
+      },
+      "engines": {
+        "node": ">=10.19.0"
+      },
+      "funding": {
+        "url": "https://github.com/sindresorhus/got?sponsor=1"
+      }
+    },
     "node_modules/graceful-fs": {
       "version": "4.2.11",
       "resolved": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.11.tgz",
@@ -4198,6 +5767,20 @@
         "node": ">=4"
       }
     },
+    "node_modules/has-property-descriptors": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/has-property-descriptors/-/has-property-descriptors-1.0.2.tgz",
+      "integrity": "sha512-55JNKuIW+vq4Ke1BjOTjM2YctQIvCT7GFzHwmfZPGo5wnrgkid0YQtnAleFSqumZm4az3n2BS+erby5ipJdgrg==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "es-define-property": "^1.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
     "node_modules/has-symbols": {
       "version": "1.1.0",
       "resolved": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.1.0.tgz",
@@ -4227,9 +5810,9 @@
       }
     },
     "node_modules/hasown": {
-      "version": "2.0.2",
-      "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.2.tgz",
-      "integrity": "sha512-0hJU9SCPvmMzIBdZFqNPXWa6dqh7WdH0cII9y+CyS8rG3nL48Bclra9HmKhVVUHyPWNH5Y7xDwAB7bfgSjkUMQ==",
+      "version": "2.0.4",
+      "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.4.tgz",
+      "integrity": "sha512-T2UbfbBEF32wiepXIsMlTW9+dDYC6wMh/t/vYA4tuOMKqWz/n3vr1NFSxQiyP+zk2mXsoMA/i/7qV6LKut1t1A==",
       "license": "MIT",
       "dependencies": {
         "function-bind": "^1.1.2"
@@ -4238,6 +5821,39 @@
         "node": ">= 0.4"
       }
     },
+    "node_modules/hosted-git-info": {
+      "version": "4.1.0",
+      "resolved": "https://registry.npmjs.org/hosted-git-info/-/hosted-git-info-4.1.0.tgz",
+      "integrity": "sha512-kyCuEOWjJqZuDbRHzL8V93NzQhwIB71oFWSyzVo+KPZI+pnQPPxucdkrOZvkLRnrf5URsQM+IJ09Dw29cRALIA==",
+      "dev": true,
+      "license": "ISC",
+      "dependencies": {
+        "lru-cache": "^6.0.0"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/hosted-git-info/node_modules/lru-cache": {
+      "version": "6.0.0",
+      "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz",
+      "integrity": "sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==",
+      "dev": true,
+      "license": "ISC",
+      "dependencies": {
+        "yallist": "^4.0.0"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/hosted-git-info/node_modules/yallist": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz",
+      "integrity": "sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==",
+      "dev": true,
+      "license": "ISC"
+    },
     "node_modules/html-escaper": {
       "version": "2.0.2",
       "resolved": "https://registry.npmjs.org/html-escaper/-/html-escaper-2.0.2.tgz",
@@ -4245,6 +5861,13 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/http-cache-semantics": {
+      "version": "4.3.0",
+      "resolved": "https://registry.npmjs.org/http-cache-semantics/-/http-cache-semantics-4.3.0.tgz",
+      "integrity": "sha512-M5t5LlJpS1UHMjvwRQVdFHvPISGeLAxNcrWuJkeGh0KxsqCHZ1O3NXZU/8x7cD0BDcGW8kapxMKTvwlqrNkHkA==",
+      "dev": true,
+      "license": "BSD-2-Clause"
+    },
     "node_modules/http-errors": {
       "version": "2.0.0",
       "resolved": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.0.tgz",
@@ -4261,21 +5884,6 @@
         "node": ">= 0.8"
       }
     },
-    "node_modules/http-proxy": {
-      "version": "1.18.1",
-      "resolved": "https://registry.npmjs.org/http-proxy/-/http-proxy-1.18.1.tgz",
-      "integrity": "sha512-7mz/721AbnJwIVbnaSv1Cz3Am0ZLT/UBwkC92VlxhXv/k/BBQfM2fXElQNC27BVGr0uwUpplYPQM9LnaBMR5NQ==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "eventemitter3": "^4.0.0",
-        "follow-redirects": "^1.0.0",
-        "requires-port": "^1.0.0"
-      },
-      "engines": {
-        "node": ">=8.0.0"
-      }
-    },
     "node_modules/http-proxy-agent": {
       "version": "7.0.2",
       "resolved": "https://registry.npmjs.org/http-proxy-agent/-/http-proxy-agent-7.0.2.tgz",
@@ -4308,6 +5916,20 @@
         }
       }
     },
+    "node_modules/http2-wrapper": {
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/http2-wrapper/-/http2-wrapper-1.0.3.tgz",
+      "integrity": "sha512-V+23sDMr12Wnz7iTcDeJr3O6AIxlnvT/bmaAAAP/Xda35C90p9599p0F1eHR/N1KILWSoWVAiOMFjBBXaXSMxg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "quick-lru": "^5.1.1",
+        "resolve-alpn": "^1.0.0"
+      },
+      "engines": {
+        "node": ">=10.19.0"
+      }
+    },
     "node_modules/https-proxy-agent": {
       "version": "7.0.6",
       "resolved": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-7.0.6.tgz",
@@ -4369,16 +5991,6 @@
       "dev": true,
       "license": "ISC"
     },
-    "node_modules/immutable": {
-      "version": "3.8.2",
-      "resolved": "https://registry.npmjs.org/immutable/-/immutable-3.8.2.tgz",
-      "integrity": "sha512-15gZoQ38eYjEjxkorfbcgBKBL6R7T459OuK+CpcWt7O3KF4uPCx2tD0uFETlUDIyo+1789crbMhTvQBSR5yBMg==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=0.10.0"
-      }
-    },
     "node_modules/import-fresh": {
       "version": "3.3.1",
       "resolved": "https://registry.npmjs.org/import-fresh/-/import-fresh-3.3.1.tgz",
@@ -4482,6 +6094,22 @@
         "node": ">=8"
       }
     },
+    "node_modules/is-core-module": {
+      "version": "2.17.0",
+      "resolved": "https://registry.npmjs.org/is-core-module/-/is-core-module-2.17.0.tgz",
+      "integrity": "sha512-J/vG0zBCbIKOQFfufSwyXdMrsohyJIUNkrnmo6WZGzoM7tr/lsbfW5b2BvisL6zsyMzK9UxV9L6c7AoFbyXHOA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "hasown": "^2.0.4"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
     "node_modules/is-extglob": {
       "version": "2.1.1",
       "resolved": "https://registry.npmjs.org/is-extglob/-/is-extglob-2.1.1.tgz",
@@ -4496,7 +6124,6 @@
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz",
       "integrity": "sha512-zymm5+u+sCsSWyD9qNaejV3DFvhCKclKdizYaJUuHA83RLjb7nSuGnddCHGv0hk+KY7BMAlsWeK4Ueg6EV6XQg==",
-      "dev": true,
       "license": "MIT",
       "engines": {
         "node": ">=8"
@@ -4535,16 +6162,6 @@
         "node": ">=0.12.0"
       }
     },
-    "node_modules/is-number-like": {
-      "version": "1.0.8",
-      "resolved": "https://registry.npmjs.org/is-number-like/-/is-number-like-1.0.8.tgz",
-      "integrity": "sha512-6rZi3ezCyFcn5L71ywzz2bS5b2Igl1En3eTlZlvKjpz1n3IZLAYMbKYAIQgFmEu0GENg92ziU/faEOA/aixjbA==",
-      "dev": true,
-      "license": "ISC",
-      "dependencies": {
-        "lodash.isfinite": "^3.3.2"
-      }
-    },
     "node_modules/is-stream": {
       "version": "2.0.1",
       "resolved": "https://registry.npmjs.org/is-stream/-/is-stream-2.0.1.tgz",
@@ -4557,14 +6174,24 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
-    "node_modules/is-wsl": {
-      "version": "1.1.0",
-      "resolved": "https://registry.npmjs.org/is-wsl/-/is-wsl-1.1.0.tgz",
-      "integrity": "sha512-gfygJYZ2gLTDlmbWMI0CE2MwnFzSN/2SZfkMlItC4K/JBlsWVDB0bO6XhqcY13YXE7iMcAJnzTCJjPiTeJJ0Mw==",
+    "node_modules/isarray": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz",
+      "integrity": "sha512-VLghIWNM6ELQzo7zwmcg0NmTVyWKYjvIeM83yjp0wRDTmUnrM678fQbcKBo6n2CJEF0szoG//ytg+TKla89ALQ==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/isbinaryfile": {
+      "version": "5.0.7",
+      "resolved": "https://registry.npmjs.org/isbinaryfile/-/isbinaryfile-5.0.7.tgz",
+      "integrity": "sha512-gnWD14Jh3FzS3CPhF0AxNOJ8CxqeblPTADzI38r0wt8ZyQl5edpy75myt08EG2oKvpyiqSqsx+Wkz9vtkbTqYQ==",
       "dev": true,
       "license": "MIT",
       "engines": {
-        "node": ">=4"
+        "node": ">= 18.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/gjtorikian/"
       }
     },
     "node_modules/isexe": {
@@ -4715,6 +6342,24 @@
         "@pkgjs/parseargs": "^0.11.0"
       }
     },
+    "node_modules/jake": {
+      "version": "10.9.4",
+      "resolved": "https://registry.npmjs.org/jake/-/jake-10.9.4.tgz",
+      "integrity": "sha512-wpHYzhxiVQL+IV05BLE2Xn34zW1S223hvjtqk0+gsPrwd/8JNLXJgZZM/iPFsYc1xyphF+6M6EvdE5E9MBGkDA==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "dependencies": {
+        "async": "^3.2.6",
+        "filelist": "^1.0.4",
+        "picocolors": "^1.1.1"
+      },
+      "bin": {
+        "jake": "bin/cli.js"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
     "node_modules/jest": {
       "version": "30.2.0",
       "resolved": "https://registry.npmjs.org/jest/-/jest-30.2.0.tgz",
@@ -5331,6 +6976,16 @@
         "url": "https://github.com/chalk/supports-color?sponsor=1"
       }
     },
+    "node_modules/jiti": {
+      "version": "1.21.7",
+      "resolved": "https://registry.npmjs.org/jiti/-/jiti-1.21.7.tgz",
+      "integrity": "sha512-/imKNG4EbWNrVjoNC/1H5/9GFy+tqjGBHCaSsN+P2RnPqjsLmv6UD3Ej+Kj8nBWaRAwyk7kK5ZUc+OEatnTR3A==",
+      "dev": true,
+      "license": "MIT",
+      "bin": {
+        "jiti": "bin/jiti.js"
+      }
+    },
     "node_modules/js-yaml": {
       "version": "4.1.0",
       "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz",
@@ -5357,6 +7012,13 @@
         "node": ">=6"
       }
     },
+    "node_modules/json-buffer": {
+      "version": "3.0.1",
+      "resolved": "https://registry.npmjs.org/json-buffer/-/json-buffer-3.0.1.tgz",
+      "integrity": "sha512-4bV5BfR2mqfQTJm+V5tPPdf+ZpuhiIvTuAB5g8kcrXOZpTT/QwwVRWBywX1ozr6lEuPdbHxwaJlm9G6mI2sfSQ==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/json-parse-even-better-errors": {
       "version": "2.3.1",
       "resolved": "https://registry.npmjs.org/json-parse-even-better-errors/-/json-parse-even-better-errors-2.3.1.tgz",
@@ -5364,6 +7026,21 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/json-schema-traverse": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz",
+      "integrity": "sha512-NM8/P9n3XjXhIZn1lLhkFaACTOURQXjWhV4BA/RnOv8xvgqtqpAX9IO4mRQxSx1Rlo4tqzeqb0sOlruaOy3dug==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/json-stringify-safe": {
+      "version": "5.0.1",
+      "resolved": "https://registry.npmjs.org/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz",
+      "integrity": "sha512-ZClg6AaYvamvYEE82d3Iyd3vSSIjQ+odgjaTzRuO3s7toCdFKczob2i0zCh7JE8kWn17yvAWhUVxvqGwUalsRA==",
+      "dev": true,
+      "license": "ISC",
+      "optional": true
+    },
     "node_modules/json5": {
       "version": "2.2.3",
       "resolved": "https://registry.npmjs.org/json5/-/json5-2.2.3.tgz",
@@ -5444,12 +7121,29 @@
         "safe-buffer": "^5.0.1"
       }
     },
+    "node_modules/keyv": {
+      "version": "4.5.4",
+      "resolved": "https://registry.npmjs.org/keyv/-/keyv-4.5.4.tgz",
+      "integrity": "sha512-oxVHkHR/EJf2CNXnWxRLW6mg7JyCCUcG0DtEGmL2ctUo1PNTin1PUil+r/+4r5MpVgC/fn1kjsx7mjSujKqIpw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "json-buffer": "3.0.1"
+      }
+    },
     "node_modules/kuler": {
       "version": "2.0.0",
       "resolved": "https://registry.npmjs.org/kuler/-/kuler-2.0.0.tgz",
       "integrity": "sha512-Xq9nH7KlWZmXAtodXDDRE7vs6DU1gTU8zYDHDiWLSip45Egwq3plLHzPn27NgvzL2r1LMPC1vdqh98sQxtqj4A==",
       "license": "MIT"
     },
+    "node_modules/lazy-val": {
+      "version": "1.0.5",
+      "resolved": "https://registry.npmjs.org/lazy-val/-/lazy-val-1.0.5.tgz",
+      "integrity": "sha512-0/BnGCCfyUMkBpeDgWihanIAF9JmZhHBgUhEqzvf+adhNGLoP6TaiI5oF8oyb3I45P+PcnrqihSf01M0l0G5+Q==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/leven": {
       "version": "3.1.0",
       "resolved": "https://registry.npmjs.org/leven/-/leven-3.1.0.tgz",
@@ -5460,11 +7154,18 @@
         "node": ">=6"
       }
     },
-    "node_modules/limiter": {
-      "version": "1.1.5",
-      "resolved": "https://registry.npmjs.org/limiter/-/limiter-1.1.5.tgz",
-      "integrity": "sha512-FWWMIEOxz3GwUI4Ts/IvgVy6LPvoMPgjMdQ185nN6psJyBJ4yOpzqm695/h5umdLJg2vW3GR5iG11MAkR2AzJA==",
-      "dev": true
+    "node_modules/lilconfig": {
+      "version": "3.1.4",
+      "resolved": "https://registry.npmjs.org/lilconfig/-/lilconfig-3.1.4.tgz",
+      "integrity": "sha512-zJZyBmQhArDRefuWTypZxwDpFDIYmrj8ypSBvwGD5P13Y95s6DjzKgu4DVdGbeQa5PDEsAOCAPNk4X+QOR006w==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=14"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/antonk52"
+      }
     },
     "node_modules/lines-and-columns": {
       "version": "1.2.4",
@@ -5477,7 +7178,6 @@
       "version": "5.0.0",
       "resolved": "https://registry.npmjs.org/locate-path/-/locate-path-5.0.0.tgz",
       "integrity": "sha512-t7hw9pI+WvuwNJXwk5zVHpyhIqzg2qTlklJOf0mVxGSbe3Fp2VieZcduNYjaLDoy6p9uGpQEGWG87WpMKlNq8g==",
-      "dev": true,
       "license": "MIT",
       "dependencies": {
         "p-locate": "^4.1.0"
@@ -5505,13 +7205,6 @@
       "integrity": "sha512-Bz5mupy2SVbPHURB98VAcw+aHh4vRV5IPNhILUCsOzRmsTmSQ17jIuqopAentWoehktxGd9e/hbIXq980/1QJg==",
       "license": "MIT"
     },
-    "node_modules/lodash.isfinite": {
-      "version": "3.3.2",
-      "resolved": "https://registry.npmjs.org/lodash.isfinite/-/lodash.isfinite-3.3.2.tgz",
-      "integrity": "sha512-7FGG40uhC8Mm633uKW1r58aElFlBlxCrg9JfSi3P6aYiWmfiWF0PgMd86ZUsxE5GwWPdHoS2+48bwTh2VPkIQA==",
-      "dev": true,
-      "license": "MIT"
-    },
     "node_modules/lodash.isinteger": {
       "version": "4.0.4",
       "resolved": "https://registry.npmjs.org/lodash.isinteger/-/lodash.isinteger-4.0.4.tgz",
@@ -5559,6 +7252,16 @@
         "node": ">= 12.0.0"
       }
     },
+    "node_modules/lowercase-keys": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-2.0.0.tgz",
+      "integrity": "sha512-tqNXrS78oMOE73NMxK4EMLQsQowWf8jKooH9g7xPavRT706R6bkQJ6DY2Te7QukaZsulxa30wQ7bk0pm4XiHmA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=8"
+      }
+    },
     "node_modules/lru-cache": {
       "version": "7.18.3",
       "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-7.18.3.tgz",
@@ -5608,6 +7311,34 @@
         "tmpl": "1.0.5"
       }
     },
+    "node_modules/matcher": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/matcher/-/matcher-3.0.0.tgz",
+      "integrity": "sha512-OkeDaAZ/bQCxeFAozM55PKcKU0yJMPGifLwV4Qgjitu+5MoAfSQN4lsLJeXZ1b8w0x+/Emda6MZgXS1jvsapng==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "escape-string-regexp": "^4.0.0"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/matcher/node_modules/escape-string-regexp": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz",
+      "integrity": "sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "engines": {
+        "node": ">=10"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "node_modules/math-intrinsics": {
       "version": "1.1.0",
       "resolved": "https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz",
@@ -5642,6 +7373,16 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/merge2": {
+      "version": "1.4.1",
+      "resolved": "https://registry.npmjs.org/merge2/-/merge2-1.4.1.tgz",
+      "integrity": "sha512-8q7VEgMJW4J8tcfVPy8g09NcQwZdbwFEqhe/WZkoIzjn/3TGDwtOCYtXGxA3O8tPzpczCCDgv+P2P5y00ZJOOg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">= 8"
+      }
+    },
     "node_modules/methods": {
       "version": "1.1.2",
       "resolved": "https://registry.npmjs.org/methods/-/methods-1.1.2.tgz",
@@ -5709,6 +7450,26 @@
         "node": ">=6"
       }
     },
+    "node_modules/mimic-response": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/mimic-response/-/mimic-response-1.0.1.tgz",
+      "integrity": "sha512-j5EctnkH7amfV/q5Hgmoal1g2QHFJRraOtmx0JpIqkxhBhI/lJSl1nMpQ45hVarwNETOoWEimndZ4QK0RHxuxQ==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=4"
+      }
+    },
+    "node_modules/mini-svg-data-uri": {
+      "version": "1.4.4",
+      "resolved": "https://registry.npmjs.org/mini-svg-data-uri/-/mini-svg-data-uri-1.4.4.tgz",
+      "integrity": "sha512-r9deDe9p5FJUPZAk3A59wGH7Ii9YrjjWw0jmw/liSbHl2CHiyXj6FcDXDu2K3TjVAXqiJdaw3xxwlZZr9E6nHg==",
+      "dev": true,
+      "license": "MIT",
+      "bin": {
+        "mini-svg-data-uri": "cli.js"
+      }
+    },
     "node_modules/minimatch": {
       "version": "3.1.2",
       "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz",
@@ -5741,12 +7502,18 @@
         "node": ">=16 || 14 >=14.17"
       }
     },
-    "node_modules/mitt": {
-      "version": "1.2.0",
-      "resolved": "https://registry.npmjs.org/mitt/-/mitt-1.2.0.tgz",
-      "integrity": "sha512-r6lj77KlwqLhIUku9UWYes7KJtsczvolZkzp8hbaDPPaE24OmWl5s539Mytlj22siEQKosZ26qCBgda2PKwoJw==",
+    "node_modules/minizlib": {
+      "version": "3.1.0",
+      "resolved": "https://registry.npmjs.org/minizlib/-/minizlib-3.1.0.tgz",
+      "integrity": "sha512-KZxYo1BUkWD2TVFLr0MQoM8vUUigWD3LlD83a/75BqC+4qE0Hb1Vo5v1FgcfaNXvfXzr+5EhQ6ing/CaBijTlw==",
       "dev": true,
-      "license": "MIT"
+      "license": "MIT",
+      "dependencies": {
+        "minipass": "^7.1.2"
+      },
+      "engines": {
+        "node": ">= 18"
+      }
     },
     "node_modules/mkdirp": {
       "version": "0.5.6",
@@ -5793,6 +7560,37 @@
         "node": ">= 10.16.0"
       }
     },
+    "node_modules/mz": {
+      "version": "2.7.0",
+      "resolved": "https://registry.npmjs.org/mz/-/mz-2.7.0.tgz",
+      "integrity": "sha512-z81GNO7nnYMEhrGh9LeymoE4+Yr0Wn5McHIZMK5cfQCl+NDX08sCZgUc9/6MHni9IWuFLm1Z3HTCXu2z9fN62Q==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "any-promise": "^1.0.0",
+        "object-assign": "^4.0.1",
+        "thenify-all": "^1.0.0"
+      }
+    },
+    "node_modules/nanoid": {
+      "version": "3.3.20",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.20.tgz",
+      "integrity": "sha512-uKdg2G3GNCKQn9byYOpxbGqrT2fGO5KRt5J/8b3pok8rT6qxGWF6hxMyJiEYtAf+FVyYuD9hRaDqX5uPFYJ4ZQ==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "license": "MIT",
+      "bin": {
+        "nanoid": "bin/nanoid.cjs"
+      },
+      "engines": {
+        "node": "^10 || ^12 || ^13.7 || ^14 || >=15.0.1"
+      }
+    },
     "node_modules/napi-postinstall": {
       "version": "0.3.4",
       "resolved": "https://registry.npmjs.org/napi-postinstall/-/napi-postinstall-0.3.4.tgz",
@@ -5835,6 +7633,55 @@
         "node": ">= 0.4.0"
       }
     },
+    "node_modules/node-abi": {
+      "version": "4.38.0",
+      "resolved": "https://registry.npmjs.org/node-abi/-/node-abi-4.38.0.tgz",
+      "integrity": "sha512-suSdznUPfabdaeLiNERA0LHod14RhcEn8wMPUZEQ6bKvajUCZ+aizY4pIvlLU+gImeLKp2bFDHhOc9yonISsXw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "semver": "^7.6.3"
+      },
+      "engines": {
+        "node": ">=22.12.0"
+      }
+    },
+    "node_modules/node-abi/node_modules/semver": {
+      "version": "7.8.5",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.8.5.tgz",
+      "integrity": "sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA==",
+      "dev": true,
+      "license": "ISC",
+      "bin": {
+        "semver": "bin/semver.js"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/node-api-version": {
+      "version": "0.2.1",
+      "resolved": "https://registry.npmjs.org/node-api-version/-/node-api-version-0.2.1.tgz",
+      "integrity": "sha512-2xP/IGGMmmSQpI1+O/k72jF/ykvZ89JeuKX3TLJAYPDVLUalrshrLHkeVcCCZqG/eEa635cr8IBYzgnDvM2O8Q==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "semver": "^7.3.5"
+      }
+    },
+    "node_modules/node-api-version/node_modules/semver": {
+      "version": "7.8.5",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.8.5.tgz",
+      "integrity": "sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA==",
+      "dev": true,
+      "license": "ISC",
+      "bin": {
+        "semver": "bin/semver.js"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
     "node_modules/node-domexception": {
       "version": "1.0.0",
       "resolved": "https://registry.npmjs.org/node-domexception/-/node-domexception-1.0.0.tgz",
@@ -5873,6 +7720,80 @@
         "url": "https://opencollective.com/node-fetch"
       }
     },
+    "node_modules/node-gyp": {
+      "version": "12.4.0",
+      "resolved": "https://registry.npmjs.org/node-gyp/-/node-gyp-12.4.0.tgz",
+      "integrity": "sha512-OMcPNvqTCFUnNaBlmdgq+lfNqY7gTiSmNRDjY3uAXRyudeKZEZxu3CLtjMQrx4zZxCX2b/mpNqTtwuCJgXhHkw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "env-paths": "^2.2.0",
+        "exponential-backoff": "^3.1.1",
+        "graceful-fs": "^4.2.6",
+        "nopt": "^9.0.0",
+        "proc-log": "^6.0.0",
+        "semver": "^7.3.5",
+        "tar": "^7.5.4",
+        "tinyglobby": "^0.2.12",
+        "undici": "^6.25.0",
+        "which": "^6.0.0"
+      },
+      "bin": {
+        "node-gyp": "bin/node-gyp.js"
+      },
+      "engines": {
+        "node": "^20.17.0 || >=22.9.0"
+      }
+    },
+    "node_modules/node-gyp/node_modules/isexe": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/isexe/-/isexe-4.0.0.tgz",
+      "integrity": "sha512-FFUtZMpoZ8RqHS3XeXEmHWLA4thH+ZxCv2lOiPIn1Xc7CxrqhWzNSDzD+/chS/zbYezmiwWLdQC09JdQKmthOw==",
+      "dev": true,
+      "license": "BlueOak-1.0.0",
+      "engines": {
+        "node": ">=20"
+      }
+    },
+    "node_modules/node-gyp/node_modules/semver": {
+      "version": "7.8.5",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.8.5.tgz",
+      "integrity": "sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA==",
+      "dev": true,
+      "license": "ISC",
+      "bin": {
+        "semver": "bin/semver.js"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/node-gyp/node_modules/undici": {
+      "version": "6.29.1",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-6.29.1.tgz",
+      "integrity": "sha512-EvRlUt/QqAEvXdQeRMYUfwOQsfzpDztykrG2owGEE/rBOBoYv9uF39ZzsNDh4lTFHhTr2XOZjKkYgueD12ZmGA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18.17"
+      }
+    },
+    "node_modules/node-gyp/node_modules/which": {
+      "version": "6.0.1",
+      "resolved": "https://registry.npmjs.org/which/-/which-6.0.1.tgz",
+      "integrity": "sha512-oGLe46MIrCRqX7ytPUf66EAYvdeMIZYn3WaocqqKZAxrBpkqHfL/qvTyJ/bTk5+AqHCjXmrv3CEWgy368zhRUg==",
+      "dev": true,
+      "license": "ISC",
+      "dependencies": {
+        "isexe": "^4.0.0"
+      },
+      "bin": {
+        "node-which": "bin/which.js"
+      },
+      "engines": {
+        "node": "^20.17.0 || >=22.9.0"
+      }
+    },
     "node_modules/node-int64": {
       "version": "0.4.0",
       "resolved": "https://registry.npmjs.org/node-int64/-/node-int64-0.4.0.tgz",
@@ -5916,6 +7837,22 @@
         "url": "https://opencollective.com/nodemon"
       }
     },
+    "node_modules/nopt": {
+      "version": "9.0.0",
+      "resolved": "https://registry.npmjs.org/nopt/-/nopt-9.0.0.tgz",
+      "integrity": "sha512-Zhq3a+yFKrYwSBluL4H9XP3m3y5uvQkB/09CwDruCiRmR/UJYnn9W4R48ry0uGC70aeTPKLynBtscP9efFFcPw==",
+      "dev": true,
+      "license": "ISC",
+      "dependencies": {
+        "abbrev": "^4.0.0"
+      },
+      "bin": {
+        "nopt": "bin/nopt.js"
+      },
+      "engines": {
+        "node": "^20.17.0 || >=22.9.0"
+      }
+    },
     "node_modules/normalize-path": {
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/normalize-path/-/normalize-path-3.0.0.tgz",
@@ -5926,6 +7863,19 @@
         "node": ">=0.10.0"
       }
     },
+    "node_modules/normalize-url": {
+      "version": "6.1.0",
+      "resolved": "https://registry.npmjs.org/normalize-url/-/normalize-url-6.1.0.tgz",
+      "integrity": "sha512-DlL+XwOy3NxAQ8xuC0okPgK46iuVNAK01YN7RueYBqqFeGsBjV9XmCAzAdgt+667bCl5kPh9EqKKDwnaPG1I7A==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=10"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "node_modules/npm-run-path": {
       "version": "4.0.1",
       "resolved": "https://registry.npmjs.org/npm-run-path/-/npm-run-path-4.0.1.tgz",
@@ -5969,6 +7919,17 @@
         "url": "https://github.com/sponsors/ljharb"
       }
     },
+    "node_modules/object-keys": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/object-keys/-/object-keys-1.1.1.tgz",
+      "integrity": "sha512-NuAESUOUMrlIXOfHKzD6bpPu3tYt3xvjNdRIQ+FeT0lNb4K8WR70CaDxhuNguS2XG+GjkyMwOzsN5ZktImfhLA==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
     "node_modules/on-finished": {
       "version": "2.4.1",
       "resolved": "https://registry.npmjs.org/on-finished/-/on-finished-2.4.1.tgz",
@@ -6016,17 +7977,14 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
-    "node_modules/opn": {
-      "version": "5.3.0",
-      "resolved": "https://registry.npmjs.org/opn/-/opn-5.3.0.tgz",
-      "integrity": "sha512-bYJHo/LOmoTd+pfiYhfZDnf9zekVJrY+cnS2a5F2x+w5ppvTqObojTP7WiFG+kVZs9Inw+qQ/lw7TroWwhdd2g==",
+    "node_modules/p-cancelable": {
+      "version": "2.1.1",
+      "resolved": "https://registry.npmjs.org/p-cancelable/-/p-cancelable-2.1.1.tgz",
+      "integrity": "sha512-BZOr3nRQHOntUjTrH8+Lh54smKHoHyur8We1V8DSMVrl5A2malOOwuJRnKRDjSnkoeBh4at6BwEnb5I7Jl31wg==",
       "dev": true,
       "license": "MIT",
-      "dependencies": {
-        "is-wsl": "^1.1.0"
-      },
       "engines": {
-        "node": ">=4"
+        "node": ">=8"
       }
     },
     "node_modules/p-limit": {
@@ -6049,7 +8007,6 @@
       "version": "4.1.0",
       "resolved": "https://registry.npmjs.org/p-locate/-/p-locate-4.1.0.tgz",
       "integrity": "sha512-R79ZZ/0wAxKGu3oYMlz8jy/kbhsNrS7SKZ7PxEHBgJ5+F2mtFW2fK2cOtBh1cHYkQsbzFV7I+EoRKe6Yt0oK7A==",
-      "dev": true,
       "license": "MIT",
       "dependencies": {
         "p-limit": "^2.2.0"
@@ -6062,7 +8019,6 @@
       "version": "2.3.0",
       "resolved": "https://registry.npmjs.org/p-limit/-/p-limit-2.3.0.tgz",
       "integrity": "sha512-//88mFWSJx8lxCzwdAABTJL2MyWB12+eIY7MDL2SqLmAkeKU9qxRvWuSyTjm3FUmpBEMuFfckAIqEaVGUDxb6w==",
-      "dev": true,
       "license": "MIT",
       "dependencies": {
         "p-try": "^2.0.0"
@@ -6078,7 +8034,6 @@
       "version": "2.2.0",
       "resolved": "https://registry.npmjs.org/p-try/-/p-try-2.2.0.tgz",
       "integrity": "sha512-R4nPAVTAU0B9D35/Gk3uJf/7XYbQcyohSKdvAxIRSNghFl4e71hVoGnBNQz9cWaXxO2I10KTC+3jMdvvoKw6dQ==",
-      "dev": true,
       "license": "MIT",
       "engines": {
         "node": ">=6"
@@ -6188,7 +8143,6 @@
       "version": "4.0.0",
       "resolved": "https://registry.npmjs.org/path-exists/-/path-exists-4.0.0.tgz",
       "integrity": "sha512-ak9Qy5Q7jYb2Wwcey5Fpvg2KoAc/ZIhLSLOSBmRmygPsGwkVVt0fZa0qrtMz+m6tJTAHfZQ8FnmB4MG4LWy7/w==",
-      "dev": true,
       "license": "MIT",
       "engines": {
         "node": ">=8"
@@ -6214,6 +8168,13 @@
         "node": ">=8"
       }
     },
+    "node_modules/path-parse": {
+      "version": "1.0.7",
+      "resolved": "https://registry.npmjs.org/path-parse/-/path-parse-1.0.7.tgz",
+      "integrity": "sha512-LDJzPVEEEPR+y48z93A0Ed0yXb8pAByGWo/k5YYdYgpY2/2EsOsksJrq7lOHxryrVOn1ejG6oAp8ahvOIQD8sw==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/path-scurry": {
       "version": "1.11.1",
       "resolved": "https://registry.npmjs.org/path-scurry/-/path-scurry-1.11.1.tgz",
@@ -6244,6 +8205,21 @@
       "integrity": "sha512-RA1GjUVMnvYFxuqovrEqZoxxW5NUZqbwKtYz/Tt7nXerk0LbLblQmrsgdeOxV5SFHf0UDggjS/bSeOZwt1pmEQ==",
       "license": "MIT"
     },
+    "node_modules/pe-library": {
+      "version": "0.4.1",
+      "resolved": "https://registry.npmjs.org/pe-library/-/pe-library-0.4.1.tgz",
+      "integrity": "sha512-eRWB5LBz7PpDu4PUlwT0PhnQfTQJlDDdPa35urV4Osrm0t0AqQFGn+UIkU3klZvwJ8KPO3VbBFsXquA6p6kqZw==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=12",
+        "npm": ">=6"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/jet2jet"
+      }
+    },
     "node_modules/pend": {
       "version": "1.2.0",
       "resolved": "https://registry.npmjs.org/pend/-/pend-1.2.0.tgz",
@@ -6258,65 +8234,312 @@
       "dev": true,
       "license": "ISC"
     },
-    "node_modules/picomatch": {
-      "version": "2.3.1",
-      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.1.tgz",
-      "integrity": "sha512-JU3teHTNjmE2VCGFzuY8EXzCDVwEqB2a8fsIvwaStHhAWJEeVd1o1QD80CU6+ZdEXXSLbSsuLwJjkCBWqRQUVA==",
+    "node_modules/picomatch": {
+      "version": "2.3.1",
+      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.1.tgz",
+      "integrity": "sha512-JU3teHTNjmE2VCGFzuY8EXzCDVwEqB2a8fsIvwaStHhAWJEeVd1o1QD80CU6+ZdEXXSLbSsuLwJjkCBWqRQUVA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=8.6"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/jonschlinkert"
+      }
+    },
+    "node_modules/pirates": {
+      "version": "4.0.7",
+      "resolved": "https://registry.npmjs.org/pirates/-/pirates-4.0.7.tgz",
+      "integrity": "sha512-TfySrs/5nm8fQJDcBDuUng3VOUKsd7S+zqvbOTiGXHfxX4wK31ard+hoNuvkicM/2YFzlpDgABOevKSsB4G/FA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">= 6"
+      }
+    },
+    "node_modules/pkg-dir": {
+      "version": "4.2.0",
+      "resolved": "https://registry.npmjs.org/pkg-dir/-/pkg-dir-4.2.0.tgz",
+      "integrity": "sha512-HRDzbaKjC+AOWVXxAU/x54COGeIv9eb+6CkDSQoNTt4XyWoIJvuPsXizxu/Fr23EiekbtZwmh1IcIG/l/a10GQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "find-up": "^4.0.0"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/pkijs": {
+      "version": "3.4.3",
+      "resolved": "https://registry.npmjs.org/pkijs/-/pkijs-3.4.3.tgz",
+      "integrity": "sha512-V9kOzaItwDgqlryhXysQsAXUEKi5O7kqWUaP3dXI7MLvkPqWWMb4wVb1QAtmEDCKI+XIAINsZoNKMFF7sZb1eg==",
+      "dev": true,
+      "license": "BSD-3-Clause",
+      "workspaces": [
+        "website"
+      ],
+      "dependencies": {
+        "@noble/hashes": "1.8.0",
+        "asn1js": "^3.0.6",
+        "bytestreamjs": "^2.0.1",
+        "pvtsutils": "^1.3.6",
+        "pvutils": "^1.1.3",
+        "tslib": "^2.8.1"
+      },
+      "engines": {
+        "node": ">=16.0.0"
+      }
+    },
+    "node_modules/plist": {
+      "version": "3.1.0",
+      "resolved": "https://registry.npmjs.org/plist/-/plist-3.1.0.tgz",
+      "integrity": "sha512-uysumyrvkUX0rX/dEVqt8gC3sTBzd4zoWfLeS29nb53imdaXVvLINYXTI2GNqzaMuvacNx4uJQ8+b3zXR0pkgQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@xmldom/xmldom": "^0.8.8",
+        "base64-js": "^1.5.1",
+        "xmlbuilder": "^15.1.1"
+      },
+      "engines": {
+        "node": ">=10.4.0"
+      }
+    },
+    "node_modules/plist/node_modules/xmlbuilder": {
+      "version": "15.1.1",
+      "resolved": "https://registry.npmjs.org/xmlbuilder/-/xmlbuilder-15.1.1.tgz",
+      "integrity": "sha512-yMqGBqtXyeN1e3TGYvgNgDVZ3j84W4cwkOXQswghol6APgZWaff9lnbvN7MHYJOiXsvGPXtjTYJEiC9J2wv9Eg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=8.0"
+      }
+    },
+    "node_modules/pngjs": {
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/pngjs/-/pngjs-5.0.0.tgz",
+      "integrity": "sha512-40QW5YalBNfQo5yRYmiw7Yz6TKKVr3h6970B2YE+3fQpsWcrbj1PzJgxeJ19DRQjhMbKPIuMY8rFaXc8moolVw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=10.13.0"
+      }
+    },
+    "node_modules/postcss": {
+      "version": "8.5.31",
+      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.31.tgz",
+      "integrity": "sha512-YUbWYCgErwnMAVkjUnYa+KlMBzGpHwiIt/DE7f0G33AuX2LH9UcTk6KgWxd3zRU+pN3u/C+Xl3EnMLM4Hea7Sg==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/postcss/"
+        },
+        {
+          "type": "tidelift",
+          "url": "https://tidelift.com/funding/github/npm/postcss"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "nanoid": "^3.3.20",
+        "picocolors": "^1.1.1",
+        "source-map-js": "^1.2.2"
+      },
+      "engines": {
+        "node": "^10 || ^12 || >=14"
+      }
+    },
+    "node_modules/postcss-import": {
+      "version": "15.1.0",
+      "resolved": "https://registry.npmjs.org/postcss-import/-/postcss-import-15.1.0.tgz",
+      "integrity": "sha512-hpr+J05B2FVYUAXHeK1YyI267J/dDDhMU6B6civm8hSY1jYJnBXxzKDKDswzJmtLHryrjhnDjqqp/49t8FALew==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "postcss-value-parser": "^4.0.0",
+        "read-cache": "^1.0.0",
+        "resolve": "^1.1.7"
+      },
+      "engines": {
+        "node": ">=14.0.0"
+      },
+      "peerDependencies": {
+        "postcss": "^8.0.0"
+      }
+    },
+    "node_modules/postcss-js": {
+      "version": "4.1.0",
+      "resolved": "https://registry.npmjs.org/postcss-js/-/postcss-js-4.1.0.tgz",
+      "integrity": "sha512-oIAOTqgIo7q2EOwbhb8UalYePMvYoIeRY2YKntdpFQXNosSu3vLrniGgmH9OKs/qAkfoj5oB3le/7mINW1LCfw==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/postcss/"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "camelcase-css": "^2.0.1"
+      },
+      "engines": {
+        "node": "^12 || ^14 || >= 16"
+      },
+      "peerDependencies": {
+        "postcss": "^8.4.21"
+      }
+    },
+    "node_modules/postcss-load-config": {
+      "version": "6.0.1",
+      "resolved": "https://registry.npmjs.org/postcss-load-config/-/postcss-load-config-6.0.1.tgz",
+      "integrity": "sha512-oPtTM4oerL+UXmx+93ytZVN82RrlY/wPUV8IeDxFrzIjXOLF1pN+EmKPLbubvKHT2HC20xXsCAH2Z+CKV6Oz/g==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/postcss/"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "lilconfig": "^3.1.1"
+      },
+      "engines": {
+        "node": ">= 18"
+      },
+      "peerDependencies": {
+        "jiti": ">=1.21.0",
+        "postcss": ">=8.0.9",
+        "tsx": "^4.8.1",
+        "yaml": "^2.4.2"
+      },
+      "peerDependenciesMeta": {
+        "jiti": {
+          "optional": true
+        },
+        "postcss": {
+          "optional": true
+        },
+        "tsx": {
+          "optional": true
+        },
+        "yaml": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/postcss-nested": {
+      "version": "6.2.0",
+      "resolved": "https://registry.npmjs.org/postcss-nested/-/postcss-nested-6.2.0.tgz",
+      "integrity": "sha512-HQbt28KulC5AJzG+cZtj9kvKB93CFCdLvog1WFLf1D+xmMvPGlBstkpTEZfK5+AN9hfJocyBFCNiqyS48bpgzQ==",
       "dev": true,
+      "funding": [
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/postcss/"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
       "license": "MIT",
+      "dependencies": {
+        "postcss-selector-parser": "^6.1.1"
+      },
       "engines": {
-        "node": ">=8.6"
+        "node": ">=12.0"
       },
-      "funding": {
-        "url": "https://github.com/sponsors/jonschlinkert"
+      "peerDependencies": {
+        "postcss": "^8.2.14"
       }
     },
-    "node_modules/pirates": {
-      "version": "4.0.7",
-      "resolved": "https://registry.npmjs.org/pirates/-/pirates-4.0.7.tgz",
-      "integrity": "sha512-TfySrs/5nm8fQJDcBDuUng3VOUKsd7S+zqvbOTiGXHfxX4wK31ard+hoNuvkicM/2YFzlpDgABOevKSsB4G/FA==",
+    "node_modules/postcss-selector-parser": {
+      "version": "6.1.5",
+      "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-6.1.5.tgz",
+      "integrity": "sha512-TEHFzb5KRDKaOgJ4TYE+0jyJtFbjLvkdVOu0fZ2b6MTWzoqZd4Le+61aEppWkvTlYePgOX4ATL1wsAIPMLTw6Q==",
       "dev": true,
       "license": "MIT",
+      "dependencies": {
+        "cssesc": "^3.0.0",
+        "util-deprecate": "^1.0.2"
+      },
       "engines": {
-        "node": ">= 6"
+        "node": ">=4"
       }
     },
-    "node_modules/pkg-dir": {
+    "node_modules/postcss-value-parser": {
       "version": "4.2.0",
-      "resolved": "https://registry.npmjs.org/pkg-dir/-/pkg-dir-4.2.0.tgz",
-      "integrity": "sha512-HRDzbaKjC+AOWVXxAU/x54COGeIv9eb+6CkDSQoNTt4XyWoIJvuPsXizxu/Fr23EiekbtZwmh1IcIG/l/a10GQ==",
+      "resolved": "https://registry.npmjs.org/postcss-value-parser/-/postcss-value-parser-4.2.0.tgz",
+      "integrity": "sha512-1NNCs6uurfkVbeXG4S8JFT9t19m45ICnif8zWLd5oPSZ50QnwMfK+H3jv408d4jw/7Bttv5axS5IiHoLaVNHeQ==",
       "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/posthog-node": {
+      "version": "5.56.4",
+      "resolved": "https://registry.npmjs.org/posthog-node/-/posthog-node-5.56.4.tgz",
+      "integrity": "sha512-oVn/HxJZK/xen+u51nwyEpWnN4UEQox4GOSwBOp5OGli3x7Soz7Jler+CatGQsAehQuVPas2432hAarXNyxoWA==",
       "license": "MIT",
       "dependencies": {
-        "find-up": "^4.0.0"
+        "@posthog/core": "^1.59.3"
       },
       "engines": {
-        "node": ">=8"
+        "node": "^20.20.0 || >=22.22.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.2.0",
+        "rxjs": "^7.0.0"
+      },
+      "peerDependenciesMeta": {
+        "@opentelemetry/api": {
+          "optional": true
+        },
+        "rxjs": {
+          "optional": true
+        }
       }
     },
-    "node_modules/portscanner": {
-      "version": "2.2.0",
-      "resolved": "https://registry.npmjs.org/portscanner/-/portscanner-2.2.0.tgz",
-      "integrity": "sha512-IFroCz/59Lqa2uBvzK3bKDbDDIEaAY8XJ1jFxcLWTqosrsc32//P4VuSB2vZXoHiHqOmx8B5L5hnKOxL/7FlPw==",
+    "node_modules/postject": {
+      "version": "1.0.0-alpha.6",
+      "resolved": "https://registry.npmjs.org/postject/-/postject-1.0.0-alpha.6.tgz",
+      "integrity": "sha512-b9Eb8h2eVqNE8edvKdwqkrY6O7kAwmI8kcnBv1NScolYJbo59XUF0noFq+lxbC1yN20bmC0WBEbDC5H/7ASb0A==",
       "dev": true,
       "license": "MIT",
+      "optional": true,
+      "peer": true,
       "dependencies": {
-        "async": "^2.6.0",
-        "is-number-like": "^1.0.3"
+        "commander": "^9.4.0"
+      },
+      "bin": {
+        "postject": "dist/cli.js"
       },
       "engines": {
-        "node": ">=0.4",
-        "npm": ">=1.0.0"
+        "node": ">=14.0.0"
       }
     },
-    "node_modules/portscanner/node_modules/async": {
-      "version": "2.6.4",
-      "resolved": "https://registry.npmjs.org/async/-/async-2.6.4.tgz",
-      "integrity": "sha512-mzo5dfJYwAn29PeiJ0zvwTo04zj8HDJj0Mn8TD7sno7q12prdbnasKJHhkm2c1LgrhlJ0teaea8860oxi51mGA==",
+    "node_modules/postject/node_modules/commander": {
+      "version": "9.5.0",
+      "resolved": "https://registry.npmjs.org/commander/-/commander-9.5.0.tgz",
+      "integrity": "sha512-KRs7WVDKg86PWiuAqhDrAQnTXZKraVcCc6vFdL14qrZ/DcWwuRo7VoiYXalXO7S5GKpqYiVEwCbgFDfxNHKJBQ==",
       "dev": true,
       "license": "MIT",
-      "dependencies": {
-        "lodash": "^4.17.14"
+      "optional": true,
+      "peer": true,
+      "engines": {
+        "node": "^12.20.0 || >=14"
       }
     },
     "node_modules/pretty-format": {
@@ -6347,6 +8570,23 @@
         "url": "https://github.com/chalk/ansi-styles?sponsor=1"
       }
     },
+    "node_modules/proc-log": {
+      "version": "6.1.0",
+      "resolved": "https://registry.npmjs.org/proc-log/-/proc-log-6.1.0.tgz",
+      "integrity": "sha512-iG+GYldRf2BQ0UDUAd6JQ/RwzaQy6mXmsk/IzlYyal4A4SNFw54MeH4/tLkF4I5WoWG9SQwuqWzS99jaFQHBuQ==",
+      "dev": true,
+      "license": "ISC",
+      "engines": {
+        "node": "^20.17.0 || >=22.9.0"
+      }
+    },
+    "node_modules/process-nextick-args": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/process-nextick-args/-/process-nextick-args-2.0.1.tgz",
+      "integrity": "sha512-3ouUOpQhtgrbOa17J7+uxOTpITYWaGP7/AhoR3+A+/1e9skrzelGi/dXzEYyvbxubEF6Wn2ypscTKiKJFFn1ag==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/progress": {
       "version": "2.0.3",
       "resolved": "https://registry.npmjs.org/progress/-/progress-2.0.3.tgz",
@@ -6357,6 +8597,39 @@
         "node": ">=0.4.0"
       }
     },
+    "node_modules/promise-retry": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/promise-retry/-/promise-retry-2.0.1.tgz",
+      "integrity": "sha512-y+WKFlBR8BGXnsNlIHFGPZmyDf3DFMoLhaflAnyZgV6rG6xu+JwesTo2Q9R6XwYmtmwAFCkAk3e35jEdoeh/3g==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "err-code": "^2.0.2",
+        "retry": "^0.12.0"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/proper-lockfile": {
+      "version": "4.1.2",
+      "resolved": "https://registry.npmjs.org/proper-lockfile/-/proper-lockfile-4.1.2.tgz",
+      "integrity": "sha512-TjNPblN4BwAWMXU8s9AEz4JmQxnD1NNL7bNOY/AKUzyamc379FWASUhc/K1pL2noVb+XmZKLL68cjzLsiOAMaA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "graceful-fs": "^4.2.4",
+        "retry": "^0.12.0",
+        "signal-exit": "^3.0.2"
+      }
+    },
+    "node_modules/proper-lockfile/node_modules/signal-exit": {
+      "version": "3.0.7",
+      "resolved": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz",
+      "integrity": "sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ==",
+      "dev": true,
+      "license": "ISC"
+    },
     "node_modules/proxy-addr": {
       "version": "2.0.7",
       "resolved": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.7.tgz",
@@ -6530,6 +8803,109 @@
       ],
       "license": "MIT"
     },
+    "node_modules/pvtsutils": {
+      "version": "1.3.6",
+      "resolved": "https://registry.npmjs.org/pvtsutils/-/pvtsutils-1.3.6.tgz",
+      "integrity": "sha512-PLgQXQ6H2FWCaeRak8vvk1GW462lMxB5s3Jm673N82zI4vqtVUPuZdffdZbPDFRoU8kAhItWFtPCWiPpp4/EDg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "tslib": "^2.8.1"
+      }
+    },
+    "node_modules/pvutils": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/pvutils/-/pvutils-1.2.0.tgz",
+      "integrity": "sha512-BbubeCEyTuQjVMakvJQ/Sxbc93F2pwmbsxONT/ZRrwU7Ua38d8unYTwXpTVLAKJ4BDuH9IGztCjQcd/N/39Dvg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=16.0.0"
+      }
+    },
+    "node_modules/qrcode": {
+      "version": "1.5.4",
+      "resolved": "https://registry.npmjs.org/qrcode/-/qrcode-1.5.4.tgz",
+      "integrity": "sha512-1ca71Zgiu6ORjHqFBDpnSMTR2ReToX4l1Au1VFLyVeBTFavzQnv5JxMFr3ukHVKpSrSA2MCk0lNJSykjUfz7Zg==",
+      "license": "MIT",
+      "dependencies": {
+        "dijkstrajs": "^1.0.1",
+        "pngjs": "^5.0.0",
+        "yargs": "^15.3.1"
+      },
+      "bin": {
+        "qrcode": "bin/qrcode"
+      },
+      "engines": {
+        "node": ">=10.13.0"
+      }
+    },
+    "node_modules/qrcode/node_modules/cliui": {
+      "version": "6.0.0",
+      "resolved": "https://registry.npmjs.org/cliui/-/cliui-6.0.0.tgz",
+      "integrity": "sha512-t6wbgtoCXvAzst7QgXxJYqPt0usEfbgQdftEPbLL/cvv6HPE5VgvqCuAIDR0NgU52ds6rFwqrgakNLrHEjCbrQ==",
+      "license": "ISC",
+      "dependencies": {
+        "string-width": "^4.2.0",
+        "strip-ansi": "^6.0.0",
+        "wrap-ansi": "^6.2.0"
+      }
+    },
+    "node_modules/qrcode/node_modules/wrap-ansi": {
+      "version": "6.2.0",
+      "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-6.2.0.tgz",
+      "integrity": "sha512-r6lPcBGxZXlIcymEu7InxDMhdW0KDxpLgoFLcguasxCaJ/SOIZwINatK9KY/tf+ZrlywOKU0UDj3ATXUBfxJXA==",
+      "license": "MIT",
+      "dependencies": {
+        "ansi-styles": "^4.0.0",
+        "string-width": "^4.1.0",
+        "strip-ansi": "^6.0.0"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/qrcode/node_modules/y18n": {
+      "version": "4.0.3",
+      "resolved": "https://registry.npmjs.org/y18n/-/y18n-4.0.3.tgz",
+      "integrity": "sha512-JKhqTOwSrqNA1NY5lSztJ1GrBiUodLMmIZuLiDaMRJ+itFd+ABVE8XBjOvIWL+rSqNDC74LCSFmlb/U4UZ4hJQ==",
+      "license": "ISC"
+    },
+    "node_modules/qrcode/node_modules/yargs": {
+      "version": "15.4.1",
+      "resolved": "https://registry.npmjs.org/yargs/-/yargs-15.4.1.tgz",
+      "integrity": "sha512-aePbxDmcYW++PaqBsJ+HYUFwCdv4LVvdnhBy78E57PIor8/OVvhMrADFFEDh8DHDFRv/O9i3lPhsENjO7QX0+A==",
+      "license": "MIT",
+      "dependencies": {
+        "cliui": "^6.0.0",
+        "decamelize": "^1.2.0",
+        "find-up": "^4.1.0",
+        "get-caller-file": "^2.0.1",
+        "require-directory": "^2.1.1",
+        "require-main-filename": "^2.0.0",
+        "set-blocking": "^2.0.0",
+        "string-width": "^4.2.0",
+        "which-module": "^2.0.0",
+        "y18n": "^4.0.0",
+        "yargs-parser": "^18.1.2"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/qrcode/node_modules/yargs-parser": {
+      "version": "18.1.3",
+      "resolved": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-18.1.3.tgz",
+      "integrity": "sha512-o50j0JeToy/4K6OZcaQmW6lyXXKhq7csREXcDwk2omFPJEwUNOVtJKvmDr9EI1fAJZUyZcRF7kxGBWmRXudrCQ==",
+      "license": "ISC",
+      "dependencies": {
+        "camelcase": "^5.0.0",
+        "decamelize": "^1.2.0"
+      },
+      "engines": {
+        "node": ">=6"
+      }
+    },
     "node_modules/qs": {
       "version": "6.14.1",
       "resolved": "https://registry.npmjs.org/qs/-/qs-6.14.1.tgz",
@@ -6546,6 +8922,40 @@
         "url": "https://github.com/sponsors/ljharb"
       }
     },
+    "node_modules/queue-microtask": {
+      "version": "1.2.3",
+      "resolved": "https://registry.npmjs.org/queue-microtask/-/queue-microtask-1.2.3.tgz",
+      "integrity": "sha512-NuaNSa6flKT5JaSYQzJok04JzTL1CA6aGhv5rfLW3PgqA+M2ChpZQnAC8h8i4ZFkBS8X5RqkDBHA7r4hej3K9A==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/feross"
+        },
+        {
+          "type": "patreon",
+          "url": "https://www.patreon.com/feross"
+        },
+        {
+          "type": "consulting",
+          "url": "https://feross.org/support"
+        }
+      ],
+      "license": "MIT"
+    },
+    "node_modules/quick-lru": {
+      "version": "5.1.1",
+      "resolved": "https://registry.npmjs.org/quick-lru/-/quick-lru-5.1.1.tgz",
+      "integrity": "sha512-WuyALRjWPDGtt/wzJiadO5AXY+8hZ80hVpe6MyivgraREW751X3SbhRvG3eLKOYN+8VEvqLcf3wdnt44Z4S4SA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=10"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "node_modules/range-parser": {
       "version": "1.2.1",
       "resolved": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.1.tgz",
@@ -6577,6 +8987,44 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/read-binary-file-arch": {
+      "version": "1.0.6",
+      "resolved": "https://registry.npmjs.org/read-binary-file-arch/-/read-binary-file-arch-1.0.6.tgz",
+      "integrity": "sha512-BNg9EN3DD3GsDXX7Aa8O4p92sryjkmzYYgmgTAc6CA4uGLEDzFfxOxugu21akOxpcXHiEgsYkC6nPsQvLLLmEg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "debug": "^4.3.4"
+      },
+      "bin": {
+        "read-binary-file-arch": "cli.js"
+      }
+    },
+    "node_modules/read-binary-file-arch/node_modules/debug": {
+      "version": "4.4.3",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
+      "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "ms": "^2.1.3"
+      },
+      "engines": {
+        "node": ">=6.0"
+      },
+      "peerDependenciesMeta": {
+        "supports-color": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/read-cache": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/read-cache/-/read-cache-1.0.2.tgz",
+      "integrity": "sha512-/peqiBB/n07gQGLsWaHho3WfvUyRscw0gYTsEFMhrIe/nWLkYaf5SbKYjGYqtRV3aPwykJgF2VEMo1ac4bnsGA==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/readable-stream": {
       "version": "3.6.2",
       "resolved": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz",
@@ -6608,16 +9056,71 @@
       "version": "2.1.1",
       "resolved": "https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz",
       "integrity": "sha512-fGxEI7+wsG9xrvdjsrlmL22OMTTiHRwAMroiEeMgq8gzoLC/PQr7RsRDSTLUg/bZAZtF+TVIkHc6/4RIKrui+Q==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/require-from-string": {
+      "version": "2.0.2",
+      "resolved": "https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz",
+      "integrity": "sha512-Xf0nWe6RseziFMu+Ap9biiUbmplq6S9/p+7w7YXP/JBHhrUDDUhwa+vANyubuqfZWTveU//DYVGsDG7RKL/vEw==",
       "dev": true,
       "license": "MIT",
       "engines": {
         "node": ">=0.10.0"
       }
     },
-    "node_modules/requires-port": {
-      "version": "1.0.0",
-      "resolved": "https://registry.npmjs.org/requires-port/-/requires-port-1.0.0.tgz",
-      "integrity": "sha512-KigOCHcocU3XODJxsu8i/j8T9tzT4adHiecwORRQ0ZZFcp7ahwXuRU1m+yuO90C5ZUyGeGfocHDI14M3L3yDAQ==",
+    "node_modules/require-main-filename": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/require-main-filename/-/require-main-filename-2.0.0.tgz",
+      "integrity": "sha512-NKN5kMDylKuldxYLSUfrbo5Tuzh4hd+2E8NPPX02mZtn1VuREQToYe/ZdlJy+J3uCpfaiGF05e7B8W0iXbQHmg==",
+      "license": "ISC"
+    },
+    "node_modules/resedit": {
+      "version": "1.7.2",
+      "resolved": "https://registry.npmjs.org/resedit/-/resedit-1.7.2.tgz",
+      "integrity": "sha512-vHjcY2MlAITJhC0eRD/Vv8Vlgmu9Sd3LX9zZvtGzU5ZImdTN3+d6e/4mnTyV8vEbyf1sgNIrWxhWlrys52OkEA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "pe-library": "^0.4.1"
+      },
+      "engines": {
+        "node": ">=12",
+        "npm": ">=6"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/jet2jet"
+      }
+    },
+    "node_modules/resolve": {
+      "version": "1.22.13",
+      "resolved": "https://registry.npmjs.org/resolve/-/resolve-1.22.13.tgz",
+      "integrity": "sha512-Dj/cW9zBV2aRj6XzCxuGIs3ESZKv02jixne3q6jFZYZ3/Tg09gHHviSMDL4kObh9pqSahdRHEnDoaP2gn8YLhA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "es-errors": "^1.3.0",
+        "is-core-module": "^2.17.0",
+        "path-parse": "^1.0.7",
+        "supports-preserve-symlinks-flag": "^1.0.0"
+      },
+      "bin": {
+        "resolve": "bin/resolve"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/resolve-alpn": {
+      "version": "1.2.1",
+      "resolved": "https://registry.npmjs.org/resolve-alpn/-/resolve-alpn-1.2.1.tgz",
+      "integrity": "sha512-0a1F4l73/ZFZOakJnQ3FvkJ2+gSTQWz/r2KE5OdDY0TxPm5h4GkqkWWfM47T7HsbnOtcJVEF4epCVy6u7Q3K+g==",
       "dev": true,
       "license": "MIT"
     },
@@ -6654,42 +9157,128 @@
         "node": ">=4"
       }
     },
-    "node_modules/resp-modifier": {
-      "version": "6.0.2",
-      "resolved": "https://registry.npmjs.org/resp-modifier/-/resp-modifier-6.0.2.tgz",
-      "integrity": "sha512-U1+0kWC/+4ncRFYqQWTx/3qkfE6a4B/h3XXgmXypfa0SPZ3t7cbbaFk297PjQS/yov24R18h6OZe6iZwj3NSLw==",
+    "node_modules/responselike": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/responselike/-/responselike-2.0.1.tgz",
+      "integrity": "sha512-4gl03wn3hj1HP3yzgdI7d3lCkF95F21Pz4BPGvKHinyQzALR5CapwC8yIi0Rh58DEMQ/SguC03wFj2k0M/mHhw==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "debug": "^2.2.0",
-        "minimatch": "^3.0.2"
+        "lowercase-keys": "^2.0.0"
       },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/retry": {
+      "version": "0.12.0",
+      "resolved": "https://registry.npmjs.org/retry/-/retry-0.12.0.tgz",
+      "integrity": "sha512-9LkiTwjUh6rT555DtE9rTX+BKByPfrMzEAtnlEtdEwr3Nkffwiihqe2bWADg+OQRjt9gl6ICdmB/ZFDCGAtSow==",
+      "dev": true,
+      "license": "MIT",
       "engines": {
-        "node": ">= 0.8.0"
+        "node": ">= 4"
       }
     },
-    "node_modules/resp-modifier/node_modules/debug": {
-      "version": "2.6.9",
-      "resolved": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
-      "integrity": "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==",
+    "node_modules/reusify": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/reusify/-/reusify-1.1.0.tgz",
+      "integrity": "sha512-g6QUff04oZpHs0eG5p83rFLhHeV00ug/Yf9nZM6fLeUrPguBTkTQOdpAWWspMh55TZfVQDPaN3NQJfbVRAxdIw==",
       "dev": true,
       "license": "MIT",
+      "engines": {
+        "iojs": ">=1.0.0",
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/rimraf": {
+      "version": "2.6.3",
+      "resolved": "https://registry.npmjs.org/rimraf/-/rimraf-2.6.3.tgz",
+      "integrity": "sha512-mwqeW5XsA2qAejG46gYdENaxXjx9onRNCfn7L0duuP4hCuTIi/QO7PDK07KJfp1d+izWPrzEJDcSqBa0OZQriA==",
+      "deprecated": "Rimraf versions prior to v4 are no longer supported",
+      "dev": true,
+      "license": "ISC",
+      "peer": true,
       "dependencies": {
-        "ms": "2.0.0"
+        "glob": "^7.1.3"
+      },
+      "bin": {
+        "rimraf": "bin.js"
       }
     },
-    "node_modules/resp-modifier/node_modules/ms": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
-      "integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==",
+    "node_modules/rimraf/node_modules/glob": {
+      "version": "7.2.3",
+      "resolved": "https://registry.npmjs.org/glob/-/glob-7.2.3.tgz",
+      "integrity": "sha512-nFR0zLpU2YCaRxwoCJvL6UvCH2JFyFVIvwTLsIf21AuHlMskA1hhTdk+LlYJtOlYt9v6dvszD2BGRqBL+iQK9Q==",
+      "deprecated": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me",
       "dev": true,
-      "license": "MIT"
+      "license": "ISC",
+      "peer": true,
+      "dependencies": {
+        "fs.realpath": "^1.0.0",
+        "inflight": "^1.0.4",
+        "inherits": "2",
+        "minimatch": "^3.1.1",
+        "once": "^1.3.0",
+        "path-is-absolute": "^1.0.0"
+      },
+      "engines": {
+        "node": "*"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/isaacs"
+      }
     },
-    "node_modules/rx": {
-      "version": "4.1.0",
-      "resolved": "https://registry.npmjs.org/rx/-/rx-4.1.0.tgz",
-      "integrity": "sha512-CiaiuN6gapkdl+cZUr67W6I8jquN4lkak3vtIsIWCl4XIPP8ffsoyN6/+PuGXnQy8Cu8W2y9Xxh31Rq4M6wUug==",
+    "node_modules/roarr": {
+      "version": "2.15.4",
+      "resolved": "https://registry.npmjs.org/roarr/-/roarr-2.15.4.tgz",
+      "integrity": "sha512-CHhPh+UNHD2GTXNYhPWLnU8ONHdI+5DI+4EYIAOaiD63rHeYlZvyh8P+in5999TTSFgUYuKUAjzRI4mdh/p+2A==",
       "dev": true,
-      "license": "Apache-2.0"
+      "license": "BSD-3-Clause",
+      "optional": true,
+      "dependencies": {
+        "boolean": "^3.0.1",
+        "detect-node": "^2.0.4",
+        "globalthis": "^1.0.1",
+        "json-stringify-safe": "^5.0.1",
+        "semver-compare": "^1.0.0",
+        "sprintf-js": "^1.1.2"
+      },
+      "engines": {
+        "node": ">=8.0"
+      }
+    },
+    "node_modules/roarr/node_modules/sprintf-js": {
+      "version": "1.1.3",
+      "resolved": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.1.3.tgz",
+      "integrity": "sha512-Oo+0REFV59/rz3gfJNKQiBlwfHaSESl1pcGyABQsnnIfWOFt6JNj5gCog2U6MLZ//IGYD+nA8nI+mTShREReaA==",
+      "dev": true,
+      "license": "BSD-3-Clause",
+      "optional": true
+    },
+    "node_modules/run-parallel": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/run-parallel/-/run-parallel-1.2.0.tgz",
+      "integrity": "sha512-5l4VyZR86LZ/lDxZTR6jqL8AFE2S0IFLMP26AbjsLVADxHdhB/c0GUsH+y39UfCi3dzz8OlQuPmnaJOMoDHQBA==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/feross"
+        },
+        {
+          "type": "patreon",
+          "url": "https://www.patreon.com/feross"
+        },
+        {
+          "type": "consulting",
+          "url": "https://feross.org/support"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "queue-microtask": "^1.2.2"
+      }
     },
     "node_modules/safe-buffer": {
       "version": "5.2.1",
@@ -6726,6 +9315,16 @@
       "integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==",
       "license": "MIT"
     },
+    "node_modules/sanitize-filename": {
+      "version": "1.6.4",
+      "resolved": "https://registry.npmjs.org/sanitize-filename/-/sanitize-filename-1.6.4.tgz",
+      "integrity": "sha512-9ZyI08PsvdQl2r/bBIGubpVdR3RR9sY6RDiWFPreA21C/EFlQhmgo20UZlNjZMMZNubusLhAQozkA0Od5J21Eg==",
+      "dev": true,
+      "license": "WTFPL OR ISC",
+      "dependencies": {
+        "truncate-utf8-bytes": "^1.0.0"
+      }
+    },
     "node_modules/sax": {
       "version": "1.4.1",
       "resolved": "https://registry.npmjs.org/sax/-/sax-1.4.1.tgz",
@@ -6742,6 +9341,14 @@
         "semver": "bin/semver"
       }
     },
+    "node_modules/semver-compare": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/semver-compare/-/semver-compare-1.0.0.tgz",
+      "integrity": "sha512-YM3/ITh2MJ5MtzaM429anh+x2jiLVjqILF4m4oyQB18W7Ggea7BfqdH/wGMK7dDiMghv/6WG7znWMwUDzJiXow==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true
+    },
     "node_modules/send": {
       "version": "0.19.0",
       "resolved": "https://registry.npmjs.org/send/-/send-0.19.0.tgz",
@@ -6802,90 +9409,35 @@
         "node": ">=4"
       }
     },
-    "node_modules/serve-index": {
-      "version": "1.9.1",
-      "resolved": "https://registry.npmjs.org/serve-index/-/serve-index-1.9.1.tgz",
-      "integrity": "sha512-pXHfKNP4qujrtteMrSBb0rc8HJ9Ms/GrXwcUtUtD5s4ewDJI8bT3Cz2zTVRMKtri49pLx2e0Ya8ziP5Ya2pZZw==",
+    "node_modules/serialize-error": {
+      "version": "7.0.1",
+      "resolved": "https://registry.npmjs.org/serialize-error/-/serialize-error-7.0.1.tgz",
+      "integrity": "sha512-8I8TjW5KMOKsZQTvoxjuSIa7foAwPWGOts+6o7sgjz41/qMD9VQHEDxi6PBvK2l0MXUmqZyNpUK+T2tQaaElvw==",
       "dev": true,
       "license": "MIT",
+      "optional": true,
       "dependencies": {
-        "accepts": "~1.3.4",
-        "batch": "0.6.1",
-        "debug": "2.6.9",
-        "escape-html": "~1.0.3",
-        "http-errors": "~1.6.2",
-        "mime-types": "~2.1.17",
-        "parseurl": "~1.3.2"
+        "type-fest": "^0.13.1"
       },
       "engines": {
-        "node": ">= 0.8.0"
-      }
-    },
-    "node_modules/serve-index/node_modules/debug": {
-      "version": "2.6.9",
-      "resolved": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
-      "integrity": "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "ms": "2.0.0"
-      }
-    },
-    "node_modules/serve-index/node_modules/depd": {
-      "version": "1.1.2",
-      "resolved": "https://registry.npmjs.org/depd/-/depd-1.1.2.tgz",
-      "integrity": "sha512-7emPTl6Dpo6JRXOXjLRxck+FlLRX5847cLKEn00PLAgc3g2hTZZgr+e4c2v6QpSmLeFP3n5yUo7ft6avBK/5jQ==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">= 0.6"
-      }
-    },
-    "node_modules/serve-index/node_modules/http-errors": {
-      "version": "1.6.3",
-      "resolved": "https://registry.npmjs.org/http-errors/-/http-errors-1.6.3.tgz",
-      "integrity": "sha512-lks+lVC8dgGyh97jxvxeYTWQFvh4uw4yC12gVl63Cg30sjPX4wuGcdkICVXDAESr6OJGjqGA8Iz5mkeN6zlD7A==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "depd": "~1.1.2",
-        "inherits": "2.0.3",
-        "setprototypeof": "1.1.0",
-        "statuses": ">= 1.4.0 < 2"
+        "node": ">=10"
       },
-      "engines": {
-        "node": ">= 0.6"
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
       }
     },
-    "node_modules/serve-index/node_modules/inherits": {
-      "version": "2.0.3",
-      "resolved": "https://registry.npmjs.org/inherits/-/inherits-2.0.3.tgz",
-      "integrity": "sha512-x00IRNXNy63jwGkJmzPigoySHbaqpNuzKbBOmzK+g2OdZpQ9w+sxCN+VSB3ja7IAge2OP2qpfxTjeNcyjmW1uw==",
-      "dev": true,
-      "license": "ISC"
-    },
-    "node_modules/serve-index/node_modules/ms": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
-      "integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==",
-      "dev": true,
-      "license": "MIT"
-    },
-    "node_modules/serve-index/node_modules/setprototypeof": {
-      "version": "1.1.0",
-      "resolved": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.1.0.tgz",
-      "integrity": "sha512-BvE/TwpZX4FXExxOxZyRGQQv651MSwmWKZGqvmPcRIjDqWub67kTKuIMx43cZZrS/cBBzwBcNDWoFxt2XEFIpQ==",
-      "dev": true,
-      "license": "ISC"
-    },
-    "node_modules/serve-index/node_modules/statuses": {
-      "version": "1.5.0",
-      "resolved": "https://registry.npmjs.org/statuses/-/statuses-1.5.0.tgz",
-      "integrity": "sha512-OpZ3zP+jT1PI7I8nemJX4AKmAX070ZkYPVWV/AaKTJl+tXCTGyVdC1a4SL8RUQYEwk/f34ZX8UTykN68FwrqAA==",
+    "node_modules/serialize-error/node_modules/type-fest": {
+      "version": "0.13.1",
+      "resolved": "https://registry.npmjs.org/type-fest/-/type-fest-0.13.1.tgz",
+      "integrity": "sha512-34R7HTnG0XIJcBSn5XhDd7nNFPRcXYRZrBB2O2jdKqYODldSzBAqzsWoZYYvduky73toYS/ESqxPvkDf/F0XMg==",
       "dev": true,
-      "license": "MIT",
+      "license": "(MIT OR CC0-1.0)",
+      "optional": true,
       "engines": {
-        "node": ">= 0.6"
+        "node": ">=10"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
       }
     },
     "node_modules/serve-static": {
@@ -6903,11 +9455,10 @@
         "node": ">= 0.8.0"
       }
     },
-    "node_modules/server-destroy": {
-      "version": "1.0.1",
-      "resolved": "https://registry.npmjs.org/server-destroy/-/server-destroy-1.0.1.tgz",
-      "integrity": "sha512-rb+9B5YBIEzYcD6x2VKidaa+cqYBJQKnU4oe4E3ANwRRN56yk/ua1YCJT1n21NTS8w6CcOclAKNP3PhdCXKYtQ==",
-      "dev": true,
+    "node_modules/set-blocking": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz",
+      "integrity": "sha512-KiKBS8AnWGEyLzofFfmvKwpdPzqiy16LvQfK3yv/fVH7Bj13/wl3JSR1J+rfgRE9q7xUJK4qvgS8raSOeLUehw==",
       "license": "ISC"
     },
     "node_modules/setprototypeof": {
@@ -7077,138 +9628,6 @@
         "npm": ">= 3.0.0"
       }
     },
-    "node_modules/socket.io": {
-      "version": "4.8.1",
-      "resolved": "https://registry.npmjs.org/socket.io/-/socket.io-4.8.1.tgz",
-      "integrity": "sha512-oZ7iUCxph8WYRHHcjBEc9unw3adt5CmSNlppj/5Q4k2RIrhl8Z5yY2Xr4j9zj0+wzVZ0bxmYoGSzKJnRl6A4yg==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "accepts": "~1.3.4",
-        "base64id": "~2.0.0",
-        "cors": "~2.8.5",
-        "debug": "~4.3.2",
-        "engine.io": "~6.6.0",
-        "socket.io-adapter": "~2.5.2",
-        "socket.io-parser": "~4.2.4"
-      },
-      "engines": {
-        "node": ">=10.2.0"
-      }
-    },
-    "node_modules/socket.io-adapter": {
-      "version": "2.5.5",
-      "resolved": "https://registry.npmjs.org/socket.io-adapter/-/socket.io-adapter-2.5.5.tgz",
-      "integrity": "sha512-eLDQas5dzPgOWCk9GuuJC2lBqItuhKI4uxGgo9aIV7MYbk2h9Q6uULEh8WBzThoI7l+qU9Ast9fVUmkqPP9wYg==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "debug": "~4.3.4",
-        "ws": "~8.17.1"
-      }
-    },
-    "node_modules/socket.io-adapter/node_modules/debug": {
-      "version": "4.3.7",
-      "resolved": "https://registry.npmjs.org/debug/-/debug-4.3.7.tgz",
-      "integrity": "sha512-Er2nc/H7RrMXZBFCEim6TCmMk02Z8vLC2Rbi1KEBggpo0fS6l0S1nnapwmIi3yW/+GOJap1Krg4w0Hg80oCqgQ==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "ms": "^2.1.3"
-      },
-      "engines": {
-        "node": ">=6.0"
-      },
-      "peerDependenciesMeta": {
-        "supports-color": {
-          "optional": true
-        }
-      }
-    },
-    "node_modules/socket.io-client": {
-      "version": "4.8.1",
-      "resolved": "https://registry.npmjs.org/socket.io-client/-/socket.io-client-4.8.1.tgz",
-      "integrity": "sha512-hJVXfu3E28NmzGk8o1sHhN3om52tRvwYeidbj7xKy2eIIse5IoKX3USlS6Tqt3BHAtflLIkCQBkzVrEEfWUyYQ==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "@socket.io/component-emitter": "~3.1.0",
-        "debug": "~4.3.2",
-        "engine.io-client": "~6.6.1",
-        "socket.io-parser": "~4.2.4"
-      },
-      "engines": {
-        "node": ">=10.0.0"
-      }
-    },
-    "node_modules/socket.io-client/node_modules/debug": {
-      "version": "4.3.7",
-      "resolved": "https://registry.npmjs.org/debug/-/debug-4.3.7.tgz",
-      "integrity": "sha512-Er2nc/H7RrMXZBFCEim6TCmMk02Z8vLC2Rbi1KEBggpo0fS6l0S1nnapwmIi3yW/+GOJap1Krg4w0Hg80oCqgQ==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "ms": "^2.1.3"
-      },
-      "engines": {
-        "node": ">=6.0"
-      },
-      "peerDependenciesMeta": {
-        "supports-color": {
-          "optional": true
-        }
-      }
-    },
-    "node_modules/socket.io-parser": {
-      "version": "4.2.4",
-      "resolved": "https://registry.npmjs.org/socket.io-parser/-/socket.io-parser-4.2.4.tgz",
-      "integrity": "sha512-/GbIKmo8ioc+NIWIhwdecY0ge+qVBSMdgxGygevmdHj24bsfgtCmcUUcQ5ZzcylGFHsN3k4HB4Cgkl96KVnuew==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "@socket.io/component-emitter": "~3.1.0",
-        "debug": "~4.3.1"
-      },
-      "engines": {
-        "node": ">=10.0.0"
-      }
-    },
-    "node_modules/socket.io-parser/node_modules/debug": {
-      "version": "4.3.7",
-      "resolved": "https://registry.npmjs.org/debug/-/debug-4.3.7.tgz",
-      "integrity": "sha512-Er2nc/H7RrMXZBFCEim6TCmMk02Z8vLC2Rbi1KEBggpo0fS6l0S1nnapwmIi3yW/+GOJap1Krg4w0Hg80oCqgQ==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "ms": "^2.1.3"
-      },
-      "engines": {
-        "node": ">=6.0"
-      },
-      "peerDependenciesMeta": {
-        "supports-color": {
-          "optional": true
-        }
-      }
-    },
-    "node_modules/socket.io/node_modules/debug": {
-      "version": "4.3.7",
-      "resolved": "https://registry.npmjs.org/debug/-/debug-4.3.7.tgz",
-      "integrity": "sha512-Er2nc/H7RrMXZBFCEim6TCmMk02Z8vLC2Rbi1KEBggpo0fS6l0S1nnapwmIi3yW/+GOJap1Krg4w0Hg80oCqgQ==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "ms": "^2.1.3"
-      },
-      "engines": {
-        "node": ">=6.0"
-      },
-      "peerDependenciesMeta": {
-        "supports-color": {
-          "optional": true
-        }
-      }
-    },
     "node_modules/socks": {
       "version": "2.8.7",
       "resolved": "https://registry.npmjs.org/socks/-/socks-2.8.7.tgz",
@@ -7267,6 +9686,16 @@
         "node": ">=0.10.0"
       }
     },
+    "node_modules/source-map-js": {
+      "version": "1.2.2",
+      "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.2.tgz",
+      "integrity": "sha512-KGj/8Y43x35aZVDtt+J4mK1hoLGHULMYfSkODJNQjNDC3oW1PqPoxMwo0pLUsWM/UEGzON/NxeHywEfNXNP3Vw==",
+      "dev": true,
+      "license": "BSD-3-Clause",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
     "node_modules/source-map-support": {
       "version": "0.5.13",
       "resolved": "https://registry.npmjs.org/source-map-support/-/source-map-support-0.5.13.tgz",
@@ -7307,30 +9736,23 @@
         "node": ">=10"
       }
     },
-    "node_modules/statuses": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/statuses/-/statuses-2.0.1.tgz",
-      "integrity": "sha512-RwNA9Z/7PrK06rYLIzFMlaF+l73iwpzsqRIFgbMLbTcLD6cOao82TaWefPXQvB2fOC4AjuYSEndS7N/mTCbkdQ==",
+    "node_modules/stat-mode": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/stat-mode/-/stat-mode-1.0.0.tgz",
+      "integrity": "sha512-jH9EhtKIjuXZ2cWxmXS8ZP80XyC3iasQxMDV8jzhNJpfDb7VbQLVW4Wvsxz9QZvzV+G4YoSfBUVKDOyxLzi/sg==",
+      "dev": true,
       "license": "MIT",
       "engines": {
-        "node": ">= 0.8"
+        "node": ">= 6"
       }
     },
-    "node_modules/stream-throttle": {
-      "version": "0.1.3",
-      "resolved": "https://registry.npmjs.org/stream-throttle/-/stream-throttle-0.1.3.tgz",
-      "integrity": "sha512-889+B9vN9dq7/vLbGyuHeZ6/ctf5sNuGWsDy89uNxkFTAgzy0eK7+w5fL3KLNRTkLle7EgZGvHUphZW0Q26MnQ==",
-      "dev": true,
-      "license": "BSD-3-Clause",
-      "dependencies": {
-        "commander": "^2.2.0",
-        "limiter": "^1.0.5"
-      },
-      "bin": {
-        "throttleproxy": "bin/throttleproxy.js"
-      },
+    "node_modules/statuses": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/statuses/-/statuses-2.0.1.tgz",
+      "integrity": "sha512-RwNA9Z/7PrK06rYLIzFMlaF+l73iwpzsqRIFgbMLbTcLD6cOao82TaWefPXQvB2fOC4AjuYSEndS7N/mTCbkdQ==",
+      "license": "MIT",
       "engines": {
-        "node": ">= 0.10.0"
+        "node": ">= 0.8"
       }
     },
     "node_modules/streamsearch": {
@@ -7382,7 +9804,6 @@
       "version": "4.2.3",
       "resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz",
       "integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==",
-      "dev": true,
       "license": "MIT",
       "dependencies": {
         "emoji-regex": "^8.0.0",
@@ -7413,7 +9834,6 @@
       "version": "6.0.1",
       "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz",
       "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==",
-      "dev": true,
       "license": "MIT",
       "dependencies": {
         "ansi-regex": "^5.0.1"
@@ -7469,6 +9889,70 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
+    "node_modules/sucrase": {
+      "version": "3.35.1",
+      "resolved": "https://registry.npmjs.org/sucrase/-/sucrase-3.35.1.tgz",
+      "integrity": "sha512-DhuTmvZWux4H1UOnWMB3sk0sbaCVOoQZjv8u1rDoTV0HTdGem9hkAZtl4JZy8P2z4Bg0nT+YMeOFyVr4zcG5Tw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@jridgewell/gen-mapping": "^0.3.2",
+        "commander": "^4.0.0",
+        "lines-and-columns": "^1.1.6",
+        "mz": "^2.7.0",
+        "pirates": "^4.0.1",
+        "tinyglobby": "^0.2.11",
+        "ts-interface-checker": "^0.1.9"
+      },
+      "bin": {
+        "sucrase": "bin/sucrase",
+        "sucrase-node": "bin/sucrase-node"
+      },
+      "engines": {
+        "node": ">=16 || 14 >=14.17"
+      }
+    },
+    "node_modules/sucrase/node_modules/commander": {
+      "version": "4.1.1",
+      "resolved": "https://registry.npmjs.org/commander/-/commander-4.1.1.tgz",
+      "integrity": "sha512-NOKm8xhkzAjzFx8B2v5OAHT+u5pRQc2UCa2Vq9jYL/31o2wi9mxBA7LIFs3sV5VSC49z6pEhfbMULvShKj26WA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">= 6"
+      }
+    },
+    "node_modules/sumchecker": {
+      "version": "3.0.1",
+      "resolved": "https://registry.npmjs.org/sumchecker/-/sumchecker-3.0.1.tgz",
+      "integrity": "sha512-MvjXzkz/BOfyVDkG0oFOtBxHX2u3gKbMHIF/dXblZsgD3BWOFLmHovIpZY7BykJdAjcqRCBi1WYBNdEC9yI7vg==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "dependencies": {
+        "debug": "^4.1.0"
+      },
+      "engines": {
+        "node": ">= 8.0"
+      }
+    },
+    "node_modules/sumchecker/node_modules/debug": {
+      "version": "4.4.3",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
+      "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "ms": "^2.1.3"
+      },
+      "engines": {
+        "node": ">=6.0"
+      },
+      "peerDependenciesMeta": {
+        "supports-color": {
+          "optional": true
+        }
+      }
+    },
     "node_modules/superagent": {
       "version": "10.3.0",
       "resolved": "https://registry.npmjs.org/superagent/-/superagent-10.3.0.tgz",
@@ -7546,6 +10030,19 @@
         "node": ">=4"
       }
     },
+    "node_modules/supports-preserve-symlinks-flag": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/supports-preserve-symlinks-flag/-/supports-preserve-symlinks-flag-1.0.0.tgz",
+      "integrity": "sha512-ot0WnXS9fgdkgIcePe6RHNk1WA8+muPa6cSjeR3V8K27q9BB1rTE3R1p7Hv0z1ZyAc8s6Vvv8DIyWf681MAt0w==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
     "node_modules/synckit": {
       "version": "0.11.12",
       "resolved": "https://registry.npmjs.org/synckit/-/synckit-0.11.12.tgz",
@@ -7562,6 +10059,74 @@
         "url": "https://opencollective.com/synckit"
       }
     },
+    "node_modules/tailwindcss": {
+      "version": "3.4.19",
+      "resolved": "https://registry.npmjs.org/tailwindcss/-/tailwindcss-3.4.19.tgz",
+      "integrity": "sha512-3ofp+LL8E+pK/JuPLPggVAIaEuhvIz4qNcf3nA1Xn2o/7fb7s/TYpHhwGDv1ZU3PkBluUVaF8PyCHcm48cKLWQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@alloc/quick-lru": "^5.2.0",
+        "arg": "^5.0.2",
+        "chokidar": "^3.6.0",
+        "didyoumean": "^1.2.2",
+        "dlv": "^1.1.3",
+        "fast-glob": "^3.3.2",
+        "glob-parent": "^6.0.2",
+        "is-glob": "^4.0.3",
+        "jiti": "^1.21.7",
+        "lilconfig": "^3.1.3",
+        "micromatch": "^4.0.8",
+        "normalize-path": "^3.0.0",
+        "object-hash": "^3.0.0",
+        "picocolors": "^1.1.1",
+        "postcss": "^8.4.47",
+        "postcss-import": "^15.1.0",
+        "postcss-js": "^4.0.1",
+        "postcss-load-config": "^4.0.2 || ^5.0 || ^6.0",
+        "postcss-nested": "^6.2.0",
+        "postcss-selector-parser": "^6.1.2",
+        "resolve": "^1.22.8",
+        "sucrase": "^3.35.0"
+      },
+      "bin": {
+        "tailwind": "lib/cli.js",
+        "tailwindcss": "lib/cli.js"
+      },
+      "engines": {
+        "node": ">=14.0.0"
+      }
+    },
+    "node_modules/tailwindcss/node_modules/glob-parent": {
+      "version": "6.0.2",
+      "resolved": "https://registry.npmjs.org/glob-parent/-/glob-parent-6.0.2.tgz",
+      "integrity": "sha512-XxwI8EOhVQgWp6iDL+3b0r86f4d6AX6zSU55HfB4ydCEuXLXc5FcYeOu+nnGftS4TEju/11rt4KJPTMgbfmv4A==",
+      "dev": true,
+      "license": "ISC",
+      "dependencies": {
+        "is-glob": "^4.0.3"
+      },
+      "engines": {
+        "node": ">=10.13.0"
+      }
+    },
+    "node_modules/tar": {
+      "version": "7.5.22",
+      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.22.tgz",
+      "integrity": "sha512-MFO/QzvtAOmJbkhOaCTvbGcFN9L9b+JunIsDwaKljSOdcLMea3NJ1k9Usz/rjdfSXTq4dfzfeS7W4p4YOAAHeA==",
+      "dev": true,
+      "license": "BlueOak-1.0.0",
+      "dependencies": {
+        "@isaacs/fs-minipass": "^4.0.0",
+        "chownr": "^3.0.0",
+        "minipass": "^7.1.2",
+        "minizlib": "^3.1.0",
+        "yallist": "^5.0.0"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
     "node_modules/tar-fs": {
       "version": "3.1.0",
       "resolved": "https://registry.npmjs.org/tar-fs/-/tar-fs-3.1.0.tgz",
@@ -7589,6 +10154,57 @@
         "streamx": "^2.15.0"
       }
     },
+    "node_modules/tar/node_modules/yallist": {
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/yallist/-/yallist-5.0.0.tgz",
+      "integrity": "sha512-YgvUTfwqyc7UXVMrB+SImsVYSmTS8X/tSrtdNZMImM+n7+QTriRXyXim0mBrTXNeqzVF0KWGgHPeiyViFFrNDw==",
+      "dev": true,
+      "license": "BlueOak-1.0.0",
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/temp": {
+      "version": "0.9.4",
+      "resolved": "https://registry.npmjs.org/temp/-/temp-0.9.4.tgz",
+      "integrity": "sha512-yYrrsWnrXMcdsnu/7YMYAofM1ktpL5By7vZhf15CrXijWWrEYZks5AXBudalfSWJLlnen/QUJUB5aoB0kqZUGA==",
+      "dev": true,
+      "license": "MIT",
+      "peer": true,
+      "dependencies": {
+        "mkdirp": "^0.5.1",
+        "rimraf": "~2.6.2"
+      },
+      "engines": {
+        "node": ">=6.0.0"
+      }
+    },
+    "node_modules/temp-file": {
+      "version": "3.4.0",
+      "resolved": "https://registry.npmjs.org/temp-file/-/temp-file-3.4.0.tgz",
+      "integrity": "sha512-C5tjlC/HCtVUOi3KWVokd4vHVViOmGjtLwIh4MuzPo/nMYTV/p1urt3RnMz2IWXDdKEGJH3k5+KPxtqRsUYGtg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "async-exit-hook": "^2.0.1",
+        "fs-extra": "^10.0.0"
+      }
+    },
+    "node_modules/temp-file/node_modules/fs-extra": {
+      "version": "10.1.0",
+      "resolved": "https://registry.npmjs.org/fs-extra/-/fs-extra-10.1.0.tgz",
+      "integrity": "sha512-oRXApq54ETRj4eMiFzGnHWGy+zo5raudjuxN0b8H7s/RU2oW0Wvsx9O0ACRN/kRq9E8Vu/ReskGB5o3ji+FzHQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "graceful-fs": "^4.2.0",
+        "jsonfile": "^6.0.1",
+        "universalify": "^2.0.0"
+      },
+      "engines": {
+        "node": ">=12"
+      }
+    },
     "node_modules/test-exclude": {
       "version": "6.0.0",
       "resolved": "https://registry.npmjs.org/test-exclude/-/test-exclude-6.0.0.tgz",
@@ -7642,6 +10258,107 @@
       "integrity": "sha512-uuVGNWzgJ4yhRaNSiubPY7OjISw4sw4E5Uv0wbjp+OzcbmVU/rsT8ujgcXJhn9ypzsgr5vlzpPqP+MBBKcGvbg==",
       "license": "MIT"
     },
+    "node_modules/thenify": {
+      "version": "3.3.1",
+      "resolved": "https://registry.npmjs.org/thenify/-/thenify-3.3.1.tgz",
+      "integrity": "sha512-RVZSIV5IG10Hk3enotrhvz0T9em6cyHBLkH/YAZuKqd8hRkKhSfCGIcP2KUY0EPxndzANBmNllzWPwak+bheSw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "any-promise": "^1.0.0"
+      }
+    },
+    "node_modules/thenify-all": {
+      "version": "1.6.0",
+      "resolved": "https://registry.npmjs.org/thenify-all/-/thenify-all-1.6.0.tgz",
+      "integrity": "sha512-RNxQH/qI8/t3thXJDwcstUO4zeqo64+Uy/+sNVRBx4Xn2OX+OZ9oP+iJnNFqplFra2ZUVeKCSa2oVWi3T4uVmA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "thenify": ">= 3.1.0 < 4"
+      },
+      "engines": {
+        "node": ">=0.8"
+      }
+    },
+    "node_modules/tiny-async-pool": {
+      "version": "1.3.0",
+      "resolved": "https://registry.npmjs.org/tiny-async-pool/-/tiny-async-pool-1.3.0.tgz",
+      "integrity": "sha512-01EAw5EDrcVrdgyCLgoSPvqznC0sVxDSVeiOz09FUpjh71G79VCqneOr+xvt7T1r76CF6ZZfPjHorN2+d+3mqA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "semver": "^5.5.0"
+      }
+    },
+    "node_modules/tinyglobby": {
+      "version": "0.2.17",
+      "resolved": "https://registry.npmjs.org/tinyglobby/-/tinyglobby-0.2.17.tgz",
+      "integrity": "sha512-wXR/dYpcqKmfWpEdZjiKJOwCNFndD0DMnrW/cYjVGttEkBfVgcLFHoNrlj47mjOVic9yyNu65alsgF4NQyTa2g==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "fdir": "^6.5.0",
+        "picomatch": "^4.0.4"
+      },
+      "engines": {
+        "node": ">=12.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/SuperchupuDev"
+      }
+    },
+    "node_modules/tinyglobby/node_modules/fdir": {
+      "version": "6.5.0",
+      "resolved": "https://registry.npmjs.org/fdir/-/fdir-6.5.0.tgz",
+      "integrity": "sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=12.0.0"
+      },
+      "peerDependencies": {
+        "picomatch": "^3 || ^4"
+      },
+      "peerDependenciesMeta": {
+        "picomatch": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/tinyglobby/node_modules/picomatch": {
+      "version": "4.0.7",
+      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.7.tgz",
+      "integrity": "sha512-qcJu88Q2IWqJsDD529JKMdwGm/dvInW4HvQnRwiH9JtihJvzGOscDtHE3x1pBKeUOTysQ8kVmLnJ2kJu7yhcGA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/jonschlinkert"
+      }
+    },
+    "node_modules/tmp": {
+      "version": "0.2.7",
+      "resolved": "https://registry.npmjs.org/tmp/-/tmp-0.2.7.tgz",
+      "integrity": "sha512-e0votIpp4Uo2AJYSzVHV6xCcawuiez3DzqDAbrTc3YxBkplN6e+dM13ZeIcZnDg/QpSuU2zfZ3rzwY8ukEnaXw==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=14.14"
+      }
+    },
+    "node_modules/tmp-promise": {
+      "version": "3.0.3",
+      "resolved": "https://registry.npmjs.org/tmp-promise/-/tmp-promise-3.0.3.tgz",
+      "integrity": "sha512-RwM7MoPojPxsOBYnyd2hy0bxtIlVrihNs9pj5SUvY8Zz1sQcQG2tG1hSr8PDxfgEB8RNKDhqbIlroIarSNDNsQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "tmp": "^0.2.0"
+      }
+    },
     "node_modules/tmpl": {
       "version": "1.0.5",
       "resolved": "https://registry.npmjs.org/tmpl/-/tmpl-1.0.5.tgz",
@@ -7690,6 +10407,23 @@
         "node": ">= 14.0.0"
       }
     },
+    "node_modules/truncate-utf8-bytes": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/truncate-utf8-bytes/-/truncate-utf8-bytes-1.0.2.tgz",
+      "integrity": "sha512-95Pu1QXQvruGEhv62XCMO3Mm90GscOCClvrIUwCM0PYOXK3kaF3l3sIHxx71ThJfcbM2O5Au6SO3AWCSEfW4mQ==",
+      "dev": true,
+      "license": "WTFPL",
+      "dependencies": {
+        "utf8-byte-length": "^1.0.1"
+      }
+    },
+    "node_modules/ts-interface-checker": {
+      "version": "0.1.13",
+      "resolved": "https://registry.npmjs.org/ts-interface-checker/-/ts-interface-checker-0.1.13.tgz",
+      "integrity": "sha512-Y/arvbn+rrz3JCKl9C4kVNfTfSm2/mEp5FSz5EsZSANGPSlQrpRI5M4PKF+mJnE52jOO90PnPSc3Ur3bTQw0gA==",
+      "dev": true,
+      "license": "Apache-2.0"
+    },
     "node_modules/tslib": {
       "version": "2.8.1",
       "resolved": "https://registry.npmjs.org/tslib/-/tslib-2.8.1.tgz",
@@ -7746,33 +10480,6 @@
       "integrity": "sha512-/aCDEGatGvZ2BIk+HmLf4ifCJFwvKFNb9/JeZPMulfgFracn9QFcAf5GO8B/mweUjSoblS5In0cWhqpfs/5PQA==",
       "license": "MIT"
     },
-    "node_modules/ua-parser-js": {
-      "version": "1.0.41",
-      "resolved": "https://registry.npmjs.org/ua-parser-js/-/ua-parser-js-1.0.41.tgz",
-      "integrity": "sha512-LbBDqdIC5s8iROCUjMbW1f5dJQTEFB1+KO9ogbvlb3nm9n4YHa5p4KTvFPWvh2Hs8gZMBuiB1/8+pdfe/tDPug==",
-      "dev": true,
-      "funding": [
-        {
-          "type": "opencollective",
-          "url": "https://opencollective.com/ua-parser-js"
-        },
-        {
-          "type": "paypal",
-          "url": "https://paypal.me/faisalman"
-        },
-        {
-          "type": "github",
-          "url": "https://github.com/sponsors/faisalman"
-        }
-      ],
-      "license": "MIT",
-      "bin": {
-        "ua-parser-js": "script/cli.js"
-      },
-      "engines": {
-        "node": "*"
-      }
-    },
     "node_modules/undefsafe": {
       "version": "2.0.5",
       "resolved": "https://registry.npmjs.org/undefsafe/-/undefsafe-2.0.5.tgz",
@@ -7780,10 +10487,21 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/undici": {
+      "version": "7.30.1",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-7.30.1.tgz",
+      "integrity": "sha512-03KrMbjIFDWQR5RNPrSw3bd1r12JpyFQl9/yxjUbJtqkjmllqC5lFjZh6ujeuJCKr8EOQvRW872Oy/az+nLYxg==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "engines": {
+        "node": ">=20.18.1"
+      }
+    },
     "node_modules/undici-types": {
-      "version": "7.10.0",
-      "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-7.10.0.tgz",
-      "integrity": "sha512-t5Fy/nfn+14LuOc2KNYg75vZqClpAiqscVvMygNnlsHBFpSXdJaYtXMcdNLpl/Qvc3P2cB3s6lOV51nqsFq4ag==",
+      "version": "7.24.6",
+      "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-7.24.6.tgz",
+      "integrity": "sha512-WRNW+sJgj5OBN4/0JpHFqtqzhpbnV0GuB+OozA9gCL7a993SmU+1JBZCzLNxYsbMfIeDL+lTsphD5jN5N+n0zg==",
       "dev": true,
       "license": "MIT"
     },
@@ -7840,6 +10558,20 @@
         "@unrs/resolver-binding-win32-x64-msvc": "1.11.1"
       }
     },
+    "node_modules/unzipper": {
+      "version": "0.12.5",
+      "resolved": "https://registry.npmjs.org/unzipper/-/unzipper-0.12.5.tgz",
+      "integrity": "sha512-tXYOi9R57Uj/2Z25SOs5RRSzq886MBQj2gY8dPL+xl/kv6s6SvByoKfAtvfVeEuhntWDgjd2o9p2lb4TVPAz0A==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "bluebird": "~3.7.2",
+        "duplexer2": "~0.1.4",
+        "fs-extra": "11.3.1",
+        "graceful-fs": "^4.2.2",
+        "node-int64": "^0.4.0"
+      }
+    },
     "node_modules/update-browserslist-db": {
       "version": "1.2.3",
       "resolved": "https://registry.npmjs.org/update-browserslist-db/-/update-browserslist-db-1.2.3.tgz",
@@ -7871,6 +10603,13 @@
         "browserslist": ">= 4.21.0"
       }
     },
+    "node_modules/utf8-byte-length": {
+      "version": "1.0.5",
+      "resolved": "https://registry.npmjs.org/utf8-byte-length/-/utf8-byte-length-1.0.5.tgz",
+      "integrity": "sha512-Xn0w3MtiQ6zoz2vFyUVruaCL53O/DwUvkEeOvj+uulMm0BkUGYWmBYVyElqZaSLhY6ZD0ulfU3aBra2aVT4xfA==",
+      "dev": true,
+      "license": "(WTFPL OR MIT)"
+    },
     "node_modules/util-deprecate": {
       "version": "1.0.2",
       "resolved": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz",
@@ -7929,6 +10668,20 @@
         "node": ">= 8"
       }
     },
+    "node_modules/webcrypto-core": {
+      "version": "1.9.2",
+      "resolved": "https://registry.npmjs.org/webcrypto-core/-/webcrypto-core-1.9.2.tgz",
+      "integrity": "sha512-gsXecm82UQNlTBURJGuqOWy1Ww08S3kZUcr3aOJS02Pk0xLtkfeUAVC0u0xhgdonFme80edSJUIJyuvL/7250Q==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@peculiar/asn1-schema": "^2.7.0",
+        "@peculiar/json-schema": "^1.1.12",
+        "@peculiar/utils": "^2.0.2",
+        "asn1js": "^3.0.10",
+        "tslib": "^2.8.1"
+      }
+    },
     "node_modules/which": {
       "version": "2.0.2",
       "resolved": "https://registry.npmjs.org/which/-/which-2.0.2.tgz",
@@ -7945,6 +10698,12 @@
         "node": ">= 8"
       }
     },
+    "node_modules/which-module": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/which-module/-/which-module-2.0.1.tgz",
+      "integrity": "sha512-iBdZ57RDvnOR9AGBhML2vFZf7h8vmBjhoaZqODJBFWHVtKkDmKuHai3cx5PgVMrX5YDNp27AofYbAwctSS+vhQ==",
+      "license": "ISC"
+    },
     "node_modules/winston": {
       "version": "3.17.0",
       "resolved": "https://registry.npmjs.org/winston/-/winston-3.17.0.tgz",
@@ -8057,28 +10816,6 @@
         "node": "^14.17.0 || ^16.13.0 || >=18.0.0"
       }
     },
-    "node_modules/ws": {
-      "version": "8.17.1",
-      "resolved": "https://registry.npmjs.org/ws/-/ws-8.17.1.tgz",
-      "integrity": "sha512-6XQFvXTkbfUOZOKKILFG1PDK2NDQs4azKQl26T0YS5CxqWLgXajbPZ+h4gZekJyRqFU8pvnbAbbs/3TgRPy+GQ==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=10.0.0"
-      },
-      "peerDependencies": {
-        "bufferutil": "^4.0.1",
-        "utf-8-validate": ">=5.0.2"
-      },
-      "peerDependenciesMeta": {
-        "bufferutil": {
-          "optional": true
-        },
-        "utf-8-validate": {
-          "optional": true
-        }
-      }
-    },
     "node_modules/xml2js": {
       "version": "0.6.2",
       "resolved": "https://registry.npmjs.org/xml2js/-/xml2js-0.6.2.tgz",
@@ -8101,15 +10838,6 @@
         "node": ">=4.0"
       }
     },
-    "node_modules/xmlhttprequest-ssl": {
-      "version": "2.1.2",
-      "resolved": "https://registry.npmjs.org/xmlhttprequest-ssl/-/xmlhttprequest-ssl-2.1.2.tgz",
-      "integrity": "sha512-TEU+nJVUUnA4CYJFLvK5X9AOeH4KvDvhIfm0vV1GaQRtchnG0hgK5p8hw/xjv8cunWYCsiPCSDzObPyhEwq3KQ==",
-      "dev": true,
-      "engines": {
-        "node": ">=0.4.0"
-      }
-    },
     "node_modules/xtend": {
       "version": "4.0.2",
       "resolved": "https://registry.npmjs.org/xtend/-/xtend-4.0.2.tgz",
diff --git a/package.json b/package.json
index 27bf724..9e4b82f 100644
--- a/package.json
+++ b/package.json
@@ -1,8 +1,8 @@
 {
   "name": "lanstreamer-server",
-  "version": "1.2.4",
+  "version": "2.0.0",
   "description": "Backend server for the LANStreamer application.",
-  "main": "src/server.js",
+  "main": "electron/main.js",
   "type": "module",
   "scripts": {
     "start": "title LANStreamer Server && node src/server.js",
@@ -10,9 +10,47 @@
     "dev:simple": "nodemon src/server.js",
     "test": "node --experimental-vm-modules node_modules/jest/bin/jest.js",
     "test:coverage": "node --experimental-vm-modules node_modules/jest/bin/jest.js --coverage",
+    "build:css": "tailwindcss -i src/tailwind.css -o public/assets/vendor/tailwind.css --minify",
+    "vendor:fonts": "node scripts/vendor-fonts.mjs",
+    "electron:dev": "electron electron/main.js",
+    "electron:smoke": "electron electron/main.js --smoke",
+    "electron:build:win": "node scripts/fetch-vendor-binaries.mjs && node scripts/prepare-telemetry-key.mjs && electron-builder --win nsis portable",
     "setup": "node scripts/setup.js",
     "screenshots": "node scripts/generate-screenshots.js"
   },
+  "build": {
+    "appId": "com.lanstreamer.app",
+    "productName": "LANStreamer",
+    "files": [
+      "electron/**",
+      "src/**",
+      "public/**",
+      "package.json",
+      "README.md"
+    ],
+    "extraResources": [
+      {
+        "from": "vendor",
+        "to": "vendor"
+      }
+    ],
+    "electronLanguages": [
+      "en-US"
+    ],
+    "directories": {
+      "output": "release"
+    },
+    "win": {
+      "icon": "electron/icon.ico"
+    },
+    "portable": {
+      "artifactName": "LANStreamer Standalone ${version}.${ext}"
+    },
+    "nsis": {
+      "oneClick": true,
+      "perMachine": false
+    }
+  },
   "keywords": [
     "streaming",
     "audio",
@@ -28,16 +66,22 @@
     "jsonwebtoken": "^9.0.2",
     "multer": "^2.0.2",
     "node-fetch": "^3.3.2",
+    "posthog-node": "^5.56.4",
+    "qrcode": "^1.5.4",
     "winston": "^3.17.0",
     "winston-daily-rotate-file": "^5.0.0",
     "xml2js": "^0.6.2"
   },
   "devDependencies": {
+    "@tailwindcss/container-queries": "^0.1.1",
+    "@tailwindcss/forms": "^0.5.11",
     "@types/jest": "^30.0.0",
-    "browser-sync": "^3.0.4",
+    "electron": "^45.0.0",
+    "electron-builder": "^26.18.0",
     "jest": "^30.2.0",
     "nodemon": "^2.0.0",
     "puppeteer": "^24.0.0",
-    "supertest": "^7.2.2"
+    "supertest": "^7.2.2",
+    "tailwindcss": "^3.4.19"
   }
 }
diff --git a/public/assets/css/tokens.css b/public/assets/css/tokens.css
new file mode 100644
index 0000000..690f2b2
--- /dev/null
+++ b/public/assets/css/tokens.css
@@ -0,0 +1,265 @@
+/* ============================================================================
+   LANStreamer design tokens — single source of truth for theming.
+
+   Dark (default) + light via [data-theme="light"] on <html>.
+   Direction (Stemtracks ref, dribbble.com/shots/25182834): near-black surfaces,
+   hairline borders, ONE accent, pill buttons, uppercase micro-labels, subtle
+   glow on interactive elements. Restraint over glassmorphism.
+
+   Migration note: the "legacy var remap" + "theme shims" sections keep the
+   existing markup working under both themes while it is migrated to these
+   tokens. Delete shims as components adopt .tok-* classes.
+   ========================================================================== */
+
+:root {
+  /* Native form controls (select popups, scrollbars) follow the active theme;
+     without this Windows renders dark-styled dropdowns as black-on-black. */
+  color-scheme: dark;
+  /* Surfaces (designer palette, 2026-10-28 redesign) */
+  --tok-bg: #07090D;            /* app background — near black */
+  --tok-surface-1: #0E1117;     /* cards */
+  --tok-surface-2: #141821;     /* raised / hover */
+  --tok-surface-inset: #0A0D12; /* wells, code, inset panels */
+
+  /* Text */
+  --tok-text-1: #EEF1F6;
+  --tok-text-2: #97A0B0;
+  --tok-text-3: #636C7C;
+
+  /* Lines + accents */
+  --tok-line: rgba(255, 255, 255, 0.07);        /* hairline borders */
+  --tok-line-strong: rgba(255, 255, 255, 0.13);
+  --tok-accent: #1AA6F5;                         /* LANStreamer blue */
+  --tok-accent-strong: #0C86D6;
+  --tok-accent-soft: rgba(26, 166, 245, 0.13);
+  --tok-accent-contrast: #03121C;                /* dark text on the bright blue */
+  --tok-accent-glow: 0 8px 24px -8px rgba(26, 166, 245, 0.5);
+
+  /* Semantic */
+  --tok-live: #2BD46A;
+  --tok-live-dim: rgba(43, 212, 106, 0.12);
+  --tok-warning: #F5A524;                        /* separate from danger (was danger-coloured) */
+  --tok-warning-dim: rgba(245, 165, 36, 0.13);
+  --tok-danger: #F2555A;
+  --tok-danger-dim: rgba(242, 85, 90, 0.12);
+  --tok-onair: #FF4A3B;                          /* reserved: the ON AIR badge only */
+
+  /* Type */
+  --tok-font: "Space Grotesk", Inter, system-ui, sans-serif;
+  --tok-mono: "JetBrains Mono", ui-monospace, SFMono-Regular, Menlo, monospace;
+
+  /* Shape + depth */
+  --tok-radius-card: 14px;
+  --tok-radius-input: 10px;
+  --tok-radius-btn: 10px;      /* designer moved off pill buttons */
+  --tok-shadow-card: 0 1px 0 rgba(255,255,255,0.03) inset, 0 10px 30px -14px rgba(0,0,0,0.7);
+  --tok-shadow-pop: 0 12px 40px -10px rgba(0, 0, 0, 0.65);
+
+  /* Motion */
+  --tok-ease: cubic-bezier(0.4, 0, 0.2, 1);
+  --tok-speed: 180ms;
+
+  /* Legacy var remap (existing markup reads these) */
+  --primary-color: var(--tok-accent);
+  --live-color: var(--tok-live);
+  --warning-color: var(--tok-warning);
+  --dark-bg: var(--tok-bg);
+  --card-bg: var(--tok-surface-1);
+  --border-color: var(--tok-line);
+}
+
+/* --------------------------------------------------------------------------
+   Light theme
+   -------------------------------------------------------------------------- */
+[data-theme="light"] {
+  color-scheme: light;
+  --tok-bg: #F4F5F8;
+  --tok-surface-1: #FFFFFF;
+  --tok-surface-2: #EEF0F3;
+  --tok-surface-inset: #E6E9EE;
+
+  --tok-text-1: #0E1420;
+  --tok-text-2: #5A6475;
+  --tok-text-3: #8A93A3;
+
+  --tok-line: rgba(14, 20, 32, 0.09);
+  --tok-line-strong: rgba(14, 20, 32, 0.16);
+  --tok-accent: #0A84D6;
+  --tok-accent-strong: #0868AA;
+  --tok-accent-soft: rgba(10, 132, 214, 0.10);
+  --tok-accent-contrast: #FFFFFF;
+  --tok-accent-glow: 0 8px 24px -10px rgba(10, 132, 214, 0.4);
+
+  --tok-live: #14A34D;
+  --tok-live-dim: rgba(20, 163, 77, 0.12);
+  --tok-warning: #D98A04;
+  --tok-warning-dim: rgba(217, 138, 4, 0.12);
+  --tok-danger: #D93025;
+  --tok-danger-dim: rgba(217, 48, 37, 0.10);
+  --tok-onair: #E5372B;
+
+  --tok-shadow-card: 0 1px 2px rgba(14,23,42,0.04), 0 8px 24px -12px rgba(14,23,42,0.12);
+  --tok-shadow-pop: 0 16px 44px -12px rgba(14, 23, 42, 0.25);
+}
+
+/* --------------------------------------------------------------------------
+   Button system (adopt on new + redesigned markup)
+   -------------------------------------------------------------------------- */
+.btn {
+  display: inline-flex; align-items: center; justify-content: center; gap: 0.5rem;
+  min-height: 40px; /* 44px touch target with padding */
+  padding: 0 1.25rem;
+  border-radius: var(--tok-radius-btn);
+  font-size: 0.875rem; font-weight: 600; letter-spacing: 0.01em;
+  border: 1px solid transparent;
+  cursor: pointer;
+  transition: all var(--tok-speed) var(--tok-ease);
+  white-space: nowrap;
+}
+.btn:focus-visible { outline: 2px solid var(--tok-accent); outline-offset: 2px; }
+.btn:disabled { opacity: 0.5; cursor: not-allowed; }
+
+.btn-primary {
+  background: var(--tok-accent);
+  color: var(--tok-accent-contrast);
+  box-shadow: var(--tok-accent-glow);
+}
+.btn-primary:hover:not(:disabled) { filter: brightness(1.08); }
+
+.btn-secondary {
+  background: var(--tok-surface-1);
+  color: var(--tok-text-1);
+  border-color: var(--tok-line-strong);
+  box-shadow: none;
+}
+.btn-secondary:hover:not(:disabled) { background: var(--tok-surface-2); border-color: var(--tok-accent); }
+
+.btn-ghost {
+  background: transparent;
+  color: var(--tok-text-2);
+}
+.btn-ghost:hover:not(:disabled) { color: var(--tok-text-1); background: var(--tok-surface-2); }
+
+.btn-danger {
+  background: transparent;
+  color: var(--tok-danger);
+  border-color: color-mix(in oklab, var(--tok-danger) 35%, transparent);
+}
+.btn-danger:hover:not(:disabled) { background: var(--tok-danger-dim); }
+
+/* Micro label — mono, uppercase, tracked (eyebrow) */
+.tok-label {
+  font-family: var(--tok-mono);
+  font-size: 0.6875rem; font-weight: 500; letter-spacing: 0.08em;
+  text-transform: uppercase; color: var(--tok-text-3);
+}
+.mono { font-family: var(--tok-mono); font-size: 0.75rem; letter-spacing: 0.01em; }
+
+/* --------------------------------------------------------------------------
+   Theme shims — make existing dark-hardcoded markup usable in light mode.
+   REMOVE each line as the component adopts tokens.
+   -------------------------------------------------------------------------- */
+[data-theme="light"] .text-white { color: var(--tok-text-1); }
+[data-theme="light"] .text-gray-300 { color: var(--tok-text-2); }
+[data-theme="light"] .text-gray-400 { color: var(--tok-text-2); }
+[data-theme="light"] .text-gray-500 { color: var(--tok-text-3); }
+[data-theme="light"] .bg-black\/50,
+[data-theme="light"] .bg-black\/60 { background-color: rgba(15, 23, 42, 0.45); }
+[data-theme="light"] .bg-gray-700 { background-color: var(--tok-line-strong); }
+[data-theme="light"] .border-gray-600 { border-color: var(--tok-line-strong); }
+
+/* Page background per theme (html prefix wins the specificity tie against
+   the pages' inline <style> blocks that define .body-bg after this file) */
+html .body-bg {
+  background:
+    radial-gradient(circle at 15% 85%, rgba(0, 174, 239, 0.07) 0%, transparent 45%),
+    radial-gradient(circle at 85% 10%, rgba(0, 174, 239, 0.05) 0%, transparent 40%),
+    var(--tok-bg);
+  background-attachment: fixed;
+  min-height: 100vh;
+  transition: background-color 300ms var(--tok-ease);
+}
+html .glass-card {
+  background: var(--tok-surface-1);
+  border-color: var(--tok-line);
+}
+
+/* Theme toggle button */
+.theme-toggle {
+  display: inline-flex; align-items: center; justify-content: center;
+  width: 40px; height: 40px;
+  border-radius: var(--tok-radius-btn);
+  border: 1px solid var(--tok-line-strong);
+  background: var(--tok-surface-2);
+  color: var(--tok-text-2);
+  cursor: pointer;
+  transition: all var(--tok-speed) var(--tok-ease);
+}
+.theme-toggle:hover { color: var(--tok-accent); border-color: var(--tok-accent); }
+.theme-toggle:focus-visible { outline: 2px solid var(--tok-accent); outline-offset: 2px; }
+
+/* --------------------------------------------------------------------------
+   Light-mode component shims (glass variants, inputs, chips).
+   REMOVE as components adopt tokens directly.
+   -------------------------------------------------------------------------- */
+[data-theme="light"] .glass-card-inset {
+  background: var(--tok-surface-inset);
+  border-color: var(--tok-line);
+  box-shadow: inset 0 1px 3px rgba(15, 23, 42, 0.06);
+}
+[data-theme="light"] .header-glass {
+  background: color-mix(in srgb, var(--tok-surface-1) 85%, transparent);
+  border-color: var(--tok-line);
+}
+[data-theme="light"] .btn-glass {
+  background: var(--tok-surface-2);
+  border-color: var(--tok-line-strong);
+  color: var(--tok-text-1);
+}
+[data-theme="light"] .btn-glass-primary {
+  background: linear-gradient(135deg, var(--tok-accent), var(--tok-accent-strong));
+  border-color: transparent;
+  color: #fff;
+}
+[data-theme="light"] .input-glass {
+  background: var(--tok-surface-1);
+  border-color: var(--tok-line-strong);
+  color: var(--tok-text-1);
+}
+[data-theme="light"] .on-air-button { background: var(--tok-surface-2); border-color: var(--tok-line); }
+[data-theme="light"] .on-air-button.active { background: var(--tok-live-dim); border-color: var(--tok-live); }
+/* Status utility colors tuned for light surfaces */
+[data-theme="light"] .text-green-400 { color: #15803D; }
+[data-theme="light"] .text-green-300 { color: #166534; }
+[data-theme="light"] .text-red-400 { color: #B91C1C; }
+[data-theme="light"] .text-red-300 { color: #B91C1C; }
+[data-theme="light"] .text-blue-300 { color: #1D4ED8; }
+[data-theme="light"] .text-yellow-300 { color: #A16207; }
+[data-theme="light"] .text-amber-300 { color: #A16207; }
+[data-theme="light"] .placeholder-gray-400::placeholder { color: var(--tok-text-3); }
+/* Legacy dark chips */
+[data-theme="light"] .bg-\[\#2A2A2A\] { background-color: var(--tok-surface-2); }
+[data-theme="light"] .hover\:bg-\[\#3A3A3A\]:hover { background-color: var(--tok-surface-inset); }
+[data-theme="light"] .bg-\[\#0A0A0A\] { background-color: var(--tok-surface-inset); }
+[data-theme="light"] .bg-gray-700\/50, [data-theme="light"] .bg-gray-700\/30 { background-color: var(--tok-surface-2); }
+[data-theme="light"] .bg-gray-600 { background-color: var(--tok-line-strong); }
+[data-theme="light"] .hover\:bg-gray-600\/50:hover, [data-theme="light"] .hover\:bg-gray-600\/30:hover { background-color: var(--tok-surface-inset); }
+[data-theme="light"] .border-gray-600\/50, [data-theme="light"] .border-gray-600\/30 { border-color: var(--tok-line-strong); }
+
+/* Pages redefine the legacy vars in their own <style> blocks AFTER this file
+   (same :root specificity, later wins). html[data-theme=light] outranks :root
+   regardless of order, so the light values always win in light mode. */
+html[data-theme="light"] {
+  --card-bg: var(--tok-surface-1);
+  --border-color: var(--tok-line);
+  --primary-color: var(--tok-accent);
+  --live-color: var(--tok-live);
+  --warning-color: var(--tok-danger);
+  --dark-bg: var(--tok-bg);
+  --glass-bg-subtle: rgba(15, 23, 42, 0.03);
+  --glass-bg-mid: rgba(15, 23, 42, 0.05);
+  --glass-bg-strong: rgba(15, 23, 42, 0.08);
+  --glass-border-subtle: rgba(15, 23, 42, 0.10);
+  --glass-border-mid: rgba(15, 23, 42, 0.18);
+  --glass-border-strong: rgba(15, 23, 42, 0.25);
+}
diff --git a/public/assets/css/ui.css b/public/assets/css/ui.css
new file mode 100644
index 0000000..ab12a12
--- /dev/null
+++ b/public/assets/css/ui.css
@@ -0,0 +1,462 @@
+        /* ========================================
+           STREAM ROWS — broadcast console style
+           (hairline rows, big channel numerals; tokens drive both themes)
+           ======================================== */
+        .stream-row {
+            display: flex; align-items: center; gap: 0.875rem;
+            padding: 0.875rem 0.25rem;
+            border-bottom: 1px solid var(--tok-line);
+            background: transparent;
+            transition: background 180ms ease;
+        }
+        .stream-row:first-child { border-top: 1px solid var(--tok-line); }
+        .stream-row:hover { background: var(--tok-surface-2); }
+        .stream-row-live { box-shadow: inset 3px 0 0 var(--tok-accent); padding-left: 0.875rem; }
+
+        .channel-badge {
+            flex-shrink: 0;
+            width: 3rem; height: 3rem;
+            display: flex; align-items: center; justify-content: center;
+            border: 1px solid var(--tok-line-strong);
+            border-radius: 0.75rem;
+            font-weight: 800; font-size: 1rem; letter-spacing: 0.02em;
+            color: var(--tok-text-1);
+            background: var(--tok-surface-1);
+        }
+        .stream-row-live .channel-badge {
+            border-color: var(--tok-accent);
+            color: var(--tok-accent);
+            box-shadow: var(--tok-accent-glow);
+        }
+
+        .stream-name {
+            font-weight: 600; font-size: 1rem; color: var(--tok-text-1);
+            white-space: nowrap; overflow: hidden; text-overflow: ellipsis;
+        }
+        .stream-sub {
+            display: flex; align-items: center; gap: 0.5rem;
+            font-size: 0.75rem; color: var(--tok-text-3); margin-top: 0.125rem;
+        }
+        .live-chip {
+            display: inline-flex; align-items: center; gap: 0.25rem;
+            font-size: 0.6875rem; font-weight: 700; letter-spacing: 0.1em; text-transform: uppercase;
+            color: var(--tok-live);
+        }
+
+        /* Equalizer bars — the one animated element; answers "is it playing".
+           LISTENER page only: freeze to a static silhouette while paused
+           (body.playing is toggled by updatePlayerUi). Admin rows keep
+           animating — there the eq means "stream is live", independent
+           of whether anyone is listening. */
+        .eq { display: inline-flex; align-items: flex-end; gap: 2px; height: 0.75rem; }
+        .eq span, .eq i { width: 3px; border-radius: 1px; background: currentColor; animation: eq-bounce 1s ease-in-out infinite; }
+        .eq span:nth-child(1), .eq i:nth-child(1) { height: 40%; animation-delay: 0s; }
+        .eq span:nth-child(2), .eq i:nth-child(2) { height: 90%; animation-delay: 0.15s; }
+        .eq span:nth-child(3), .eq i:nth-child(3) { height: 60%; animation-delay: 0.3s; }
+        .eq span:nth-child(4), .eq i:nth-child(4) { height: 100%; animation-delay: 0.1s; }
+        body.listener:not(.playing) .eq span, body.listener:not(.playing) .eq i { animation: none; }
+        @keyframes eq-bounce { 0%, 100% { transform: scaleY(0.4); } 50% { transform: scaleY(1); } }
+        @media (prefers-reduced-motion: reduce) { .eq span, .eq i { animation: none; } }
+
+        .play-btn {
+            flex-shrink: 0;
+            width: 3rem; height: 3rem;
+            display: inline-flex; align-items: center; justify-content: center;
+            border-radius: 999px;
+            background: linear-gradient(135deg, var(--tok-accent), var(--tok-accent-strong));
+            color: #fff;
+            box-shadow: var(--tok-accent-glow);
+            transition: transform 180ms ease, filter 180ms ease;
+        }
+        .play-btn:hover { transform: scale(1.06); filter: brightness(1.1); }
+        .play-btn:focus-visible { outline: 2px solid var(--tok-accent); outline-offset: 3px; }
+        .play-btn.is-playing { background: var(--tok-surface-2); color: var(--tok-accent); border: 1px solid var(--tok-accent); box-shadow: none; }
+
+        .copy-btn {
+            flex-shrink: 0;
+            width: 2.5rem; height: 2.5rem;
+            display: inline-flex; align-items: center; justify-content: center;
+            border-radius: 999px;
+            color: var(--tok-text-3);
+            transition: color 180ms ease, background 180ms ease;
+        }
+        .copy-btn:hover { color: var(--tok-text-1); background: var(--tok-surface-2); }
+
+        /* ========================================
+           MINI-PLAYER — persistent bottom bar (the bold element)
+           ======================================== */
+        .mini-player {
+            position: fixed; left: 0; right: 0; bottom: 0; z-index: 60;
+            display: flex; align-items: center; gap: 0.875rem;
+            padding: 0.75rem 1rem calc(0.75rem + env(safe-area-inset-bottom, 0px));
+            background: color-mix(in srgb, var(--tok-surface-1) 88%, transparent);
+            backdrop-filter: blur(18px) saturate(160%);
+            -webkit-backdrop-filter: blur(18px) saturate(160%);
+            border-top: 1px solid var(--tok-line-strong);
+            box-shadow: 0 -12px 40px rgba(0,0,0,0.35);
+        }
+        body.has-miniplayer { padding-bottom: 5.5rem; }
+        .mini-player .mp-label {
+            font-size: 0.6875rem; font-weight: 700; letter-spacing: 0.1em; text-transform: uppercase;
+            color: var(--tok-live);
+            display: flex; align-items: center; gap: 0.375rem;
+        }
+        .mini-player .mp-name {
+            font-weight: 600; font-size: 0.9375rem; color: var(--tok-text-1);
+            white-space: nowrap; overflow: hidden; text-overflow: ellipsis; max-width: 42vw;
+        }
+        .mp-btn {
+            flex-shrink: 0; width: 2.75rem; height: 2.75rem; border-radius: 999px;
+            display: inline-flex; align-items: center; justify-content: center;
+            border: 1px solid var(--tok-line-strong); background: var(--tok-surface-2); color: var(--tok-text-1);
+            transition: all 160ms ease;
+        }
+        .mp-btn:hover { border-color: var(--tok-accent); color: var(--tok-accent); }
+        .mp-btn:focus-visible { outline: 2px solid var(--tok-accent); outline-offset: 2px; }
+        .mp-btn.mp-primary { background: linear-gradient(135deg, var(--tok-accent), var(--tok-accent-strong)); color: #fff; border: none; box-shadow: var(--tok-accent-glow); }
+        .mini-player .volume-slider { max-width: 7rem; }
+
+/* Admin (dashboard) row variants */
+.stream-row-admin { padding: 0.75rem 0.5rem; }
+.stream-row-error { box-shadow: inset 3px 0 0 var(--tok-danger); padding-left: 0.875rem; }
+
+/* Marquee: overflowing single-line labels scroll; hover pauses (title tooltip) */
+.mq { display:inline-block; max-width:170px; overflow:hidden; white-space:nowrap; vertical-align:bottom; }
+.mq .mq-inner { display:inline-block; }
+.mq-on .mq-inner { animation: mq-slide var(--mq-dur,6s) linear infinite alternate; }
+.mq:hover .mq-inner { animation-play-state: paused; }
+@keyframes mq-slide { from { transform: translateX(0); } to { transform: translateX(var(--mq-shift,-40px)); } }
+@media (prefers-reduced-motion: reduce) { .mq-on .mq-inner { animation: none; } }
+
+/* Uptime chip (icon + duration, tooltip explains) */
+.uptime-chip { display:inline-flex; align-items:center; gap:0.25rem; }
+
+/* Mini-player fade: slides in when playback starts, fades out when it ends.
+   Toggling .hidden would jump; we animate opacity/transform instead. */
+.mini-player { transition: opacity 320ms ease, transform 320ms ease; }
+.mini-player.is-hidden { opacity: 0; transform: translateY(100%); pointer-events: none; }
+
+/* ========================================
+   COLLAPSIBLE CARDS — remembered open/closed state
+   ======================================== */
+.ls-collapse { padding: 0; overflow: visible; }
+.ls-collapse-toggle {
+    display: flex; align-items: center; justify-content: space-between; gap: 0.75rem;
+    width: 100%; padding: 1rem 1.25rem;
+    background: transparent; border: none; cursor: pointer;
+    color: var(--tok-text-1); text-align: left;
+    transition: background 180ms ease;
+}
+.ls-collapse-toggle:hover { background: var(--tok-surface-2); }
+.ls-collapse-toggle:focus-visible { outline: 2px solid var(--tok-accent); outline-offset: -2px; }
+.ls-collapse-icon { color: var(--tok-text-2); }
+.ls-collapse-title { font-weight: 700; font-size: 0.9375rem; letter-spacing: 0.01em; }
+.ls-collapse-chevron { color: var(--tok-text-3); }
+.ls-collapse-chevron.is-open { transform: rotate(180deg); }
+.ls-collapse-body { padding: 0.25rem 1.25rem 1.25rem; }
+.ls-collapse-body.is-closed { display: none; }
+
+/* Plain variant: nested disclosures render as a plain bottom-bordered row —
+   no card-in-card chrome, just the arrow to signal it opens.
+   (Two classes so it outranks the pages' own .glass-card rules.) */
+.ls-collapse.ls-collapse--plain { background: transparent; border: none; box-shadow: none; border-radius: 0; }
+.ls-collapse.ls-collapse--plain .ls-collapse-toggle {
+    padding: 0.625rem 0;
+    border-bottom: 1px solid var(--tok-line);
+    border-radius: 0;
+}
+.ls-collapse.ls-collapse--plain .ls-collapse-toggle:hover { background: transparent; }
+.ls-collapse.ls-collapse--plain .ls-collapse-body { padding: 0.875rem 0 0.25rem; }
+
+/* ========================================
+   NOTIFICATION CENTER — header bell + panel
+   ======================================== */
+#header-bell-btn { position: relative; }
+#header-bell-btn.has-notifications {
+    color: var(--tok-accent);
+    border-color: var(--tok-accent);
+}
+.lsn-badge {
+    position: absolute; top: 4px; right: 4px;
+    width: 10px; height: 10px; border-radius: 999px;
+    background: var(--tok-danger);
+    box-shadow: 0 0 0 2px var(--tok-bg);
+}
+.lsn-badge::after {
+    content: ''; position: absolute; inset: 0; border-radius: inherit;
+    background: var(--tok-danger);
+    animation: lsn-ping 1.6s cubic-bezier(0.4, 0, 0.6, 1) infinite;
+}
+@keyframes lsn-ping { 0% { transform: scale(1); opacity: 0.7; } 80%, 100% { transform: scale(2.2); opacity: 0; } }
+@media (prefers-reduced-motion: reduce) { .lsn-badge::after { animation: none; } }
+
+.lsn-panel {
+    /* the header carries whitespace-nowrap; the panel's text must wrap */
+    white-space: normal;
+    position: absolute; top: calc(100% + 10px); right: 0;
+    width: min(360px, calc(100vw - 2rem));
+    max-height: 420px; overflow-y: auto; overflow-x: hidden;
+    background: var(--tok-surface-1);
+    border: 1px solid var(--tok-line-strong);
+    border-radius: var(--tok-radius-card, 14px);
+    z-index: 120;
+}
+.lsn-panel.is-hidden { display: none; }
+.lsn-head {
+    display: flex; align-items: center; justify-content: space-between;
+    padding: 0.75rem 1rem;
+    border-bottom: 1px solid var(--tok-line);
+    position: sticky; top: 0; background: var(--tok-surface-1);
+}
+.lsn-clear {
+    background: none; border: none; cursor: pointer;
+    font-size: 0.75rem; font-weight: 600; color: var(--tok-text-2);
+}
+.lsn-clear:hover { color: var(--tok-accent); }
+.lsn-item { display: flex; gap: 0.75rem; padding: 0.75rem 1rem; border-bottom: 1px solid var(--tok-line); }
+.lsn-item:last-child { border-bottom: none; }
+.lsn-item.is-unread { background: var(--tok-surface-2); }
+.lsn-item > .material-symbols-rounded { font-size: 1.25rem; margin-top: 0.125rem; }
+.lsn-info { color: var(--tok-accent); }
+.lsn-success { color: var(--tok-live); }
+.lsn-warning { color: var(--tok-warning, #F59E0B); }
+.lsn-error { color: var(--tok-danger); }
+.lsn-item-title { font-size: 0.8125rem; font-weight: 600; color: var(--tok-text-1); }
+.lsn-item-msg { font-size: 0.75rem; color: var(--tok-text-2); margin-top: 0.125rem; line-height: 1.4; }
+.lsn-item-time { font-size: 0.6875rem; color: var(--tok-text-3); margin-top: 0.25rem; }
+.lsn-empty { padding: 2rem 1.5rem; text-align: center; color: var(--tok-text-2); font-size: 0.85rem; }
+.lsn-empty .material-symbols-rounded { font-size: 2rem; color: var(--tok-text-3); display: inline-block; width: 2rem; height: 2rem; overflow: hidden; white-space: nowrap; }
+.lsn-empty-sub { font-size: 0.75rem; color: var(--tok-text-3); margin-top: 0.375rem; }
+
+/* ========================================
+   STREAM ROW ERROR — one-line summary + expandable detail
+   ======================================== */
+.stream-error { margin-top: 0.5rem; }
+.stream-error summary {
+    list-style: none; cursor: pointer;
+    display: flex; align-items: center; gap: 0.375rem;
+    font-size: 0.75rem; font-weight: 600; color: var(--tok-danger);
+}
+.stream-error summary::-webkit-details-marker { display: none; }
+.stream-error summary .material-symbols-rounded { font-size: 1rem; }
+.stream-error[open] summary .material-symbols-rounded.chev { transform: rotate(180deg); }
+.stream-error-detail {
+    margin-top: 0.5rem; padding: 0.625rem 0.75rem;
+    background: var(--tok-danger-dim);
+    border: 1px solid var(--tok-danger);
+    border-radius: 10px;
+    font-size: 0.75rem; color: var(--tok-text-2);
+    white-space: pre-wrap; word-break: break-word; line-height: 1.5;
+    max-height: 240px; overflow-y: auto;
+}
+.stream-error-detail a { color: var(--tok-accent); text-decoration: underline; }
+
+/* ========================================
+   BOOT SCREEN dots (markup is inline; only the animation lives here)
+   ======================================== */
+.boot-dots { display: flex; gap: 6px; }
+.boot-dots span {
+    width: 8px; height: 8px; border-radius: 999px;
+    background: #1AA6F5;
+    animation: boot-dot 1.2s ease-in-out infinite;
+}
+.boot-dots span:nth-child(2) { animation-delay: 0.18s; }
+.boot-dots span:nth-child(3) { animation-delay: 0.36s; }
+@keyframes boot-dot { 0%, 100% { opacity: 0.25; transform: translateY(0); } 50% { opacity: 1; transform: translateY(-4px); } }
+@media (prefers-reduced-motion: reduce) { .boot-dots span { animation: none; opacity: 0.6; } }
+
+/* ========================================
+   REDESIGN SHARED COMPONENTS (designer mock, 2026-10-28)
+   ======================================== */
+
+/* Icon button (36px quiet square, header/toolbar) */
+.iconbtn{width:36px;height:36px;border-radius:10px;display:grid;place-items:center;color:var(--tok-text-2);position:relative;flex-shrink:0;background:transparent;border:none;cursor:pointer}
+.iconbtn:hover{background:var(--tok-surface-2);color:var(--tok-text-1)}
+.iconbtn .dot{position:absolute;top:7px;right:8px;width:7px;height:7px;border-radius:50%;background:var(--tok-danger);box-shadow:0 0 0 2px var(--tok-bg)}
+
+/* Chips — text label on every chip (colour is never the only signal) */
+.chip{display:inline-flex;align-items:center;gap:6px;height:24px;padding:0 9px;border-radius:999px;font-size:12px;font-weight:600;letter-spacing:.02em;white-space:nowrap}
+.chip .pip{width:6px;height:6px;border-radius:50%;background:currentColor}
+.chip-live{background:var(--tok-live-dim);color:var(--tok-live)}
+.chip-live .pip{animation:chip-pulse 1.6s infinite}
+.chip-off{background:var(--tok-surface-2);color:var(--tok-text-2)}
+.chip-err{background:var(--tok-danger-dim);color:var(--tok-danger)}
+.chip-warn{background:var(--tok-warning-dim);color:var(--tok-warning)}
+.chip-accent{background:var(--tok-accent-soft);color:var(--tok-accent)}
+@keyframes chip-pulse{0%{box-shadow:0 0 0 0 color-mix(in oklab,currentColor 60%,transparent)}70%{box-shadow:0 0 0 6px transparent}100%{box-shadow:0 0 0 0 transparent}}
+@media (prefers-reduced-motion:reduce){.chip-live .pip{animation:none}}
+
+/* Status strip (dashboard) */
+.strip{display:grid;grid-template-columns:repeat(4,minmax(0,1fr));gap:12px;margin:24px 0 16px}
+.stat{padding:14px 16px;display:flex;flex-direction:column;gap:6px;min-width:0}
+.stat .v{font-size:22px;font-weight:600;letter-spacing:-.02em;display:flex;align-items:center;gap:8px}
+.stat .v small{font-size:13px;color:var(--tok-text-3);font-weight:500}
+.stat.alert{border-color:color-mix(in oklab,var(--tok-warning) 40%,transparent)}
+.stat.alert .v{color:var(--tok-warning);font-size:15px}
+@media (max-width:960px){.strip{grid-template-columns:repeat(2,1fr)}}
+
+/* Warning banner (security etc.) — warning colour, not error */
+.banner{display:flex;align-items:center;gap:12px;padding:10px 12px 10px 14px;border-radius:12px;background:var(--tok-warning-dim);border:1px solid color-mix(in oklab,var(--tok-warning) 30%,transparent);font-size:14px;color:var(--tok-text-1)}
+.banner b{color:var(--tok-warning)}
+.banner .grow{flex:1;min-width:0}
+@media (max-width:560px){.banner{flex-wrap:wrap}.banner .grow{flex-basis:calc(100% - 40px)}}
+
+/* Segmented control (list filters) */
+.seg{display:inline-flex;background:var(--tok-surface-2);border-radius:10px;padding:3px}
+.seg button{height:28px;padding:0 10px;border-radius:7px;font-size:13px;font-weight:500;color:var(--tok-text-2)}
+.seg button[aria-pressed="true"]{background:var(--tok-surface-1);color:var(--tok-text-1);box-shadow:0 1px 2px rgba(0,0,0,.08)}
+
+/* Admin stream rows (dashboard list) — actions pinned in a FIXED right column
+   so wrapping meta text never shifts them, and rows never jump between renders.
+   Children get explicit grid-column so the mobile sid2:hidden can't reshuffle tracks. */
+.arow{display:grid;grid-template-columns:auto minmax(0,1fr) 80px;align-items:start;gap:14px;padding:12px 18px;border-top:1px solid var(--tok-line);position:relative}
+.arow:hover{background:color-mix(in oklab,var(--tok-surface-2) 55%,transparent)}
+.arow > .sid2{grid-column:1}
+.arow > div:has(> .name){grid-column:2;margin-top:8px}
+.arow .rowactions{grid-column:3}
+.arow.is-live::before,.arow.is-err::before{content:"";position:absolute;left:0;top:10px;bottom:10px;width:3px;border-radius:0 3px 3px 0;background:var(--tok-live)}
+.arow.is-err::before{background:var(--tok-danger)}
+.sid2{width:38px;height:38px;border-radius:10px;border:1px solid var(--tok-line-strong);display:grid;place-items:center;font-family:var(--tok-mono);font-size:13px;font-weight:500;color:var(--tok-text-2)}
+.is-live .sid2{border-color:color-mix(in oklab,var(--tok-live) 50%,transparent);color:var(--tok-live);background:var(--tok-live-dim)}
+.arow .name{font-weight:600;font-size:15px;white-space:nowrap;overflow:hidden;text-overflow:ellipsis;color:var(--tok-text-1)}
+.arow .meta{display:flex;align-items:center;gap:8px;margin-top:3px;flex-wrap:wrap;color:var(--tok-text-2);font-size:13px}
+.arow .meta .src{display:inline-flex;align-items:center;gap:5px;max-width:300px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+.arow .dotsep{width:3px;height:3px;border-radius:50%;background:var(--tok-text-3)}
+.playbtn{width:40px;height:40px;border-radius:50%;display:grid;place-items:center;background:var(--tok-surface-2);color:var(--tok-text-1);border:1px solid var(--tok-line-strong);transition:.15s;flex-shrink:0}
+.playbtn:hover{background:var(--tok-accent);color:var(--tok-accent-contrast);border-color:var(--tok-accent)}
+.playbtn.stop{background:var(--tok-danger-dim);color:var(--tok-danger);border-color:color-mix(in oklab,var(--tok-danger) 30%,transparent)}
+.playbtn.stop:hover{background:var(--tok-danger);color:#fff}
+.rowactions{display:flex;align-items:center;justify-content:flex-end;gap:4px}
+/* Deterministic paint order for the row ⋯ popup: the streams card sits above
+   the following Audio-inputs card (Jerry report: popup dropped under it —
+   unreproducible fresh, but this guarantees the order in any cache mix). */
+#ffmpeg-streams{position:relative;z-index:2}
+[data-ls-collapse="audio-inputs"]{position:relative;z-index:1}
+/* Native dropdown rows: paint them from tokens so the open list can never
+   come up black-on-black on any platform (pairs with color-scheme). */
+select option{background:var(--tok-surface-1);color:var(--tok-text-1)}
+.menu{position:relative}
+/* ⋯ sits at the row's far right — the popup must extend LEFTWARD (right:0) or it
+   would overflow the card edge (was left:0 when the menu lived on the left). */
+.menu-pop{position:absolute;right:0;top:42px;min-width:190px;padding:6px;z-index:120;display:none;background:var(--tok-surface-1);border:1px solid var(--tok-line-strong);border-radius:12px}
+.menu.open .menu-pop{display:block}
+.menu-pop button{display:flex;width:100%;align-items:center;gap:10px;padding:8px 10px;border-radius:8px;font-size:14px;text-align:left;color:var(--tok-text-1)}
+.menu-pop button:hover{background:var(--tok-surface-2)}
+.menu-pop .del{color:var(--tok-danger)}
+.errbox{grid-column:1/-1;margin-top:4px;padding:10px 12px;border-radius:10px;background:var(--tok-danger-dim);font-size:13px;display:flex;gap:10px;align-items:center;flex-wrap:wrap}
+.errbox b{color:var(--tok-danger)}
+.errbox .grow{flex:1;min-width:200px;color:var(--tok-text-2)}
+.group-label{padding:12px 18px 6px;display:flex;align-items:center;gap:8px}
+@media (max-width:560px){
+    .arow{grid-template-columns:minmax(0,1fr) 80px;gap:10px;padding:12px 16px}
+    .arow .sid2{display:none}
+    .arow > div:has(> .name){grid-column:1}
+    .arow .rowactions{grid-column:2}
+    .errbox{grid-column:1/-1}
+    .arow .meta .src{flex-basis:100%;max-width:100%}
+    .arow .meta .src + .dotsep{display:none}
+}
+
+/* Admin header: HeaderComponent renders into #header-container, a flex item sized to the
+   header's own height — a sticky child has zero slack inside it, so the CONTAINER sticks. */
+#header-container{position:sticky;top:0;z-index:50}
+
+/* Side drawer (new stream) — above the sticky header so only ONE bar shows */
+.scrim{position:fixed;inset:0;background:rgba(5,8,12,.5);opacity:0;pointer-events:none;transition:.2s;z-index:130}
+.drawer{position:fixed;top:0;right:0;bottom:0;width:min(440px,100%);background:var(--tok-surface-1);border-left:1px solid var(--tok-line);transform:translateX(100%);transition:.25s ease;z-index:140;display:flex;flex-direction:column}
+body.drawer-open .scrim{opacity:1;pointer-events:auto}
+body.drawer-open .drawer{transform:none}
+.drawer-b{padding:20px;display:flex;flex-direction:column;gap:18px;overflow:auto;flex:1}
+.drawer-f{padding:16px 20px;border-top:1px solid var(--tok-line);display:flex;gap:8px;justify-content:flex-end}
+.src-opt{display:flex;align-items:center;gap:12px;padding:10px 12px;border:1px solid var(--tok-line-strong);border-radius:10px;cursor:pointer;color:var(--tok-text-1)}
+.src-opt:has(input:checked){border-color:var(--tok-accent);background:var(--tok-accent-soft)}
+.src-opt input{accent-color:var(--tok-accent)}
+.src-opt .t{flex:1;min-width:0;font-size:14px}
+.src-opt .t div:first-child{font-weight:600;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}
+.quality{display:grid;grid-template-columns:repeat(3,1fr);gap:8px}
+.quality label{border:1px solid var(--tok-line-strong);border-radius:10px;padding:10px;text-align:center;cursor:pointer;font-size:13px;color:var(--tok-text-2)}
+.quality label:has(input:checked){border-color:var(--tok-accent);background:var(--tok-accent-soft);color:var(--tok-accent)}
+.quality input{display:none}
+.quality b{display:block;font-size:15px}
+
+/* Share card + audio inputs (dashboard sidebar) */
+.share-url{display:flex;align-items:center;gap:8px;padding:8px 8px 8px 12px;border-radius:10px;background:var(--tok-surface-inset);border:1px solid var(--tok-line)}
+.share-url code{flex:1;font-family:var(--tok-mono);font-size:13px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;color:var(--tok-text-1)}
+.qr-box{width:96px;height:96px;border-radius:10px;background:var(--tok-surface-1);border:1px solid var(--tok-line);padding:8px;flex-shrink:0;color:var(--tok-text-1)}
+.kv{display:flex;justify-content:space-between;align-items:center;padding:8px 0;border-top:1px dashed var(--tok-line);font-size:14px;color:var(--tok-text-1)}
+.kv:first-child{border-top:0}
+.devices li{list-style:none;display:flex;align-items:center;gap:10px;padding:8px 0;font-size:13px;border-top:1px dashed var(--tok-line);color:var(--tok-text-1)}
+.devices li:first-child{border-top:0}
+
+/* Switch (replaces the Tailwind peer toggle) */
+.switch{width:38px;height:22px;border-radius:999px;background:var(--tok-surface-inset);border:1px solid var(--tok-line-strong);position:relative;transition:.2s;flex-shrink:0;cursor:pointer}
+.switch::after{content:"";position:absolute;top:2px;left:2px;width:16px;height:16px;border-radius:50%;background:var(--tok-surface-1);box-shadow:0 1px 2px rgba(0,0,0,.25);transition:.2s}
+.switch[aria-checked="true"]{background:var(--tok-accent);border-color:var(--tok-accent)}
+.switch[aria-checked="true"]::after{left:18px}
+
+/* ON AIR pill (listener top bar) */
+.onair{display:inline-flex;align-items:center;gap:8px;height:30px;padding:0 12px;border-radius:999px;border:1px solid color-mix(in oklab,var(--tok-onair) 45%,transparent);color:var(--tok-onair);font-weight:700;font-size:12px;letter-spacing:.1em}
+.onair .pip{width:8px;height:8px;border-radius:50%;background:var(--tok-onair);animation:chip-pulse 1.6s infinite}
+.onair.inactive{color:var(--tok-text-3);border-color:var(--tok-line-strong)}
+.onair.inactive .pip{background:var(--tok-text-3);animation:none}
+
+/* Big play + channel rows (listener) */
+.bigplay{width:84px;height:84px;border-radius:50%;background:var(--tok-accent);color:var(--tok-accent-contrast);display:grid;place-items:center;box-shadow:0 10px 30px -8px color-mix(in oklab,var(--tok-accent) 60%,transparent);transition:transform .15s;flex-shrink:0;cursor:pointer;border:none}
+.bigplay:hover{transform:scale(1.04)}
+.bigplay svg,.bigplay .material-symbols-rounded{font-size:30px;width:30px;height:30px}
+.chrow{display:flex;align-items:center;gap:14px;padding:12px 14px;border-radius:12px;border:1px solid var(--tok-line);background:var(--tok-surface-1);margin-bottom:8px;cursor:pointer;width:100%;text-align:left;color:var(--tok-text-1)}
+.chrow:hover{border-color:var(--tok-line-strong)}
+.chrow[aria-current="true"]{border-color:var(--tok-accent);background:var(--tok-accent-soft)}
+.chrow .lang{width:40px;height:40px;border-radius:10px;background:var(--tok-surface-2);display:grid;place-items:center;font-family:var(--tok-mono);font-size:13px;font-weight:500;flex-shrink:0}
+.chrow[aria-current="true"] .lang{background:var(--tok-accent);color:var(--tok-accent-contrast)}
+.chrow .t{flex:1;min-width:0}
+.chrow .t b{display:block;font-weight:600}
+.chrow.off{opacity:.55;cursor:default}
+/* Explicit play affordance: the whole row is clickable, but listeners need a
+   visible button. Solid accent circle = tap to play; muted = tap to pause. */
+.chrow .chplay{width:36px;height:36px;border-radius:50%;background:var(--tok-accent);color:var(--tok-accent-contrast);display:grid;place-items:center;flex-shrink:0;transition:transform .12s ease}
+.chrow .chplay .material-symbols-rounded{font-size:22px}
+.chrow:hover .chplay{transform:scale(1.06)}
+.chrow[aria-current="true"] .chplay{background:var(--tok-surface-2);color:var(--tok-text-1);border:1px solid var(--tok-line-strong)}
+
+/* ========================================
+   TOASTS — stack top-center; new toasts push older ones down
+   ======================================== */
+.toast-stack {
+    position: fixed;
+    top: 1rem; left: 50%; transform: translateX(-50%);
+    z-index: 200; /* above sticky header (z-100) + overlays; toasts used to hide behind the header */
+    display: flex; flex-direction: column; align-items: center; gap: 0.5rem;
+    width: min(30rem, calc(100vw - 2rem));
+    pointer-events: none;
+}
+.toast-stack > * { pointer-events: auto; }
+.toast {
+    display: flex; align-items: flex-start; gap: 0.625rem;
+    width: 100%;
+    padding: 0.75rem 1rem;
+    border-radius: var(--tok-radius-card, 14px);
+    border: 1px solid var(--tok-line-strong);
+    background: color-mix(in srgb, var(--tok-surface-1) 92%, transparent);
+    backdrop-filter: blur(14px);
+    -webkit-backdrop-filter: blur(14px);
+    color: var(--tok-text-1);
+    font-size: 0.875rem; line-height: 1.45;
+    opacity: 0; transform: translateY(-6px);
+    transition: opacity 240ms ease, transform 240ms ease;
+}
+.toast.is-visible { opacity: 1; transform: translateY(0); }
+.toast.is-leaving { opacity: 0; transform: translateY(-6px); }
+.toast-icon { font-size: 1.125rem; margin-top: 0.0625rem; }
+.toast-info .toast-icon { color: var(--tok-accent); }
+.toast-success { border-color: var(--tok-live); }
+.toast-success .toast-icon { color: var(--tok-live); }
+.toast-warning .toast-icon { color: var(--tok-warning, #F59E0B); }
+.toast-error { border-color: var(--tok-danger); }
+.toast-error .toast-icon { color: var(--tok-danger); }
+.toast-message { flex: 1; word-break: break-word; white-space: pre-line; }
+.toast-close {
+    flex-shrink: 0; background: none; border: none; cursor: pointer; padding: 0;
+    color: var(--tok-text-3); display: inline-flex;
+}
+.toast-close:hover { color: var(--tok-text-1); }
diff --git a/public/assets/default-event.jpg b/public/assets/default-event.jpg
new file mode 100644
index 0000000..2e026ff
Binary files /dev/null and b/public/assets/default-event.jpg differ
diff --git a/public/assets/favicon.png b/public/assets/favicon.png
index f9c5136..575a709 100644
Binary files a/public/assets/favicon.png and b/public/assets/favicon.png differ
diff --git a/public/assets/icecast-mark.svg b/public/assets/icecast-mark.svg
new file mode 100644
index 0000000..a87052e
--- /dev/null
+++ b/public/assets/icecast-mark.svg
@@ -0,0 +1,6 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" aria-hidden="true">
+  <!-- Stylized Icecast server mark: ice shard in a hex frame -->
+  <path d="M12 2.5 L20 7 V17 L12 21.5 L4 17 V7 Z" stroke="currentColor" stroke-width="1.5" stroke-linejoin="round"/>
+  <path d="M8.6 15.4 L15.4 8.6" stroke="currentColor" stroke-width="1.5" stroke-linecap="round"/>
+  <path d="M15.4 15.4 L8.6 8.6" stroke="currentColor" stroke-width="1.5" stroke-linecap="round"/>
+</svg>
diff --git a/public/assets/js/admin-auth.js b/public/assets/js/admin-auth.js
new file mode 100644
index 0000000..f3bbd53
--- /dev/null
+++ b/public/assets/js/admin-auth.js
@@ -0,0 +1,92 @@
+/**
+ * Admin auth for the dashboard.
+ *
+ * Loaded FIRST on /dashboard: patches window.fetch so every same-origin /api
+ * call (except /api/auth/login) carries the saved Bearer token — components
+ * never need to know auth exists. A 401/403 from any call bounces to /login.
+ *
+ * Token storage honours the login form's "Remember me":
+ *   remembered  → localStorage (survives app restarts; 30-day JWT)
+ *   not checked → sessionStorage (dies with the window; 1-day JWT)
+ */
+(function () {
+  const TOKEN_KEY = 'lsAdminToken';
+  const getToken = () => {
+    try {
+      return localStorage.getItem(TOKEN_KEY) || sessionStorage.getItem(TOKEN_KEY);
+    } catch { return null; }
+  };
+  const clearToken = () => {
+    try { localStorage.removeItem(TOKEN_KEY); sessionStorage.removeItem(TOKEN_KEY); } catch { }
+  };
+
+  const nativeFetch = window.fetch.bind(window);
+  window.fetch = function (input, init) {
+    try {
+      const url = typeof input === 'string' ? input : (input && input.url) || '';
+      const isApi = url.startsWith('/api') || url.includes(window.location.origin + '/api');
+      const isLogin = url.includes('/api/auth/login');
+      const headers = new Headers((init && init.headers) || (input && input.headers) || {});
+      if (isApi && !isLogin && getToken() && !headers.has('Authorization')) {
+        headers.set('Authorization', 'Bearer ' + getToken());
+        if (typeof input === 'string') input = url; // unchanged, keep string form
+        init = Object.assign({}, init, { headers });
+      }
+      // The exact token this request went out with — lets the 401 tap below
+      // tell "expired token" apart from "token was refreshed mid-flight"
+      // (the credential change hands us a new token; those stale 401s must
+      // NOT bounce the operator to /login).
+      const attachedAuth = headers.get('Authorization');
+      const promise = nativeFetch(input, init);
+      // Silence response-tap when body already consumed streams (play proxy etc.)
+      if (isApi && !isLogin) {
+        promise.then(resp => {
+          if ((resp.status === 401 || resp.status === 403) && resp.headers.get('content-type')?.includes('json')) {
+            const stored = getToken();
+            const refreshedElsewhere = attachedAuth && stored && ('Bearer ' + stored) !== attachedAuth;
+            if (!refreshedElsewhere) {
+              // Token expired/invalid — hand over to the login page.
+              clearToken();
+              window.location.href = '/login';
+            }
+          }
+        }).catch(() => { });
+      }
+      return promise;
+    } catch {
+      return nativeFetch(input, init);
+    }
+  };
+
+  // Gate: no valid token -> login page before any component mounts.
+  (async function verify() {
+    const token = getToken();
+    if (!token) { window.location.href = '/login'; return; }
+    try {
+      const res = await nativeFetch('/api/auth/verify', { headers: { Authorization: 'Bearer ' + token } });
+      if (!res.ok) {
+        clearToken();
+        window.location.href = '/login';
+      }
+    } catch {
+      // Server unreachable — let the page's boot screen surface that.
+    }
+  })();
+
+  window.LSAdminAuth = {
+    logout() {
+      clearToken();
+      window.location.href = '/login';
+    },
+    // After a credential change the API returns a fresh token (the old one
+    // dies with the rotated secret) — store it wherever the current one
+    // lived so polling continues.
+    setToken(token) {
+      try {
+        const inLocal = !!localStorage.getItem(TOKEN_KEY);
+        if (inLocal) localStorage.setItem(TOKEN_KEY, token);
+        else sessionStorage.setItem(TOKEN_KEY, token);
+      } catch { }
+    }
+  };
+})();
diff --git a/public/assets/js/boot.js b/public/assets/js/boot.js
new file mode 100644
index 0000000..4840f50
--- /dev/null
+++ b/public/assets/js/boot.js
@@ -0,0 +1,61 @@
+/**
+ * Boot screen controller.
+ *
+ * The overlay markup lives inline in each page (so it paints before any CSS
+ * file loads). This script owns the lifecycle:
+ *   - LSBoot.ready()  → fade the overlay out (called when the app finished init)
+ *   - LSBoot.fail(msg) → swap the overlay to a load-failed state with the
+ *     error and a Retry button. Also happens automatically after TIMEOUT_MS.
+ *
+ * Timeout choice: 12 seconds. Cold dashboard start (Icecast detection, FFmpeg
+ * checks) can take several seconds; the overlay dismisses as soon as the main
+ * components mount, so 12s only trips when something is genuinely broken.
+ */
+(function () {
+  const overlay = document.getElementById('boot-overlay');
+  if (!overlay) return;
+
+  const TIMEOUT_MS = 12000;
+  let done = false;
+
+  function fail(message) {
+    if (done) return;
+    done = true;
+    clearTimeout(timer);
+    overlay.innerHTML = `
+      <div style="display:flex;flex-direction:column;align-items:center;gap:16px;text-align:center;padding:24px;max-width:420px;">
+        <img src="/assets/logo-mark.svg" alt="" style="height:52px;width:52px;" onerror="this.style.display='none'">
+        <div style="font-size:1.05rem;font-weight:700;color:#F2F5F9;">LANStreamer failed to load</div>
+        <div style="font-size:0.85rem;color:#9AA3B2;line-height:1.5;">
+          Check that the LANStreamer server is running, then retry.
+        </div>
+        ${message ? `<div id="boot-error" style="font-size:0.78rem;color:#F87171;word-break:break-word;line-height:1.4;"></div>` : ''}
+        <button type="button" onclick="location.reload()"
+          style="margin-top:4px;padding:10px 22px;border-radius:999px;border:1px solid rgba(255,255,255,0.2);background:#00AEEF;color:#fff;font-weight:600;font-size:0.875rem;cursor:pointer;">
+          Retry
+        </button>
+      </div>`;
+    const errEl = document.getElementById('boot-error');
+    if (errEl) errEl.textContent = String(message).slice(0, 200);
+  }
+
+  const timer = setTimeout(() => fail('Timed out while loading components.'), TIMEOUT_MS);
+
+  function ready() {
+    if (done) return;
+    done = true;
+    clearTimeout(timer);
+    overlay.style.opacity = '0';
+    overlay.style.pointerEvents = 'none';
+    setTimeout(() => overlay.remove(), 450);
+    document.dispatchEvent(new CustomEvent('ls:boot-ready'));
+  }
+
+  window.LSBoot = { ready, fail };
+
+  // Show the app version under the wordmark when the API is reachable
+  fetch('/api/info').then(r => (r.ok ? r.json() : null)).then(j => {
+    const el = document.getElementById('boot-version');
+    if (el && j && j.data && j.data.version) el.textContent = 'v' + j.data.version;
+  }).catch(() => { /* version stays blank */ });
+})();
diff --git a/public/assets/js/collapsible.js b/public/assets/js/collapsible.js
new file mode 100644
index 0000000..c0ad136
--- /dev/null
+++ b/public/assets/js/collapsible.js
@@ -0,0 +1,94 @@
+/**
+ * Collapsible card sections whose open/closed state is remembered per browser.
+ *
+ * Usage from component templates:
+ *   LSCollapse.wrap(key, { icon, title, badge, aside }, innerHtml, defaultOpen)
+ *     - key         unique storage key ('event-details', 'icecast-info', ...)
+ *     - badge       optional HTML chip rendered next to the title
+ *     - aside       optional HTML rendered on the right of the toggle row
+ *     - defaultOpen used until the user toggles (state persists after that)
+ *
+ * The toggle itself is a delegated listener on document, so re-rendered
+ * components keep working without re-binding.
+ */
+(function () {
+  const PREFIX = 'ls-collapse:';
+
+  function isOpen(key, defaultOpen = false) {
+    try {
+      const saved = localStorage.getItem(PREFIX + key);
+      if (saved === 'open') return true;
+      if (saved === 'closed') return false;
+    } catch (e) { /* storage unavailable — fall through to default */ }
+    return defaultOpen;
+  }
+
+  function save(key, open) {
+    try { localStorage.setItem(PREFIX + key, open ? 'open' : 'closed'); } catch (e) { /* ignore */ }
+  }
+
+  function wrap(key, opts, innerHtml, defaultOpen = false) {
+    const o = opts || {};
+    const open = isOpen(key, defaultOpen);
+    const icon = o.iconHtml ? o.iconHtml
+      : (o.icon ? `<span class="material-symbols-rounded text-lg ls-collapse-icon" aria-hidden="true">${o.icon}</span>` : '');
+    // plain: no card chrome — just a bottom-bordered row + arrow (nested disclosures)
+    const cls = `ls-collapse glass-card${o.plain ? ' ls-collapse--plain' : ''}`;
+    return `
+      <div class="${cls}" data-ls-collapse="${key}">
+        <button type="button" class="ls-collapse-toggle" data-ls-collapse-toggle="${key}" aria-expanded="${open}">
+          <span class="flex items-center gap-2.5 min-w-0">
+            ${icon}
+            <span class="ls-collapse-title">${o.title || key}</span>
+            ${o.badge || ''}
+          </span>
+          <span class="flex items-center gap-2">
+            ${o.aside || ''}
+            <span class="material-symbols-rounded ls-collapse-chevron ${open ? 'is-open' : ''}" aria-hidden="true">expand_more</span>
+          </span>
+        </button>
+        <div class="ls-collapse-body ${open ? '' : 'is-closed'}" data-ls-collapse-body="${key}">
+          ${innerHtml}
+        </div>
+      </div>`;
+  }
+
+  document.addEventListener('click', (e) => {
+    const btn = e.target.closest('[data-ls-collapse-toggle]');
+    if (!btn) return;
+    // Don't swallow clicks on interactive elements placed in `aside`
+    if (e.target.closest('button:not([data-ls-collapse-toggle]), a, input')) return;
+    const key = btn.getAttribute('data-ls-collapse-toggle');
+    const body = document.querySelector(`[data-ls-collapse-body="${key}"]`);
+    if (!body) return;
+    const willOpen = body.classList.contains('is-closed');
+    body.classList.toggle('is-closed', !willOpen);
+    btn.setAttribute('aria-expanded', String(willOpen));
+    const chevron = btn.querySelector('.ls-collapse-chevron');
+    if (chevron) chevron.classList.toggle('is-open', willOpen);
+    save(key, willOpen);
+  });
+
+  // Hydrate statically-authored collapsibles (not built via wrap()) from the
+  // remembered state, so a saved "open" survives reloads.
+  function hydrateStatic() {
+    document.querySelectorAll('[data-ls-collapse]').forEach(el => {
+      const key = el.getAttribute('data-ls-collapse');
+      const open = isOpen(key, el.hasAttribute('data-ls-default-open'));
+      const body = el.querySelector(`[data-ls-collapse-body="${key}"]`);
+      const btn = el.querySelector(`[data-ls-collapse-toggle="${key}"]`);
+      if (!body || !btn) return;
+      body.classList.toggle('is-closed', !open);
+      btn.setAttribute('aria-expanded', String(open));
+      const chevron = btn.querySelector('.ls-collapse-chevron');
+      if (chevron) chevron.classList.toggle('is-open', open);
+    });
+  }
+  if (document.readyState === 'loading') {
+    document.addEventListener('DOMContentLoaded', hydrateStatic);
+  } else {
+    hydrateStatic();
+  }
+
+  window.LSCollapse = { wrap, isOpen, save };
+})();
diff --git a/public/assets/js/lightbox.js b/public/assets/js/lightbox.js
new file mode 100644
index 0000000..35e22b2
--- /dev/null
+++ b/public/assets/js/lightbox.js
@@ -0,0 +1,50 @@
+/**
+ * Lightbox: click any <img data-lightbox> to view the full image scaled to
+ * fit the window (contain), over a dim backdrop. Closes on backdrop click,
+ * Esc, or the × button. Self-contained; used by the listener page and the
+ * admin dashboard for the event banner.
+ */
+(function () {
+  let overlay = null;
+
+  function open(src, alt) {
+    if (!src || overlay) return;
+    overlay = document.createElement('div');
+    overlay.setAttribute('role', 'dialog');
+    overlay.setAttribute('aria-label', 'Image preview');
+    overlay.style.cssText =
+      'position:fixed;inset:0;z-index:150;display:flex;align-items:center;justify-content:center;' +
+      'background:rgba(4,6,10,.82);backdrop-filter:blur(3px);cursor:zoom-out;padding:24px;';
+    overlay.innerHTML =
+      '<button type="button" aria-label="Close" style="position:fixed;top:16px;right:16px;width:40px;height:40px;border-radius:50%;' +
+      'border:1px solid rgba(255,255,255,.25);background:rgba(15,18,26,.7);color:#fff;display:grid;place-items:center;cursor:pointer;">' +
+      '<span class="material-symbols-rounded" style="font-size:20px;">close</span></button>' +
+      '<img src="' + src + '" alt="' + (alt || 'Full image') + '" style="max-width:min(94vw,1600px);max-height:88vh;' +
+      'object-fit:contain;display:block;border-radius:8px;cursor:default;">';
+    overlay.addEventListener('click', (e) => { if (e.target === overlay || e.target.closest('button')) close(); });
+    document.body.appendChild(overlay);
+    document.addEventListener('keydown', escClose);
+    const prevOverflow = document.body.style.overflow;
+    document.body.style.overflow = 'hidden';
+    overlay._prevOverflow = prevOverflow;
+  }
+
+  function escClose(e) { if (e.key === 'Escape') close(); }
+
+  function close() {
+    if (!overlay) return;
+    document.removeEventListener('keydown', escClose);
+    document.body.style.overflow = overlay._prevOverflow || '';
+    overlay.remove();
+    overlay = null;
+  }
+
+  document.addEventListener('click', (e) => {
+    const img = e.target.closest('img[data-lightbox]');
+    if (!img) return;
+    e.preventDefault();
+    open(img.currentSrc || img.src, img.alt);
+  });
+
+  window.LSLightbox = { open, close };
+})();
diff --git a/public/assets/js/lowlatency.js b/public/assets/js/lowlatency.js
new file mode 100644
index 0000000..7a9d285
--- /dev/null
+++ b/public/assets/js/lowlatency.js
@@ -0,0 +1,192 @@
+/**
+ * LSLowLatency — MSE-backed low-latency playback for the listener page.
+ *
+ * WHY: a plain <audio src=...> streaming progressive MP3 lets the browser
+ * choose its own buffer-ahead — typically 3-4.5s on a fast LAN, and it DRIFTS
+ * upward after every WiFi hiccup (the reported "4-5 seconds" end-to-end).
+ * We control latency instead: fetch the same play-proxy stream ourselves and
+ * append it to a MediaSource SourceBuffer in small pieces, keeping only
+ * ~0.5s buffered ahead and snapping playback back to live when it drifts.
+ *
+ * Fallback: Safari/iOS do not support 'audio/mpeg' in MSE — callers check
+ * LSLowLatency.supported() and keep the plain <audio src> path there.
+ *
+ * The <audio> element itself is untouched — play()/pause()/paused/events all
+ * behave exactly as before, so the page's existing logic (grace, auto-resume,
+ * pause icon) keeps working on both paths.
+ */
+(function () {
+  // Icecast delivers to clients in ~500ms ticks (measured identical on 2.4.4
+  // and 2.5.0 — it is the server's write loop, not a bug we can tune away).
+  // The buffer target MUST sit above that tick or playback runs dry between
+  // bursts — that was the "periodic break". 0.75s absorbs the tick with
+  // margin; drift control uses an inaudible playbackRate nudge, and a real
+  // seek (audible skip) happens only on true runaway (>2.5s).
+  const TARGET_AHEAD = 0.75;   // steady-state buffered-ahead target
+  const RATE_NUDGE_ABOVE = 0.9; // ahead beyond this → play 4% faster until back
+  const RATE_NUDGE = 1.04;
+  const SEEK_ABOVE = 2.5;      // ahead beyond this → hard snap (paused long, runaway drift)
+  const SNAP_BACK = 0.30;      // after a hard snap, playhead sits this far behind live edge
+  const WAIT_SEEK_AHEAD = 0.4; // underrun: only jump if this much data exists
+  const MAX_TRIM = 12;         // periodically drop played-out buffer beyond this many seconds
+
+  class LSLowLatency {
+    static supported() {
+      try {
+        return !!(window.MediaSource && MediaSource.isTypeSupported &&
+          MediaSource.isTypeSupported('audio/mpeg') && window.ReadableStream);
+      } catch { return false; }
+    }
+
+    constructor(audioEl, { onError } = {}) {
+      this.audio = audioEl;
+      this.onError = onError || (() => {});
+      this.mediaSource = null;
+      this.sourceBuffer = null;
+      this.controller = null;
+      this.objectURL = null;
+      this.queue = [];
+      this.appending = false;
+      this.stopped = false;
+      this.lastSnapAt = 0;
+    }
+
+    /** Start feeding from url. The audio element's src is replaced by the
+     *  MediaSource object URL — callers then call audio.play() as usual. */
+    load(url) {
+      this.stop(); // tear down any previous session
+      this.stopped = false;
+      try {
+        this.mediaSource = new MediaSource();
+      } catch (e) {
+        this.onError(e); return false;
+      }
+      this.objectURL = URL.createObjectURL(this.mediaSource);
+      this.audio.src = this.objectURL;
+
+      this.mediaSource.addEventListener('sourceopen', () => {
+        try {
+          this.sourceBuffer = this.mediaSource.addSourceBuffer('audio/mpeg');
+          this.sourceBuffer.mode = 'sequence';
+          // updateend = the previous append FINISHED — clear the in-flight flag
+          // or every later _pump() returns early and the queue grows forever.
+          this.sourceBuffer.addEventListener('updateend', () => { this.appending = false; this._pump(); });
+          this.sourceBuffer.addEventListener('error', (e) => { this.appending = false; this.onError(e); });
+          this._fetch(url);
+        } catch (e) {
+          this.onError(e);
+        }
+      }, { once: true });
+
+      // Underrun recovery: with the buffer target above the 500ms delivery
+      // tick this should be rare (WiFi jitter). Only jump when meaningful
+      // data exists; otherwise let the next tick land — the element resumes
+      // by itself and the gap is a short silence, not an audible skip.
+      this._onWaiting = () => {
+        const b = this._bufferedEnd();
+        if (b !== null && b - this.audio.currentTime > WAIT_SEEK_AHEAD) {
+          this.audio.currentTime = Math.max(0, b - SNAP_BACK);
+          this.lastSnapAt = Date.now();
+        }
+      };
+      this.audio.addEventListener('waiting', this._onWaiting);
+      return true;
+    }
+
+    async _fetch(url) {
+      this.controller = new AbortController();
+      try {
+        const res = await fetch(url, { signal: this.controller.signal, cache: 'no-store' });
+        if (!res.ok || !res.body) throw new Error('proxy ' + res.status);
+        const reader = res.body.getReader();
+        for (;;) {
+          const { done, value } = await reader.read();
+          if (done) break;
+          if (this.stopped) return;
+          this.queue.push(value);
+          this._pump();
+        }
+      } catch (e) {
+        if (this.stopped || e.name === 'AbortError') return;
+        this.onError(e);
+      }
+    }
+
+    _pump() {
+      if (this.stopped || !this.sourceBuffer || this.appending) return;
+      const chunk = this.queue.shift();
+      if (!chunk) { this._trim(); return; }
+      try {
+        this.appending = true;
+        this.sourceBuffer.appendBuffer(chunk);
+      } catch (e) {
+        this.appending = false;
+        // QuotaExceeded or invalid state — drop the chunk; network continues
+        if (e.name !== 'QuotaExceededError') this.onError(e);
+      }
+      this._trim();
+    }
+
+    /** Keep the playhead near the live edge and drop played-out buffer.
+     *  Gentle by design: a 4% playbackRate nudge is inaudible; a SEEK is an
+     *  audible skip, reserved for true runaway (long pause resume, drift). */
+    _trim() {
+      const sb = this.sourceBuffer, a = this.audio;
+      if (!sb || sb.updating) return;
+      const end = this._bufferedEnd();
+      if (end === null) return;
+
+      const ahead = end - a.currentTime;
+      const now = Date.now();
+      if (ahead > SEEK_ABOVE && now - this.lastSnapAt > 1000) {
+        a.currentTime = Math.max(0, end - SNAP_BACK);
+        a.playbackRate = 1;
+        this.lastSnapAt = now;
+      } else if (ahead > RATE_NUDGE_ABOVE && !a.paused) {
+        if (a.playbackRate !== RATE_NUDGE) a.playbackRate = RATE_NUDGE;
+      } else if (a.playbackRate !== 1) {
+        a.playbackRate = 1;
+      }
+
+      // Remove played-out buffer so SourceBuffer quota never fills.
+      for (let i = 0; i < sb.buffered.length; i++) {
+        const s = sb.buffered.start(i), e2 = sb.buffered.end(i);
+        if (e2 - s > MAX_TRIM && a.currentTime - s > 2) {
+          try { sb.remove(s, Math.max(s, a.currentTime - 2)); } catch { /* busy; next pass */ }
+          break;
+        }
+      }
+    }
+
+    _bufferedEnd() {
+      const b = this.sourceBuffer ? this.sourceBuffer.buffered : this.audio.buffered;
+      if (!b || b.length === 0) return null;
+      return b.end(b.length - 1);
+    }
+
+    /** Latency in seconds between live edge and playhead (for diagnostics). */
+    stats() {
+      const end = this._bufferedEnd();
+      return {
+        mode: 'mse',
+        bufferedAhead: end === null ? null : Math.max(0, +(end - this.audio.currentTime).toFixed(2)),
+        queued: this.queue.length
+      };
+    }
+
+    stop() {
+      this.stopped = true;
+      try { this.controller?.abort(); } catch { /* already */ }
+      try { this.audio.removeEventListener('waiting', this._onWaiting); } catch { /* not attached */ }
+      try { if (this.sourceBuffer && !this.sourceBuffer.updating) this.sourceBuffer.abort(); } catch { /* closed */ }
+      try { if (this.mediaSource && this.mediaSource.readyState === 'open') this.mediaSource.endOfStream(); } catch { /* closed */ }
+      if (this.objectURL) { URL.revokeObjectURL(this.objectURL); this.objectURL = null; }
+      this.queue = [];
+      this.appending = false;
+      this.sourceBuffer = null;
+      this.mediaSource = null;
+    }
+  }
+
+  window.LSLowLatency = LSLowLatency;
+})();
diff --git a/public/assets/js/marquee.js b/public/assets/js/marquee.js
new file mode 100644
index 0000000..44b5141
--- /dev/null
+++ b/public/assets/js/marquee.js
@@ -0,0 +1,51 @@
+/**
+ * Marquee: single-line labels that scroll horizontally when they overflow
+ * (e.g. long audio device names). Hover pauses the scroll and the native
+ * title tooltip shows the full text. Auto-detects via MutationObserver —
+ * any element structured as <span class="mq" title="..."><span class="mq-inner">…</span></span>
+ * is scanned automatically after renders.
+ */
+(function () {
+  'use strict';
+
+  function scan() {
+    document.querySelectorAll('.mq').forEach((el) => {
+      const inner = el.querySelector('.mq-inner');
+      if (!inner) return;
+      const overflow = inner.scrollWidth - el.clientWidth;
+      if (overflow > 8) {
+        el.classList.add('mq-on');
+        const shift = -(overflow + 16);
+        el.style.setProperty('--mq-shift', shift + 'px');
+        // ~35px per second, min 2s
+        const dur = Math.max(2, Math.round(Math.abs(shift) / 35));
+        el.style.setProperty('--mq-dur', dur + 's');
+      } else {
+        el.classList.remove('mq-on');
+      }
+    });
+  }
+
+  let scheduled = false;
+  const observer = new MutationObserver(() => {
+    if (scheduled) return;
+    scheduled = true;
+    requestAnimationFrame(() => { scheduled = false; scan(); });
+  });
+
+  function init() {
+    scan();
+    if (document.body) {
+      observer.observe(document.body, { childList: true, subtree: true, characterData: true });
+    }
+  }
+
+  if (document.readyState === 'loading') {
+    document.addEventListener('DOMContentLoaded', init);
+  } else {
+    init();
+  }
+
+  window.addEventListener('resize', scan);
+  window.LSMarquee = { scan };
+})();
diff --git a/public/assets/js/notice-dismiss.js b/public/assets/js/notice-dismiss.js
new file mode 100644
index 0000000..681993e
--- /dev/null
+++ b/public/assets/js/notice-dismiss.js
@@ -0,0 +1,63 @@
+/**
+ * Dismissible notices helper.
+ * Notices that the user has dismissed stay hidden (per browser, via localStorage)
+ * and can be brought back with their inline "Show" stub.
+ *
+ * Usage:
+ *   if (LSNotices.isDismissed('security-warning')) { ...render stub... }
+ *   LSNotices.dismiss('security-warning');
+ *   LSNotices.restore('security-warning');
+ */
+(function () {
+  'use strict';
+
+  const PREFIX = 'lanstreamer.dismissed.';
+
+  function isDismissed(id) {
+    try { return localStorage.getItem(PREFIX + id) === '1'; } catch { return false; }
+  }
+
+  function dismiss(id) {
+    try { localStorage.setItem(PREFIX + id, '1'); } catch { /* storage unavailable */ }
+    document.dispatchEvent(new CustomEvent('lsnotice-dismissed', { detail: { id } }));
+  }
+
+  function restore(id) {
+    try { localStorage.removeItem(PREFIX + id); } catch { /* storage unavailable */ }
+    document.dispatchEvent(new CustomEvent('lsnotice-restored', { detail: { id } }));
+  }
+
+  /**
+   * Standard dismiss (x) button. Delegates the click, so it works from innerHTML.
+   */
+  function dismissButton(id, extraClasses) {
+    return `<button type="button" data-ls-dismiss="${id}" aria-label="Dismiss notice" class="flex-shrink-0 text-gray-400 hover:text-white transition-colors p-1 rounded-md hover:bg-white/10 ${extraClasses || ''}">
+      <span class="material-symbols-rounded text-lg" aria-hidden="true">close</span>
+    </button>`;
+  }
+
+  /**
+   * Compact stub shown in place of a dismissed notice, with a "Show" link.
+   */
+  function hiddenStub(id, label, extraClasses) {
+    return `<div class="flex items-center justify-start gap-2 py-2 text-xs text-gray-500 ${extraClasses || ''}">
+      <span>${label} hidden</span>
+      <button type="button" data-ls-restore="${id}" class="underline hover:text-gray-300 transition-colors">Show</button>
+    </div>`;
+  }
+
+  // Delegate clicks for data-ls-dismiss / data-ls-restore anywhere in the document
+  document.addEventListener('click', (e) => {
+    const dismissEl = e.target.closest('[data-ls-dismiss]');
+    if (dismissEl) {
+      dismiss(dismissEl.getAttribute('data-ls-dismiss'));
+      return;
+    }
+    const restoreEl = e.target.closest('[data-ls-restore]');
+    if (restoreEl) {
+      restore(restoreEl.getAttribute('data-ls-restore'));
+    }
+  });
+
+  window.LSNotices = { isDismissed, dismiss, restore, dismissButton, hiddenStub };
+})();
diff --git a/public/assets/js/notifications.js b/public/assets/js/notifications.js
new file mode 100644
index 0000000..feafc6f
--- /dev/null
+++ b/public/assets/js/notifications.js
@@ -0,0 +1,184 @@
+/**
+ * Notification center for the admin dashboard.
+ *
+ * A small persistent hub + header bell. Components push events:
+ *   LSNotifications.notify({ title, message, type })   // type: info|success|warning|error
+ *   LSNotifications.onChange(fn)                        // fn(item) after each push
+ *
+ * The bell button (#header-bell-btn) is rendered by HeaderComponent; this file
+ * binds it whenever it appears (MutationObserver-free: bindBell is called after
+ * header render, with a fallback scan on DOMContentLoaded). The bell "lights
+ * up" (accent + pulsing dot) while there are unread notifications; clicking it
+ * opens the panel and marks everything read.
+ */
+(function () {
+  const MAX_ITEMS = 30;
+  const items = [];
+  let bound = false;
+  let panelOpen = false;
+  const listeners = [];
+
+  const TYPE_META = {
+    info: { icon: 'info', cls: 'lsn-info' },
+    success: { icon: 'check_circle', cls: 'lsn-success' },
+    warning: { icon: 'warning', cls: 'lsn-warning' },
+    error: { icon: 'error', cls: 'lsn-error' },
+    stream: { icon: 'podcasts', cls: 'lsn-info' },
+    update: { icon: 'system_update', cls: 'lsn-success' }
+  };
+
+  function notify(n) {
+    if (!n || !n.title) return;
+    const item = {
+      id: 'n' + Date.now().toString(36) + Math.random().toString(36).slice(2, 6),
+      title: String(n.title),
+      message: String(n.message || ''),
+      type: TYPE_META[n.type] ? n.type : 'info',
+      ts: Date.now(),
+      read: false
+    };
+    // Polling sources re-report the same condition — collapse duplicates
+    const dup = items.find(i => i.title === item.title && item.ts - i.ts < 10000);
+    if (dup) { dup.ts = item.ts; return; }
+
+    items.unshift(item);
+    if (items.length > MAX_ITEMS) items.length = MAX_ITEMS;
+    renderBadge();
+    if (panelOpen) renderPanel();
+    listeners.forEach(fn => { try { fn(item); } catch (e) { /* listener bug shouldn't break the hub */ } });
+  }
+
+  function unreadCount() {
+    return items.filter(i => !i.read).length;
+  }
+
+  function markAllRead() {
+    items.forEach(i => { i.read = true; });
+    renderBadge();
+    if (panelOpen) renderPanel();
+  }
+
+  function clearAll() {
+    items.length = 0;
+    renderBadge();
+    renderPanel();
+  }
+
+  function timeAgo(ts) {
+    const s = Math.max(1, Math.floor((Date.now() - ts) / 1000));
+    if (s < 60) return s + 's ago';
+    if (s < 3600) return Math.floor(s / 60) + 'm ago';
+    return Math.floor(s / 3600) + 'h ago';
+  }
+
+  function ensurePanel(btn) {
+    let panel = document.getElementById('lsn-panel');
+    if (panel) return panel;
+    panel = document.createElement('div');
+    panel.id = 'lsn-panel';
+    panel.className = 'lsn-panel is-hidden';
+    panel.setAttribute('role', 'dialog');
+    panel.setAttribute('aria-label', 'Notifications');
+    btn.parentElement.appendChild(panel);
+    panel.addEventListener('click', (e) => e.stopPropagation());
+    document.addEventListener('click', (e) => {
+      if (panelOpen && !panel.contains(e.target) && !btn.contains(e.target)) closePanel();
+    });
+    document.addEventListener('keydown', (e) => {
+      if (e.key === 'Escape' && panelOpen) closePanel();
+    });
+    return panel;
+  }
+
+  function renderPanel() {
+    const panel = document.getElementById('lsn-panel');
+    if (!panel) return;
+    if (!panelOpen) { panel.classList.add('is-hidden'); return; }
+    panel.classList.remove('is-hidden');
+
+    if (items.length === 0) {
+      panel.innerHTML = `
+        <div class="lsn-empty">
+          <span class="material-symbols-rounded" aria-hidden="true">notifications_off</span>
+          <p>No notifications yet</p>
+          <p class="lsn-empty-sub">Stream failures, Icecast outages and update notices will appear here.</p>
+        </div>`;
+      return;
+    }
+
+    panel.innerHTML = `
+      <div class="lsn-head">
+        <span class="tok-label">Notifications</span>
+        <button type="button" class="lsn-clear" id="lsn-clear">Clear all</button>
+      </div>
+      <div class="lsn-list">
+        ${items.map(i => `
+          <div class="lsn-item ${i.read ? '' : 'is-unread'}">
+            <span class="material-symbols-rounded ${TYPE_META[i.type].cls}" aria-hidden="true">${TYPE_META[i.type].icon}</span>
+            <div class="lsn-item-body">
+              <p class="lsn-item-title">${i.title}</p>
+              ${i.message ? `<p class="lsn-item-msg">${i.message}</p>` : ''}
+              <p class="lsn-item-time">${timeAgo(i.ts)}</p>
+            </div>
+          </div>`).join('')}
+      </div>`;
+
+    const clear = document.getElementById('lsn-clear');
+    if (clear) clear.addEventListener('click', clearAll);
+  }
+
+  function openPanel() {
+    panelOpen = true;
+    renderPanel();
+    markAllRead();
+  }
+
+  function closePanel() {
+    panelOpen = false;
+    renderPanel();
+  }
+
+  function renderBadge() {
+    const btn = document.getElementById('header-bell-btn');
+    if (!btn) return;
+    const unread = unreadCount();
+    const badge = document.getElementById('header-bell-badge');
+    if (badge) badge.remove();
+    btn.classList.toggle('has-notifications', unread > 0);
+    btn.title = unread > 0 ? `${unread} unread notification${unread > 1 ? 's' : ''}` : 'No notifications';
+    btn.setAttribute('aria-label', btn.title);
+    if (unread > 0) {
+      const dot = document.createElement('span');
+      dot.id = 'header-bell-badge';
+      dot.className = 'lsn-badge';
+      dot.setAttribute('aria-hidden', 'true');
+      btn.appendChild(dot);
+    }
+  }
+
+  function bindBell() {
+    const btn = document.getElementById('header-bell-btn');
+    if (!btn || bound) return;
+    bound = true;
+    ensurePanel(btn);
+    btn.addEventListener('click', (e) => {
+      e.stopPropagation();
+      if (panelOpen) closePanel(); else openPanel();
+    });
+    renderBadge();
+    // Re-render relative timestamps while open
+    setInterval(() => { if (panelOpen) renderPanel(); }, 30000);
+  }
+
+  document.addEventListener('DOMContentLoaded', bindBell);
+
+  window.LSNotifications = {
+    notify,
+    markAllRead,
+    clearAll,
+    items,
+    unreadCount,
+    bindBell,
+    onChange(fn) { if (typeof fn === 'function') listeners.push(fn); }
+  };
+})();
diff --git a/public/assets/js/pwtoggle.js b/public/assets/js/pwtoggle.js
new file mode 100644
index 0000000..3dc1815
--- /dev/null
+++ b/public/assets/js/pwtoggle.js
@@ -0,0 +1,84 @@
+/**
+ * LSPwToggle — eye-icon visibility toggle for every password field.
+ *
+ * Auto-wires ALL <input type="password"> on load AND watches the DOM for
+ * fields injected later (component-rendered cards) — pages just include this
+ * file; no markup changes needed. The button is flat/token-styled, icon-only
+ * with tooltips, and swallows mousedown so typing focus never leaves the field.
+ */
+(function () {
+  const ICONS = { show: 'visibility', hide: 'visibility_off' };
+
+  function wire(input) {
+    if (input.__pwToggle) return;
+    input.__pwToggle = true;
+
+    // Wrap the input in a relative container holding the eye button — works
+    // for bare inputs and inputs inside <label> alike, no markup assumptions.
+    const wrapper = document.createElement('div');
+    wrapper.style.position = 'relative';
+    wrapper.style.display = 'inline-block';
+    wrapper.style.width = '100%';
+    input.parentNode.insertBefore(wrapper, input);
+    wrapper.appendChild(input);
+
+    const btn = document.createElement('button');
+    btn.type = 'button';
+    btn.className = 'iconbtn';
+    btn.setAttribute('aria-label', 'Show password');
+    btn.setAttribute('aria-pressed', 'false');
+    btn.title = 'Show password';
+    btn.style.cssText =
+      'position:absolute;top:50%;right:6px;transform:translateY(-50%);' +
+      'width:28px;height:28px;display:grid;place-items:center;' +
+      'background:none;border:none;cursor:pointer;color:var(--tok-text-3);padding:0;';
+    btn.innerHTML = `<span class="material-symbols-rounded" style="font-size:17px;" aria-hidden="true">${ICONS.show}</span>`;
+
+    // Keep the caret in the field: swallow the mouse gesture that would blur.
+    btn.addEventListener('mousedown', (e) => e.preventDefault());
+    btn.addEventListener('click', () => {
+      const revealing = input.type === 'password';
+      input.type = revealing ? 'text' : 'password';
+      btn.setAttribute('aria-pressed', revealing ? 'true' : 'false');
+      btn.setAttribute('aria-label', revealing ? 'Hide password' : 'Show password');
+      btn.title = revealing ? 'Hide password' : 'Show password';
+      btn.firstElementChild.textContent = revealing ? ICONS.hide : ICONS.show;
+      // Some browsers move the caret when the type flips — put it back.
+      try { input.setSelectionRange(input.value.length, input.value.length); } catch (e) { /* type=text ok */ }
+    });
+    // Space/Enter on the button behave as click natively (real <button>).
+
+    // Room for the icon so typed text never runs under it
+    const currentPad = getComputedStyle(input).paddingRight || '10px';
+    input.style.paddingRight = `calc(${currentPad} + 26px)`;
+
+    wrapper.appendChild(btn);
+  }
+
+  function scan(root) {
+    (root || document).querySelectorAll('input[type="password"]').forEach(wire);
+  }
+
+  function init() {
+    scan(document);
+    // Component-rendered cards (Admin account etc.) inject fields after load
+    const mo = new MutationObserver((mutations) => {
+      for (const m of mutations) {
+        for (const node of m.addedNodes) {
+          if (node.nodeType !== 1) continue;
+          if (node.tagName === 'INPUT' && node.type === 'password') wire(node);
+          else if (node.querySelectorAll) scan(node);
+        }
+      }
+    });
+    mo.observe(document.body, { childList: true, subtree: true });
+  }
+
+  if (document.readyState === 'loading') {
+    document.addEventListener('DOMContentLoaded', init);
+  } else {
+    init();
+  }
+
+  window.LSPwToggle = { scan };
+})();
diff --git a/public/assets/js/qr-share.js b/public/assets/js/qr-share.js
new file mode 100644
index 0000000..4bba670
--- /dev/null
+++ b/public/assets/js/qr-share.js
@@ -0,0 +1,59 @@
+/**
+ * Share popup with QR code: LSShare.show(url) opens a small modal with a
+ * scannable QR (served offline by /api/qr), the URL, and a copy button.
+ */
+(function () {
+  'use strict';
+
+  function show(url) {
+    close();
+    const modal = document.createElement('div');
+    modal.className = 'fixed inset-0 z-[70] flex items-center justify-center bg-black/60 p-4';
+    modal.id = 'ls-share-modal';
+    modal.setAttribute('role', 'dialog');
+    modal.setAttribute('aria-label', 'Share listener page');
+    modal.innerHTML = `
+      <div class="w-full max-w-sm rounded-2xl p-6 text-center"
+           style="background:var(--tok-surface-1,#1A1A1A);border:1px solid var(--tok-line-strong,#2F2F2F);box-shadow:var(--tok-shadow-pop,0 12px 40px rgba(0,0,0,.55));">
+        <h3 class="text-base font-semibold mb-1" style="color:var(--tok-text-1,#fff);">Scan to listen</h3>
+        <p class="text-xs mb-4" style="color:var(--tok-text-3,#8A93A0);">Open the listener page on your phone</p>
+        <div class="mx-auto w-fit p-3 bg-white rounded-xl">
+          <img src="/api/system/qr?url=${encodeURIComponent(url)}" alt="QR code for ${url}"
+               width="240" height="240" style="display:block;">
+        </div>
+        <p class="mt-4 text-xs break-all font-mono" style="color:var(--tok-text-2,#9AA3B2);">${url}</p>
+        <div class="flex gap-2 mt-4">
+          <button type="button" data-share-copy class="flex-1 px-4 py-2.5 rounded-full text-sm font-semibold text-white"
+                  style="background:linear-gradient(135deg,var(--tok-accent,#00AEEF),var(--tok-accent-strong,#0088CC));">
+            Copy link
+          </button>
+          <button type="button" data-share-close class="px-4 py-2.5 rounded-full text-sm font-semibold"
+                  style="background:var(--tok-surface-2,#12151C);color:var(--tok-text-1,#fff);border:1px solid var(--tok-line-strong,#2F2F2F);">
+            Close
+          </button>
+        </div>
+      </div>
+    `;
+    document.body.appendChild(modal);
+
+    modal.querySelector('[data-share-close]').addEventListener('click', close);
+    modal.addEventListener('click', (e) => { if (e.target === modal) close(); });
+    modal.querySelector('[data-share-copy]').addEventListener('click', async (e) => {
+      try {
+        await navigator.clipboard.writeText(url);
+        e.target.textContent = 'Copied!';
+        setTimeout(() => { e.target.textContent = 'Copy link'; }, 1500);
+      } catch {
+        window.prompt('Copy this link:', url);
+      }
+    });
+  }
+
+  function close() {
+    document.getElementById('ls-share-modal')?.remove();
+  }
+
+  document.addEventListener('keydown', (e) => { if (e.key === 'Escape') close(); });
+
+  window.LSShare = { show, close };
+})();
diff --git a/public/assets/js/theme-toggle.js b/public/assets/js/theme-toggle.js
new file mode 100644
index 0000000..6adb122
--- /dev/null
+++ b/public/assets/js/theme-toggle.js
@@ -0,0 +1,62 @@
+/**
+ * Theme toggle: dark (default) / light mode.
+ * Persists choice in localStorage, honours prefers-color-scheme on first
+ * visit, and swaps any logo with [data-theme-logo] between the dark and
+ * light SVG variants.
+ */
+(function () {
+  'use strict';
+
+  const KEY = 'lanstreamer.theme';
+  const DARK_LOGO = '/assets/logo.svg?v=3';
+  const LIGHT_LOGO = '/assets/logo-light.svg?v=3';
+
+  function apply(theme) {
+    document.documentElement.setAttribute('data-theme', theme);
+    document.querySelectorAll('img[data-theme-logo]').forEach((img) => {
+      if (img.getAttribute('src') !== DARK_LOGO && img.getAttribute('src') !== LIGHT_LOGO) {
+        // Custom/fallback logo in play — leave it alone
+        return;
+      }
+      img.setAttribute('src', theme === 'light' ? LIGHT_LOGO : DARK_LOGO);
+    });
+    document.querySelectorAll('[data-theme-toggle]').forEach((btn) => {
+      btn.setAttribute('aria-label', theme === 'light' ? 'Switch to dark mode' : 'Switch to light mode');
+      btn.setAttribute('aria-pressed', String(theme === 'light'));
+      const icon = btn.querySelector('.material-symbols-rounded');
+      if (icon) icon.textContent = theme === 'light' ? 'dark_mode' : 'light_mode';
+    });
+  }
+
+  function current() {
+    try { return localStorage.getItem(KEY) || 'dark'; } catch { return 'dark'; }
+  }
+
+  function init() {
+    let theme = current();
+    if (!localStorage.getItem(KEY) && window.matchMedia?.('(prefers-color-scheme: light)').matches) {
+      theme = 'light';
+    }
+    apply(theme);
+    document.addEventListener('click', (e) => {
+      const btn = e.target.closest('[data-theme-toggle]');
+      if (!btn) return;
+      const next = current() === 'light' ? 'dark' : 'light';
+      try { localStorage.setItem(KEY, next); } catch { /* ignore */ }
+      apply(next);
+    });
+  }
+
+  // For components rendered AFTER init() ran (the dashboard header is injected
+  // post-boot, so apply()'s one-time swap misses it): ask for the right logo
+  // at render time. Attribute is the source of truth (set by every apply()).
+  window.LSTheme = {
+    logoSrc: () => (document.documentElement.getAttribute('data-theme') === 'light' ? LIGHT_LOGO : DARK_LOGO)
+  };
+
+  if (document.readyState === 'loading') {
+    document.addEventListener('DOMContentLoaded', init);
+  } else {
+    init();
+  }
+})();
diff --git a/public/assets/js/toasts.js b/public/assets/js/toasts.js
new file mode 100644
index 0000000..f1723bd
--- /dev/null
+++ b/public/assets/js/toasts.js
@@ -0,0 +1,93 @@
+/**
+ * Toast notifications that STACK instead of overlapping.
+ *
+ * Every earlier implementation positioned toasts at a fixed spot, so a second
+ * toast covered the first. LSToasts keeps one container per page and appends
+ * into it; new toasts push older ones down.
+ *
+ *   LSToasts.show('Connecting…', 'info', { tag: 'play' })   // same tag replaces
+ *   LSToasts.show('Now playing', 'success', { tag: 'play' })
+ *   LSToasts.dismiss('play')                                // remove by tag
+ *
+ * Toast styles come from .toast / .toast-* classes in ui.css (token-driven,
+ * both themes).
+ */
+(function () {
+  const DEFAULT_TIMEOUT = { info: 6000, success: 6000, warning: 10000, error: 30000 };
+  const live = new Map(); // tag -> element
+
+  function container() {
+    let el = document.getElementById('toast-stack');
+    if (!el) {
+      el = document.createElement('div');
+      el.id = 'toast-stack';
+      el.className = 'toast-stack';
+      el.setAttribute('aria-live', 'polite');
+      document.body.appendChild(el);
+    }
+    return el;
+  }
+
+  function dismiss(tag) {
+    const el = live.get(tag);
+    if (!el) return;
+    live.delete(tag);
+    remove(el);
+  }
+
+  function remove(el) {
+    el.classList.add('is-leaving');
+    setTimeout(() => el.remove(), 300);
+  }
+
+  function show(message, type = 'info', opts = {}) {
+    // A tagged toast replaces its predecessor (e.g. "Connecting…" → "Now playing")
+    if (opts.tag) dismiss(opts.tag);
+
+    const stack = container();
+    // Prune so a burst of toasts can't pile up unbounded
+    while (stack.children.length >= 4) remove(stack.firstElementChild);
+
+    const toast = document.createElement('div');
+    toast.className = `toast toast-${type}`;
+    toast.setAttribute('role', type === 'error' ? 'alert' : 'status');
+    toast.innerHTML = `
+      <span class="material-symbols-rounded toast-icon" aria-hidden="true">${
+        type === 'success' ? 'check_circle' : type === 'error' ? 'error' : type === 'warning' ? 'warning' : 'info'
+      }</span>
+      <span class="toast-message"></span>
+      <button type="button" class="toast-close" aria-label="Dismiss notification">
+        <span class="material-symbols-rounded" aria-hidden="true">close</span>
+      </button>`;
+    // Fill text via textContent — message may contain user-controlled stream names
+    toast.querySelector('.toast-message').textContent = message;
+
+    if (opts.tag) live.set(opts.tag, toast);
+    toast.querySelector('.toast-close').addEventListener('click', () => {
+      if (opts.tag) live.delete(opts.tag);
+      remove(toast);
+    });
+    if (opts.linkUrl && opts.linkText) {
+      const a = document.createElement('a');
+      a.href = opts.linkUrl;
+      a.textContent = opts.linkText;
+      a.target = '_blank';
+      a.rel = 'noopener';
+      a.style.cssText = 'color:var(--tok-accent);text-decoration:underline;white-space:nowrap;margin-left:0.375rem;';
+      toast.querySelector('.toast-message').appendChild(a);
+    }
+
+    stack.appendChild(toast);
+    requestAnimationFrame(() => toast.classList.add('is-visible'));
+
+    const timeout = opts.timeoutMs ?? DEFAULT_TIMEOUT[type] ?? 6000;
+    setTimeout(() => {
+      if (toast.isConnected) {
+        if (opts.tag && live.get(opts.tag) === toast) live.delete(opts.tag);
+        remove(toast);
+      }
+    }, timeout);
+  }
+
+  window.LSToasts = { show, dismiss };
+})();
diff --git a/public/assets/logo-light.svg b/public/assets/logo-light.svg
new file mode 100644
index 0000000..5c8b621
--- /dev/null
+++ b/public/assets/logo-light.svg
@@ -0,0 +1,29 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 520 96" role="img" aria-label="LANStreamer">
+  <!--
+    LANStreamer logo — light theme (dark text) for use on light backgrounds.
+    Same geometry as logo.svg; only the wordmark fill changes.
+  -->
+  <defs>
+    <linearGradient id="tile" x1="0" y1="0" x2="1" y2="1">
+      <stop offset="0" stop-color="#00AEEF"/>
+      <stop offset="1" stop-color="#0088CC"/>
+    </linearGradient>
+  </defs>
+
+  <g id="mark">
+    <rect x="0" y="0" width="96" height="96" rx="24" fill="url(#tile)"/>
+    <path id="arc" d="M 60 26 A 22 22 0 0 1 74 40" fill="none"
+          stroke="#FFFFFF" stroke-width="7" stroke-linecap="round" opacity="0.9"/>
+    <g id="bars" fill="#FFFFFF">
+      <rect x="28" y="54" width="9" height="18" rx="4.5"/>
+      <rect x="45" y="38" width="9" height="34" rx="4.5"/>
+      <rect x="62" y="48" width="9" height="24" rx="4.5"/>
+    </g>
+  </g>
+
+  <g id="wordmark" fill="#111111"
+     font-family="Inter, 'Segoe UI', 'Noto Sans', Arial, sans-serif">
+    <text id="word-lan" x="120" y="62" font-size="44" font-weight="800" letter-spacing="0.5">LAN</text>
+    <text id="word-streamer" x="220" y="62" font-size="44" font-weight="400" fill="#33475B">Streamer</text>
+  </g>
+</svg>
diff --git a/public/assets/logo-mark.svg b/public/assets/logo-mark.svg
new file mode 100644
index 0000000..750ef51
--- /dev/null
+++ b/public/assets/logo-mark.svg
@@ -0,0 +1,23 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 96 96" role="img" aria-label="LANStreamer">
+  <!--
+    LANStreamer mark only (square app icon / favicon source).
+    Reads on both dark and light backgrounds — the tile carries its own color.
+  -->
+  <defs>
+    <linearGradient id="tile" x1="0" y1="0" x2="1" y2="1">
+      <stop offset="0" stop-color="#00AEEF"/>
+      <stop offset="1" stop-color="#0088CC"/>
+    </linearGradient>
+  </defs>
+
+  <g id="mark">
+    <rect x="0" y="0" width="96" height="96" rx="24" fill="url(#tile)"/>
+    <path id="arc" d="M 60 26 A 22 22 0 0 1 74 40" fill="none"
+          stroke="#FFFFFF" stroke-width="7" stroke-linecap="round" opacity="0.9"/>
+    <g id="bars" fill="#FFFFFF">
+      <rect x="28" y="54" width="9" height="18" rx="4.5"/>
+      <rect x="45" y="38" width="9" height="34" rx="4.5"/>
+      <rect x="62" y="48" width="9" height="24" rx="4.5"/>
+    </g>
+  </g>
+</svg>
diff --git a/public/assets/logo.svg b/public/assets/logo.svg
new file mode 100644
index 0000000..b9bdb11
--- /dev/null
+++ b/public/assets/logo.svg
@@ -0,0 +1,37 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 520 96" role="img" aria-label="LANStreamer">
+  <!--
+    LANStreamer logo (dark theme, light text).
+    Editable source: mark (left) and wordmark (right). Colors reference the
+    app design tokens: primary #00AEEF, gradient #00AEEF to #0088CC.
+    For light backgrounds use logo-light.svg; mark alone in logo-mark.svg.
+    Wordmark uses a font stack; embed Inter as a path if pixel-exact
+    reproduction inside img tags is ever needed.
+  -->
+  <defs>
+    <linearGradient id="tile" x1="0" y1="0" x2="1" y2="1">
+      <stop offset="0" stop-color="#00AEEF"/>
+      <stop offset="1" stop-color="#0088CC"/>
+    </linearGradient>
+  </defs>
+
+  <!-- ===================== Mark ===================== -->
+  <g id="mark">
+    <rect x="0" y="0" width="96" height="96" rx="24" fill="url(#tile)"/>
+    <!-- broadcast arc above the tallest bar -->
+    <path id="arc" d="M 60 26 A 22 22 0 0 1 74 40" fill="none"
+          stroke="#FFFFFF" stroke-width="7" stroke-linecap="round" opacity="0.9"/>
+    <!-- equalizer bars -->
+    <g id="bars" fill="#FFFFFF">
+      <rect x="28" y="54" width="9" height="18" rx="4.5"/>
+      <rect x="45" y="38" width="9" height="34" rx="4.5"/>
+      <rect x="62" y="48" width="9" height="24" rx="4.5"/>
+    </g>
+  </g>
+
+  <!-- ===================== Wordmark ===================== -->
+  <g id="wordmark" fill="#FFFFFF"
+     font-family="Inter, 'Segoe UI', 'Noto Sans', Arial, sans-serif">
+    <text id="word-lan" x="120" y="62" font-size="44" font-weight="800" letter-spacing="0.5">LAN</text>
+    <text id="word-streamer" x="220" y="62" font-size="44" font-weight="400" fill="#E6F7FE">Streamer</text>
+  </g>
+</svg>
diff --git a/public/assets/vendor/fonts/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7SUc.woff2 b/public/assets/vendor/fonts/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7SUc.woff2
new file mode 100644
index 0000000..d750914
Binary files /dev/null and b/public/assets/vendor/fonts/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7SUc.woff2 differ
diff --git a/public/assets/vendor/fonts/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 b/public/assets/vendor/fonts/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2
new file mode 100644
index 0000000..d15208d
Binary files /dev/null and b/public/assets/vendor/fonts/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 differ
diff --git a/public/assets/vendor/fonts/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1pL7SUc.woff2 b/public/assets/vendor/fonts/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1pL7SUc.woff2
new file mode 100644
index 0000000..024f077
Binary files /dev/null and b/public/assets/vendor/fonts/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1pL7SUc.woff2 differ
diff --git a/public/assets/vendor/fonts/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7SUc.woff2 b/public/assets/vendor/fonts/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7SUc.woff2
new file mode 100644
index 0000000..479d010
Binary files /dev/null and b/public/assets/vendor/fonts/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7SUc.woff2 differ
diff --git a/public/assets/vendor/fonts/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2JL7SUc.woff2 b/public/assets/vendor/fonts/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2JL7SUc.woff2
new file mode 100644
index 0000000..de83a9c
Binary files /dev/null and b/public/assets/vendor/fonts/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2JL7SUc.woff2 differ
diff --git a/public/assets/vendor/fonts/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2ZL7SUc.woff2 b/public/assets/vendor/fonts/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2ZL7SUc.woff2
new file mode 100644
index 0000000..6e7141f
Binary files /dev/null and b/public/assets/vendor/fonts/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2ZL7SUc.woff2 differ
diff --git a/public/assets/vendor/fonts/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2pL7SUc.woff2 b/public/assets/vendor/fonts/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2pL7SUc.woff2
new file mode 100644
index 0000000..a40c469
Binary files /dev/null and b/public/assets/vendor/fonts/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2pL7SUc.woff2 differ
diff --git a/public/assets/vendor/fonts/V8mDoQDjQSkFtoMM3T6r8E7mPb54C-s0.woff2 b/public/assets/vendor/fonts/V8mDoQDjQSkFtoMM3T6r8E7mPb54C-s0.woff2
new file mode 100644
index 0000000..ce97d0f
Binary files /dev/null and b/public/assets/vendor/fonts/V8mDoQDjQSkFtoMM3T6r8E7mPb54C-s0.woff2 differ
diff --git a/public/assets/vendor/fonts/V8mDoQDjQSkFtoMM3T6r8E7mPb94C-s0.woff2 b/public/assets/vendor/fonts/V8mDoQDjQSkFtoMM3T6r8E7mPb94C-s0.woff2
new file mode 100644
index 0000000..db732c2
Binary files /dev/null and b/public/assets/vendor/fonts/V8mDoQDjQSkFtoMM3T6r8E7mPb94C-s0.woff2 differ
diff --git a/public/assets/vendor/fonts/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 b/public/assets/vendor/fonts/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2
new file mode 100644
index 0000000..0f3474e
Binary files /dev/null and b/public/assets/vendor/fonts/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 differ
diff --git a/public/assets/vendor/fonts/fonts.css b/public/assets/vendor/fonts/fonts.css
new file mode 100644
index 0000000..bd7e3f3
--- /dev/null
+++ b/public/assets/vendor/fonts/fonts.css
@@ -0,0 +1,958 @@
+/* cyrillic-ext */
+@font-face {
+  font-family: 'Inter';
+  font-style: normal;
+  font-weight: 300;
+  font-display: swap;
+  src: url(UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2JL7SUc.woff2) format('woff2');
+  unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;
+}
+/* cyrillic */
+@font-face {
+  font-family: 'Inter';
+  font-style: normal;
+  font-weight: 300;
+  font-display: swap;
+  src: url(UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7SUc.woff2) format('woff2');
+  unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;
+}
+/* greek-ext */
+@font-face {
+  font-family: 'Inter';
+  font-style: normal;
+  font-weight: 300;
+  font-display: swap;
+  src: url(UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2ZL7SUc.woff2) format('woff2');
+  unicode-range: U+1F00-1FFF;
+}
+/* greek */
+@font-face {
+  font-family: 'Inter';
+  font-style: normal;
+  font-weight: 300;
+  font-display: swap;
+  src: url(UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1pL7SUc.woff2) format('woff2');
+  unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;
+}
+/* vietnamese */
+@font-face {
+  font-family: 'Inter';
+  font-style: normal;
+  font-weight: 300;
+  font-display: swap;
+  src: url(UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2pL7SUc.woff2) format('woff2');
+  unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;
+}
+/* latin-ext */
+@font-face {
+  font-family: 'Inter';
+  font-style: normal;
+  font-weight: 300;
+  font-display: swap;
+  src: url(UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7SUc.woff2) format('woff2');
+  unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C4, U+2113, U+2C60-2C7F, U+A720-A7FF;
+}
+/* latin */
+@font-face {
+  font-family: 'Inter';
+  font-style: normal;
+  font-weight: 300;
+  font-display: swap;
+  src: url(UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2) format('woff2');
+  unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+}
+/* cyrillic-ext */
+@font-face {
+  font-family: 'Inter';
+  font-style: normal;
+  font-weight: 400;
+  font-display: swap;
+  src: url(UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2JL7SUc.woff2) format('woff2');
+  unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;
+}
+/* cyrillic */
+@font-face {
+  font-family: 'Inter';
+  font-style: normal;
+  font-weight: 400;
+  font-display: swap;
+  src: url(UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7SUc.woff2) format('woff2');
+  unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;
+}
+/* greek-ext */
+@font-face {
+  font-family: 'Inter';
+  font-style: normal;
+  font-weight: 400;
+  font-display: swap;
+  src: url(UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2ZL7SUc.woff2) format('woff2');
+  unicode-range: U+1F00-1FFF;
+}
+/* greek */
+@font-face {
+  font-family: 'Inter';
+  font-style: normal;
+  font-weight: 400;
+  font-display: swap;
+  src: url(UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1pL7SUc.woff2) format('woff2');
+  unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;
+}
+/* vietnamese */
+@font-face {
+  font-family: 'Inter';
+  font-style: normal;
+  font-weight: 400;
+  font-display: swap;
+  src: url(UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2pL7SUc.woff2) format('woff2');
+  unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;
+}
+/* latin-ext */
+@font-face {
+  font-family: 'Inter';
+  font-style: normal;
+  font-weight: 400;
+  font-display: swap;
+  src: url(UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7SUc.woff2) format('woff2');
+  unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C4, U+2113, U+2C60-2C7F, U+A720-A7FF;
+}
+/* latin */
+@font-face {
+  font-family: 'Inter';
+  font-style: normal;
+  font-weight: 400;
+  font-display: swap;
+  src: url(UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2) format('woff2');
+  unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+}
+/* cyrillic-ext */
+@font-face {
+  font-family: 'Inter';
+  font-style: normal;
+  font-weight: 500;
+  font-display: swap;
+  src: url(UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2JL7SUc.woff2) format('woff2');
+  unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;
+}
+/* cyrillic */
+@font-face {
+  font-family: 'Inter';
+  font-style: normal;
+  font-weight: 500;
+  font-display: swap;
+  src: url(UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7SUc.woff2) format('woff2');
+  unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;
+}
+/* greek-ext */
+@font-face {
+  font-family: 'Inter';
+  font-style: normal;
+  font-weight: 500;
+  font-display: swap;
+  src: url(UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2ZL7SUc.woff2) format('woff2');
+  unicode-range: U+1F00-1FFF;
+}
+/* greek */
+@font-face {
+  font-family: 'Inter';
+  font-style: normal;
+  font-weight: 500;
+  font-display: swap;
+  src: url(UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1pL7SUc.woff2) format('woff2');
+  unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;
+}
+/* vietnamese */
+@font-face {
+  font-family: 'Inter';
+  font-style: normal;
+  font-weight: 500;
+  font-display: swap;
+  src: url(UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2pL7SUc.woff2) format('woff2');
+  unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;
+}
+/* latin-ext */
+@font-face {
+  font-family: 'Inter';
+  font-style: normal;
+  font-weight: 500;
+  font-display: swap;
+  src: url(UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7SUc.woff2) format('woff2');
+  unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C4, U+2113, U+2C60-2C7F, U+A720-A7FF;
+}
+/* latin */
+@font-face {
+  font-family: 'Inter';
+  font-style: normal;
+  font-weight: 500;
+  font-display: swap;
+  src: url(UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2) format('woff2');
+  unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+}
+/* cyrillic-ext */
+@font-face {
+  font-family: 'Inter';
+  font-style: normal;
+  font-weight: 600;
+  font-display: swap;
+  src: url(UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2JL7SUc.woff2) format('woff2');
+  unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;
+}
+/* cyrillic */
+@font-face {
+  font-family: 'Inter';
+  font-style: normal;
+  font-weight: 600;
+  font-display: swap;
+  src: url(UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7SUc.woff2) format('woff2');
+  unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;
+}
+/* greek-ext */
+@font-face {
+  font-family: 'Inter';
+  font-style: normal;
+  font-weight: 600;
+  font-display: swap;
+  src: url(UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2ZL7SUc.woff2) format('woff2');
+  unicode-range: U+1F00-1FFF;
+}
+/* greek */
+@font-face {
+  font-family: 'Inter';
+  font-style: normal;
+  font-weight: 600;
+  font-display: swap;
+  src: url(UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1pL7SUc.woff2) format('woff2');
+  unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;
+}
+/* vietnamese */
+@font-face {
+  font-family: 'Inter';
+  font-style: normal;
+  font-weight: 600;
+  font-display: swap;
+  src: url(UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2pL7SUc.woff2) format('woff2');
+  unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;
+}
+/* latin-ext */
+@font-face {
+  font-family: 'Inter';
+  font-style: normal;
+  font-weight: 600;
+  font-display: swap;
+  src: url(UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7SUc.woff2) format('woff2');
+  unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C4, U+2113, U+2C60-2C7F, U+A720-A7FF;
+}
+/* latin */
+@font-face {
+  font-family: 'Inter';
+  font-style: normal;
+  font-weight: 600;
+  font-display: swap;
+  src: url(UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2) format('woff2');
+  unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+}
+/* cyrillic-ext */
+@font-face {
+  font-family: 'Inter';
+  font-style: normal;
+  font-weight: 700;
+  font-display: swap;
+  src: url(UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2JL7SUc.woff2) format('woff2');
+  unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;
+}
+/* cyrillic */
+@font-face {
+  font-family: 'Inter';
+  font-style: normal;
+  font-weight: 700;
+  font-display: swap;
+  src: url(UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7SUc.woff2) format('woff2');
+  unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;
+}
+/* greek-ext */
+@font-face {
+  font-family: 'Inter';
+  font-style: normal;
+  font-weight: 700;
+  font-display: swap;
+  src: url(UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2ZL7SUc.woff2) format('woff2');
+  unicode-range: U+1F00-1FFF;
+}
+/* greek */
+@font-face {
+  font-family: 'Inter';
+  font-style: normal;
+  font-weight: 700;
+  font-display: swap;
+  src: url(UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1pL7SUc.woff2) format('woff2');
+  unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;
+}
+/* vietnamese */
+@font-face {
+  font-family: 'Inter';
+  font-style: normal;
+  font-weight: 700;
+  font-display: swap;
+  src: url(UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2pL7SUc.woff2) format('woff2');
+  unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;
+}
+/* latin-ext */
+@font-face {
+  font-family: 'Inter';
+  font-style: normal;
+  font-weight: 700;
+  font-display: swap;
+  src: url(UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7SUc.woff2) format('woff2');
+  unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C4, U+2113, U+2C60-2C7F, U+A720-A7FF;
+}
+/* latin */
+@font-face {
+  font-family: 'Inter';
+  font-style: normal;
+  font-weight: 700;
+  font-display: swap;
+  src: url(UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2) format('woff2');
+  unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+}
+/* cyrillic-ext */
+@font-face {
+  font-family: 'Inter';
+  font-style: normal;
+  font-weight: 900;
+  font-display: swap;
+  src: url(UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2JL7SUc.woff2) format('woff2');
+  unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;
+}
+/* cyrillic */
+@font-face {
+  font-family: 'Inter';
+  font-style: normal;
+  font-weight: 900;
+  font-display: swap;
+  src: url(UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7SUc.woff2) format('woff2');
+  unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;
+}
+/* greek-ext */
+@font-face {
+  font-family: 'Inter';
+  font-style: normal;
+  font-weight: 900;
+  font-display: swap;
+  src: url(UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2ZL7SUc.woff2) format('woff2');
+  unicode-range: U+1F00-1FFF;
+}
+/* greek */
+@font-face {
+  font-family: 'Inter';
+  font-style: normal;
+  font-weight: 900;
+  font-display: swap;
+  src: url(UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1pL7SUc.woff2) format('woff2');
+  unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;
+}
+/* vietnamese */
+@font-face {
+  font-family: 'Inter';
+  font-style: normal;
+  font-weight: 900;
+  font-display: swap;
+  src: url(UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2pL7SUc.woff2) format('woff2');
+  unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;
+}
+/* latin-ext */
+@font-face {
+  font-family: 'Inter';
+  font-style: normal;
+  font-weight: 900;
+  font-display: swap;
+  src: url(UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7SUc.woff2) format('woff2');
+  unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C4, U+2113, U+2C60-2C7F, U+A720-A7FF;
+}
+/* latin */
+@font-face {
+  font-family: 'Inter';
+  font-style: normal;
+  font-weight: 900;
+  font-display: swap;
+  src: url(UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2) format('woff2');
+  unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+}
+
+
+/* cyrillic-ext */
+@font-face {
+  font-family: 'Noto Sans';
+  font-style: normal;
+  font-weight: 400;
+  font-stretch: 100%;
+  font-display: swap;
+  src: url(o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5aPdu2ui.woff2) format('woff2');
+  unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;
+}
+/* cyrillic */
+@font-face {
+  font-family: 'Noto Sans';
+  font-style: normal;
+  font-weight: 400;
+  font-stretch: 100%;
+  font-display: swap;
+  src: url(o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5ardu2ui.woff2) format('woff2');
+  unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;
+}
+/* devanagari */
+@font-face {
+  font-family: 'Noto Sans';
+  font-style: normal;
+  font-weight: 400;
+  font-stretch: 100%;
+  font-display: swap;
+  src: url(o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a_du2ui.woff2) format('woff2');
+  unicode-range: U+0900-097F, U+1CD0-1CF4, U+1CF7-1CF9, U+200C-200D, U+20A8, U+20B9, U+20F0, U+25CC, U+A830-A839, U+A8E0-A8FF, U+11B00-11B0A;
+}
+/* greek-ext */
+@font-face {
+  font-family: 'Noto Sans';
+  font-style: normal;
+  font-weight: 400;
+  font-stretch: 100%;
+  font-display: swap;
+  src: url(o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5aLdu2ui.woff2) format('woff2');
+  unicode-range: U+1F00-1FFF;
+}
+/* greek */
+@font-face {
+  font-family: 'Noto Sans';
+  font-style: normal;
+  font-weight: 400;
+  font-stretch: 100%;
+  font-display: swap;
+  src: url(o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a3du2ui.woff2) format('woff2');
+  unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;
+}
+/* vietnamese */
+@font-face {
+  font-family: 'Noto Sans';
+  font-style: normal;
+  font-weight: 400;
+  font-stretch: 100%;
+  font-display: swap;
+  src: url(o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5aHdu2ui.woff2) format('woff2');
+  unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;
+}
+/* latin-ext */
+@font-face {
+  font-family: 'Noto Sans';
+  font-style: normal;
+  font-weight: 400;
+  font-stretch: 100%;
+  font-display: swap;
+  src: url(o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5aDdu2ui.woff2) format('woff2');
+  unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C4, U+2113, U+2C60-2C7F, U+A720-A7FF;
+}
+/* latin */
+@font-face {
+  font-family: 'Noto Sans';
+  font-style: normal;
+  font-weight: 400;
+  font-stretch: 100%;
+  font-display: swap;
+  src: url(o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7duw.woff2) format('woff2');
+  unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+}
+/* cyrillic-ext */
+@font-face {
+  font-family: 'Noto Sans';
+  font-style: normal;
+  font-weight: 500;
+  font-stretch: 100%;
+  font-display: swap;
+  src: url(o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5aPdu2ui.woff2) format('woff2');
+  unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;
+}
+/* cyrillic */
+@font-face {
+  font-family: 'Noto Sans';
+  font-style: normal;
+  font-weight: 500;
+  font-stretch: 100%;
+  font-display: swap;
+  src: url(o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5ardu2ui.woff2) format('woff2');
+  unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;
+}
+/* devanagari */
+@font-face {
+  font-family: 'Noto Sans';
+  font-style: normal;
+  font-weight: 500;
+  font-stretch: 100%;
+  font-display: swap;
+  src: url(o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a_du2ui.woff2) format('woff2');
+  unicode-range: U+0900-097F, U+1CD0-1CF4, U+1CF7-1CF9, U+200C-200D, U+20A8, U+20B9, U+20F0, U+25CC, U+A830-A839, U+A8E0-A8FF, U+11B00-11B0A;
+}
+/* greek-ext */
+@font-face {
+  font-family: 'Noto Sans';
+  font-style: normal;
+  font-weight: 500;
+  font-stretch: 100%;
+  font-display: swap;
+  src: url(o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5aLdu2ui.woff2) format('woff2');
+  unicode-range: U+1F00-1FFF;
+}
+/* greek */
+@font-face {
+  font-family: 'Noto Sans';
+  font-style: normal;
+  font-weight: 500;
+  font-stretch: 100%;
+  font-display: swap;
+  src: url(o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a3du2ui.woff2) format('woff2');
+  unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;
+}
+/* vietnamese */
+@font-face {
+  font-family: 'Noto Sans';
+  font-style: normal;
+  font-weight: 500;
+  font-stretch: 100%;
+  font-display: swap;
+  src: url(o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5aHdu2ui.woff2) format('woff2');
+  unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;
+}
+/* latin-ext */
+@font-face {
+  font-family: 'Noto Sans';
+  font-style: normal;
+  font-weight: 500;
+  font-stretch: 100%;
+  font-display: swap;
+  src: url(o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5aDdu2ui.woff2) format('woff2');
+  unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C4, U+2113, U+2C60-2C7F, U+A720-A7FF;
+}
+/* latin */
+@font-face {
+  font-family: 'Noto Sans';
+  font-style: normal;
+  font-weight: 500;
+  font-stretch: 100%;
+  font-display: swap;
+  src: url(o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7duw.woff2) format('woff2');
+  unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+}
+/* cyrillic-ext */
+@font-face {
+  font-family: 'Noto Sans';
+  font-style: normal;
+  font-weight: 700;
+  font-stretch: 100%;
+  font-display: swap;
+  src: url(o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5aPdu2ui.woff2) format('woff2');
+  unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;
+}
+/* cyrillic */
+@font-face {
+  font-family: 'Noto Sans';
+  font-style: normal;
+  font-weight: 700;
+  font-stretch: 100%;
+  font-display: swap;
+  src: url(o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5ardu2ui.woff2) format('woff2');
+  unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;
+}
+/* devanagari */
+@font-face {
+  font-family: 'Noto Sans';
+  font-style: normal;
+  font-weight: 700;
+  font-stretch: 100%;
+  font-display: swap;
+  src: url(o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a_du2ui.woff2) format('woff2');
+  unicode-range: U+0900-097F, U+1CD0-1CF4, U+1CF7-1CF9, U+200C-200D, U+20A8, U+20B9, U+20F0, U+25CC, U+A830-A839, U+A8E0-A8FF, U+11B00-11B0A;
+}
+/* greek-ext */
+@font-face {
+  font-family: 'Noto Sans';
+  font-style: normal;
+  font-weight: 700;
+  font-stretch: 100%;
+  font-display: swap;
+  src: url(o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5aLdu2ui.woff2) format('woff2');
+  unicode-range: U+1F00-1FFF;
+}
+/* greek */
+@font-face {
+  font-family: 'Noto Sans';
+  font-style: normal;
+  font-weight: 700;
+  font-stretch: 100%;
+  font-display: swap;
+  src: url(o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a3du2ui.woff2) format('woff2');
+  unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;
+}
+/* vietnamese */
+@font-face {
+  font-family: 'Noto Sans';
+  font-style: normal;
+  font-weight: 700;
+  font-stretch: 100%;
+  font-display: swap;
+  src: url(o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5aHdu2ui.woff2) format('woff2');
+  unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;
+}
+/* latin-ext */
+@font-face {
+  font-family: 'Noto Sans';
+  font-style: normal;
+  font-weight: 700;
+  font-stretch: 100%;
+  font-display: swap;
+  src: url(o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5aDdu2ui.woff2) format('woff2');
+  unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C4, U+2113, U+2C60-2C7F, U+A720-A7FF;
+}
+/* latin */
+@font-face {
+  font-family: 'Noto Sans';
+  font-style: normal;
+  font-weight: 700;
+  font-stretch: 100%;
+  font-display: swap;
+  src: url(o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7duw.woff2) format('woff2');
+  unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+}
+/* cyrillic-ext */
+@font-face {
+  font-family: 'Noto Sans';
+  font-style: normal;
+  font-weight: 900;
+  font-stretch: 100%;
+  font-display: swap;
+  src: url(o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5aPdu2ui.woff2) format('woff2');
+  unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;
+}
+/* cyrillic */
+@font-face {
+  font-family: 'Noto Sans';
+  font-style: normal;
+  font-weight: 900;
+  font-stretch: 100%;
+  font-display: swap;
+  src: url(o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5ardu2ui.woff2) format('woff2');
+  unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;
+}
+/* devanagari */
+@font-face {
+  font-family: 'Noto Sans';
+  font-style: normal;
+  font-weight: 900;
+  font-stretch: 100%;
+  font-display: swap;
+  src: url(o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a_du2ui.woff2) format('woff2');
+  unicode-range: U+0900-097F, U+1CD0-1CF4, U+1CF7-1CF9, U+200C-200D, U+20A8, U+20B9, U+20F0, U+25CC, U+A830-A839, U+A8E0-A8FF, U+11B00-11B0A;
+}
+/* greek-ext */
+@font-face {
+  font-family: 'Noto Sans';
+  font-style: normal;
+  font-weight: 900;
+  font-stretch: 100%;
+  font-display: swap;
+  src: url(o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5aLdu2ui.woff2) format('woff2');
+  unicode-range: U+1F00-1FFF;
+}
+/* greek */
+@font-face {
+  font-family: 'Noto Sans';
+  font-style: normal;
+  font-weight: 900;
+  font-stretch: 100%;
+  font-display: swap;
+  src: url(o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a3du2ui.woff2) format('woff2');
+  unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;
+}
+/* vietnamese */
+@font-face {
+  font-family: 'Noto Sans';
+  font-style: normal;
+  font-weight: 900;
+  font-stretch: 100%;
+  font-display: swap;
+  src: url(o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5aHdu2ui.woff2) format('woff2');
+  unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;
+}
+/* latin-ext */
+@font-face {
+  font-family: 'Noto Sans';
+  font-style: normal;
+  font-weight: 900;
+  font-stretch: 100%;
+  font-display: swap;
+  src: url(o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5aDdu2ui.woff2) format('woff2');
+  unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C4, U+2113, U+2C60-2C7F, U+A720-A7FF;
+}
+/* latin */
+@font-face {
+  font-family: 'Noto Sans';
+  font-style: normal;
+  font-weight: 900;
+  font-stretch: 100%;
+  font-display: swap;
+  src: url(o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7duw.woff2) format('woff2');
+  unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+}
+
+
+/* vietnamese */
+@font-face {
+  font-family: 'Space Grotesk';
+  font-style: normal;
+  font-weight: 400;
+  font-display: swap;
+  src: url(V8mDoQDjQSkFtoMM3T6r8E7mPb54C-s0.woff2) format('woff2');
+  unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;
+}
+/* latin-ext */
+@font-face {
+  font-family: 'Space Grotesk';
+  font-style: normal;
+  font-weight: 400;
+  font-display: swap;
+  src: url(V8mDoQDjQSkFtoMM3T6r8E7mPb94C-s0.woff2) format('woff2');
+  unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C4, U+2113, U+2C60-2C7F, U+A720-A7FF;
+}
+/* latin */
+@font-face {
+  font-family: 'Space Grotesk';
+  font-style: normal;
+  font-weight: 400;
+  font-display: swap;
+  src: url(V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2) format('woff2');
+  unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+}
+/* vietnamese */
+@font-face {
+  font-family: 'Space Grotesk';
+  font-style: normal;
+  font-weight: 500;
+  font-display: swap;
+  src: url(V8mDoQDjQSkFtoMM3T6r8E7mPb54C-s0.woff2) format('woff2');
+  unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;
+}
+/* latin-ext */
+@font-face {
+  font-family: 'Space Grotesk';
+  font-style: normal;
+  font-weight: 500;
+  font-display: swap;
+  src: url(V8mDoQDjQSkFtoMM3T6r8E7mPb94C-s0.woff2) format('woff2');
+  unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C4, U+2113, U+2C60-2C7F, U+A720-A7FF;
+}
+/* latin */
+@font-face {
+  font-family: 'Space Grotesk';
+  font-style: normal;
+  font-weight: 500;
+  font-display: swap;
+  src: url(V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2) format('woff2');
+  unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+}
+/* vietnamese */
+@font-face {
+  font-family: 'Space Grotesk';
+  font-style: normal;
+  font-weight: 600;
+  font-display: swap;
+  src: url(V8mDoQDjQSkFtoMM3T6r8E7mPb54C-s0.woff2) format('woff2');
+  unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;
+}
+/* latin-ext */
+@font-face {
+  font-family: 'Space Grotesk';
+  font-style: normal;
+  font-weight: 600;
+  font-display: swap;
+  src: url(V8mDoQDjQSkFtoMM3T6r8E7mPb94C-s0.woff2) format('woff2');
+  unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C4, U+2113, U+2C60-2C7F, U+A720-A7FF;
+}
+/* latin */
+@font-face {
+  font-family: 'Space Grotesk';
+  font-style: normal;
+  font-weight: 600;
+  font-display: swap;
+  src: url(V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2) format('woff2');
+  unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+}
+/* vietnamese */
+@font-face {
+  font-family: 'Space Grotesk';
+  font-style: normal;
+  font-weight: 700;
+  font-display: swap;
+  src: url(V8mDoQDjQSkFtoMM3T6r8E7mPb54C-s0.woff2) format('woff2');
+  unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;
+}
+/* latin-ext */
+@font-face {
+  font-family: 'Space Grotesk';
+  font-style: normal;
+  font-weight: 700;
+  font-display: swap;
+  src: url(V8mDoQDjQSkFtoMM3T6r8E7mPb94C-s0.woff2) format('woff2');
+  unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C4, U+2113, U+2C60-2C7F, U+A720-A7FF;
+}
+/* latin */
+@font-face {
+  font-family: 'Space Grotesk';
+  font-style: normal;
+  font-weight: 700;
+  font-display: swap;
+  src: url(V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2) format('woff2');
+  unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+}
+
+
+/* cyrillic-ext */
+@font-face {
+  font-family: 'JetBrains Mono';
+  font-style: normal;
+  font-weight: 400;
+  font-display: swap;
+  src: url(tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPx3cwhsk.woff2) format('woff2');
+  unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;
+}
+/* cyrillic */
+@font-face {
+  font-family: 'JetBrains Mono';
+  font-style: normal;
+  font-weight: 400;
+  font-display: swap;
+  src: url(tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxTcwhsk.woff2) format('woff2');
+  unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;
+}
+/* greek */
+@font-face {
+  font-family: 'JetBrains Mono';
+  font-style: normal;
+  font-weight: 400;
+  font-display: swap;
+  src: url(tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxPcwhsk.woff2) format('woff2');
+  unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;
+}
+/* vietnamese */
+@font-face {
+  font-family: 'JetBrains Mono';
+  font-style: normal;
+  font-weight: 400;
+  font-display: swap;
+  src: url(tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPx_cwhsk.woff2) format('woff2');
+  unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;
+}
+/* latin-ext */
+@font-face {
+  font-family: 'JetBrains Mono';
+  font-style: normal;
+  font-weight: 400;
+  font-display: swap;
+  src: url(tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPx7cwhsk.woff2) format('woff2');
+  unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C4, U+2113, U+2C60-2C7F, U+A720-A7FF;
+}
+/* latin */
+@font-face {
+  font-family: 'JetBrains Mono';
+  font-style: normal;
+  font-weight: 400;
+  font-display: swap;
+  src: url(tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2) format('woff2');
+  unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+}
+/* cyrillic-ext */
+@font-face {
+  font-family: 'JetBrains Mono';
+  font-style: normal;
+  font-weight: 500;
+  font-display: swap;
+  src: url(tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPx3cwhsk.woff2) format('woff2');
+  unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;
+}
+/* cyrillic */
+@font-face {
+  font-family: 'JetBrains Mono';
+  font-style: normal;
+  font-weight: 500;
+  font-display: swap;
+  src: url(tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxTcwhsk.woff2) format('woff2');
+  unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;
+}
+/* greek */
+@font-face {
+  font-family: 'JetBrains Mono';
+  font-style: normal;
+  font-weight: 500;
+  font-display: swap;
+  src: url(tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxPcwhsk.woff2) format('woff2');
+  unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;
+}
+/* vietnamese */
+@font-face {
+  font-family: 'JetBrains Mono';
+  font-style: normal;
+  font-weight: 500;
+  font-display: swap;
+  src: url(tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPx_cwhsk.woff2) format('woff2');
+  unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;
+}
+/* latin-ext */
+@font-face {
+  font-family: 'JetBrains Mono';
+  font-style: normal;
+  font-weight: 500;
+  font-display: swap;
+  src: url(tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPx7cwhsk.woff2) format('woff2');
+  unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C4, U+2113, U+2C60-2C7F, U+A720-A7FF;
+}
+/* latin */
+@font-face {
+  font-family: 'JetBrains Mono';
+  font-style: normal;
+  font-weight: 500;
+  font-display: swap;
+  src: url(tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2) format('woff2');
+  unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+}
+
+
+/* fallback */
+@font-face {
+  font-family: 'Material Symbols Rounded';
+  font-style: normal;
+  font-weight: 100 700;
+  src: url(sykg-zNym6YjUruM-QrEh7-nyTnjDwKNJ_190Fjzag.woff2) format('woff2');
+}
+
+
+
+/* fallback */
+@font-face {
+  font-family: 'Material Symbols Rounded';
+  font-style: normal;
+  font-weight: 400;
+  src: url(syl0-zNym6YjUruM-QrEh7-nyTnjDwKNJ_190FjpZIvDmUSVOK7BDJ_vb9vUSzq3wzLK-P0J-V_Zs-QtQth3-jOcbTCVpeRL2w5rwZu2rIelXxc.woff2) format('woff2');
+}
+
+
+
+/* Material Symbols Rounded icon class (from Google Fonts stylesheet) */
+.material-symbols-rounded {
+  font-family: 'Material Symbols Rounded';
+  font-weight: normal;
+  font-style: normal;
+  font-size: 24px;
+  line-height: 1;
+  letter-spacing: normal;
+  text-transform: none;
+  display: inline-block;
+  white-space: nowrap;
+  word-wrap: normal;
+  direction: ltr;
+  -webkit-font-feature-settings: 'liga';
+  -webkit-font-smoothing: antialiased;
+}
diff --git a/public/assets/vendor/fonts/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a3du2ui.woff2 b/public/assets/vendor/fonts/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a3du2ui.woff2
new file mode 100644
index 0000000..0bba4dc
Binary files /dev/null and b/public/assets/vendor/fonts/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a3du2ui.woff2 differ
diff --git a/public/assets/vendor/fonts/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7duw.woff2 b/public/assets/vendor/fonts/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7duw.woff2
new file mode 100644
index 0000000..7be9706
Binary files /dev/null and b/public/assets/vendor/fonts/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7duw.woff2 differ
diff --git a/public/assets/vendor/fonts/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5aDdu2ui.woff2 b/public/assets/vendor/fonts/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5aDdu2ui.woff2
new file mode 100644
index 0000000..2a70785
Binary files /dev/null and b/public/assets/vendor/fonts/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5aDdu2ui.woff2 differ
diff --git a/public/assets/vendor/fonts/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5aHdu2ui.woff2 b/public/assets/vendor/fonts/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5aHdu2ui.woff2
new file mode 100644
index 0000000..28bf926
Binary files /dev/null and b/public/assets/vendor/fonts/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5aHdu2ui.woff2 differ
diff --git a/public/assets/vendor/fonts/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5aLdu2ui.woff2 b/public/assets/vendor/fonts/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5aLdu2ui.woff2
new file mode 100644
index 0000000..b8eab72
Binary files /dev/null and b/public/assets/vendor/fonts/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5aLdu2ui.woff2 differ
diff --git a/public/assets/vendor/fonts/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5aPdu2ui.woff2 b/public/assets/vendor/fonts/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5aPdu2ui.woff2
new file mode 100644
index 0000000..01c4086
Binary files /dev/null and b/public/assets/vendor/fonts/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5aPdu2ui.woff2 differ
diff --git a/public/assets/vendor/fonts/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a_du2ui.woff2 b/public/assets/vendor/fonts/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a_du2ui.woff2
new file mode 100644
index 0000000..6f0a5c4
Binary files /dev/null and b/public/assets/vendor/fonts/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a_du2ui.woff2 differ
diff --git a/public/assets/vendor/fonts/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5ardu2ui.woff2 b/public/assets/vendor/fonts/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5ardu2ui.woff2
new file mode 100644
index 0000000..a15d872
Binary files /dev/null and b/public/assets/vendor/fonts/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5ardu2ui.woff2 differ
diff --git a/public/assets/vendor/fonts/sykg-zNym6YjUruM-QrEh7-nyTnjDwKNJ_190Fjzag.woff2 b/public/assets/vendor/fonts/sykg-zNym6YjUruM-QrEh7-nyTnjDwKNJ_190Fjzag.woff2
new file mode 100644
index 0000000..14ac28c
Binary files /dev/null and b/public/assets/vendor/fonts/sykg-zNym6YjUruM-QrEh7-nyTnjDwKNJ_190Fjzag.woff2 differ
diff --git a/public/assets/vendor/fonts/syl0-zNym6YjUruM-QrEh7-nyTnjDwKNJ_190FjpZIvDmUSVOK7BDJ_vb9vUSzq3wzLK-P0J-V_Zs-QtQth3-jOcbTCVpeRL2w5rwZu2rIelXxc.woff2 b/public/assets/vendor/fonts/syl0-zNym6YjUruM-QrEh7-nyTnjDwKNJ_190FjpZIvDmUSVOK7BDJ_vb9vUSzq3wzLK-P0J-V_Zs-QtQth3-jOcbTCVpeRL2w5rwZu2rIelXxc.woff2
new file mode 100644
index 0000000..e5d6ed9
Binary files /dev/null and b/public/assets/vendor/fonts/syl0-zNym6YjUruM-QrEh7-nyTnjDwKNJ_190FjpZIvDmUSVOK7BDJ_vb9vUSzq3wzLK-P0J-V_Zs-QtQth3-jOcbTCVpeRL2w5rwZu2rIelXxc.woff2 differ
diff --git a/public/assets/vendor/fonts/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPx3cwhsk.woff2 b/public/assets/vendor/fonts/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPx3cwhsk.woff2
new file mode 100644
index 0000000..289de93
Binary files /dev/null and b/public/assets/vendor/fonts/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPx3cwhsk.woff2 differ
diff --git a/public/assets/vendor/fonts/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPx7cwhsk.woff2 b/public/assets/vendor/fonts/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPx7cwhsk.woff2
new file mode 100644
index 0000000..82f9668
Binary files /dev/null and b/public/assets/vendor/fonts/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPx7cwhsk.woff2 differ
diff --git a/public/assets/vendor/fonts/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 b/public/assets/vendor/fonts/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2
new file mode 100644
index 0000000..4d09cda
Binary files /dev/null and b/public/assets/vendor/fonts/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 differ
diff --git a/public/assets/vendor/fonts/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxPcwhsk.woff2 b/public/assets/vendor/fonts/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxPcwhsk.woff2
new file mode 100644
index 0000000..a53d52d
Binary files /dev/null and b/public/assets/vendor/fonts/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxPcwhsk.woff2 differ
diff --git a/public/assets/vendor/fonts/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxTcwhsk.woff2 b/public/assets/vendor/fonts/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxTcwhsk.woff2
new file mode 100644
index 0000000..de39acb
Binary files /dev/null and b/public/assets/vendor/fonts/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxTcwhsk.woff2 differ
diff --git a/public/assets/vendor/fonts/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPx_cwhsk.woff2 b/public/assets/vendor/fonts/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPx_cwhsk.woff2
new file mode 100644
index 0000000..e38f553
Binary files /dev/null and b/public/assets/vendor/fonts/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPx_cwhsk.woff2 differ
diff --git a/public/assets/vendor/tailwind.css b/public/assets/vendor/tailwind.css
new file mode 100644
index 0000000..87c65f2
--- /dev/null
+++ b/public/assets/vendor/tailwind.css
@@ -0,0 +1 @@
+*,:after,:before{--tw-border-spacing-x:0;--tw-border-spacing-y:0;--tw-translate-x:0;--tw-translate-y:0;--tw-rotate:0;--tw-skew-x:0;--tw-skew-y:0;--tw-scale-x:1;--tw-scale-y:1;--tw-pan-x: ;--tw-pan-y: ;--tw-pinch-zoom: ;--tw-scroll-snap-strictness:proximity;--tw-gradient-from-position: ;--tw-gradient-via-position: ;--tw-gradient-to-position: ;--tw-ordinal: ;--tw-slashed-zero: ;--tw-numeric-figure: ;--tw-numeric-spacing: ;--tw-numeric-fraction: ;--tw-ring-inset: ;--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(59,130,246,.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;--tw-shadow:0 0 #0000;--tw-shadow-colored:0 0 #0000;--tw-blur: ;--tw-brightness: ;--tw-contrast: ;--tw-grayscale: ;--tw-hue-rotate: ;--tw-invert: ;--tw-saturate: ;--tw-sepia: ;--tw-drop-shadow: ;--tw-backdrop-blur: ;--tw-backdrop-brightness: ;--tw-backdrop-contrast: ;--tw-backdrop-grayscale: ;--tw-backdrop-hue-rotate: ;--tw-backdrop-invert: ;--tw-backdrop-opacity: ;--tw-backdrop-saturate: ;--tw-backdrop-sepia: ;--tw-contain-size: ;--tw-contain-layout: ;--tw-contain-paint: ;--tw-contain-style: }::backdrop{--tw-border-spacing-x:0;--tw-border-spacing-y:0;--tw-translate-x:0;--tw-translate-y:0;--tw-rotate:0;--tw-skew-x:0;--tw-skew-y:0;--tw-scale-x:1;--tw-scale-y:1;--tw-pan-x: ;--tw-pan-y: ;--tw-pinch-zoom: ;--tw-scroll-snap-strictness:proximity;--tw-gradient-from-position: ;--tw-gradient-via-position: ;--tw-gradient-to-position: ;--tw-ordinal: ;--tw-slashed-zero: ;--tw-numeric-figure: ;--tw-numeric-spacing: ;--tw-numeric-fraction: ;--tw-ring-inset: ;--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(59,130,246,.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;--tw-shadow:0 0 #0000;--tw-shadow-colored:0 0 #0000;--tw-blur: ;--tw-brightness: ;--tw-contrast: ;--tw-grayscale: ;--tw-hue-rotate: ;--tw-invert: ;--tw-saturate: ;--tw-sepia: ;--tw-drop-shadow: ;--tw-backdrop-blur: ;--tw-backdrop-brightness: ;--tw-backdrop-contrast: ;--tw-backdrop-grayscale: ;--tw-backdrop-hue-rotate: ;--tw-backdrop-invert: ;--tw-backdrop-opacity: ;--tw-backdrop-saturate: ;--tw-backdrop-sepia: ;--tw-contain-size: ;--tw-contain-layout: ;--tw-contain-paint: ;--tw-contain-style: }/*! tailwindcss v3.4.19 | MIT License | https://tailwindcss.com*/*,:after,:before{box-sizing:border-box;border:0 solid #e5e7eb}:after,:before{--tw-content:""}:host,html{line-height:1.5;-webkit-text-size-adjust:100%;-moz-tab-size:4;-o-tab-size:4;tab-size:4;font-family:Space Grotesk,Inter,system-ui,sans-serif;font-feature-settings:normal;font-variation-settings:normal;-webkit-tap-highlight-color:transparent}body{margin:0;line-height:inherit}hr{height:0;color:inherit;border-top-width:1px}abbr:where([title]){-webkit-text-decoration:underline dotted;text-decoration:underline dotted}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit}a{color:inherit;text-decoration:inherit}b,strong{font-weight:bolder}code,kbd,pre,samp{font-family:JetBrains Mono,ui-monospace,SFMono-Regular,Menlo,monospace;font-feature-settings:normal;font-variation-settings:normal;font-size:1em}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}table{text-indent:0;border-color:inherit;border-collapse:collapse}button,input,optgroup,select,textarea{font-family:inherit;font-feature-settings:inherit;font-variation-settings:inherit;font-size:100%;font-weight:inherit;line-height:inherit;letter-spacing:inherit;color:inherit;margin:0;padding:0}button,select{text-transform:none}button,input:where([type=button]),input:where([type=reset]),input:where([type=submit]){-webkit-appearance:button;background-color:transparent;background-image:none}:-moz-focusring{outline:auto}:-moz-ui-invalid{box-shadow:none}progress{vertical-align:baseline}::-webkit-inner-spin-button,::-webkit-outer-spin-button{height:auto}[type=search]{-webkit-appearance:textfield;outline-offset:-2px}::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-upload-button{-webkit-appearance:button;font:inherit}summary{display:list-item}blockquote,dd,dl,figure,h1,h2,h3,h4,h5,h6,hr,p,pre{margin:0}fieldset{margin:0}fieldset,legend{padding:0}menu,ol,ul{list-style:none;margin:0;padding:0}dialog{padding:0}textarea{resize:vertical}input::-moz-placeholder,textarea::-moz-placeholder{opacity:1;color:#9ca3af}input::placeholder,textarea::placeholder{opacity:1;color:#9ca3af}[role=button],button{cursor:pointer}:disabled{cursor:default}audio,canvas,embed,iframe,img,object,svg,video{display:block;vertical-align:middle}img,video{max-width:100%;height:auto}[hidden]:where(:not([hidden=until-found])){display:none}input:where(:not([type])),input:where([type=date]),input:where([type=datetime-local]),input:where([type=email]),input:where([type=month]),input:where([type=number]),input:where([type=password]),input:where([type=search]),input:where([type=tel]),input:where([type=text]),input:where([type=time]),input:where([type=url]),input:where([type=week]),select,select:where([multiple]),textarea{-webkit-appearance:none;-moz-appearance:none;appearance:none;background-color:#fff;border-color:#6b7280;border-width:1px;border-radius:0;padding:.5rem .75rem;font-size:1rem;line-height:1.5rem;--tw-shadow:0 0 #0000}input:where(:not([type])):focus,input:where([type=date]):focus,input:where([type=datetime-local]):focus,input:where([type=email]):focus,input:where([type=month]):focus,input:where([type=number]):focus,input:where([type=password]):focus,input:where([type=search]):focus,input:where([type=tel]):focus,input:where([type=text]):focus,input:where([type=time]):focus,input:where([type=url]):focus,input:where([type=week]):focus,select:focus,select:where([multiple]):focus,textarea:focus{outline:2px solid transparent;outline-offset:2px;--tw-ring-inset:var(--tw-empty,/*!*/ /*!*/);--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:#2563eb;--tw-ring-offset-shadow:var(--tw-ring-inset) 0 0 0 var(--tw-ring-offset-width) var(--tw-ring-offset-color);--tw-ring-shadow:var(--tw-ring-inset) 0 0 0 calc(1px + var(--tw-ring-offset-width)) var(--tw-ring-color);box-shadow:var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow);border-color:#2563eb}input::-moz-placeholder,textarea::-moz-placeholder{color:#6b7280;opacity:1}input::placeholder,textarea::placeholder{color:#6b7280;opacity:1}::-webkit-datetime-edit-fields-wrapper{padding:0}::-webkit-date-and-time-value{min-height:1.5em;text-align:inherit}::-webkit-datetime-edit{display:inline-flex}::-webkit-datetime-edit,::-webkit-datetime-edit-day-field,::-webkit-datetime-edit-hour-field,::-webkit-datetime-edit-meridiem-field,::-webkit-datetime-edit-millisecond-field,::-webkit-datetime-edit-minute-field,::-webkit-datetime-edit-month-field,::-webkit-datetime-edit-second-field,::-webkit-datetime-edit-year-field{padding-top:0;padding-bottom:0}select{background-image:url("data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='none' viewBox='0 0 20 20'%3E%3Cpath stroke='%236b7280' stroke-linecap='round' stroke-linejoin='round' stroke-width='1.5' d='m6 8 4 4 4-4'/%3E%3C/svg%3E");background-position:right .5rem center;background-repeat:no-repeat;background-size:1.5em 1.5em;padding-right:2.5rem;-webkit-print-color-adjust:exact;print-color-adjust:exact}select:where([multiple]),select:where([size]:not([size="1"])){background-image:none;background-position:0 0;background-repeat:unset;background-size:initial;padding-right:.75rem;-webkit-print-color-adjust:unset;print-color-adjust:unset}input:where([type=checkbox]),input:where([type=radio]){-webkit-appearance:none;-moz-appearance:none;appearance:none;padding:0;-webkit-print-color-adjust:exact;print-color-adjust:exact;display:inline-block;vertical-align:middle;background-origin:border-box;-webkit-user-select:none;-moz-user-select:none;user-select:none;flex-shrink:0;height:1rem;width:1rem;color:#2563eb;background-color:#fff;border-color:#6b7280;border-width:1px;--tw-shadow:0 0 #0000}input:where([type=checkbox]){border-radius:0}input:where([type=radio]){border-radius:100%}input:where([type=checkbox]):focus,input:where([type=radio]):focus{outline:2px solid transparent;outline-offset:2px;--tw-ring-inset:var(--tw-empty,/*!*/ /*!*/);--tw-ring-offset-width:2px;--tw-ring-offset-color:#fff;--tw-ring-color:#2563eb;--tw-ring-offset-shadow:var(--tw-ring-inset) 0 0 0 var(--tw-ring-offset-width) var(--tw-ring-offset-color);--tw-ring-shadow:var(--tw-ring-inset) 0 0 0 calc(2px + var(--tw-ring-offset-width)) var(--tw-ring-color);box-shadow:var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow)}input:where([type=checkbox]):checked,input:where([type=radio]):checked{border-color:transparent;background-color:currentColor;background-size:100% 100%;background-position:50%;background-repeat:no-repeat}input:where([type=checkbox]):checked{background-image:url("data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='%23fff' viewBox='0 0 16 16'%3E%3Cpath d='M12.207 4.793a1 1 0 0 1 0 1.414l-5 5a1 1 0 0 1-1.414 0l-2-2a1 1 0 0 1 1.414-1.414L6.5 9.086l4.293-4.293a1 1 0 0 1 1.414 0'/%3E%3C/svg%3E")}@media (forced-colors:active) {input:where([type=checkbox]):checked{-webkit-appearance:auto;-moz-appearance:auto;appearance:auto}}input:where([type=radio]):checked{background-image:url("data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='%23fff' viewBox='0 0 16 16'%3E%3Ccircle cx='8' cy='8' r='3'/%3E%3C/svg%3E")}@media (forced-colors:active) {input:where([type=radio]):checked{-webkit-appearance:auto;-moz-appearance:auto;appearance:auto}}input:where([type=checkbox]):checked:focus,input:where([type=checkbox]):checked:hover,input:where([type=radio]):checked:focus,input:where([type=radio]):checked:hover{border-color:transparent;background-color:currentColor}input:where([type=checkbox]):indeterminate{background-image:url("data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='none' viewBox='0 0 16 16'%3E%3Cpath stroke='%23fff' stroke-linecap='round' stroke-linejoin='round' stroke-width='2' d='M4 8h8'/%3E%3C/svg%3E");border-color:transparent;background-color:currentColor;background-size:100% 100%;background-position:50%;background-repeat:no-repeat}@media (forced-colors:active) {input:where([type=checkbox]):indeterminate{-webkit-appearance:auto;-moz-appearance:auto;appearance:auto}}input:where([type=checkbox]):indeterminate:focus,input:where([type=checkbox]):indeterminate:hover{border-color:transparent;background-color:currentColor}input:where([type=file]){background:unset;border-color:inherit;border-width:0;border-radius:0;padding:0;font-size:unset;line-height:inherit}input:where([type=file]):focus{outline:1px solid ButtonText;outline:1px auto -webkit-focus-ring-color}.\!container{width:100%!important}.container{width:100%}@media (min-width:640px){.\!container{max-width:640px!important}.container{max-width:640px}}@media (min-width:768px){.\!container{max-width:768px!important}.container{max-width:768px}}@media (min-width:1024px){.\!container{max-width:1024px!important}.container{max-width:1024px}}@media (min-width:1280px){.\!container{max-width:1280px!important}.container{max-width:1280px}}@media (min-width:1536px){.\!container{max-width:1536px!important}.container{max-width:1536px}}.sr-only{position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0,0,0,0);white-space:nowrap;border-width:0}.visible{visibility:visible}.collapse{visibility:collapse}.static{position:static}.fixed{position:fixed}.absolute{position:absolute}.relative{position:relative}.sticky{position:sticky}.inset-0{inset:0}.left-1\/2{left:50%}.right-2{right:.5rem}.right-3{right:.75rem}.right-4{right:1rem}.top-0{top:0}.top-1\/2{top:50%}.top-1\/3{top:33.333333%}.top-2{top:.5rem}.top-20{top:5rem}.top-4{top:1rem}.z-40{z-index:40}.z-50{z-index:50}.z-\[70\]{z-index:70}.mx-4{margin-left:1rem;margin-right:1rem}.mx-auto{margin-left:auto;margin-right:auto}.mb-1{margin-bottom:.25rem}.mb-2{margin-bottom:.5rem}.mb-3{margin-bottom:.75rem}.mb-4{margin-bottom:1rem}.mb-6{margin-bottom:1.5rem}.ml-4{margin-left:1rem}.ml-auto{margin-left:auto}.mt-0\.5{margin-top:.125rem}.mt-1{margin-top:.25rem}.mt-12{margin-top:3rem}.mt-2{margin-top:.5rem}.mt-3{margin-top:.75rem}.mt-4{margin-top:1rem}.block{display:block}.inline{display:inline}.flex{display:flex}.inline-flex{display:inline-flex}.grid{display:grid}.hidden{display:none}.size-full{width:100%;height:100%}.h-1\.5{height:.375rem}.h-10{height:2.5rem}.h-16{height:4rem}.h-3{height:.75rem}.h-48{height:12rem}.h-5{height:1.25rem}.h-6{height:1.5rem}.h-8{height:2rem}.h-9{height:2.25rem}.max-h-64{max-height:16rem}.max-h-\[80vh\]{max-height:80vh}.max-h-\[90vh\]{max-height:90vh}.min-h-screen{min-height:100vh}.w-11{width:2.75rem}.w-12{width:3rem}.w-2{width:.5rem}.w-3{width:.75rem}.w-5{width:1.25rem}.w-6{width:1.5rem}.w-8{width:2rem}.w-auto{width:auto}.w-fit{width:-moz-fit-content;width:fit-content}.w-full{width:100%}.min-w-0{min-width:0}.max-w-2xl{max-width:42rem}.max-w-6xl{max-width:72rem}.max-w-7xl{max-width:80rem}.max-w-\[200px\]{max-width:200px}.max-w-lg{max-width:32rem}.max-w-md{max-width:28rem}.max-w-sm{max-width:24rem}.flex-1{flex:1 1 0%}.flex-shrink-0{flex-shrink:0}.grow{flex-grow:1}.-translate-x-1\/2{--tw-translate-x:-50%}.-translate-x-1\/2,.-translate-y-1\/2{transform:translate(var(--tw-translate-x),var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))}.-translate-y-1\/2{--tw-translate-y:-50%}.translate-x-full{--tw-translate-x:100%}.transform,.translate-x-full{transform:translate(var(--tw-translate-x),var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))}@keyframes pulse{50%{opacity:.5}}.animate-pulse{animation:pulse 2s cubic-bezier(.4,0,.6,1) infinite}@keyframes spin{to{transform:rotate(1turn)}}.animate-spin{animation:spin 1s linear infinite}.cursor-not-allowed{cursor:not-allowed}.cursor-pointer{cursor:pointer}.resize-none{resize:none}.resize{resize:both}.list-inside{list-style-position:inside}.list-decimal{list-style-type:decimal}.list-disc{list-style-type:disc}.grid-cols-1{grid-template-columns:repeat(1,minmax(0,1fr))}.flex-col{flex-direction:column}.flex-wrap{flex-wrap:wrap}.items-start{align-items:flex-start}.items-center{align-items:center}.justify-start{justify-content:flex-start}.justify-end{justify-content:flex-end}.justify-center{justify-content:center}.justify-between{justify-content:space-between}.gap-1{gap:.25rem}.gap-1\.5{gap:.375rem}.gap-2{gap:.5rem}.gap-2\.5{gap:.625rem}.gap-3{gap:.75rem}.gap-4{gap:1rem}.gap-6{gap:1.5rem}.gap-8{gap:2rem}.space-y-1>:not([hidden])~:not([hidden]){--tw-space-y-reverse:0;margin-top:calc(.25rem*(1 - var(--tw-space-y-reverse)));margin-bottom:calc(.25rem*var(--tw-space-y-reverse))}.space-y-2>:not([hidden])~:not([hidden]){--tw-space-y-reverse:0;margin-top:calc(.5rem*(1 - var(--tw-space-y-reverse)));margin-bottom:calc(.5rem*var(--tw-space-y-reverse))}.space-y-3>:not([hidden])~:not([hidden]){--tw-space-y-reverse:0;margin-top:calc(.75rem*(1 - var(--tw-space-y-reverse)));margin-bottom:calc(.75rem*var(--tw-space-y-reverse))}.space-y-4>:not([hidden])~:not([hidden]){--tw-space-y-reverse:0;margin-top:calc(1rem*(1 - var(--tw-space-y-reverse)));margin-bottom:calc(1rem*var(--tw-space-y-reverse))}.space-y-5>:not([hidden])~:not([hidden]){--tw-space-y-reverse:0;margin-top:calc(1.25rem*(1 - var(--tw-space-y-reverse)));margin-bottom:calc(1.25rem*var(--tw-space-y-reverse))}.space-y-8>:not([hidden])~:not([hidden]){--tw-space-y-reverse:0;margin-top:calc(2rem*(1 - var(--tw-space-y-reverse)));margin-bottom:calc(2rem*var(--tw-space-y-reverse))}.overflow-hidden{overflow:hidden}.overflow-x-auto{overflow-x:auto}.overflow-y-auto{overflow-y:auto}.overflow-x-hidden{overflow-x:hidden}.truncate{overflow:hidden;text-overflow:ellipsis}.truncate,.whitespace-nowrap{white-space:nowrap}.break-all{word-break:break-all}.rounded{border-radius:.25rem}.rounded-2xl{border-radius:1rem}.rounded-full{border-radius:9999px}.rounded-lg{border-radius:.5rem}.rounded-md{border-radius:.375rem}.rounded-xl{border-radius:.75rem}.border{border-width:1px}.border-b{border-bottom-width:1px}.border-t{border-top-width:1px}.border-\[var\(--border-color\)\]{border-color:var(--border-color)}.border-\[var\(--primary-color\)\]{border-color:var(--primary-color)}.border-blue-500\/20{border-color:rgba(59,130,246,.2)}.border-blue-500\/30{border-color:rgba(59,130,246,.3)}.border-gray-400\/30{border-color:rgba(156,163,175,.3)}.border-gray-600{--tw-border-opacity:1;border-color:rgb(75 85 99/var(--tw-border-opacity,1))}.border-gray-600\/30{border-color:rgba(75,85,99,.3)}.border-gray-800{--tw-border-opacity:1;border-color:rgb(31 41 55/var(--tw-border-opacity,1))}.border-green-500\/20{border-color:rgba(34,197,94,.2)}.border-green-500\/30{border-color:rgba(34,197,94,.3)}.border-orange-500\/30{border-color:rgba(249,115,22,.3)}.border-red-400\/30{border-color:hsla(0,91%,71%,.3)}.border-red-500{--tw-border-opacity:1;border-color:rgb(239 68 68/var(--tw-border-opacity,1))}.border-red-500\/20{border-color:rgba(239,68,68,.2)}.border-red-500\/30{border-color:rgba(239,68,68,.3)}.border-yellow-500\/20{border-color:rgba(234,179,8,.2)}.border-yellow-500\/30{border-color:rgba(234,179,8,.3)}.border-yellow-600\/30{border-color:rgba(202,138,4,.3)}.bg-\[\#111111\]{--tw-bg-opacity:1;background-color:rgb(17 17 17/var(--tw-bg-opacity,1))}.bg-\[\#1a1a1a\]{--tw-bg-opacity:1;background-color:rgb(26 26 26/var(--tw-bg-opacity,1))}.bg-\[\#2A2A2A\]{--tw-bg-opacity:1;background-color:rgb(42 42 42/var(--tw-bg-opacity,1))}.bg-\[var\(--card-bg\)\]{background-color:var(--card-bg)}.bg-\[var\(--dark-bg\)\]{background-color:var(--dark-bg)}.bg-\[var\(--live-color\)\]{background-color:var(--live-color)}.bg-\[var\(--primary-color\)\]{background-color:var(--primary-color)}.bg-\[var\(--tok-surface-inset\)\]{background-color:var(--tok-surface-inset)}.bg-black{--tw-bg-opacity:1;background-color:rgb(0 0 0/var(--tw-bg-opacity,1))}.bg-black\/30{background-color:rgba(0,0,0,.3)}.bg-black\/50{background-color:rgba(0,0,0,.5)}.bg-black\/60{background-color:rgba(0,0,0,.6)}.bg-black\/70{background-color:rgba(0,0,0,.7)}.bg-blue-500{--tw-bg-opacity:1;background-color:rgb(59 130 246/var(--tw-bg-opacity,1))}.bg-blue-500\/10{background-color:rgba(59,130,246,.1)}.bg-blue-600{--tw-bg-opacity:1;background-color:rgb(37 99 235/var(--tw-bg-opacity,1))}.bg-gray-500{--tw-bg-opacity:1;background-color:rgb(107 114 128/var(--tw-bg-opacity,1))}.bg-gray-600{--tw-bg-opacity:1;background-color:rgb(75 85 99/var(--tw-bg-opacity,1))}.bg-gray-600\/20{background-color:rgba(75,85,99,.2)}.bg-gray-700{--tw-bg-opacity:1;background-color:rgb(55 65 81/var(--tw-bg-opacity,1))}.bg-green-500{--tw-bg-opacity:1;background-color:rgb(34 197 94/var(--tw-bg-opacity,1))}.bg-green-500\/10{background-color:rgba(34,197,94,.1)}.bg-green-600{--tw-bg-opacity:1;background-color:rgb(22 163 74/var(--tw-bg-opacity,1))}.bg-orange-900\/50{background-color:rgba(124,45,18,.5)}.bg-red-500{--tw-bg-opacity:1;background-color:rgb(239 68 68/var(--tw-bg-opacity,1))}.bg-red-500\/10{background-color:rgba(239,68,68,.1)}.bg-red-600{--tw-bg-opacity:1;background-color:rgb(220 38 38/var(--tw-bg-opacity,1))}.bg-red-900\/50{background-color:rgba(127,29,29,.5)}.bg-white{--tw-bg-opacity:1;background-color:rgb(255 255 255/var(--tw-bg-opacity,1))}.bg-white\/10{background-color:hsla(0,0%,100%,.1)}.bg-white\/20{background-color:hsla(0,0%,100%,.2)}.bg-yellow-400{--tw-bg-opacity:1;background-color:rgb(250 204 21/var(--tw-bg-opacity,1))}.bg-yellow-500{--tw-bg-opacity:1;background-color:rgb(234 179 8/var(--tw-bg-opacity,1))}.bg-yellow-500\/10{background-color:rgba(234,179,8,.1)}.bg-yellow-600\/20{background-color:rgba(202,138,4,.2)}.bg-yellow-900\/50{background-color:rgba(113,63,18,.5)}.bg-opacity-50{--tw-bg-opacity:0.5}.bg-gradient-to-r{background-image:linear-gradient(to right,var(--tw-gradient-stops))}.from-blue-600{--tw-gradient-from:#2563eb var(--tw-gradient-from-position);--tw-gradient-to:rgba(37,99,235,0) var(--tw-gradient-to-position);--tw-gradient-stops:var(--tw-gradient-from),var(--tw-gradient-to)}.from-green-600{--tw-gradient-from:#16a34a var(--tw-gradient-from-position);--tw-gradient-to:rgba(22,163,74,0) var(--tw-gradient-to-position);--tw-gradient-stops:var(--tw-gradient-from),var(--tw-gradient-to)}.to-green-500{--tw-gradient-to:#22c55e var(--tw-gradient-to-position)}.to-purple-600{--tw-gradient-to:#9333ea var(--tw-gradient-to-position)}.bg-center{background-position:50%}.bg-no-repeat{background-repeat:no-repeat}.object-cover{-o-object-fit:cover;object-fit:cover}.p-1{padding:.25rem}.p-2{padding:.5rem}.p-3{padding:.75rem}.p-4{padding:1rem}.p-6{padding:1.5rem}.p-8{padding:2rem}.px-1{padding-left:.25rem;padding-right:.25rem}.px-10{padding-left:2.5rem;padding-right:2.5rem}.px-2{padding-left:.5rem;padding-right:.5rem}.px-2\.5{padding-left:.625rem;padding-right:.625rem}.px-3{padding-left:.75rem;padding-right:.75rem}.px-4{padding-left:1rem;padding-right:1rem}.px-6{padding-left:1.5rem;padding-right:1.5rem}.px-8{padding-left:2rem;padding-right:2rem}.py-0\.5{padding-top:.125rem;padding-bottom:.125rem}.py-1{padding-top:.25rem;padding-bottom:.25rem}.py-1\.5{padding-top:.375rem;padding-bottom:.375rem}.py-2{padding-top:.5rem;padding-bottom:.5rem}.py-2\.5{padding-top:.625rem;padding-bottom:.625rem}.py-3{padding-top:.75rem;padding-bottom:.75rem}.py-4{padding-top:1rem;padding-bottom:1rem}.py-6{padding-top:1.5rem;padding-bottom:1.5rem}.py-8{padding-top:2rem;padding-bottom:2rem}.pb-6{padding-bottom:1.5rem}.pb-8{padding-bottom:2rem}.pl-7{padding-left:1.75rem}.pr-12{padding-right:3rem}.pt-0{padding-top:0}.pt-1{padding-top:.25rem}.pt-4{padding-top:1rem}.pt-8{padding-top:2rem}.text-left{text-align:left}.text-center{text-align:center}.text-right{text-align:right}.font-mono{font-family:JetBrains Mono,ui-monospace,SFMono-Regular,Menlo,monospace}.text-2xl{font-size:1.5rem;line-height:2rem}.text-4xl{font-size:2.25rem;line-height:2.5rem}.text-5xl{font-size:3rem;line-height:1}.text-base{font-size:1rem;line-height:1.5rem}.text-lg{font-size:1.125rem;line-height:1.75rem}.text-sm{font-size:.875rem;line-height:1.25rem}.text-xl{font-size:1.25rem;line-height:1.75rem}.text-xs{font-size:.75rem;line-height:1rem}.font-bold{font-weight:700}.font-medium{font-weight:500}.font-semibold{font-weight:600}.uppercase{text-transform:uppercase}.leading-relaxed{line-height:1.625}.tracking-wider{letter-spacing:.05em}.text-\[var\(--live-color\)\]{color:var(--live-color)}.text-\[var\(--primary-color\)\]{color:var(--primary-color)}.text-amber-500{--tw-text-opacity:1;color:rgb(245 158 11/var(--tw-text-opacity,1))}.text-blue-100{--tw-text-opacity:1;color:rgb(219 234 254/var(--tw-text-opacity,1))}.text-blue-200{--tw-text-opacity:1;color:rgb(191 219 254/var(--tw-text-opacity,1))}.text-blue-300{--tw-text-opacity:1;color:rgb(147 197 253/var(--tw-text-opacity,1))}.text-blue-400{--tw-text-opacity:1;color:rgb(96 165 250/var(--tw-text-opacity,1))}.text-gray-300{--tw-text-opacity:1;color:rgb(209 213 219/var(--tw-text-opacity,1))}.text-gray-400{--tw-text-opacity:1;color:rgb(156 163 175/var(--tw-text-opacity,1))}.text-gray-500{--tw-text-opacity:1;color:rgb(107 114 128/var(--tw-text-opacity,1))}.text-gray-600{--tw-text-opacity:1;color:rgb(75 85 99/var(--tw-text-opacity,1))}.text-green-100{--tw-text-opacity:1;color:rgb(220 252 231/var(--tw-text-opacity,1))}.text-green-200{--tw-text-opacity:1;color:rgb(187 247 208/var(--tw-text-opacity,1))}.text-green-300{--tw-text-opacity:1;color:rgb(134 239 172/var(--tw-text-opacity,1))}.text-green-400{--tw-text-opacity:1;color:rgb(74 222 128/var(--tw-text-opacity,1))}.text-green-600{--tw-text-opacity:1;color:rgb(22 163 74/var(--tw-text-opacity,1))}.text-orange-200{--tw-text-opacity:1;color:rgb(254 215 170/var(--tw-text-opacity,1))}.text-orange-300{--tw-text-opacity:1;color:rgb(253 186 116/var(--tw-text-opacity,1))}.text-orange-400{--tw-text-opacity:1;color:rgb(251 146 60/var(--tw-text-opacity,1))}.text-red-100{--tw-text-opacity:1;color:rgb(254 226 226/var(--tw-text-opacity,1))}.text-red-200{--tw-text-opacity:1;color:rgb(254 202 202/var(--tw-text-opacity,1))}.text-red-200\/90{color:hsla(0,96%,89%,.9)}.text-red-300{--tw-text-opacity:1;color:rgb(252 165 165/var(--tw-text-opacity,1))}.text-red-400{--tw-text-opacity:1;color:rgb(248 113 113/var(--tw-text-opacity,1))}.text-red-500{--tw-text-opacity:1;color:rgb(239 68 68/var(--tw-text-opacity,1))}.text-white{--tw-text-opacity:1;color:rgb(255 255 255/var(--tw-text-opacity,1))}.text-white\/70{color:hsla(0,0%,100%,.7)}.text-yellow-200{--tw-text-opacity:1;color:rgb(254 240 138/var(--tw-text-opacity,1))}.text-yellow-300{--tw-text-opacity:1;color:rgb(253 224 71/var(--tw-text-opacity,1))}.text-yellow-400{--tw-text-opacity:1;color:rgb(250 204 21/var(--tw-text-opacity,1))}.text-yellow-500{--tw-text-opacity:1;color:rgb(234 179 8/var(--tw-text-opacity,1))}.underline{text-decoration-line:underline}.placeholder-gray-400::-moz-placeholder{--tw-placeholder-opacity:1;color:rgb(156 163 175/var(--tw-placeholder-opacity,1))}.placeholder-gray-400::placeholder{--tw-placeholder-opacity:1;color:rgb(156 163 175/var(--tw-placeholder-opacity,1))}.opacity-50{opacity:.5}.opacity-80{opacity:.8}.shadow-2xl{--tw-shadow:0 25px 50px -12px rgba(0,0,0,.25);--tw-shadow-colored:0 25px 50px -12px var(--tw-shadow-color)}.shadow-2xl,.shadow-lg{box-shadow:var(--tw-ring-offset-shadow,0 0 #0000),var(--tw-ring-shadow,0 0 #0000),var(--tw-shadow)}.shadow-lg{--tw-shadow:0 10px 15px -3px rgba(0,0,0,.1),0 4px 6px -4px rgba(0,0,0,.1);--tw-shadow-colored:0 10px 15px -3px var(--tw-shadow-color),0 4px 6px -4px var(--tw-shadow-color)}.shadow-xl{--tw-shadow:0 20px 25px -5px rgba(0,0,0,.1),0 8px 10px -6px rgba(0,0,0,.1);--tw-shadow-colored:0 20px 25px -5px var(--tw-shadow-color),0 8px 10px -6px var(--tw-shadow-color);box-shadow:var(--tw-ring-offset-shadow,0 0 #0000),var(--tw-ring-shadow,0 0 #0000),var(--tw-shadow)}.shadow-black\/30{--tw-shadow-color:rgba(0,0,0,.3);--tw-shadow:var(--tw-shadow-colored)}.shadow-black\/50{--tw-shadow-color:rgba(0,0,0,.5);--tw-shadow:var(--tw-shadow-colored)}.outline{outline-style:solid}.blur{--tw-blur:blur(8px)}.blur,.drop-shadow{filter:var(--tw-blur) var(--tw-brightness) var(--tw-contrast) var(--tw-grayscale) var(--tw-hue-rotate) var(--tw-invert) var(--tw-saturate) var(--tw-sepia) var(--tw-drop-shadow)}.drop-shadow{--tw-drop-shadow:drop-shadow(0 1px 2px rgba(0,0,0,.1)) drop-shadow(0 1px 1px rgba(0,0,0,.06))}.filter{filter:var(--tw-blur) var(--tw-brightness) var(--tw-contrast) var(--tw-grayscale) var(--tw-hue-rotate) var(--tw-invert) var(--tw-saturate) var(--tw-sepia) var(--tw-drop-shadow)}.backdrop-blur-sm{--tw-backdrop-blur:blur(4px)}.backdrop-blur-sm,.backdrop-filter{-webkit-backdrop-filter:var(--tw-backdrop-blur) var(--tw-backdrop-brightness) var(--tw-backdrop-contrast) var(--tw-backdrop-grayscale) var(--tw-backdrop-hue-rotate) var(--tw-backdrop-invert) var(--tw-backdrop-opacity) var(--tw-backdrop-saturate) var(--tw-backdrop-sepia);backdrop-filter:var(--tw-backdrop-blur) var(--tw-backdrop-brightness) var(--tw-backdrop-contrast) var(--tw-backdrop-grayscale) var(--tw-backdrop-hue-rotate) var(--tw-backdrop-invert) var(--tw-backdrop-opacity) var(--tw-backdrop-saturate) var(--tw-backdrop-sepia)}.transition{transition-property:color,background-color,border-color,text-decoration-color,fill,stroke,opacity,box-shadow,transform,filter,-webkit-backdrop-filter;transition-property:color,background-color,border-color,text-decoration-color,fill,stroke,opacity,box-shadow,transform,filter,backdrop-filter;transition-property:color,background-color,border-color,text-decoration-color,fill,stroke,opacity,box-shadow,transform,filter,backdrop-filter,-webkit-backdrop-filter;transition-timing-function:cubic-bezier(.4,0,.2,1);transition-duration:.15s}.transition-all{transition-property:all;transition-timing-function:cubic-bezier(.4,0,.2,1);transition-duration:.15s}.transition-colors{transition-property:color,background-color,border-color,text-decoration-color,fill,stroke;transition-timing-function:cubic-bezier(.4,0,.2,1);transition-duration:.15s}.transition-transform{transition-property:transform;transition-timing-function:cubic-bezier(.4,0,.2,1)}.duration-150,.transition-transform{transition-duration:.15s}.duration-200{transition-duration:.2s}.duration-300{transition-duration:.3s}.ease-in-out{transition-timing-function:cubic-bezier(.4,0,.2,1)}.after\:absolute:after{content:var(--tw-content);position:absolute}.after\:left-\[2px\]:after{content:var(--tw-content);left:2px}.after\:top-\[2px\]:after{content:var(--tw-content);top:2px}.after\:h-5:after{content:var(--tw-content);height:1.25rem}.after\:w-5:after{content:var(--tw-content);width:1.25rem}.after\:rounded-full:after{content:var(--tw-content);border-radius:9999px}.after\:bg-white:after{content:var(--tw-content);--tw-bg-opacity:1;background-color:rgb(255 255 255/var(--tw-bg-opacity,1))}.after\:transition-all:after{content:var(--tw-content);transition-property:all;transition-timing-function:cubic-bezier(.4,0,.2,1);transition-duration:.15s}.after\:content-\[\'\'\]:after{--tw-content:"";content:var(--tw-content)}.hover\:scale-105:hover{--tw-scale-x:1.05;--tw-scale-y:1.05;transform:translate(var(--tw-translate-x),var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))}.hover\:bg-\[\#3A3A3A\]:hover{--tw-bg-opacity:1;background-color:rgb(58 58 58/var(--tw-bg-opacity,1))}.hover\:bg-\[var\(--border-color\)\]:hover{background-color:var(--border-color)}.hover\:bg-\[var\(--primary-color-dark\)\]:hover{background-color:var(--primary-color-dark)}.hover\:bg-blue-500:hover{--tw-bg-opacity:1;background-color:rgb(59 130 246/var(--tw-bg-opacity,1))}.hover\:bg-blue-700:hover{--tw-bg-opacity:1;background-color:rgb(29 78 216/var(--tw-bg-opacity,1))}.hover\:bg-gray-500:hover{--tw-bg-opacity:1;background-color:rgb(107 114 128/var(--tw-bg-opacity,1))}.hover\:bg-gray-600:hover{--tw-bg-opacity:1;background-color:rgb(75 85 99/var(--tw-bg-opacity,1))}.hover\:bg-gray-600\/30:hover{background-color:rgba(75,85,99,.3)}.hover\:bg-gray-700:hover{--tw-bg-opacity:1;background-color:rgb(55 65 81/var(--tw-bg-opacity,1))}.hover\:bg-green-50:hover{--tw-bg-opacity:1;background-color:rgb(240 253 244/var(--tw-bg-opacity,1))}.hover\:bg-red-400:hover{--tw-bg-opacity:1;background-color:rgb(248 113 113/var(--tw-bg-opacity,1))}.hover\:bg-red-600:hover{--tw-bg-opacity:1;background-color:rgb(220 38 38/var(--tw-bg-opacity,1))}.hover\:bg-white\/10:hover{background-color:hsla(0,0%,100%,.1)}.hover\:bg-white\/20:hover{background-color:hsla(0,0%,100%,.2)}.hover\:bg-white\/30:hover{background-color:hsla(0,0%,100%,.3)}.hover\:bg-yellow-600\/30:hover{background-color:rgba(202,138,4,.3)}.hover\:text-\[var\(--primary-color\)\]:hover{color:var(--primary-color)}.hover\:text-blue-300:hover{--tw-text-opacity:1;color:rgb(147 197 253/var(--tw-text-opacity,1))}.hover\:text-gray-300:hover{--tw-text-opacity:1;color:rgb(209 213 219/var(--tw-text-opacity,1))}.hover\:text-red-200:hover{--tw-text-opacity:1;color:rgb(254 202 202/var(--tw-text-opacity,1))}.hover\:text-white:hover{--tw-text-opacity:1;color:rgb(255 255 255/var(--tw-text-opacity,1))}.hover\:opacity-100:hover{opacity:1}.hover\:opacity-90:hover{opacity:.9}.focus\:border-\[var\(--primary-color\)\]:focus{border-color:var(--primary-color)}.focus\:outline-none:focus{outline:2px solid transparent;outline-offset:2px}.focus\:ring-2:focus{--tw-ring-offset-shadow:var(--tw-ring-inset) 0 0 0 var(--tw-ring-offset-width) var(--tw-ring-offset-color);--tw-ring-shadow:var(--tw-ring-inset) 0 0 0 calc(2px + var(--tw-ring-offset-width)) var(--tw-ring-color);box-shadow:var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow,0 0 #0000)}.focus\:ring-red-400:focus{--tw-ring-opacity:1;--tw-ring-color:rgb(248 113 113/var(--tw-ring-opacity,1))}.focus\:ring-offset-2:focus{--tw-ring-offset-width:2px}.focus\:ring-offset-\[var\(--card-bg\)\]:focus{--tw-ring-offset-color:var(--card-bg)}.group[open] .group-open\:rotate-90,.group\/tech[open] .group-open\/tech\:rotate-90{--tw-rotate:90deg;transform:translate(var(--tw-translate-x),var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))}.peer:checked~.peer-checked\:bg-\[var\(--primary-color\)\]{background-color:var(--primary-color)}.peer:checked~.peer-checked\:after\:translate-x-full:after{content:var(--tw-content);--tw-translate-x:100%;transform:translate(var(--tw-translate-x),var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))}.peer:checked~.peer-checked\:after\:border-white:after{content:var(--tw-content);--tw-border-opacity:1;border-color:rgb(255 255 255/var(--tw-border-opacity,1))}.peer:focus~.peer-focus\:outline-none{outline:2px solid transparent;outline-offset:2px}.peer:focus~.peer-focus\:ring-4{--tw-ring-offset-shadow:var(--tw-ring-inset) 0 0 0 var(--tw-ring-offset-width) var(--tw-ring-offset-color);--tw-ring-shadow:var(--tw-ring-inset) 0 0 0 calc(4px + var(--tw-ring-offset-width)) var(--tw-ring-color);box-shadow:var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow,0 0 #0000)}@media (min-width:640px){.sm\:inline{display:inline}.sm\:flex-row{flex-direction:row}.sm\:px-6{padding-left:1.5rem;padding-right:1.5rem}.sm\:py-8{padding-top:2rem;padding-bottom:2rem}}@media (min-width:768px){.md\:max-w-xs{max-width:20rem}.md\:grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}}@media (min-width:1024px){.lg\:px-10{padding-left:2.5rem;padding-right:2.5rem}.lg\:px-8{padding-left:2rem;padding-right:2rem}}@media (min-width:1280px){.xl\:col-span-2{grid-column:span 2/span 2}.xl\:grid-cols-3{grid-template-columns:repeat(3,minmax(0,1fr))}}
\ No newline at end of file
diff --git a/public/components/ComponentManager.js b/public/components/ComponentManager.js
index c9b2db4..9d99890 100644
--- a/public/components/ComponentManager.js
+++ b/public/components/ComponentManager.js
@@ -96,12 +96,8 @@ class ComponentManager {
                 static: 'lobby-music-static',
                 name: 'Lobby Background Music'
             },
-            // Future components will be registered here
-            'audio-devices': {
-                component: 'AudioDeviceSelector',
-                static: 'audio-devices-static',
-                name: 'Audio Devices'
-            },
+            // audio-devices + video-sources render as plain dashboard markup
+            // (sidebar inputs card / hidden panel) — no component fallback needed.
             'icecast-server': {
                 component: 'IcecastManager',
                 static: 'icecast-server-static',
@@ -112,11 +108,6 @@ class ComponentManager {
                 static: 'ffmpeg-streams-static',
                 name: 'FFmpeg Streams'
             },
-            'video-sources': {
-                component: 'VideoSourcesPanel',
-                static: 'video-sources-static',
-                name: 'Video Sources'
-            },
             'event-manager': {
                 component: 'EventManager',
                 static: 'event-manager-static',
@@ -131,12 +122,17 @@ class ComponentManager {
     }
 
     /**
-     * Initialize all registered sections
+     * Initialize all registered sections.
+     * Sections render into independent containers, so they initialize in
+     * parallel — a slow one (e.g. the Icecast installation scan) must not
+     * delay the rest of the dashboard.
      */
     async initializeAll() {
-        for (const [sectionId, config] of Object.entries(this.componentRegistry)) {
-            await this.initializeSection(sectionId, config);
-        }
+        await Promise.allSettled(
+            Object.entries(this.componentRegistry).map(([sectionId, config]) =>
+                this.initializeSection(sectionId, config)
+            )
+        );
     }
 
     /**
@@ -255,6 +251,12 @@ class ComponentManager {
             this.components.set(sectionId, componentInstance);
             console.log(`✅ ${config.name} - Component initialized successfully`);
 
+            // The streams card is the dashboard's primary content — once it is
+            // up, the app has "loaded" as far as the user is concerned.
+            if (sectionId === 'ffmpeg-streams' && window.LSBoot) {
+                LSBoot.ready();
+            }
+
         } catch (error) {
             console.error(`❌ Failed to initialize ${config.name} component:`, error);
 
diff --git a/public/components/ContactManager.js b/public/components/ContactManager.js
index a522f18..9aa6791 100644
--- a/public/components/ContactManager.js
+++ b/public/components/ContactManager.js
@@ -354,29 +354,26 @@ class ContactManager {
             return;
         }
 
-        container.innerHTML = `
-            <div class="glass-card p-6">
-                <div class="mb-4">
-                    <h2 class="text-lg font-bold text-white">📞 Your Feedback Contact</h2>
-                </div>
+        const inputCls = 'w-full px-3 py-2 bg-[var(--tok-surface-inset)] border border-[var(--border-color)] rounded-lg text-sm text-white placeholder-gray-400 focus:outline-none focus:ring-2 focus:ring-[var(--primary-color)]/50 focus:border-[var(--primary-color)]';
 
+        const inner = `
                 <div class="space-y-3">
                     <!-- Email -->
                     <div class="space-y-1">
                         <div class="flex items-center justify-between">
-                            <label class="text-xs font-medium text-gray-300">📧 Email Address</label>
+                            <label class="text-xs font-medium text-gray-300" for="contact-email">📧 Email Address</label>
                             <label class="relative inline-flex items-center cursor-pointer">
-                                <input type="checkbox" 
-                                       id="show-email" 
-                                       class="sr-only peer" 
+                                <input type="checkbox"
+                                       id="show-email"
+                                       class="sr-only peer"
                                        ${this.contactDetails.showEmail ? 'checked' : ''}>
                                 <div class="w-11 h-6 bg-gray-600 peer-focus:outline-none peer-focus:ring-4 peer-focus:ring-[var(--primary-color)]/20 rounded-full peer peer-checked:after:translate-x-full peer-checked:after:border-white after:content-[''] after:absolute after:top-[2px] after:left-[2px] after:bg-white after:rounded-full after:h-5 after:w-5 after:transition-all peer-checked:bg-[var(--primary-color)]"></div>
                             </label>
                         </div>
-                        <input type="email" 
-                               id="contact-email" 
-                               class="w-full px-3 py-2 bg-[#111111] border border-[var(--border-color)] rounded-lg text-sm text-white placeholder-gray-400 focus:outline-none focus:ring-2 focus:ring-[var(--primary-color)]/50 focus:border-[var(--primary-color)]" 
-                               placeholder="admin@example.com" 
+                        <input type="email"
+                               id="contact-email"
+                               class="${inputCls}"
+                               placeholder="admin@example.com"
                                value="${this.contactDetails.email}">
                         <p id="contact-email-error" class="text-red-400 text-xs hidden" role="alert"></p>
                     </div>
@@ -384,19 +381,19 @@ class ContactManager {
                     <!-- Phone -->
                     <div class="space-y-1">
                         <div class="flex items-center justify-between">
-                            <label class="text-xs font-medium text-gray-300">📱 Phone Number</label>
+                            <label class="text-xs font-medium text-gray-300" for="contact-phone">📱 Phone Number</label>
                             <label class="relative inline-flex items-center cursor-pointer">
-                                <input type="checkbox" 
-                                       id="show-phone" 
-                                       class="sr-only peer" 
+                                <input type="checkbox"
+                                       id="show-phone"
+                                       class="sr-only peer"
                                        ${this.contactDetails.showPhone ? 'checked' : ''}>
                                 <div class="w-11 h-6 bg-gray-600 peer-focus:outline-none peer-focus:ring-4 peer-focus:ring-[var(--primary-color)]/20 rounded-full peer peer-checked:after:translate-x-full peer-checked:after:border-white after:content-[''] after:absolute after:top-[2px] after:left-[2px] after:bg-white after:rounded-full after:h-5 after:w-5 after:transition-all peer-checked:bg-[var(--primary-color)]"></div>
                             </label>
                         </div>
-                        <input type="tel" 
-                               id="contact-phone" 
-                               class="w-full px-3 py-2 bg-[#111111] border border-[var(--border-color)] rounded-lg text-sm text-white placeholder-gray-400 focus:outline-none focus:ring-2 focus:ring-[var(--primary-color)]/50 focus:border-[var(--primary-color)]" 
-                               placeholder="+1 (234) 567-8900" 
+                        <input type="tel"
+                               id="contact-phone"
+                               class="${inputCls}"
+                               placeholder="+1 (234) 567-8900"
                                value="${this.contactDetails.phone}">
                         <p id="contact-phone-error" class="text-red-400 text-xs hidden" role="alert"></p>
                     </div>
@@ -404,32 +401,36 @@ class ContactManager {
                     <!-- WhatsApp -->
                     <div class="space-y-1">
                         <div class="flex items-center justify-between">
-                            <label class="text-xs font-medium text-gray-300">💬 WhatsApp</label>
+                            <label class="text-xs font-medium text-gray-300" for="contact-whatsapp">💬 WhatsApp</label>
                             <label class="relative inline-flex items-center cursor-pointer">
-                                <input type="checkbox" 
-                                       id="show-whatsapp" 
-                                       class="sr-only peer" 
+                                <input type="checkbox"
+                                       id="show-whatsapp"
+                                       class="sr-only peer"
                                        ${this.contactDetails.showWhatsapp ? 'checked' : ''}>
                                 <div class="w-11 h-6 bg-gray-600 peer-focus:outline-none peer-focus:ring-4 peer-focus:ring-[var(--primary-color)]/20 rounded-full peer peer-checked:after:translate-x-full peer-checked:after:border-white after:content-[''] after:absolute after:top-[2px] after:left-[2px] after:bg-white after:rounded-full after:h-5 after:w-5 after:transition-all peer-checked:bg-[var(--primary-color)]"></div>
                             </label>
                         </div>
-                        <input type="tel" 
-                               id="contact-whatsapp" 
-                               class="w-full px-3 py-2 bg-[#111111] border border-[var(--border-color)] rounded-lg text-sm text-white placeholder-gray-400 focus:outline-none focus:ring-2 focus:ring-[var(--primary-color)]/50 focus:border-[var(--primary-color)]" 
-                               placeholder="e.g. +44 7123 456789 (country code required)" 
+                        <input type="tel"
+                               id="contact-whatsapp"
+                               class="${inputCls}"
+                               placeholder="e.g. +44 7123 456789 (country code required)"
                                value="${this.contactDetails.whatsapp}">
                         <p id="contact-whatsapp-error" class="text-red-400 text-xs hidden" role="alert"></p>
                     </div>
 
                     <!-- Save Button -->
-                    <button id="save-contact-details" 
+                    <button id="save-contact-details"
                             class="w-full inline-flex items-center justify-center gap-2 rounded-md px-4 py-3 text-sm font-semibold text-white shadow-lg transition-all duration-300 btn-gradient">
                         <span class="material-symbols-rounded text-base">contact_phone</span>
                         <span id="save-contact-button-text">Save Contact Details</span>
                     </button>
                 </div>
-            </div>
         `;
+
+        // Collapsed by default; remembers the user's last open/closed choice
+        container.innerHTML = window.LSCollapse
+            ? LSCollapse.wrap('feedback-contact', { title: 'Your Feedback Contact' }, inner, false)
+            : `<div class="glass-card p-6"><h2 class="text-lg font-bold text-white mb-4">📞 Your Feedback Contact</h2>${inner}</div>`;
     }
 
     updatePreview() {
@@ -587,35 +588,8 @@ class ContactManager {
     }
 
     showNotification(message, type = 'info') {
-        // Create a simple toast notification
-        const toast = document.createElement('div');
-        toast.className = `fixed top-20 right-4 z-50 p-3 rounded-lg shadow-lg transition-all duration-300 transform translate-x-full`;
-        
-        const colors = {
-            'info': 'bg-blue-500',
-            'success': 'bg-green-500', 
-            'error': 'bg-red-500'
-        };
-        
-        toast.className += ` ${colors[type] || colors.info} text-white`;
-        toast.textContent = message;
-        
-        document.body.appendChild(toast);
-        
-        // Slide in
-        setTimeout(() => {
-            toast.classList.remove('translate-x-full');
-        }, 100);
-        
-        // Slide out and remove
-        setTimeout(() => {
-            toast.classList.add('translate-x-full');
-            setTimeout(() => {
-                if (toast.parentNode) {
-                    toast.parentNode.removeChild(toast);
-                }
-            }, 300);
-        }, 3000);
+        if (window.LSToasts) LSToasts.show(message, type);
+        else console.log(`${type.toUpperCase()}: ${message}`);
     }
 }
 
diff --git a/public/components/EventManager.js b/public/components/EventManager.js
index 95bf826..40384e5 100644
--- a/public/components/EventManager.js
+++ b/public/components/EventManager.js
@@ -284,12 +284,7 @@ class EventManager {
             return;
         }
 
-        container.innerHTML = `
-            <div class="glass-card p-6">
-                <div class="mb-4">
-                    <h2 class="text-lg font-bold text-white">🎯 Edit Event Details</h2>
-                </div>
-
+        const inner = `
                 <div class="space-y-3">
                     <!-- Event Configuration -->
                     <div class="space-y-3">
@@ -297,11 +292,11 @@ class EventManager {
 
                         <!-- Event Title -->
                         <div class="space-y-1">
-                            <label class="text-xs font-medium text-gray-300">Event Title</label>
+                            <label class="text-xs font-medium text-gray-300" for="event-title">Event Title</label>
                             <input type="text"
                                    id="event-title"
                                    maxlength="50"
-                                   class="w-full px-3 py-2 bg-[#111111] border border-[var(--border-color)] rounded-lg text-sm text-white placeholder-gray-400 focus:outline-none focus:ring-2 focus:ring-[var(--primary-color)]/50 focus:border-[var(--primary-color)]"
+                                   class="w-full px-3 py-2 bg-[var(--tok-surface-inset)] border border-[var(--border-color)] rounded-lg text-sm text-white placeholder-gray-400 focus:outline-none focus:ring-2 focus:ring-[var(--primary-color)]/50 focus:border-[var(--primary-color)]"
                                    placeholder="Live Audio Streams"
                                    value="${this.eventDetails.eventTitle}">
                             <div class="text-xs text-gray-500 mt-1">
@@ -311,11 +306,11 @@ class EventManager {
 
                         <!-- Event Subtitle -->
                         <div class="space-y-1">
-                            <label class="text-xs font-medium text-gray-300">Event Subtitle</label>
+                            <label class="text-xs font-medium text-gray-300" for="event-subtitle">Event Subtitle</label>
                             <input type="text"
                                    id="event-subtitle"
                                    maxlength="60"
-                                   class="w-full px-3 py-2 bg-[#111111] border border-[var(--border-color)] rounded-lg text-sm text-white placeholder-gray-400 focus:outline-none focus:ring-2 focus:ring-[var(--primary-color)]/50 focus:border-[var(--primary-color)]"
+                                   class="w-full px-3 py-2 bg-[var(--tok-surface-inset)] border border-[var(--border-color)] rounded-lg text-sm text-white placeholder-gray-400 focus:outline-none focus:ring-2 focus:ring-[var(--primary-color)]/50 focus:border-[var(--primary-color)]"
                                    placeholder="Click play to listen to any available stream"
                                    value="${this.eventDetails.eventSubtitle}">
                             <div class="text-xs text-gray-500 mt-1">
@@ -333,7 +328,7 @@ class EventManager {
                                 <textarea id="about-description"
                                           rows="4"
                                           maxlength="200"
-                                          class="w-full px-3 py-2 bg-[#111111] border border-[var(--border-color)] rounded-lg text-sm text-white placeholder-gray-400 focus:outline-none focus:ring-2 focus:ring-[var(--primary-color)]/50 focus:border-[var(--primary-color)] resize-none"
+                                          class="w-full px-3 py-2 bg-[var(--tok-surface-inset)] border border-[var(--border-color)] rounded-lg text-sm text-white placeholder-gray-400 focus:outline-none focus:ring-2 focus:ring-[var(--primary-color)]/50 focus:border-[var(--primary-color)] resize-none"
                                           placeholder="Describe your event, its purpose, and what attendees can expect">${this.eventDetails.aboutDescription}</textarea>
                                 <div class="text-xs text-gray-500 mt-1">
                                     <span id="about-description-count">${(this.eventDetails.aboutDescription || '').length}</span>/200 characters
@@ -352,7 +347,9 @@ class EventManager {
                                 <div class="relative group">
                                     <img src="${this.eventDetails.eventImage}"
                                          alt="Event Image"
-                                         class="w-full max-w-md h-48 object-cover rounded-lg border border-[var(--border-color)]">
+                                         data-lightbox
+                                         title="Click to view the full image"
+                                         style="width:100%;max-width:448px;aspect-ratio:16/9;object-fit:cover;display:block;border-radius:10px;border:1px solid var(--tok-line);cursor:zoom-in;">
                                     <button id="remove-event-image"
                                             type="button"
                                             class="absolute top-2 right-2 bg-red-500 hover:bg-red-600 text-white rounded-full p-2 transition-all duration-200 opacity-80 hover:opacity-100 focus:outline-none focus:ring-2 focus:ring-red-400 focus:ring-offset-2 focus:ring-offset-[var(--card-bg)]"
@@ -381,15 +378,19 @@ class EventManager {
                     </div>
 
                     <!-- Save Button -->
-                    <button id="save-event-settings" 
+                    <button id="save-event-settings"
                             class="w-full inline-flex items-center justify-center gap-2 rounded-md px-4 py-3 text-sm font-semibold text-white shadow-lg transition-all duration-300 btn-gradient">
                         <span class="material-symbols-rounded text-base">event</span>
                         <span id="save-event-button-text">Save Event Settings</span>
                     </button>
                 </div>
-            </div>
         `;
 
+        // Collapsed by default; remembers the user's last open/closed choice
+        container.innerHTML = window.LSCollapse
+            ? LSCollapse.wrap('event-details', { title: 'Edit Event Details' }, inner, false)
+            : `<div class="glass-card p-6"><h2 class="text-lg font-bold text-white mb-4">🎯 Edit Event Details</h2>${inner}</div>`;
+
         // Re-setup dynamic event listeners after DOM update
         this.setupDynamicEventListeners();
     }
@@ -585,35 +586,8 @@ class EventManager {
     }
 
     showNotification(message, type = 'info') {
-        // Create a simple toast notification
-        const toast = document.createElement('div');
-        toast.className = `fixed top-20 right-4 z-50 p-3 rounded-lg shadow-lg transition-all duration-300 transform translate-x-full`;
-        
-        const colors = {
-            'info': 'bg-blue-500',
-            'success': 'bg-green-500', 
-            'error': 'bg-red-500'
-        };
-        
-        toast.className += ` ${colors[type] || colors.info} text-white`;
-        toast.textContent = message;
-        
-        document.body.appendChild(toast);
-        
-        // Slide in
-        setTimeout(() => {
-            toast.classList.remove('translate-x-full');
-        }, 100);
-        
-        // Slide out and remove
-        setTimeout(() => {
-            toast.classList.add('translate-x-full');
-            setTimeout(() => {
-                if (toast.parentNode) {
-                    toast.parentNode.removeChild(toast);
-                }
-            }, 300);
-        }, 3000);
+        if (window.LSToasts) LSToasts.show(message, type);
+        else console.log(`${type.toUpperCase()}: ${message}`);
     }
 
     async handleImageUpload(event) {
diff --git a/public/components/FFmpegStreamsManager.js b/public/components/FFmpegStreamsManager.js
index 2057f0d..d4dd577 100644
--- a/public/components/FFmpegStreamsManager.js
+++ b/public/components/FFmpegStreamsManager.js
@@ -15,6 +15,19 @@ class FFmpegStreamsManager {
         this.containerId = containerId;
         this.container = null;
 
+        // List filter (all / live / err) — segmented control in the toolbar
+        this.streamFilter = 'all';
+
+        // Close any open ⋯ menu when clicking elsewhere (delegated, once)
+        document.addEventListener('click', (e) => {
+            if (!e.target.closest('.menu')) {
+                document.querySelectorAll('.menu.open').forEach(m => m.classList.remove('open'));
+            }
+        });
+
+        // Test tools: hidden by default; toggle shows Test source button in add-stream modal
+        this.showTestTools = false;
+
         // Dynamic Icecast config (fetched from /api/system/config)
         this.icecastPort = 8000; // Default fallback (Icecast standard port)
         this.serverHost = null; // Will be loaded from config - uses getPreferredLANHost() for correct network IP
@@ -29,11 +42,12 @@ class FFmpegStreamsManager {
     /**
      * Run a callback after the next paint so the UI (e.g. list update) is visible before we show a notification.
      * Use for success notifications that follow state-changing actions (delete, stop, start, etc.).
+     * Uses a small timeout to ensure DOM updates are visually complete.
      */
     afterNextPaint(callback) {
-        requestAnimationFrame(() => {
-            requestAnimationFrame(() => callback());
-        });
+        // Use setTimeout instead of RAF to ensure DOM is visually updated
+        // 100ms is enough for the DOM to paint but short enough to feel responsive
+        setTimeout(() => callback(), 100);
     }
 
     /**
@@ -52,6 +66,7 @@ class FFmpegStreamsManager {
         return msg;
     }
 
+    /**
     /**
      * True if the error is a duplicate name or duplicate source (simple modal, no troubleshooting link).
      */
@@ -90,6 +105,88 @@ class FFmpegStreamsManager {
         modal.addEventListener('click', (e) => { if (e.target === modal) close(); });
     }
 
+    /**
+     * Show structured stream error (cause + diagnosis). When API returns diagnosis, shows modal with
+     * title, first solutions or link, and expandable Details (description + full solutions).
+     * @param {Object} data - API error response { message, error, code?, cause?, diagnosis?, capacity? }
+     */
+    showStreamError(data) {
+        const diagnosis = data && data.diagnosis;
+        const title = (diagnosis && diagnosis.title) || data?.error || data?.message || 'Stream failed';
+        const linkUrl = TROUBLESHOOTING_GUIDE_URL;
+        const linkText = 'troubleshooting guide';
+
+        // Every stream start/restart failure also lands in the notification bell
+        if (window.LSNotifications) {
+            LSNotifications.notify({
+                title,
+                message: 'Stream could not be started. Open the row details for the cause.',
+                type: 'error'
+            });
+        }
+
+        if (diagnosis && (diagnosis.description || (diagnosis.solutions && diagnosis.solutions.length > 0))) {
+            // Structured error: show centred modal with title, short solutions, expandable Details
+            const escapedTitle = String(title).replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;');
+            const firstSolutions = (diagnosis.solutions || []).slice(0, 2);
+            const solutionsHtml = firstSolutions.length
+                ? '<p class="text-sm mt-2 text-red-100">' + firstSolutions.map(s => `<span class="block mt-1">• ${String(s).replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;')}</span>`).join('') + '</p>'
+                : '';
+            const detailsId = 'stream-error-details-' + Date.now();
+            const descEscaped = (diagnosis.description || '').replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/\n/g, '<br>');
+            const allSolutions = (diagnosis.solutions || []).map(s => `<li class="mt-1">${String(s).replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;')}</li>`).join('');
+            const modal = document.createElement('div');
+            modal.className = 'fixed inset-0 z-50 flex items-center justify-center p-4 bg-black/60';
+            modal.innerHTML = `
+                <div class="bg-[var(--card-bg)] border border-[var(--border-color)] rounded-2xl shadow-2xl max-w-2xl w-full max-h-[90vh] overflow-hidden flex flex-col">
+                    <div class="p-6 border-b border-[var(--border-color)] flex items-start gap-3">
+                        <span class="material-symbols-rounded text-2xl text-red-400 flex-shrink-0">error</span>
+                        <div class="flex-1 min-w-0">
+                            <h3 class="text-lg font-semibold text-white">${escapedTitle}</h3>
+                            ${solutionsHtml}
+                            <p class="text-sm mt-2 text-red-200/90">
+                                Open the <a href="/docs" target="_blank" rel="noopener" class="underline font-medium hover:opacity-90">in-app guide</a> or the <a href="${linkUrl}" target="_blank" rel="noopener noreferrer" class="underline font-medium hover:opacity-90">full ${linkText}</a> for more steps.
+                            </p>
+                        </div>
+                        <button class="text-gray-400 hover:text-white transition-colors flex-shrink-0" onclick="this.closest('.fixed').remove()" aria-label="Close">
+                            <span class="material-symbols-rounded text-xl">close</span>
+                        </button>
+                    </div>
+                    <div class="flex-1 overflow-y-auto p-6 pt-0">
+                        <details class="group" id="${detailsId}">
+                            <summary class="cursor-pointer text-sm font-medium text-gray-300 hover:text-white py-2 flex items-center gap-2">
+                                <span class="material-symbols-rounded text-lg transition-transform group-open:rotate-90">expand_more</span>
+                                Details &amp; full solutions
+                            </summary>
+                            <div class="pl-7 mt-2 text-sm text-gray-300 space-y-2">
+                                ${diagnosis.description ? `<p class="text-gray-300">${descEscaped}</p>` : ''}
+                                ${allSolutions ? `<ul class="list-disc list-inside">${allSolutions}</ul>` : ''}
+                            </div>
+                        </details>
+                        ${data && data.stderrSnippet ? `
+                        <details class="group/tech mt-2">
+                            <summary class="cursor-pointer text-xs font-medium text-gray-500 hover:text-gray-300 py-2 flex items-center gap-2">
+                                <span class="material-symbols-rounded text-sm transition-transform group-open/tech:rotate-90">bug_report</span>
+                                Technical details (FFmpeg output)
+                            </summary>
+                            <pre class="pl-7 mt-2 text-xs text-gray-500 bg-black/30 p-3 rounded overflow-x-auto font-mono">${String(data.stderrSnippet).replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;')}</pre>
+                        </details>
+                        ` : ''}
+                        ${data && data.capacity ? `<p class="text-xs text-gray-400 mt-3">Streams in use: ${data.capacity.activeStreams ?? '?'}/${data.capacity.sourceLimit ?? '?'}${data.capacity.configPath ? ' (config: ' + data.capacity.configPath + ')' : ''}</p>` : ''}
+                    </div>
+                </div>
+            `;
+            modal.addEventListener('click', (e) => { if (e.target === modal) modal.remove(); });
+            document.body.appendChild(modal);
+            const timeout = 60000;
+            setTimeout(() => { if (modal.parentNode) { modal.style.opacity = '0'; setTimeout(() => modal.remove(), 300); } }, timeout);
+            return;
+        }
+
+        // Backward compat: no diagnosis — toast with message + link
+        this.showNotification(title, 'error', { linkUrl, linkText });
+    }
+
     /**
      * Initialize the FFmpeg Streams Manager
      */
@@ -163,6 +260,21 @@ class FFmpegStreamsManager {
             if (data.streams) {
                 // Update client timers based on stream status changes
                 this.updateClientTimers(data.streams);
+
+                // Feed the notification bell when a running stream lands in error
+                if (window.LSNotifications && Array.isArray(this.activeStreams)) {
+                    data.streams.forEach(next => {
+                        const prev = this.activeStreams.find(s => s.id === next.id);
+                        if (prev && prev.status === 'running' && next.status === 'error') {
+                            LSNotifications.notify({
+                                title: `Stream "${next.name || next.id}" stopped with an error`,
+                                message: next.errorShort || 'Check the row details for the cause.',
+                                type: 'error'
+                            });
+                        }
+                    });
+                }
+
                 this.activeStreams = data.streams;
 
                 // Debug: Log stream names
@@ -277,19 +389,30 @@ class FFmpegStreamsManager {
 
     /**
      * Start a new stream
+     * @param {Object} streamConfig - Stream configuration
+     * @param {HTMLElement} modalToClose - Optional modal element to close on success
      */
-    async startStream(streamConfig) {
+    async startStream(streamConfig, modalToClose = null) {
         try {
             // First check if Icecast server is running
             const icecastStatus = await this.checkIcecastStatus();
             if (!icecastStatus.running) {
                 this.showNotification('Icecast server is not running. Please start the Icecast server first.', 'error');
+                // Re-enable modal button if modal was provided
+                if (modalToClose) {
+                    const submitBtn = modalToClose.querySelector('button[type="submit"]');
+                    if (submitBtn) {
+                        submitBtn.innerHTML = '<span class="material-symbols-rounded">play_arrow</span> 🔴 Go Live';
+                        submitBtn.disabled = false;
+                    }
+                }
                 return;
             }
 
             console.log('Starting stream with config:', streamConfig);
 
             const response = await fetch('/api/streams/start', {
+                signal: AbortSignal.timeout(25000),
                 method: 'POST',
                 headers: {
                     'Content-Type': 'application/json'
@@ -299,13 +422,21 @@ class FFmpegStreamsManager {
 
             const data = await response.json();
             console.log('Stream start response:', { status: response.status, ok: response.ok, data });
-            
-            // Check if request was successful (2xx status)
+
             if (!response.ok) {
-                throw new Error(this.formatStreamError(data, 'Failed to start stream'));
+                // Close the add stream modal before showing error modal
+                if (modalToClose) {
+                    modalToClose.remove();
+                }
+                this.showStreamError(data);
+                return;
             }
-            
+
             if (data.message === 'Stream started successfully') {
+                // Close the add stream modal on success
+                if (modalToClose) {
+                    modalToClose.remove();
+                }
                 await this.loadStreams();
                 this.render();
 
@@ -314,10 +445,22 @@ class FFmpegStreamsManager {
                 const streamUrl = `http://${displayHost}:${this.icecastPort}/${streamConfig.id || 'stream'}`;
                 this.afterNextPaint(() => this.showNotification(`Stream started successfully! Stream is now available in the list below.`, 'success'));
             } else {
-                throw new Error(this.formatStreamError(data, 'Failed to start stream'));
+                // Close the add stream modal before showing error modal
+                if (modalToClose) {
+                    modalToClose.remove();
+                }
+                this.showStreamError(data);
             }
         } catch (error) {
             console.error('Failed to start stream:', error);
+            // Re-enable modal button if modal was provided
+            if (modalToClose) {
+                const submitBtn = modalToClose.querySelector('button[type="submit"]');
+                if (submitBtn) {
+                    submitBtn.innerHTML = '<span class="material-symbols-rounded">play_arrow</span> 🔴 Go Live';
+                    submitBtn.disabled = false;
+                }
+            }
             const msg = error.message || 'Failed to start stream';
             if (this.isDuplicateError(msg)) {
                 this.showDuplicateModal('Stream already exists', msg);
@@ -350,6 +493,7 @@ class FFmpegStreamsManager {
     async stopStream(streamId) {
         try {
             const response = await fetch('/api/streams/stop', {
+                    signal: AbortSignal.timeout(15000),
                 method: 'POST',
                 headers: {
                     'Content-Type': 'application/json'
@@ -380,6 +524,7 @@ class FFmpegStreamsManager {
             console.log('Restarting stream:', streamId);
 
             const response = await fetch('/api/streams/restart', {
+                signal: AbortSignal.timeout(25000),
                 method: 'POST',
                 headers: {
                     'Content-Type': 'application/json'
@@ -390,9 +535,9 @@ class FFmpegStreamsManager {
             const data = await response.json();
             console.log('Stream restart response:', { status: response.status, ok: response.ok, data });
 
-            // Check if request was successful (2xx status)
             if (!response.ok) {
-                throw new Error(this.formatStreamError(data, 'Failed to restart stream'));
+                this.showStreamError(data);
+                return;
             }
 
             if (data.message === 'Stream restarted successfully') {
@@ -400,10 +545,17 @@ class FFmpegStreamsManager {
                 this.render();
                 setTimeout(() => this.showNotification('Stream started successfully', 'success'), 1000);
             } else {
-                throw new Error(this.formatStreamError(data, 'Failed to restart stream'));
+                this.showStreamError(data);
             }
         } catch (error) {
-            console.error('Failed to start stream:', error);
+            console.error('Failed to restart stream:', error);
+            if (window.LSNotifications) {
+                LSNotifications.notify({
+                    title: error.shortMessageHint || `Could not start "${streamId}"`,
+                    message: (error.message || '').split('\n')[0],
+                    type: 'error'
+                });
+            }
             const msg = error.message || 'Failed to restart stream';
             if (this.isDuplicateError(msg)) {
                 this.showDuplicateModal('Stream already exists', msg);
@@ -544,6 +696,7 @@ class FFmpegStreamsManager {
     async deleteStream(streamId) {
         try {
             const response = await fetch('/api/streams/delete', {
+                    signal: AbortSignal.timeout(15000),
                 method: 'POST',
                 headers: {
                     'Content-Type': 'application/json'
@@ -554,11 +707,27 @@ class FFmpegStreamsManager {
             const result = await response.json();
 
             if (response.ok) {
+                const removed = this.activeStreams.find(s => s.id === streamId);
+                const displayName = removed?.name || removed?.config?.name || streamId;
+
                 // Remove from local array
                 this.activeStreams = this.activeStreams.filter(s => s.id !== streamId);
-                this.render();
-                // Wait 1 second after row disappears before showing notification
-                setTimeout(() => this.showNotification('Stream deleted successfully', 'success'), 1000);
+                this.render();  // Re-render entire component (updates stats and list)
+
+                // Confirm the stream is really gone before announcing it, then
+                // let the row removal paint first — a delayed toast.
+                setTimeout(async () => {
+                    let reallyGone = true;
+                    try {
+                        const statusRes = await fetch('/api/streams/status');
+                        const statusData = await statusRes.json();
+                        reallyGone = !(statusData.streams || []).some(s => s.id === streamId);
+                    } catch { /* if the check fails, don't suppress the toast */ }
+
+                    if (reallyGone) {
+                        this.afterNextPaint(() => this.showNotification(`Stream "${displayName}" deleted`, 'success'));
+                    }
+                }, 900);
             } else {
                 throw new Error(result.error || 'Failed to delete stream');
             }
@@ -659,14 +828,13 @@ class FFmpegStreamsManager {
                                 <span id="edit-stream-name-counter" class="text-xs text-gray-400">${(stream.name || '').length}/50</span>
                             </div>
                         </div>
-                        <p class="text-xs text-gray-400 mt-1">Maximum 50 characters</p>
                     </div>
 
                     <div>
                         <label class="block text-sm font-medium text-gray-300 mb-2">Audio Source</label>
                         <select
                             id="editStreamDevice"
-                            class="w-full px-3 py-2 bg-[#1a1a1a] border border-[var(--border-color)] rounded-lg text-white focus:outline-none focus:border-[var(--primary-color)] transition-colors"
+                            style="height:40px;padding:0 12px;border-radius:10px;background:var(--tok-surface-inset);border:1px solid var(--tok-line-strong);color:var(--tok-text-1);font:inherit;font-size:14px;width:100%;"
                             required
                         >
                             <option value="">Select audio device...</option>
@@ -678,6 +846,21 @@ class FFmpegStreamsManager {
                         </select>
                     </div>
 
+                    <div style="display:flex;flex-direction:column;gap:6px;">
+                        <label for="editStreamBitrate" style="font-size:14px;font-weight:600;color:var(--tok-text-1);">Bitrate</label>
+                        <select
+                            id="editStreamBitrate"
+                            style="height:40px;padding:0 12px;border-radius:10px;background:var(--tok-surface-inset);border:1px solid var(--tok-line-strong);color:var(--tok-text-1);font:inherit;font-size:14px;width:100%;"
+                        >
+                            ${[96, 128, 192].map(b => `
+                                <option value="${b}" ${(stream.config?.bitrate || 96) === b ? 'selected' : ''}>
+                                    ${b} kbps${b === 96 ? ' · Speech' : b === 128 ? ' · Standard' : ' · Music'}
+                                </option>
+                            `).join('')}
+                        </select>
+                        <span style="font-size:12px;color:var(--tok-text-3);">96 is plenty for spoken translation, 192 recommended for music. Changing a live stream restarts it.</span>
+                    </div>
+
                     <div class="flex gap-3 pt-4">
                         <button
                             type="button"
@@ -737,6 +920,7 @@ class FFmpegStreamsManager {
 
                 const name = document.getElementById('editStreamName').value.trim();
                 const deviceId = document.getElementById('editStreamDevice').value;
+                const bitrate = parseInt(document.getElementById('editStreamBitrate')?.value || '96', 10);
 
                 if (!name || !deviceId) {
                     throw new Error('Please fill in all fields');
@@ -747,6 +931,7 @@ class FFmpegStreamsManager {
 
                 // Update stream via API
                 const response = await fetch('/api/streams/update', {
+                    signal: AbortSignal.timeout(25000),
                     method: 'POST',
                     headers: {
                         'Content-Type': 'application/json'
@@ -754,7 +939,8 @@ class FFmpegStreamsManager {
                     body: JSON.stringify({
                         streamId: stream.id,
                         name: sanitizedName,
-                        deviceId: deviceId
+                        deviceId: deviceId,
+                        bitrate
                     })
                 });
 
@@ -943,47 +1129,53 @@ class FFmpegStreamsManager {
     }
 
     /**
-     * Render the component
+     * Render the component. Skips the DOM rewrite when the visible data is
+     * unchanged (`force` overrides): re-rendering on every 5s poll closes any
+     * open "⋯" menu and makes the row actions flicker.
      */
-    render() {
+    render(force = false) {
         if (!this.container) {
             console.error('Cannot render: container not found');
             return;
         }
 
+        const signature = JSON.stringify(this.activeStreams.map(s =>
+            [s.id, s.status, s.name, s.label, s.deviceId, s.config?.bitrate, s.errorShort]
+        ));
+        if (!force && signature === this._listSignature) return;
+        this._listSignature = signature;
+
+        const total = this.activeStreams.length;
+        const live = this.getRunningStreamsCount();
+        const issues = this.activeStreams.filter(s => s.status === 'error').length;
+
         this.container.innerHTML = `
-            <div class="glass-card p-6">
-                <!-- Header -->
-                <div class="flex flex-col sm:flex-row items-start sm:items-center justify-between gap-4 mb-6">
-                    <div>
-                        <h2 class="text-2xl font-bold text-white flex items-center gap-2">
-                            <span class="material-symbols-rounded text-[var(--primary-color)]">radio</span>
-                            🎤 Audio Streams
-                        </h2>
-                        <p class="text-gray-400 text-sm mt-1">Stream audio from any input source to your network</p>
-                    </div>
-                    <div class="flex items-center gap-3">
-                        <div class="flex items-center gap-2 px-3 py-1.5 bg-green-500/10 border border-green-500/20 rounded-full">
-                            <div class="w-2 h-2 rounded-full bg-green-500 animate-pulse"></div>
-                            <span class="text-xs font-medium text-green-400">${this.getStreamCountStatus()}</span>
-                        </div>
-                        <div class="flex items-center gap-2">
-                            ${this.getRunningStreamsCount() > 0 || this.getStoppedStreamsCount() > 0 ? `
-                                <button id="start-stop-all-btn" class="inline-flex items-center justify-center gap-2 rounded-md px-3 py-2 text-sm font-medium transition-all duration-300 border ${this.getRunningStreamsCount() > 0 ? 'text-red-300 bg-red-900/30 hover:bg-red-800/40 border-red-700/50' : 'text-green-300 bg-green-900/30 hover:bg-green-800/40 border-green-700/50'}" title="${this.getRunningStreamsCount() > 0 ? 'Stop All Running Streams' : 'Start All Stopped Streams'}">
-                                    <span class="material-symbols-rounded text-sm">${this.getRunningStreamsCount() > 0 ? 'stop' : 'play_arrow'}</span>
-                                    ${this.getRunningStreamsCount() > 0 ? 'Stop All' : 'Start All'}
-                                </button>
-                            ` : ''}
-                            <button id="add-stream-btn" class="inline-flex items-center justify-center gap-2 rounded-md px-4 py-2.5 text-sm font-semibold text-white bg-[var(--live-color)] hover:bg-[var(--live-color)]/80 transition-all duration-300 shadow-lg">
-                                <span class="material-symbols-rounded">add</span>
-                                🔴 Start New Stream
-                            </button>
-                        </div>
+            <div class="glass-card" style="padding:0;">
+                <!-- Toolbar: title + filters + actions -->
+                <div style="display:flex;align-items:center;gap:8px;padding:14px 18px;border-bottom:1px solid var(--tok-line);flex-wrap:wrap;">
+                    <h2 style="font-size:16px;font-weight:600;color:var(--tok-text-1);margin-right:auto;">Streams</h2>
+                    <div class="seg" role="group" aria-label="Filter streams" id="stream-filter">
+                        <button type="button" data-f="all" aria-pressed="${this.streamFilter === 'all'}">All ${total}</button>
+                        <button type="button" data-f="live" aria-pressed="${this.streamFilter === 'live'}">Live${live ? ' · ' + live : ''}</button>
+                        <button type="button" data-f="err" aria-pressed="${this.streamFilter === 'err'}">Issues${issues ? ' · ' + issues : ''}</button>
                     </div>
+                    ${(live > 0 || this.getStoppedStreamsCount() > 0) && total > 0 ? `
+                        <button id="start-stop-all-btn" class="btn btn-ghost" style="height:30px;padding:0 10px;font-size:13px;" title="${live > 0 ? 'Stop all running streams' : 'Start all stopped streams'}">
+                            <span class="material-symbols-rounded text-sm">${live > 0 ? 'stop' : 'play_arrow'}</span>
+                            ${live > 0 ? 'Stop all' : 'Start all'}
+                        </button>
+                    ` : ''}
+                    <button id="refresh-devices-btn" class="iconbtn" title="Refresh devices" aria-label="Refresh audio devices" style="width:30px;height:30px;">
+                        <span class="material-symbols-rounded text-base">refresh</span>
+                    </button>
+                    <button id="add-stream-btn" class="btn btn-primary" style="height:32px;" title="Create a new stream">
+                        <span class="material-symbols-rounded text-base">add</span>
+                        New stream
+                    </button>
                 </div>
 
-                <!-- Streams Content -->
-                <div class="space-y-4">
+                <!-- Grouped, filterable list -->
+                <div class="list" id="streams-list-admin">
                     ${this.renderStreams()}
                 </div>
             </div>
@@ -992,258 +1184,183 @@ class FFmpegStreamsManager {
         this.setupEventListeners();
     }
 
+    /** One-line plain-language fix hint for a failed stream (under the error title). */
+    errorHint(stream) {
+        const s = `${stream.errorShort || ''} ${stream.error || ''}`;
+        if (/busy|already used by/i.test(s)) return 'Stop the other stream first, or edit this one to use a different input.';
+        if (/could not be opened|not found|device/i.test(s)) return 'The device is missing or held by another app — reconnect it or pick a different input.';
+        if (/icecast|connect/i.test(s)) return 'Check the Icecast panel — it may need a start or restart.';
+        return 'Open the details for the full diagnostic.';
+    }
+
+    /** Copy the listener page URL (share target is always the page, not the mount). */
+    copyListenerUrl() {
+        const displayHost = this.serverHost || window.location.hostname;
+        const url = `http://${displayHost}:${window.location.port || '3001'}/streams`;
+        if (navigator.clipboard) {
+            navigator.clipboard.writeText(url).then(() => this.showNotification('Listener link copied', 'success', { tag: 'copy' }))
+                .catch(() => window.prompt('Copy this link:', url));
+        } else {
+            window.prompt('Copy this link:', url);
+        }
+    }
+
+    /** Duplicate a stream config as a new stopped stream ("(copy)" name). */
+    async duplicateStream(streamId) {
+        const src = this.activeStreams.find(s => s.id === streamId);
+        if (!src) return;
+        try {
+            const response = await fetch('/api/streams/create', {
+                signal: AbortSignal.timeout(15000),
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify({
+                    name: `${src.name || streamId} (copy)`,
+                    deviceId: src.deviceId,
+                    bitrate: src.config?.bitrate || 96,
+                    autoStart: false
+                })
+            });
+            const data = await response.json();
+            if (!response.ok) throw new Error(data.error || 'Failed to duplicate');
+            this.showNotification(`Duplicated as "${data.stream.name}" (stopped)`, 'success');
+            await this.loadStreams();
+            this.render();
+        } catch (error) {
+            this.showNotification(`Duplicate failed: ${error.message}`, 'error');
+        }
+    }
+
     /**
      * Render active streams (including stopped ones)
      */
+    /**
+     * Render streams grouped (On air / Ready) and filtered (all/live/issues)
+     */
     renderStreams() {
-
         if (this.activeStreams.length === 0) {
-            return `
-                <div class="text-center py-12 px-6">
-                    <div class="mb-6">
-                        <div class="w-16 h-16 mx-auto mb-4 bg-[var(--primary-color)]/10 rounded-full flex items-center justify-center">
-                            <span class="material-symbols-rounded text-3xl text-[var(--primary-color)]">radio</span>
-                        </div>
-                        <h3 class="text-xl font-semibold text-white mb-2">Ready to Stream!</h3>
-                        <p class="text-gray-400 mb-4">No active streams yet. Start streaming audio from any input source.</p>
-                    </div>
-
-                    <div class="glass-card-inset rounded-xl p-6 max-w-md mx-auto">
-                        <h4 class="text-white font-medium mb-3">🚀 Quick Start Guide:</h4>
-                        <div class="text-left space-y-2 text-sm text-gray-300">
-                            <div class="flex items-center gap-2">
-                                <span class="w-5 h-5 bg-[var(--primary-color)] text-white rounded-full flex items-center justify-center text-xs font-bold">1</span>
-                                <span>Click <strong>"🔴 Start New Stream"</strong> above</span>
-                            </div>
-                            <div class="flex items-center gap-2">
-                                <span class="w-5 h-5 bg-[var(--primary-color)] text-white rounded-full flex items-center justify-center text-xs font-bold">2</span>
-                                <span>Select your audio input source</span>
-                            </div>
-                            <div class="flex items-center gap-2">
-                                <span class="w-5 h-5 bg-[var(--primary-color)] text-white rounded-full flex items-center justify-center text-xs font-bold">3</span>
-                                <span>Click <strong>"Go Live"</strong> to start streaming</span>
-                            </div>
-                        </div>
-
-                        <div class="mt-4 p-3 bg-blue-500/10 border border-blue-500/20 rounded-lg">
-                            <p class="text-xs text-blue-300">
-                                💡 <strong>Pro Tip:</strong> Install DVS (Dante Virtual Soundcard) or Virtual Audio Cable to route audio from music players, DJ software, or any application to LANStreamer.
-                            </p>
-                        </div>
-                    </div>
-                </div>
-            `;
+            return this.renderEmptyState();
         }
 
-        return this.activeStreams.map((stream, index) => {
-            // Use client-side timer for uptime calculation
-            const clientTimer = this.clientTimers.get(stream.id);
-            let uptime = '0s';
-
-            if (clientTimer && clientTimer.isRunning) {
-                const currentUptime = Date.now() - clientTimer.startTime;
-                uptime = this.formatUptime(currentUptime);
-            } else if (stream.status !== 'running') {
-                // For stopped streams, show last known uptime or 0
-                uptime = '0s';
-            }
+        const visible = this.activeStreams.filter(s =>
+            this.streamFilter === 'all' ||
+            (this.streamFilter === 'live' ? s.status === 'running' : s.status === 'error')
+        );
+        if (visible.length === 0) {
+            return `<p style="padding:32px 18px;text-align:center;color:var(--tok-text-2);">Nothing here.</p>`;
+        }
 
-            const displayHost = this.serverHost || window.location.hostname;
-            const streamUrl = `http://${displayHost}:${this.icecastPort}/${stream.id}`;
-
-            // Determine status styling and icon
-            let statusColor, statusIcon, statusText, statusBg, errorMessage = '';
-            switch (stream.status) {
-                case 'running':
-                    statusColor = 'text-green-400';
-                    statusIcon = 'radio';
-                    statusText = 'LIVE';
-                    statusBg = 'bg-green-500/10 border-green-500/20';
-                    break;
-                case 'stopped':
-                    statusColor = 'text-gray-400';
-                    statusIcon = 'stop_circle';
-                    statusText = 'STOPPED';
-                    statusBg = 'bg-gray-500/10 border-gray-500/20';
-                    break;
-                case 'error':
-                    statusColor = 'text-red-400';
-                    statusIcon = 'error';
-                    statusText = 'ERROR';
-                    statusBg = 'bg-red-500/10 border-red-500/20';
-                    errorMessage = stream.error || 'Stream failed to start';
-                    break;
-                default:
-                    statusColor = 'text-yellow-400';
-                    statusIcon = 'help';
-                    statusText = 'UNKNOWN';
-                    statusBg = 'bg-yellow-500/10 border-yellow-500/20';
-            }
+        const liveRows = visible.filter(s => s.status === 'running');
+        const restRows = visible.filter(s => s.status !== 'running');
+        let html = '';
+        if (liveRows.length > 0) {
+            html += `<div class="group-label tok-label">On air · ${liveRows.length}</div>`;
+            html += liveRows.map(s => this.renderAdminRow(s)).join('');
+        }
+        if (restRows.length > 0) {
+            html += `<div class="group-label tok-label">${this.streamFilter === 'err' ? 'Issues' : 'Ready'} · ${restRows.length}</div>`;
+            html += restRows.map(s => this.renderAdminRow(s)).join('');
+        }
+        return html;
+    }
 
-            return `
-            <div class="glass-card-inset rounded-xl p-5 hover:border-[var(--primary-color)]/30 transition-all duration-300">
-                <div class="flex flex-col sm:flex-row items-start sm:items-center justify-between gap-4">
-                    <!-- Stream Info (label S1, S2, S3 + reorder) -->
-                    <div class="flex items-center gap-4 flex-1">
-                        <div class="flex flex-col items-center gap-0.5 flex-shrink-0">
-                            <button type="button" onclick="ffmpegStreamsManager.moveStreamUp(${index})" title="Move up" class="p-1 rounded hover:bg-[var(--primary-color)]/20 text-gray-400 hover:text-white disabled:opacity-30 disabled:pointer-events-none" ${index === 0 ? 'disabled' : ''}>
-                                <span class="material-symbols-rounded text-lg">arrow_upward</span>
-                            </button>
-                            <span class="text-xs font-medium text-[var(--primary-color)]">${stream.label || 'S' + (index + 1)}</span>
-                            <button type="button" onclick="ffmpegStreamsManager.moveStreamDown(${index})" title="Move down" class="p-1 rounded hover:bg-[var(--primary-color)]/20 text-gray-400 hover:text-white disabled:opacity-30 disabled:pointer-events-none" ${index === this.activeStreams.length - 1 ? 'disabled' : ''}>
-                                <span class="material-symbols-rounded text-lg">arrow_downward</span>
-                            </button>
-                        </div>
-                        <div class="relative">
-                            <div class="w-3 h-3 rounded-full ${stream.status === 'running' ? 'bg-[var(--live-color)] pulse-live' : stream.status === 'error' ? 'bg-red-500' : 'bg-gray-500'}"></div>
-                            ${stream.status === 'running' ? '<div class="absolute inset-0 w-3 h-3 rounded-full bg-[var(--live-color)] animate-ping opacity-75"></div>' : ''}
-                        </div>
-                        <div class="flex-1 min-w-0">
-                            <div class="flex items-start justify-between gap-2 mb-1">
-                                <h3 class="font-semibold text-white text-lg truncate flex-1">${stream.label ? stream.label + ' - ' : ''}${stream.name || stream.id}</h3>
-                            </div>
-                            <div class="flex flex-wrap items-center gap-3 text-sm text-gray-400">
-                                <span class="flex items-center gap-1">
-                                    <span class="material-symbols-rounded text-sm">mic</span>
-                                    ${this.getDeviceName(stream.deviceId)}
-                                </span>
-                                <span class="flex items-center gap-1">
-                                    <span class="material-symbols-rounded text-sm">high_quality</span>
-                                    ${stream.config?.bitrate || '192'} kbps
-                                </span>
-                                <span class="flex items-center gap-1">
-                                    <span class="material-symbols-rounded text-sm">schedule</span>
-                                    <span data-stream-uptime="${stream.id}">Uptime: ${uptime}</span>
-                                </span>
-                                <span class="px-2 py-1 text-xs font-medium ${statusBg} ${statusColor} border rounded-full flex items-center gap-1 flex-shrink-0">
-                                    <span class="material-symbols-rounded text-xs">${statusIcon}</span>
-                                    ${statusText}
-                                </span>
-                            </div>
-                        </div>
-                    </div>
+    /** Friendly 3-step empty state (replaces the old Quick Start notice). */
+    renderEmptyState() {
+        return `
+            <div style="padding:48px 24px;text-align:center;">
+                <img src="/assets/logo-mark.svg" alt="" style="width:48px;height:48px;margin:0 auto 16px;display:block;">
+                <h3 style="font-size:20px;color:var(--tok-text-1);">No streams yet</h3>
+                <p style="margin-top:6px;color:var(--tok-text-2);">Pick an audio input, name it, and go live — listeners on your Wi-Fi hear it instantly.</p>
+                <div style="display:inline-flex;gap:24px;margin:20px 0;flex-wrap:wrap;justify-content:center;">
+                    <span style="display:flex;gap:10px;align-items:center;font-size:14px;color:var(--tok-text-2);"><span class="mono" style="width:24px;height:24px;border-radius:50%;background:var(--tok-accent-soft);color:var(--tok-accent);display:grid;place-items:center;">1</span>New stream</span>
+                    <span style="display:flex;gap:10px;align-items:center;font-size:14px;color:var(--tok-text-2);"><span class="mono" style="width:24px;height:24px;border-radius:50%;background:var(--tok-accent-soft);color:var(--tok-accent);display:grid;place-items:center;">2</span>Choose input</span>
+                    <span style="display:flex;gap:10px;align-items:center;font-size:14px;color:var(--tok-text-2);"><span class="mono" style="width:24px;height:24px;border-radius:50%;background:var(--tok-accent-soft);color:var(--tok-accent);display:grid;place-items:center;">3</span>Go live</span>
+                </div>
+                <div><button type="button" class="btn btn-primary" onclick="ffmpegStreamsManager.openDrawer()"><span class="material-symbols-rounded text-base">add</span>Create first stream</button></div>
+                <p style="font-size:13px;margin-top:20px;color:var(--tok-text-3);">Tip: route app audio with VB-Audio Cable or Dante Virtual Soundcard.</p>
+            </div>
+        `;
+    }
 
+    /** One admin stream row (designer anatomy: badge · name/meta · play + ⋯ menu). */
+    renderAdminRow(stream) {
+        const index = this.activeStreams.indexOf(stream);
+        const live = stream.status === 'running';
+        const err = stream.status === 'error';
 
+        const clientTimer = this.clientTimers.get(stream.id);
+        let uptime = '0s';
+        if (clientTimer && clientTimer.isRunning) {
+            uptime = this.formatUptime(Date.now() - clientTimer.startTime);
+        }
 
-                    <!-- Stream Actions -->
-                    <div class="flex items-center gap-3 w-full sm:w-auto">
-                        <div class="flex items-center gap-2 flex-1 sm:flex-initial">
-                            ${stream.status === 'running' ? `
-                                <button
-                                    onclick="ffmpegStreamsManager.copyStreamUrl('${streamUrl}', this)"
-                                    class="inline-flex items-center justify-center gap-2 rounded-md px-3 py-2 text-sm font-medium text-gray-300 bg-[#2A2A2A] hover:bg-[#3A3A3A] border border-[var(--border-color)] transition-all duration-300"
-                                    title="Copy stream URL"
-                                >
-                                    <span class="material-symbols-rounded text-sm">link</span>
-                                    Copy URL
-                                </button>
-                                <button
-                                    onclick="ffmpegStreamsManager.editStream('${stream.id}')"
-                                    class="inline-flex items-center justify-center gap-2 rounded-md px-3 py-2 text-sm font-medium text-blue-300 bg-blue-600/20 hover:bg-blue-600/30 border border-blue-600/30 transition-all duration-300"
-                                    title="Edit stream settings"
-                                >
-                                    <span class="material-symbols-rounded text-sm">edit</span>
-                                    Edit
-                                </button>
-                                <button
-                                    onclick="ffmpegStreamsManager.stopStream('${stream.id}')"
-                                    class="inline-flex items-center justify-center gap-2 rounded-md px-4 py-2 text-sm font-semibold text-white bg-red-600 hover:bg-red-700 transition-all duration-300 shadow-lg"
-                                >
-                                    <span class="material-symbols-rounded">stop</span>
-                                    Stop Stream
-                                </button>
-                            ` : `
-                                <button
-                                    onclick="ffmpegStreamsManager.restartStream('${stream.id}')"
-                                    class="inline-flex items-center justify-center gap-2 rounded-md px-3 py-2 text-sm font-medium text-green-300 bg-green-600/20 hover:bg-green-600/30 border border-green-600/30 transition-all duration-300"
-                                    title="Start stream"
-                                >
-                                    <span class="material-symbols-rounded text-sm">play_arrow</span>
-                                    Start
-                                </button>
-                                <button
-                                    onclick="ffmpegStreamsManager.editStream('${stream.id}')"
-                                    class="inline-flex items-center justify-center gap-2 rounded-md px-3 py-2 text-sm font-medium text-blue-300 bg-blue-600/20 hover:bg-blue-600/30 border border-blue-600/30 transition-all duration-300"
-                                    title="Edit stream settings"
-                                >
-                                    <span class="material-symbols-rounded text-sm">edit</span>
-                                    Edit
-                                </button>
-                                <button
-                                    onclick="ffmpegStreamsManager.deleteStream('${stream.id}')"
-                                    class="inline-flex items-center justify-center gap-2 rounded-md px-3 py-2 text-sm font-medium text-red-300 bg-red-600/20 hover:bg-red-600/30 border border-red-600/30 transition-all duration-300"
-                                    title="Delete stream"
-                                >
-                                    <span class="material-symbols-rounded text-sm">delete</span>
-                                    Delete
-                                </button>
-                            `}
-                        </div>
+        const statusChip = live
+            ? `<span class="chip chip-live"><span class="eq" aria-hidden="true"><i></i><i></i><i></i><i></i></span>LIVE</span>`
+            : err
+                ? `<span class="chip chip-err"><span class="pip" aria-hidden="true"></span>ERROR</span>`
+                : `<span class="chip chip-off">Stopped</span>`;
+
+        const deviceName = this.getDeviceName(stream.deviceId);
+        const metaExtras = live
+            ? `<span class="dotsep" aria-hidden="true"></span><span class="mono" data-stream-uptime="${stream.id}">${uptime}</span>`
+            : '';
+
+        const errBox = err ? `
+            <div class="errbox">
+                <b>${this.escapeHtml(stream.errorShort || 'Stream failed to start')}</b>
+                <span class="grow">${this.escapeHtml(this.errorHint(stream))}</span>
+                <button type="button" class="btn btn-secondary" style="height:30px;padding:0 10px;font-size:13px;" onclick="ffmpegStreamsManager.editStream('${stream.id}')">Change input</button>
+                <button type="button" class="btn btn-ghost" style="height:30px;padding:0 10px;font-size:13px;" onclick="ffmpegStreamsManager.restartStream('${stream.id}')">Retry</button>
+                <details style="width:100%;">
+                    <summary style="cursor:pointer;color:var(--tok-text-3);font-size:12px;">Full diagnostic</summary>
+                    <div class="stream-error-detail" style="margin-top:8px;">${this.escapeHtml(stream.error || '')}
+<a href="/docs" target="_blank" rel="noopener">Open troubleshooting guide</a></div>
+                </details>
+            </div>
+        ` : '';
+
+        return `
+            <div class="arow ${live ? 'is-live' : ''} ${err ? 'is-err' : ''}" data-stream-row="${stream.id}">
+                <span class="sid2" aria-hidden="true">${stream.label || 'S' + (index + 1)}</span>
+                <div style="min-width:0;">
+                    <div class="name">${this.escapeHtml(stream.name || stream.id)}</div>
+                    <div class="meta">
+                        ${statusChip}
+                        <span class="src" title="${this.escapeHtml(deviceName)}">
+                            <span class="material-symbols-rounded" style="font-size:13px;" aria-hidden="true">mic</span>${this.escapeHtml(deviceName)}
+                        </span>
+                        <span class="dotsep" aria-hidden="true"></span>
+                        <span class="mono">${stream.config?.bitrate || 96}k</span>
+                        ${metaExtras}
                     </div>
                 </div>
-
-                ${stream.status === 'running' ? `
-                    <!-- Stream URL Display -->
-                    <div class="mt-4 p-3 bg-[#0A0A0A] border border-[var(--border-color)] rounded-lg">
-                        <div class="flex items-center justify-between gap-2">
-                            <div class="flex items-center gap-2 flex-1">
-                                <span class="material-symbols-rounded text-sm text-[var(--primary-color)]">radio</span>
-                                <span class="text-xs text-gray-400">Listen via:</span>
-                                <code class="text-xs text-[var(--primary-color)] font-mono bg-[var(--primary-color)]/10 px-2 py-1 rounded flex-1 truncate">${streamUrl}</code>
-                            </div>
-                            <div class="flex items-center gap-1">
-                                <button
-                                    onclick="ffmpegStreamsManager.copyStreamUrl('${streamUrl}', this)"
-                                    class="text-xs text-gray-400 hover:text-white transition-colors px-1"
-                                    title="Copy stream URL to clipboard"
-                                >
-                                    <span class="material-symbols-rounded text-sm">content_copy</span>
-                                </button>
-                                <button
-                                    onclick="window.open('${streamUrl}', '_blank')"
-                                    class="text-xs text-gray-400 hover:text-white transition-colors px-1"
-                                    title="Test stream in browser"
-                                >
-                                    <span class="material-symbols-rounded text-sm">open_in_new</span>
-                                </button>
-                             ${stream.status === 'stopped' ? `
-                             <button
-                                 onclick="ffmpegStreamsManager.restartStream('${stream.id}')"
-                                 class="text-xs text-blue-400 hover:text-blue-300 transition-colors px-1"
-                                 title="Start this stream"
-                             >
-                                 <span class="material-symbols-rounded text-sm">restart_alt</span>
-                             </button>
-                             ` : ''}
-                            </div>
-                        </div>
-                        <div class="mt-2 text-xs text-gray-500">
-                            💡 Stream is live! Click copy button to share this URL.
-                        </div>
-                    </div>
-                ` : stream.status === 'stopped' ? `
-                    <!-- Stream Status Info -->
-                    <div class="mt-4 p-3 bg-gray-500/10 border border-gray-500/20 rounded-lg">
-                        <div class="flex items-center gap-2">
-                            <span class="material-symbols-rounded text-sm text-gray-400">info</span>
-                            <span class="text-xs text-gray-400">Stream stopped. Use Start to begin streaming.</span>
-                        </div>
-                    </div>
-                ` : `
-                    <!-- Error Status Info -->
-                    <div class="mt-4 p-3 bg-red-500/10 border border-red-500/20 rounded-lg">
-                        <div class="flex items-start gap-2">
-                            <span class="material-symbols-rounded text-sm text-red-400 mt-0.5">error</span>
-                            <div class="flex-1">
-                                <p class="text-xs text-red-300 font-medium mb-1">${errorMessage}</p>
-                                <p class="text-xs text-red-400/80">Click Edit to change device, then Start.</p>
-                            </div>
+                <div class="rowactions">
+                    ${live ? `
+                        <button class="playbtn stop" onclick="ffmpegStreamsManager.stopStream('${stream.id}')" title="Stop stream" aria-label="Stop ${this.escapeHtml(stream.name || stream.id)}">
+                            <span class="material-symbols-rounded" style="font-size:16px;">stop</span>
+                        </button>
+                    ` : `
+                        <button class="playbtn" onclick="ffmpegStreamsManager.restartStream('${stream.id}')" title="${err ? 'Retry start' : 'Go live'}" aria-label="${err ? 'Retry' : 'Go live'} ${this.escapeHtml(stream.name || stream.id)}">
+                            <span class="material-symbols-rounded" style="font-size:18px;font-variation-settings:'FILL' 1;">play_arrow</span>
+                        </button>
+                    `}
+                    <div class="menu">
+                        <button class="iconbtn" style="width:36px;height:36px;" title="More actions" aria-label="More actions for ${this.escapeHtml(stream.name || stream.id)}" onclick="this.parentNode.classList.toggle('open')">
+                            <span class="material-symbols-rounded text-base">more_vert</span>
+                        </button>
+                        <div class="menu-pop">
+                            <button type="button" onclick="ffmpegStreamsManager.copyListenerUrl()"><span class="material-symbols-rounded text-base">link</span>Copy listener link</button>
+                            <button type="button" onclick="ffmpegStreamsManager.editStream('${stream.id}')"><span class="material-symbols-rounded text-base">edit</span>Edit</button>
+                            <button type="button" onclick="ffmpegStreamsManager.moveStreamUp(${index})" ${index === 0 ? 'disabled style="opacity:.4;"' : ''}><span class="material-symbols-rounded text-base">keyboard_arrow_up</span>Move up</button>
+                            <button type="button" onclick="ffmpegStreamsManager.moveStreamDown(${index})" ${index === this.activeStreams.length - 1 ? 'disabled style="opacity:.4;"' : ''}><span class="material-symbols-rounded text-base">keyboard_arrow_down</span>Move down</button>
+                            <button type="button" onclick="ffmpegStreamsManager.duplicateStream('${stream.id}')"><span class="material-symbols-rounded text-base">content_copy</span>Duplicate</button>
+                            <button type="button" class="del" onclick="ffmpegStreamsManager.deleteStream('${stream.id}')"><span class="material-symbols-rounded text-base">delete</span>Delete</button>
                         </div>
                     </div>
-                `}
+                </div>
+                ${errBox}
             </div>
         `;
-        }).join('');
     }
 
     /**
@@ -1295,7 +1412,18 @@ class FFmpegStreamsManager {
         const addStreamBtn = document.getElementById('add-stream-btn');
         if (addStreamBtn) {
             addStreamBtn.addEventListener('click', () => {
-                this.showAddStreamModal();
+                this.openDrawer();
+            });
+        }
+
+        // Segmented filter (All / Live / Issues)
+        const filterGroup = document.getElementById('stream-filter');
+        if (filterGroup) {
+            filterGroup.querySelectorAll('button[data-f]').forEach(btn => {
+                btn.addEventListener('click', () => {
+                    this.streamFilter = btn.getAttribute('data-f');
+                    this.render(true); // filter change must repaint even with identical data
+                });
             });
         }
 
@@ -1309,192 +1437,186 @@ class FFmpegStreamsManager {
                 }
             });
         }
+
+        const refreshDevicesBtn = document.getElementById('refresh-devices-btn');
+        if (refreshDevicesBtn) {
+            refreshDevicesBtn.addEventListener('click', () => {
+                this.refreshAudioDevices();
+            });
+        }
+
+        const showTestToolsToggle = document.getElementById('show-test-tools-toggle');
+        if (showTestToolsToggle) {
+            showTestToolsToggle.addEventListener('change', () => {
+                this.showTestTools = showTestToolsToggle.checked;
+                this.render();
+            });
+        }
+    }
+
+    /** Open the new-stream side drawer. */
+    openDrawer() {
+        this.showAddStreamModal();
     }
 
     /**
      * Show add stream modal with improved UX
      */
+    /**
+     * New-stream side drawer (designer P3): source cards annotated with the
+     * stream already using them, purpose-based quality, auto-start switch, and
+     * explicit Save (stopped) vs Go live. Replaces the centred modal.
+     */
     showAddStreamModal() {
-        // Create modal for adding new stream
-        const modal = document.createElement('div');
-        modal.className = 'fixed inset-0 bg-black bg-opacity-50 flex items-center justify-center z-50';
-        modal.innerHTML = `
-            <div class="glass-card p-6 max-w-lg w-full mx-4">
-                <div class="flex items-center gap-3 mb-6">
-                    <span class="material-symbols-rounded text-2xl text-[var(--primary-color)]">radio</span>
-                    <h3 class="text-xl font-bold text-white">🎤 Start New Audio Stream</h3>
+        // Rebuild drawer markup each open (state is cheap, stale state is not)
+        let root = document.getElementById('stream-drawer-root');
+        if (root) root.remove();
+
+        root = document.createElement('div');
+        root.id = 'stream-drawer-root';
+
+        // Source cards: known devices + any device referenced by an existing
+        // stream but missing from the system (greyed out — the OBS case).
+        const usedBy = {};
+        this.activeStreams.forEach(s => {
+            if (s.status === 'running' && s.deviceId) {
+                usedBy[s.deviceId] = usedBy[s.deviceId] || [];
+                usedBy[s.deviceId].push(s.label || s.name || s.id);
+            }
+        });
+        const knownIds = new Set(this.audioDevices.map(d => d.id));
+        const missingDevices = [...new Set(
+            this.activeStreams.map(s => s.deviceId).filter(id => id && !knownIds.has(id))
+        )];
+
+        // Source options as a dropdown (compact — no need to see every device at once)
+        const sourceOptions = [
+            `<option value="">Select an audio source…</option>`,
+            ...this.audioDevices.map(d => {
+                const used = usedBy[d.id];
+                const label = used
+                    ? `${d.name} — used by ${used.join(', ')}`
+                    : `${d.name}${d.virtual ? ' (virtual)' : ''}`;
+                return `<option value="${this.escapeHtml(d.id)}">${this.escapeHtml(label)}</option>`;
+            }),
+            ...missingDevices.map(id =>
+                `<option value="" disabled>${this.escapeHtml(id)} — MISSING (not detected)</option>`)
+        ].join('');
+
+        root.innerHTML = `
+            <div class="scrim" id="drawer-scrim"></div>
+            <aside class="drawer" role="dialog" aria-modal="true" aria-labelledby="drawer-title">
+                <div style="display:flex;align-items:center;gap:10px;padding:18px 20px;border-bottom:1px solid var(--tok-line);">
+                    <h2 id="drawer-title" style="font-size:17px;font-weight:600;color:var(--tok-text-1);">New stream</h2>
+                    <span style="flex:1;"></span>
+                    <button type="button" class="iconbtn" id="drawer-close" aria-label="Close drawer" title="Close">
+                        <span class="material-symbols-rounded">close</span>
+                    </button>
                 </div>
-
-                <div class="mb-4 p-3 bg-blue-500/10 border border-blue-500/20 rounded-lg">
-                    <div class="flex items-start gap-2">
-                        <span class="material-symbols-rounded text-blue-400 text-lg mt-0.5">info</span>
-                        <div class="text-sm">
-                            <p class="text-blue-300 font-medium">Quick Start</p>
-                            <p class="text-blue-200/80">Select your audio input source and click "Go Live" to start streaming immediately.</p>
-                        </div>
+                <form class="drawer-b" id="drawer-form" onsubmit="event.preventDefault();">
+                    <div style="display:flex;flex-direction:column;gap:6px;">
+                        <label for="stream-name" style="font-size:13px;font-weight:600;color:var(--tok-text-1);">Name</label>
+                        <input id="stream-name" maxlength="50" placeholder="e.g. Main Room English" required
+                               style="height:40px;padding:0 12px;border-radius:10px;background:var(--tok-surface-inset);border:1px solid var(--tok-line-strong);color:var(--tok-text-1);font:inherit;font-size:14px;width:100%;">
+                        <span class="hint" style="font-size:12px;color:var(--tok-text-3);">Listeners see this. Use the room or language.</span>
                     </div>
-                </div>
-
-                <form id="add-stream-form">
-                    <div class="space-y-5">
-                        <div>
-                            <label class="block text-sm font-medium text-gray-300 mb-2">
-                                <span class="material-symbols-rounded text-sm mr-1">label</span>
-                                Stream Name
-                            </label>
-                            <div class="relative">
-                                <input type="text"
-                                       id="stream-name"
-                                       maxlength="50"
-                                       class="w-full input-glass text-white text-sm rounded-md focus:ring-[var(--primary-color)] focus:border-[var(--primary-color)] block px-3 py-2.5 pr-12"
-                                       placeholder="e.g., Main Room Audio, DJ Mix, Podcast"
-                                       required>
-                                <div class="absolute right-3 top-1/2 transform -translate-y-1/2">
-                                    <span id="stream-name-counter" class="text-xs text-gray-400">0/50</span>
-                                </div>
-                            </div>
-                            <p class="text-xs text-gray-400 mt-1">Maximum 50 characters</p>
-                        </div>
-
-                        <div>
-                            <label class="block text-sm font-medium text-gray-300 mb-2">
-                                <span class="material-symbols-rounded text-sm mr-1">mic</span>
-                                Audio Input Source
-                            </label>
-                            <select id="stream-device" class="w-full input-glass text-white text-sm rounded-md focus:ring-[var(--primary-color)] focus:border-[var(--primary-color)] block px-3 py-2.5" required>
-                                <option value="">🎯 Select your audio source...</option>
-                                ${this.audioDevices.map(device => `
-                                    <option value="${device.id}">
-                                        ${device.virtual ? '🔗' : '🎤'} ${device.name}
-                                        ${device.fallback ? ' (Fallback)' : ''}
-                                        ${device.virtual ? ' (Virtual)' : ''}
-                                    </option>
-                                `).join('')}
-                            </select>
-                            <p class="text-xs text-gray-400 mt-1">💡 Install DVS or Virtual Audio Cable for virtual audio routing</p>
-                            ${this.hasVirtualAudioDevices() ? `
-                                <div class="mt-2 p-2 bg-yellow-500/10 border border-yellow-500/20 rounded text-xs text-yellow-300">
-                                    ⚠️ <strong>Virtual Audio Notice:</strong> Virtual devices may occasionally disappear due to driver restarts. If streaming fails, try restarting your virtual audio software or refresh audio devices.
-                                </div>
-                            ` : ''}
-                        </div>
-
-                        <div>
-                            <label class="block text-sm font-medium text-gray-300 mb-2">
-                                <span class="material-symbols-rounded text-sm mr-1">high_quality</span>
-                                Stream Quality
-                            </label>
-                            <select id="stream-bitrate" class="w-full input-glass text-white text-sm rounded-md focus:ring-[var(--primary-color)] focus:border-[var(--primary-color)] block px-3 py-2.5">
-                                <option value="128">🎵 128 kbps - Good (smaller file size)</option>
-                                <option value="192" selected>🎶 192 kbps - High Quality (recommended)</option>
-                                <option value="256">🎼 256 kbps - Very High Quality</option>
-                                <option value="320">🎹 320 kbps - Maximum Quality</option>
-                            </select>
-                        </div>
+                    <div style="display:flex;flex-direction:column;gap:6px;">
+                        <label for="stream-device" style="font-size:13px;font-weight:600;color:var(--tok-text-1);">Audio input</label>
+                        <select id="stream-device" style="height:40px;padding:0 12px;border-radius:10px;background:var(--tok-surface-inset);border:1px solid var(--tok-line-strong);color:var(--tok-text-1);font:inherit;font-size:14px;width:100%;">${sourceOptions}</select>
                     </div>
-
-                    <div class="flex gap-3 mt-8">
-                        <button type="submit" class="flex-1 inline-flex items-center justify-center gap-2 rounded-md px-4 py-3 text-sm font-semibold text-white bg-[var(--live-color)] hover:bg-[var(--live-color)]/80 transition-all duration-300 shadow-lg">
-                            <span class="material-symbols-rounded">play_arrow</span>
-                            🔴 Go Live
-                        </button>
-                        <button type="button" onclick="this.closest('.fixed').remove()" class="flex-1 inline-flex items-center justify-center gap-2 rounded-md px-4 py-3 text-sm font-semibold text-white bg-gray-600 hover:bg-gray-700 transition-all duration-300">
-                            <span class="material-symbols-rounded">close</span>
-                            Cancel
-                        </button>
+                    <div style="display:flex;flex-direction:column;gap:6px;">
+                        <label style="font-size:13px;font-weight:600;color:var(--tok-text-1);">Quality</label>
+                        <div class="quality">
+                            <label><input type="radio" name="drawer-q" value="96" checked><b>96</b>kbps · Speech (default)</label>
+                            <label><input type="radio" name="drawer-q" value="128"><b>128</b>kbps · Standard</label>
+                            <label><input type="radio" name="drawer-q" value="192"><b>192</b>kbps · Music</label>
+                        </div>
+                        <span class="hint" style="font-size:12px;color:var(--tok-text-3);">96 kbps is plenty for spoken translation (the usual case); switch to 192 for music channels.</span>
                     </div>
+                    <label style="display:flex;align-items:center;gap:10px;font-size:14px;color:var(--tok-text-1);cursor:pointer;">
+                        <button type="button" class="switch" id="drawer-autostart" role="switch" aria-checked="false" aria-label="Start automatically when LANStreamer launches"></button>
+                        Start automatically when LANStreamer launches
+                    </label>
                 </form>
-            </div>
+                <div class="drawer-f">
+                    <button type="button" class="btn btn-ghost" id="drawer-cancel">Cancel</button>
+                    <button type="button" class="btn btn-secondary" id="drawer-save">Save</button>
+                    <button type="button" class="btn btn-primary" id="drawer-golive"><span class="material-symbols-rounded text-base">play_arrow</span>Go live</button>
+                </div>
+            </aside>
         `;
-
-        document.body.appendChild(modal);
-
-        // Setup character counter for stream name
-        const streamNameInput = document.getElementById('stream-name');
-        const streamNameCounter = document.getElementById('stream-name-counter');
-        
-        if (streamNameInput && streamNameCounter) {
-            const updateCounter = () => {
-                const length = streamNameInput.value.length;
-                streamNameCounter.textContent = `${length}/50`;
-
-                // Change color based on character count
-                if (length > 45) {
-                    streamNameCounter.className = 'text-xs text-red-400';
-                } else if (length > 40) {
-                    streamNameCounter.className = 'text-xs text-yellow-400';
-                } else {
-                    streamNameCounter.className = 'text-xs text-gray-400';
-                }
+        document.body.appendChild(root);
+        requestAnimationFrame(() => document.body.classList.add('drawer-open'));
+
+        const close = () => {
+            document.body.classList.remove('drawer-open');
+            setTimeout(() => root.remove(), 250);
+            document.removeEventListener('keydown', escHandler);
+        };
+        root.querySelector('#drawer-close').addEventListener('click', close);
+        root.querySelector('#drawer-cancel').addEventListener('click', close);
+        root.querySelector('#drawer-scrim').addEventListener('click', close);
+        root.querySelector('#drawer-autostart').addEventListener('click', function () {
+            this.setAttribute('aria-checked', this.getAttribute('aria-checked') !== 'true');
+        });
+        const escHandler = (e) => { if (e.key === 'Escape') close(); };
+        document.addEventListener('keydown', escHandler);
+
+        // Name counter hint tints as the limit approaches
+        const nameInput = root.querySelector('#stream-name');
+        const hint = root.querySelector('#drawer-form .hint');
+        nameInput.addEventListener('input', () => {
+            const n = nameInput.value.length;
+            hint.style.color = n > 45 ? 'var(--tok-danger)' : n > 40 ? 'var(--tok-warning)' : 'var(--tok-text-3)';
+        });
+        setTimeout(() => nameInput.focus(), 300);
+
+        const collect = () => {
+            const name = nameInput.value.trim().replace(/[<>"'&]/g, '');
+            const deviceId = root.querySelector('#stream-device')?.value || '';
+            const bitrate = parseInt(root.querySelector('input[name="drawer-q"]:checked')?.value || '96', 10);
+            const autoStart = root.querySelector('#drawer-autostart').getAttribute('aria-checked') === 'true';
+            if (!name || !deviceId) {
+                this.showNotification('Give the stream a name and pick an audio input.', 'warning');
+                return null;
+            }
+            const cleanId = name.toLowerCase().replace(/[^a-z0-9\s]/g, '').replace(/\s+/g, '_').substring(0, 20);
+            return {
+                name,
+                deviceId,
+                bitrate,
+                autoStart,
+                id: cleanId ? `${cleanId}_${Date.now()}` : this.generateUniqueStreamId()
             };
-            
-            streamNameInput.addEventListener('input', updateCounter);
-            updateCounter(); // Initial update
-        }
-
-        // Handle form submission
-        const form = modal.querySelector('#add-stream-form');
-        form.addEventListener('submit', async (e) => {
-            e.preventDefault();
-
-            const submitBtn = form.querySelector('button[type="submit"]');
-            const originalText = submitBtn.innerHTML;
-
-            // Show loading state
-            submitBtn.innerHTML = `
-                <div class="animate-spin rounded-full h-4 w-4 border-2 border-white border-t-transparent"></div>
-                Starting Stream...
-            `;
-            submitBtn.disabled = true;
+        };
 
+        // Save: create as stopped (appears instantly in the Ready group)
+        root.querySelector('#drawer-save').addEventListener('click', async () => {
+            const config = collect();
+            if (!config) return;
             try {
-                const streamName = document.getElementById('stream-name').value.trim();
-                
-                // Basic sanitization - remove potentially dangerous characters
-                const sanitizedName = streamName.replace(/[<>\"'&]/g, '');
-                
-                // Generate clean stream ID from name
-                const cleanId = sanitizedName
-                    .toLowerCase()
-                    .replace(/[^a-z0-9\s]/g, '') // Remove special characters
-                    .replace(/\s+/g, '_') // Replace spaces with underscores
-                    .substring(0, 20); // Limit length
-
-                // Use name-based ID with timestamp for uniqueness
-                const streamId = cleanId ? `${cleanId}_${Date.now()}` : this.generateUniqueStreamId();
-
-                const streamConfig = {
-                    name: sanitizedName,
-                    deviceId: document.getElementById('stream-device').value,
-                    bitrate: parseInt(document.getElementById('stream-bitrate').value),
-                    id: streamId
-                };
-
-                modal.remove();
-                await this.startStream(streamConfig);
-            } catch (error) {
-                // Restore button state on error
-                submitBtn.innerHTML = originalText;
-                submitBtn.disabled = false;
-                this.showNotification(error.message || 'Failed to start stream', 'error', {
-                    linkUrl: TROUBLESHOOTING_GUIDE_URL,
-                    linkText: 'troubleshooting guide'
+                const response = await fetch('/api/streams/create', {
+                    method: 'POST',
+                    headers: { 'Content-Type': 'application/json' },
+                    body: JSON.stringify(config)
                 });
+                const data = await response.json();
+                if (!response.ok) throw new Error(data.error || 'Failed to save');
+                this.showNotification(`Saved "${data.stream.name}" (stopped)`, 'success');
+                close();
+                await this.loadStreams();
+                this.render();
+            } catch (error) {
+                this.showNotification(`Save failed: ${error.message}`, 'error');
             }
         });
 
-        // Close modal on escape key
-        modal.addEventListener('keydown', (e) => {
-            if (e.key === 'Escape') {
-                modal.remove();
-            }
-        });
-
-        // Close modal on backdrop click
-        modal.addEventListener('click', (e) => {
-            if (e.target === modal) {
-                modal.remove();
-            }
+        // Go live: create + start immediately (reuses the hardened start path)
+        root.querySelector('#drawer-golive').addEventListener('click', () => {
+            const config = collect();
+            if (!config) return;
+            // Duck-type the close handle startStream expects from the old modal
+            this.startStream(config, { remove: close, querySelector: () => null });
         });
     }
 
@@ -1502,12 +1624,22 @@ class FFmpegStreamsManager {
      * Get device name from device ID
      */
     getDeviceName(deviceId) {
+        // Plain name only — icons live in the UI layer (Material mic symbol).
+        // Emoji prefixes here previously produced '�' replacement characters:
+        // the emoji-stripping regex split surrogate pairs.
         const device = this.audioDevices.find(d => d.id === deviceId);
-        if (device) {
-            const icon = device.virtual ? '🔗' : '🎤';
-            return `${icon} ${device.name}`;
-        }
-        return `🎤 ${deviceId || 'Unknown Device'}`;
+        return device ? device.name : (deviceId || 'Unknown Device');
+    }
+
+    /**
+     * Escape text for safe interpolation into HTML templates
+     */
+    escapeHtml(text) {
+        return String(text ?? '')
+            .replace(/&/g, '&amp;')
+            .replace(/</g, '&lt;')
+            .replace(/>/g, '&gt;')
+            .replace(/"/g, '&quot;');
     }
 
     /**
@@ -1534,59 +1666,17 @@ class FFmpegStreamsManager {
      * @param {{ linkUrl?: string, linkText?: string }} options - Optional; linkUrl + linkText show "See the [link] for steps."
      */
     showNotification(message, type = 'info', options = {}) {
-        const { linkUrl, linkText = 'troubleshooting guide' } = options;
-        const useErrorWithLink = type === 'error' && linkUrl;
-
-        // For stream errors with link, always use our own toast (short message + link)
-        if (useErrorWithLink) {
-            const escaped = String(message).replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;');
-            const linkHtml = `<a href="${linkUrl}" target="_blank" rel="noopener noreferrer" class="underline font-medium hover:opacity-90">${linkText}</a>`;
-            const content = `${escaped}<br><br>See the ${linkHtml} for steps.`;
-            const toast = document.createElement('div');
-            toast.className = 'fixed top-4 left-1/2 -translate-x-1/2 z-50 px-6 py-5 rounded-xl shadow-2xl transition-all duration-300 max-w-md bg-red-700 text-white';
-            toast.innerHTML = `
-                <div class="flex items-start gap-3">
-                    <span class="material-symbols-rounded text-xl mt-0.5 flex-shrink-0">error</span>
-                    <div class="flex-1 min-w-0 text-sm leading-relaxed">${content}</div>
-                    <button class="text-white/80 hover:text-white transition-colors flex-shrink-0 ml-2" onclick="this.closest('.fixed').remove()">
-                        <span class="material-symbols-rounded text-xl">close</span>
-                    </button>
-                </div>
-            `;
-            document.body.appendChild(toast);
-            const timeout = 60000;
-            setTimeout(() => { toast.style.opacity = '0'; setTimeout(() => toast.remove(), 300); }, timeout);
+        // All toasts go through the stacking toast system (LSToasts): new ones
+        // push older ones down instead of overlapping at the same fixed spot.
+        if (window.LSToasts) {
+            LSToasts.show(message, type, {
+                linkUrl: options.linkUrl,
+                linkText: options.linkText || 'troubleshooting guide',
+                timeoutMs: type === 'error' ? 30000 : undefined
+            });
             return;
         }
-
-        if (window.showNotification) {
-            window.showNotification(message, type);
-        } else {
-            const maxWidth = type === 'error' ? 'max-w-3xl' : 'max-w-md';
-            const toast = document.createElement('div');
-            toast.className = `fixed top-4 left-1/2 -translate-x-1/2 z-50 px-6 py-5 rounded-xl shadow-2xl transition-all duration-300 ${maxWidth} ${
-                type === 'success' ? 'bg-green-600 text-white' :
-                type === 'error' ? 'bg-red-700 text-white' :
-                'bg-blue-600 text-white'
-            }`;
-            const formattedMessage = type === 'error'
-                ? `<pre class="whitespace-pre-wrap font-sans text-sm leading-relaxed max-h-96 overflow-y-auto">${String(message).replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;')}</pre>`
-                : `<span class="flex-1">${String(message).replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;')}</span>`;
-            toast.innerHTML = `
-                <div class="flex items-start gap-3">
-                    <span class="material-symbols-rounded text-xl mt-0.5 flex-shrink-0">
-                        ${type === 'success' ? 'check_circle' : type === 'error' ? 'error' : 'info'}
-                    </span>
-                    <div class="flex-1 min-w-0">${formattedMessage}</div>
-                    <button class="text-white/80 hover:text-white transition-colors flex-shrink-0 ml-2" onclick="this.parentElement.parentElement.remove()">
-                        <span class="material-symbols-rounded text-xl">close</span>
-                    </button>
-                </div>
-            `;
-            document.body.appendChild(toast);
-            const timeout = type === 'error' ? 60000 : 4000;
-            setTimeout(() => { toast.style.opacity = '0'; setTimeout(() => toast.remove(), 300); }, timeout);
-        }
+        console.log(`${type.toUpperCase()}: ${message}`);
     }
 
     /**
diff --git a/public/components/FooterComponent.js b/public/components/FooterComponent.js
index c78b547..5f691ab 100644
--- a/public/components/FooterComponent.js
+++ b/public/components/FooterComponent.js
@@ -48,25 +48,26 @@ class FooterComponent {
         const currentMonth = new Date().toLocaleString('default', { month: 'long' });
 
         container.innerHTML = `
-            <footer class="mt-12 border-t border-[var(--border-color)] pt-8 pb-8 px-4 sm:px-6 lg:px-8">
-                <div class="flex flex-col sm:flex-row items-center justify-between gap-6 text-xs text-gray-500">
+            <footer class="mt-12 border-t pt-8 pb-8 px-4 sm:px-6 lg:px-8" style="border-color:var(--tok-line);">
+                <div class="flex flex-col sm:flex-row items-center justify-between gap-4 text-xs" style="color:var(--tok-text-3);">
                     <div class="flex items-center gap-4">
                         <span id="version-info">LANStreamer ${this.currentVersion}</span>
-                        <a href="https://github.com/jerryagenyi/LANStreamer" 
-                           target="_blank" 
-                           class="text-blue-400 hover:text-blue-300 transition-colors flex items-center gap-1">
+                        <a href="https://github.com/jerryagenyi/LANStreamer"
+                           target="_blank"
+                           class="flex items-center gap-1 transition-colors"
+                           style="color:var(--tok-accent);">
                             <span class="material-symbols-rounded text-sm">open_in_new</span>
-                            GitHub Repository
+                            GitHub
+                        </a>
+                        <a href="/docs" target="_blank" class="flex items-center gap-1 transition-colors" style="color:var(--tok-accent);">
+                            <span class="material-symbols-rounded text-sm">help</span>
+                            Troubleshooting
                         </a>
                     </div>
                     <div class="flex items-center gap-4">
-                        <button id="check-updates-btn" 
-                                class="text-blue-400 hover:text-blue-300 transition-colors flex items-center gap-1">
-                            <span class="material-symbols-rounded text-sm">system_update</span>
-                            Check for Updates
-                        </button>
-                        <span class="text-gray-600">|</span>
-                        <span>© ${currentMonth} ${currentYear} LANStreamer</span>
+                        <span>Free &amp; open source — no ads, no tracking of listeners</span>
+                        <span aria-hidden="true">|</span>
+                        <span>© ${currentYear} LANStreamer</span>
                     </div>
                 </div>
             </footer>
@@ -76,53 +77,7 @@ class FooterComponent {
     }
 
     setupEventListeners() {
-        const updateBtn = document.getElementById('check-updates-btn');
-        if (updateBtn) {
-            updateBtn.addEventListener('click', async () => {
-                console.log('🔄 Manual update check requested');
-                
-                // Show loading state
-                updateBtn.innerHTML = `
-                    <span class="material-symbols-rounded text-sm animate-spin">refresh</span>
-                    Checking...
-                `;
-                updateBtn.disabled = true;
-
-                try {
-                    // Force update check
-                    const response = await fetch('/api/system/update-check/force', {
-                        method: 'POST'
-                    });
-                    const data = await response.json();
-
-                    if (data.success) {
-                        if (data.updateAvailable) {
-                            this.showUpdateNotification(data);
-                        } else {
-                            this.showNotification('You have the latest version!', 'success');
-                        }
-                        
-                        // Update version display if changed
-                        if (data.current && data.current !== this.currentVersion.replace('v', '')) {
-                            this.currentVersion = `v${data.current}`;
-                            this.updateVersionDisplay();
-                        }
-                    } else {
-                        this.showNotification('Failed to check for updates', 'error');
-                    }
-                } catch (error) {
-                    console.error('Update check failed:', error);
-                    this.showNotification('Update check failed', 'error');
-                } finally {
-                    // Restore button
-                    updateBtn.innerHTML = `
-                        <span class="material-symbols-rounded text-sm">system_update</span>
-                        Check for Updates
-                    `;
-                    updateBtn.disabled = false;
-                }
-            });
-        }
+        // Update notices now surface through the header notification bell
     }
 
     updateVersionDisplay() {
diff --git a/public/components/HeaderComponent.js b/public/components/HeaderComponent.js
index 9fe757c..83c25bc 100644
--- a/public/components/HeaderComponent.js
+++ b/public/components/HeaderComponent.js
@@ -18,10 +18,10 @@ class HeaderComponent {
         await this.loadConfig(); // Load config first to get correct LAN IP
         this.render();
         this.setupEventListeners();
-        this.updateBellIcon(); // Sync bell state (default until check completes)
-        this.checkForUpdates(); // Auto-check for updates on load
+        if (window.LSNotifications) LSNotifications.bindBell(); // Notification center owns the bell now
+        this.checkForUpdates(); // Feeds update notices into the notification bell
         this.isInitialized = true;
-        console.log('✅ HeaderComponent initialization complete');
+        console.log('🎯 HeaderComponent initialization complete');
     }
 
     async loadConfig() {
@@ -44,11 +44,16 @@ class HeaderComponent {
             const response = await fetch('/api/system/update-check');
             const data = await response.json();
 
-            if (data.success) {
+            if (data.success && data.updateAvailable) {
                 this.updateInfo = data;
-                if (data.updateAvailable) {
-                    this.updateAvailable = true;
-                    this.updateBellIcon();
+                this.updateAvailable = true;
+                // Update notices are one of the bell's notification sources
+                if (window.LSNotifications) {
+                    LSNotifications.notify({
+                        title: `Update available: v${data.latest} (you have v${data.current})`,
+                        message: 'Download it from the GitHub releases page.',
+                        type: 'update'
+                    });
                 }
             }
         } catch (error) {
@@ -56,98 +61,6 @@ class HeaderComponent {
         }
     }
 
-    updateBellIcon() {
-        const bellBtn = document.getElementById('header-update-bell-btn');
-        if (!bellBtn) return;
-
-        if (this.updateAvailable) {
-            // Show update icon with notification badge
-            bellBtn.innerHTML = `
-                <span class="material-symbols-rounded text-sm relative">
-                    system_update
-                    <span class="absolute -top-1 -right-1 flex h-2 w-2">
-                        <span class="animate-ping absolute inline-flex h-full w-full rounded-full bg-red-400 opacity-75"></span>
-                        <span class="relative inline-flex rounded-full h-2 w-2 bg-red-500"></span>
-                    </span>
-                </span>
-            `;
-            bellBtn.classList.add('bg-green-900/30', 'border-green-600/50', 'text-green-400');
-            bellBtn.classList.remove('bg-gray-800/50', 'border-gray-600/30', 'text-gray-300');
-            bellBtn.title = `Update available: ${this.updateInfo?.latest || ''}`;
-        } else {
-            // Show update icon without badge
-            bellBtn.innerHTML = `
-                <span class="material-symbols-rounded text-sm">system_update</span>
-            `;
-            bellBtn.classList.remove('bg-green-900/30', 'border-green-600/50', 'text-green-400');
-            bellBtn.classList.add('bg-gray-800/50', 'border-gray-600/30', 'text-gray-300');
-            bellBtn.title = 'Check for Updates';
-        }
-    }
-
-    showUpdateModal() {
-        if (!this.updateInfo || !this.updateAvailable) {
-            this.showNotification('No update information available', 'info');
-            return;
-        }
-
-        const modal = document.createElement('div');
-        modal.className = 'fixed inset-0 bg-black/50 flex items-center justify-center z-50';
-        modal.innerHTML = `
-            <div class="glass-card p-6 max-w-md mx-4">
-                <div class="flex items-center gap-3 mb-4">
-                    <span class="material-symbols-rounded text-3xl text-green-500">system_update</span>
-                    <div>
-                        <h3 class="text-lg font-semibold text-white">Update Available!</h3>
-                        <p class="text-sm text-gray-400">A new version of LANStreamer is ready</p>
-                    </div>
-                </div>
-                <div class="glass-card-inset rounded-lg p-4 mb-4">
-                    <div class="flex justify-between items-center mb-2">
-                        <span class="text-gray-400 text-sm">Current Version</span>
-                        <span class="text-white font-medium">${this.updateInfo.current}</span>
-                    </div>
-                    <div class="flex justify-between items-center">
-                        <span class="text-gray-400 text-sm">Latest Version</span>
-                        <span class="text-green-400 font-semibold">${this.updateInfo.latest}</span>
-                    </div>
-                </div>
-                <div class="flex gap-3">
-                    <button id="update-view-release" class="btn-glass btn-glass-primary flex-1">
-                        View Release
-                    </button>
-                    <button id="update-close-modal" class="btn-glass btn-glass-secondary flex-1">
-                        Close
-                    </button>
-                </div>
-            </div>
-        `;
-
-        document.body.appendChild(modal);
-
-        // Add event listeners
-        const viewReleaseBtn = document.getElementById('update-view-release');
-        if (viewReleaseBtn && this.updateInfo.releaseUrl) {
-            viewReleaseBtn.addEventListener('click', () => {
-                const url = this.updateInfo.releaseUrl;
-                if (url && (url.startsWith('https://github.com') || url.startsWith('https://api.github.com'))) {
-                    window.open(url, '_blank');
-                }
-            });
-        }
-
-        document.getElementById('update-close-modal').addEventListener('click', () => {
-            document.body.removeChild(modal);
-        });
-
-        // Close on backdrop click
-        modal.addEventListener('click', (e) => {
-            if (e.target === modal) {
-                document.body.removeChild(modal);
-            }
-        });
-    }
-
     render() {
         const container = document.getElementById(this.containerId);
         if (!container) {
@@ -163,149 +76,78 @@ class HeaderComponent {
                 <!-- Logo Section -->
                 <div class="flex items-center gap-4 text-white">
                     <a href="http://localhost:3001" class="flex items-center gap-2 text-white hover:text-[var(--primary-color)] transition-colors">
-                        <img src="/assets/lanstreamer-logo.png"
+                        <img src="${window.LSTheme?.logoSrc?.() || '/assets/logo.svg?v=3'}"
                              alt="LANStreamer"
-                             class="h-16 w-auto logo-glow"
+                             class="h-16 w-auto"
                              id="logo-image"
-                             onerror="this.style.display='none'; document.getElementById('logo-fallback').style.display='flex';">
+                             data-theme-logo
+                             onerror="this.onerror=null; this.src='/assets/lanstreamer-logo.png';">
                         <div id="logo-fallback" style="display: none;" class="flex items-center">
                             <span class="text-xl font-bold tracking-wider">LANStreamer</span>
                         </div>
                     </a>
                 </div>
 
-                <!-- Navigation and Actions -->
+                <!-- Navigation and Actions — Listener page FIRST, Exit LAST (owner order 2026-11-01) -->
                 <div class="flex items-center gap-3">
-                    <!-- Update Icon: shows badge when update available; click opens modal or runs check -->
-                    <button id="header-update-bell-btn"
-                            class="icon-btn text-gray-300 hover:text-white"
-                            title="Check for Updates"
-                            aria-label="Check for Updates">
-                        <span class="material-symbols-rounded text-sm">system_update</span>
+                    <!-- Open listener page (sharing lives in the dashboard sidebar card) -->
+                    <a href="${streamsUrl}" target="_blank" rel="noopener" class="btn btn-secondary" style="height:30px;padding:0 10px;font-size:13px;" title="Open the listener page">
+                        <span class="material-symbols-rounded" style="font-size:15px;">headphones</span>
+                        <span class="hidden sm:inline">Open listener page</span>
+                    </a>
+
+                    <!-- Notification bell: lights up when there are unread notifications -->
+                    <button id="header-bell-btn"
+                            class="theme-toggle"
+                            title="No notifications"
+                            aria-label="No notifications"
+                            aria-haspopup="dialog">
+                        <span class="material-symbols-rounded text-sm">notifications</span>
                     </button>
 
-                    <!-- Admin Navigation Links -->
-                    <div class="flex items-center gap-2">
-                        <a href="${streamsUrl}"
-                           target="_blank"
-                           class="btn-glass btn-glass-secondary"
-                           title="Open Streams Page (for listeners)">
-                            <span class="material-symbols-rounded text-sm">radio</span>
-                            <span class="hidden sm:inline">Listen to Streams</span>
-                        </a>
+                    <!-- Theme toggle (dark/light) -->
+                    <button data-theme-toggle
+                            class="theme-toggle"
+                            title="Toggle dark/light mode"
+                            aria-label="Switch to light mode"
+                            aria-pressed="false">
+                        <span class="material-symbols-rounded text-sm">light_mode</span>
+                    </button>
 
-                        <button id="header-logout-btn"
-                               class="btn-glass btn-glass-secondary"
-                               title="Logout from Admin Dashboard"
-                               aria-label="Sign out of admin dashboard"
-                               role="button">
-                            <span class="material-symbols-rounded text-sm" aria-hidden="true">logout</span>
-                            <span class="hidden sm:inline">Logout</span>
-                        </button>
+                    <!-- App controls (only exist inside the desktop app — a plain
+                         browser tab has no window.LSApp and hides both) -->
+                    <button type="button"
+                            class="theme-toggle ${window.LSApp ? '' : 'hidden'}"
+                            id="header-minimize"
+                            title="Minimize to tray — streams keep running"
+                            aria-label="Minimize to tray (streams keep running)">
+                        <span class="material-symbols-rounded text-sm">minimize</span>
+                    </button>
+
+                    <!-- Shut down the whole app — always the LAST control -->
+                    <button type="button"
+                            class="theme-toggle ${window.LSApp ? '' : 'hidden'}"
+                            id="header-exit"
+                            title="Shut down LANStreamer (stops all streams)"
+                            aria-label="Shut down LANStreamer (stops all streams)">
+                        <span class="material-symbols-rounded text-sm" style="color:var(--tok-danger);">power_settings_new</span>
+                    </button>
                     </div>
                 </div>
             </header>
         `;
 
+        // App controls (desktop app only — window.LSApp comes from the preload)
+        const minBtn = container.querySelector('#header-minimize');
+        if (minBtn && window.LSApp) minBtn.addEventListener('click', () => window.LSApp.minimize());
+        const exitBtn = container.querySelector('#header-exit');
+        if (exitBtn && window.LSApp) exitBtn.addEventListener('click', () => window.LSApp.shutdown());
+
         console.log('🎯 Header rendered successfully');
     }
 
     setupEventListeners() {
-        // Update Bell Button
-        const bellBtn = document.getElementById('header-update-bell-btn');
-        if (bellBtn) {
-            bellBtn.addEventListener('click', async () => {
-                if (this.updateAvailable) {
-                    // Show update modal if update is available
-                    this.showUpdateModal();
-                } else {
-                    // Manual check if no update available
-                    console.log('🔄 Header update check requested');
-
-                    // Show loading state
-                    bellBtn.innerHTML = `
-                        <span class="material-symbols-rounded text-sm animate-spin">refresh</span>
-                    `;
-                    bellBtn.disabled = true;
-
-                    try {
-                        const response = await fetch('/api/system/update-check/force', {
-                            method: 'POST'
-                        });
-                        const data = await response.json();
-
-                        if (data.success) {
-                            this.updateInfo = data;
-                            if (data.updateAvailable) {
-                                this.updateAvailable = true;
-                                this.updateBellIcon();
-                                this.showUpdateModal();
-                            } else {
-                                this.showNotification('You have the latest version!', 'success');
-                            }
-                        } else {
-                            this.showNotification('Failed to check for updates', 'error');
-                        }
-                    } catch (error) {
-                        console.error('Update check failed:', error);
-                        this.showNotification('Update check failed', 'error');
-                    } finally {
-                        // Restore button if no update
-                        if (!this.updateAvailable) {
-                            bellBtn.innerHTML = originalContent;
-                        }
-                        bellBtn.disabled = false;
-                    }
-                }
-            });
-        }
-
-        // Logout Button
-        const logoutBtn = document.getElementById('header-logout-btn');
-        if (logoutBtn) {
-            logoutBtn.addEventListener('click', async (e) => {
-                e.preventDefault();
-                console.log('🚪 Logout requested');
-
-                // Show confirmation dialog
-                const confirmed = await this.showLogoutConfirmation();
-                if (!confirmed) {
-                    return;
-                }
-
-                // Show loading state
-                const originalContent = logoutBtn.innerHTML;
-                logoutBtn.innerHTML = '<span class="material-symbols-rounded text-sm animate-spin">refresh</span><span class="hidden sm:inline">Signing Out...</span>';
-                logoutBtn.disabled = true;
-
-                try {
-                    // Call logout API with timeout
-                    const controller = new AbortController();
-                    const timeoutId = setTimeout(() => controller.abort(), 5000); // 5 second timeout
-
-                    await fetch('/api/auth/logout', {
-                        method: 'POST',
-                        signal: controller.signal,
-                        headers: {
-                            'Authorization': `Bearer ${localStorage.getItem('lanstreamer_token')}`,
-                            'Content-Type': 'application/json'
-                        }
-                    });
-
-                    clearTimeout(timeoutId);
-                } catch (error) {
-                    console.log('Logout request failed:', error);
-                    // Continue with logout even if API fails
-                } finally {
-                    // Comprehensive token and session clearance
-                    this.clearAllAuthData();
-
-                    // Redirect to login page
-                    window.location.href = '/login.html';
-                }
-            });
-        }
-
+        // Notification bell is wired up by notifications.js (LSNotifications.bindBell)
         console.log('🎯 Header event listeners setup complete');
     }
 
diff --git a/public/components/IcecastManager.js b/public/components/IcecastManager.js
index b779c63..e0e45ae 100644
--- a/public/components/IcecastManager.js
+++ b/public/components/IcecastManager.js
@@ -402,81 +402,110 @@ class IcecastManager {
             return;
         }
 
-        const statusColor = this.getStatusColor();
-        const statusText = this.getStatusText();
-        const statusIcon = this.getStatusIcon();
+        const installed = !!this.status.installed;
+        const running = !!this.status.running;
+        const statusColor = !installed ? 'var(--tok-danger)' : running ? 'var(--tok-live)' : 'var(--tok-text-3)';
+        const statusLabel = !installed ? 'Not installed' : running ? 'Online' : 'Offline';
 
-        // Build Icecast admin dashboard URL
-        // Use window.location.hostname to get the actual server IP/hostname
-        // This ensures the link works when accessing from remote machines
+        // Build Icecast admin dashboard URL using the host the page was opened from
         const icecastHost = window.location.hostname;
         const icecastPort = this.status.port || '8000';
         const icecastAdminUrl = `http://${icecastHost}:${icecastPort}/admin/`;
 
-        container.innerHTML = `
-            <div class="glass-card p-6">
-                <div class="flex justify-between items-start mb-4">
-                    <div class="flex items-center gap-3">
-                        <h2 class="text-xl font-bold text-white">Icecast Server</h2>
-                        ${this.status.installed ? `
-                            <a href="${icecastAdminUrl}" target="_blank" rel="noopener noreferrer" class="inline-flex items-center gap-1.5 px-2.5 py-1 text-xs font-medium text-blue-400 hover:text-blue-300 bg-blue-500/10 hover:bg-blue-500/20 border border-blue-500/30 hover:border-blue-500/50 rounded-lg transition-all duration-300" title="Open Icecast Admin Dashboard">
-                                <span class="material-symbols-rounded text-sm">open_in_new</span>
-                                Dashboard
-                            </a>
-                        ` : ''}
+        // Status chip (dot + label) shown in the card header
+        const statusChip = `
+            <span class="inline-flex items-center gap-1.5 px-2.5 py-1 rounded-full text-xs font-semibold"
+                  style="border:1px solid ${statusColor};color:${statusColor};">
+                <span style="width:7px;height:7px;border-radius:999px;background:${statusColor};display:inline-block;"></span>
+                ${statusLabel}
+            </span>
+        `;
+
+        // Icon-only controls with tooltips (labels lived in the tooltips before)
+        const actionsHtml = `
+            <div class="flex items-center gap-1.5" role="group" aria-label="Icecast server controls">
+                <button id="start-btn" class="copy-btn" title="Start Icecast server" aria-label="Start Icecast server"
+                        ${!installed || running ? 'disabled' : ''} style="${!installed || running ? 'opacity:.35;cursor:not-allowed;' : ''}">
+                    <span class="material-symbols-rounded text-base">play_arrow</span>
+                </button>
+                <button id="icecast-stop-btn" class="copy-btn" title="Stop Icecast server" aria-label="Stop Icecast server"
+                        ${!installed || !running ? 'disabled' : ''} style="${!installed || !running ? 'opacity:.35;cursor:not-allowed;' : ''}">
+                    <span class="material-symbols-rounded text-base">stop</span>
+                </button>
+                <button id="restart-btn" class="copy-btn" title="Restart Icecast server" aria-label="Restart Icecast server"
+                        ${!installed || !running ? 'disabled' : ''} style="${!installed || !running ? 'opacity:.35;cursor:not-allowed;' : ''}">
+                    <span class="material-symbols-rounded text-base">restart_alt</span>
+                </button>
+            </div>
+        `;
+
+        // The Icecast mark doubles as the server icon; its colour carries status
+        const icecastIcon = `
+            <img src="/assets/icecast-mark.svg" alt="" aria-hidden="true"
+                 class="w-6 h-6 ls-collapse-icon" style="color:${running ? 'var(--tok-accent)' : 'var(--tok-text-3)'};">
+        `;
+
+        const bodyContent = `
+            ${this.renderInstallationStatus()}
+            ${this.renderHostnameWarning()}
+            <div class="space-y-4 ${!installed ? 'opacity-50' : ''}">
+                <!-- Status row: mark + description + icon-only controls -->
+                <div class="flex items-center gap-3 flex-wrap">
+                    <div class="flex-1 min-w-0">
+                        <p class="font-semibold" style="color:var(--tok-text-1)">${this.getServerStatusText()}</p>
+                        <p class="text-xs" style="color:var(--tok-text-3)">${this.getServerStatusDescription()}</p>
                     </div>
+                    ${actionsHtml}
                 </div>
-                
-                <!-- Installation Status -->
-                ${this.renderInstallationStatus()}
-                
-                <!-- Security Warning -->
-                ${this.renderSecurityWarning()}
-
-                <!-- Hostname Warning -->
-                ${this.renderHostnameWarning()}
-
-                <div class="space-y-5 ${!this.status.installed ? 'opacity-50' : ''}">
-                    <!-- Server Status -->
-                    <div class="flex items-center gap-4 p-3 glass-card-inset rounded-xl">
-                        <span class="material-symbols-rounded text-2xl ${statusColor.replace('bg-', 'text-')}">${statusIcon}</span>
-                        <div class="flex-1">
-                            <p class="font-semibold text-white">${this.getServerStatusText()}</p>
-                            <p class="text-sm text-gray-400">${this.getServerStatusDescription()}</p>
-                        </div>
-                        ${this.status.processId ? `<span class="text-xs text-gray-500 font-mono">PID: ${this.status.processId}</span>` : ''}
-                    </div>
-                    
-                    <!-- Action Buttons -->
-                    <div class="flex gap-2 pt-4 border-t border-[var(--border-color)]">
-                        <button id="start-btn" class="flex-1 inline-flex items-center justify-center gap-2 rounded-md px-3 py-2 text-sm font-semibold text-white shadow-lg transition-all duration-300 btn-gradient disabled:opacity-50 disabled:cursor-not-allowed" ${!this.status.installed || this.status.running ? 'disabled' : ''}>
-                            <span class="material-symbols-rounded text-base">play_arrow</span>
-                            Start Server
-                        </button>
-                        <button id="icecast-stop-btn" class="flex-1 inline-flex items-center justify-center gap-2 rounded-md px-3 py-2 text-sm font-semibold text-white shadow-lg transition-all duration-300 btn-stop-gradient disabled:opacity-50 disabled:cursor-not-allowed" ${!this.status.installed || !this.status.running ? 'disabled' : ''}>
-                            <span class="material-symbols-rounded text-base">stop</span>
-                            Stop Server
-                        </button>
-                        <button id="restart-btn" class="flex-1 inline-flex items-center justify-center gap-2 rounded-md px-3 py-2 text-sm font-semibold text-white shadow-lg transition-all duration-300 bg-[var(--card-bg)] border border-[var(--border-color)] hover:bg-[var(--border-color)] disabled:opacity-50 disabled:cursor-not-allowed" ${!this.status.installed || !this.status.running ? 'disabled' : ''}>
-                            <span class="material-symbols-rounded text-base">restart_alt</span>
-                            Restart Server
-                        </button>
-                    </div>
-                    
-                    <!-- Server Info -->
-                    <div class="border-t border-[var(--border-color)] pt-4 mt-4 text-xs text-gray-500 space-y-1">
-                        <p><strong>Installation:</strong> ${this.status.installationPath || 'Not detected'}</p>
+
+                <!-- Server info: collapsed by default, remembers choice (plain row, no card-in-card) -->
+                ${window.LSCollapse ? LSCollapse.wrap('icecast-info', { title: 'Icecast server info', plain: true }, `
+                    <div class="text-xs space-y-1" style="color:var(--tok-text-3)">
                         <p><strong>Host:</strong> ${this.status.host || 'localhost'}</p>
                         <p><strong>Port:</strong> ${this.status.port || '8000'}</p>
                         <p><strong>Uptime:</strong> ${this.formatUptime(this.status.uptime)}</p>
                         <p><strong>Listeners:</strong> ${this.status.listeners || 0}/${this.status.maxListeners || 100}</p>
                         ${this.status.version ? `<p><strong>Version:</strong> ${this.status.version}</p>` : ''}
                         ${this.status.platform ? `<p><strong>Platform:</strong> ${this.status.platform}</p>` : ''}
+                        ${this.status.installationPath ? `<p class="break-all" title="${this.status.installationPath}"><strong>Path:</strong> ${this.status.installationPath}</p>` : ''}
+                        <p class="pt-1">
+                            <a href="${icecastAdminUrl}" target="_blank" rel="noopener noreferrer" style="color:var(--tok-accent);">
+                                Open Icecast admin dashboard
+                            </a>
+                        </p>
+                    </div>
+                `, false) : `
+                    <div class="border-t border-[var(--border-color)] pt-4 mt-4 text-xs text-gray-500 space-y-1">
+                        <p><strong>Host:</strong> ${this.status.host || 'localhost'}</p>
+                        <p><strong>Port:</strong> ${this.status.port || '8000'}</p>
+                        <p><strong>Uptime:</strong> ${this.formatUptime(this.status.uptime)}</p>
+                        <p><strong>Listeners:</strong> ${this.status.listeners || 0}/${this.status.maxListeners || 100}</p>
+                    </div>
+                `}
+            </div>
+        `;
+
+        container.innerHTML = window.LSCollapse
+            ? LSCollapse.wrap('icecast-server',
+                {
+                  iconHtml: icecastIcon,
+                  title: 'Icecast Server',
+                  badge: statusChip,
+                  aside: this.status.processId ? `<span class="text-xs" style="color:var(--tok-text-3)">PID ${this.status.processId}</span>` : ''
+                },
+                bodyContent, false)
+            : `
+            <div class="glass-card p-6 space-y-4">
+                <div class="flex justify-between items-center gap-3">
+                    <div class="flex items-center gap-3">
+                        <h2 class="text-lg font-bold text-white">Icecast Server</h2>
+                        ${statusChip}
                     </div>
                 </div>
+                ${bodyContent}
             </div>
         `;
-        
+
         // Re-setup event listeners after rendering
         this.setupEventListeners();
     }
@@ -584,50 +613,25 @@ class IcecastManager {
     }
 
     updateActionButtons(loadingButton = null) {
-        const startBtn = document.querySelector('#start-btn');
-        const stopBtn = document.querySelector('#icecast-stop-btn');
-        const restartBtn = document.querySelector('#restart-btn');
-        
-        // Always disable all buttons during any operation to prevent race conditions
-        if (startBtn) startBtn.disabled = (loadingButton !== null) || !this.status.installed || this.status.running;
-        if (stopBtn) stopBtn.disabled = (loadingButton !== null) || !this.status.installed || !this.status.running;
-        if (restartBtn) restartBtn.disabled = (loadingButton !== null) || !this.status.installed || !this.status.running;
-        
-        // Update button text - only show spinner for the specific loading button
-        if (startBtn) {
-            if (loadingButton === 'start') {
-                startBtn.innerHTML = '<span class="material-symbols-rounded text-base animate-spin">refresh</span> Starting Server...';
-            } else {
-                startBtn.innerHTML = '<span class="material-symbols-rounded text-base">play_arrow</span> Start Server';
-            }
-        }
-        
-        if (stopBtn) {
-            if (loadingButton === 'stop') {
-                stopBtn.innerHTML = '<span class="material-symbols-rounded text-base animate-spin">refresh</span> Stopping Server...';
-            } else {
-                stopBtn.innerHTML = '<span class="material-symbols-rounded text-base">stop</span> Stop Server';
-            }
-        }
-        
-        if (restartBtn) {
-            if (loadingButton === 'restart') {
-                restartBtn.innerHTML = '<span class="material-symbols-rounded text-base animate-spin">refresh</span> Restarting Server...';
-            } else {
-                restartBtn.innerHTML = '<span class="material-symbols-rounded text-base">restart_alt</span> Restart Server';
-            }
+        // Icon-only buttons: busy state swaps the icon to a spinner, keeps tooltip
+        const buttons = [
+            { name: 'start', el: document.getElementById('start-btn'), icon: 'play_arrow', title: 'Start Icecast server' },
+            { name: 'stop', el: document.getElementById('icecast-stop-btn'), icon: 'stop', title: 'Stop Icecast server' },
+            { name: 'restart', el: document.getElementById('restart-btn'), icon: 'restart_alt', title: 'Restart Icecast server' }
+        ];
+
+        for (const { name, el, icon, title } of buttons) {
+            if (!el) continue;
+            const busy = loadingButton !== null;
+            const enabled = !busy && this.status.installed && (name === 'start' ? !this.status.running : this.status.running);
+            el.disabled = !enabled;
+            el.title = loadingButton === name ? `${title} (working…)` : title;
+            el.setAttribute('aria-label', el.title);
+            el.style.opacity = enabled ? '' : '0.35';
+            el.style.cursor = enabled ? 'pointer' : 'not-allowed';
+            const spinning = loadingButton === name;
+            el.innerHTML = `<span class="material-symbols-rounded text-base${spinning ? ' animate-spin' : ''}">${spinning ? 'progress_activity' : icon}</span>`;
         }
-        
-        // Add visual feedback for disabled state
-        [startBtn, stopBtn, restartBtn].forEach(btn => {
-            if (btn) {
-                if (btn.disabled) {
-                    btn.classList.add('opacity-50', 'cursor-not-allowed');
-                } else {
-                    btn.classList.remove('opacity-50', 'cursor-not-allowed');
-                }
-            }
-        });
     }
 
     updateStatusIndicators() {
@@ -696,36 +700,8 @@ class IcecastManager {
     }
 
     showNotification(message, type = 'info') {
-        // Create notification element
-        const notification = document.createElement('div');
-        notification.className = `fixed top-4 right-4 p-4 rounded-lg shadow-lg z-50 transition-all duration-300 transform translate-x-full`;
-        
-        const bgColor = type === 'success' ? 'bg-green-600' : type === 'error' ? 'bg-red-600' : type === 'warning' ? 'bg-yellow-600' : 'bg-blue-600';
-        notification.className += ` ${bgColor} text-white`;
-        
-        notification.innerHTML = `
-            <div class="flex items-center gap-2">
-                <span class="material-symbols-rounded text-lg">${type === 'success' ? 'check_circle' : type === 'error' ? 'error' : type === 'warning' ? 'warning' : 'info'}</span>
-                <span>${message}</span>
-            </div>
-        `;
-        
-        document.body.appendChild(notification);
-        
-        // Animate in
-        setTimeout(() => {
-            notification.classList.remove('translate-x-full');
-        }, 100);
-        
-        // Auto-remove after 5 seconds
-        setTimeout(() => {
-            notification.classList.add('translate-x-full');
-            setTimeout(() => {
-                if (notification.parentNode) {
-                    notification.parentNode.removeChild(notification);
-                }
-            }, 300);
-        }, 5000);
+        if (window.LSToasts) LSToasts.show(message, type);
+        else console.log(`${type.toUpperCase()}: ${message}`);
     }
 
     startAutoRefresh() {
@@ -743,6 +719,7 @@ class IcecastManager {
     async checkStatusAndUpdateButtons() {
         try {
             const wasInstalled = this.status.installed;
+            const wasRunning = !!this.status.running;
 
             // Always check for installation changes
             await this.detectIcecastInstallation();
@@ -758,6 +735,23 @@ class IcecastManager {
             if (this.status.installed) {
                 await this.checkStatus();
                 this.render(); // Update button states based on new status
+
+                // Feed the notification bell on up/down transitions
+                const nowRunning = !!this.status.running;
+                if (window.LSNotifications && wasRunning && !nowRunning) {
+                    LSNotifications.notify({
+                        title: 'Icecast server went offline',
+                        message: 'Running streams will stop until it is back. Restart it from the Icecast panel.',
+                        type: 'error'
+                    });
+                } else if (window.LSNotifications && !wasRunning && nowRunning && this._announcedOnce) {
+                    LSNotifications.notify({
+                        title: 'Icecast server is back online',
+                        message: 'Streams can be started again.',
+                        type: 'success'
+                    });
+                }
+                this._announcedOnce = true;
             }
         } catch (error) {
             console.warn('Auto status check failed:', error);
diff --git a/public/components/README.md b/public/components/README.md
deleted file mode 100644
index 3372af6..0000000
--- a/public/components/README.md
+++ /dev/null
@@ -1,255 +0,0 @@
-# LANStreamer Dashboard Components
-
-This directory contains modular UI components for the LANStreamer dashboard. Each component is designed to be self-contained, reusable, and easy to integrate.
-
-## Component Architecture
-
-### Design Principles
-- **Self-contained**: Each component manages its own state and DOM
-- **Event-driven**: Components communicate through events and public APIs
-- **Responsive**: All components work across mobile and desktop
-- **Accessible**: Following ARIA guidelines and keyboard navigation
-- **Themed**: Using CSS variables for consistent styling
-
-### Component Structure
-```javascript
-class ComponentName {
-    constructor(containerId, options = {}) {
-        this.containerId = containerId;
-        this.options = options;
-        this.init();
-    }
-
-    init() {
-        this.render();
-        this.setupEventListeners();
-        // Component-specific initialization
-    }
-
-    render() {
-        // Generate and inject HTML
-    }
-
-    setupEventListeners() {
-        // Bind event handlers
-    }
-
-    // Public API methods
-    destroy() {
-        // Cleanup when component is removed
-    }
-}
-```
-
-## Available Components
-
-### LobbyMusicPlayer
-**File**: `LobbyMusicPlayer.js`  
-**Purpose**: Background music player with file selection and playback controls
-
-**Features**:
-- ✅ Play/Pause/Stop controls
-- ✅ File selection (MP3, WAV, OGG, M4A)
-- ✅ Volume control with mute
-- ✅ Progress bar with seek functionality
-- ✅ Loop playback for background music
-- ✅ Real-time status updates
-- ✅ Error handling and user notifications
-
-**Usage**:
-```javascript
-// Initialize the component
-const musicPlayer = new LobbyMusicPlayer('container-id');
-
-// Get current state
-const state = musicPlayer.getPlayState();
-
-// Cleanup when done
-musicPlayer.destroy();
-```
-
-**API Methods**:
-- `togglePlayPause()` - Toggle between play and pause
-- `play()` - Start playback
-- `pause()` - Pause playback  
-- `stop()` - Stop and reset to beginning
-- `setVolume(volume)` - Set volume (0-100)
-- `toggleMute()` - Toggle mute state
-- `getCurrentFile()` - Get current file name
-- `getPlayState()` - Get current playback state
-- `destroy()` - Clean up component
-
-### IcecastManager
-**File**: `IcecastManager.js`  
-**Purpose**: Comprehensive Icecast server management with autonomous operation capabilities
-
-**Features**:
-- ✅ **Installation Detection**: Multi-platform search with Windows-specific path handling
-- ✅ **File Validation**: Comprehensive validation of executable, config, batch files, and directories
-- ✅ **Process Management**: Start, stop, restart, and force kill Icecast processes
-- ✅ **Real-time Monitoring**: Live status updates, uptime tracking, listener counts
-- ✅ **Configuration Management**: Validate Icecast XML configuration files
-- ✅ **Windows Integration**: Service detection, process ID tracking, port monitoring
-- ✅ **Error Recovery**: Automatic restart, health monitoring, graceful degradation
-- ✅ **Network Diagnostics**: Admin interface accessibility, port conflict detection
-- ✅ **Autonomous Operation**: Self-healing, external process detection, status determination
-
-**Core Capabilities**:
-- **Installation Detection & Validation**: Checks for `icecast.exe`, `icecast.xml`, `icecast.bat` across multiple paths
-- **Process Management & Monitoring**: Uses `tasklist`, `netstat`, `taskkill` for Windows process control
-- **Service Integration**: Monitors Windows services with `sc query` commands
-- **Configuration Management**: Parses and validates `icecast.xml` syntax and paths
-- **Logging & Diagnostics**: Real-time access to `access.log` and `error.log` files
-- **Network & Connectivity**: Tests admin interface at `http://localhost:8000/admin/`
-- **Error Recovery & Resilience**: Automatic health checks and recovery procedures
-
-**Usage**:
-```javascript
-// Initialize the component
-const icecastManager = new IcecastManager('container-id');
-
-// Check current status
-const status = icecastManager.status;
-
-// Start server
-await icecastManager.startServer();
-
-// Validate configuration
-await icecastManager.validateConfiguration();
-
-// Cleanup when done
-icecastManager.destroy();
-```
-
-**API Methods**:
-- `detectIcecastInstallation()` - Search for and validate Icecast installation
-- `checkStatus()` - Get current server status and statistics
-- `validateConfiguration()` - Validate Icecast XML configuration
-- `startServer()` - Start Icecast server process
-- `stopServer()` - Stop Icecast server gracefully
-- `restartServer()` - Restart server with full cycle
-- `updateActionButtons()` - Update UI button states
-- `updateStatusIndicators()` - Update external status displays
-- `startAutoRefresh()` - Begin automatic status monitoring
-- `stopAutoRefresh()` - Stop automatic status monitoring
-- `destroy()` - Clean up component and intervals
-
-**Status Information**:
-- **Installation Status**: Detected paths, file validation results
-- **Process Status**: Running state, Process ID (PID), port activity
-- **Server Stats**: Uptime, listeners, sources, connections
-- **Health Status**: Overall system health (healthy/degraded/warning/critical)
-- **Configuration**: XML validation, path accessibility, error detection
-
-**Workflow**:
-1. **Initialization**: Detect Icecast installation, validate files, check current status
-2. **Status Monitoring**: Continuous monitoring of process, port, and admin interface
-3. **User Control**: Handle start/stop/restart commands with proper error handling
-4. **Health Management**: Monitor system health and trigger recovery procedures
-5. **External Detection**: Detect manually started instances and integrate with them
-
-**Dependencies**:
-- Backend API endpoints (`/api/system/icecast/*`)
-- Windows system commands (`tasklist`, `netstat`, `taskkill`, `sc`)
-- Icecast configuration files (`icecast.xml`)
-- Network connectivity to localhost:8000
-- File system access to Program Files directories
-
-## Integration Guide
-
-### 1. Include Component Script
-```html
-<script src="/components/ComponentName.js"></script>
-```
-
-### 2. Create Container Element
-```html
-<div id="component-container"></div>
-```
-
-### 3. Initialize Component
-```javascript
-const component = new ComponentName('component-container', options);
-```
-
-### 4. Handle Component Events (if needed)
-```javascript
-// Components emit custom events for integration
-document.addEventListener('music-player-state-changed', (event) => {
-    console.log('Music state:', event.detail);
-});
-```
-
-## Styling Guidelines
-
-### CSS Variables Used
-```css
-:root {
-  --primary-color: #00AEEF;
-  --live-color: #4CAF50;
-  --dark-bg: #111111;
-  --card-bg: #1A1A1A;
-  --border-color: #2F2F2F;
-  --warning-color: #F85149;
-}
-```
-
-### Component Classes
-- `.btn-gradient` - Primary action buttons
-- `.btn-stop-gradient` - Stop/destructive action buttons
-- `.pulse-live` - Live status animation
-
-## Future Components
-
-### Planned Components
-- [ ] **StreamControlPanel** - Individual stream management
-- [ ] **AudioDeviceSelector** - Device selection with type filtering
-- [ ] **IcecastServerPanel** - Server management and stats
-- [ ] **SystemStatusIndicator** - Service status monitoring
-- [ ] **NotificationCenter** - Centralized notifications
-- [ ] **FileUploader** - Drag-and-drop file uploads
-- [ ] **SettingsPanel** - Configuration management
-
-### Component Development Checklist
-- [ ] Create component class file
-- [ ] Implement core functionality
-- [ ] Add error handling
-- [ ] Include accessibility features
-- [ ] Write unit tests (future)
-- [ ] Document API and usage
-- [ ] Update this README
-- [ ] Integrate into main dashboard
-
-## Best Practices
-
-### Error Handling
-- Always include try-catch blocks for async operations
-- Provide user-friendly error messages
-- Log detailed errors to console for debugging
-
-### Performance
-- Use event delegation for dynamic content
-- Clean up event listeners in `destroy()` method
-- Avoid memory leaks with proper cleanup
-
-### Accessibility
-- Include proper ARIA labels
-- Support keyboard navigation
-- Provide screen reader friendly content
-- Use semantic HTML elements
-
-### Testing
-- Test across different browsers
-- Verify mobile responsiveness
-- Test with various file types/sizes
-- Validate error scenarios
-
-## Contributing
-
-When adding new components:
-1. Follow the established naming convention
-2. Include comprehensive error handling
-3. Document all public methods
-4. Update this README with component details
-5. Test integration with main dashboard
-6. Consider mobile/responsive design
diff --git a/public/docs.html b/public/docs.html
new file mode 100644
index 0000000..245bb65
--- /dev/null
+++ b/public/docs.html
@@ -0,0 +1,224 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="utf-8"/>
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>LANStreamer — Troubleshooting &amp; Guide</title>
+    <link rel="icon" type="image/png" href="/assets/favicon.png">
+    <link rel="icon" type="image/svg+xml" href="/assets/logo-mark.svg">
+    <link rel="stylesheet" href="/assets/vendor/tailwind.css">
+    <link rel="stylesheet" href="/assets/vendor/fonts/fonts.css?v=5">
+    <link rel="stylesheet" href="/assets/css/tokens.css?v=10">
+    <link rel="stylesheet" href="/assets/css/ui.css?v=16">
+    <script src="/assets/js/theme-toggle.js?v=7"></script>
+    <style>
+        body { font-family: var(--tok-font); }
+        .doc-wrap { max-width: 52rem; margin: 0 auto; padding: 2rem 1.25rem 4rem; }
+        .doc-toc { display: flex; flex-wrap: wrap; gap: 0.5rem; margin: 1.5rem 0 2.5rem; }
+        .doc-toc a {
+            font-size: 0.75rem; font-weight: 600; text-decoration: none;
+            padding: 0.4rem 0.9rem; border-radius: 999px;
+            border: 1px solid var(--tok-line-strong); color: var(--tok-text-2);
+        }
+        .doc-toc a:hover { color: var(--tok-accent); border-color: var(--tok-accent); }
+        .doc-section { margin-top: 2.75rem; }
+        .doc-section h2 {
+            font-size: 1.05rem; font-weight: 800; color: var(--tok-text-1);
+            display: flex; align-items: center; gap: 0.5rem;
+            padding-bottom: 0.5rem; border-bottom: 1px solid var(--tok-line);
+        }
+        .doc-section h2 .material-symbols-rounded { color: var(--tok-accent); font-size: 1.25rem; }
+        .doc-section h3 { font-size: 0.875rem; font-weight: 700; color: var(--tok-text-1); margin-top: 1.5rem; }
+        .doc-section p, .doc-section li { font-size: 0.875rem; color: var(--tok-text-2); line-height: 1.65; }
+        .doc-section strong { color: var(--tok-text-1); }
+        .doc-section code {
+            font-family: ui-monospace, SFMono-Regular, Menlo, monospace;
+            font-size: 0.78rem; padding: 0.1rem 0.4rem; border-radius: 6px;
+            background: var(--tok-surface-inset); border: 1px solid var(--tok-line);
+            color: var(--tok-text-1);
+        }
+        .doc-callout {
+            margin-top: 1rem; padding: 0.875rem 1rem;
+            border-radius: 12px; border: 1px solid var(--tok-line-strong);
+            background: var(--tok-surface-2);
+            font-size: 0.8125rem; color: var(--tok-text-2); line-height: 1.6;
+        }
+        .doc-callout .material-symbols-rounded { font-size: 1.1rem; vertical-align: -2px; color: var(--tok-accent); margin-right: 0.25rem; }
+        .doc-steps { margin: 0.75rem 0; padding-left: 1.25rem; list-style: decimal; }
+        .doc-steps li { margin: 0.35rem 0; }
+        a.doc-back {
+            display: inline-flex; align-items: center; gap: 0.375rem;
+            font-size: 0.8125rem; font-weight: 600; text-decoration: none; color: var(--tok-text-2);
+        }
+        a.doc-back:hover { color: var(--tok-accent); }
+    </style>
+</head>
+<body class="body-bg">
+<div class="doc-wrap">
+    <header class="flex items-center justify-between gap-4 flex-wrap">
+        <div class="flex items-center gap-3">
+            <img src="/assets/logo.svg?v=3" alt="LANStreamer" data-theme-logo class="h-10 w-auto">
+            <div>
+                <div class="text-lg font-bold" style="color:var(--tok-text-1)">Troubleshooting &amp; Guide</div>
+                <div class="tok-label">Everything in one page — works offline</div>
+            </div>
+        </div>
+        <div class="flex items-center gap-2">
+            <button data-theme-toggle class="theme-toggle" title="Toggle dark/light mode" aria-label="Toggle dark/light mode">
+                <span class="material-symbols-rounded text-sm">light_mode</span>
+            </button>
+        </div>
+    </header>
+
+    <nav class="doc-toc" aria-label="Sections">
+        <a href="#access">Admin access</a>
+        <a href="#streams">Streams</a>
+        <a href="#devices">Audio sources</a>
+        <a href="#network">Network &amp; phones</a>
+        <a href="#latency">Latency</a>
+        <a href="#specs">Minimum specs</a>
+    </nav>
+
+    <section class="doc-section" id="access">
+        <h2><span class="material-symbols-rounded">lock</span>Admin access</h2>
+        <p>The admin dashboard is protected by a login. <strong>The listener page has no login</strong> —
+        phones on the network just open the shared <code>/streams</code> link.</p>
+        <ul>
+            <li>Sign in at <code>http://localhost:3001/dashboard</code> (or in the Electron app window) with your
+            admin username and password — the defaults ship in the project <code>README.md</code> under
+            “Admin access”, and can be changed with the <code>ADMIN_USERNAME</code> / <code>ADMIN_PASSWORD</code>
+            environment variables. On first run the dashboard shows a banner stating the defaults and how to
+            change them; it disappears once you set your own.</li>
+            <li><strong>Change it in the app:</strong> dashboard → sidebar → <b>Admin account</b> card — new
+            username + password, applies immediately (works in the desktop app, where there is no <code>.env</code>).</li>
+            <li><strong>Forgot your password?</strong> On this PC, delete the admin login file and restart
+            LANStreamer — the documented default login returns, and you can set a new one from the Admin account
+            card. Installed app: <code>%APPDATA%\LANStreamer\security.json</code> · from source:
+            <code>config\security.json</code>. (The login page shows this hint too.)</li>
+            <li>Admin is also locked to <strong>localhost</strong>: other machines on the network only ever see
+            the listener page, even with valid credentials.</li>
+            <li>The <strong>bundled Icecast</strong> is hardened for you: it only listens on this PC
+            (<code>127.0.0.1</code>) and its passwords are randomly generated per install — listeners get audio
+            through LANStreamer's port 3001, never Icecast directly. Using your own Icecast install? Change its
+            stock passwords; the dashboard warns until you do.</li>
+            <li>Never port-forward ports 3001/8200 to the internet — the localhost lock only protects you on your LAN.</li>
+            <li>Remote admin over the internet: use a VPN like Tailscale instead of exposing ports.</li>
+        </ul>
+    </section>
+
+    <section class="doc-section" id="streams">
+        <h2><span class="material-symbols-rounded">podcasts</span>Streams</h2>
+
+        <h3>Start with the app (auto-start)</h3>
+        <p>Streams saved with <strong>Start with app</strong> enabled come up automatically when LANStreamer
+        launches &mdash; including the Icecast server, which starts itself if it isn't running yet. Stop a stream and
+        disable the toggle if you want it to stay down across restarts.</p>
+
+        <h3>“Audio source busy — already used by …”</h3>
+        <p>One audio input can feed <strong>one</strong> running stream at a time. Windows audio capture is exclusive
+        per process, so a second stream on the same source cannot start.</p>
+        <ol class="doc-steps">
+            <li>Stop the other stream named in the message, <strong>or</strong></li>
+            <li>Edit this stream and pick a different audio source, then Start.</li>
+        </ol>
+
+        <h3>“Audio source … could not be opened”</h3>
+        <p>FFmpeg could see the device name but not open it as a capture device.</p>
+        <ol class="doc-steps">
+            <li>If the source is a <strong>virtual camera's audio pin</strong> (e.g. <em>OBS Virtual Camera</em>), it cannot be captured — use OBS's actual audio output via a virtual cable (VoiceMeeter / VB-Cable) instead.</li>
+            <li>Close other apps holding the mic (Zoom, Teams, Discord, Audacity, OBS itself).</li>
+            <li>Restart VoiceMeeter / VB-Cable if you use virtual devices, then Refresh Devices.</li>
+        </ol>
+
+        <h3>“Cannot connect to Icecast”</h3>
+        <ol class="doc-steps">
+            <li>Check the Icecast panel on the dashboard — it should say <strong>Online</strong>. Start it if not (LANStreamer also auto-starts it when you go live).</li>
+            <li>Port conflict: run <code>netstat -ano | findstr ":8200"</code> — if another app (e.g. Docker) holds the port, stop it or change the port in icecast.xml.</li>
+            <li>Restart Icecast from its panel (Stop → Start).</li>
+            <li>Windows Firewall: allow icecast.exe on private networks.</li>
+        </ol>
+
+        <h3>The app opened on port 3002, or “port 3001 already in use”</h3>
+        <p>Another LANStreamer server instance is still running — usually a leftover <code>node</code> server
+        from a terminal (the window with the <em>“DO NOT CLOSE THIS TERMINAL”</em> message), or a second copy
+        of the app. Two instances share the same stream settings and fight over audio devices, so stop one:</p>
+        <ol class="doc-steps">
+            <li>On the dashboard of the instance you're keeping, <strong>stop every stream and the Icecast
+            server</strong> — that frees the audio devices cleanly (the stop buttons end the encoders properly).</li>
+            <li>Note: there is deliberately no “stop server” button — a web server cannot stop itself over HTTP.
+            To end the server process itself, close its terminal window (or quit the Electron app from the tray),
+            or kill it from Task Manager (<code>node.exe</code> listening on port 3001).</li>
+            <li>Relaunch the app — it takes port 3001 back and starts clean.</li>
+        </ol>
+
+        <h3>Stream stuck on “starting” / listener can't hear anything</h3>
+        <p>The stream row status refreshes every 5&nbsp;seconds. If a stream shows an error or stopped:</p>
+        <ol class="doc-steps">
+            <li>Open the error's <strong>Details</strong> on the row — the top line says what failed.</li>
+            <li>If the machine's IP changed (DHCP), restart LANStreamer; it re-syncs Icecast's hostname automatically.</li>
+            <li>Ask listeners to tap play again — the listener page auto-resumes a stream that comes back on air.</li>
+        </ol>
+    </section>
+
+    <section class="doc-section" id="devices">
+        <h2><span class="material-symbols-rounded">mic</span>Audio sources</h2>
+        <h3>Devices listed twice</h3>
+        <p>Fixed in current versions — duplicate entries are de-duplicated. If you still see doubles after plugging a
+        new device in, click <strong>Refresh Devices</strong> (icon in the sources card).</p>
+        <h3>Routing app audio into LANStreamer</h3>
+        <p>Windows only exposes microphones as capture devices. To stream what a player/DJ app plays, install a virtual
+        cable and pick it as the stream source:</p>
+        <ul>
+            <li><strong>VoiceMeeter</strong> (donationware) — mixer + virtual outputs.</li>
+            <li><strong>VB-Audio Virtual Cable</strong> — simple in/out pair.</li>
+        </ul>
+        <div class="doc-callout">
+            <span class="material-symbols-rounded">info</span>
+            Pick the cable <strong>output</strong> (what apps play into) as LANStreamer's input source, and set the same
+            cable as the default playback device in your music app.
+        </div>
+    </section>
+
+    <section class="doc-section" id="network">
+        <h2><span class="material-symbols-rounded">wifi</span>Network &amp; phones</h2>
+        <h3>Listener address</h3>
+        <p>Listeners open <code>http://&lt;your-ip&gt;:3001/streams</code> — use the <strong>QR code / copy button in
+        the dashboard header</strong> to share the exact address.</p>
+        <h3>The IP changed (DHCP)</h3>
+        <p>LANStreamer detects IP changes and re-syncs, but bookmarks on phones still point at the old IP. Best fix:
+        give the streaming PC a <strong>static DHCP reservation</strong> in your router, then have listeners re-open
+        the shared link once. Listeners can also bookmark <code>/streams</code> in their browser.</p>
+        <h3>Page is blank</h3>
+        <p>A blank page means the server isn't reachable (wrong IP, server off, or different Wi-Fi). The listener page
+        itself shows “No live streams” whenever the server is up but nothing is on air.</p>
+    </section>
+
+    <section class="doc-section" id="latency">
+        <h2><span class="material-symbols-rounded">speed</span>Latency</h2>
+        <p>Total delay from mic to ears is typically <strong>2–6 seconds</strong>. Fastest wins:</p>
+        <ul>
+            <li><strong>Operator side:</strong> 5&nbsp;GHz Wi-Fi or wired for the streaming PC; keep it away from congestion; QoS/streaming priority on the router helps on busy networks.</li>
+            <li><strong>Listener side:</strong> phones on the same AP/SSID; close background streaming apps; wired headsets avoid Bluetooth's extra 100–200&nbsp;ms.</li>
+            <li><strong>In LANStreamer:</strong> lower bitrate (128&nbsp;kbps) trims buffer a little; keep the listener volume above ~50% and use the on-page volume.</li>
+        </ul>
+        <p>Full write-up: <code>docs/LATENCY.md</code> in the repository.</p>
+    </section>
+
+    <section class="doc-section" id="specs">
+        <h2><span class="material-symbols-rounded">memory</span>Minimum specs</h2>
+        <ul>
+            <li>Windows 10/11 (64-bit), 4&nbsp;GB RAM, dual-core CPU</li>
+            <li>FFmpeg and Icecast 2.4+ (bundled with the installer)</li>
+            <li>Wired or solid Wi-Fi to the same network as the listeners</li>
+            <li>Listeners: any modern phone browser (Chrome/Safari/Edge, ~2019+)</li>
+        </ul>
+    </section>
+
+    <footer style="margin-top:3.5rem;padding-top:1.25rem;border-top:1px solid var(--tok-line);" class="flex items-center justify-between gap-3 flex-wrap">
+        <span class="text-xs" style="color:var(--tok-text-3)">LANStreamer — free &amp; open source</span>
+        <a href="https://github.com/jerryagenyi/LANStreamer" target="_blank" rel="noopener"
+           class="doc-back"><span class="material-symbols-rounded text-sm">open_in_new</span>GitHub repository</a>
+    </footer>
+</div>
+</body>
+</html>
diff --git a/public/index.html b/public/index.html
index b76c425..6ef2d5b 100644
--- a/public/index.html
+++ b/public/index.html
@@ -1,17 +1,23 @@
 <html><head>
     <meta charset="utf-8"/>
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
-    <meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.tailwindcss.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.tailwindcss.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data:; connect-src 'self'; media-src 'self' blob:;">
+    <meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; font-src 'self'; img-src 'self' data:; connect-src 'self'; media-src 'self' blob:;">
     <meta http-equiv="X-Content-Type-Options" content="nosniff">
     <meta http-equiv="X-Frame-Options" content="DENY">
     <meta http-equiv="X-XSS-Protection" content="1; mode=block">
-    <link crossorigin="" href="https://fonts.gstatic.com/" rel="preconnect"/>
-    <link as="style" href="https://fonts.googleapis.com/css2?display=swap&amp;family=Inter%3Awght%40400%3B500%3B700%3B900&amp;family=Noto+Sans%3Awght%40400%3B500%3B700%3B900" onload="this.rel='stylesheet'" rel="stylesheet"/>
-    <link href="https://fonts.googleapis.com/css2?family=Material+Symbols+Rounded:FILL@1" rel="stylesheet"/>
     <title>LANStreamer Dashboard</title>
     <link rel="icon" type="image/png" href="/assets/favicon.png">
-    <script src="https://cdn.tailwindcss.com?plugins=forms,container-queries"></script>
-    <style type="text/tailwindcss">
+    <link rel="icon" type="image/svg+xml" href="/assets/logo-mark.svg">
+    <link rel="stylesheet" href="/assets/vendor/tailwind.css">
+    <link rel="stylesheet" href="/assets/vendor/fonts/fonts.css?v=6">
+    <link rel="stylesheet" href="/assets/css/tokens.css?v=10">
+    <link rel="stylesheet" href="/assets/css/ui.css?v=17">
+    <script src="/assets/js/theme-toggle.js?v=7"></script>
+    <script src="/assets/js/admin-auth.js?v=7"></script>
+    <script src="/assets/js/pwtoggle.js?v=1"></script>
+    <script src="/assets/js/qr-share.js?v=6"></script>
+    <script src="/assets/js/marquee.js?v=6"></script>
+    <style>
         :root {
           /* Existing colors */
           --primary-color: #00AEEF;
@@ -60,36 +66,25 @@
            GLASS CARD SYSTEM (Foundation)
            ======================================== */
 
-        /* Premium glass card base */
+        /* Premium glass card base — flat: no shadow, no hover lift, no transition */
         .glass-card {
           background: var(--glass-bg-subtle);
           border: 1px solid var(--glass-border-subtle);
           border-radius: 16px;
           backdrop-filter: blur(20px) saturate(180%);
           -webkit-backdrop-filter: blur(20px) saturate(180%);
-          box-shadow: var(--shadow-glass);
-          transition: all 0.3s var(--ease-emphasized);
-        }
-
-        .glass-card:hover {
-          background: var(--glass-bg-mid);
-          border-color: var(--glass-border-mid);
-          box-shadow: 0 8px 32px rgba(0, 0, 0, 0.5), inset 0 1px 0 rgba(255, 255, 255, 0.08);
-          transform: translateY(-2px);
         }
 
         /* Elevated variant (for key cards) */
         .glass-card-elevated {
           background: linear-gradient(135deg, rgba(255, 255, 255, 0.08) 0%, rgba(255, 255, 255, 0.03) 100%);
           border: 1px solid rgba(255, 255, 255, 0.1);
-          box-shadow: 0 8px 32px rgba(102, 126, 234, 0.15), inset 0 1px 0 rgba(255, 255, 255, 0.1);
         }
 
         /* Inset variant (for nested content) */
         .glass-card-inset {
           background: rgba(0, 0, 0, 0.2);
           border: 1px solid rgba(255, 255, 255, 0.05);
-          box-shadow: inset 0 2px 8px rgba(0, 0, 0, 0.3), 0 1px 0 rgba(255, 255, 255, 0.05);
         }
 
         /* ========================================
@@ -310,14 +305,10 @@
           position: sticky;
           top: 0;
           z-index: 100;
-          background: rgba(15, 12, 41, 0.7);
-          backdrop-filter: blur(20px) saturate(180%);
-          border-bottom: 1px solid rgba(255, 255, 255, 0.08);
-          box-shadow: 0 4px 24px rgba(0, 0, 0, 0.3), inset 0 1px 0 rgba(255, 255, 255, 0.05);
-        }
-
-        .logo-glow {
-          filter: drop-shadow(0 0 8px rgba(102, 126, 234, 0.5));
+          /* Opaque: scrolled content must not ghost through the sticky bar */
+          background: var(--tok-surface-1);
+          border-bottom: 1px solid var(--tok-line);
+          box-shadow: 0 2px 8px rgba(0, 0, 0, 0.15);
         }
 
         /* ========================================
@@ -548,23 +539,64 @@
       </style>
     </head>
     <body class="bg-[var(--dark-bg)]">
-    <div class="relative min-h-screen flex flex-col body-bg dark group/design-root overflow-x-hidden" style='font-family: Inter, "Noto Sans", sans-serif;'>
+    <!-- Boot overlay: paints before any CSS/JS loads; boot.js dismisses it or
+         swaps it to a failure state after a timeout. -->
+    <div id="boot-overlay" style="position:fixed;inset:0;z-index:9999;display:flex;align-items:center;justify-content:center;background:#07090D;color:#EEF1F6;font-family:Space Grotesk,Inter,system-ui,sans-serif;transition:opacity .4s ease;">
+      <div style="display:flex;flex-direction:column;align-items:center;gap:14px;text-align:center;padding:24px;">
+        <img src="/assets/logo.svg?v=3" alt="LANStreamer" style="height:52px;width:auto;" onerror="this.style.display='none'">
+        <div style="font-weight:700;letter-spacing:.1em;text-transform:uppercase;font-size:.72rem;color:#9AA3B2;">LANStreamer <span id="boot-version"></span></div>
+        <div class="boot-dots" aria-label="Loading"><span></span><span></span><span></span></div>
+        <div style="font-size:.85rem;color:#5D6570;">Loading…</div>
+      </div>
+    </div>
+    <!-- no overflow-x on this wrapper: it would become the sticky containing block and kill the sticky header -->
+    <div class="relative min-h-screen flex flex-col body-bg dark group/design-root" style='font-family: var(--tok-font);'>
     <!-- Header Component Container -->
     <div id="header-container"></div>
     <main class="px-4 sm:px-6 lg:px-10 py-8">
     <div class="mx-auto max-w-7xl">
+    <!-- Status strip: the operator's first glance (on-air / listeners / icecast / attention) -->
+    <div class="strip" id="status-strip" aria-label="System status"></div>
     <!-- Security Warning Banner (will be populated by JavaScript) -->
     <div id="security-warning-banner"></div>
+    <!-- First-run admin credentials banner (shows while defaults are active) -->
+    <div id="admin-creds-banner"></div>
+    <!-- Streaming engines notice: rare tier where neither the bundled kit nor
+         a system install exists — guided download instead of a dead dashboard -->
+    <div id="binaries-banner"></div>
     <div class="grid grid-cols-1 xl:grid-cols-3 gap-8">
         <!-- Left Column (Primary Controls) -->
         <div class="xl:col-span-2 space-y-8">
-            
+
             <!-- FFmpeg Streams - Component or Static -->
             <div id="ffmpeg-streams"></div>
-            
-            <!-- Audio Devices - Component or Static -->
-            <div id="audio-devices"></div>
-            
+
+            <!-- Audio inputs: collapsible (default collapsed, state remembered), IN USE / IDLE / MISSING status -->
+            <div class="ls-collapse glass-card" data-ls-collapse="audio-inputs" style="padding:0;">
+                <button type="button" class="ls-collapse-toggle" data-ls-collapse-toggle="audio-inputs" aria-expanded="false"
+                        style="width:100%;display:flex;align-items:center;gap:10px;padding:16px 18px;border-bottom:1px solid var(--tok-line);">
+                    <span class="flex items-center gap-2.5 min-w-0">
+                        <span class="ls-collapse-title" style="font-size:15px;font-weight:600;color:var(--tok-text-1);">Audio inputs</span>
+                        <span class="chip chip-off" id="audio-inputs-count"></span>
+                    </span>
+                    <span class="flex items-center gap-2" style="margin-left:auto;">
+                        <!-- span, NOT a nested <button>: buttons cannot nest, the parser
+                             ejects them from the row (that was the misplaced-icons bug).
+                             stopPropagation keeps rescan from toggling the collapse. -->
+                        <span role="button" tabindex="0" class="iconbtn" id="refresh-audio-devices" style="width:30px;height:30px;"
+                              aria-label="Rescan inputs" title="Rescan inputs"
+                              onclick="event.stopPropagation()"
+                              onkeydown="if(event.key==='Enter'||event.key===' '){event.preventDefault();event.stopPropagation();this.click();}">
+                            <span class="material-symbols-rounded" style="font-size:15px;">refresh</span>
+                        </span>
+                        <span class="material-symbols-rounded ls-collapse-chevron" aria-hidden="true">expand_more</span>
+                    </span>
+                </button>
+                <div class="ls-collapse-body is-closed" data-ls-collapse-body="audio-inputs">
+                    <ul class="devices" id="audio-devices" style="margin:0;"></ul>
+                </div>
+            </div>
+
             <!-- Video Sources - Collapsible Panel (Hidden by default) -->
             <div class="collapsible-section hidden">
                 <button id="video-sources-toggle" class="w-full flex items-center justify-between p-3 bg-[var(--card-bg)] border border-[var(--border-color)] rounded-xl hover:bg-[var(--card-bg)]/80 transition-all duration-300">
@@ -580,20 +612,99 @@
                 </div>
             </div>
         </div>
-        
+
         <!-- Right Column (Sidebar) -->
         <div class="space-y-8">
-            
+
                     <!-- Icecast Server - Component or Static -->
         <div id="icecast-server">
             <!-- IcecastManager component will be initialized here -->
         </div>
-            
+
+            <!-- Share with listeners: LAN address always visible, QR on demand -->
+            <div class="glass-card" style="padding:0;" id="share-card">
+                <div style="display:flex;align-items:center;gap:10px;padding:16px 18px;border-bottom:1px solid var(--tok-line);">
+                    <h3 style="font-size:15px;font-weight:600;color:var(--tok-text-1);">Share with listeners</h3>
+                </div>
+                <!-- Default view: address + copy + QR icon (QR panel on demand) -->
+                <div id="share-body-default" style="padding:16px 18px;display:flex;flex-direction:column;gap:10px;">
+                    <p style="font-size:13px;color:var(--tok-text-2);">Open on any device on this network, or scan the QR code.</p>
+                    <div class="share-url">
+                        <code id="share-url-text"></code>
+                        <button type="button" class="iconbtn" id="share-copy" style="width:28px;height:28px;" aria-label="Copy link" title="Copy listener link">
+                            <span class="material-symbols-rounded" style="font-size:15px;">content_copy</span>
+                        </button>
+                        <button type="button" class="iconbtn" id="share-show-qr" style="width:28px;height:28px;" aria-label="Show QR code" title="Show QR code">
+                            <span class="material-symbols-rounded" style="font-size:15px;">qr_code_2</span>
+                        </button>
+                    </div>
+                </div>
+                <!-- QR view: large code + close -->
+                <div id="share-body-qr" class="hidden" style="padding:16px 18px;position:relative;">
+                    <button type="button" class="iconbtn" id="share-qr-close" aria-label="Close QR code" title="Close"
+                            style="position:absolute;top:8px;right:8px;width:30px;height:30px;">
+                        <span class="material-symbols-rounded" style="font-size:18px;">close</span>
+                    </button>
+                    <div id="share-qr" style="width:100%;max-width:220px;margin:0 auto;color:var(--tok-text-1);display:grid;place-items:center;min-height:180px;">
+                        <span class="material-symbols-rounded animate-spin" style="color:var(--tok-text-3);font-size:26px;" aria-hidden="true">progress_activity</span>
+                    </div>
+                    <p style="font-size:12px;color:var(--tok-text-3);text-align:center;margin-top:8px;">Scan with a phone camera</p>
+                </div>
+                <style>
+                    /* The QR endpoint returns a bare viewBox svg — give it real size */
+                    #share-qr svg { width: 100%; height: auto; display: block; }
+                </style>
+            </div>
+
+            <!-- Admin account: change the dashboard login in-app (the packaged
+                 app has no .env to edit). Collapsed + remembered like the
+                 other secondary cards. -->
+            <div class="ls-collapse glass-card" data-ls-collapse="admin-account" style="padding:0;">
+                <button type="button" class="ls-collapse-toggle" data-ls-collapse-toggle="admin-account" aria-expanded="false"
+                        style="width:100%;display:flex;align-items:center;gap:10px;padding:16px 18px;border-bottom:1px solid var(--tok-line);">
+                    <span class="flex items-center gap-2.5 min-w-0">
+                        <span class="ls-collapse-title" style="font-size:15px;font-weight:600;color:var(--tok-text-1);">Admin account</span>
+                        <span class="chip chip-off" id="admin-account-chip">—</span>
+                    </span>
+                    <span class="flex items-center gap-2" style="margin-left:auto;">
+                        <span class="material-symbols-rounded ls-collapse-chevron" aria-hidden="true">expand_more</span>
+                    </span>
+                </button>
+                <div class="ls-collapse-body is-closed" data-ls-collapse-body="admin-account">
+                    <div style="padding:16px 18px;display:flex;flex-direction:column;gap:8px;">
+                        <p id="admin-account-hint" style="font-size:13px;color:var(--tok-text-2);margin:0 0 4px;">Loading…</p>
+                        <label for="admin-cur-pw" style="font-size:12px;color:var(--tok-text-2);">Current password</label>
+                        <input type="password" id="admin-cur-pw" autocomplete="current-password"
+                               style="width:100%;padding:8px 10px;border-radius:8px;border:1px solid var(--tok-line-strong);background:var(--tok-surface-inset);color:var(--tok-text-1);font-size:14px;">
+                        <label for="admin-new-user" style="font-size:12px;color:var(--tok-text-2);">New username</label>
+                        <input type="text" id="admin-new-user" autocomplete="username"
+                               style="width:100%;padding:8px 10px;border-radius:8px;border:1px solid var(--tok-line-strong);background:var(--tok-surface-inset);color:var(--tok-text-1);font-size:14px;">
+                        <label for="admin-new-pw" style="font-size:12px;color:var(--tok-text-2);">New password (at least 8 characters)</label>
+                        <input type="password" id="admin-new-pw" autocomplete="new-password"
+                               style="width:100%;padding:8px 10px;border-radius:8px;border:1px solid var(--tok-line-strong);background:var(--tok-surface-inset);color:var(--tok-text-1);font-size:14px;">
+                        <label for="admin-new-pw2" style="font-size:12px;color:var(--tok-text-2);">Repeat new password</label>
+                        <input type="password" id="admin-new-pw2" autocomplete="new-password"
+                               style="width:100%;padding:8px 10px;border-radius:8px;border:1px solid var(--tok-line-strong);background:var(--tok-surface-inset);color:var(--tok-text-1);font-size:14px;">
+                        <div id="admin-account-error" class="hidden" role="alert" style="color:var(--tok-danger);font-size:13px;"></div>
+                        <button type="button" id="admin-save" class="btn btn-primary" style="margin-top:6px;">Update login</button>
+
+                        <div style="border-top:1px solid var(--tok-line);margin-top:14px;padding-top:12px;">
+                            <div style="display:flex;align-items:center;gap:10px;">
+                                <button type="button" class="switch" id="telemetry-toggle" role="switch" aria-checked="false"
+                                        aria-label="Send anonymous usage statistics"></button>
+                                <span style="font-size:13px;font-weight:600;color:var(--tok-text-1);">Anonymous usage statistics</span>
+                            </div>
+                            <p id="telemetry-hint" style="font-size:12px;color:var(--tok-text-2);margin:6px 0 0;">Loading…</p>
+                        </div>
+                    </div>
+                </div>
+            </div>
+
             <!-- Event Manager - Component -->
             <div id="event-manager">
                 <!-- EventManager component will be initialized here -->
             </div>
-            
+
             <!-- Contact Manager - Component -->
             <div id="contact-manager">
                 <!-- ContactManager component will be initialized here -->
@@ -816,16 +927,22 @@ <h2 class="text-xl font-bold text-white mb-4">Lobby Background Music</h2>
     </div>
 
     <!-- Include Components -->
-    <script src="/components/ComponentManager.js"></script>
-    <script src="/components/LobbyMusicPlayer.js"></script>
-    <script src="/components/FileBrowser.js"></script>
-    <script src="/components/IcecastManager.js"></script>
-    <script src="/components/FFmpegStreamsManager.js"></script>
-    <script src="/components/EventManager.js"></script>
-    <script src="/components/ContactManager.js"></script>
-    <script src="/components/HeaderComponent.js"></script>
-    <script src="/components/FooterComponent.js"></script>
-    <script src="/components/UpdateNotification.js"></script>
+    <script src="/assets/js/notice-dismiss.js?v=6"></script>
+    <script src="/assets/js/boot.js?v=6"></script>
+    <script src="/assets/js/toasts.js?v=6"></script>
+    <script src="/assets/js/lightbox.js?v=1"></script>
+    <script src="/assets/js/collapsible.js?v=6"></script>
+    <script src="/assets/js/notifications.js?v=6"></script>
+    <script src="/components/ComponentManager.js?v=6"></script>
+    <script src="/components/LobbyMusicPlayer.js?v=6"></script>
+    <script src="/components/FileBrowser.js?v=6"></script>
+    <script src="/components/IcecastManager.js?v=8"></script>
+    <script src="/components/FFmpegStreamsManager.js?v=10"></script>
+    <script src="/components/EventManager.js?v=8"></script>
+    <script src="/components/ContactManager.js?v=8"></script>
+    <script src="/components/HeaderComponent.js?v=9"></script>
+    <script src="/components/FooterComponent.js?v=6"></script>
+    <script src="/components/UpdateNotification.js?v=6"></script>
 
     <!-- Debug script loading -->
     <script>
@@ -859,6 +976,20 @@ <h2 class="text-xl font-bold text-white mb-4">Lobby Background Music</h2>
                 this.icecastStatus = 'unknown';
                 this.componentManager = null;
                 this.lobbyMusicPlayer = null;
+                document.addEventListener('lsnotice-restored', (e) => {
+                    if (e.detail.id === 'security-warning') this.checkSecurityWarning();
+                    if (e.detail.id === 'default-admin-creds') this.checkAdminCredsBanner();
+                });
+                document.addEventListener('lsnotice-dismissed', (e) => {
+                    if (e.detail.id === 'security-warning') {
+                        const banner = document.getElementById('security-warning-banner');
+                        if (banner && window.LSNotices) banner.innerHTML = LSNotices.hiddenStub('security-warning', 'Security warning');
+                    }
+                    if (e.detail.id === 'default-admin-creds') {
+                        const banner = document.getElementById('admin-creds-banner');
+                        if (banner && window.LSNotices) banner.innerHTML = LSNotices.hiddenStub('default-admin-creds', 'Admin login info');
+                    }
+                });
                 this.init();
             }
 
@@ -871,6 +1002,11 @@ <h2 class="text-xl font-bold text-white mb-4">Lobby Background Music</h2>
                 await this.loadAudioDevices();
                 await this.checkFFmpegStatus();
                 await this.initializeComponents();
+
+                // Main UI is mounted — dismiss the boot overlay now. The slower
+                // trailing checks (footer, security, contact) must not hold the
+                // loading screen hostage on cold starts.
+                if (window.LSBoot) LSBoot.ready();
                 this.setupEventListeners();
                 this.startStatusPolling();
 
@@ -880,12 +1016,25 @@ <h2 class="text-xl font-bold text-white mb-4">Lobby Background Music</h2>
                 // Check for security vulnerabilities
                 await this.checkSecurityWarning();
 
+                // First-run hint: default admin login + how to change it
+                await this.checkAdminCredsBanner();
+
+                // Streaming engines notice (rare missing-binaries tier)
+                this.checkBinariesBanner();
+
+                // Admin account card (in-app credential change)
+                this.initAdminAccountCard();
+
                 // Initialize Contact Manager
                 await this.initializeContactManager();
 
                 // Force render audio devices to ensure dynamic content is shown
                 this.renderAudioDevices();
 
+                // Status strip + sidebar share card (needs config/icecast host)
+                this.renderStatusStrip();
+                this.populateShareCard();
+
                 // Icecast Manager will be initialized by ComponentManager with proper fallback
             }
 
@@ -997,153 +1146,158 @@ <h2 class="text-xl font-bold text-white">📞 Contact Information</h2>
                 } catch (error) {
                     console.error('Failed to load audio devices:', error);
                     this.updateHeaderTooltip('audio-devices-status', 'Failed to load devices');
-                    this.renderAudioDevicesError();
+                    this.renderAudioDevices(); // error path renders the empty list with a rescan hint
                 }
             }
 
             renderAudioDevices() {
+                // Sidebar card body: one row per input with IN USE / IDLE status.
+                // The card shell (header + rescan) lives in the static markup.
                 const container = document.getElementById('audio-devices');
-                if (!container) {
-                    console.error('Audio devices container not found');
-                    return;
-                }
+                if (!container) return;
 
-                if (!this.audioDevices || this.audioDevices.length === 0) {
-                    container.innerHTML = `
-                        <div class="bg-[var(--card-bg)] border border-[var(--border-color)] rounded-2xl p-6 shadow-2xl shadow-black/30">
-                            <div class="flex items-center justify-between mb-4">
-                                <h2 class="text-xl font-bold text-white">Audio Devices captured by FFmpeg</h2>
-                                <button id="refresh-audio-devices" class="flex items-center gap-2 rounded-md px-3 py-1.5 text-sm font-semibold text-white bg-[var(--primary-color)]/10 hover:bg-[var(--primary-color)]/20 border border-[var(--border-color)] transition-all duration-300">
-                                    <span class="material-symbols-rounded text-base">refresh</span>
-                                    Refresh device list
-                                </button>
-                            </div>
-                            <div class="text-center py-8">
-                                <span class="material-symbols-rounded text-4xl text-gray-600 mb-4">mic_off</span>
-                                <p class="text-gray-400">No audio devices detected</p>
-                            </div>
-                        </div>
-                    `;
+                const refreshBtn = document.getElementById('refresh-audio-devices');
+                if (refreshBtn && !refreshBtn.dataset.wired) {
+                    refreshBtn.dataset.wired = '1';
+                    refreshBtn.addEventListener('click', async () => {
+                        await this.loadAudioDevices(true);
+                        this.showNotification('Rescanning inputs…', 'info', { tag: 'scan' });
+                    });
+                }
 
-                    // Add event listener for the refresh button
-                    const refreshBtn = document.getElementById('refresh-audio-devices');
-                    if (refreshBtn) {
-                        refreshBtn.addEventListener('click', async () => {
-                            await this.loadAudioDevices(true); // Force refresh
-                            this.showNotification('Audio devices refreshed', 'info');
-                        });
-                    }
+                const countChip = document.getElementById('audio-inputs-count');
+                if (countChip && this.audioDevices) countChip.textContent = `${this.audioDevices.length} found`;
 
+                if (!this.audioDevices || this.audioDevices.length === 0) {
+                    container.innerHTML = `<li style="color:var(--tok-text-3);">No audio inputs detected — click rescan.</li>`;
                     return;
                 }
 
-                // Separate input and output devices using deviceType property
-                const inputDevices = this.audioDevices.filter(device =>
-                    device.deviceType === 'input' ||
-                    (!device.deviceType && (
-                        device.name.toLowerCase().includes('mic') ||
-                        device.name.toLowerCase().includes('input') ||
-                        device.name.toLowerCase().includes('line in') ||
-                        device.name.toLowerCase().includes('scarlett') ||
-                        device.name.toLowerCase().includes('umc') ||
-                        device.fallback // Include fallback devices as input
-                    ))
-                );
-
-                const outputDevices = this.audioDevices.filter(device =>
-                    device.deviceType === 'output' ||
-                    (!device.deviceType && (
-                        device.name.toLowerCase().includes('output') ||
-                        device.name.toLowerCase().includes('speaker') ||
-                        device.name.toLowerCase().includes('headphone') ||
-                        device.name.toLowerCase().includes('monitor')
-                    ))
+                const runningIds = new Set(
+                    (window.ffmpegStreamsManager?.activeStreams || [])
+                        .filter(s => s.status === 'running' && s.deviceId)
+                        .map(s => s.deviceId)
                 );
 
-                // Use the properly separated devices
-                const finalInputDevices = inputDevices;
-                const finalOutputDevices = outputDevices;
+                container.innerHTML = this.audioDevices.map(device => {
+                    const inUse = runningIds.has(device.id);
+                    return `
+                        <li>
+                            <span class="chip ${inUse ? 'chip-live' : 'chip-off'}" style="height:20px;">${inUse ? 'IN USE' : 'IDLE'}</span>
+                            <span style="flex:1;min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;" title="${device.name}">${device.name}</span>
+                        </li>`;
+                }).join('');
+            }
 
-                container.innerHTML = `
-                    <div class="glass-card p-6">
-                        <div class="flex items-center justify-between mb-4">
-                            <h2 class="text-xl font-bold text-white">🎤 Audio Input Sources for Streaming</h2>
-                            <button id="refresh-audio-devices" class="btn-glass btn-glass-secondary">
-                                <span class="material-symbols-rounded text-base">refresh</span>
-                                <span>Refresh Devices</span>
-                            </button>
-                        </div>
+            /**
+             * Status strip (designer P2): the operator's first glance.
+             * On-air count · listeners (+ session peak) · Icecast · needs attention.
+             */
+            renderStatusStrip() {
+                const strip = document.getElementById('status-strip');
+                if (!strip) return;
+
+                const streams = window.ffmpegStreamsManager?.activeStreams || [];
+                const live = streams.filter(s => s.status === 'running').length;
+                const errorCount = streams.filter(s => s.status === 'error').length;
+
+                const icecast = (window.icecastManager?.status) || {};
+                const icecastRunning = !!icecast.running;
+                const icecastPort = icecast.port || '8000';
+
+                // Listener peak persists for the session only
+                const listeners = icecast.listeners || 0;
+                let peak = parseInt(sessionStorage.getItem('ls-listener-peak') || '0', 10);
+                if (listeners > peak) {
+                    peak = listeners;
+                    sessionStorage.setItem('ls-listener-peak', String(peak));
+                }
 
-                        <div class="mb-4 p-3 glass-card-inset rounded-lg border border-blue-500/20">
-                            <div class="flex items-start gap-2">
-                                <span class="material-symbols-rounded text-blue-400 text-lg mt-0.5">info</span>
-                                <div class="text-sm">
-                                    <p class="text-blue-300 font-medium">Streaming Focus</p>
-                                    <p class="text-blue-200/80">These are audio input sources for streaming. Install <strong>VoiceMeeter</strong> or <strong>VB-Audio Virtual Cable</strong> to create virtual audio routing from your music players, DJ software, or other audio sources.</p>
-                                </div>
-                            </div>
-                        </div>
+                const settings = this.securityAttention ? 1 : 0;
+                const attention = errorCount + settings;
 
-                        <div class="space-y-2">
-                            ${finalInputDevices.map(device => `
-                                <div class="flex items-center gap-3 p-3 glass-card-inset rounded-lg hover:border-[var(--primary-color)]/30 transition-all duration-300">
-                                    <span class="material-symbols-rounded text-xl ${device.fallback ? 'text-gray-500' : (device.virtual ? 'text-purple-400' : 'text-[var(--live-color)]')}">
-                                        ${device.virtual ? 'cable' : 'mic'}
-                                    </span>
-                                    <span class="font-medium text-white text-sm flex-1">${device.name}</span>
-                                    ${device.virtual ? `<span class="px-2 py-0.5 text-xs font-medium bg-purple-500/20 text-purple-300 rounded-full">Virtual</span>` : ''}
-                                </div>
-                            `).join('')}
-                        </div>
+                strip.innerHTML = `
+                    <div class="glass-card stat">
+                        <span class="tok-label">On air</span>
+                        <span class="v">
+                            ${live > 0 ? '<span class="eq" style="color:var(--tok-live);" aria-hidden="true"><i></i><i></i><i></i><i></i></span>' : ''}
+                            <span>${live}</span><small>/ ${streams.length} streams</small>
+                        </span>
+                    </div>
+                    <div class="glass-card stat">
+                        <span class="tok-label">Listeners</span>
+                        <span class="v">${listeners}${peak > 0 ? ` <small>peak ${peak}</small>` : ''}</span>
+                    </div>
+                    <div class="glass-card stat">
+                        <span class="tok-label">Icecast server</span>
+                        <span class="v">
+                            <span class="chip ${icecastRunning ? 'chip-live' : 'chip-err'}"><span class="pip" aria-hidden="true"></span>${icecastRunning ? 'Online' : 'Offline'}</span>
+                            <small class="mono">:${icecastPort}</small>
+                        </span>
+                    </div>
+                    <div class="glass-card stat ${attention > 0 ? 'alert' : ''}">
+                        <span class="tok-label">Needs attention</span>
+                        <span class="v">${attention > 0
+                            ? `${errorCount ? errorCount + ' stream' + (errorCount > 1 ? 's' : '') : ''}${errorCount && settings ? ' · ' : ''}${settings ? settings + ' setting' : ''}`
+                            : '<span class="chip chip-live"><span class="pip" aria-hidden="true"></span>All good</span>'}</span>
                     </div>
                 `;
+            }
 
-                // Add event listener for the refresh button
-                const refreshBtn = document.getElementById('refresh-audio-devices');
-                if (refreshBtn) {
-                    refreshBtn.addEventListener('click', async () => {
-                        await this.loadAudioDevices(true); // Force refresh
-                        this.showNotification('Audio devices refreshed', 'info');
+            /** Sidebar share card: LAN address + copy always; QR fetched on demand. */
+            async populateShareCard() {
+                const host = (window.icecastManager?.status?.host) || this.serverHost || window.location.hostname;
+                const url = `http://${host}:${window.location.port || '3001'}/streams`;
+                const urlEl = document.getElementById('share-url-text');
+                if (urlEl) urlEl.textContent = url.replace(/^https?:\/\//, '');
+                this.shareUrl = url;
+
+                const copyBtn = document.getElementById('share-copy');
+                if (copyBtn && !copyBtn.dataset.wired) {
+                    copyBtn.dataset.wired = '1';
+                    copyBtn.addEventListener('click', async () => {
+                        try {
+                            await navigator.clipboard.writeText(url);
+                            this.showNotification('Listener link copied', 'success', { tag: 'copy' });
+                        } catch { window.prompt('Copy this link:', url); }
                     });
                 }
 
-                console.log('Audio devices rendered:', this.audioDevices);
-            }
-
-            renderAudioDevicesError() {
-                const container = document.getElementById('audio-devices');
-                if (!container) {
-                    console.error('Audio devices container not found');
-                    return;
+                // QR is on demand: rarely used, and a permanent box broke the layout
+                const showBtn = document.getElementById('share-show-qr');
+                const closeBtn = document.getElementById('share-qr-close');
+                const defaultBody = document.getElementById('share-body-default');
+                const qrBody = document.getElementById('share-body-qr');
+                const qrEl = document.getElementById('share-qr');
+
+                if (showBtn && !showBtn.dataset.wired) {
+                    showBtn.dataset.wired = '1';
+                    showBtn.addEventListener('click', async () => {
+                        defaultBody.classList.add('hidden');
+                        qrBody.classList.remove('hidden');
+                        if (qrEl && !qrEl.dataset.loaded) {
+                            try {
+                                // Hard cap so a stuck request can't spin forever
+                                const res = await fetch(`/api/system/qr?url=${encodeURIComponent(url)}`, { signal: AbortSignal.timeout(5000) });
+                                if (res.ok) {
+                                    qrEl.innerHTML = await res.text();
+                                    qrEl.dataset.loaded = '1';
+                                } else {
+                                    qrEl.innerHTML = '<span style="font-size:13px;color:var(--tok-text-3);">QR unavailable</span>';
+                                }
+                            } catch {
+                                qrEl.innerHTML = '<span style="font-size:13px;color:var(--tok-text-3);">QR unavailable</span>';
+                            }
+                        }
+                    });
                 }
-
-                container.innerHTML = `
-                    <div class="glass-card p-6">
-                        <div class="flex items-center justify-between mb-4">
-                            <h2 class="text-xl font-bold text-white">Audio Devices captured by FFmpeg</h2>
-                            <button id="refresh-audio-devices" class="btn-glass btn-glass-secondary">
-                                <span class="material-symbols-rounded text-base">refresh</span>
-                                <span>Refresh Devices</span>
-                            </button>
-                        </div>
-                        <div class="text-center py-8">
-                            <span class="material-symbols-rounded text-4xl text-red-500 mb-4">error</span>
-                            <p class="text-red-400 mb-2">Failed to load audio devices</p>
-                            <p class="text-gray-400 text-sm">Click refresh to try again</p>
-                        </div>
-                    </div>
-                `;
-
-                // Add event listener for the refresh button
-                const refreshBtn = document.getElementById('refresh-audio-devices');
-                if (refreshBtn) {
-                    refreshBtn.addEventListener('click', async () => {
-                        await this.loadAudioDevices(true); // Force refresh
-                        this.showNotification('Audio devices refreshed', 'info');
+                if (closeBtn && !closeBtn.dataset.wired) {
+                    closeBtn.dataset.wired = '1';
+                    closeBtn.addEventListener('click', () => {
+                        qrBody.classList.add('hidden');
+                        defaultBody.classList.remove('hidden');
                     });
                 }
-
-                console.error('Error rendering audio devices');
             }
 
             async checkIcecastStatus() {
@@ -1213,6 +1367,229 @@ <h2 class="text-xl font-bold text-white">Audio Devices captured by FFmpeg</h2>
                 }
             }
 
+            /**
+             * First-run hint (authed): while the DEFAULT admin credentials are
+             * active, tell the operator what they are and how to change them.
+             * Auto-disappears once ADMIN_USERNAME/ADMIN_PASSWORD are changed.
+             */
+            async checkAdminCredsBanner() {
+                const el = document.getElementById('admin-creds-banner');
+                if (!el) return;
+                try {
+                    const res = await fetch('/api/auth/verify');
+                    const data = await res.json();
+                    if (!data.usingDefaultCredentials) { el.innerHTML = ''; return; }
+                    if (window.LSNotices && LSNotices.isDismissed('default-admin-creds')) {
+                        el.innerHTML = LSNotices.hiddenStub('default-admin-creds', 'Admin login info');
+                        return;
+                    }
+                    el.innerHTML = `
+                        <div class="banner" role="status" style="margin-bottom:20px;">
+                            <span class="material-symbols-rounded" style="color:var(--tok-warning);" aria-hidden="true">key</span>
+                            <div class="grow">
+                                <b>Default admin login in use</b>
+                                <span style="color:var(--tok-text-2);"> — username <code>admin</code>, password <code>lanstreamer123</code>.
+                                To change it here in the app: sidebar → <b>Admin account</b> → Update login.
+                                (Running from source? <code>ADMIN_USERNAME</code> / <code>ADMIN_PASSWORD</code> in <code>.env</code> + restart also works — README → “Security Setup”.)</span>
+                            </div>
+                            ${window.LSNotices ? LSNotices.dismissButton('default-admin-creds') : ''}
+                        </div>`;
+                } catch { el.innerHTML = ''; }
+            }
+
+            /**
+             * Streaming engines notice — the rare tier where neither the
+             * bundled kit nor a system install exists. FFmpeg: one-click
+             * pinned download into the app's data dir (progress polled).
+             * Icecast: guided external install (official installer).
+             */
+            async checkBinariesBanner() {
+                const el = document.getElementById('binaries-banner');
+                if (!el) return;
+                const render = (s) => {
+                    if (s.canStream) { el.innerHTML = ''; return; }
+                    const mb = (n) => (n / 1024 / 1024).toFixed(0) + ' MB';
+                    const line = (name, tier) => `<b>${name}</b>: ${
+                        tier === 'missing'
+                            ? '<span style="color:var(--tok-danger);">missing</span>'
+                            : `<span style="color:var(--tok-text-2);">${tier}</span>`}`;
+                    const job = s.download || {};
+                    const ffmpegBit = s.ffmpeg === 'missing' ? `
+                        <div style="margin-top:10px;">
+                            <button type="button" class="btn btn-secondary" id="binaries-download" ${job.running ? 'disabled' : ''}
+                                    style="height:34px;padding:0 14px;font-size:13px;">
+                                ${job.running ? 'Downloading…' : 'Download FFmpeg (≈110 MB)'}
+                            </button>
+                            <span id="binaries-progress" style="margin-left:10px;font-size:13px;color:var(--tok-text-2);">${
+                                job.running ? `${mb(job.bytes)} / ${mb(job.total)}` :
+                                job.error ? `<span style="color:var(--tok-danger);">failed — ${job.error}</span>` :
+                                job.done ? 'downloaded ✓' : ''
+                            }</span>
+                        </div>` : '';
+                    const icecastBit = s.icecast === 'missing' ? `
+                        <div style="margin-top:8px;font-size:13px;color:var(--tok-text-2);">
+                            Icecast: install it from <a href="https://icecast.org/download/" target="_blank" rel="noopener">icecast.org</a>
+                            (the app auto-detects standard installs) — or use the packaged app, which bundles it.
+                        </div>` : '';
+                    el.innerHTML = `
+                        <div class="banner" role="alert" style="margin-bottom:20px;">
+                            <span class="material-symbols-rounded" style="color:var(--tok-danger);" aria-hidden="true">download_for_offline</span>
+                            <div class="grow">
+                                <b>Streaming engines not ready</b>
+                                <div style="margin-top:4px;font-size:13px;">${line('FFmpeg', s.ffmpeg)} · ${line('Icecast', s.icecast)}</div>
+                                ${ffmpegBit}
+                                ${icecastBit}
+                            </div>
+                        </div>`;
+                    const btn = document.getElementById('binaries-download');
+                    if (btn && !btn.disabled) {
+                        btn.addEventListener('click', async () => {
+                            btn.disabled = true;
+                            btn.textContent = 'Downloading…';
+                            try {
+                                const r = await fetch('/api/system/binaries/download', { method: 'POST' });
+                                if (!r.ok) throw new Error((await r.json()).error || r.status);
+                            } catch (e) {
+                                const p = document.getElementById('binaries-progress');
+                                if (p) p.innerHTML = `<span style="color:var(--tok-danger);">could not start — ${e.message}</span>`;
+                            }
+                        });
+                    }
+                };
+                try {
+                    const res = await fetch('/api/system/binaries/status');
+                    const s = await res.json();
+                    render(s);
+                    if (!s.canStream && s.download && s.download.running) {
+                        const poll = setInterval(async () => {
+                            try {
+                                const r = await fetch('/api/system/binaries/status');
+                                const st = await r.json();
+                                render(st);
+                                if (!st.download?.running) { clearInterval(poll); setTimeout(() => this.checkBinariesBanner(), st.download?.done ? 1500 : 0); }
+                            } catch { clearInterval(poll); }
+                        }, 2000);
+                    }
+                } catch { el.innerHTML = ''; }
+            }
+
+            /**
+             * Admin account card (sidebar): current username + change form.
+             * The in-app settings path — packaged installs have no .env.
+             */
+            async initAdminAccountCard() {
+                const chip = document.getElementById('admin-account-chip');
+                const hint = document.getElementById('admin-account-hint');
+                const saveBtn = document.getElementById('admin-save');
+                if (saveBtn && !saveBtn.dataset.wired) {
+                    saveBtn.dataset.wired = '1';
+                    saveBtn.addEventListener('click', () => this.saveAdminCredentials());
+                }
+                try {
+                    const res = await fetch('/api/auth/settings');
+                    const data = await res.json();
+                    if (chip) {
+                        chip.textContent = data.username;
+                        chip.className = 'chip ' + (data.usingDefaultCredentials ? 'chip-warn' : 'chip-off');
+                        chip.title = data.usingDefaultCredentials ? 'Defaults active — set your own login' : 'Custom login active';
+                    }
+                    if (hint) {
+                        hint.textContent = data.usingDefaultCredentials
+                            ? 'The default login is active. Set your own username and password below — changing them here is permanent (no restart, no files to edit) and signs out other sessions.'
+                            : 'Set a new username and password for the dashboard login. Changing it signs out all other sessions.';
+                    }
+                    const user = document.getElementById('admin-new-user');
+                    if (user && !user.value) user.placeholder = data.username;
+                } catch {
+                    if (hint) hint.textContent = 'Could not load the current admin account settings.';
+                }
+                this.initTelemetryToggle();
+            }
+
+            /** Telemetry switch in the Admin account card — same source of
+             *  truth as the tray toggle (GET/POST /api/telemetry/consent). */
+            async initTelemetryToggle() {
+                const sw = document.getElementById('telemetry-toggle');
+                const hintEl = document.getElementById('telemetry-hint');
+                if (!sw || sw.dataset.wired) return;
+                sw.dataset.wired = '1';
+
+                const paint = (enabled, configured) => {
+                    sw.setAttribute('aria-checked', enabled ? 'true' : 'false');
+                    if (hintEl) {
+                        hintEl.textContent = !configured
+                            ? 'Telemetry is not configured on this install (no key bundled).'
+                            : enabled
+                                ? 'On — anonymous events (app start/stop, stream started/stopped/failed, version, OS) go to the maintainer\u2019s PostHog. No audio, no stream names, no personal data; listeners\u2019 phones never send anything.'
+                                : 'Off — nothing leaves this machine. Turning it on helps improve LANStreamer (anonymous events only; no audio, no personal data).';
+                    }
+                };
+
+                try {
+                    const res = await fetch('/api/telemetry/consent');
+                    const data = await res.json();
+                    paint(data.enabled, data.configured);
+                } catch {
+                    paint(false, false);
+                }
+
+                sw.addEventListener('click', async () => {
+                    const target = sw.getAttribute('aria-checked') !== 'true';
+                    sw.disabled = true;
+                    try {
+                        const res = await fetch('/api/telemetry/consent', {
+                            method: 'POST',
+                            headers: { 'Content-Type': 'application/json' },
+                            body: JSON.stringify({ enabled: target })
+                        });
+                        const data = await res.json();
+                        if (!res.ok) throw new Error(data.error || res.status);
+                        paint(data.enabled, true);
+                        if (window.LSToasts) LSToasts.show(data.enabled ? 'Telemetry on — thank you!' : 'Telemetry off', 'success');
+                    } catch (e) {
+                        if (window.LSToasts) LSToasts.show('Could not change telemetry setting', 'error');
+                    } finally {
+                        sw.disabled = false;
+                    }
+                });
+            }
+
+            async saveAdminCredentials() {
+                const errEl = document.getElementById('admin-account-error');
+                const fail = (msg) => { if (errEl) { errEl.textContent = msg; errEl.classList.remove('hidden'); } };
+                if (errEl) errEl.classList.add('hidden');
+                const cur = document.getElementById('admin-cur-pw')?.value || '';
+                const user = (document.getElementById('admin-new-user')?.value || '').trim();
+                const pw = document.getElementById('admin-new-pw')?.value || '';
+                const pw2 = document.getElementById('admin-new-pw2')?.value || '';
+                if (!cur) return fail('Enter the current password.');
+                if (pw.length < 8) return fail('New password must be at least 8 characters.');
+                if (pw !== pw2) return fail('The two new passwords do not match.');
+                const btn = document.getElementById('admin-save');
+                if (btn) { btn.disabled = true; btn.textContent = 'Saving…'; }
+                try {
+                    const res = await fetch('/api/auth/credentials', {
+                        method: 'POST',
+                        headers: { 'Content-Type': 'application/json' },
+                        body: JSON.stringify({ currentPassword: cur, newUsername: user || undefined, newPassword: pw })
+                    });
+                    const data = await res.json();
+                    if (!res.ok) return fail(data.message || 'Could not update the login.');
+                    if (window.LSAdminAuth?.setToken && data.token) LSAdminAuth.setToken(data.token);
+                    ['admin-cur-pw', 'admin-new-user', 'admin-new-pw', 'admin-new-pw2'].forEach(id => {
+                        const el = document.getElementById(id);
+                        if (el) el.value = '';
+                    });
+                    if (window.LSToasts) LSToasts.show('Admin login updated. Other sessions were signed out.', 'success');
+                    await this.initAdminAccountCard();
+                    await this.checkAdminCredsBanner();
+                } catch {
+                    fail('Network error — try again.');
+                } finally {
+                    if (btn) { btn.disabled = false; btn.textContent = 'Update login'; }
+                }
+            }
+
             async checkSecurityWarning() {
                 try {
                     const response = await fetch('/api/system/icecast/security-check');
@@ -1233,25 +1610,27 @@ <h2 class="text-xl font-bold text-white">Audio Devices captured by FFmpeg</h2>
                 const banner = document.getElementById('security-warning-banner');
                 if (!banner) return;
 
+                // Stay hidden once dismissed until the user clicks "Show" on the stub
+                if (window.LSNotices && LSNotices.isDismissed('security-warning')) {
+                    banner.innerHTML = LSNotices.hiddenStub('security-warning', 'Security warning');
+                    return;
+                }
+
                 const criticalVulns = securityData.vulnerabilities.filter(v => v.severity === 'critical');
                 const hasDefaultCredentials = criticalVulns.length > 0;
+                this.securityAttention = true;
 
+                // Compact warning banner (designer P2): warning colour, one line,
+                // direct action — it must not compete with real stream errors.
                 banner.innerHTML = `
-                    <div class="mb-8 p-4 rounded-xl glass-card border border-red-500/50 text-red-400">
-                        <div class="flex items-center justify-between">
-                            <div class="flex items-center gap-3">
-                                <span class="material-symbols-rounded text-2xl">security</span>
-                                <p class="font-medium">
-                                    <strong>Security Warning:</strong> Your Icecast server is using default credentials that are publicly known!
-                                </p>
-                            </div>
-                            <button id="security-details-toggle" class="px-3 py-1 bg-red-500/20 hover:bg-red-500/30 border border-red-500/50 rounded-lg text-sm font-medium transition-colors">
-                                Show Details
-                            </button>
-                        </div>
-                        <div id="security-details" class="hidden mt-4 p-4 bg-red-900/20 border border-red-500/30 rounded-lg">
-                            ${this.renderSecurityDetails(securityData)}
-                        </div>
+                    <div class="banner" id="security-banner" role="alert" style="margin-bottom:20px;">
+                        <span class="material-symbols-rounded" style="color:var(--tok-warning);" aria-hidden="true">gpp_maybe</span>
+                        <div class="grow"><b>Default Icecast password in use.</b> <span style="color:var(--tok-text-2);">Anyone on your network could take over a stream.</span></div>
+                        <button type="button" id="security-details-toggle" class="btn btn-secondary" style="height:30px;padding:0 10px;font-size:13px;">Change password</button>
+                        ${window.LSNotices ? LSNotices.dismissButton('security-warning') : ''}
+                    </div>
+                    <div id="security-details" class="hidden glass-card p-4 mb-4 text-sm" style="color:var(--tok-text-2);">
+                        ${this.renderSecurityDetails(securityData)}
                     </div>
                 `;
 
@@ -1342,6 +1721,7 @@ <h4 class="font-semibold text-yellow-300 mb-2 flex items-center gap-2">
             }
 
             hideSecurityWarning() {
+                this.securityAttention = false;
                 const banner = document.getElementById('security-warning-banner');
                 if (banner) {
                     banner.innerHTML = '';
@@ -1502,6 +1882,9 @@ <h4 class="font-semibold text-yellow-300 mb-2 flex items-center gap-2">
                                 await ffmpegComponent.loadStreams();
                             }
                         }
+
+                        // Status strip reflects everything above
+                        this.renderStatusStrip();
                     } catch (error) {
                         console.warn('Status polling error:', error);
                     }
@@ -1529,44 +1912,13 @@ <h4 class="font-semibold text-yellow-300 mb-2 flex items-center gap-2">
             }
 
             showNotification(message, type = 'info') {
-                const notification = document.createElement('div');
-                notification.className = `fixed top-4 left-1/2 -translate-x-1/2 z-50 px-4 py-3 rounded-lg shadow-lg transition-all duration-300 max-w-md opacity-0`;
-
-                const colors = {
-                    'info': 'glass-card border-blue-500/30 text-blue-300',
-                    'success': 'toast-success',  /* Uses glassmorphism toast styles */
-                    'error': 'glass-card border-red-500/30 text-red-300'
-                };
-
-                notification.className += ` ${colors[type] || colors.info}`;
-                notification.innerHTML = `
-                    <div class="flex items-start gap-3">
-                        <span class="flex-1">${message}</span>
-                        <button class="text-white/80 hover:text-white transition-colors" onclick="this.parentElement.parentElement.remove()">
-                            <span class="material-symbols-rounded text-lg">close</span>
-                        </button>
-                    </div>
-                `;
-                
-                document.body.appendChild(notification);
-                
-                // Fade in
-                setTimeout(() => {
-                    notification.classList.remove('opacity-0');
-                    notification.classList.add('opacity-100');
-                }, 100);
-                
-                // Tiered auto-dismiss: short for info/success (lightweight feedback), long for errors (troubleshooting)
-                const timeout = type === 'error' ? 60000 : 4000;
-                setTimeout(() => {
-                    notification.classList.remove('opacity-100');
-                    notification.classList.add('opacity-0');
-                    setTimeout(() => {
-                        if (notification.parentNode) {
-                            notification.parentNode.removeChild(notification);
-                        }
-                    }, 300);
-                }, timeout);
+                // Stacking toasts (LSToasts): new notifications push older ones
+                // down instead of rendering at the same fixed spot.
+                if (window.LSToasts) {
+                    LSToasts.show(message, type);
+                } else {
+                    console.log(`${type.toUpperCase()}: ${message}`);
+                }
             }
 
             // Development utilities
@@ -1672,17 +2024,10 @@ <h4 class="font-semibold text-yellow-300 mb-2 flex items-center gap-2">
                     console.log('✅ Dashboard initialized successfully');
                 } catch (error) {
                     console.error('❌ Failed to initialize dashboard:', error);
-                    // Show error message to user
-                    document.body.innerHTML = `
-                        <div style="padding: 20px; color: #ff6b6b; background: #1a1a1a; font-family: Arial;">
-                            <h2>⚠️ LANStreamer Loading Error</h2>
-                            <p>Failed to initialize dashboard. Please refresh the page.</p>
-                            <p>Error: ${error.message}</p>
-                            <button onclick="location.reload()" style="padding: 10px 20px; background: #4CAF50; color: white; border: none; border-radius: 4px; cursor: pointer;">
-                                🔄 Refresh Page
-                            </button>
-                        </div>
-                    `;
+                    // Swap the boot overlay to its failure state (keeps Retry button)
+                    if (window.LSBoot) {
+                        LSBoot.fail(error && error.message ? error.message : 'Dashboard initialization failed.');
+                    }
                 }
             }, 500);
         });
diff --git a/public/login.html b/public/login.html
index 0c33b8d..edab095 100644
--- a/public/login.html
+++ b/public/login.html
@@ -3,194 +3,181 @@
 <head>
     <meta charset="UTF-8">
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
-    <meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.tailwindcss.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.tailwindcss.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data:; connect-src 'self';">
-    <meta http-equiv="X-Content-Type-Options" content="nosniff">
-    <meta http-equiv="X-Frame-Options" content="DENY">
-    <meta http-equiv="X-XSS-Protection" content="1; mode=block">
-    <title>LANStreamer - Admin Login</title>
-    <link rel="icon" type="image/png" href="/assets/favicon.png">
-    <script src="https://cdn.tailwindcss.com"></script>
-    <link href="https://fonts.googleapis.com/css2?family=Material+Symbols+Rounded:FILL@1" rel="stylesheet">
+    <title>Admin login — LANStreamer</title>
+    <link rel="stylesheet" href="/assets/vendor/tailwind.css">
+    <link rel="stylesheet" href="/assets/vendor/fonts/fonts.css?v=5">
+    <link rel="stylesheet" href="/assets/css/tokens.css?v=10">
+    <link rel="stylesheet" href="/assets/css/ui.css?v=16">
+    <script src="/assets/js/theme-toggle.js?v=7"></script>
+    <script src="/assets/js/pwtoggle.js?v=1"></script>
     <style>
-        :root {
-            --primary-color: #00AEEF;
-            --dark-bg: #111111;
-            --card-bg: #1A1A1A;
-            --border-color: #2F2F2F;
+        body {
+            min-height: 100vh;
+            display: flex;
+            align-items: center;
+            justify-content: center;
+            background: var(--tok-bg);
+            padding: 24px;
         }
-        .btn-gradient {
-            background-image: linear-gradient(to right, #00AEEF, #0088CC);
-            box-shadow: 0 4px 15px 0 rgba(0, 174, 239, 0.3);
+        .login-card {
+            width: 100%;
+            max-width: 380px;
         }
-        .btn-gradient:hover {
-            background-image: linear-gradient(to right, #0088CC, #00AEEF);
-            box-shadow: 0 6px 20px 0 rgba(0, 174, 239, 0.4);
+        .login-field {
+            width: 100%;
+            padding: 11px 14px;
+            border-radius: 10px;
+            border: 1px solid var(--tok-line);
+            background: var(--tok-field);
+            color: var(--tok-text-1);
+            font-size: 14px;
+            outline: none;
+            transition: border-color .15s ease;
+        }
+        .login-field:focus { border-color: var(--tok-accent); }
+        .login-field::placeholder { color: var(--tok-text-3); }
+        #login-error {
+            display: none;
+            font-size: 13px;
+            color: var(--tok-danger, #f87171);
+            background: color-mix(in srgb, var(--tok-danger, #f87171) 12%, transparent);
+            border: 1px solid color-mix(in srgb, var(--tok-danger, #f87171) 35%, transparent);
+            border-radius: 8px;
+            padding: 9px 12px;
         }
     </style>
 </head>
-<body class="bg-[var(--dark-bg)] min-h-screen flex items-center justify-center">
-    <div class="w-full max-w-md mx-4">
-        <!-- Logo and Title -->
-        <div class="text-center mb-8">
-            <div class="flex items-center justify-center gap-3 mb-4">
-                <img src="/assets/lanstreamer-logo.png" alt="LANStreamer" class="h-16 w-auto" onerror="this.style.display='none'; document.getElementById('logo-fallback').style.display='flex';">
-                <div id="logo-fallback" style="display: none;" class="flex items-center">
-                    <span class="text-2xl font-bold tracking-wider text-white">LANStreamer</span>
-                </div>
+<body>
+    <main class="login-card glass-card" style="padding:28px;">
+        <div class="flex flex-col items-center gap-3" style="margin-bottom:22px;">
+            <img src="/assets/logo.svg?v=3" alt="LANStreamer" data-theme-logo class="h-12 w-auto"
+                 onerror="this.onerror=null; this.src='/assets/lanstreamer-logo.png';">
+            <div style="text-align:center;">
+                <div style="font-size:16px;font-weight:600;color:var(--tok-text-1);">Admin sign in</div>
+                <div class="tok-label" style="margin-top:2px;">The listener page needs no login — this is for the dashboard.</div>
             </div>
-            <h1 class="text-2xl font-bold text-white mb-2">Admin Dashboard</h1>
-            <p class="text-gray-400">Enter your credentials to access the streaming control panel</p>
         </div>
 
-        <!-- Login Form -->
-        <div class="bg-[var(--card-bg)] border border-[var(--border-color)] rounded-2xl p-8 shadow-2xl">
-            <form id="loginForm" class="space-y-6">
-                <!-- Username Field -->
-                <div>
-                    <label for="username" class="block text-sm font-medium text-gray-300 mb-2">
-                        <span class="material-symbols-rounded text-sm mr-1">person</span>
-                        Username
-                    </label>
-                    <input 
-                        type="text" 
-                        id="username" 
-                        name="username"
-                        required
-                        class="w-full px-4 py-3 bg-[#2A2A2A] border border-[var(--border-color)] rounded-lg text-white placeholder-gray-400 focus:outline-none focus:ring-2 focus:ring-[var(--primary-color)]/50 focus:border-[var(--primary-color)] transition-colors"
-                        placeholder="Enter your username"
-                        autocomplete="username"
-                    >
-                </div>
-
-                <!-- Password Field -->
-                <div>
-                    <label for="password" class="block text-sm font-medium text-gray-300 mb-2">
-                        <span class="material-symbols-rounded text-sm mr-1">lock</span>
-                        Password
-                    </label>
-                    <input 
-                        type="password" 
-                        id="password" 
-                        name="password"
-                        required
-                        class="w-full px-4 py-3 bg-[#2A2A2A] border border-[var(--border-color)] rounded-lg text-white placeholder-gray-400 focus:outline-none focus:ring-2 focus:ring-[var(--primary-color)]/50 focus:border-[var(--primary-color)] transition-colors"
-                        placeholder="Enter your password"
-                        autocomplete="current-password"
-                    >
-                </div>
+        <form id="login-form" class="flex flex-col" style="gap:14px;" novalidate>
+            <label class="flex flex-col" style="gap:6px;">
+                <span class="tok-label">Username</span>
+                <input id="login-username" class="login-field" type="text" autocomplete="username"
+                       placeholder="admin" autocapitalize="none" spellcheck="false" required>
+            </label>
+            <label class="flex flex-col" style="gap:6px;">
+                <span class="tok-label">Password</span>
+                <input id="login-password" class="login-field" type="password" autocomplete="current-password"
+                       placeholder="••••••••" required>
+            </label>
 
-                <!-- Error Message -->
-                <div id="errorMessage" class="hidden p-3 bg-red-500/10 border border-red-500/30 rounded-lg">
-                    <div class="flex items-center gap-2">
-                        <span class="material-symbols-rounded text-red-400 text-sm">error</span>
-                        <span class="text-red-300 text-sm" id="errorText">Invalid credentials</span>
-                    </div>
-                </div>
-
-                <!-- Login Button -->
-                <button 
-                    type="submit" 
-                    class="w-full btn-gradient text-white font-semibold py-3 px-4 rounded-lg transition-all duration-300 flex items-center justify-center gap-2"
-                >
-                    <span class="material-symbols-rounded">login</span>
-                    Sign In to Dashboard
+            <div style="display:flex;align-items:center;justify-content:space-between;">
+                <label style="display:flex;align-items:center;gap:8px;cursor:pointer;">
+                    <input id="login-remember" type="checkbox" checked style="width:15px;height:15px;accent-color:var(--tok-accent);cursor:pointer;">
+                    <span class="tok-label">Remember me on this PC</span>
+                </label>
+                <button type="button" id="login-forgot-link" class="tok-label"
+                        style="background:none;border:none;cursor:pointer;text-decoration:underline;padding:0;color:var(--tok-accent);">
+                    Forgot password?
                 </button>
-            </form>
-
-            <!-- Help Text -->
-            <div class="mt-6 p-4 bg-blue-500/10 border border-blue-500/20 rounded-lg">
-                <div class="flex items-start gap-2">
-                    <span class="material-symbols-rounded text-blue-400 text-sm mt-0.5">info</span>
-                    <div class="text-xs text-blue-300">
-                        <p class="font-medium mb-1">First Time Setup:</p>
-                        <p class="mt-1 text-blue-200/80">Admin credentials are configured in your <code class="bg-blue-900/30 px-1 rounded">.env</code> file.</p>
-                        <p class="mt-1 text-blue-200/80">See the setup guide in <code class="bg-blue-900/30 px-1 rounded">README.md</code> for configuration details.</p>
-                    </div>
-                </div>
             </div>
-        </div>
 
-        <!-- Footer -->
-        <div class="text-center mt-8">
-            <p class="text-gray-500 text-sm">
-                LANStreamer Audio Streaming Server
+            <div id="login-error" role="alert"></div>
+            <button id="login-submit" type="submit" class="btn btn-primary" style="width:100%;padding:11px 16px;">
+                Sign in
+            </button>
+        </form>
+
+        <p class="tok-label" id="login-defaults-hint" style="display:none;text-align:center;margin-top:18px;line-height:1.55;">
+            First run on this PC? The default login is <code>admin</code> / <code>lanstreamer123</code>
+            (documented in the README, “Admin access”). The dashboard will prompt you to change it.
+        </p>
+        <p class="tok-label" id="login-readme-hint" style="display:none;text-align:center;margin-top:18px;">
+            Default credentials are listed in the project README (README → “Admin access”).
+        </p>
+        <details id="login-forgot" style="margin-top:10px;">
+            <summary class="tok-label" style="cursor:pointer;text-align:center;display:none;">Forgot your password?</summary>
+            <p class="tok-label" style="margin-top:8px;line-height:1.55;">
+                On this PC, delete the admin login file and restart LANStreamer — the default
+                login returns, and you can set a new one from the dashboard (Admin account).
+                This page only opens on the operator's PC, which is why the path is safe to show.<br>
+                Installed app: <code>%APPDATA%\LANStreamer\security.json</code><br>
+                Standalone / running from source: <code>config\security.json</code>
             </p>
-        </div>
-    </div>
+        </details>
+    </main>
 
     <script>
-        document.getElementById('loginForm').addEventListener('submit', async (e) => {
-            e.preventDefault();
+        (function () {
+            const form = document.getElementById('login-form');
+            const errBox = document.getElementById('login-error');
+            const submit = document.getElementById('login-submit');
 
-            const username = document.getElementById('username').value.trim();
-            const password = document.getElementById('password').value;
-            const errorDiv = document.getElementById('errorMessage');
-            const errorText = document.getElementById('errorText');
-            const submitBtn = e.target.querySelector('button[type="submit"]');
-
-            // Show loading state
-            const originalText = submitBtn.innerHTML;
-            submitBtn.innerHTML = '<span class="material-symbols-rounded animate-spin">refresh</span> Signing In...';
-            submitBtn.disabled = true;
-            errorDiv.classList.add('hidden');
+            // Already signed in? Straight to the dashboard. (Token may live in
+            // localStorage — "Remember me" — or sessionStorage — this window only.)
+            const existing = localStorage.getItem('lsAdminToken') || sessionStorage.getItem('lsAdminToken');
+            if (existing) {
+                fetch('/api/auth/verify', { headers: { Authorization: 'Bearer ' + existing } })
+                    .then(r => { if (r.ok) window.location.href = '/dashboard'; })
+                    .catch(() => {});
+            }
 
-            try {
-                // Get CSRF token first
-                const csrfResponse = await fetch('/api/auth/csrf-token');
-                const csrfData = await csrfResponse.json();
+            // Forgot-password link opens the recovery details (kept as <details>
+            // so the failed-login auto-open below still works)
+            const forgotLink = document.getElementById('login-forgot-link');
+            if (forgotLink) forgotLink.addEventListener('click', () => { forgot.open = true; });
 
-                const response = await fetch('/api/auth/login', {
-                    method: 'POST',
-                    headers: {
-                        'Content-Type': 'application/json',
-                        'X-CSRF-Token': csrfData.csrfToken
-                    },
-                    body: JSON.stringify({ username, password })
-                });
-                
-                const data = await response.json();
-                
-                if (response.ok) {
-                    // Store auth token
-                    localStorage.setItem('lanstreamer_token', data.token);
-                    
-                    // Redirect to dashboard
-                    window.location.href = '/';
-                } else {
-                    // Show error
-                    errorText.textContent = data.message || 'Invalid credentials';
-                    errorDiv.classList.remove('hidden');
-                }
-            } catch (error) {
-                console.error('Login error:', error);
-                errorText.textContent = 'Connection error. Please try again.';
-                errorDiv.classList.remove('hidden');
-            } finally {
-                // Restore button
-                submitBtn.innerHTML = originalText;
-                submitBtn.disabled = false;
-            }
-        });
+            // Cognitive-walkthrough fixes (2026-10-30):
+            //  1. A packaged-app operator has no README open when the login
+            //     appears. This page is unreachable from the network (the
+            //     localhost lock refuses non-local requests before it is ever
+            //     served), so on localhost we reveal the documented defaults
+            //     right where they're needed — the dashboard banner still
+            //     prompts to change them.
+            //  2. A failed sign-in is exactly the "forgot it" moment — open
+            //     the recovery details instead of leaving them folded below.
+            const isLocal = ['localhost', '127.0.0.1', '::1'].includes(window.location.hostname);
+            const defaultsHint = document.getElementById('login-defaults-hint');
+            const readmeHint = document.getElementById('login-readme-hint');
+            if (isLocal && defaultsHint) defaultsHint.style.display = 'block';
+            if (!isLocal && readmeHint) readmeHint.style.display = 'block';
+            const forgot = document.getElementById('login-forgot');
 
-        // Check if already logged in
-        if (localStorage.getItem('lanstreamer_token')) {
-            // Verify token is still valid
-            fetch('/api/auth/verify', {
-                headers: {
-                    'Authorization': `Bearer ${localStorage.getItem('lanstreamer_token')}`
-                }
-            })
-            .then(response => {
-                if (response.ok) {
-                    window.location.href = '/';
-                } else {
-                    localStorage.removeItem('lanstreamer_token');
+            form.addEventListener('submit', async (e) => {
+                e.preventDefault();
+                errBox.style.display = 'none';
+                submit.disabled = true;
+                submit.textContent = 'Signing in…';
+                try {
+                    const remember = document.getElementById('login-remember')?.checked !== false;
+                    const res = await fetch('/api/auth/login', {
+                        method: 'POST',
+                        headers: { 'Content-Type': 'application/json' },
+                        body: JSON.stringify({
+                            username: document.getElementById('login-username').value.trim(),
+                            password: document.getElementById('login-password').value,
+                            remember
+                        }),
+                        signal: AbortSignal.timeout(10000)
+                    });
+                    const data = await res.json().catch(() => ({}));
+                    if (res.ok && data.token) {
+                        try { localStorage.removeItem('lsAdminToken'); sessionStorage.removeItem('lsAdminToken'); } catch { }
+                        (remember ? localStorage : sessionStorage).setItem('lsAdminToken', data.token);
+                        window.location.href = '/dashboard';
+                        return;
+                    }
+                    errBox.textContent = data.message || 'Login failed — check username and password.';
+                    errBox.style.display = 'block';
+                    if (forgot) forgot.open = true;
+                } catch {
+                    errBox.textContent = 'Could not reach the server — is LANStreamer running?';
+                    errBox.style.display = 'block';
+                } finally {
+                    submit.disabled = false;
+                    submit.textContent = 'Sign in';
                 }
-            })
-            .catch(() => {
-                localStorage.removeItem('lanstreamer_token');
             });
-        }
+        })();
     </script>
 </body>
 </html>
diff --git a/public/showcase.html b/public/showcase.html
new file mode 100644
index 0000000..accac86
--- /dev/null
+++ b/public/showcase.html
@@ -0,0 +1,255 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="utf-8"/>
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>LANStreamer Design System — Component Showcase (dev only)</title>
+    <link rel="icon" type="image/svg+xml" href="/assets/logo-mark.svg">
+    <link rel="stylesheet" href="/assets/vendor/tailwind.css">
+    <link rel="stylesheet" href="/assets/vendor/fonts/fonts.css?v=5">
+    <link rel="stylesheet" href="/assets/css/tokens.css?v=10">
+    <link rel="stylesheet" href="/assets/css/ui.css?v=16">
+    <script src="/assets/js/theme-toggle.js?v=5"></script>
+    <script src="/assets/js/toasts.js?v=5"></script>
+    <script src="/assets/js/collapsible.js?v=5"></script>
+    <script src="/assets/js/notifications.js?v=5"></script>
+    <style>
+        body { font-family: var(--tok-font); }
+        .sc-wrap { max-width: 56rem; margin: 0 auto; padding: 2.5rem 1.25rem 5rem; }
+        .sc-section { margin-top: 3rem; }
+        .sc-section > h2 {
+            font-size: 1rem; font-weight: 800; color: var(--tok-text-1);
+            display: flex; align-items: center; gap: 0.5rem;
+            padding-bottom: 0.5rem; border-bottom: 1px solid var(--tok-line);
+        }
+        .sc-section > h2 .material-symbols-rounded { color: var(--tok-accent); font-size: 1.2rem; }
+        .sc-note { font-size: 0.78rem; color: var(--tok-text-3); margin-top: 0.375rem; }
+        .sc-row { display: flex; flex-wrap: wrap; align-items: center; gap: 0.75rem; margin-top: 1.25rem; }
+        .sc-block { margin-top: 1.25rem; padding: 1.25rem; border: 1px dashed var(--tok-line-strong); border-radius: 14px; }
+        .sc-label { font-size: 0.7rem; font-weight: 700; letter-spacing: 0.1em; text-transform: uppercase; color: var(--tok-text-3); margin: 1.5rem 0 0.5rem; }
+        .sc-input {
+            width: 100%; max-width: 22rem; padding: 0.625rem 0.875rem;
+            background: var(--tok-surface-inset); border: 1px solid var(--tok-line-strong);
+            border-radius: var(--tok-radius-input, 10px); color: var(--tok-text-1); font-size: 0.875rem;
+        }
+        .sc-input:focus { outline: none; border-color: var(--tok-accent); }
+        .sc-swatch { flex: 1 1 120px; min-width: 120px; max-width: 200px; border: 1px solid var(--tok-line); border-radius: 12px; overflow: hidden; }
+        .sc-swatch > div:first-child { height: 44px; }
+        .sc-swatch > div:last-child { padding: 0.4rem 0.6rem; font-size: 0.65rem; font-family: ui-monospace, monospace; color: var(--tok-text-2); }
+    </style>
+</head>
+<body class="body-bg">
+<div class="sc-wrap">
+    <!-- Mini header with the notification bell (same as dashboard) -->
+    <div class="flex items-center justify-between gap-4 flex-wrap" style="position:relative;">
+        <div class="flex items-center gap-3">
+            <img src="/assets/logo.svg?v=3" alt="LANStreamer" data-theme-logo class="h-9 w-auto">
+            <div>
+                <div class="text-lg font-bold" style="color:var(--tok-text-1)">Design System</div>
+                <div class="tok-label">Component showcase — dev only</div>
+            </div>
+        </div>
+        <div class="flex items-center gap-2" style="position:relative;">
+            <button id="header-bell-btn" class="theme-toggle" title="No notifications" aria-label="No notifications" aria-haspopup="dialog">
+                <span class="material-symbols-rounded text-sm">notifications</span>
+            </button>
+            <button data-theme-toggle class="theme-toggle" title="Toggle dark/light mode" aria-label="Toggle dark/light mode">
+                <span class="material-symbols-rounded text-sm">light_mode</span>
+            </button>
+        </div>
+    </div>
+    <p class="sc-note">Every component below is built ONLY from design tokens — if a new UI element doesn't fit one of
+    these patterns, extend this page first, then build. Verify both themes here.</p>
+
+    <!-- TOKENS -->
+    <section class="sc-section">
+        <h2><span class="material-symbols-rounded">palette</span>Tokens</h2>
+        <div class="sc-row" id="swatches"></div>
+    </section>
+
+    <!-- BUTTONS -->
+    <section class="sc-section">
+        <h2><span class="material-symbols-rounded">smart_button</span>Buttons</h2>
+        <div class="sc-row">
+            <button class="btn btn-primary">Primary action</button>
+            <button class="btn btn-secondary">Secondary</button>
+            <button class="btn btn-ghost">Ghost</button>
+            <button class="btn btn-danger">Danger</button>
+            <button class="btn btn-primary" disabled>Disabled</button>
+        </div>
+        <div class="sc-label">Playback + icon buttons</div>
+        <div class="sc-row">
+            <button class="play-btn" aria-label="Play"><span class="material-symbols-rounded" style="font-variation-settings:'FILL' 1;">play_arrow</span></button>
+            <button class="play-btn is-playing" aria-label="Stop"><span class="material-symbols-rounded">stop</span></button>
+            <button class="copy-btn" title="Icon-only action with tooltip" aria-label="Edit"><span class="material-symbols-rounded text-base">edit</span></button>
+            <button class="copy-btn" title="Icon-only action with tooltip" aria-label="Delete"><span class="material-symbols-rounded text-base">delete</span></button>
+        </div>
+        <p class="sc-note">Rule: repeated/context-obvious actions are icon-only (.copy-btn / .play-btn) with a tooltip.</p>
+    </section>
+
+    <!-- INPUTS -->
+    <section class="sc-section">
+        <h2><span class="material-symbols-rounded">edit_note</span>Inputs</h2>
+        <div class="sc-label">Text input (token surface + focus accent)</div>
+        <input class="sc-input" placeholder="Stream name…">
+        <div class="sc-label">Toggle switch (visibility toggles)</div>
+        <label class="relative inline-flex items-center cursor-pointer">
+            <input type="checkbox" class="sr-only peer" checked>
+            <div class="w-11 h-6 bg-gray-600 peer-focus:outline-none peer-focus:ring-4 peer-focus:ring-[var(--primary-color)]/20 rounded-full peer peer-checked:after:translate-x-full peer-checked:after:border-white after:content-[''] after:absolute after:top-[2px] after:left-[2px] after:bg-white after:rounded-full after:h-5 after:w-5 after:transition-all peer-checked:bg-[var(--primary-color)]"></div>
+        </label>
+    </section>
+
+    <!-- CHIPS + STATUS -->
+    <section class="sc-section">
+        <h2><span class="material-symbols-rounded">label</span>Chips &amp; status</h2>
+        <div class="sc-row">
+            <span class="live-chip">Live</span>
+            <span class="live-chip" style="color:var(--tok-warning,#F59E0B);">Reconnecting…</span>
+            <span class="uptime-chip"><span class="material-symbols-rounded text-sm">schedule</span> 4m 12s</span>
+            <span class="inline-flex items-center gap-1.5 px-2.5 py-1 rounded-full text-xs font-semibold" style="border:1px solid var(--tok-live);color:var(--tok-live);"><span style="width:7px;height:7px;border-radius:999px;background:var(--tok-live);display:inline-block;"></span>Online</span>
+            <span class="inline-flex items-center gap-1.5 px-2.5 py-1 rounded-full text-xs font-semibold" style="border:1px solid var(--tok-text-3);color:var(--tok-text-3);"><span style="width:7px;height:7px;border-radius:999px;background:var(--tok-text-3);display:inline-block;"></span>Offline</span>
+            <span class="px-2 py-0.5 text-xs font-medium rounded-full" style="background:rgba(167,139,250,0.15);color:#A78BFA;">Virtual</span>
+            <img src="/assets/icecast-mark.svg" alt="" class="w-5 h-5" style="color:var(--tok-accent);">
+            <span class="eq" aria-hidden="true"><span></span><span></span><span></span><span></span></span>
+        </div>
+    </section>
+
+    <!-- STREAM ROWS (admin) + CHANNEL ROWS (listener) -->
+    <section class="sc-section">
+        <h2><span class="material-symbols-rounded">podcasts</span>Stream rows</h2>
+        <div class="sc-block" style="padding:0;overflow:hidden;">
+            <div class="group-label tok-label">On air · 1</div>
+            <div class="arow is-live">
+                <span class="sid2" aria-hidden="true">S1</span>
+                <div style="min-width:0;">
+                    <div class="name">Main Room English</div>
+                    <div class="meta"><span class="chip chip-live"><span class="eq" aria-hidden="true"><i></i><i></i><i></i><i></i></span>LIVE</span>
+                        <span class="src" title="CABLE Output (VB-Audio Virtual Cable)"><span class="material-symbols-rounded" style="font-size:13px;" aria-hidden="true">mic</span>CABLE Output (VB-Audio Virtual Cable)</span>
+                        <span class="dotsep" aria-hidden="true"></span><span class="mono">192k</span>
+                        <span class="dotsep" aria-hidden="true"></span><span class="mono">1m 02s</span></div>
+                </div>
+                <div class="rowactions">
+                    <button class="playbtn stop" aria-label="Stop"><span class="material-symbols-rounded" style="font-size:16px;">stop</span></button>
+                    <div class="menu"><button class="iconbtn" aria-label="More actions"><span class="material-symbols-rounded text-base">more_vert</span></button>
+                        <div class="menu-pop"><button type="button">Copy listener link</button><button type="button">Edit</button><button type="button" class="del">Delete</button></div></div>
+                </div>
+            </div>
+            <div class="group-label tok-label">Ready · 1</div>
+            <div class="arow is-err">
+                <span class="sid2" aria-hidden="true">S3</span>
+                <div style="min-width:0;">
+                    <div class="name">AutoStart Test</div>
+                    <div class="meta"><span class="chip chip-err"><span class="pip" aria-hidden="true"></span>ERROR</span>
+                        <span class="src" title="OBS Virtual Camera (Audio)"><span class="material-symbols-rounded" style="font-size:13px;" aria-hidden="true">mic</span>OBS Virtual Camera (Audio)</span>
+                        <span class="dotsep" aria-hidden="true"></span><span class="mono">192k</span></div>
+                </div>
+                <div class="rowactions">
+                    <button class="playbtn" aria-label="Retry"><span class="material-symbols-rounded" style="font-size:18px;font-variation-settings:'FILL' 1;">play_arrow</span></button>
+                    <div class="menu"><button class="iconbtn" aria-label="More actions"><span class="material-symbols-rounded text-base">more_vert</span></button></div>
+                </div>
+                <div class="errbox">
+                    <b>🎤 Audio Device Not Found</b>
+                    <span class="grow">The device is missing or held by another app — reconnect it or pick a different input.</span>
+                    <button class="btn btn-secondary" style="height:30px;padding:0 10px;font-size:13px;">Change input</button>
+                    <button class="btn btn-ghost" style="height:30px;padding:0 10px;font-size:13px;">Retry</button>
+                </div>
+            </div>
+        </div>
+        <div class="sc-label">Listener channel row</div>
+        <div style="max-width:26rem;">
+            <button type="button" class="chrow" aria-current="true"><span class="lang" aria-hidden="true">S1</span><span class="t"><b>Main Room English</b><span class="faint" style="font-size:13px;">Live · 1m 02s · 192k</span></span><span class="eq" style="color:var(--tok-accent);" aria-hidden="true"><i></i><i></i><i></i><i></i></span></button>
+            <div class="chrow off"><span class="lang" aria-hidden="true">S2</span><span class="t"><b>Side Room French</b><span class="faint" style="font-size:13px;">Starts soon</span></span></div>
+        </div>
+    </section>
+
+    <!-- STRIP + BANNER + FILTERS -->
+    <section class="sc-section">
+        <h2><span class="material-symbols-rounded">monitoring</span>Status strip · banner · filters</h2>
+        <div class="strip" style="margin-top:1.25rem;">
+            <div class="glass-card stat"><span class="tok-label">On air</span><span class="v"><span class="eq" style="color:var(--tok-live);" aria-hidden="true"><i></i><i></i><i></i><i></i></span>1<small>/ 7 streams</small></span></div>
+            <div class="glass-card stat"><span class="tok-label">Listeners</span><span class="v">23 <small>peak 31</small></span></div>
+            <div class="glass-card stat"><span class="tok-label">Icecast server</span><span class="v"><span class="chip chip-live"><span class="pip" aria-hidden="true"></span>Online</span><small class="mono">:8200</small></span></div>
+            <div class="glass-card stat alert"><span class="tok-label">Needs attention</span><span class="v">1 stream · 1 setting</span></div>
+        </div>
+        <div class="banner" style="margin-top:1rem;">
+            <span class="material-symbols-rounded" style="color:var(--tok-warning);" aria-hidden="true">gpp_maybe</span>
+            <div class="grow"><b>Default Icecast password in use.</b> <span style="color:var(--tok-text-2);">Anyone on your network could take over a stream.</span></div>
+            <button class="btn btn-secondary" style="height:30px;padding:0 10px;font-size:13px;">Change password</button>
+        </div>
+        <div class="sc-row">
+            <div class="seg" role="group" aria-label="Filter"><button aria-pressed="true">All 7</button><button aria-pressed="false">Live · 1</button><button aria-pressed="false">Issues</button></div>
+        </div>
+    </section>
+
+    <!-- CARDS -->
+    <section class="sc-section">
+        <h2><span class="material-symbols-rounded">dashboard</span>Cards &amp; collapsibles</h2>
+        <div class="sc-block" id="card-demo"></div>
+        <p class="sc-note">Collapsed by default, remembers open/closed per browser (localStorage).</p>
+    </section>
+
+    <!-- TOASTS -->
+    <section class="sc-section">
+        <h2><span class="material-symbols-rounded">notifications</span>Toasts (stacked — never overlap)</h2>
+        <div class="sc-row">
+            <button class="btn btn-secondary" onclick="LSToasts.show('Info toast', 'info')">Info</button>
+            <button class="btn btn-secondary" onclick="LSToasts.show('Saved successfully', 'success')">Success</button>
+            <button class="btn btn-secondary" onclick="LSToasts.show('Something needs attention', 'warning')">Warning</button>
+            <button class="btn btn-secondary" onclick="LSToasts.show('Stream failed to start', 'error', { linkUrl: '/docs', linkText: 'troubleshooting guide' })">Error + link</button>
+            <button class="btn btn-primary" onclick="for (let i = 1; i <= 3; i++) LSToasts.show('Burst ' + i, 'info')">Burst ×3</button>
+            <button class="btn btn-ghost" onclick="LSToasts.show('Connecting…', 'info', { tag: 'demo' }); setTimeout(() => LSToasts.show('Now playing — replaced the connecting toast', 'success', { tag: 'demo' }), 1500)">Tagged replace demo</button>
+        </div>
+        <p class="sc-note">Same-tag toasts replace each other (Connecting… → Now playing). Max 4 stacked; oldest is dropped.</p>
+    </section>
+
+    <!-- NOTIFICATIONS BELL -->
+    <section class="sc-section">
+        <h2><span class="material-symbols-rounded">notification_add</span>Notification bell</h2>
+        <div class="sc-row">
+            <button class="btn btn-secondary" onclick="LSNotifications.notify({ title: 'Stream Demo stopped with an error', message: 'Check the row details for the cause.', type: 'error' })">Push error notification</button>
+            <button class="btn btn-secondary" onclick="LSNotifications.notify({ title: 'Icecast server is back online', type: 'success' })">Push success notification</button>
+        </div>
+        <p class="sc-note">The bell in the header above lights up (badge + pulse) until opened. Same code as the dashboard header.</p>
+    </section>
+
+    <!-- MISC -->
+    <section class="sc-section">
+        <h2><span class="material-symbols-rounded">widgets</span>Small elements</h2>
+        <div class="sc-row">
+            <span class="boot-dots"><span></span><span></span><span></span></span>
+            <span class="material-symbols-rounded animate-spin" style="color:var(--tok-accent)">progress_activity</span>
+        </div>
+    </section>
+</div>
+
+<script>
+    // Token swatches generated from the live CSS variables (both themes stay in sync)
+    const swatchDefs = [
+        ['--tok-bg', 'bg'], ['--tok-surface-1', 'surface-1'], ['--tok-surface-2', 'surface-2'],
+        ['--tok-surface-inset', 'inset'], ['--tok-text-1', 'text-1'], ['--tok-text-2', 'text-2'],
+        ['--tok-line', 'line'], ['--tok-accent', 'accent'], ['--tok-live', 'live'],
+        ['--tok-warning', 'warning'], ['--tok-danger', 'danger']
+    ];
+    function renderSwatches() {
+        const el = document.getElementById('swatches');
+        const cs = getComputedStyle(document.documentElement);
+        el.innerHTML = swatchDefs.map(([v, name]) => `
+            <div class="sc-swatch">
+                <div style="background:var(${v});border-bottom:1px solid var(--tok-line);"></div>
+                <div>${name}<br>${cs.getPropertyValue(v).trim()}</div>
+            </div>`).join('');
+    }
+    renderSwatches();
+    new MutationObserver(renderSwatches).observe(document.documentElement, { attributes: true, attributeFilter: ['data-theme'] });
+
+    // Collapsible card demo
+    document.getElementById('card-demo').innerHTML = LSCollapse.wrap('showcase-card',
+        { icon: 'event', title: 'Card with remembered collapse state', badge: '<span class="live-chip">Live</span>' },
+        `<div class="text-sm" style="color:var(--tok-text-2);">Body content goes here. Toggle me, reload the page — I remember.</div>`,
+        false);
+
+    // Wire the bell (same as HeaderComponent does)
+    LSNotifications.bindBell();
+</script>
+</body>
+</html>
diff --git a/public/streams.html b/public/streams.html
index ebe3af0..f0b6eef 100644
--- a/public/streams.html
+++ b/public/streams.html
@@ -5,9 +5,25 @@
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
     <title>LANStreamer - Live Streams</title>
     <link rel="icon" type="image/png" href="/assets/favicon.png">
-    <script src="https://cdn.tailwindcss.com"></script>
-    <link href="https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700&display=swap" rel="stylesheet">
-    <link href="https://fonts.googleapis.com/css2?family=Material+Symbols+Rounded:opsz,wght,FILL,GRAD@20..48,100..700,0..1,-50..200" rel="stylesheet">
+    <link rel="icon" type="image/svg+xml" href="/assets/logo-mark.svg">
+    <style>
+        /* Listener page-specific layout (designer P4) */
+        .lmini{display:none;position:fixed;left:12px;right:12px;bottom:12px;z-index:30;align-items:center;gap:12px;padding:10px 10px 10px 14px;}
+        @media (max-width:560px){
+            .listener-layout{grid-template-columns:1fr !important;}
+            #player-card{grid-template-columns:1fr !important;text-align:center;justify-items:center;padding:24px 18px;}
+            #player-channel{font-size:20px;}
+            body.playing.scrolled .lmini{display:flex;}
+        }
+        @media (max-width:900px){.listener-layout{grid-template-columns:1fr !important;}}
+    </style>
+    <link rel="stylesheet" href="/assets/vendor/tailwind.css">
+    <link rel="stylesheet" href="/assets/vendor/fonts/fonts.css?v=5">
+    <link rel="stylesheet" href="/assets/css/tokens.css?v=10">
+    <link rel="stylesheet" href="/assets/css/ui.css?v=16">
+    <script src="/assets/js/theme-toggle.js?v=7"></script>
+    <script src="/assets/js/qr-share.js?v=5"></script>
+    <script src="/assets/js/marquee.js?v=5"></script>
     <style>
         :root {
           /* Existing colors */
@@ -65,31 +81,20 @@
           border-radius: 16px;
           backdrop-filter: blur(20px) saturate(180%);
           -webkit-backdrop-filter: blur(20px) saturate(180%);
-          box-shadow: var(--shadow-glass);
-          transition: all 0.3s var(--ease-emphasized);
-        }
-
-        .glass-card:hover {
-          background: var(--glass-bg-mid);
-          border-color: var(--glass-border-mid);
-          box-shadow: 0 8px 32px rgba(0, 0, 0, 0.5), inset 0 1px 0 rgba(255, 255, 255, 0.08);
-          transform: translateY(-2px);
         }
 
         /* Inset variant (for nested content) */
         .glass-card-inset {
           background: rgba(0, 0, 0, 0.2);
           border: 1px solid rgba(255, 255, 255, 0.05);
-          box-shadow: inset 0 2px 8px rgba(0, 0, 0, 0.3), 0 1px 0 rgba(255, 255, 255, 0.05);
         }
 
-        /* Glass header (v2 §7) */
+        /* Glass header (v2 §7) — the only shadowed surface */
         .header-glass {
-          background: rgba(15, 12, 41, 0.7);
-          backdrop-filter: blur(20px) saturate(180%);
-          -webkit-backdrop-filter: blur(20px) saturate(180%);
-          border-bottom: 1px solid rgba(255, 255, 255, 0.08);
-          box-shadow: 0 4px 24px rgba(0, 0, 0, 0.3), inset 0 1px 0 rgba(255, 255, 255, 0.05);
+          /* opaque, like the admin header — scrolled content must not ghost through */
+          background: var(--tok-surface-1);
+          border-bottom: 1px solid var(--tok-line);
+          box-shadow: 0 2px 8px rgba(0, 0, 0, 0.15);
         }
 
         /* Primary/secondary glass buttons for streams page */
@@ -246,7 +251,7 @@
 
         .on-air-button.inactive {
             background: var(--glass-bg-mid);
-            box-shadow: var(--shadow-glass);
+            box-shadow: none;
             border-color: var(--glass-border-subtle);
         }
 
@@ -368,110 +373,128 @@
         }
     </style>
 </head>
-<body class="text-white">
-    <div class="relative flex size-full min-h-screen flex-col body-bg dark group/design-root overflow-x-hidden" style='font-family: Inter, "Noto Sans", sans-serif;'>
-        <!-- Header -->
-        <header class="header-glass sticky top-0 z-50 flex items-center justify-between whitespace-nowrap px-4 sm:px-6 lg:px-10 py-3 sm:py-4">
-            <div class="flex items-center gap-2 sm:gap-4 text-white min-w-0">
-                <a href="/" class="flex items-center gap-2 text-white hover:text-[var(--primary-color)] transition-colors min-w-0">
-                    <img src="/assets/lanstreamer-logo.png" alt="LANStreamer" class="h-12 sm:h-16 w-auto flex-shrink-0" id="logo-image" onerror="this.style.display='none'; document.getElementById('logo-fallback').style.display='flex';">
-                    <div id="logo-fallback" style="display: none;" class="flex items-center">
-                        <span class="text-lg sm:text-xl font-bold tracking-wider">LANStreamer</span>
-                    </div>
-                </a>
-            </div>
-            <div class="flex items-center gap-2 sm:gap-3 flex-shrink-0">
-                <div id="on-air-button" class="on-air-button inactive rounded-xl px-3 sm:px-4 py-2 sm:py-2.5 flex items-center gap-2 sm:gap-2.5">
-                    <div id="on-air-indicator" class="on-air-indicator inactive w-2 h-2 sm:w-2.5 sm:h-2.5 rounded-full"></div>
-                    <span id="on-air-text" class="text-xs sm:text-sm font-semibold tracking-wide text-gray-400">OFF AIR</span>
+<body class="text-white listener">
+    <!-- Boot overlay: paints before any CSS/JS loads; boot.js dismisses it or
+         swaps it to a failure state after a timeout (e.g. cached PWA shell
+         while the server is down). -->
+    <div id="boot-overlay" style="position:fixed;inset:0;z-index:9999;display:flex;align-items:center;justify-content:center;background:#07090D;color:#EEF1F6;font-family:Space Grotesk,Inter,system-ui,sans-serif;transition:opacity .4s ease;">
+      <div style="display:flex;flex-direction:column;align-items:center;gap:14px;text-align:center;padding:24px;">
+        <img src="/assets/logo.svg?v=3" alt="LANStreamer" style="height:52px;width:auto;" onerror="this.style.display='none'">
+        <div style="font-weight:700;letter-spacing:.1em;text-transform:uppercase;font-size:.72rem;color:#9AA3B2;">LANStreamer <span id="boot-version"></span></div>
+        <div class="boot-dots" aria-label="Loading"><span></span><span></span><span></span></div>
+        <div style="font-size:.85rem;color:#5D6570;">Loading…</div>
+      </div>
+    </div>
+    <!-- no overflow-x on this wrapper: it would become the sticky containing block and kill the sticky header -->
+    <div class="relative flex size-full min-h-screen flex-col body-bg dark group/design-root" style='font-family: var(--tok-font);'>
+        <!-- Top bar: brand · ON AIR pill · theme -->
+        <header class="header-glass sticky top-0 z-50">
+            <div class="mx-auto max-w-6xl flex items-center gap-4 px-4 sm:px-6" style="height:64px;">
+                <div class="flex items-center gap-2.5 min-w-0">
+                    <img src="/assets/logo.svg?v=3" alt="LANStreamer" class="h-8 w-auto flex-shrink-0" id="logo-image" data-theme-logo onerror="this.onerror=null; this.src='/assets/lanstreamer-logo.png';">
                 </div>
+                <span style="flex:1;"></span>
+                <span class="onair inactive" id="onair-pill"><span class="pip" aria-hidden="true"></span><span id="onair-text">OFF AIR</span></span>
+                <button data-theme-toggle
+                        class="theme-toggle"
+                        title="Toggle dark/light mode"
+                        aria-label="Switch to light mode"
+                        aria-pressed="false">
+                    <span class="material-symbols-rounded text-sm">light_mode</span>
+                </button>
             </div>
         </header>
 
         <!-- Main Content -->
-        <main class="flex-1 px-4 sm:px-6 lg:px-10 py-6 sm:py-8">
-            <div class="mx-auto max-w-7xl">
-                <!-- Page Title (Full Width, No Border) -->
-                <div class="mb-6 sm:mb-8">
-                    <h2 id="event-title" class="text-2xl sm:text-3xl font-bold text-white mb-2">Live Audio Streams</h2>
-                    <p id="event-subtitle" class="text-sm sm:text-base text-gray-400">Click play to listen to any available stream</p>
+        <main class="flex-1 px-4 sm:px-6 py-6 sm:py-8" style="width:100%;">
+            <div class="mx-auto max-w-6xl">
+                <!-- Hero -->
+                <section style="padding:28px 0 20px;">
+                    <span class="tok-label" id="hero-eyebrow">Live now · on this network</span>
+                    <h1 id="event-title" style="margin-top:10px;font-size:clamp(30px,5vw,48px);line-height:1.05;letter-spacing:-.03em;font-weight:700;color:var(--tok-text-1);max-width:18ch;">Live Audio Streams</h1>
+                    <p id="event-subtitle" style="margin-top:12px;font-size:17px;color:var(--tok-text-2);">Click play to listen to any available stream</p>
+                </section>
+
+                <!-- Loading / no-stream states (toggled by the poller) -->
+                <div id="loading-state" class="text-center pb-6 hidden">
+                    <span class="material-symbols-rounded animate-spin" style="color:var(--tok-accent);font-size:28px;" aria-hidden="true">progress_activity</span>
+                    <p style="color:var(--tok-text-2);font-size:14px;margin-top:8px;">Loading live streams…</p>
                 </div>
-
-                <div class="grid grid-cols-1 xl:grid-cols-3 gap-8 items-start">
-                    <!-- Left Column (Streams) -->
-                    <div class="xl:col-span-2">
-
-                        <!-- Streams Container -->
-                        <div id="streams-container">
-                <!-- Loading State -->
-                <div id="loading-state" class="text-center pb-6">
-                    <div class="bg-[var(--card-bg)] border border-[var(--border-color)] rounded-2xl p-8 shadow-2xl shadow-black/30">
-                        <div class="w-16 h-16 mx-auto mb-4 bg-[var(--primary-color)]/10 rounded-full flex items-center justify-center">
-                            <span class="material-symbols-rounded text-3xl text-[var(--primary-color)] animate-spin">refresh</span>
-                        </div>
-                        <p class="text-gray-400">Loading live streams...</p>
-                    </div>
+                <div id="no-streams-state" class="hidden" style="padding:36px 20px;text-align:center;border:1px dashed var(--tok-line-strong);border-radius:14px;margin-bottom:20px;">
+                    <span class="material-symbols-rounded" style="font-size:34px;color:var(--tok-text-3);" aria-hidden="true">podcasts</span>
+                    <h3 style="font-size:20px;color:var(--tok-text-1);margin-top:10px;">No Live Stream</h3>
+                    <p style="color:var(--tok-text-2);margin-top:6px;font-size:14px;">Nothing is on air right now. This page updates itself — the stream will appear the moment it starts.</p>
                 </div>
 
-                <!-- No Streams State -->
-                <div id="no-streams-state" class="text-center pb-6 hidden">
-                    <div class="bg-[var(--card-bg)] border border-[var(--border-color)] rounded-2xl p-8 shadow-2xl shadow-black/30">
-                        <div class="w-16 h-16 mx-auto mb-4 bg-gray-500/10 rounded-full flex items-center justify-center">
-                            <span class="material-symbols-rounded text-3xl text-gray-500">radio</span>
-                        </div>
-                        <h3 class="text-xl font-semibold text-white mb-2">No Live Streams</h3>
-                        <p class="text-gray-400">There are currently no active streams. Check back later!</p>
-                    </div>
-                </div>
+                <div style="display:grid;grid-template-columns:minmax(0,1fr) 320px;gap:20px;align-items:start;" class="listener-layout">
+                    <!-- Left: player + channels + help -->
+                    <div>
+                        <!-- Player card -->
+                        <section class="glass-card" id="player-card" aria-label="Player" style="padding:24px;display:grid;grid-template-columns:auto minmax(0,1fr);gap:24px;align-items:center;position:relative;">
+                            <button class="bigplay" id="bigplay" aria-label="Play" title="Play">
+                                <span class="material-symbols-rounded" id="bigplay-icon" style="font-variation-settings:'FILL' 1;">play_arrow</span>
+                            </button>
+                            <div style="min-width:0;">
+                                <div class="tok-label" style="display:flex;gap:8px;align-items:center;">
+                                    <span class="chip chip-live" id="player-chip" style="display:none;"><span class="pip" aria-hidden="true"></span>LIVE</span>
+                                    <span class="mono" id="player-timer" style="color:var(--tok-text-3);display:none;">0m 00s</span>
+                                    <span class="chip chip-warn" id="player-reconnecting" style="display:none;"><span class="pip" aria-hidden="true"></span>Reconnecting…</span>
+                                </div>
+                                <h2 id="player-channel" style="font-size:24px;letter-spacing:-.02em;margin:8px 0 6px;white-space:nowrap;overflow:hidden;text-overflow:ellipsis;color:var(--tok-text-1);">—</h2>
+                                <div style="font-size:14px;color:var(--tok-text-2);"><span class="mono" id="player-kbps">192 kbps</span></div>
+                                <div id="waveform" aria-hidden="true" style="display:flex;align-items:center;gap:3px;height:32px;margin-top:14px;"></div>
+                                <div style="display:flex;align-items:center;gap:10px;margin-top:16px;color:var(--tok-text-2);">
+                                    <span class="material-symbols-rounded" style="font-size:18px;" aria-hidden="true">volume_up</span>
+                                    <input type="range" min="0" max="100" value="75" class="volume-slider" id="volume-slider" aria-label="Volume" style="flex:1;max-width:200px;accent-color:var(--tok-accent);">
+                                    <span class="mono" id="volume-display" style="font-size:12px;">75%</span>
+                                </div>
+                            </div>
+                        </section>
 
-                <!-- Streams List -->
-                <div id="streams-list" class="space-y-4 hidden">
-                    <!-- Streams will be dynamically inserted here -->
-                </div>
-                        </div>
+                        <!-- Channel picker -->
+                        <section style="margin-top:20px;">
+                            <h3 class="tok-label" style="margin-bottom:10px;">Choose a channel</h3>
+                            <div id="channels-list"></div>
+                        </section>
+
+                        <p style="font-size:13px;color:var(--tok-text-3);margin-top:16px;display:flex;gap:8px;align-items:flex-start;">
+                            <span class="material-symbols-rounded" style="font-size:16px;flex-shrink:0;" aria-hidden="true">help</span>
+                            <span>No sound? Make sure you're on the venue Wi-Fi and your phone isn't on silent. Keep this page open — audio continues with the screen locked.</span>
+                        </p>
                     </div>
-                    
-                    <!-- Right Column (Sidebar) -->
-                    <div class="space-y-6">
-                        <!-- Event Image -->
-                        <div id="event-image-container" class="hidden">
-                            <div class="bg-[var(--card-bg)] border border-[var(--border-color)] rounded-2xl p-4 shadow-2xl shadow-black/30">
-                                <img id="event-image" src="" alt="Event Image" class="w-full h-48 object-cover rounded-xl border border-[var(--border-color)]">
-                            </div>
-                        </div>
 
-                        <!-- About Section -->
-                        <div id="about-section" class="bg-[var(--card-bg)] border border-[var(--border-color)] rounded-2xl p-6 shadow-2xl shadow-black/30">
-                            <h3 class="text-lg font-semibold text-white mb-4">ℹ️ About</h3>
-                            <div id="about-content" class="space-y-3 text-sm text-gray-400">
-                                <p>Welcome to LANStreamer - your local audio streaming platform.</p>
-                                <p>Listen to live audio streams from your network.</p>
-                            </div>
+                    <!-- Right: artwork + about + contact -->
+                    <aside style="display:flex;flex-direction:column;gap:16px;">
+                        <div id="event-image-container" class="glass-card hidden" style="overflow:hidden;padding:0;">
+                            <img id="event-image" src="" alt="Event artwork" data-lightbox title="Tap to view the full image"
+                                 style="width:100%;aspect-ratio:4/3;object-fit:cover;display:block;cursor:zoom-in;">
                         </div>
-
-                        <!-- Contact & Feedback Section -->
-                        <div id="contact-section" class="bg-[var(--card-bg)] border border-[var(--border-color)] rounded-2xl p-6 shadow-2xl shadow-black/30">
-                            <h3 class="text-lg font-semibold text-white mb-4">📞 Contact & Feedback</h3>
-                            <div id="contact-details" class="space-y-3">
-                                <!-- Contact details will be loaded here -->
+                        <details class="glass-card" id="about-section" open style="padding:0;">
+                            <summary style="list-style:none;cursor:pointer;display:flex;align-items:center;padding:16px 18px;font-weight:600;color:var(--tok-text-1);">About this event</summary>
+                            <div id="about-content" style="padding:0 18px 16px;font-size:14px;color:var(--tok-text-2);">
+                                <p>Welcome to LANStreamer - your local audio streaming platform.</p>
                             </div>
-                        </div>
-                    </div>
+                        </details>
+                        <details class="glass-card" id="contact-section" style="padding:0;">
+                            <summary style="list-style:none;cursor:pointer;display:flex;align-items:center;padding:16px 18px;font-weight:600;color:var(--tok-text-1);">Contact &amp; feedback</summary>
+                            <div id="contact-details" class="space-y-3" style="padding:0 18px 16px;display:flex;flex-direction:column;gap:10px;"></div>
+                        </details>
+                    </aside>
                 </div>
             </div>
         </main>
 
         <!-- Footer -->
         <footer class="mt-12 border-t border-[var(--border-color)] pt-8 pb-8 px-4 sm:px-6 lg:px-10">
-            <div class="flex flex-col sm:flex-row items-center justify-between gap-6 text-xs text-gray-500">
+            <div class="flex flex-col sm:flex-row items-center justify-between gap-4 text-xs" style="color:var(--tok-text-3);">
                 <div class="flex items-center gap-4">
                     <span id="version-info">LANStreamer</span>
-                    <a href="https://github.com/jerryagenyi/LANStreamer" 
+                    <a href="https://github.com/jerryagenyi/LANStreamer"
                        target="_blank"
                        rel="noopener noreferrer"
-                       class="text-blue-400 hover:text-blue-300 transition-colors flex items-center gap-1">
+                       class="flex items-center gap-1 transition-colors" style="color:var(--tok-accent);">
                         <span class="material-symbols-rounded text-sm">open_in_new</span>
-                        GitHub Repository
+                        GitHub
                     </a>
                 </div>
                 <div class="flex items-center gap-4">
@@ -479,11 +502,26 @@ <h3 class="text-lg font-semibold text-white mb-4">📞 Contact & Feedback</h3>
                 </div>
             </div>
         </footer>
+        <!-- Mobile mini-player: pinned while playing and scrolled past the player -->
+        <div class="glass-card lmini" id="mini-player">
+            <span class="eq" style="color:var(--tok-accent);" aria-hidden="true"><i></i><i></i><i></i><i></i></span>
+            <div style="flex:1;min-width:0;">
+                <b id="mp-name" style="display:block;white-space:nowrap;overflow:hidden;text-overflow:ellipsis;color:var(--tok-text-1);">—</b>
+                <span class="mono" id="mp-label" style="color:var(--tok-text-3);font-size:11px;">LIVE</span>
+            </div>
+            <button type="button" class="playbtn" id="mp-playpause" style="width:44px;height:44px;" aria-label="Pause">
+                <span class="material-symbols-rounded">pause</span>
+            </button>
+        </div>
     </div>
 
     <!-- Audio Player (Hidden) -->
     <audio id="audio-player" preload="none"></audio>
 
+    <script src="/assets/js/boot.js?v=5"></script>
+    <script src="/assets/js/toasts.js?v=5"></script>
+    <script src="/assets/js/lightbox.js?v=1"></script>
+    <script src="/assets/js/lowlatency.js?v=3"></script>
     <script>
         class StreamListener {
             constructor() {
@@ -498,7 +536,54 @@ <h3 class="text-lg font-semibold text-white mb-4">📞 Contact & Feedback</h3>
                 this.icecastPort = 8000; // Default fallback (Icecast standard port)
                 this.serverHost = null; // Will be loaded from config - uses getPreferredLANHost() for correct network IP
 
+                // Off-air handling: when the stream we're listening to stops on
+                // the server, keep the row in a "waiting" state for a grace
+                // period, then flip the icon back to play. When the stream
+                // returns (during OR after the grace), resume automatically.
+                this.OFFAIR_GRACE_MS = 15000; // 15s ≈ 3 missed 5s polls; avoids flapping on quick restarts
+                this.offAirSince = null;      // timestamp while in grace, else null
+                this.userPaused = false;      // listener deliberately paused → never auto-resume
+                this.lastStreamId = null;     // remembered across reloads (localStorage ls:lastStream)
+                this.autoResumeWanted = false;// set when we gave up after grace and should resume on return
+
                 // Client-side timer tracking for real-time uptime updates
+
+                // If the source ends, errors, or stalls (e.g. the operator stopped
+                // the stream), sync the mini-player out of its "playing" look.
+                for (const evt of ['ended', 'error', 'stalled']) {
+                    this.audioPlayer.addEventListener(evt, () => {
+                        if (this.intentionallyStopping) return;
+                        if (evt === 'error' && this.currentStream) {
+                            const failed = this.streams.find(s => s.id === this.currentStream);
+                            this.showNotification(
+                                `Playback failed for "${failed?.name || this.currentStream}". The stream may not be running — ask the operator to check it.`,
+                                'error'
+                            );
+                            // Relay the failure so the operator can see what this
+                            // listener saw (media error code + browser), even if
+                            // the listener can't explain it verbally.
+                            const me = this.audioPlayer.error;
+                            this.reportClientEvent('playback_error', {
+                                streamId: this.currentStream,
+                                label: failed?.label || '',
+                                code: me?.code ?? 'unknown',
+                                msg: (me?.message || '').slice(0, 120) || 'no message',
+                                platform: navigator.platform || '',
+                                ua: (navigator.userAgent || '').slice(0, 120)
+                            });
+                        }
+                        if (evt === 'stalled' && this.currentStream && !this.offAirSince) {
+                            // Stalls repeat in bursts — report at most one per 30s
+                            const now = Date.now();
+                            if (!this._lastStallReport || now - this._lastStallReport > 30_000) {
+                                this._lastStallReport = now;
+                                this.reportClientEvent('playback_stalled', { streamId: this.currentStream });
+                            }
+                        }
+                        this.updateMiniPlayer();
+                        this.renderStreams();
+                    });
+                }
                 this.clientTimers = new Map(); // streamId -> { startTime, isRunning }
                 this.uptimeUpdateInterval = null;
 
@@ -507,6 +592,49 @@ <h3 class="text-lg font-semibold text-white mb-4">📞 Contact & Feedback</h3>
                 this.hadStreamsRecently = false; // Track if we had streams before they disappeared
                 this.isInitialLoad = true;
 
+                // --- Player card wiring (designer P4) ---
+                // Big play: play/pause current channel, or start the first live one
+                const bigplay = document.getElementById('bigplay');
+                if (bigplay) {
+                    bigplay.addEventListener('click', () => {
+                        if (this.currentStream) { this.togglePlayPause(); return; }
+                        const first = this.streams.find(s => s.status === 'running');
+                        if (first) { this.playChannel(first.id); return; }
+                        this.showNotification('No live stream right now — this page updates itself the moment one starts.', 'info');
+                    });
+                }
+
+                // Volume slider drives the same setVolume path as before
+                const vol = document.getElementById('volume-slider');
+                if (vol) {
+                    vol.value = this.volume;
+                    vol.addEventListener('input', (e) => this.setVolume(e.target.value));
+                }
+
+                // Waveform bars: decorative but honest — animates only while playing
+                const wave = document.getElementById('waveform');
+                if (wave) {
+                    wave.innerHTML = '<i></i>'.repeat(28);
+                    const bars = wave.querySelectorAll('i');
+                    for (const b of bars) {
+                        b.style.cssText = 'flex:1;max-width:5px;border-radius:3px;background:var(--tok-line-strong);height:18%;transition:height .12s;';
+                    }
+                    if (!window.matchMedia?.('(prefers-reduced-motion: reduce)').matches) {
+                        this.waveInterval = setInterval(() => {
+                            if (!this.currentStream || this.audioPlayer.paused || this.offAirSince) return;
+                            for (const b of bars) {
+                                b.style.background = 'var(--tok-accent)';
+                                b.style.height = (15 + Math.random() * 85) + '%';
+                            }
+                        }, 150);
+                    }
+                }
+
+                // Mobile mini-player appears once the listener scrolls past the hero
+                window.addEventListener('scroll', () => {
+                    document.body.classList.toggle('scrolled', window.scrollY > 380);
+                }, { passive: true });
+
                 this.init();
             }
 
@@ -526,6 +654,34 @@ <h3 class="text-lg font-semibold text-white mb-4">📞 Contact & Feedback</h3>
                 window.addEventListener('beforeunload', () => {
                     this.stopUptimeUpdates();
                 });
+
+                // Resume the stream this listener played last (page reload / PWA relaunch)
+                this.tryResumeLastStream();
+
+                // Everything mounted — dismiss the boot overlay
+                if (window.LSBoot) LSBoot.ready();
+            }
+
+            /** Direct Icecast mount URL for a stream (used for logging/display only). */
+            buildStreamUrl(streamId) {
+                const displayHost = this.serverHost || window.location.hostname;
+                return `http://${displayHost}:${this.icecastPort}/${streamId}`;
+            }
+
+            /** On load: if the listener's last stream is on air, start it again. */
+            tryResumeLastStream() {
+                try {
+                    const id = localStorage.getItem('ls:lastStream');
+                    const wants = localStorage.getItem('ls:autoResume') === '1';
+                    if (!id || !wants || this.currentStream) return;
+                    const target = this.streams.find(s => s.id === id && s.status === 'running');
+                    if (!target) return;
+                    console.log('🔁 Auto-resuming last stream:', id);
+                    this.playStream(id, this.buildStreamUrl(id)).catch(err => {
+                        console.warn('Auto-resume blocked:', err && err.name);
+                        this.showNotification('Autoplay was blocked — tap ▶ to start listening.', 'info');
+                    });
+                } catch (e) { /* storage unavailable */ }
             }
 
             async loadConfig() {
@@ -587,7 +743,29 @@ <h3 class="text-lg font-semibold text-white mb-4">📞 Contact & Feedback</h3>
                     const data = await response.json();
                     
                     console.log('📊 Streams data:', data);
-                    
+
+                    // Off-air sync: if the stream we're listening to stopped on the
+                    // server, stop pretending to play (the audio element can sit in
+                    // a buffering "playing" state with no output). We give the
+                    // stream a grace period (quick restarts shouldn't flap the
+                    // UI), then flip the icon back to play — and resume on return.
+                    const allStreams = data.streams || [];
+                    if (this.currentStream && !this.intentionallyStopping) {
+                        const current = allStreams.find(s => s.id === this.currentStream);
+                        if (!current || current.status !== 'running') {
+                            if (!this.offAirSince) {
+                                this.enterOffAir();
+                            } else if (Date.now() - this.offAirSince >= this.OFFAIR_GRACE_MS) {
+                                this.giveUpOffAir();
+                            }
+                        } else if (this.offAirSince) {
+                            this.resumeFromOffAir();
+                        }
+                    } else if (!this.currentStream && this.autoResumeWanted && !this.userPaused) {
+                        const back = allStreams.find(s => s.id === this.lastStreamId && s.status === 'running');
+                        if (back) this.autoResumeStream();
+                    }
+
                     if (data.streams && data.streams.length > 0) {
                         // Debug: Log all stream statuses
                         console.log('🔍 All streams with status:', data.streams.map(s => ({ id: s.id, name: s.name, status: s.status })));
@@ -627,138 +805,196 @@ <h3 class="text-lg font-semibold text-white mb-4">📞 Contact & Feedback</h3>
                 } catch (error) {
                     console.error('❌ Failed to load streams:', error);
                     this.showError('Failed to load streams');
+                    this.reportClientEvent('load_failed', {
+                        msg: (error?.message || 'unknown').slice(0, 120),
+                        platform: navigator.platform || ''
+                    });
                 }
             }
 
             renderStreams() {
                 const loadingState = document.getElementById('loading-state');
                 const noStreamsState = document.getElementById('no-streams-state');
-                const streamsList = document.getElementById('streams-list');
+                const channelsList = document.getElementById('channels-list');
 
                 if (this.streams.length === 0) {
                     loadingState.classList.add('hidden');
                     noStreamsState.classList.remove('hidden');
-                    streamsList.classList.add('hidden');
+                    if (channelsList) channelsList.innerHTML = '';
+                    this.updatePlayerUi();
                     this.updateLiveIndicator();
                     return;
                 }
 
                 loadingState.classList.add('hidden');
                 noStreamsState.classList.add('hidden');
-                streamsList.classList.remove('hidden');
 
-                const streamsHtml = this.streams.map(stream => this.renderStream(stream)).join('');
-                streamsList.innerHTML = streamsHtml;
-
-                // Remove bottom margin from the last stream card for cleaner spacing
-                const streamCards = streamsList.querySelectorAll('.bg-\\[var\\(--card-bg\\)\\]');
-                if (streamCards.length > 0) {
-                    streamCards[streamCards.length - 1].classList.remove('mb-4');
+                // Channel picker: running streams first, stopped ones greyed out
+                const running = this.streams.filter(s => s.status === 'running');
+                const offAir = this.streams.filter(s => s.status !== 'running');
+                if (channelsList) {
+                    channelsList.innerHTML =
+                        running.map(s => this.renderChannelRow(s, true)).join('') +
+                        offAir.map(s => this.renderChannelRow(s, false)).join('');
                 }
+
+                this.updatePlayerUi();
                 this.updateLiveIndicator();
             }
 
-            renderStream(stream) {
-                // Use server host from config (getPreferredLANHost) for correct network IP
-                // Falls back to window.location.hostname if config not loaded yet
-                const displayHost = this.serverHost || window.location.hostname;
-                const streamUrl = `http://${displayHost}:${this.icecastPort}/${stream.id}`;
-                const isPlaying = this.currentStream === stream.id;
-                const uptime = this.formatUptime(stream.uptime || 0);
+            renderChannelRow(stream, isRunning) {
+                const name = stream.name || stream.id;
+                const isCurrent = this.currentStream === stream.id;
+                const inGrace = isCurrent && this.offAirSince !== null;
+
+                if (!isRunning) {
+                    return `
+                        <div class="chrow off" aria-disabled="true">
+                            <span class="lang" aria-hidden="true">${stream.label || '··'}</span>
+                            <span class="t"><b>${name}</b><span class="faint" style="font-size:13px;">Starts soon</span></span>
+                        </div>`;
+                }
 
                 return `
-                    <div class="bg-[var(--card-bg)] border border-[var(--border-color)] rounded-2xl p-4 sm:p-6 shadow-2xl shadow-black/30 hover:border-[var(--primary-color)]/30 transition-all duration-300 mb-4">
-                        <!-- Mobile-first layout: Stack on small screens, side-by-side on larger screens -->
-                        <div class="flex flex-col sm:flex-row sm:items-center sm:justify-between gap-4">
-                            <!-- Stream Info -->
-                            <div class="flex items-center gap-3 flex-1 min-w-0">
-                                <div class="relative flex-shrink-0">
-                                    <div class="w-3 h-3 rounded-full bg-[var(--live-color)] pulse-live"></div>
-                                    <div class="absolute inset-0 w-3 h-3 rounded-full bg-[var(--live-color)] animate-ping opacity-75"></div>
-                                </div>
-                                <div class="flex-1 min-w-0">
-                                    <h3 class="font-semibold text-white text-base sm:text-lg mb-1 truncate">${stream.label ? stream.label + ' - ' : ''}${stream.name || stream.id}</h3>
-                                    <!-- Mobile: Stack info vertically, Desktop: Horizontal -->
-                                    <div class="flex flex-col sm:flex-row sm:items-center gap-1 sm:gap-4 text-xs sm:text-sm text-gray-400">
-                                        <span class="flex items-center gap-1">
-                                            <span class="material-symbols-rounded text-sm">schedule</span>
-                                            <span data-stream-uptime="${stream.id}">${uptime}</span>
-                                        </span>
-                                        <span class="flex items-center gap-1">
-                                            <span class="material-symbols-rounded text-sm">radio</span>
-                                            ${stream.config?.bitrate || '192'} kbps
-                                        </span>
-                                        <span class="flex items-center gap-1">
-                                            <span class="material-symbols-rounded text-sm">info</span>
-                                            Status: ${stream.status || 'unknown'}
-                                        </span>
-
-                                    </div>
-                                </div>
-                            </div>
+                    <button type="button" class="chrow" data-n="${name}" aria-current="${isCurrent}"
+                            onclick="streamListener.playChannel('${stream.id}')">
+                        <span class="lang" aria-hidden="true">${stream.label || '♪'}</span>
+                        <span class="t"><b>${name}</b>
+                            <span class="faint" style="font-size:13px;">Live · <span data-stream-uptime="${stream.id}">${this.formatUptime(stream.uptime || 0)}</span> · ${stream.config?.bitrate || '192'}k</span>
+                        </span>
+                        ${inGrace
+                            ? '<span class="chip chip-warn"><span class="pip" aria-hidden="true"></span>Reconnecting…</span>'
+                            : isCurrent
+                                ? '<span class="eq" style="color:var(--tok-accent);" aria-hidden="true"><i></i><i></i><i></i><i></i></span>'
+                                : '<span class="chip chip-live"><span class="pip" aria-hidden="true"></span>LIVE</span>'}
+                        <span class="chplay" aria-hidden="true"><span class="material-symbols-rounded">${isCurrent && !this.audioPlayer.paused ? 'pause' : 'play_arrow'}</span></span>
+                    </button>`;
+            }
 
-                            <!-- Action Buttons -->
-                            <div class="flex items-center gap-2 sm:gap-3 flex-shrink-0">
-                                ${isPlaying ? `
-                                    <button
-                                        onclick="streamListener.stopStream()"
-                                        class="inline-flex items-center gap-2 rounded-md px-4 sm:px-6 py-2 sm:py-3 text-sm font-semibold text-white shadow-lg transition-all duration-300 btn-stop-gradient flex-1 sm:flex-initial justify-center"
-                                    >
-                                        <span class="material-symbols-rounded text-base">stop</span>
-                                        <span class="hidden sm:inline">Stop</span>
-                                    </button>
-                                ` : `
-                                    <button
-                                        onclick="streamListener.playStream('${stream.id}', '${streamUrl}')"
-                                        class="inline-flex items-center gap-2 rounded-md px-4 sm:px-6 py-2 sm:py-3 text-sm font-semibold text-white shadow-lg transition-all duration-300 btn-gradient flex-1 sm:flex-initial justify-center"
-                                    >
-                                        <span class="material-symbols-rounded text-base" style="font-variation-settings: 'FILL' 1, 'wght' 400, 'GRAD' 0, 'opsz' 24;">play_arrow</span>
-                                        <span class="hidden sm:inline">Play</span>
-                                    </button>
-                                `}
-
-                                <button
-                                    onclick="streamListener.copyStreamUrl('${streamUrl}')"
-                                    class="inline-flex items-center gap-2 rounded-md px-3 sm:px-4 py-2 sm:py-3 text-sm font-medium text-gray-300 bg-[#2A2A2A] hover:bg-[#3A3A3A] border border-[var(--border-color)] transition-all duration-300 flex-shrink-0"
-                                    title="Copy stream URL"
-                                >
-                                    <span class="material-symbols-rounded text-base">content_copy</span>
-                                    <span class="hidden sm:inline">Copy</span>
-                                </button>
-                            </div>
-                        </div>
-                        
-                        ${isPlaying ? `
-                            <div class="mt-4 p-3 bg-green-500/10 border border-green-500/20 rounded-lg">
-                                <div class="flex items-center gap-2 mb-3">
-                                    <span class="material-symbols-rounded text-green-400">volume_up</span>
-                                    <span class="text-green-300 text-sm">Now playing: ${stream.label ? stream.label + ' ' : ''}${stream.name || stream.id}</span>
-                                </div>
-                                <!-- Volume Control -->
-                                <div class="flex items-center gap-3">
-                                    <button onclick="streamListener.toggleMute()"
-                                            class="flex items-center justify-center w-6 h-6 rounded hover:bg-green-500/20 transition-colors"
-                                            title="${this.isMuted ? 'Unmute' : 'Mute'}">
-                                        <span class="material-symbols-rounded text-green-400 text-sm">
-                                            ${this.isMuted ? 'volume_off' : (this.volume === 0 ? 'volume_mute' : this.volume < 50 ? 'volume_down' : 'volume_up')}
-                                        </span>
-                                    </button>
-                                    <input type="range"
-                                           min="0"
-                                           max="100"
-                                           value="${this.isMuted ? 0 : this.volume}"
-                                           class="flex-1 h-2 bg-gray-700 rounded-lg appearance-none volume-slider"
-                                           oninput="streamListener.setVolume(this.value)">
-                                    <span class="text-xs text-gray-400 font-mono min-w-[3rem]" id="volume-display">${this.isMuted ? 'Muted' : this.volume + '%'}</span>
-                                </div>
-                            </div>
-                        ` : ''}
-                    </div>
-                `;
+            /** Listener-side failure telemetry — relayed through the operator's
+             *  server (listeners never hold a PostHog key or decide consent).
+             *  Fire-and-forget; telemetry must never break the page. */
+            reportClientEvent(event, properties = {}) {
+                try {
+                    fetch('/api/telemetry/client-event', {
+                        method: 'POST',
+                        headers: { 'Content-Type': 'application/json' },
+                        body: JSON.stringify({ event, properties })
+                    }).catch(() => {});
+                } catch (e) { /* never let reporting break playback */ }
+            }
+
+            /** Audio source selection: MSE low-latency path when the browser
+             *  supports MP3-in-MSE (Chrome/Edge/Firefox/Android), plain src
+             *  otherwise (Safari/iOS) or after any MSE failure. The <audio>
+             *  element behaves identically on both paths — this only changes
+             *  WHERE the bytes come from and how little is buffered. */
+            setAudioSource(url) {
+                this.clearAudioSource();
+                if (window.LSLowLatency && LSLowLatency.supported()) {
+                    try {
+                        this.llPlayer = new LSLowLatency(this.audioPlayer, {
+                            onError: (e) => {
+                                console.warn('Low-latency playback failed, falling back to direct stream:', e && e.message);
+                                this.llFallback = true; // remember for this page load
+                                this.clearAudioSource();
+                                this.audioPlayer.src = url; // plain path, identical behaviour
+                                if (this.currentStream && this.audioPlayer.paused) {
+                                    this.audioPlayer.play().catch(() => {});
+                                }
+                            }
+                        });
+                        if (this.llPlayer.load(url)) {
+                            this.audioPlayer.preload = 'auto'; // MSE object URL needs load()+play()
+                            this.audioPlayer.load();
+                            return;
+                        }
+                    } catch (e) { /* fall through to direct */ }
+                }
+                this.audioPlayer.preload = 'none';
+                this.audioPlayer.src = url;
+                this.audioPlayer.load();
+            }
+
+            clearAudioSource() {
+                if (this.llPlayer) { this.llPlayer.stop(); this.llPlayer = null; }
+                this.audioPlayer.removeAttribute('src');
+                try { this.audioPlayer.load(); } catch (e) { /* detached */ }
+            }
+
+            /** Play (or switch to) a channel from the picker. */
+            playChannel(streamId) {
+                if (this.currentStream === streamId) {
+                    this.togglePlayPause();
+                    return;
+                }
+                this.playStream(streamId, this.buildStreamUrl(streamId));
+            }
+
+            /** Player card + mini-player presentation, driven by playback state. */
+            updatePlayerUi() {
+                const current = this.streams.find(s => s.id === this.currentStream);
+
+                // The player is a "now playing" surface: it only exists once the
+                // listener has actually started a stream. Before that, the channel
+                // picker is the entry point — no empty player with a dead play button.
+                const playerCard = document.getElementById('player-card');
+                if (playerCard) playerCard.style.display = this.currentStream ? '' : 'none';
+
+                const shown = current;
+                const playing = !!this.currentStream && !this.audioPlayer.paused;
+                const inGrace = !!this.currentStream && this.offAirSince !== null;
+
+                document.body.classList.toggle('playing', playing);
+
+                const icon = document.getElementById('bigplay-icon');
+                const bigBtn = document.getElementById('bigplay');
+                if (bigBtn) {
+                    const label = inGrace ? 'Reconnecting…' : playing ? 'Pause' : 'Play';
+                    bigBtn.setAttribute('aria-label', label);
+                    bigBtn.title = label;
+                }
+                if (icon) {
+                    icon.textContent = inGrace ? 'hourglass_top' : playing ? 'pause' : 'play_arrow';
+                }
+
+                const nameEl = document.getElementById('player-channel');
+                if (nameEl) nameEl.textContent = shown ? (shown.name || shown.id) : '—';
+
+                const chip = document.getElementById('player-chip');
+                const timer = document.getElementById('player-timer');
+                const reconnect = document.getElementById('player-reconnecting');
+                const kbps = document.getElementById('player-kbps');
+                if (chip) chip.style.display = this.currentStream && !inGrace ? '' : 'none';
+                if (timer) timer.style.display = this.currentStream && !inGrace ? '' : 'none';
+                if (reconnect) reconnect.style.display = inGrace ? '' : 'none';
+                if (kbps) kbps.textContent = `${shown?.config?.bitrate || '192'} kbps`;
+
+                // Mini player (mobile, pinned while playing + scrolled)
+                const mpName = document.getElementById('mp-name');
+                const mpLabel = document.getElementById('mp-label');
+                const mpBtn = document.getElementById('mp-playpause');
+                const mpIcon = mpBtn?.querySelector('.material-symbols-rounded');
+                if (mpBtn) {
+                    mpBtn.setAttribute('aria-label', playing ? 'Pause' : 'Play');
+                    if (mpIcon) mpIcon.textContent = playing ? 'pause' : 'play_arrow';
+                    mpBtn.onclick = () => this.togglePlayPause();
+                }
+                if (mpName && shown) mpName.textContent = shown.name || shown.id;
+                if (mpLabel) mpLabel.textContent = inGrace ? 'WAITING' : playing ? 'LIVE' : 'PAUSED';
             }
 
             async playStream(streamId, streamUrl) {
                 try {
+                    // Off-air pre-check: explain WHY playback would fail instead of
+                    // silently doing nothing (e.g. duplicate-source streams that the
+                    // operator hasn't started).
+                    const target = this.streams.find(s => s.id === streamId);
+                    if (target && target.status !== 'running') {
+                        this.showNotification(`"${target.name || streamId}" is off air — ask the operator to start it on the dashboard.`, 'error');
+                        return;
+                    }
+
                     // Use same-origin proxy so playback works regardless of CORS/firewall on Icecast port
                     const playUrl = `/api/streams/play/${encodeURIComponent(streamId)}`;
                     console.log(`🎵 Playing stream: ${streamId} via proxy ${playUrl} (direct: ${streamUrl})`);
@@ -790,20 +1026,20 @@ <h3 class="font-semibold text-white text-base sm:text-lg mb-1 truncate">${stream
                         console.log(`⚠️ Browser format detection unclear - will attempt playback anyway (mobile browsers often work despite this)`);
                     }
 
-                    // Show loading state
-                    this.showNotification('🔄 Connecting to stream... Please wait', 'info');
+                    // Show loading state (replaced by "Now playing" on success)
+                    this.showNotification('Connecting to stream…', 'info', { tag: 'play-status' });
 
                     // Skip HEAD request validation on mobile - it often fails even when stream works
                     // Let the audio element's error handler catch real issues
 
-                    // Set up audio player with error handling (proxy = same origin, no CORS)
-                    this.audioPlayer.src = playUrl;
+                    // Set up audio player with error handling (proxy = same origin, no CORS).
+                    // Low latency first: MSE-fed playback keeps ~0.5s buffered ahead instead
+                    // of the browser's default 3-4.5s progressive prebuffer (the reported
+                    // "4-5 seconds" delay). Safari/iOS and any MSE failure fall back to the
+                    // plain src path — behaviour identical to before.
+                    this.setAudioSource(playUrl);
                     this.audioPlayer.volume = this.volume / 100; // Set initial volume (0-1 range)
 
-                    // Let browser auto-detect format from server Content-Type header
-                    // Removing hardcoded type to prevent format mismatch issues
-                    this.audioPlayer.preload = 'none'; // Don't preload to avoid format issues
-
                     this.audioPlayer.load();
 
                     // Add error event listener
@@ -848,16 +1084,22 @@ <h3 class="font-semibold text-white text-base sm:text-lg mb-1 truncate">${stream
                     const loadedHandler = () => {
                         console.log('Stream loaded successfully');
                         this.audioPlayer.removeEventListener('loadeddata', loadedHandler);
-                        this.showNotification(`🎵 Now playing: ${streamId}`, 'success');
+                        this.showNotification(`Now playing: ${streamId}`, 'success', { tag: 'play-status' });
                     };
                     this.audioPlayer.addEventListener('loadeddata', loadedHandler);
 
                     // Play the stream
                     await this.audioPlayer.play();
                     this.currentStream = streamId;
+                    this.offAirSince = null;
+                    this.userPaused = false;
+                    this.autoResumeWanted = false;
+                    this.lastStreamId = streamId;
+                    this.saveResumePreference(true);
 
                     // Update UI
                     this.renderStreams();
+                    this.updateMiniPlayer();
 
                 } catch (error) {
                     console.error('❌ Failed to play stream:', error);
@@ -899,8 +1141,9 @@ <h3 class="font-semibold text-white text-base sm:text-lg mb-1 truncate">${stream
                 this.intentionallyStopping = true;
 
                 this.audioPlayer.pause();
-                this.audioPlayer.src = '';
+                this.clearAudioSource();
                 this.currentStream = null;
+                this.offAirSince = null;
 
                 // Clear the flag after a short delay
                 setTimeout(() => {
@@ -909,10 +1152,105 @@ <h3 class="font-semibold text-white text-base sm:text-lg mb-1 truncate">${stream
 
                 // Update UI
                 this.renderStreams();
+                this.updateMiniPlayer();
 
                 this.showNotification(`${streamTitle} stopped`, 'info');
             }
 
+            /** The stream we're listening to just disappeared from the server. */
+            enterOffAir() {
+                this.offAirSince = Date.now();
+                this.reportClientEvent('reconnect_grace', { streamId: this.currentStream });
+                // Pause output but keep the row marked as "waiting" — the icon
+                // flips back to play only after the grace period expires.
+                this.audioPlayer.pause();
+                this.renderStreams();
+                this.updateMiniPlayer();
+                const name = this.streamName(this.currentStream);
+                this.showNotification(`${name} went off air — waiting ${Math.round(this.OFFAIR_GRACE_MS / 1000)}s before giving up…`, 'info');
+            }
+
+            /** Grace period expired: stop pretending, flip icon back to play. */
+            giveUpOffAir() {
+                const name = this.streamName(this.currentStream);
+                this.reportClientEvent('offair_giveup', { streamId: this.currentStream });
+                this.offAirSince = null;
+                this.autoResumeWanted = !this.userPaused; // resume automatically when it returns
+                this.intentionallyStopping = true;
+                this.audioPlayer.pause();
+                this.clearAudioSource();
+                this.currentStream = null;
+                setTimeout(() => { this.intentionallyStopping = false; }, 1000);
+                this.renderStreams();
+                this.updateMiniPlayer();
+                this.showNotification(`${name} is off air. It will resume automatically when it returns.`, 'info');
+            }
+
+            /** The stream came back while we were still in the grace window. */
+            resumeFromOffAir() {
+                const id = this.currentStream;
+                this.offAirSince = null;
+                this.setAudioSource(`/api/streams/play/${encodeURIComponent(id)}`);
+                this.audioPlayer.play().then(() => {
+                    this.showNotification(`${this.streamName(id)} is back on air — resumed.`, 'success');
+                    this.renderStreams();
+                    this.updateMiniPlayer();
+                }).catch(err => {
+                    console.warn('Resume failed:', err && err.message);
+                    this.showNotification(`${this.streamName(id)} is back — tap ▶ to resume.`, 'info');
+                    this.renderStreams();
+                });
+            }
+
+            /** The stream returned after we had given up: start it again. */
+            autoResumeStream() {
+                const id = this.lastStreamId;
+                this.autoResumeWanted = false;
+                this.playStream(id, this.buildStreamUrl(id)).then(() => {
+                    this.showNotification(`${this.streamName(id)} is back on air — resumed.`, 'success');
+                }).catch(err => {
+                    console.warn('Auto-resume failed:', err && err.message);
+                    this.showNotification(`${this.streamName(id)} is back — tap ▶ to listen.`, 'info');
+                });
+            }
+
+            /** Display name for a stream id, tolerating unknown ids. */
+            streamName(id) {
+                const s = this.streams.find(x => x.id === id);
+                return (s && (s.name || s.id)) || id || 'The stream';
+            }
+
+            /** Pause/resume the stream that is currently loaded. */
+            togglePlayPause() {
+                if (!this.currentStream) return;
+                if (this.audioPlayer.paused) {
+                    this.userPaused = false;
+                    this.saveResumePreference(true);
+                    this.audioPlayer.play().catch(err => console.warn('Resume failed:', err.message));
+                } else {
+                    // Deliberate pause: never auto-resume this listener until they play again
+                    this.userPaused = true;
+                    this.autoResumeWanted = false;
+                    this.saveResumePreference(false);
+                    this.audioPlayer.pause();
+                }
+                this.renderStreams();
+                this.updateMiniPlayer();
+            }
+
+            /** Remember which stream this listener plays and whether to auto-resume. */
+            saveResumePreference(wantsResume) {
+                try {
+                    if (this.currentStream) localStorage.setItem('ls:lastStream', this.currentStream);
+                    localStorage.setItem('ls:autoResume', wantsResume ? '1' : '0');
+                } catch (e) { /* storage unavailable */ }
+            }
+
+            /** Kept for compatibility — the player card + mini are driven by updatePlayerUi(). */
+            updateMiniPlayer() {
+                this.updatePlayerUi();
+            }
+
             copyStreamUrl(url) {
                 // Try modern clipboard API first
                 if (navigator.clipboard && (window.location.protocol === 'https:' || window.location.hostname === 'localhost' || window.location.hostname === '127.0.0.1')) {
@@ -1004,14 +1342,15 @@ <h3 class="text-lg font-semibold text-white">Copy Stream URL</h3>
             showNoStreams() {
                 const loadingState = document.getElementById('loading-state');
                 const noStreamsState = document.getElementById('no-streams-state');
-                const streamsList = document.getElementById('streams-list');
+                const channelsList = document.getElementById('channels-list');
 
                 // Clear the streams array so updateLiveIndicator knows there are no streams
                 this.streams = [];
 
-                loadingState.classList.add('hidden');
-                noStreamsState.classList.remove('hidden');
-                streamsList.classList.add('hidden');
+                if (loadingState) loadingState.classList.add('hidden');
+                if (noStreamsState) noStreamsState.classList.remove('hidden');
+                if (channelsList) channelsList.innerHTML = '';
+                this.updatePlayerUi();
 
                 // Update the ON AIR indicator to OFF AIR
                 this.updateLiveIndicator();
@@ -1071,31 +1410,15 @@ <h3 class="text-lg font-semibold text-white">Copy Stream URL</h3>
                 this.showNoStreams();
             }
 
-            showNotification(message, type = 'info') {
-                // Create a centered toast notification
-                const toast = document.createElement('div');
-                toast.className = `fixed top-4 left-1/2 -translate-x-1/2 z-50 px-4 py-3 rounded-lg shadow-lg transition-all duration-300 max-w-md ${
-                    type === 'success' ? 'bg-green-600 text-white' :
-                    type === 'error' ? 'bg-red-600 text-white' :
-                    'bg-blue-600 text-white'
-                }`;
-                toast.innerHTML = `
-                    <div class="flex items-start gap-3">
-                        <span class="material-symbols-rounded text-sm mt-0.5">${type === 'success' ? 'check_circle' : type === 'error' ? 'error' : 'info'}</span>
-                        <span class="flex-1">${message}</span>
-                        <button class="text-white/80 hover:text-white transition-colors" onclick="this.parentElement.parentElement.remove()">
-                            <span class="material-symbols-rounded text-lg">close</span>
-                        </button>
-                    </div>
-                `;
-                
-                document.body.appendChild(toast);
-                
-                // Remove after timeout - 60 seconds for errors (long messages), 8 seconds for success/info
-                const timeout = type === 'error' ? 60000 : 8000;
-                setTimeout(() => {
-                    toast.remove();
-                }, timeout);
+            showNotification(message, type = 'info', opts = {}) {
+                // Stacked toasts: new notifications push older ones down instead
+                // of overlapping. Tagged toasts (e.g. play status) replace
+                // themselves so "Connecting…" becomes "Now playing".
+                if (window.LSToasts) {
+                    LSToasts.show(message, type, opts);
+                } else {
+                    console.log(`${type.toUpperCase()}: ${message}`);
+                }
             }
 
             /**
@@ -1103,6 +1426,10 @@ <h3 class="text-lg font-semibold text-white">Copy Stream URL</h3>
              */
             startUptimeUpdates() {
                 this.uptimeUpdateInterval = setInterval(() => {
+                    // Expire the off-air grace precisely (polls only run every 5s)
+                    if (this.offAirSince && Date.now() - this.offAirSince >= this.OFFAIR_GRACE_MS) {
+                        this.giveUpOffAir();
+                    }
                     this.updateUptimeDisplays();
                 }, 1000);
             }
@@ -1161,6 +1488,10 @@ <h3 class="text-lg font-semibold text-white">Copy Stream URL</h3>
                     if (uptimeElement && timer.isRunning) {
                         const currentUptime = Date.now() - timer.startTime;
                         uptimeElement.textContent = this.formatUptime(currentUptime);
+                        if (streamId === this.currentStream) {
+                            const t = document.getElementById('player-timer');
+                            if (t) t.textContent = this.formatUptime(currentUptime);
+                        }
                     }
                 });
             }
@@ -1287,12 +1618,20 @@ <h3 class="text-lg font-semibold text-white">Copy Stream URL</h3>
                     subtitleElement.textContent = configData.eventSubtitle || 'Click play to listen to any available stream';
                 }
 
-                // Handle event image
+                // Handle event artwork: configured image, or the bundled default
+                // banner (/assets/default-event.jpg — NOT the logo) whenever no
+                // custom image is set, including after the operator removes theirs.
                 if (configData.eventImage && imageContainer && imageElement) {
                     imageElement.src = configData.eventImage;
+                    imageElement.removeAttribute('style');
+                    imageElement.style.cssText = 'width:100%;aspect-ratio:4/3;object-fit:cover;display:block;cursor:zoom-in;';
+                    imageContainer.classList.remove('hidden');
+                } else if (imageContainer && imageElement) {
+                    imageElement.src = '/assets/default-event.jpg';
+                    imageElement.removeAttribute('style');
+                    imageElement.style.cssText = 'width:100%;aspect-ratio:4/3;object-fit:cover;display:block;cursor:zoom-in;';
+                    imageElement.alt = 'Event artwork';
                     imageContainer.classList.remove('hidden');
-                } else if (imageContainer) {
-                    imageContainer.classList.add('hidden');
                 }
             }
 
@@ -1330,42 +1669,11 @@ <h3 class="text-lg font-semibold text-white">Copy Stream URL</h3>
             }
 
             updateLiveIndicator() {
-                const onAirButton = document.getElementById('on-air-button');
-                const onAirIndicator = document.getElementById('on-air-indicator');
-                const onAirText = document.getElementById('on-air-text');
+                const pill = document.getElementById('onair-pill');
+                const text = document.getElementById('onair-text');
                 const hasActiveStreams = this.streams && this.streams.length > 0;
-
-                if (hasActiveStreams) {
-                    // ON AIR - Red glowing button like radio studios
-                    if (onAirButton) {
-                        onAirButton.classList.remove('inactive');
-                        onAirButton.classList.add('active');
-                    }
-                    if (onAirIndicator) {
-                        onAirIndicator.classList.remove('inactive');
-                        onAirIndicator.classList.add('active');
-                    }
-                    if (onAirText) {
-                        onAirText.textContent = 'ON AIR';
-                        onAirText.classList.remove('text-gray-400');
-                        onAirText.classList.add('text-white');
-                    }
-                } else {
-                    // OFF AIR - Grayed out button
-                    if (onAirButton) {
-                        onAirButton.classList.remove('active');
-                        onAirButton.classList.add('inactive');
-                    }
-                    if (onAirIndicator) {
-                        onAirIndicator.classList.remove('active');
-                        onAirIndicator.classList.add('inactive');
-                    }
-                    if (onAirText) {
-                        onAirText.textContent = 'OFF AIR';
-                        onAirText.classList.remove('text-white');
-                        onAirText.classList.add('text-gray-400');
-                    }
-                }
+                if (pill) pill.classList.toggle('inactive', !hasActiveStreams);
+                if (text) text.textContent = hasActiveStreams ? 'ON AIR' : 'OFF AIR';
             }
 
             startAutoRefresh() {
@@ -1389,6 +1697,7 @@ <h3 class="text-lg font-semibold text-white">Copy Stream URL</h3>
                 }
                 this.updateVolumeDisplay();
                 this.saveVolume(); // Save volume preference
+                this.updateMiniPlayer();
                 console.log(`🔊 Volume set to ${this.volume}%${this.isMuted ? ' (Muted)' : ''}`);
 
                 // Don't re-render during volume changes to avoid interfering with slider interaction
@@ -1417,6 +1726,7 @@ <h3 class="text-lg font-semibold text-white">Copy Stream URL</h3>
                 if (this.currentStream) {
                     this.renderStreams();
                 }
+                this.updateMiniPlayer();
             }
 
             updateVolumeDisplay() {
@@ -1455,7 +1765,12 @@ <h3 class="text-lg font-semibold text-white">Copy Stream URL</h3>
         let streamListener;
         document.addEventListener('DOMContentLoaded', () => {
             console.log('🚀 DOM Content Loaded, initializing StreamListener...');
-            streamListener = new StreamListener();
+            try {
+                streamListener = new StreamListener();
+            } catch (error) {
+                console.error('❌ Failed to initialize StreamListener:', error);
+                if (window.LSBoot) LSBoot.fail(error && error.message ? error.message : 'Listener page initialization failed.');
+            }
         });
 
         // Fallback initialization if DOMContentLoaded already fired
@@ -1464,7 +1779,23 @@ <h3 class="text-lg font-semibold text-white">Copy Stream URL</h3>
         } else {
             // Document has already loaded
             console.log('🚀 Document already loaded, initializing StreamListener immediately...');
-            streamListener = new StreamListener();
+            try {
+                streamListener = new StreamListener();
+            } catch (error) {
+                console.error('❌ Failed to initialize StreamListener:', error);
+                if (window.LSBoot) LSBoot.fail(error && error.message ? error.message : 'Listener page initialization failed.');
+            }
+        }
+
+        // PWA removed (an installed shortcut is bound to the IP it was made
+        // from, which breaks whenever the streaming PC's address changes).
+        // If a service worker was registered by an earlier version, remove it.
+        if ('serviceWorker' in navigator) {
+            window.addEventListener('load', () => {
+                navigator.serviceWorker.getRegistrations()
+                    .then(regs => regs.forEach(r => r.unregister()))
+                    .catch(() => {});
+            });
         }
 
 
diff --git a/release-notes-v2.0.0.md b/release-notes-v2.0.0.md
new file mode 100644
index 0000000..f8154b0
--- /dev/null
+++ b/release-notes-v2.0.0.md
@@ -0,0 +1,33 @@
+# LANStreamer v2.0.0 — the desktop app
+
+The first packaged release: LANStreamer is now a full Windows desktop app that turns any PC into a multi-channel audio streaming server for your local network — built for language interpretation at events, meetings, and conferences. Listeners open a link on their phones; nothing to install on their side.
+
+## What's new in 2.0.0
+
+- **Desktop app** — dashboard window with tray icon; minimize to tray keeps streams running for listeners; a real Exit that cleanly stops everything (with confirmation when streams are live).
+- **Nothing to pre-install** — the app bundles FFmpeg and Icecast. Download, run, stream.
+- **Low-latency playback** — listener delay cut from 4–5 seconds to about 1 second (a low-latency player with a small live-edge buffer; details in docs/LATENCY.md).
+- **Admin login** — dashboard protected by username/password, locked to the operator's PC (the network only ever sees the listener page). Remember-me keeps you signed in; recovery path documented if you forget your password.
+- **Full redesign** — new operator dashboard (status strip, stream rows with quick actions) and listener page (big play button, channel picker, QR sharing), light/dark themes, fully offline.
+- **Audio bitrate control** — default 96 kbps (plenty for speech), switchable per stream to 128/192 for music; live streams restart instantly at the new setting.
+- **Event banner** — your own artwork with a bundled default; click to view full-size.
+- **Anonymous telemetry, ON by default** — simple usage events (app start/stop, stream started/stopped/failed, version, OS) help improve the app. No audio, no personal data, listeners' phones never send anything. Turn it off anytime: dashboard → Admin account → the switch, or the tray menu.
+
+## Installing
+
+- **`LANStreamer Setup 2.0.0.exe`** — installer (Start-menu entry, uninstaller).
+- **`LANStreamer Standalone 2.0.0.exe`** — single-file build; run it from anywhere, no installation.
+
+Both are unsigned (SmartScreen will warn — "More info → Run again"/"Run anyway"); verify downloads against `SHA256SUMS.txt` if in doubt. Windows 10/11 64-bit. Listeners: any phone/PC with a browser on the same network.
+
+**Upgrading from a source/ZIP install:** your stream configuration lives in `config/` there; the packaged app keeps its own in `%APPDATA%\LANStreamer` — set your streams up once in the app.
+
+## Known issues
+
+- macOS/Linux: run from source (Windows is the packaged platform).
+- Unsigned installer: expect the SmartScreen warning until the build gains reputation.
+- The public Wi-Fi caveat: networks marked "Public" by Windows silently block inbound connections — set the network profile to Private if listeners can't connect.
+
+## Licenses
+
+LANStreamer is MIT. The bundles include GPL-licensed binaries — FFmpeg (gyan.dev essentials build) and Icecast 2.5.0 — whose license texts and source-offer ship inside the app (`resources\vendor\licenses\`). Source code: https://github.com/jerryagenyi/LANStreamer
diff --git a/screenshots/admin-account-card.png b/screenshots/admin-account-card.png
new file mode 100644
index 0000000..cd28602
Binary files /dev/null and b/screenshots/admin-account-card.png differ
diff --git a/screenshots/bitrate-edit-modal.png b/screenshots/bitrate-edit-modal.png
new file mode 100644
index 0000000..5195895
Binary files /dev/null and b/screenshots/bitrate-edit-modal.png differ
diff --git a/screenshots/chplay-paused.png b/screenshots/chplay-paused.png
new file mode 100644
index 0000000..e3827ff
Binary files /dev/null and b/screenshots/chplay-paused.png differ
diff --git a/screenshots/chplay-playing.png b/screenshots/chplay-playing.png
new file mode 100644
index 0000000..bf80f6c
Binary files /dev/null and b/screenshots/chplay-playing.png differ
diff --git a/screenshots/eq-playing.png b/screenshots/eq-playing.png
new file mode 100644
index 0000000..088d324
Binary files /dev/null and b/screenshots/eq-playing.png differ
diff --git a/screenshots/latency-mse.png b/screenshots/latency-mse.png
new file mode 100644
index 0000000..252bbf4
Binary files /dev/null and b/screenshots/latency-mse.png differ
diff --git a/screenshots/logo-dashboard-dark.png b/screenshots/logo-dashboard-dark.png
new file mode 100644
index 0000000..cc773e0
Binary files /dev/null and b/screenshots/logo-dashboard-dark.png differ
diff --git a/screenshots/logo-dashboard-light.png b/screenshots/logo-dashboard-light.png
new file mode 100644
index 0000000..5af6f6e
Binary files /dev/null and b/screenshots/logo-dashboard-light.png differ
diff --git a/screenshots/logo-light-docs.png b/screenshots/logo-light-docs.png
new file mode 100644
index 0000000..98d14c1
Binary files /dev/null and b/screenshots/logo-light-docs.png differ
diff --git a/screenshots/logo-light-login.png b/screenshots/logo-light-login.png
new file mode 100644
index 0000000..c9077f1
Binary files /dev/null and b/screenshots/logo-light-login.png differ
diff --git a/screenshots/logo-light-streams.png b/screenshots/logo-light-streams.png
new file mode 100644
index 0000000..a3f7adb
Binary files /dev/null and b/screenshots/logo-light-streams.png differ
diff --git a/screenshots/pw-toggle-admin-card.png b/screenshots/pw-toggle-admin-card.png
new file mode 100644
index 0000000..eb5bcf2
Binary files /dev/null and b/screenshots/pw-toggle-admin-card.png differ
diff --git a/screenshots/round10-flat-dashboard-dark.png b/screenshots/round10-flat-dashboard-dark.png
new file mode 100644
index 0000000..97e5d01
Binary files /dev/null and b/screenshots/round10-flat-dashboard-dark.png differ
diff --git a/screenshots/round10-flat-listener-dark.png b/screenshots/round10-flat-listener-dark.png
new file mode 100644
index 0000000..b818b7f
Binary files /dev/null and b/screenshots/round10-flat-listener-dark.png differ
diff --git a/screenshots/round10-flat-listener-light.png b/screenshots/round10-flat-listener-light.png
new file mode 100644
index 0000000..c9bc4d6
Binary files /dev/null and b/screenshots/round10-flat-listener-light.png differ
diff --git a/screenshots/round11-header-scrolled.png b/screenshots/round11-header-scrolled.png
new file mode 100644
index 0000000..659d3dd
Binary files /dev/null and b/screenshots/round11-header-scrolled.png differ
diff --git a/screenshots/round11-header.png b/screenshots/round11-header.png
new file mode 100644
index 0000000..34335bb
Binary files /dev/null and b/screenshots/round11-header.png differ
diff --git a/screenshots/round12-bell-fixed.png b/screenshots/round12-bell-fixed.png
new file mode 100644
index 0000000..a2442de
Binary files /dev/null and b/screenshots/round12-bell-fixed.png differ
diff --git a/screenshots/round12-bell.png b/screenshots/round12-bell.png
new file mode 100644
index 0000000..db9114e
Binary files /dev/null and b/screenshots/round12-bell.png differ
diff --git a/screenshots/round13-sidebar.png b/screenshots/round13-sidebar.png
new file mode 100644
index 0000000..5fc4156
Binary files /dev/null and b/screenshots/round13-sidebar.png differ
diff --git a/screenshots/round14-audio-header.png b/screenshots/round14-audio-header.png
new file mode 100644
index 0000000..911c7ab
Binary files /dev/null and b/screenshots/round14-audio-header.png differ
diff --git a/screenshots/round15-listener-sticky.png b/screenshots/round15-listener-sticky.png
new file mode 100644
index 0000000..3a270c9
Binary files /dev/null and b/screenshots/round15-listener-sticky.png differ
diff --git a/screenshots/round16-creds-banner.png b/screenshots/round16-creds-banner.png
new file mode 100644
index 0000000..9af891c
Binary files /dev/null and b/screenshots/round16-creds-banner.png differ
diff --git a/screenshots/round22-right-actions.png b/screenshots/round22-right-actions.png
new file mode 100644
index 0000000..2b07623
Binary files /dev/null and b/screenshots/round22-right-actions.png differ
diff --git a/screenshots/round23-audio-inputs-under-streams.png b/screenshots/round23-audio-inputs-under-streams.png
new file mode 100644
index 0000000..d9d8efc
Binary files /dev/null and b/screenshots/round23-audio-inputs-under-streams.png differ
diff --git a/screenshots/round4-dashboard-expanded.png b/screenshots/round4-dashboard-expanded.png
new file mode 100644
index 0000000..bdcff83
Binary files /dev/null and b/screenshots/round4-dashboard-expanded.png differ
diff --git a/screenshots/round4-dashboard.png b/screenshots/round4-dashboard.png
new file mode 100644
index 0000000..98cf188
Binary files /dev/null and b/screenshots/round4-dashboard.png differ
diff --git a/screenshots/round4-docs.png b/screenshots/round4-docs.png
new file mode 100644
index 0000000..4cc76de
Binary files /dev/null and b/screenshots/round4-docs.png differ
diff --git a/screenshots/round5-play-button.png b/screenshots/round5-play-button.png
new file mode 100644
index 0000000..a4c4312
Binary files /dev/null and b/screenshots/round5-play-button.png differ
diff --git a/screenshots/round6-left-actions.png b/screenshots/round6-left-actions.png
new file mode 100644
index 0000000..ab8e609
Binary files /dev/null and b/screenshots/round6-left-actions.png differ
diff --git a/screenshots/round7-light-drawer.png b/screenshots/round7-light-drawer.png
new file mode 100644
index 0000000..900a5ba
Binary files /dev/null and b/screenshots/round7-light-drawer.png differ
diff --git a/screenshots/round7-light-edit-select.png b/screenshots/round7-light-edit-select.png
new file mode 100644
index 0000000..a7e2ce7
Binary files /dev/null and b/screenshots/round7-light-edit-select.png differ
diff --git a/screenshots/round8-admin-banner.png b/screenshots/round8-admin-banner.png
new file mode 100644
index 0000000..aaa3fb2
Binary files /dev/null and b/screenshots/round8-admin-banner.png differ
diff --git a/screenshots/round8-listener-banner.png b/screenshots/round8-listener-banner.png
new file mode 100644
index 0000000..3faa7d0
Binary files /dev/null and b/screenshots/round8-listener-banner.png differ
diff --git a/screenshots/round9-admin-lightbox.png b/screenshots/round9-admin-lightbox.png
new file mode 100644
index 0000000..5232853
Binary files /dev/null and b/screenshots/round9-admin-lightbox.png differ
diff --git a/screenshots/round9-admin.png b/screenshots/round9-admin.png
new file mode 100644
index 0000000..39a3923
Binary files /dev/null and b/screenshots/round9-admin.png differ
diff --git a/screenshots/round9-lightbox-listener.png b/screenshots/round9-lightbox-listener.png
new file mode 100644
index 0000000..ddf5ab9
Binary files /dev/null and b/screenshots/round9-lightbox-listener.png differ
diff --git a/screenshots/sticky-admin-scrolled.png b/screenshots/sticky-admin-scrolled.png
new file mode 100644
index 0000000..4d926d1
Binary files /dev/null and b/screenshots/sticky-admin-scrolled.png differ
diff --git a/screenshots/sticky-listener-scrolled.png b/screenshots/sticky-listener-scrolled.png
new file mode 100644
index 0000000..ad19170
Binary files /dev/null and b/screenshots/sticky-listener-scrolled.png differ
diff --git a/screenshots/telemetry-switch-admin-card.png b/screenshots/telemetry-switch-admin-card.png
new file mode 100644
index 0000000..256f0e6
Binary files /dev/null and b/screenshots/telemetry-switch-admin-card.png differ
diff --git a/screenshots/ux-dashboard-dark.png b/screenshots/ux-dashboard-dark.png
new file mode 100644
index 0000000..573766e
Binary files /dev/null and b/screenshots/ux-dashboard-dark.png differ
diff --git a/screenshots/ux-dashboard-light.png b/screenshots/ux-dashboard-light.png
new file mode 100644
index 0000000..05fc031
Binary files /dev/null and b/screenshots/ux-dashboard-light.png differ
diff --git a/screenshots/ux-docs.png b/screenshots/ux-docs.png
new file mode 100644
index 0000000..fa10e61
Binary files /dev/null and b/screenshots/ux-docs.png differ
diff --git a/screenshots/ux-listener-dark.png b/screenshots/ux-listener-dark.png
new file mode 100644
index 0000000..8ece6a2
Binary files /dev/null and b/screenshots/ux-listener-dark.png differ
diff --git a/screenshots/ux-listener-mobile-playing.png b/screenshots/ux-listener-mobile-playing.png
new file mode 100644
index 0000000..54144f5
Binary files /dev/null and b/screenshots/ux-listener-mobile-playing.png differ
diff --git a/screenshots/ux-listener-playing-dark.png b/screenshots/ux-listener-playing-dark.png
new file mode 100644
index 0000000..8ece6a2
Binary files /dev/null and b/screenshots/ux-listener-playing-dark.png differ
diff --git a/screenshots/ux-listener-playing-light.png b/screenshots/ux-listener-playing-light.png
new file mode 100644
index 0000000..1026212
Binary files /dev/null and b/screenshots/ux-listener-playing-light.png differ
diff --git a/screenshots/ux-login.png b/screenshots/ux-login.png
new file mode 100644
index 0000000..895a20a
Binary files /dev/null and b/screenshots/ux-login.png differ
diff --git a/scripts/check-design-tokens.mjs b/scripts/check-design-tokens.mjs
new file mode 100644
index 0000000..ec7bc58
--- /dev/null
+++ b/scripts/check-design-tokens.mjs
@@ -0,0 +1,133 @@
+#!/usr/bin/env node
+/**
+ * Design-token + UI-rule integrity linter (adopted from the devops repo's
+ * check-conflicts.mjs convention, 2026-10-28).
+ *
+ * Enforces the "UI rules (enforced)" section of CLAUDE.md mechanically so
+ * CI can fail before review:
+ *   R1 hex-color   — no hardcoded 6-digit hex colors outside the token
+ *                    sources (tokens.css, ui.css)
+ *   R2 gray-class  — no dark-only Tailwind gray-* classes (use semantic
+ *                    tokens: surface, muted, line, accent)
+ *   R3 native-dlg  — no alert()/confirm()/prompt() (use the page toast)
+ *   R4 runtime-cdn — no runtime CDN references (offline rule)
+ *
+ * Existing debt is grandfathered through scripts/design-token-baseline.json
+ * (per file+rule violation COUNTS). CI fails only on NEW violations. To
+ * accept new debt deliberately:
+ *   node scripts/check-design-tokens.mjs --update-baseline
+ * and commit the baseline with your reasoning.
+ */
+import { readFileSync, writeFileSync, existsSync, readdirSync, statSync } from 'node:fs';
+import { join, relative } from 'node:path';
+import { createRequire } from 'node:module';
+
+const require_ = createRequire(import.meta.url);
+
+const ROOT = join(import.meta.dirname, '..');
+const BASELINE_PATH = join(ROOT, 'scripts', 'design-token-baseline.json');
+
+const TOKEN_SOURCES = new Set([
+  'public/assets/css/tokens.css',
+  'public/assets/css/ui.css',
+]);
+
+const SCAN_ROOTS = ['public/components', 'public/assets/js', 'src'];
+const SCAN_FILES = ['public/index.html', 'public/streams.html',
+  'public/showcase.html', 'public/docs.html'];
+
+const RULES = {
+  'hex-color': (text) => (text.match(/#[0-9a-fA-F]{6}\b/g) || []).length,
+  'gray-class': (text) => (text.match(/(?:bg|text|border|from|to|via|ring|fill|stroke|placeholder)-gray-\d+/g) || []).length,
+  'native-dlg': (text) => (text.match(/\b(?:alert|confirm|prompt)\s*\(/g) || []).length,
+  'runtime-cdn': (text) => (text.match(/https?:\/\/(?:[a-z0-9-]+\.)*(?:cdn\.|unpkg\.com|jsdelivr\.net|fonts\.googleapis\.com|fonts\.gstatic\.com)/g) || []).length,
+};
+
+function walkDir(dir) {
+  let entries;
+  try { entries = readdirSync(dir); } catch { return []; }
+  const out = [];
+  for (const e of entries) {
+    const full = join(dir, e);
+    let st;
+    try { st = statSync(full); } catch { continue; }
+    if (st.isDirectory()) out.push(...walkDir(full));
+    else out.push(full);
+  }
+  return out;
+}
+
+function collectFiles() {
+  const files = SCAN_FILES.map((f) => join(ROOT, f)).filter((f) => existsSync(f));
+  for (const r of SCAN_ROOTS) {
+    const abs = join(ROOT, r);
+    if (!existsSync(abs)) continue;
+    files.push(...walkDir(abs).filter((f) => f.endsWith('.js') || f.endsWith('.html')));
+  }
+  return [...new Set(files)];
+}
+
+function assertCleanTree(update) {
+  // A baseline captured from a dirty working tree captures the WRONG tree:
+  // CI checks the commit, not the desk. Refuse --update-baseline when any
+  // scanned-relevant file differs from HEAD (learned the hard way 2026-10-28).
+  if (!update) return;
+  const { execSync } = require_('node:child_process');
+  let dirty;
+  try {
+    dirty = execSync('git status --porcelain', { cwd: ROOT, encoding: 'utf8' })
+      .split('\n').filter((l) => l.trim() && !l.startsWith('??'));
+  } catch {
+    return; // not a git repo (or git missing): proceed
+  }
+  if (dirty.length) {
+    console.error('REFUSING --update-baseline: working tree has uncommitted changes:');
+    dirty.forEach((l) => console.error('  ' + l));
+    console.error('Commit or stash first so the baseline describes the exact tree CI will check.');
+    process.exit(1);
+  }
+}
+
+function main() {
+  const update = process.argv.includes('--update-baseline');
+  assertCleanTree(update);
+  const found = {};
+  for (const abs of collectFiles()) {
+    const rel = relative(ROOT, abs).replaceAll('\\', '/');
+    const text = readFileSync(abs, 'utf8');
+    for (const [rule, countOf] of Object.entries(RULES)) {
+      if (rule === 'hex-color' && TOKEN_SOURCES.has(rel)) continue;
+      const n = countOf(text);
+      if (n > 0) found[`${rel}:${rule}`] = n;
+    }
+  }
+
+  if (process.argv.includes('--update-baseline')) {
+    writeFileSync(BASELINE_PATH, JSON.stringify(found, null, 2) + '\n');
+    const total = Object.values(found).reduce((a, b) => a + b, 0);
+    console.log(`baseline updated: ${Object.keys(found).length} file-rule entries, ${total} violations`);
+    return;
+  }
+
+  const baseline = existsSync(BASELINE_PATH)
+    ? JSON.parse(readFileSync(BASELINE_PATH, 'utf8'))
+    : {};
+
+  let bad = 0;
+  for (const [key, n] of Object.entries(found)) {
+    const allowed = baseline[key] ?? 0;
+    if (n > allowed) {
+      console.error(`FAIL ${key}: ${n} violations (baseline ${allowed})`);
+      bad += n - allowed;
+    }
+  }
+  if (bad > 0) {
+    console.error(`\n${bad} NEW UI-rule violation(s). Fix them, or accept deliberately:`);
+    console.error('  node scripts/check-design-tokens.mjs --update-baseline  # then commit with reasoning');
+    process.exit(1);
+  }
+  const total = Object.values(found).reduce((a, b) => a + b, 0);
+  console.log(`design tokens OK — ${total} grandfathered violations, 0 new`);
+}
+
+main();
diff --git a/scripts/design-token-baseline.json b/scripts/design-token-baseline.json
new file mode 100644
index 0000000..333c879
--- /dev/null
+++ b/scripts/design-token-baseline.json
@@ -0,0 +1,30 @@
+{
+  "public/index.html:hex-color": 39,
+  "public/index.html:gray-class": 30,
+  "public/streams.html:hex-color": 46,
+  "public/streams.html:gray-class": 18,
+  "public/components/ComponentManager.js:hex-color": 1,
+  "public/components/ComponentManager.js:gray-class": 4,
+  "public/components/ContactManager.js:gray-class": 11,
+  "public/components/EventManager.js:gray-class": 15,
+  "public/components/FFmpegStreamsManager.js:hex-color": 3,
+  "public/components/FFmpegStreamsManager.js:gray-class": 37,
+  "public/components/FFmpegStreamsManager.js:native-dlg": 3,
+  "public/components/FileBrowser.js:hex-color": 3,
+  "public/components/FileBrowser.js:gray-class": 18,
+  "public/components/FooterComponent.js:native-dlg": 1,
+  "public/components/HeaderComponent.js:hex-color": 3,
+  "public/components/HeaderComponent.js:gray-class": 1,
+  "public/components/HeaderComponent.js:native-dlg": 1,
+  "public/components/IcecastManager.js:gray-class": 4,
+  "public/components/LobbyMusicPlayer.js:hex-color": 5,
+  "public/components/LobbyMusicPlayer.js:gray-class": 31,
+  "public/components/UpdateNotification.js:gray-class": 14,
+  "public/components/UpdateNotification.js:native-dlg": 1,
+  "public/assets/js/boot.js:hex-color": 4,
+  "public/assets/js/notice-dismiss.js:gray-class": 3,
+  "public/assets/js/qr-share.js:hex-color": 8,
+  "public/assets/js/qr-share.js:native-dlg": 1,
+  "src/routes/system.js:hex-color": 2,
+  "src/services/TelemetryService.js:native-dlg": 2
+}
diff --git a/scripts/diag-listener.mjs b/scripts/diag-listener.mjs
new file mode 100644
index 0000000..adb5efb
--- /dev/null
+++ b/scripts/diag-listener.mjs
@@ -0,0 +1,34 @@
+/** Diagnose the listener page: console errors, failed requests, boot overlay state. */
+import puppeteer from 'puppeteer';
+
+const browser = await puppeteer.launch({ headless: 'new', defaultViewport: { width: 1360, height: 950 }, protocolTimeout: 120000, args: ['--no-sandbox', '--disable-gpu'] });
+const page = await browser.newPage();
+
+const consoleMsgs = [];
+page.on('console', m => consoleMsgs.push(`[${m.type()}] ${m.text().slice(0, 200)}`));
+page.on('pageerror', e => consoleMsgs.push(`[pageerror] ${e.message.slice(0, 300)}`));
+const failed = [];
+page.on('response', r => { if (r.status() >= 400) failed.push(`${r.status()} ${r.url().replace('http://localhost:3001', '')}`); });
+page.on('requestfailed', r => failed.push(`REQFAIL ${r.url().replace('http://localhost:3001', '')} ${r.failure()?.errorText}`));
+
+await page.goto('http://localhost:3001/streams', { waitUntil: 'networkidle2', timeout: 45000 }).catch(e => console.log('goto:', e.message));
+await new Promise(r => setTimeout(r, 14000)); // past the 12s boot timeout
+
+const state = await page.evaluate(() => ({
+  url: location.href,
+  bootOverlayPresent: !!document.querySelector('#boot-overlay, .boot-overlay, [id*="boot"]'),
+  bootOverlayVisible: (() => { const el = document.querySelector('#boot-overlay, .boot-overlay, [id*="boot"]'); return el ? getComputedStyle(el).display !== 'none' && getComputedStyle(el).opacity !== '0' : false; })(),
+  bodyChildren: document.body.children.length,
+  hasChannels: !!document.querySelector('#channels-list'),
+  channelRows: document.querySelectorAll('.chrow').length,
+  heroText: document.querySelector('h1, .hero h1')?.textContent?.slice(0, 60) || null,
+  noStreamsCard: !!document.querySelector('[class*="empty"], .no-streams') || document.body.textContent.includes('No Live Stream'),
+}));
+
+console.log('\n=== PAGE STATE ===');
+console.log(JSON.stringify(state, null, 2));
+console.log('\n=== HTTP >= 400 / FAILED REQUESTS ===');
+failed.length ? failed.forEach(f => console.log(f)) : console.log('(none)');
+console.log('\n=== CONSOLE (first 25) ===');
+consoleMsgs.slice(0, 25).forEach(m => console.log(m));
+await browser.close();
diff --git a/scripts/diag-processes.ps1 b/scripts/diag-processes.ps1
new file mode 100644
index 0000000..da217f8
--- /dev/null
+++ b/scripts/diag-processes.ps1
@@ -0,0 +1,3 @@
+Get-CimInstance Win32_Process -Filter "name='ffmpeg.exe'" | ForEach-Object {
+  Write-Output ("PID " + $_.ProcessId + ": " + $_.CommandLine)
+}
diff --git a/scripts/diag-toggle.mjs b/scripts/diag-toggle.mjs
new file mode 100644
index 0000000..c1feb50
--- /dev/null
+++ b/scripts/diag-toggle.mjs
@@ -0,0 +1,37 @@
+/** Diagnose why the Event Details collapse toggle click does nothing. */
+import puppeteer from 'puppeteer';
+const sleep = (ms) => new Promise(r => setTimeout(r, ms));
+const browser = await puppeteer.launch({ headless: 'new', defaultViewport: { width: 1360, height: 950 }, args: ['--no-sandbox', '--disable-gpu'] });
+const ap = await browser.newPage();
+ap.on('console', m => { const t = m.text(); if (t.includes('click') || t.includes('Event')) console.log('[console]', t.slice(0, 120)); });
+await ap.goto('http://localhost:3001/dashboard', { waitUntil: 'domcontentloaded' });
+await sleep(1500);
+if (new URL(ap.url()).pathname === '/login') {
+  await ap.type('#login-username', 'admin');
+  await ap.type('#login-password', 'lanstreamer123');
+  await ap.click('#login-submit');
+  await ap.waitForFunction(() => window.location.pathname === '/dashboard', { timeout: 20000 });
+}
+await ap.waitForSelector('[data-ls-collapse-toggle="event-details"]', { timeout: 20000 });
+await ap.evaluate(() => {
+  window.__clicks = [];
+  document.addEventListener('click', (e) => {
+    window.__clicks.push(e.target.tagName + '|' + (e.target.className.toString().slice(0, 40)));
+  }, true);
+});
+const connected = await ap.evaluate(() => {
+  const btn = document.querySelector('[data-ls-collapse-toggle="event-details"]');
+  return { connected: btn.isConnected };
+});
+console.log('button connected:', JSON.stringify(connected));
+const btnBox = await (await ap.$('[data-ls-collapse-toggle="event-details"]')).boundingBox();
+console.log('button box:', JSON.stringify(btnBox));
+await ap.click('[data-ls-collapse-toggle="event-details"]');
+await sleep(600);
+const log = await ap.evaluate(() => ({
+  clicks: window.__clicks,
+  stored: localStorage.getItem('ls-collapse:event-details'),
+  ariaNow: document.querySelector('[data-ls-collapse-toggle="event-details"]')?.getAttribute('aria-expanded')
+}));
+console.log('after click:', JSON.stringify(log, null, 1));
+await browser.close();
diff --git a/scripts/fetch-vendor-binaries.mjs b/scripts/fetch-vendor-binaries.mjs
new file mode 100644
index 0000000..921faee
--- /dev/null
+++ b/scripts/fetch-vendor-binaries.mjs
@@ -0,0 +1,77 @@
+#!/usr/bin/env node
+/**
+ * Populate vendor/ with the binaries the installer bundles (run before
+ * electron-builder — npm run electron:build:win does it automatically).
+ * Core logic lives in src/utils/binaries.js (shared with the runtime
+ * download-on-demand tier). This CLI adds the build-time conveniences:
+ * FFmpeg from the pinned official download (or --ffmpeg-from-path), the
+ * Icecast kit from the validated local portable / Program Files, and the
+ * GPL license texts.
+ *
+ * vendor/ is gitignored — binaries live in builds/releases, not in git.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import os from 'node:os';
+import { execSync } from 'node:child_process';
+import {
+  downloadPinnedFFmpeg,
+  installFFmpegFromZip,
+  installIcecastKit,
+  writeIcecastTemplate,
+  fetchLicenseTexts
+} from '../src/utils/binaries.js';
+
+const root = path.resolve(import.meta.dirname, '..');
+const vendor = path.join(root, 'vendor');
+const args = new Set(process.argv.slice(2));
+
+const ICECAST_KIT_SOURCES = [
+  process.env.ICECAST_KIT_DIR,
+  path.join(os.homedir(), 'Tools', 'icecast-2.5.0'), // validated portable 2.5.0
+  'C:\\Program Files (x86)\\Icecast',
+  'C:\\Program Files\\Icecast'
+].filter(Boolean);
+
+const mb = (n) => (n / 1024 / 1024).toFixed(1) + ' MB';
+
+// ---- FFmpeg (pinned official essentials build; --ffmpeg-from-path for offline builds) ----
+const ffmpegExe = path.join(vendor, 'ffmpeg', 'ffmpeg.exe');
+if (fs.existsSync(ffmpegExe) && !args.has('--force')) {
+  console.log(`[ffmpeg] already vendored (${mb(fs.statSync(ffmpegExe).size)}) — use --force to refresh`);
+} else if (args.has('--ffmpeg-from-path')) {
+  const where = execSync('where ffmpeg', { encoding: 'utf8', windowsHide: true }).trim().split('\n')[0].trim();
+  fs.mkdirSync(path.dirname(ffmpegExe), { recursive: true });
+  fs.copyFileSync(where, ffmpegExe);
+  console.log(`[ffmpeg] copied from PATH (${where}, ${mb(fs.statSync(ffmpegExe).size)}) — NOTE: unpinned, build-machine binary`);
+} else if (process.env.FFMPEG_ZIP && fs.existsSync(process.env.FFMPEG_ZIP)) {
+  installFFmpegFromZip(vendor, process.env.FFMPEG_ZIP, null);
+  console.log(`[ffmpeg] extracted from FFMPEG_ZIP=${process.env.FFMPEG_ZIP}`);
+} else {
+  console.log('[ffmpeg] downloading pinned official essentials build…');
+  const lastPct = { v: -1 };
+  await downloadPinnedFFmpeg(vendor, (bytes, total) => {
+    const pct = Math.floor((bytes / total) * 100);
+    if (pct >= lastPct.v + 10) { lastPct.v = pct; console.log(`  ${pct}% (${mb(bytes)})`); }
+  });
+  console.log(`[ffmpeg] vendored + SHA256 verified (${mb(fs.statSync(ffmpegExe).size)})`);
+}
+
+// ---- Icecast (validated local kit — official pinned kit download is the GO-LIVE-CHECKLIST follow-up) ----
+if (fs.existsSync(path.join(vendor, 'icecast', 'bin', 'icecast.exe')) && !args.has('--force')) {
+  console.log('[icecast] already vendored — use --force to refresh');
+} else {
+  const src = ICECAST_KIT_SOURCES.find(p => fs.existsSync(path.join(p, 'bin', 'icecast.exe')));
+  if (!src) throw new Error('[icecast] no local kit found — set ICECAST_KIT_DIR or install to a standard location, then re-run');
+  installIcecastKit(vendor, src);
+  console.log(`[icecast] kit copied from ${src} + clean stock template written (no local credentials ship)`);
+}
+// ALWAYS rewrite the template — pick up template changes (e.g. the loopback
+// bind) even when the kit itself is skipped, and never trust source xml.
+writeIcecastTemplate(vendor);
+
+// ---- GPL compliance ----
+await fetchLicenseTexts(vendor);
+console.log('[licenses] GPL texts + source-offer README written into vendor/licenses/');
+
+console.log(`\nvendor/ ready at ${path.relative(root, vendor)} (gitignored — ships via electron-builder extraResources)`);
diff --git a/scripts/generate-icons.mjs b/scripts/generate-icons.mjs
new file mode 100644
index 0000000..8587175
--- /dev/null
+++ b/scripts/generate-icons.mjs
@@ -0,0 +1,57 @@
+/**
+ * Regenerate the app icon set from the current brand mark (public/assets/logo-mark.svg):
+ *  - public/assets/favicon.png  (512px square PNG; tray + BrowserWindow + web fallback)
+ *  - electron/icon.ico          (16-256px multi-size; electron-builder win icon — NOT build/,
+ *                                which is gitignored and wouldn't survive a fresh clone)
+ * No server needed: node scripts/generate-icons.mjs
+ */
+import puppeteer from 'puppeteer';
+import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+
+const svgDataUrl = 'data:image/svg+xml;base64,' + readFileSync('public/assets/logo-mark.svg').toString('base64');
+const browser = await puppeteer.launch({ headless: 'new', args: ['--no-sandbox', '--disable-gpu'] });
+const page = await browser.newPage();
+
+async function renderPng(size) {
+  await page.setViewport({ width: size, height: size, deviceScaleFactor: 1 });
+  await page.setContent(`<body style="margin:0;background:transparent;">
+    <img src="${svgDataUrl}" style="width:${size}px;height:${size}px;display:block;">`, { waitUntil: 'load' });
+  await page.waitForFunction(() => document.querySelector('img')?.complete);
+  const img = await page.$('img');
+  return img.screenshot({ omitBackground: true }); // Uint8Array PNG with alpha
+}
+
+const SIZES = [16, 24, 32, 48, 64, 128, 256];
+const pngs = {};
+for (const s of SIZES) pngs[s] = await renderPng(s);
+pngs[512] = await renderPng(512);
+await browser.close();
+
+// favicon.png — square 512 render of the mark
+writeFileSync('public/assets/favicon.png', pngs[512]);
+console.log('wrote public/assets/favicon.png (' + pngs[512].length + ' bytes, 512x512)');
+
+// icon.ico — PNG-embedded multi-size (valid on Vista+; electron-builder accepts)
+mkdirSync('electron', { recursive: true });
+const entries = SIZES.map((s) => ({ size: s, data: pngs[s] }));
+const header = Buffer.alloc(6);
+header.writeUInt16LE(0, 0); header.writeUInt16LE(1, 2); header.writeUInt16LE(entries.length, 4);
+let offset = 6 + entries.length * 16;
+const dir = [];
+const blobs = [];
+for (const e of entries) {
+  const d = Buffer.alloc(16);
+  d.writeUInt8(e.size === 256 ? 0 : e.size, 0);
+  d.writeUInt8(e.size === 256 ? 0 : e.size, 1);
+  d.writeUInt8(0, 2); d.writeUInt8(0, 3);   // colors, reserved
+  d.writeUInt16LE(1, 4);                     // planes
+  d.writeUInt16LE(32, 6);                    // bit count
+  d.writeUInt32LE(e.data.length, 8);
+  d.writeUInt32LE(offset, 12);
+  dir.push(d);
+  blobs.push(Buffer.from(e.data));
+  offset += e.data.length;
+}
+const ico = Buffer.concat([header, ...dir, ...blobs]);
+writeFileSync('electron/icon.ico', ico);
+console.log('wrote electron/icon.ico (' + ico.length + ' bytes, sizes: ' + SIZES.join(',') + ')');
diff --git a/scripts/generate-screenshot-suite.mjs b/scripts/generate-screenshot-suite.mjs
new file mode 100644
index 0000000..8a66301
--- /dev/null
+++ b/scripts/generate-screenshot-suite.mjs
@@ -0,0 +1,131 @@
+/**
+ * Full UI screenshot suite for the external design review.
+ *
+ * Captures the dashboard (multi-stream, add-modal, empty) and the listener
+ * page (desktop + mobile), each in dark AND light mode, into
+ * images/screenshots/redesign-<date>/.
+ *
+ * Assumes the dev server is already running on :3001.
+ * Does NOT modify persistent stream state — the empty state is produced by
+ * deleting streams via the API; restore config/streams.json afterwards
+ * (see run-notes in the PR).
+ */
+import puppeteer from 'puppeteer';
+import fs from 'fs';
+import path from 'path';
+import { fileURLToPath } from 'url';
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const BASE = 'http://localhost:3001';
+const OUT_DIR = process.argv[2] || path.join(__dirname, '..', 'images', 'screenshots', 'redesign-2026-10-28');
+
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+
+async function main() {
+  fs.mkdirSync(OUT_DIR, { recursive: true });
+
+  const browser = await puppeteer.launch({
+    headless: 'new',
+    defaultViewport: { width: 1440, height: 1000 },
+    args: ['--no-sandbox', '--disable-dev-shm-usage', '--disable-gpu', '--no-first-run']
+  });
+  const page = await browser.newPage();
+
+  const setTheme = async (theme) => {
+    await page.evaluate((t) => localStorage.setItem('lanstreamer.theme', t), theme);
+  };
+
+  const shot = async (file, { fullPage = true } = {}) => {
+    await page.screenshot({ path: path.join(OUT_DIR, file), fullPage, type: 'png' });
+    console.log('📸', file);
+  };
+
+  const goto = async (url, settleMs) => {
+    await page.goto(url, { waitUntil: 'domcontentloaded', timeout: 30000 });
+    await sleep(settleMs);
+  };
+
+  const api = (path_, method = 'POST', body = null) =>
+    page.evaluate(async ({ p, m, b }) => {
+      const res = await fetch(p, {
+        method: m,
+        headers: { 'Content-Type': 'application/json' },
+        body: b ? JSON.stringify(b) : undefined
+      });
+      return { status: res.status, data: await res.json().catch(() => null) };
+    }, { p: path_, m: method, b: body });
+
+  // ---------- Dashboard: multi-stream (1 running, 1 error, rest stopped) ----------
+  await goto(`${BASE}/dashboard`, 9000); // icecast scan takes ~7s on cold load
+  await setTheme('dark');
+  await goto(`${BASE}/dashboard`, 9000);
+  await shot('01-dashboard-multi-dark.png');
+
+  await setTheme('light');
+  await page.reload({ waitUntil: 'domcontentloaded' });
+  await sleep(9000);
+  await shot('02-dashboard-multi-light.png');
+
+  // ---------- Dashboard: add-stream modal ----------
+  await setTheme('dark');
+  await page.reload({ waitUntil: 'domcontentloaded' });
+  await sleep(9000);
+  await page.click('#add-stream-btn');
+  await sleep(1500);
+  await shot('03-dashboard-add-modal-dark.png', { fullPage: false });
+
+  await setTheme('light');
+  await sleep(700);
+  await shot('04-dashboard-add-modal-light.png', { fullPage: false });
+  await page.keyboard.press('Escape');
+  await sleep(500);
+
+  // ---------- Listener: desktop (a stream is running) ----------
+  await page.setViewport({ width: 1280, height: 900 });
+  await setTheme('dark');
+  await goto(`${BASE}/streams`, 4500);
+  await shot('07-listener-desktop-dark.png');
+
+  await setTheme('light');
+  await page.reload({ waitUntil: 'domcontentloaded' });
+  await sleep(4500);
+  await shot('08-listener-desktop-light.png');
+
+  // ---------- Listener: mobile ----------
+  await page.setViewport({ width: 390, height: 844 });
+  await setTheme('dark');
+  await page.reload({ waitUntil: 'domcontentloaded' });
+  await sleep(4500);
+  await shot('09-listener-mobile-dark.png');
+
+  await setTheme('light');
+  await page.reload({ waitUntil: 'domcontentloaded' });
+  await sleep(4500);
+  await shot('10-listener-mobile-light.png');
+
+  // ---------- Dashboard: empty (delete all streams) ----------
+  await page.setViewport({ width: 1440, height: 1000 });
+  const status = await api('/api/streams/status', 'GET');
+  const ids = (status.data?.streams || []).map((s) => s.id);
+  for (const id of ids) {
+    await api(`/api/streams/delete`, 'POST', { id });
+  }
+  console.log(`🗑️ deleted ${ids.length} streams for empty-state shots`);
+
+  await setTheme('dark');
+  await goto(`${BASE}/dashboard`, 8000);
+  await shot('05-dashboard-empty-dark.png');
+
+  await setTheme('light');
+  await page.reload({ waitUntil: 'domcontentloaded' });
+  await sleep(8000);
+  await shot('06-dashboard-empty-light.png');
+
+  await browser.close();
+  console.log('✅ suite complete →', OUT_DIR);
+}
+
+main().catch((err) => {
+  console.error('❌ screenshot suite failed:', err.message);
+  process.exit(1);
+});
diff --git a/scripts/gui-test-evidence.mjs b/scripts/gui-test-evidence.mjs
new file mode 100644
index 0000000..cdd32c4
--- /dev/null
+++ b/scripts/gui-test-evidence.mjs
@@ -0,0 +1,120 @@
+/**
+ * GUI-test visual evidence (web-gui-tester pass, 2026-10-28).
+ * Real GUI clicks only — theme changes use the page's own toggle button.
+ *
+ * NOTE: this machine's Chromium renderer stops serving Page.captureScreenshot
+ * after ~4 captures per tab (then "Internal error" forever), so each test
+ * group runs on a fresh page. DOM verdicts are collected alongside shots.
+ */
+import puppeteer from 'puppeteer';
+import path from 'path';
+
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+const OUT = path.join(process.cwd(), 'gui-test-screenshots');
+
+const browser = await puppeteer.launch({
+  headless: 'new',
+  defaultViewport: { width: 1200, height: 900 },
+  protocolTimeout: 60000,
+  args: ['--no-sandbox', '--disable-gpu', '--disable-dev-shm-usage']
+});
+
+async function freshPage(url, settle = 1500) {
+  page?.close().catch(() => {});
+  page = await browser.newPage();
+  await page.goto(url, { waitUntil: 'domcontentloaded' });
+  await sleep(settle);
+  return page;
+}
+let page;
+const shot = async (n, tries = 3) => {
+  for (let a = 1; a <= tries; a++) {
+    try {
+      await page.screenshot({ path: path.join(OUT, n), type: 'jpeg', quality: 88 });
+      return;
+    } catch (e) {
+      console.log(`retry ${a} ${n}: ${e.message.slice(0, 50)}`);
+      await sleep(1200);
+    }
+  }
+  throw new Error(`shot failed: ${n}`);
+};
+const byText = (t) => page.evaluateHandle((txt) => [...document.querySelectorAll('button')].find((b) => b.textContent.includes(txt)), t);
+const results = {};
+
+// ---- T2: showcase in light (toggle clicked for real) ----
+await freshPage('http://localhost:3001/showcase.html');
+await page.click('[data-theme-toggle]');
+await sleep(800);
+results.t2 = await page.evaluate(() => ({
+  theme: document.documentElement.getAttribute('data-theme'),
+  logo: document.querySelector('img[data-theme-logo]')?.getAttribute('src'),
+  firstSwatch: document.querySelector('.sc-swatch > div:last-child')?.textContent.replace(/\s+/g, ' ').trim()
+}));
+await shot('t2-showcase-light.jpg');
+
+// ---- T3: toast stacking ----
+await freshPage('http://localhost:3001/showcase.html');
+await shot('t3-before.jpg');
+await (await byText('Burst ×3')).asElement().click();
+await sleep(700);
+await shot('t3-after-burst.jpg');
+results.t3 = await page.evaluate(() => [...document.querySelectorAll('#toast-stack .toast')].map((t) => ({
+  text: t.textContent.trim().slice(0, 24),
+  top: Math.round(t.getBoundingClientRect().top)
+})));
+
+// ---- T4: tagged replacement ----
+await freshPage('http://localhost:3001/showcase.html');
+await (await byText('Tagged replace demo')).asElement().click();
+await sleep(500);
+await shot('t4-connecting.jpg');
+await sleep(1700);
+await shot('t4-replaced.jpg');
+results.t4 = await page.evaluate(() => [...document.querySelectorAll('#toast-stack .toast')].map((t) => t.textContent.trim().slice(0, 40)));
+
+// ---- T5: bell badge + panel ----
+await freshPage('http://localhost:3001/showcase.html');
+await (await byText('Push error notification')).asElement().click();
+await sleep(400);
+results.badgeBefore = await page.evaluate(() => ({
+  badge: !!document.getElementById('header-bell-badge'),
+  lit: document.getElementById('header-bell-btn').classList.contains('has-notifications')
+}));
+await page.click('#header-bell-btn');
+await sleep(400);
+results.t5 = await page.evaluate(() => ({
+  panelVisible: !document.getElementById('lsn-panel').classList.contains('is-hidden'),
+  items: [...document.querySelectorAll('.lsn-item-title')].map((t) => t.textContent)
+}));
+await shot('t5-bell-panel.jpg');
+results.badgeAfter = await page.evaluate(() => !!document.getElementById('header-bell-badge'));
+
+// ---- T6: migrated add modal, dark + light ----
+await freshPage('http://localhost:3001/dashboard', 7000);
+await page.click('#add-stream-btn');
+await sleep(1500);
+results.t6dark = await page.evaluate(() => {
+  const m = document.querySelector('.fixed.inset-0 .glass-card');
+  return m ? {
+    labelColor: getComputedStyle(m.querySelector('label')).color,
+    goLiveClass: m.querySelector('button[type=submit]').className,
+    infoBoxBg: getComputedStyle(m.querySelector('.mb-4.p-3')).backgroundColor
+  } : 'modal missing';
+});
+await shot('t6-modal-dark.jpg');
+await page.click('[data-theme-toggle]');
+await sleep(800);
+results.t6light = await page.evaluate(() => {
+  const m = document.querySelector('.fixed.inset-0 .glass-card');
+  const input = m?.querySelector('input#stream-name');
+  return m ? {
+    labelColor: getComputedStyle(m.querySelector('label')).color,
+    inputBg: getComputedStyle(input).backgroundColor,
+    inputColor: getComputedStyle(input).color
+  } : 'modal missing';
+});
+await shot('t6-modal-light.jpg');
+
+console.log(JSON.stringify(results, null, 1));
+await browser.close();
diff --git a/scripts/prepare-telemetry-key.mjs b/scripts/prepare-telemetry-key.mjs
new file mode 100644
index 0000000..05c89d0
--- /dev/null
+++ b/scripts/prepare-telemetry-key.mjs
@@ -0,0 +1,49 @@
+#!/usr/bin/env node
+/**
+ * Prepare the build-time telemetry key before electron-builder packages the app.
+ *
+ * Key sources, in order: POSTHOG_KEY (+ optional POSTHOG_HOST) env, else the
+ * machine credential store (~/.secrets/posthog: POSTHOG_PROJECT_TOKEN /
+ * POSTHOG_HOST) — the same store TelemetryService reads at runtime, so the
+ * maintainer's machine can package telemetry without exporting anything.
+ *
+ * Writes electron/telemetry-key.json, which ships inside the packaged app.
+ * TelemetryService falls back to this file when neither env vars nor the
+ * operator's config/telemetry.json provide a key — so distributed installs
+ * send (consented) telemetry with zero user configuration.
+ *
+ * The file is gitignored (never committed). If no key resolves, any stale
+ * file is removed so the build simply ships without telemetry.
+ */
+import fs from 'fs';
+import path from 'path';
+import os from 'os';
+import { fileURLToPath } from 'url';
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const outFile = path.join(__dirname, '..', 'electron', 'telemetry-key.json');
+
+let key = process.env.POSTHOG_KEY || '';
+let host = process.env.POSTHOG_HOST || '';
+
+if (!key) {
+  try {
+    const store = path.join(os.homedir(), '.secrets', 'posthog');
+    if (fs.existsSync(store)) {
+      for (const line of fs.readFileSync(store, 'utf8').split('\n')) {
+        const m = line.match(/^\s*([A-Z0-9_]+)\s*=\s*(.+?)\s*$/);
+        if (!m) continue;
+        if (m[1] === 'POSTHOG_PROJECT_TOKEN' && !key) key = m[2];
+        if (m[1] === 'POSTHOG_HOST' && !host) host = m[2];
+      }
+    }
+  } catch { /* store unreadable — treat as no key */ }
+}
+
+if (!key) {
+  if (fs.existsSync(outFile)) fs.unlinkSync(outFile);
+  console.log('[telemetry-key] No key found (POSTHOG_KEY env or ~/.secrets/posthog) — packaging without telemetry.');
+} else {
+  fs.writeFileSync(outFile, JSON.stringify({ posthogKey: key, ...(host ? { posthogHost: host } : {}) }, null, 2));
+  console.log(`[telemetry-key] Injected for packaged build (${key.slice(0, 7)}…${host ? ', host ' + host : ''}).`);
+}
diff --git a/scripts/probe-drawer-light.mjs b/scripts/probe-drawer-light.mjs
new file mode 100644
index 0000000..0fa81f7
--- /dev/null
+++ b/scripts/probe-drawer-light.mjs
@@ -0,0 +1,28 @@
+import puppeteer from 'puppeteer';
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+const browser = await puppeteer.launch({ headless: 'new', defaultViewport: { width: 1360, height: 950 }, protocolTimeout: 120000, args: ['--no-sandbox', '--disable-gpu'] });
+const page = await browser.newPage();
+await page.goto('http://localhost:3001/dashboard', { waitUntil: 'domcontentloaded' });
+await sleep(7000);
+// force light theme via the toggle if needed
+let theme = await page.evaluate(() => document.documentElement.getAttribute('data-theme') || 'dark');
+if (theme !== 'light') { await page.click('[data-theme-toggle]'); await sleep(700); }
+await page.click('#add-stream-btn');
+await sleep(1000);
+const probe = await page.evaluate(() => {
+  const cs = (el) => el ? { bg: getComputedStyle(el).backgroundColor, color: getComputedStyle(el).color } : null;
+  return {
+    theme: document.documentElement.getAttribute('data-theme'),
+    drawer: cs(document.querySelector('.drawer')),
+    srcOpt: cs(document.querySelector('.src-opt')),
+    srcOptTitle: cs(document.querySelector('.src-opt .t div')),
+    srcOptSub: cs(document.querySelector('.src-opt .t .mono, .src-opt .t div:last-child')),
+    nameInput: cs(document.getElementById('stream-name')),
+    qualityLabel: cs(document.querySelector('.quality label')),
+    autoStartRow: cs(document.querySelector('#drawer-form > label')),
+    footerBtns: [...document.querySelectorAll('.drawer-f .btn')].map(b => cs(b)),
+  };
+});
+await page.screenshot({ path: 'gui-test-screenshots/probe-drawer-light.jpg', type: 'jpeg', quality: 88 });
+console.log(JSON.stringify(probe, null, 1));
+await browser.close();
diff --git a/scripts/stitch-screenshot-pdf.py b/scripts/stitch-screenshot-pdf.py
new file mode 100644
index 0000000..e5be679
--- /dev/null
+++ b/scripts/stitch-screenshot-pdf.py
@@ -0,0 +1,101 @@
+"""Stitch the UI screenshot suite into a single review PDF.
+
+One page per screenshot, page sized to the image (plus a caption band), so
+nothing is scaled oddly. A short cover page lists the contents. Metadata is
+set for the reviewer.
+"""
+import os
+import pymupdf
+
+SRC_DIR = os.path.join("images", "screenshots", "redesign-2026-10-28")
+OUT = os.path.join("images", "screenshots", "LANStreamer-UI-Review-2026-10-28.pdf")
+
+CAPTIONS = {
+    "01-dashboard-multi-dark.png": "1. Admin dashboard — multiple streams (dark) · one live, one error (collapsed details), rest stopped",
+    "02-dashboard-multi-light.png": "2. Admin dashboard — multiple streams (light)",
+    "03-dashboard-add-modal-dark.png": "3. Admin dashboard — add stream modal (dark)",
+    "04-dashboard-add-modal-light.png": "4. Admin dashboard — add stream modal (light)",
+    "05-dashboard-empty-dark.png": "5. Admin dashboard — no streams (dark)",
+    "06-dashboard-empty-light.png": "6. Admin dashboard — no streams (light)",
+    "07-listener-desktop-dark.png": "7. Listener page — desktop (dark)",
+    "08-listener-desktop-light.png": "8. Listener page — desktop (light)",
+    "09-listener-mobile-dark.png": "9. Listener page — mobile (dark)",
+    "10-listener-mobile-light.png": "10. Listener page — mobile (light)",
+}
+
+BG = (0.05, 0.06, 0.08)     # near-black, matches the app's dark surfaces
+FG = (0.95, 0.96, 0.98)
+MUTED = (0.60, 0.64, 0.70)
+ACCENT = (0.0, 0.68, 0.94)  # LANStreamer cyan
+
+PAD = 24            # page padding around the image
+CAPTION_H = 40      # caption band height
+
+
+def main():
+    doc = pymupdf.open()
+
+    # ---- Cover ----
+    cover = doc.new_page(width=842, height=595)  # A4 landscape
+    cover_rect = cover.rect
+    cover.draw_rect(cover_rect, color=None, fill=BG)
+    logo = os.path.join("public", "assets", "logo.svg")
+    if os.path.exists(logo):
+        try:
+            cover.insert_image(pymupdf.Rect(60, 60, 320, 108), filename=logo, keep_proportion=True)
+        except Exception:
+            pass
+    cover.insert_textbox(
+        pymupdf.Rect(60, 150, 782, 200),
+        "LANStreamer — UI Review Package",
+        fontsize=30, fontname="hebo", color=FG,
+    )
+    cover.insert_textbox(
+        pymupdf.Rect(60, 205, 782, 240),
+        "Admin dashboard + listener page · dark & light · desktop & mobile",
+        fontsize=13, fontname="helv", color=MUTED,
+    )
+    y = 270
+    for caption in CAPTIONS.values():
+        cover.insert_textbox(pymupdf.Rect(70, y, 770, y + 16), caption, fontsize=10.5, fontname="helv", color=FG)
+        y += 19
+    cover.insert_textbox(
+        pymupdf.Rect(60, 535, 782, 560),
+        "Generated 2026-10-28 · for external design review",
+        fontsize=9, fontname="helv", color=MUTED,
+    )
+
+    # ---- One page per screenshot ----
+    for fname, caption in CAPTIONS.items():
+        path = os.path.join(SRC_DIR, fname)
+        if not os.path.exists(path):
+            print(f"!! missing {fname}, skipped")
+            continue
+        with pymupdf.open(path) as img_doc:
+            w, h = img_doc[0].rect.width, img_doc[0].rect.height
+        page_w = w + PAD * 2
+        page_h = h + PAD * 2 + CAPTION_H
+        page = doc.new_page(width=page_w, height=page_h)
+        page.draw_rect(page.rect, color=None, fill=BG)
+        page.insert_image(pymupdf.Rect(PAD, PAD + CAPTION_H, PAD + w, PAD + CAPTION_H + h), filename=path)
+        # Caption: accent tick + text
+        page.draw_line(pymupdf.Point(PAD, PAD + 16), pymupdf.Point(PAD + 22, PAD + 16), color=ACCENT, width=2.5)
+        page.insert_textbox(
+            pymupdf.Rect(PAD + 30, PAD + 4, page_w - PAD, PAD + 30),
+            caption, fontsize=12, fontname="hebo", color=FG,
+        )
+        print(f"page: {caption.split('·')[0].strip()}")
+
+    doc.set_metadata({
+        "title": "LANStreamer UI Review — 2026-10-28",
+        "author": "LANStreamer",
+        "subject": "Admin dashboard and listener page screenshots (dark/light, desktop/mobile) for external design review",
+        "creator": "LANStreamer screenshot suite",
+    })
+    doc.save(OUT, garbage=4, deflate=True)
+    size_kb = os.path.getsize(OUT) // 1024
+    print(f"saved {OUT} — {doc.page_count} pages, {size_kb} KB")
+
+
+if __name__ == "__main__":
+    main()
diff --git a/scripts/vendor-fonts.mjs b/scripts/vendor-fonts.mjs
new file mode 100644
index 0000000..9ffbdd6
--- /dev/null
+++ b/scripts/vendor-fonts.mjs
@@ -0,0 +1,82 @@
+#!/usr/bin/env node
+/**
+ * Download Google Fonts css2 stylesheets + woff2 files and rewrite them to local paths,
+ * so the UI works fully offline (LAN use case) and can be packaged for Electron.
+ *
+ * Usage: node scripts/vendor-fonts.mjs
+ * Output: public/assets/vendor/fonts/*.woff2 + public/assets/vendor/fonts/fonts.css
+ */
+import { fileURLToPath } from 'url';
+import fs from 'fs';
+import path from 'path';
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const OUT_DIR = path.join(__dirname, '..', 'public', 'assets', 'vendor', 'fonts');
+
+// Chrome UA so Google serves modern woff2 with unicode-range subsets
+const UA = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36';
+
+const FONT_CSS_URLS = [
+  // Inter weights used across dashboard + listener pages
+  'https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700;900&display=swap',
+  // Noto Sans weights (dashboard)
+  'https://fonts.googleapis.com/css2?family=Noto+Sans:wght@400;500;700;900&display=swap',
+  // Redesign (2026-10-28): UI + mono faces from the designer mock
+  'https://fonts.googleapis.com/css2?family=Space+Grotesk:wght@400;500;600;700&display=swap',
+  'https://fonts.googleapis.com/css2?family=JetBrains+Mono:wght@400;500&display=swap',
+  // Material Symbols Rounded: variable axes (listener page) and FILL@1 instance class (dashboard/login)
+  'https://fonts.googleapis.com/css2?family=Material+Symbols+Rounded:opsz,wght,FILL,GRAD@20..48,100..700,0..1,-50..200',
+  'https://fonts.googleapis.com/css2?family=Material+Symbols+Rounded:FILL@1',
+];
+
+async function main() {
+  fs.mkdirSync(OUT_DIR, { recursive: true });
+  const seenFiles = new Map(); // remote url -> local filename
+  const cssParts = [];
+  const classRules = new Map(); // keep .material-symbols-rounded class defs (deduped)
+
+  for (const url of FONT_CSS_URLS) {
+    const res = await fetch(url, { headers: { 'User-Agent': UA } });
+    if (!res.ok) throw new Error(`Failed to fetch ${url}: ${res.status}`);
+    let css = await res.text();
+
+    // Extract every font file URL in this stylesheet
+    const urls = [...css.matchAll(/url\((https:\/\/fonts\.gstatic\.com\/[^)]+)\)/g)].map(m => m[1]);
+    for (const fileUrl of urls) {
+      if (seenFiles.has(fileUrl)) continue;
+      const name = new URL(fileUrl).pathname.split('/').pop(); // e.g. inter-latin-400.woff2 style hash names
+      const local = `fonts/${name}`;
+      seenFiles.set(fileUrl, local);
+      const fontRes = await fetch(fileUrl, { headers: { 'User-Agent': UA } });
+      if (!fontRes.ok) throw new Error(`Failed to fetch font ${fileUrl}: ${fontRes.status}`);
+      const buf = Buffer.from(await fontRes.arrayBuffer());
+      fs.writeFileSync(path.join(OUT_DIR, name), buf);
+      console.log(`downloaded ${name} (${(buf.length / 1024).toFixed(0)} KB)`);
+    }
+
+    // Rewrite urls to relative local paths (fonts.css sits in the same dir as the woff2 files)
+    css = css.replace(/url\((https:\/\/fonts\.gstatic\.com\/[^)]+)\)/g, (_, u) => `url(${path.basename(new URL(u).pathname)})`);
+
+    // Capture/dedupe the .material-symbols-rounded helper class
+    for (const m of css.matchAll(/^\.material-symbols-rounded\s*\{[^}]*\}/gm)) {
+      classRules.set(m[0], true);
+    }
+    cssParts.push(css);
+  }
+
+  // Strip the class rules from raw css parts to avoid duplicates, then append once
+  const classRuleKeys = [...classRules.keys()];
+  let combined = cssParts
+    .map(c => c.replace(/^\.material-symbols-rounded\s*\{[^}]*\}\s*/gm, ''))
+    .join('\n\n');
+
+  combined += '\n\n/* Material Symbols Rounded icon class (from Google Fonts stylesheet) */\n'
+    + classRuleKeys.join('\n')
+    + '\n';
+
+  // Comments in css2 output reference the request URL; keep as provenance
+  fs.writeFileSync(path.join(OUT_DIR, 'fonts.css'), combined);
+  console.log(`\nwrote fonts.css (${(combined.length / 1024).toFixed(0)} KB) with ${seenFiles.size} font files`);
+}
+
+main().catch(err => { console.error(err); process.exit(1); });
diff --git a/scripts/verify-admin-creds.mjs b/scripts/verify-admin-creds.mjs
new file mode 100644
index 0000000..58ee36c
--- /dev/null
+++ b/scripts/verify-admin-creds.mjs
@@ -0,0 +1,93 @@
+/** Verify the in-app admin settings path end-to-end on a scratch port + scratch store:
+ *  card renders with defaults chip + banner → wrong current pw rejected inline →
+ *  change succeeds (toast, banner retires, chip flips, page stays logged in — no
+ *  bounce to /login despite the JWT rotation) → reload stays logged in → old
+ *  default login no longer works on the login page. */
+import puppeteer from 'puppeteer';
+const sleep = (ms) => new Promise(r => setTimeout(r, ms));
+const BASE = process.env.BASE_URL || 'http://localhost:3010';
+const browser = await puppeteer.launch({ headless: 'new', defaultViewport: { width: 1360, height: 950 }, protocolTimeout: 180000, args: ['--no-sandbox', '--disable-gpu'] });
+const page = await browser.newPage();
+const out = {};
+
+await page.goto(BASE + '/dashboard', { waitUntil: 'domcontentloaded' });
+await sleep(1500);
+if (new URL(page.url()).pathname === '/login') {
+  await page.type('#login-username', 'admin');
+  await page.type('#login-password', 'lanstreamer123');
+  await page.click('#login-submit');
+  await page.waitForFunction(() => window.location.pathname === '/dashboard', { timeout: 20000 });
+}
+await sleep(2500);
+
+// 1) Card + banner render with defaults
+out.card = await page.evaluate(() => ({
+  chip: document.getElementById('admin-account-chip')?.textContent,
+  chipWarn: document.getElementById('admin-account-chip')?.className.includes('chip-warn'),
+  bannerShown: !!document.querySelector('#admin-creds-banner .banner')
+}));
+
+console.log("phase1", JSON.stringify(out.card));
+// 2) Open the card, try a WRONG current password
+await page.click('[data-ls-collapse-toggle="admin-account"]');
+await sleep(400);
+await page.type('#admin-cur-pw', 'wrong-current');
+await page.type('#admin-new-user', 'op');
+await page.type('#admin-new-pw', 'new-secret-9');
+await page.type('#admin-new-pw2', 'new-secret-9');
+await page.click('#admin-save');
+await sleep(1200);
+out.wrongCurrent = await page.evaluate(() => ({
+  error: document.getElementById('admin-account-error')?.textContent,
+  stillOnDashboard: window.location.pathname === '/dashboard'
+}));
+
+console.log("phase2-wrongpw", JSON.stringify(out.wrongCurrent));
+// 3) Correct change
+await page.evaluate(() => { document.getElementById('admin-cur-pw').value = ''; });
+await page.type('#admin-cur-pw', 'lanstreamer123');
+await page.click('#admin-save');
+await sleep(2000);
+out.changed = await page.evaluate(() => ({
+  toast: !!document.querySelector('.toast-stack .toast'),
+  bannerGone: !document.querySelector('#admin-creds-banner .banner'),
+  chip: document.getElementById('admin-account-chip')?.textContent,
+  chipOff: document.getElementById('admin-account-chip')?.className.includes('chip-off'),
+  stillOnDashboard: window.location.pathname === '/dashboard', // race fix: no /login bounce
+  storedTokenIsNew: (localStorage.getItem('lsAdminToken') || '').length > 20
+}));
+await page.screenshot({ path: 'screenshots/admin-account-card.png' });
+
+console.log("phase3-changed", JSON.stringify(out.changed));
+// 4) Reload: session survives with the rotated token
+await page.reload({ waitUntil: 'domcontentloaded' });
+await sleep(2500);
+out.afterReload = await page.evaluate(() => ({
+  stayedLoggedIn: window.location.pathname === '/dashboard',
+  chip: document.getElementById('admin-account-chip')?.textContent
+}));
+
+console.log("phase4-reload", JSON.stringify(out.afterReload));
+// 5) Old default login is dead (isolated context — the main profile still
+//    holds the new token and /login would auto-forward)
+const ctx2 = await browser.createBrowserContext();
+const page2 = await ctx2.newPage();
+await page2.goto(BASE + '/login', { waitUntil: 'domcontentloaded' });
+await sleep(600);
+await page2.type('#login-username', 'admin');
+await page2.type('#login-password', 'lanstreamer123');
+await page2.click('#login-submit');
+await sleep(1500);
+out.oldLoginRejected = await page2.evaluate(() => window.location.pathname !== '/dashboard');
+await ctx2.close();
+
+await browser.close();
+console.log(JSON.stringify(out, null, 2));
+const pass = out.card.chip === 'admin' && out.card.chipWarn && out.card.bannerShown
+  && /incorrect/i.test(out.wrongCurrent.error || '') && out.wrongCurrent.stillOnDashboard
+  && out.changed.bannerGone && out.changed.chip === 'op' && out.changed.chipOff
+  && out.changed.stillOnDashboard && out.changed.storedTokenIsNew
+  && out.afterReload.stayedLoggedIn && out.afterReload.chip === 'op'
+  && out.oldLoginRejected;
+console.log(pass ? 'PASS' : 'FAIL');
+process.exit(pass ? 0 : 1);
diff --git a/scripts/verify-audio-continuity.mjs b/scripts/verify-audio-continuity.mjs
new file mode 100644
index 0000000..0b8a532
--- /dev/null
+++ b/scripts/verify-audio-continuity.mjs
@@ -0,0 +1,85 @@
+/** 30-second audio-continuity evidence: (1) proxy stream chunk-arrival gaps,
+ *  (2) in-browser MSE player event log — underruns, snaps, bufferedAhead trace.
+ *  Distinguishes upstream stalls (ffmpeg/icecast/proxy) from player-side
+ *  snap-to-live skips (each snap = audible skip by design). */
+import puppeteer from 'puppeteer';
+const sleep = (ms) => new Promise(r => setTimeout(r, ms));
+const base = process.env.BASE_URL || 'http://localhost:3001';
+const DURATION_MS = 30000;
+const out = {};
+
+// --- 1) Upstream: fetch the play proxy for 30s, timestamp every chunk
+{
+  const status = await (await fetch(base + '/api/streams/status')).json();
+  const id = status.streams.find(s => s.status === 'running')?.id;
+  if (!id) throw new Error('no running stream');
+  const t0 = Date.now();
+  const res = await fetch(`${base}/api/streams/play/${encodeURIComponent(id)}`, { cache: 'no-store' });
+  const reader = res.body.getReader();
+  const arrivals = [];
+  let bytes = 0;
+  const timer = setTimeout(() => reader.cancel().catch(() => {}), DURATION_MS);
+  for (;;) {
+    try {
+      const { done, value } = await reader.read();
+      if (done) break;
+      bytes += value.length;
+      arrivals.push({ t: Date.now() - t0, b: value.length });
+    } catch { break; }
+  }
+  clearTimeout(timer);
+  // gap analysis: any inter-chunk silence > 250ms means the upstream stalled
+  const gaps = [];
+  for (let i = 1; i < arrivals.length; i++) {
+    const gap = arrivals[i].t - arrivals[i - 1].t;
+    if (gap > 250) gaps.push({ afterMs: arrivals[i - 1].t, gapMs: gap });
+  }
+  out.upstream = {
+    seconds: +((arrivals.at(-1)?.t || 0) / 1000).toFixed(1),
+    chunks: arrivals.length,
+    totalKB: +(bytes / 1024).toFixed(0),
+    avgKBs: +(bytes / 1024 / ((arrivals.at(-1)?.t || 1) / 1000)).toFixed(1),
+    gapsOver250ms: gaps.length,
+    worstGapMs: gaps.length ? Math.max(...gaps.map(g => g.gapMs)) : 0,
+    gapList: gaps.slice(0, 8)
+  };
+}
+
+// --- 2) Player: MSE page for 30s, log every waiting/stalled/seeked + ahead trace
+const browser = await puppeteer.launch({ headless: 'new', defaultViewport: { width: 1360, height: 950 }, protocolTimeout: 180000, args: ['--no-sandbox', '--disable-gpu', '--autoplay-policy=no-user-gesture-required'] });
+const page = await browser.newPage();
+await page.goto(base + '/streams', { waitUntil: 'networkidle2', timeout: 30000 });
+await page.waitForSelector('.chrow:not(.off)', { timeout: 20000 });
+await sleep(2000);
+await page.click('.chrow:not(.off) .chplay');
+await sleep(2000);
+await page.evaluate(() => {
+  window.__evlog = [];
+  const sl = streamListener, a = sl.audioPlayer;
+  for (const ev of ['waiting', 'stalled', 'seeked', 'error']) a.addEventListener(ev, () => window.__evlog.push({ ev, t: Date.now(), ahead: sl.llPlayer ? sl.llPlayer.stats().bufferedAhead : null }));
+  window.__trace = [];
+  window.__tr = setInterval(() => {
+    if (sl.llPlayer) window.__trace.push(sl.llPlayer.stats().bufferedAhead);
+  }, 250);
+});
+await sleep(DURATION_MS);
+out.player = await page.evaluate(() => {
+  clearInterval(window.__tr);
+  const trace = window.__trace;
+  const snaps = window.__evlog.filter(e => e.ev === 'seeked');
+  const underruns = window.__evlog.filter(e => e.ev === 'waiting' || e.ev === 'stalled');
+  return {
+    aheadMin: Math.min(...trace), aheadMax: Math.max(...trace),
+    aheadAvg: +(trace.reduce((s, x) => s + x, 0) / trace.length).toFixed(2),
+    zeroAheadSamples: trace.filter(x => x === 0 || x === null).length,
+    seekedCount: snaps.length, underrunCount: underruns.length,
+    events: window.__evlog.slice(0, 15)
+  };
+});
+await browser.close();
+
+console.log(JSON.stringify(out, null, 2));
+const upstreamClean = out.upstream.gapsOver250ms === 0;
+console.log(upstreamClean
+  ? 'UPSTREAM CLEAN (no delivery gaps > 250ms) — breaks are player-side'
+  : 'UPSTREAM HAS GAPS — delivery stalls exist');
diff --git a/scripts/verify-auth.mjs b/scripts/verify-auth.mjs
new file mode 100644
index 0000000..d7b2eab
--- /dev/null
+++ b/scripts/verify-auth.mjs
@@ -0,0 +1,104 @@
+/**
+ * Browser verification: auth gate + round-4 UI fixes.
+ * Fresh page per group (this machine's Chromium dies after ~4 screenshots).
+ */
+import puppeteer from 'puppeteer';
+
+const BASE = 'http://localhost:3001';
+const SHOT = 'C:/Users/Username/Documents/github/LANStreamer/screenshots/round4';
+const results = {};
+const ok = (name, cond, extra = '') => {
+  results[name] = cond ? 'PASS' : 'FAIL';
+  console.log(`${cond ? 'PASS' : 'FAIL'}  ${name}${extra ? ' — ' + extra : ''}`);
+};
+
+const browser = await puppeteer.launch({ headless: 'new', defaultViewport: { width: 1360, height: 950 }, protocolTimeout: 120000, args: ['--no-sandbox', '--disable-gpu'] });
+
+// ---- Group 1: gate redirect + login page + wrong password + real login ----
+{
+  const page = await browser.newPage();
+  await page.goto(BASE + '/dashboard', { waitUntil: 'networkidle2', timeout: 30000 });
+  ok('dashboard w/o token redirects to /login', new URL(page.url()).pathname === '/login', page.url());
+
+  await page.waitForSelector('#login-form', { timeout: 10000 });
+  await page.type('#login-username', 'admin');
+  await page.type('#login-password', 'wrongpass');
+  await page.click('#login-submit');
+  await page.waitForSelector('#login-error', { visible: true, timeout: 10000 });
+  ok('wrong password shows error', (await page.$eval('#login-error', el => el.textContent)).includes('Invalid'));
+
+  await page.$eval('#login-password', el => { el.value = ''; });
+  await page.type('#login-password', 'lanstreamer123');
+  await Promise.all([
+    page.waitForNavigation({ waitUntil: 'networkidle2', timeout: 30000 }),
+    page.click('#login-submit')
+  ]).catch(() => {});
+  await page.waitForFunction(() => window.location.pathname === '/dashboard', { timeout: 15000 }).catch(() => {});
+  ok('correct login lands on /dashboard', new URL(page.url()).pathname === '/dashboard', page.url());
+  const token = await page.evaluate(() => localStorage.getItem('lsAdminToken'));
+  ok('token stored', !!token);
+
+  // Dashboard rendered with authed API calls: streams manager rows
+  await page.waitForFunction(() => document.querySelector('#audio-inputs-count') && document.querySelector('#audio-inputs-count').textContent.trim() !== '', { timeout: 30000 });
+  const chip = await page.$eval('#audio-inputs-count', el => el.textContent.trim());
+  ok('authed audio-devices call succeeded (count chip)', /\d/.test(chip), `chip="${chip}"`);
+
+  // Audio inputs collapsed by default
+  const collapsed = await page.$eval('[data-ls-collapse-body="audio-inputs"]', el => el.classList.contains('is-closed'));
+  ok('Audio inputs collapsed by default', collapsed);
+
+  // Refresh button works while collapsed (rescan)
+  await page.click('#refresh-audio-devices');
+  await new Promise(r => setTimeout(r, 2500));
+  const chip2 = await page.$eval('#audio-inputs-count', el => el.textContent.trim());
+  ok('refresh inputs button works', /\d/.test(chip2), `chip="${chip2}"`);
+
+  // Logout button present in header
+  ok('logout button in header', !!(await page.$('button[onclick*="logout"]')));
+  await page.screenshot({ path: SHOT + '-dashboard.png' });
+
+  // Expand audio inputs persists
+  await page.click('[data-ls-collapse-toggle="audio-inputs"]');
+  const expanded = await page.$eval('[data-ls-collapse-body="audio-inputs"]', el => !el.classList.contains('is-closed'));
+  ok('audio inputs expands on click', expanded);
+  await page.screenshot({ path: SHOT + '-dashboard-expanded.png' });
+  await page.close();
+}
+
+// ---- Group 2: remembered expansion + docs page ----
+{
+  const page = await browser.newPage();
+  await page.goto(BASE + '/dashboard', { waitUntil: 'networkidle2', timeout: 30000 });
+  await page.waitForSelector('[data-ls-collapse-body="audio-inputs"]', { timeout: 15000 });
+  const stillOpen = await page.$eval('[data-ls-collapse-body="audio-inputs"]', el => !el.classList.contains('is-closed'));
+  ok('audio inputs expansion remembered across reload', stillOpen);
+
+  await page.goto(BASE + '/docs', { waitUntil: 'networkidle2', timeout: 30000 });
+  const btns = await page.$$eval('header a.btn', els => els.map(e => e.textContent.trim()));
+  ok('docs header has no listener/dashboard buttons', btns.length === 0, JSON.stringify(btns));
+  const access = await page.evaluate(() =>
+    Array.from(document.querySelectorAll('#access p')).map(e => e.textContent).join(' '));
+  ok('docs admin section describes login', /protected by a login/i.test(access));
+  await page.screenshot({ path: SHOT + '-docs.png' });
+  await page.close();
+}
+
+// ---- Group 3: listener page unaffected ----
+{
+  const page = await browser.newPage();
+  await page.goto(BASE + '/streams', { waitUntil: 'networkidle2', timeout: 30000 });
+  ok('listener page loads (no login)', !page.url().includes('/login'));
+  const hasPlayerUi = await page.evaluate(() => !!document.querySelector('#channels-list, .onair, body'));
+  ok('listener page rendered', hasPlayerUi);
+  const status = await page.evaluate(async () => {
+    const r = await fetch('/api/streams/status');
+    return r.status;
+  });
+  ok('listener status API public', status === 200);
+  await page.close();
+}
+
+await browser.close();
+console.log('\n==== SUMMARY ====');
+for (const [k, v] of Object.entries(results)) console.log(`${v}  ${k}`);
+if (Object.values(results).includes('FAIL')) process.exit(1);
diff --git a/scripts/verify-banner.mjs b/scripts/verify-banner.mjs
new file mode 100644
index 0000000..8ed5508
--- /dev/null
+++ b/scripts/verify-banner.mjs
@@ -0,0 +1,100 @@
+/** Verify event banner: cover + lightbox on both pages, and the DEFAULT banner
+ *  (/assets/default-event.jpg — never the logo) whenever no custom image is set,
+ *  including right after the operator removes their own. Full cycle via the real API. */
+import puppeteer from 'puppeteer';
+import { readFile } from 'node:fs/promises';
+const sleep = (ms) => new Promise(r => setTimeout(r, ms));
+const base = 'http://localhost:3001';
+const out = {};
+
+// ---- API helpers (admin) ----
+const { token } = await (await fetch(base + '/api/auth/login', {
+  method: 'POST', headers: { 'Content-Type': 'application/json' },
+  body: JSON.stringify({ username: 'admin', password: 'lanstreamer123' })
+})).json();
+const auth = { Authorization: 'Bearer ' + token };
+const getConfig = async () => (await (await fetch(base + '/api/contact-details')).json());
+const saveConfig = async (cfg) => fetch(base + '/api/contact-details', {
+  method: 'POST', headers: { ...auth, 'Content-Type': 'application/json' }, body: JSON.stringify(cfg)
+});
+
+const original = await getConfig();
+if (original.eventImage) throw new Error('precondition: config.eventImage must be empty for the fallback test (got ' + original.eventImage + ')');
+
+const browser = await puppeteer.launch({ headless: 'new', defaultViewport: { width: 1360, height: 950 }, protocolTimeout: 180000, args: ['--no-sandbox', '--disable-gpu'] });
+const readListener = async () => {
+  const page = await browser.newPage();
+  await page.goto(base + '/streams', { waitUntil: 'networkidle2', timeout: 30000 });
+  await page.waitForSelector('#event-image-container:not(.hidden) img', { timeout: 15000 });
+  await sleep(800);
+  const state = await page.evaluate(() => {
+    const i = document.getElementById('event-image');
+    return {
+      src: new URL(i.src).pathname,
+      loaded: i.naturalWidth > 0,
+      fit: getComputedStyle(i).objectFit,
+      cursor: getComputedStyle(i).cursor,
+      alt: i.alt
+    };
+  });
+  // lightbox opens for whatever banner is showing
+  await page.click('#event-image');
+  await sleep(700);
+  state.lightbox = await page.evaluate(() => {
+    const img = document.querySelector('[role=dialog] img');
+    if (!img) return null;
+    const r = img.getBoundingClientRect();
+    return { fits: r.width <= innerWidth && r.height <= innerHeight, contain: getComputedStyle(img).objectFit };
+  });
+  await page.keyboard.press('Escape');
+  await page.close();
+  return state;
+};
+
+// ---- Phase A: no custom image → DEFAULT banner, never the logo ----
+out.fallback = await readListener();
+await browser.pages()[0] && null; // no-op keep-alive
+
+// ---- Phase B: custom image uploaded → custom shows; removed → default returns ----
+const fd = new FormData();
+fd.append('eventImage', new Blob([await readFile('public/assets/default-event.jpg'), { type: 'image/jpeg' }]), 'banner-test.jpg');
+const up = await (await fetch(base + '/api/upload-event-image', { method: 'POST', headers: auth, body: fd })).json();
+if (!up.imageUrl) throw new Error('upload failed: ' + JSON.stringify(up));
+await saveConfig({ ...original, eventImage: up.imageUrl });
+
+out.custom = await readListener();
+out.custom.isUpload = out.custom.src === up.imageUrl;
+
+// Admin preview shows the custom image (cover + lightbox)
+const ap = await browser.newPage();
+await ap.goto(base + '/dashboard', { waitUntil: 'domcontentloaded' });
+await sleep(1500);
+if (new URL(ap.url()).pathname === '/login') {
+  await ap.type('#login-username', 'admin');
+  await ap.type('#login-password', 'lanstreamer123');
+  await ap.click('#login-submit');
+  await ap.waitForFunction(() => window.location.pathname === '/dashboard', { timeout: 20000 });
+}
+await ap.waitForSelector('#event-manager img[data-lightbox]', { timeout: 20000 });
+await sleep(2500); // EventManager data re-render settle
+out.adminCustom = await ap.evaluate(() => {
+  const i = document.querySelector('#event-manager img[data-lightbox]');
+  if (!i) return null;
+  return { fit: getComputedStyle(i).objectFit, cursor: getComputedStyle(i).cursor, loaded: i.naturalWidth > 0 };
+});
+await ap.close();
+
+// Remove: file deleted + config cleared (what the admin card's X does)
+await fetch(base + '/api/remove-event-image', { method: 'POST', headers: { ...auth, 'Content-Type': 'application/json' }, body: JSON.stringify({ imageUrl: up.imageUrl }) });
+await saveConfig({ ...original, eventImage: '' });
+out.afterRemove = await readListener();
+await browser.close();
+
+const isDefault = (s) => s.src === '/assets/default-event.jpg' && s.loaded && s.fit === 'cover' && s.cursor === 'zoom-in' && s.lightbox && s.lightbox.fits;
+const pass = isDefault(out.fallback)
+  && out.custom.isUpload && out.custom.loaded && out.custom.fit === 'cover'
+  && out.adminCustom && out.adminCustom.fit === 'cover' && out.adminCustom.cursor === 'zoom-in' && out.adminCustom.loaded
+  && isDefault(out.afterRemove);
+console.log(JSON.stringify(out, null, 1));
+console.log(pass ? 'PASS' : 'FAIL');
+process.exit(pass ? 0 : 1);
diff --git a/scripts/verify-chplay.mjs b/scripts/verify-chplay.mjs
new file mode 100644
index 0000000..e892d1f
--- /dev/null
+++ b/scripts/verify-chplay.mjs
@@ -0,0 +1,51 @@
+/** Verify the channel-row play button renders and toggles BOTH ways on the live app:
+ *  play_arrow → (click) → pause → (click) → play_arrow → (click) → pause. */
+import puppeteer from 'puppeteer';
+const BASE = process.env.BASE_URL || 'http://localhost:3001';
+const sleep = (ms) => new Promise(r => setTimeout(r, ms));
+
+const browser = await puppeteer.launch({ headless: 'new', defaultViewport: { width: 1360, height: 950 }, protocolTimeout: 120000, args: ['--no-sandbox', '--disable-gpu'] });
+const page = await browser.newPage();
+await page.goto(BASE + '/streams', { waitUntil: 'networkidle2', timeout: 30000 });
+await page.waitForSelector('.chrow:not(.off)', { timeout: 20000 });
+
+const readState = () => page.evaluate(() => {
+  const row = document.querySelector('.chrow[aria-current="true"]') || document.querySelector('.chrow:not(.off)');
+  const audio = document.querySelector('audio, #audio-player');
+  return {
+    icon: row?.querySelector('.chplay .material-symbols-rounded')?.textContent?.trim(),
+    audioPaused: audio ? audio.paused : null,
+    playerCardVisible: !!document.querySelector('#player-card') && getComputedStyle(document.querySelector('#player-card')).display !== 'none'
+  };
+});
+
+const before = await readState();
+console.log('before click:', JSON.stringify(before));
+
+// 1) Click play → row icon flips to pause, audio playing, player card visible
+await page.click('.chrow:not(.off) .chplay');
+await sleep(9000);
+const afterPlay = await readState();
+console.log('after 1st click (play):', JSON.stringify(afterPlay));
+await page.screenshot({ path: 'screenshots/chplay-playing.png' });
+
+// 2) Click again → pause: icon MUST flip back to play_arrow, audio paused
+await page.click('.chrow[aria-current="true"] .chplay');
+await sleep(1500);
+const afterPause = await readState();
+console.log('after 2nd click (pause):', JSON.stringify(afterPause));
+await page.screenshot({ path: 'screenshots/chplay-paused.png' });
+
+// 3) Click a third time → resume: icon flips to pause again, audio playing
+await page.click('.chrow[aria-current="true"] .chplay');
+await sleep(3000);
+const afterResume = await readState();
+console.log('after 3rd click (resume):', JSON.stringify(afterResume));
+
+const pass = before.icon === 'play_arrow'
+  && afterPlay.icon === 'pause' && afterPlay.audioPaused === false && afterPlay.playerCardVisible
+  && afterPause.icon === 'play_arrow' && afterPause.audioPaused === true
+  && afterResume.icon === 'pause' && afterResume.audioPaused === false;
+console.log(pass ? 'PASS' : 'FAIL');
+await browser.close();
+process.exit(pass ? 0 : 1);
diff --git a/scripts/verify-client-telemetry.mjs b/scripts/verify-client-telemetry.mjs
new file mode 100644
index 0000000..8de05d7
--- /dev/null
+++ b/scripts/verify-client-telemetry.mjs
@@ -0,0 +1,57 @@
+/** Verify listener-side error capture end-to-end:
+ *  browser hook fires on a real playback error → POST /api/telemetry/client-event
+ *  → server forwards to PostHog (capture() real, not mocked). Sends 10+ events so
+ *  posthog-node's flushAt(10) fires — watch them arrive in PostHog Live. */
+import puppeteer from 'puppeteer';
+const BASE = process.env.BASE_URL || 'http://localhost:3001';
+const sleep = (ms) => new Promise(r => setTimeout(r, ms));
+const browser = await puppeteer.launch({ headless: 'new', defaultViewport: { width: 1360, height: 950 }, protocolTimeout: 120000, args: ['--no-sandbox', '--disable-gpu'] });
+const page = await browser.newPage();
+
+const responses = [];
+page.on('response', async r => {
+  if (r.url().includes('/api/telemetry/client-event')) {
+    let body = null;
+    try { body = await r.json(); } catch { /* ignore */ }
+    responses.push({ status: r.status(), body });
+  }
+});
+
+await page.goto(BASE + '/streams', { waitUntil: 'networkidle2', timeout: 30000 });
+await sleep(1500);
+
+// 1) REAL trigger: simulate the audio element failing mid-stream (same handler path)
+const triggered = await page.evaluate(() => {
+  const sl = streamListener;
+  if (!sl) return false;
+  sl.currentStream = 'electron_test_1_1793293640919';
+  sl.streams = [{ id: 'electron_test_1_1793293640919', name: 'Electron Test 1', label: 'S1', status: 'running' }];
+  sl.audioPlayer.dispatchEvent(new Event('error'));
+  return true;
+});
+await sleep(1500);
+
+// 2) Direct method call (grace + giveup path shape) + enough volume to hit flushAt(10)
+await page.evaluate(() => {
+  const sl = streamListener;
+  sl.reportClientEvent('reconnect_grace', { streamId: 'electron_test_1_1793293640919' });
+  for (let i = 0; i < 10; i++) {
+    sl.reportClientEvent('playback_stalled', { streamId: 'electron_test_1_1793293640919', note: 'flush volume ' + i });
+  }
+});
+await sleep(2000);
+await browser.close();
+
+const ok200 = responses.filter(r => r.status === 200);
+const captured = ok200.filter(r => r.body?.captured === true);
+console.log(JSON.stringify({
+  triggered,
+  totalResponses: responses.length,
+  ok: ok200.length,
+  capturedTrue: captured.length,
+  sample: responses[0]
+}, null, 2));
+const pass = triggered && responses.length >= 11 && ok200.length === responses.length && captured.length === ok200.length;
+console.log(pass ? 'PASS' : 'FAIL');
+console.log('If captured:true, events are queued in posthog-node; 10+ sent → flush fired → check PostHog Live for lanstreamer_client_playback_error / _stalled / _reconnect_grace');
+process.exit(pass ? 0 : 1);
diff --git a/scripts/verify-conflict.mjs b/scripts/verify-conflict.mjs
new file mode 100644
index 0000000..5d5d880
--- /dev/null
+++ b/scripts/verify-conflict.mjs
@@ -0,0 +1,129 @@
+/**
+ * Controlled conflict test against live state: create two throwaway streams on
+ * the same input, verify the busy error arrives + is closable, edit the holder
+ * to free the device, then the second stream starts. Cleans up after itself.
+ */
+import puppeteer from 'puppeteer';
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+const browser = await puppeteer.launch({ headless: 'new', defaultViewport: { width: 1360, height: 950 }, protocolTimeout: 180000, args: ['--no-sandbox', '--disable-gpu'] });
+const page = await browser.newPage();
+// Admin APIs need a login token (README: admin / lanstreamer123)
+const loginRes = await fetch('http://localhost:3001/api/auth/login', {
+  method: 'POST', headers: { 'Content-Type': 'application/json' },
+  body: JSON.stringify({ username: process.env.ADMIN_USERNAME || 'admin', password: process.env.ADMIN_PASSWORD || 'lanstreamer123' })
+});
+const authToken = (await loginRes.json().catch(() => null))?.token;
+const api = (p, m = 'POST', b = null) =>
+  fetch('http://localhost:3001' + p, {
+    method: m,
+    headers: { 'Content-Type': 'application/json', ...(authToken ? { Authorization: 'Bearer ' + authToken } : {}) },
+    body: b ? JSON.stringify(b) : undefined
+  }).then(r => r.json().catch(() => null));
+const results = {};
+
+await api('/api/streams/stop-all');
+// clean any leftovers from earlier runs
+{
+  const j = await api('/api/streams/status', 'GET');
+  for (const s of (j?.streams || [])) {
+    if (s.name === 'Conflict A' || s.name === 'Conflict B' || s.name === 'Conflict Probe') {
+      await api('/api/streams/delete', 'POST', { id: s.id });
+    }
+  }
+}
+const devices = (await api('/api/system/audio-devices', 'GET'))?.devices || [];
+// Pin to the primary VB cable (known-good on this machine) — NOT the first
+// device in the list, which is the broken OBS camera.
+const input = devices.find(d => d.id === 'cable-output-vb-audio-virtual-cable')
+  || devices.find(d => d.deviceType === 'input' && !d.fallback && !/obs/i.test(d.id));
+const other = devices.find(d => d.id === 'cable-a-output-vb-audio-virtual-cable-a')
+  || devices.find(d => d.deviceType === 'input' && d.id !== input?.id);
+results.input = input ? input.id : 'NO DEVICE';
+if (!input || !other) {
+  console.log(JSON.stringify({ fatal: 'need two distinct input devices', devices: devices.map(d => d.id) }));
+  process.exit(0);
+}
+
+// Create A (holder) and B (conflict) on the same input — log raw responses
+const aRes = await api('/api/streams/create', 'POST', { name: 'Conflict A', deviceId: input.id, bitrate: 96 });
+const bRes = await api('/api/streams/create', 'POST', { name: 'Conflict B', deviceId: input.id, bitrate: 96 });
+const a = aRes, b = bRes;
+results.created = { a: a?.streamId || a, b: b?.streamId || b };
+
+// Log the dashboard in (admin auth): quick form submit, then land on /dashboard
+await page.goto('http://localhost:3001/dashboard', { waitUntil: 'domcontentloaded' });
+await sleep(1500);
+if (new URL(page.url()).pathname === '/login') {
+  await page.waitForSelector('#login-form', { timeout: 10000 });
+  await page.type('#login-username', process.env.ADMIN_USERNAME || 'admin');
+  await page.type('#login-password', process.env.ADMIN_PASSWORD || 'lanstreamer123');
+  await page.click('#login-submit');
+  await page.waitForFunction(() => window.location.pathname === '/dashboard', { timeout: 20000 });
+}
+await sleep(8000);
+
+// Start A via GUI play button
+await page.evaluate((id) => {
+  const btn = document.querySelector(`[data-stream-row="${id}"] .playbtn`);
+  if (btn) btn.click();
+}, a.streamId);
+await sleep(6000);
+results.holderA = await page.evaluate(async (id) => {
+  const j = await (await fetch('/api/streams/status')).json();
+  const s = j.streams.find(x => x.id === id);
+  return { status: s?.status, err: s?.errorShort };
+}, a.streamId);
+
+// Drawer while A runs: dropdown must mark the input as used
+await page.click('#add-stream-btn');
+await sleep(900);
+results.drawerSelect = await page.evaluate((devId) => {
+  const sel = document.getElementById('stream-device');
+  const opt = sel ? [...sel.options].find(o => o.value === devId) : null;
+  const drawer = document.querySelector('.drawer');
+  const header = document.querySelector('header');
+  return {
+    drawerOpen: !!drawer,
+    usedByLabel: opt?.textContent || 'option missing',
+    drawerOverHeader: drawer && header ? parseInt(getComputedStyle(drawer).zIndex) > parseInt(getComputedStyle(header).zIndex) : null,
+  };
+}, input.id);
+await page.keyboard.press('Escape');
+await sleep(400);
+
+if (results.holderA.status === 'running') {
+  // Play B via GUI → must get the busy error (arriving, closable), NOT a hang
+  const t0 = Date.now();
+  await page.evaluate((id) => {
+    document.querySelector(`[data-stream-row="${id}"] .playbtn`)?.click();
+  }, b.streamId);
+  await sleep(5000);
+  results.conflictB = await page.evaluate(() => {
+    const toasts = [...document.querySelectorAll('#toast-stack .toast')].map(t => t.textContent.trim().slice(0, 70));
+    const errbox = document.querySelector('.errbox b')?.textContent;
+    return { toasts, firstErrbox: errbox };
+  });
+
+  // Edit A to the other device via the manager (same call the Edit modal makes)
+  const upd = await api('/api/streams/update', 'POST', { streamId: a.streamId, name: 'Conflict A', deviceId: other.id });
+  results.editA = upd?.message || upd?.error;
+  await sleep(3000);
+
+  // B must now start (device freed + no zombie holding it)
+  await page.evaluate((id) => {
+    document.querySelector(`[data-stream-row="${id}"] .playbtn`)?.click();
+  }, b.streamId);
+  await sleep(6000);
+  results.freedB = await page.evaluate(async (id) => {
+    const j = await (await fetch('/api/streams/status')).json();
+    const s = j.streams.find(x => x.id === id);
+    return { status: s?.status, err: s?.errorShort };
+  }, b.streamId);
+}
+
+// cleanup
+await api('/api/streams/stop-all');
+await api('/api/streams/delete', 'POST', { id: a.streamId });
+await api('/api/streams/delete', 'POST', { id: b.streamId });
+console.log(JSON.stringify(results, null, 1));
+await browser.close();
diff --git a/scripts/verify-fixes.mjs b/scripts/verify-fixes.mjs
new file mode 100644
index 0000000..671bb96
--- /dev/null
+++ b/scripts/verify-fixes.mjs
@@ -0,0 +1,106 @@
+/**
+ * Verification for the 2026-10-28 night feedback round.
+ * Fresh page per group (this machine's Chromium dies after ~4 captures/tab).
+ */
+import puppeteer from 'puppeteer';
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+const browser = await puppeteer.launch({ headless: 'new', defaultViewport: { width: 1360, height: 950 }, protocolTimeout: 180000, args: ['--no-sandbox', '--disable-gpu'] });
+const results = {};
+
+async function fresh(url, settle) {
+  const p = await browser.newPage();
+  await p.goto(url, { waitUntil: 'domcontentloaded' });
+  await sleep(settle);
+  return p;
+}
+
+// ---- Listener: player card hidden until playback; single no-live card ----
+await fetch('http://localhost:3001/api/streams/stop-all', { method: 'POST' }).catch(() => {});
+let page = await fresh('http://localhost:3001/streams', 6000);
+results.listenerIdle = await page.evaluate(() => ({
+  playerCardHidden: document.getElementById('player-card').style.display === 'none',
+  noLiveBoxVisible: !document.getElementById('no-streams-state').classList.contains('hidden'),
+  channelRows: document.querySelectorAll('#channels-list .chrow').length,
+  headerIconsBeforeTitle: 0, // toolbar only has brand + onair pill + theme (no stray icons)
+}));
+
+// Start a stream; player card must appear only AFTER clicking a channel
+const startRes = await fetch('http://localhost:3001/api/streams/restart', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ id: 'shot_stream_1' }) }).then(r => r.json()).catch(() => null);
+let waits = 0;
+while (waits++ < 8) {
+  await sleep(2000);
+  const ch = await page.evaluate(() => document.querySelectorAll('#channels-list .chrow:not(.off)').length);
+  if (ch > 0) break;
+}
+results.beforePlay = await page.evaluate(() => ({
+  playerCardHidden: document.getElementById('player-card').style.display === 'none',
+  noLiveBoxHidden: document.getElementById('no-streams-state').classList.contains('hidden'),
+}));
+await page.click('#channels-list .chrow:not(.off)');
+await sleep(3000);
+results.afterPlay = await page.evaluate(() => ({
+  playerCardVisible: document.getElementById('player-card').style.display !== 'none',
+  channelName: document.getElementById('player-channel').textContent,
+  playing: document.body.classList.contains('playing'),
+}));
+await page.screenshot({ path: 'gui-test-screenshots/fix-listener-playing.jpg', type: 'jpeg', quality: 85 });
+await page.close();
+
+// ---- Admin: stable icons + dropdown survives polls + no U+FFFD ----
+page = await fresh('http://localhost:3001/dashboard', 8000);
+results.deviceNames = await page.evaluate(() => {
+  const names = [...document.querySelectorAll('.arow .src')].map(el => el.textContent.trim());
+  return { hasReplacementChar: names.some(n => n.includes('\uFFFD')), sample: names.slice(0, 2) };
+});
+
+// open a ⋯ menu, wait past a poll cycle, it must still be open
+await page.click('.arow .menu .iconbtn');
+await sleep(7000);
+results.menuSurvivesPoll = await page.evaluate(() => !!document.querySelector('.arow .menu.open'));
+
+// icon vertical position stable across rows (top-aligned within a few px)
+results.iconAlignment = await page.evaluate(() => {
+  const rows = [...document.querySelectorAll('.arow')].slice(0, 4);
+  return rows.map(r => {
+    const actions = r.querySelector('.rowactions');
+    const badge = r.querySelector('.sid2');
+    return { actionsTop: Math.round(actions.getBoundingClientRect().top), badgeTop: Math.round(badge.getBoundingClientRect().top) };
+  });
+});
+results.icecastInfoPlain = await page.evaluate(() => {
+  const el = document.querySelector('[data-ls-collapse="icecast-info"]');
+  if (!el) return 'missing';
+  const cs = getComputedStyle(el);
+  return { plainClass: el.classList.contains('ls-collapse--plain'), border: cs.borderTopWidth, shadow: cs.boxShadow === 'none' ? 'none' : 'has' };
+});
+results.shareCard = await page.evaluate(() => ({
+  qrHiddenByDefault: document.getElementById('share-body-qr').classList.contains('hidden'),
+  showBtn: !!document.getElementById('share-show-qr'),
+}));
+await page.click('#share-show-qr');
+await sleep(800);
+results.shareQrOpen = await page.evaluate(() => ({
+  visible: !document.getElementById('share-body-qr').classList.contains('hidden'),
+  svgLoaded: !!document.querySelector('#share-qr svg'),
+}));
+await page.click('#share-qr-close');
+results.shareQrClosed = await page.evaluate(() => document.getElementById('share-body-qr').classList.contains('hidden'));
+await page.screenshot({ path: 'gui-test-screenshots/fix-dashboard.jpg', type: 'jpeg', quality: 85 });
+await page.close();
+
+// ---- Drawer light mode (post cache-bust, fresh load) ----
+page = await fresh('http://localhost:3001/dashboard', 7000);
+let theme = await page.evaluate(() => document.documentElement.getAttribute('data-theme') || 'dark');
+if (theme !== 'light') { await page.click('[data-theme-toggle]'); await sleep(700); }
+await page.click('#add-stream-btn');
+await sleep(1000);
+results.drawerLight = await page.evaluate(() => {
+  const d = document.querySelector('.drawer');
+  const t = d.querySelector('.src-opt .t div');
+  return { bg: getComputedStyle(d).backgroundColor, textColor: getComputedStyle(t).color };
+});
+await page.close();
+
+await fetch('http://localhost:3001/api/streams/stop-all', { method: 'POST' }).catch(() => {});
+console.log(JSON.stringify(results, null, 1));
+await browser.close();
diff --git a/scripts/verify-flat.mjs b/scripts/verify-flat.mjs
new file mode 100644
index 0000000..9f59671
--- /dev/null
+++ b/scripts/verify-flat.mjs
@@ -0,0 +1,64 @@
+/** Verify flat cards: no shadows/hover-lift/animations; only header shadowed (reduced). */
+import puppeteer from 'puppeteer';
+const sleep = (ms) => new Promise(r => setTimeout(r, ms));
+const browser = await puppeteer.launch({ headless: 'new', defaultViewport: { width: 1360, height: 950 }, protocolTimeout: 180000, args: ['--no-sandbox', '--disable-gpu'] });
+const out = {};
+
+async function sweep(page, label) {
+  out[label] = await page.evaluate(() => {
+    const cards = [...document.querySelectorAll('.glass-card')];
+    const shadowed = cards.filter(c => getComputedStyle(c).boxShadow !== 'none');
+    const animated = cards.filter(c => {
+      const cs = getComputedStyle(c);
+      return cs.animationName !== 'none' || (cs.transitionDuration !== '0s' && cs.transitionProperty !== 'all' && cs.transitionProperty !== 'none');
+    });
+    const header = document.querySelector('.header-glass');
+    const chevrons = [...document.querySelectorAll('.ls-collapse-chevron')];
+    const chevStillAnimating = chevrons.filter(c => getComputedStyle(c).transitionDuration !== '0s');
+    // drop-shadow FILTERS are shadows too (the logo-glow bug slipped past the box-shadow check)
+    const imgs = [...document.querySelectorAll('img')];
+    const filteredImgs = imgs.filter(i => getComputedStyle(i).filter !== 'none');
+    return {
+      cards: cards.length,
+      shadowedCards: shadowed.length,
+      animatedCards: animated.length,
+      headerShadow: header ? getComputedStyle(header).boxShadow.slice(0, 60) : 'no header',
+      chevrons: chevrons.length,
+      chevronsStillAnimated: chevStillAnimating.length,
+      filteredImgs: filteredImgs.length
+    };
+  });
+}
+
+// Dashboard
+const ap = await browser.newPage();
+await ap.goto('http://localhost:3001/dashboard', { waitUntil: 'domcontentloaded' });
+await sleep(1500);
+if (new URL(ap.url()).pathname === '/login') {
+  await ap.type('#login-username', 'admin');
+  await ap.type('#login-password', 'lanstreamer123');
+  await ap.click('#login-submit');
+  await ap.waitForFunction(() => window.location.pathname === '/dashboard', { timeout: 20000 });
+}
+await ap.waitForSelector('.glass-card', { timeout: 30000 });
+await sleep(2500);
+await sweep(ap, 'dashboard-dark');
+await ap.screenshot({ path: 'screenshots/round10-flat-dashboard-dark.png' });
+
+// Listener
+const lp = await browser.newPage();
+await lp.goto('http://localhost:3001/streams', { waitUntil: 'networkidle2', timeout: 30000 });
+await lp.waitForSelector('.glass-card', { timeout: 15000 });
+await sleep(1500);
+await sweep(lp, 'listener-dark');
+await lp.screenshot({ path: 'screenshots/round10-flat-listener-dark.png' });
+await lp.evaluate(() => { document.documentElement.setAttribute('data-theme', 'light'); });
+await sleep(500);
+await sweep(lp, 'listener-light');
+await lp.screenshot({ path: 'screenshots/round10-flat-listener-light.png' });
+
+await browser.close();
+console.log(JSON.stringify(out, null, 1));
+const ok = Object.values(out).every(r => r.shadowedCards === 0 && r.chevronsStillAnimated === 0 && r.filteredImgs === 0 && r.headerShadow.includes('8px'));
+console.log(ok ? 'PASS' : 'FAIL');
+process.exit(ok ? 0 : 1);
diff --git a/scripts/verify-header.mjs b/scripts/verify-header.mjs
new file mode 100644
index 0000000..e2aea70
--- /dev/null
+++ b/scripts/verify-header.mjs
@@ -0,0 +1,72 @@
+/** Verify: sticky header hides nothing — toasts above it, menus above it, opaque bg. */
+import puppeteer from 'puppeteer';
+const sleep = (ms) => new Promise(r => setTimeout(r, ms));
+const browser = await puppeteer.launch({ headless: 'new', defaultViewport: { width: 1360, height: 950 }, protocolTimeout: 180000, args: ['--no-sandbox', '--disable-gpu'] });
+const page = await browser.newPage();
+await page.goto('http://localhost:3001/dashboard', { waitUntil: 'domcontentloaded' });
+await sleep(1500);
+if (new URL(page.url()).pathname === '/login') {
+  await page.type('#login-username', 'admin');
+  await page.type('#login-password', 'lanstreamer123');
+  await page.click('#login-submit');
+  await page.waitForFunction(() => window.location.pathname === '/dashboard', { timeout: 20000 });
+}
+await page.waitForSelector('.arow', { timeout: 30000 });
+await sleep(2500);
+const out = {};
+
+// 1) Header opaque + sticky
+out.header = await page.evaluate(() => {
+  const h = document.querySelector('.header-glass');
+  const cs = getComputedStyle(h);
+  return {
+    sticky: cs.position === 'sticky',
+    bg: cs.backgroundColor,
+    opaque: (() => { const m = cs.backgroundColor.match(/rgba?\(([^)]+)\)/)[1].split(','); return m.length < 4 || parseFloat(m[3]) === 1; })(),
+    backdropFilter: cs.backdropFilter
+  };
+});
+
+// 2) Toast renders ABOVE the header (elementFromPoint hits the toast, not the header)
+await page.evaluate(() => window.LSToasts.show('Verification toast', 'success', { duration: 8000 }));
+await sleep(700);
+out.toast = await page.evaluate(() => {
+  const t = document.querySelector('.toast-stack .toast');
+  if (!t) return { fail: 'no toast' };
+  const r = t.getBoundingClientRect();
+  const hit = document.elementFromPoint(r.left + r.width / 2, r.top + 10);
+  return { toastRect: Math.round(r.top) + '..' + Math.round(r.bottom), covered: !!hit.closest('.header-glass'), onTop: !!hit.closest('.toast') };
+});
+
+// 3) ⋯ menu on the FIRST row (right below the header) renders above the header
+await page.evaluate(() => window.scrollTo(0, 0));
+await sleep(300);
+await page.click('.arow .menu .iconbtn');
+await sleep(600);
+out.menu = await page.evaluate(() => {
+  const pop = document.querySelector('.menu-pop');
+  const menu = pop && pop.parentElement;
+  if (!pop || !getComputedStyle(pop).display || getComputedStyle(pop).display === 'none') return { fail: 'menu not open' };
+  const r = pop.getBoundingClientRect();
+  const hit = document.elementFromPoint(r.left + 10, Math.max(r.top + 5, 0));
+  return { menuTop: Math.round(r.top), covered: !!hit?.closest?.('.header-glass'), onTop: !!hit?.closest?.('.menu') };
+});
+await page.screenshot({ path: 'screenshots/round11-header.png' });
+
+// 4) Scroll mid-page: header stays, content passes under an opaque bar
+await page.evaluate(() => window.scrollTo(0, 600));
+await sleep(400);
+out.scrolledHeaderVisible = await page.evaluate(() => {
+  const h = document.querySelector('.header-glass');
+  return h.getBoundingClientRect().top === 0;
+});
+await page.screenshot({ path: 'screenshots/round11-header-scrolled.png' });
+
+await browser.close();
+console.log(JSON.stringify(out, null, 1));
+const pass = out.header.sticky && out.header.opaque
+  && out.toast && out.toast.onTop && !out.toast.covered
+  && out.menu && out.menu.onTop && !out.menu.covered
+  && out.scrolledHeaderVisible;
+console.log(pass ? 'PASS' : 'FAIL');
+process.exit(pass ? 0 : 1);
diff --git a/scripts/verify-host.mjs b/scripts/verify-host.mjs
new file mode 100644
index 0000000..1a08920
--- /dev/null
+++ b/scripts/verify-host.mjs
@@ -0,0 +1,17 @@
+/** Unit-check getPreferredLANHost against the live machine interfaces. */
+import icecastService from '../src/services/IcecastService.js';
+
+const live = icecastService.getPreferredLANHost();
+console.log('fresh scan (no saved hostname):', live);
+
+icecastService.hostname = '192.168.1.244'; // stale IP from the old router
+console.log('stale saved 192.168.1.244  ->', icecastService.getPreferredLANHost());
+
+icecastService.hostname = live; // saved value IS current
+console.log('valid saved ' + live + ' ->', icecastService.getPreferredLANHost());
+
+const pass = live === '192.168.55.113'
+  && icecastService.getPreferredLANHost() === '192.168.55.113'
+  && (icecastService.hostname = '192.168.1.244', icecastService.getPreferredLANHost()) === '192.168.55.113';
+console.log(pass ? 'PASS' : 'FAIL');
+process.exit(pass ? 0 : 1);
diff --git a/scripts/verify-latency.mjs b/scripts/verify-latency.mjs
new file mode 100644
index 0000000..b3b1dda
--- /dev/null
+++ b/scripts/verify-latency.mjs
@@ -0,0 +1,73 @@
+/** Latency verification: MSE player vs plain src — buffered-ahead + time-to-first-audio.
+ *  Also sanity-checks the play/pause cycle still works through the MSE path. */
+import puppeteer from 'puppeteer';
+const sleep = (ms) => new Promise(r => setTimeout(r, ms));
+const base = process.env.BASE_URL || 'http://localhost:3001';
+const browser = await puppeteer.launch({ headless: 'new', defaultViewport: { width: 1360, height: 950 }, protocolTimeout: 300000, args: ['--no-sandbox', '--disable-gpu', '--autoplay-policy=no-user-gesture-required'] });
+const out = {};
+
+const page = await browser.newPage();
+await page.goto(base + '/streams', { waitUntil: 'networkidle2', timeout: 30000 });
+await page.waitForSelector('.chrow:not(.off)', { timeout: 20000 });
+
+// --- A) MSE path: click play, measure time-to-first-audio + buffered-ahead over 20s
+const t0 = Date.now();
+await page.click('.chrow:not(.off) .chplay');
+await page.waitForFunction(() => {
+  const a = streamListener.audioPlayer;
+  return a && !a.paused && a.currentTime > 0;
+}, { timeout: 30000 });
+out.mseFirstAudioMs = Date.now() - t0;
+
+const samples = [];
+for (let i = 0; i < 10; i++) {
+  await sleep(2000);
+  samples.push(await page.evaluate(() => {
+    const sl = streamListener;
+    const llp = sl.llPlayer;
+    if (llp) return llp.stats();
+    const a = sl.audioPlayer;
+    const b = a.buffered;
+    return { mode: 'plain-src', bufferedAhead: b.length ? +(b.end(b.length - 1) - a.currentTime).toFixed(2) : null };
+  }));
+}
+out.mseSamples = samples;
+out.mseMode = samples[0]?.mode;
+out.mseMaxAhead = Math.max(...samples.map(s => s.bufferedAhead ?? 0));
+out.mseAvgAhead = +(samples.reduce((s, x) => s + (x.bufferedAhead ?? 0), 0) / samples.length).toFixed(2);
+
+// --- B) pause/resume cycle through the MSE path still works (BEFORE the
+//        baseline switch below, which intentionally leaves the MSE path)
+await page.click('.chrow[aria-current="true"] .chplay'); // pause
+await sleep(800);
+out.pauseWorks = await page.evaluate(() => streamListener.audioPlayer.paused);
+await sleep(3000); // buffer grows while paused; resume must snap back to live
+await page.click('.chrow[aria-current="true"] .chplay'); // resume
+out.resumeWorks = false;
+for (let i = 0; i < 6 && !out.resumeWorks; i++) {
+  await sleep(1000);
+  out.resumeWorks = await page.evaluate(() => !streamListener.audioPlayer.paused && !!streamListener.llPlayer);
+}
+out.afterResume = await page.evaluate(() => streamListener.llPlayer?.stats());
+
+// --- C) Same browser, plain-src baseline (what the old build effectively did)
+await page.evaluate(() => {
+  const sl = streamListener;
+  sl.llPlayer && sl.llPlayer.stop();
+  sl.llPlayer = null;
+  sl.audioPlayer.src = `/api/streams/play/${encodeURIComponent(sl.currentStream)}`;
+  sl.audioPlayer.play().catch(() => {});
+});
+await sleep(12000);
+out.plainSrc = await page.evaluate(() => {
+  const a = streamListener.audioPlayer;
+  const b = a.buffered;
+  return b.length ? +(b.end(b.length - 1) - a.currentTime).toFixed(2) : null;
+});
+
+await page.screenshot({ path: 'screenshots/latency-mse.png' });
+await browser.close();
+console.log(JSON.stringify(out, null, 2));
+const pass = out.mseMode === 'mse' && out.mseAvgAhead < 1.0 && out.mseMaxAhead < 1.5 && out.pauseWorks && out.resumeWorks;
+console.log(pass ? 'PASS (MSE avg ahead < 1s)' : 'FAIL');
+process.exit(pass ? 0 : 1);
diff --git a/scripts/verify-lightselect.mjs b/scripts/verify-lightselect.mjs
new file mode 100644
index 0000000..c99cd57
--- /dev/null
+++ b/scripts/verify-lightselect.mjs
@@ -0,0 +1,75 @@
+/**
+ * Light-mode audio-source dropdown check:
+ * - edit modal select: computed bg vs color must contrast (was #1a1a1a + dark text)
+ * - color-scheme flips with theme (native popups follow theme)
+ * - option rows painted from tokens
+ */
+import puppeteer from 'puppeteer';
+const sleep = (ms) => new Promise(r => setTimeout(r, ms));
+const browser = await puppeteer.launch({ headless: 'new', defaultViewport: { width: 1360, height: 950 }, protocolTimeout: 180000, args: ['--no-sandbox', '--disable-gpu'] });
+const page = await browser.newPage();
+
+await page.goto('http://localhost:3001/dashboard', { waitUntil: 'domcontentloaded' });
+await sleep(1500);
+if (new URL(page.url()).pathname === '/login') {
+  await page.waitForSelector('#login-form', { timeout: 10000 });
+  await page.type('#login-username', 'admin');
+  await page.type('#login-password', 'lanstreamer123');
+  await page.click('#login-submit');
+  await page.waitForFunction(() => window.location.pathname === '/dashboard', { timeout: 20000 });
+}
+await page.waitForSelector('.arow', { timeout: 30000 });
+
+// Switch to light mode
+await page.evaluate(() => { localStorage.setItem('theme', 'light'); document.documentElement.setAttribute('data-theme', 'light'); });
+await sleep(800);
+
+// Open the edit modal (⋯ menu -> Edit) on the first row
+await page.click('.arow .menu .iconbtn');
+await sleep(500);
+await page.click('.menu.open .menu-pop button:nth-of-type(2)'); // Edit
+await sleep(1000);
+
+const check = await page.evaluate(() => {
+  const sel = document.getElementById('editStreamDevice');
+  if (!sel) return { fail: 'edit select not found' };
+  const cs = getComputedStyle(sel);
+  const opt = sel.options[1] || sel.options[0];
+  const optCs = getComputedStyle(opt);
+  const lum = (c) => {
+    const m = c.match(/\d+/g).map(Number);
+    return m.length >= 3 ? (0.2126 * m[0] + 0.7152 * m[1] + 0.0722 * m[2]) / 255 : null;
+  };
+  const bgL = lum(cs.backgroundColor), fgL = lum(cs.color);
+  return {
+    bg: cs.backgroundColor,
+    color: cs.color,
+    optionBg: optCs.backgroundColor,
+    optionColor: optCs.color,
+    colorScheme: getComputedStyle(document.documentElement).colorScheme,
+    contrast: bgL !== null && fgL !== null ? Math.abs(bgL - fgL) : null,
+    readable: bgL !== null && fgL !== null ? Math.abs(bgL - fgL) > 0.35 : false
+  };
+});
+console.log(JSON.stringify(check, null, 2));
+await page.screenshot({ path: 'screenshots/round7-light-edit-select.png' });
+
+// Also the new-stream drawer select
+await page.keyboard.press('Escape');
+await sleep(400);
+const drawerCheck = await page.evaluate(async () => {
+  const btn = document.getElementById('add-stream-btn');
+  if (btn) btn.click();
+  await new Promise(r => setTimeout(r, 700));
+  const sel = document.getElementById('stream-device');
+  if (!sel) return { fail: 'drawer select not found' };
+  const cs = getComputedStyle(sel);
+  return { bg: cs.backgroundColor, color: cs.color };
+});
+console.log('drawer select:', JSON.stringify(drawerCheck));
+await page.screenshot({ path: 'screenshots/round7-light-drawer.png' });
+
+const pass = check.readable && check.colorScheme === 'light' && !drawerCheck.fail;
+console.log(pass ? 'PASS' : 'FAIL');
+await browser.close();
+process.exit(pass ? 0 : 1);
diff --git a/scripts/verify-offline.mjs b/scripts/verify-offline.mjs
new file mode 100644
index 0000000..b6ebf0b
--- /dev/null
+++ b/scripts/verify-offline.mjs
@@ -0,0 +1,61 @@
+/**
+ * Offline capability check: render dashboard + listener with EVERY non-localhost
+ * request aborted. Fonts must load from the vendored files, icons must render as
+ * real glyphs (24px), and the app itself must issue zero external requests.
+ * (Antivirus script injections, e.g. Kaspersky's gc.kis.v2.scr.kaspersky-labs.com,
+ * are not app requests — filter them from the failure condition.)
+ */
+import puppeteer from 'puppeteer';
+
+const AV_NOISE = /kaspersky|symante|mcAfee|avast|avg/i;
+const browser = await puppeteer.launch({ headless: 'new', defaultViewport: { width: 1360, height: 950 }, protocolTimeout: 180000, args: ['--no-sandbox', '--disable-gpu'] });
+const results = {};
+
+for (const [name, path, needsLogin] of [['dashboard', '/dashboard', true], ['listener', '/streams', false]]) {
+  const page = await browser.newPage();
+  const external = [];
+  await page.setRequestInterception(true);
+  page.on('request', (req) => {
+    const u = req.url();
+    if (u.startsWith('http://localhost:3001')) return req.continue();
+    if (!AV_NOISE.test(u)) external.push(u.slice(0, 80));
+    req.abort();
+  });
+  await page.goto('http://localhost:3001' + path, { waitUntil: 'networkidle2', timeout: 45000 }).catch(() => { });
+  if (needsLogin && new URL(page.url()).pathname === '/login') {
+    await page.type('#login-username', 'admin');
+    await page.type('#login-password', 'lanstreamer123');
+    await page.click('#login-submit');
+    await page.waitForFunction(() => window.location.pathname === '/dashboard', { timeout: 20000 }).catch(() => { });
+  }
+  await new Promise(r => setTimeout(r, 2500));
+  results[name] = await page.evaluate(async () => {
+    await document.fonts.ready;
+    const icon = document.querySelector('.material-symbols-rounded');
+    let iconWidth = null;
+    if (icon) {
+      const t = icon.textContent;
+      icon.textContent = 'play_arrow';
+      iconWidth = Math.round(icon.getBoundingClientRect().width);
+      icon.textContent = t;
+    }
+    return {
+      materialFont: document.fonts.check('24px "Material Symbols Rounded"'),
+      spaceGrotesk: document.fonts.check('16px "Space Grotesk"'),
+      iconWidth,
+      bodyRendered: document.body.innerText.length > 100
+    };
+  });
+  results[name + '_externalRequests'] = external;
+  await page.close();
+}
+
+await browser.close();
+console.log(JSON.stringify(results, null, 1));
+const pass = results.dashboard.materialFont && results.listener.materialFont
+  && results.dashboard.iconWidth === 24 && results.listener.iconWidth === 24
+  && results.dashboard.bodyRendered && results.listener.bodyRendered
+  && results.dashboard_externalRequests.length === 0
+  && results.listener_externalRequests.length === 0;
+console.log(pass ? 'PASS — fully offline' : 'FAIL');
+process.exit(pass ? 0 : 1);
diff --git a/scripts/verify-p2p3.mjs b/scripts/verify-p2p3.mjs
new file mode 100644
index 0000000..a4fa331
--- /dev/null
+++ b/scripts/verify-p2p3.mjs
@@ -0,0 +1,60 @@
+import puppeteer from 'puppeteer';
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+const browser = await puppeteer.launch({ headless: 'new', defaultViewport: { width: 1360, height: 950 }, protocolTimeout: 60000, args: ['--no-sandbox', '--disable-gpu'] });
+const page = await browser.newPage();
+const errors = [];
+page.on('pageerror', (e) => errors.push('pageerror: ' + e.message.slice(0, 120)));
+page.on('console', (m) => { if (m.type() === 'error') errors.push('console: ' + m.text().slice(0, 120)); });
+
+await page.goto('http://localhost:3001/dashboard', { waitUntil: 'domcontentloaded' });
+await sleep(8000);
+const dash = await page.evaluate(() => ({
+  strip: document.querySelectorAll('#status-strip .stat').length,
+  stripOnAir: document.querySelector('#status-strip .stat .v')?.textContent.replace(/\s+/g, ' ').trim().slice(0, 30),
+  groups: [...document.querySelectorAll('.group-label')].map((g) => g.textContent.trim()),
+  rows: document.querySelectorAll('.arow').length,
+  menus: document.querySelectorAll('.arow .menu').length,
+  shareUrl: document.getElementById('share-url-text')?.textContent,
+  qrLoaded: !!document.querySelector('#share-qr svg'),
+  inputs: document.querySelectorAll('#audio-devices li').length,
+  filterBtns: document.querySelectorAll('#stream-filter button').length,
+  newStreamLabel: document.getElementById('add-stream-btn')?.textContent.trim(),
+}));
+await page.screenshot({ path: 'gui-test-screenshots/p2-dashboard.jpg', type: 'jpeg', quality: 85 });
+
+// Open the drawer via the real button
+await page.click('#add-stream-btn');
+await sleep(900);
+const drawer = await page.evaluate(() => ({
+  open: document.body.classList.contains('drawer-open'),
+  srcCards: document.querySelectorAll('#stream-drawer-root .src-opt').length,
+  inUseChips: [...document.querySelectorAll('#stream-drawer-root .src-opt')].filter((l) => l.textContent.includes('IN USE')).length,
+  missing: [...document.querySelectorAll('#stream-drawer-root .src-opt')].filter((l) => l.textContent.includes('Missing')).length,
+  qualityCards: document.querySelectorAll('#stream-drawer-root .quality label').length,
+  autoStart: !!document.getElementById('drawer-autostart'),
+  buttons: ['drawer-cancel', 'drawer-save', 'drawer-golive'].map((id) => !!document.getElementById(id)),
+}));
+await page.screenshot({ path: 'gui-test-screenshots/p3-drawer.jpg', type: 'jpeg', quality: 85 });
+
+// Save-as-stopped flow: fill name, pick 2nd source, Save
+await page.click('#stream-name');
+await page.type('#stream-name', 'Save Test');
+const srcs = await page.$$('#stream-drawer-root .src-opt input:not([disabled])');
+if (srcs.length > 1) await srcs[1].click();
+await page.click('#drawer-save');
+await sleep(1200);
+const saved = await page.evaluate(async () => {
+  const res = await fetch('/api/streams/status');
+  const j = await res.json();
+  const s = j.streams.find((x) => x.name === 'Save Test');
+  return { found: !!s, status: s?.status, drawerClosed: !document.body.classList.contains('drawer-open') };
+});
+// cleanup test stream
+await page.evaluate(async () => {
+  const res = await fetch('/api/streams/status');
+  const j = await res.json();
+  const s = j.streams.find((x) => x.name === 'Save Test');
+  if (s) await fetch('/api/streams/delete', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ id: s.id }) });
+});
+console.log(JSON.stringify({ dash, drawer, saved, errors: errors.slice(0, 6) }, null, 1));
+await browser.close();
diff --git a/scripts/verify-p4.mjs b/scripts/verify-p4.mjs
new file mode 100644
index 0000000..0ba93f3
--- /dev/null
+++ b/scripts/verify-p4.mjs
@@ -0,0 +1,90 @@
+/**
+ * P4 listener verification: start a stream via API, load the page, click play
+ * through the GUI, verify player/channels/pill/mini, then stop.
+ */
+import puppeteer from 'puppeteer';
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+const browser = await puppeteer.launch({ headless: 'new', defaultViewport: { width: 1280, height: 900 }, protocolTimeout: 180000, args: ['--no-sandbox', '--disable-gpu', '--autoplay-policy=no-user-gesture-required'] });
+const page = await browser.newPage();
+const errors = [];
+page.on('pageerror', (e) => errors.push('pageerror: ' + e.message.slice(0, 140)));
+
+// Control-plane calls run from Node (not in-page) so slow routes can't stall evaluate
+const api = async (p, method = 'POST', body = null) => {
+  const res = await fetch('http://localhost:3001' + p, {
+    method,
+    headers: { 'Content-Type': 'application/json' },
+    body: body ? JSON.stringify(body) : undefined
+  });
+  return { ok: res.ok, data: await res.json().catch(() => null) };
+};
+
+// Start a known-good stream so the listener has something live
+await page.goto('http://localhost:3001/streams', { waitUntil: 'domcontentloaded' });
+await api('/api/streams/restart', 'POST', { id: 'shot_stream_1' });
+
+// Wait until the poller (5s cycle) sees the live channel
+let waitCount = 0;
+while (waitCount++ < 8) {
+  await sleep(2000);
+  const ch = await page.evaluate(() => document.querySelectorAll('#channels-list .chrow:not(.off)').length);
+  if (ch > 0) break;
+}
+
+const state = await page.evaluate(() => {
+  const pill = document.getElementById('onair-pill');
+  return {
+    onairActive: !pill.classList.contains('inactive'),
+    onairText: document.getElementById('onair-text').textContent,
+    channels: document.querySelectorAll('#channels-list .chrow').length,
+    offChannels: document.querySelectorAll('#channels-list .chrow.off').length,
+    playerChannel: document.getElementById('player-channel').textContent,
+    bigplayIcon: document.getElementById('bigplay-icon').textContent,
+    noStreamsHidden: document.getElementById('no-streams-state').classList.contains('hidden'),
+    heroTitle: document.getElementById('event-title').textContent,
+  };
+});
+await page.screenshot({ path: 'gui-test-screenshots/p4-listener-dark.jpg', type: 'jpeg', quality: 85 });
+
+// Click the big play button through the GUI (autoplay may be blocked headless — check state honestly)
+await page.click('#bigplay');
+await sleep(3000);
+const playing = await page.evaluate(() => ({
+  currentStream: window.streamListener?.currentStream,
+  bodyPlaying: document.body.classList.contains('playing'),
+  icon: document.getElementById('bigplay-icon').textContent,
+  chipVisible: document.getElementById('player-chip').style.display !== 'none',
+  toastCount: document.querySelectorAll('#toast-stack .toast').length,
+}));
+
+// Light theme via the real toggle
+await page.click('[data-theme-toggle]');
+await sleep(700);
+await page.screenshot({ path: 'gui-test-screenshots/p4-listener-light.jpg', type: 'jpeg', quality: 85 });
+
+// Mobile viewport: mini-player appears while playing + scrolled
+await page.setViewport({ width: 390, height: 844 });
+await sleep(600);
+await page.evaluate(() => window.scrollTo(0, 500));
+await sleep(600);
+const mini = await page.evaluate(() => {
+  const mp = document.getElementById('mini-player');
+  return { visible: getComputedStyle(mp).display !== 'none', name: document.getElementById('mp-name').textContent };
+});
+await page.screenshot({ path: 'gui-test-screenshots/p4-listener-mobile.jpg', type: 'jpeg', quality: 85 });
+
+// Stop the stream, watch off-air: grace (reconnecting) then No Live Stream
+await api('/api/streams/stop', 'POST', { id: 'shot_stream_1' });
+await sleep(6500); // > one poll cycle, inside the 15s grace
+const grace = await page.evaluate(() => ({
+  reconnecting: document.getElementById('player-reconnecting').style.display !== 'none',
+  chRowHasReconnecting: !!document.querySelector('#channels-list .chip-warn'),
+}));
+await sleep(12000); // past grace
+const given = await page.evaluate(() => ({
+  noStreams: !document.getElementById('no-streams-state').classList.contains('hidden'),
+  onairOff: document.getElementById('onair-text').textContent,
+}));
+
+console.log(JSON.stringify({ state, playing, mini, grace, given, errors: errors.slice(0, 5) }, null, 1));
+await browser.close();
diff --git a/scripts/verify-round3.mjs b/scripts/verify-round3.mjs
new file mode 100644
index 0000000..26d1a47
--- /dev/null
+++ b/scripts/verify-round3.mjs
@@ -0,0 +1,133 @@
+/**
+ * E2E reproduction of the user's failure scenario (2026-10-28 night, round 3):
+ * duplicate-device start error must arrive (not hang) and be closable; editing
+ * the holding stream must free the device; no zombie ffmpeg; drawer over
+ * header with dropdown sources; QR icon shows a real code.
+ */
+import puppeteer from 'puppeteer';
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+const browser = await puppeteer.launch({ headless: 'new', defaultViewport: { width: 1360, height: 950 }, protocolTimeout: 180000, args: ['--no-sandbox', '--disable-gpu'] });
+const page = await browser.newPage();
+const results = {};
+const api = async (p, method = 'POST', body = null) =>
+  fetch('http://localhost:3001' + p, { method, headers: { 'Content-Type': 'application/json' }, body: body ? JSON.stringify(body) : undefined }).then(r => r.json().catch(() => null));
+
+// Clean slate
+await api('/api/streams/stop-all', 'POST');
+await page.goto('http://localhost:3001/dashboard', { waitUntil: 'domcontentloaded' });
+await sleep(8000);
+
+// 1) Start dash_demo (cable-output) — the holder
+await api('/api/streams/restart', 'POST', { id: 'dash_demo' });
+await sleep(4000);
+let waits = 0;
+while (waits++ < 6) {
+  const running = await page.evaluate(() => (window.ffmpegStreamsManager?.activeStreams || []).some(s => s.status === 'running'));
+  if (running) break;
+  await sleep(2000);
+}
+
+// 2) Click play on shot_stream_1 (same device) via the GUI — error must arrive + be closable
+const busyStart = Date.now();
+await page.evaluate(() => {
+  const btn = document.querySelector('[data-stream-row="shot_stream_1"] .playbtn');
+  if (btn) btn.click();
+});
+await sleep(4000);
+results.duplicateStart = await page.evaluate((elapsed) => {
+  const modal = [...document.querySelectorAll('.fixed.inset-0')].find(m => m.textContent.includes('already') || m.textContent.includes('busy') || m.textContent.includes('Audio source'));
+  const toasts = [...document.querySelectorAll('#toast-stack .toast')].map(t => t.textContent.trim().slice(0, 60));
+  const row = document.querySelector('[data-stream-row="shot_stream_1"]');
+  const errbox = row?.querySelector('.errbox b')?.textContent;
+  return { responseArrivedMs: elapsed, modalPresent: !!modal, toasts, rowError: errbox, menuClickable: !!row?.querySelector('.menu .iconbtn') };
+}, Date.now() - busyStart);
+await page.screenshot({ path: 'gui-test-screenshots/r3-duplicate-error.jpg', type: 'jpeg', quality: 85 });
+// Close any modal via its close/backdrop
+await page.evaluate(() => {
+  const modal = [...document.querySelectorAll('.fixed.inset-0')].pop();
+  if (modal) modal.remove();
+});
+
+// 3) Edit the holder to another device via the API-equivalent GUI path (use the
+//    edit modal Save which hits /api/streams/update) — then shot_stream_1 must start.
+await page.evaluate(() => {
+  const btn = document.querySelector('[data-stream-row="dash_demo"] .menu .iconbtn');
+  if (btn) btn.click();
+});
+await sleep(400);
+await page.evaluate(() => {
+  const item = [...document.querySelectorAll('[data-stream-row="dash_demo"] .menu-pop button')].find(b => b.textContent.trim() === 'Edit');
+  if (item) item.click();
+});
+await sleep(1200);
+results.editModal = await page.evaluate(() => ({
+  open: !!document.getElementById('editStreamForm'),
+  deviceSelect: !!document.getElementById('editStreamDevice'),
+}));
+// change device to the cable-a source and save through the modal's own submit
+await page.evaluate(() => {
+  const sel = document.getElementById('editStreamDevice');
+  if (!sel) return;
+  const opt = [...sel.options].find(o => o.textContent.toLowerCase().includes('cable-a')) || [...sel.options].find(o => o.value && o.value.includes('cable-a'));
+  if (opt) sel.value = opt.value;
+  const form = document.getElementById('editStreamForm');
+  if (form) form.dispatchEvent(new Event('submit', { cancelable: true, bubbles: true }));
+});
+await sleep(5000);
+results.afterEdit = await page.evaluate(() => ({
+  dashDemoDevice: (window.ffmpegStreamsManager?.activeStreams || []).find(s => s.id === 'dash_demo')?.deviceId,
+}));
+
+// 4) Now shot_stream_1 (cable-output) must be able to start — device freed, no zombie
+await page.evaluate(() => {
+  const btn = document.querySelector('[data-stream-row="shot_stream_1"] .playbtn');
+  if (btn) btn.click();
+});
+await sleep(6000);
+results.freedStart = await page.evaluate(async () => {
+  const res = await fetch('/api/streams/status');
+  const j = await res.json();
+  const s1 = j.streams.find(x => x.id === 'shot_stream_1');
+  const dd = j.streams.find(x => x.id === 'dash_demo');
+  return { shotStream1: s1?.status, dashDemo: dd?.status, ddDevice: dd?.deviceId };
+});
+
+// 5) Drawer: above header + dropdown sources
+await page.click('#add-stream-btn');
+await sleep(900);
+results.drawer = await page.evaluate(() => {
+  const drawer = document.querySelector('.drawer');
+  const header = document.querySelector('.header-glass') || document.querySelector('header');
+  const dz = drawer ? parseInt(getComputedStyle(drawer).zIndex) : 0;
+  const hz = header ? parseInt(getComputedStyle(header).zIndex) : 0;
+  const sel = document.getElementById('stream-device');
+  return {
+    drawerOverHeader: dz > hz,
+    z: { drawer: dz, header: hz },
+    sourceSelect: !!sel,
+    optionCount: sel ? sel.options.length : 0,
+    usedByOption: sel ? [...sel.options].some(o => o.textContent.includes('used by')) : false,
+    missingOption: sel ? [...sel.options].some(o => o.textContent.includes('MISSING')) : false,
+  };
+});
+await page.keyboard.press('Escape');
+await sleep(400);
+
+// 6) QR: inline icon → real sized svg → close
+await page.click('#share-show-qr');
+await sleep(1500);
+results.qr = await page.evaluate(() => {
+  const svg = document.querySelector('#share-qr svg');
+  return {
+    visible: !document.getElementById('share-body-qr').classList.contains('hidden'),
+    svgPresent: !!svg,
+    svgWidth: svg ? Math.round(svg.getBoundingClientRect().width) : 0,
+  };
+});
+await page.click('#share-qr-close');
+results.qrClosed = await page.evaluate(() => document.getElementById('share-body-qr').classList.contains('hidden'));
+
+// cleanup: stop all
+await api('/api/streams/stop-all', 'POST');
+console.log(JSON.stringify(results, null, 1));
+await browser.close();
diff --git a/scripts/verify-rowalign.mjs b/scripts/verify-rowalign.mjs
new file mode 100644
index 0000000..9099f50
--- /dev/null
+++ b/scripts/verify-rowalign.mjs
@@ -0,0 +1,76 @@
+/**
+ * Verify stream-row action icons are pinned RIGHT and never move:
+ * - .rowactions right edge identical across all rows (different text lengths)
+ * - right edge unchanged when a row's status flips live -> stopped (chip + meta change)
+ * - actions sit at the row's right end (right edge ≈ row right edge − padding)
+ * - ⋯ popup opens LEFTWARD from the ⋯ button, fully inside the card
+ */
+import puppeteer from 'puppeteer';
+const sleep = (ms) => new Promise(r => setTimeout(r, ms));
+const browser = await puppeteer.launch({ headless: 'new', defaultViewport: { width: 1360, height: 950 }, protocolTimeout: 180000, args: ['--no-sandbox', '--disable-gpu'] });
+const page = await browser.newPage();
+
+await page.goto('http://localhost:3001/dashboard', { waitUntil: 'domcontentloaded' });
+await sleep(1500);
+if (new URL(page.url()).pathname === '/login') {
+  await page.waitForSelector('#login-form', { timeout: 10000 });
+  await page.type('#login-username', 'admin');
+  await page.type('#login-password', 'lanstreamer123');
+  await page.click('#login-submit');
+  await page.waitForFunction(() => window.location.pathname === '/dashboard', { timeout: 20000 });
+}
+await page.waitForSelector('.arow', { timeout: 30000 });
+await sleep(2500);
+
+const edges = await page.evaluate(() =>
+  [...document.querySelectorAll('.arow')].map(r => {
+    const a = r.querySelector('.rowactions');
+    const rr = r.getBoundingClientRect();
+    const ar = a.getBoundingClientRect();
+    return { right: Math.round(ar.right), rowRight: Math.round(rr.right), gap: Math.round(rr.right - ar.right) };
+  })
+);
+const allSame = edges.length > 0 && edges.every(e => e.right === edges[0].right);
+const atRightEnd = edges.length > 0 && edges.every(e => e.gap >= 0 && e.gap <= 24); // row padding 18px + rounding
+console.log('rowactions right-edge per row:', edges.map(e => e.right).join(', '), allSame ? '(all identical)' : '(DIFFER — jitter!)');
+console.log('actions at row right end:', atRightEnd, `(gap row→actions: ${edges[0]?.gap}px, expect ~18)`);
+
+// Live row -> stop -> same right edge?
+const liveRow = await page.$('.arow.is-live');
+let stopTest = 'no live row';
+if (liveRow) {
+  const before = Math.round((await (await page.$('.arow.is-live .rowactions')).boundingBox()).x
+    + (await (await page.$('.arow.is-live .rowactions')).boundingBox()).width);
+  await page.click('.arow.is-live .playbtn.stop');
+  await sleep(4000);
+  const box = await (await page.$('.arow .rowactions')).boundingBox();
+  const after = Math.round(box.x + box.width);
+  stopTest = before === after ? `right edge stable across live->stopped (${before}px)` : `MOVED: ${before} -> ${after}`;
+}
+console.log('status flip:', stopTest);
+
+// Menu popup opens LEFTWARD from ⋯ and stays inside the card
+await page.click('.arow .menu .iconbtn');
+await sleep(600);
+const pop = await page.evaluate(() => {
+  const p = document.querySelector('.menu-pop');
+  const menuBtn = document.querySelector('.arow .menu .iconbtn');
+  const card = document.querySelector('.arow')?.closest('.glass-card, .streams-card, section') || null;
+  if (!p) return null;
+  const r = p.getBoundingClientRect();
+  const b = menuBtn.getBoundingClientRect();
+  const c = card ? card.getBoundingClientRect() : { left: 0, right: window.innerWidth };
+  return {
+    popRight: Math.round(r.right), btnRight: Math.round(b.right),
+    anchoredToButton: Math.abs(r.right - b.right) <= 1,
+    inside: r.left >= c.left - 1 && r.right <= c.right + 1,
+    visible: r.width > 0
+  };
+});
+console.log('menu popup:', JSON.stringify(pop));
+await page.screenshot({ path: 'screenshots/round22-right-actions.png' });
+
+const pass = allSame && atRightEnd && !stopTest.includes('MOVED') && pop && pop.anchoredToButton && pop.inside && pop.visible;
+console.log(pass ? 'PASS' : 'FAIL');
+await browser.close();
+process.exit(pass ? 0 : 1);
diff --git a/scripts/verify-sticky-scroll.mjs b/scripts/verify-sticky-scroll.mjs
new file mode 100644
index 0000000..0b14af1
--- /dev/null
+++ b/scripts/verify-sticky-scroll.mjs
@@ -0,0 +1,46 @@
+/** Verify sticky headers BEHAVIORALLY: scroll the page, the header must stay at top==0.
+ *  (computed position==='sticky' passes even when an overflow ancestor disables it —
+ *   that is exactly how the dashboard bug slipped through.) */
+import puppeteer from 'puppeteer';
+const sleep = (ms) => new Promise(r => setTimeout(r, ms));
+const browser = await puppeteer.launch({ headless: 'new', defaultViewport: { width: 1360, height: 950 }, protocolTimeout: 180000, args: ['--no-sandbox', '--disable-gpu'] });
+const page = await browser.newPage();
+const out = {};
+
+async function check(pathname, key) {
+  await page.goto('http://localhost:3001' + pathname, { waitUntil: 'domcontentloaded' });
+  await sleep(1500);
+  if (new URL(page.url()).pathname === '/login') {
+    await page.type('#login-username', 'admin');
+    await page.type('#login-password', 'lanstreamer123');
+    await page.click('#login-submit');
+    await page.waitForFunction(() => !window.location.pathname.startsWith('/login'), { timeout: 20000 });
+  }
+  await sleep(2000); // let EventManager re-render settle (stale-node trap)
+  await page.evaluate(() => window.scrollTo(0, 0));
+  await sleep(200);
+  out[key] = await page.evaluate(async () => {
+    const h = document.querySelector('.header-glass');
+    if (!h) return { fail: 'no .header-glass found' };
+    const doc = document.documentElement;
+    const before = h.getBoundingClientRect().top;
+    window.scrollTo(0, 700);
+    await new Promise(r => setTimeout(r, 400));
+    const after = h.getBoundingClientRect().top;
+    return {
+      scrolledTo: window.scrollY,
+      headerTopBeforeScroll: Math.round(before),
+      headerTopAtScroll700: Math.round(after),
+      STICKS: Math.abs(after) <= 1,           // glued to viewport top
+      horizOverflow: doc.scrollWidth - doc.clientWidth // must stay 0 after overflow-x-hidden removal
+    };
+  });
+  await page.screenshot({ path: `screenshots/sticky-${key}-scrolled.png` });
+}
+
+await check('/dashboard', 'admin');
+await check('/streams', 'listener');
+await browser.close();
+console.log(JSON.stringify(out, null, 2));
+const ok = out.admin?.STICKS && out.listener?.STICKS && !out.admin?.horizOverflow && !out.listener?.horizOverflow;
+process.exit(ok ? 0 : 1);
diff --git a/src/app.js b/src/app.js
new file mode 100644
index 0000000..492ed11
--- /dev/null
+++ b/src/app.js
@@ -0,0 +1,167 @@
+import express from 'express';
+import path from 'path';
+import fs from 'fs';
+import { fileURLToPath } from 'url';
+import systemRouter from './routes/system.js';
+import streamsRouter from './routes/streams.js';
+import settingsRouter from './routes/settings.js';
+import contactRouter from './routes/contact.js';
+import authRouter from './routes/auth.js';
+import telemetryRouter from './routes/telemetry.js';
+import { uploadsBase } from './utils/vendorPaths.js';
+import binaryProbe from './services/BinaryProbeService.js';
+import { optionalAuth, authenticateToken } from './middleware/auth.js';
+import { requireLocalhostAdmin } from './middleware/requireLocalhost.js';
+import streamingService from './services/StreamingService.js';
+import icecastService from './services/IcecastService.js';
+import logger from './utils/logger.js';
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+
+export function createApp() {
+  const app = express();
+
+  app.use(express.json());
+
+  // Serve static files from public directory (so listener page on LAN gets CSS/JS)
+  const publicPath = path.join(__dirname, '../public');
+  app.use(express.static(publicPath));
+
+  // Writable uploads (event banners, lobby music): userData in packaged apps —
+  // public/ is inside the read-only asar there. In dev this resolves to the
+  // same public/uploads the static line above already serves.
+  fs.mkdirSync(uploadsBase(), { recursive: true });
+  app.use('/uploads', express.static(uploadsBase()));
+
+  // Lock admin to localhost: block admin UI and admin APIs from non-localhost (listener page and APIs stay allowed)
+  app.use(requireLocalhostAdmin);
+
+  // Admin auth: the listener surface below stays public; every other /api call
+  // (all mutations + admin-only reads) requires a Bearer token from
+  // POST /api/auth/login. Default credentials are documented in the README.
+  const PUBLIC_GET_API = new Set([
+    '/health',
+    '/info',
+    '/streams/status',
+    '/system/config',      // listener page reads event details from it
+    '/system/icecast-status',
+    '/system/qr',
+    '/contact-details'     // listener page shows the feedback contact
+  ]);
+  const PLAY_PROXY_RE = /^\/streams\/play\/[^/]+$/;
+  app.use('/api', (req, res, next) => {
+    if (process.env.NODE_ENV === 'test' && process.env.AUTH_DISABLED === '1') return next();
+    if (req.path === '/auth/login' || req.path === '/auth/csrf-token') return next();
+    // Listener-browser failure reports: public (listeners never log in), but
+    // rate-limited + whitelisted inside the route itself.
+    if (req.method === 'POST' && req.path === '/telemetry/client-event') return next();
+    if (req.method === 'GET' && (PUBLIC_GET_API.has(req.path) || PLAY_PROXY_RE.test(req.path))) return next();
+    return authenticateToken(req, res, next);
+  });
+
+  app.get('/api/health', (req, res) => {
+    res.status(200).json({ status: 'OK', message: 'Server is running' });
+  });
+
+  // API Routes
+  app.use('/api/auth', authRouter);
+  app.use('/api/telemetry', telemetryRouter); // listener failure relay (self-gating)
+  app.use('/api/system', systemRouter);
+  app.use('/api/streams', streamsRouter);
+  app.use('/api/settings', settingsRouter);
+  app.use('/api', contactRouter); // Contact routes can be public
+
+  // Login page for the admin dashboard (see README for default credentials)
+  app.get('/login', (req, res) => {
+    res.sendFile(path.join(__dirname, '../public/login.html'));
+  });
+
+  // Serve dashboard page (admin UI; localhost-only via requireLocalhostAdmin)
+  app.get('/dashboard', optionalAuth, (req, res) => {
+    res.sendFile(path.join(__dirname, '../public/index.html'));
+  });
+
+  // Legacy client path → listener page
+  app.get('/client', (req, res) => {
+    res.redirect('/streams');
+  });
+
+  // In-app troubleshooting / documentation (linked from error messages)
+  app.get('/docs', (req, res) => {
+    res.sendFile(path.join(__dirname, '../public/docs.html'));
+  });
+
+  // Serve streams page (for listeners) - both /streams and /streams.html
+  app.get('/streams', (req, res) => {
+    res.sendFile(path.join(__dirname, '../public/streams.html'));
+  });
+
+  app.get('/streams.html', (req, res) => {
+    res.sendFile(path.join(__dirname, '../public/streams.html'));
+  });
+
+  // Fallback: listener-first. Unknown pages go to the listener page, not the
+  // admin dashboard — phones hitting the server root should land somewhere useful.
+  app.get('*', (req, res) => {
+    if (req.path.startsWith('/api/')) {
+      res.status(404).json({ error: 'API endpoint not found' });
+    } else {
+      res.redirect('/streams');
+    }
+  });
+
+  return app;
+}
+
+const app = createApp();
+
+/**
+ * Start the HTTP server without CLI prompts (used by Electron and other embedders).
+ * Returns { server, port, host, shutdown } where shutdown stops streams, stops
+ * Icecast if it is running, and closes the HTTP server. Never prompts stdin.
+ */
+export function startServer({ port = process.env.PORT || 3001, host = process.env.HOST || '0.0.0.0' } = {}) {
+  const server = app.listen(port, host);
+
+  // Voluntary telemetry (no-op unless the user consented and POSTHOG_KEY is set)
+  import('./services/TelemetryService.js').then(m => m.default.init()).catch(() => {});
+
+  // Functional binary self-test (dshow/encoders/2s end-to-end) — first run and
+  // on stale pins only; fire-and-forget, must never delay or break startup.
+  binaryProbe.ensureProbed(process.env.npm_package_version || 'unknown');
+
+  // stopStreams=false lets a caller that already stopped streams/icecast (the
+  // Electron shell does its own ordered teardown) skip the duplicate pass —
+  // a second stopAllStreams doubles quit latency and can throw on dead state.
+  const shutdown = async ({ timeoutMs = 5000, stopStreams = true } = {}) => {
+    try {
+      if (stopStreams) {
+        const stats = streamingService.getStats();
+        const running = stats.streams.filter(s => s.status === 'running');
+        if (running.length > 0) {
+          logger.info(`Shutdown: stopping ${running.length} active stream(s)...`);
+          await streamingService.stopAllStreams();
+        }
+        if (icecastService.process && !icecastService.process.killed) {
+          logger.info('Shutdown: stopping Icecast...');
+          await icecastService.stop(false).catch(err => logger.warn(`Icecast stop failed: ${err.message}`));
+        }
+      }
+    } catch (error) {
+      logger.error('Error stopping services during shutdown:', error);
+    }
+
+    await new Promise((resolve) => {
+      const forceTimer = setTimeout(() => resolve(), timeoutMs);
+      server.close(() => {
+        clearTimeout(forceTimer);
+        resolve();
+      });
+    });
+  };
+
+  return { server, port, host, shutdown };
+}
+
+export default app;
diff --git a/src/config/index.js b/src/config/index.js
index 6db965d..cc87f93 100644
--- a/src/config/index.js
+++ b/src/config/index.js
@@ -16,6 +16,8 @@
 import dotenv from 'dotenv'
 import path from 'path'
 import fs from 'fs'
+import { dataDir } from '../utils/vendorPaths.js'
+import { loadSecurityFile } from '../utils/securityStore.js'
 
 // Load environment variables (only for non-Icecast configs)
 dotenv.config()
@@ -26,7 +28,7 @@ dotenv.config()
  */
 function getIcecastPortFromDeviceConfig() {
   try {
-    const deviceConfigPath = path.join(process.cwd(), 'config', 'device-config.json')
+    const deviceConfigPath = path.join(dataDir(), 'device-config.json')
     if (fs.existsSync(deviceConfigPath)) {
       const deviceConfig = JSON.parse(fs.readFileSync(deviceConfigPath, 'utf8'))
       if (deviceConfig.port) {
@@ -52,8 +54,10 @@ const config = {
   // Security Configuration
   security: {
     jwtSecret: process.env.JWT_SECRET || 'default-secret-change-in-production',
-    jwtExpiresIn: process.env.JWT_EXPIRES_IN || '24h',
-    adminPassword: process.env.ADMIN_PASSWORD || 'admin123',
+    jwtExpiresIn: process.env.JWT_EXPIRES_IN || '7d',
+    // Single source of truth for admin credentials (README documents these).
+    adminUsername: process.env.ADMIN_USERNAME || 'admin',
+    adminPassword: process.env.ADMIN_PASSWORD || 'lanstreamer123',
     sessionSecret: process.env.SESSION_SECRET || 'session-secret',
     enableHelmet: process.env.ENABLE_HELMET === 'true',
     enableCompression: process.env.ENABLE_COMPRESSION === 'true'
@@ -143,6 +147,15 @@ const config = {
   }
 }
 
+// In-app admin credentials (dashboard → Admin account) persist to the data dir
+// and take precedence over env/defaults once set — an explicit in-app change
+// must win, and packaged installs have no .env to edit anyway. The password
+// lives only as a scrypt hash; when present it replaces plaintext comparison.
+const persistedSecurity = loadSecurityFile();
+if (persistedSecurity.adminUsername) config.security.adminUsername = persistedSecurity.adminUsername;
+if (persistedSecurity.adminPasswordHash) config.security.adminPasswordHash = persistedSecurity.adminPasswordHash;
+if (persistedSecurity.jwtSecret) config.security.jwtSecret = persistedSecurity.jwtSecret;
+
 // Validate required configuration
 const validateConfig = () => {
   const required = [
diff --git a/src/middleware/auth.js b/src/middleware/auth.js
index b97a16c..c93a9fd 100644
--- a/src/middleware/auth.js
+++ b/src/middleware/auth.js
@@ -1,8 +1,12 @@
 import jwt from 'jsonwebtoken';
 import crypto from 'crypto';
+import config from '../config/index.js';
+import { verifyPasswordHash } from '../utils/securityStore.js';
 
 /**
- * Authentication middleware for protecting admin routes
+ * Authentication middleware for protecting admin routes.
+ * Secret/expiry come from config so env overrides work and the fallback is
+ * stable across restarts (see config.security.jwtSecret / config.security.jwtExpiresIn).
  */
 export const authenticateToken = (req, res, next) => {
     const authHeader = req.headers['authorization'];
@@ -16,7 +20,7 @@ export const authenticateToken = (req, res, next) => {
     }
 
     try {
-        const decoded = jwt.verify(token, process.env.JWT_SECRET);
+        const decoded = jwt.verify(token, config.security.jwtSecret);
         req.user = decoded;
         next();
     } catch (error) {
@@ -37,7 +41,7 @@ export const optionalAuth = (req, res, next) => {
 
     if (token) {
         try {
-            const decoded = jwt.verify(token, process.env.JWT_SECRET);
+            const decoded = jwt.verify(token, config.security.jwtSecret);
             req.user = decoded;
         } catch (error) {
             // Token invalid, but continue without user
@@ -53,22 +57,31 @@ export const optionalAuth = (req, res, next) => {
 /**
  * Generate JWT token for authenticated user
  */
-export const generateToken = (username) => {
+export const generateToken = (username, { expiresIn } = {}) => {
     return jwt.sign(
         { username, type: 'admin' },
-        process.env.JWT_SECRET,
-        { expiresIn: process.env.JWT_EXPIRES_IN || '24h' }
+        config.security.jwtSecret,
+        { expiresIn: expiresIn || config.security.jwtExpiresIn }
     );
 };
 
 /**
- * Verify admin credentials
+ * Verify admin credentials. When the in-app settings path has stored a scrypt
+ * hash (config.security.adminPasswordHash), verify against it; otherwise the
+ * env/default plaintext comparison applies.
  */
 export const verifyCredentials = (username, password) => {
-    const adminUsername = process.env.ADMIN_USERNAME || 'admin';
-    const adminPassword = process.env.ADMIN_PASSWORD || 'lanstreamer123';
-
-    return username === adminUsername && password === adminPassword;
+    if (username !== config.security.adminUsername) return false;
+    if (config.security.adminPasswordHash) return verifyPasswordHash(password, config.security.adminPasswordHash);
+    // Plaintext fallback (env/defaults): constant-time compare (SEC-AUTH-004) —
+    // a plain === leaks timing/length on the localhost-reachable login route.
+    try {
+        const a = Buffer.from(String(password));
+        const b = Buffer.from(String(config.security.adminPassword));
+        return a.length === b.length && crypto.timingSafeEqual(a, b);
+    } catch {
+        return false;
+    }
 };
 
 // Store for CSRF tokens (in production, use Redis or database)
diff --git a/src/routes/auth.js b/src/routes/auth.js
index 7cb7595..c3b303c 100644
--- a/src/routes/auth.js
+++ b/src/routes/auth.js
@@ -1,12 +1,57 @@
 import express from 'express';
+import config from '../config/index.js';
 import { generateToken, verifyCredentials, authenticateToken, generateCSRFToken } from '../middleware/auth.js';
+import { hashPassword, saveSecurityFile, mintJwtSecret } from '../utils/securityStore.js';
 
 const router = express.Router();
 
+// True only while the README-documented defaults are active (no stored hash).
+const usingDefaultCredentials = () =>
+    !config.security.adminPasswordHash &&
+    config.security.adminUsername === 'admin' &&
+    config.security.adminPassword === 'lanstreamer123';
+
+// Brute-force throttle (SEC-AUTH-001, blocker severity — from the devops
+// practices database). The localhost lock keeps the LAN out, but anything
+// running ON the operator's machine (or a malicious page doing localhost
+// fetches) can hammer this route freely. Composite key (IP + username) per
+// the record; escalating lockout so a legit typo never blocks the operator.
+const loginAttempts = new Map(); // key -> { count, lockedUntil }
+const MAX_ATTEMPTS = 5;
+const LOCKOUT_MS = 60_000;
+const attemptKey = (req, username) => `${req.ip || 'unknown'}|${String(username || '').toLowerCase()}`;
+
+function loginThrottle(req, res, next) {
+    const { username } = req.body || {};
+    const key = attemptKey(req, username);
+    const now = Date.now();
+    const rec = loginAttempts.get(key);
+    if (rec && rec.lockedUntil > now) {
+        return res.status(429).json({
+            message: `Too many attempts — try again in ${Math.ceil((rec.lockedUntil - now) / 1000)}s`
+        });
+    }
+    next();
+}
+
+function recordLoginResult(req, username, ok) {
+    const key = attemptKey(req, username);
+    if (ok) { loginAttempts.delete(key); return; }
+    const rec = loginAttempts.get(key) || { count: 0, lockedUntil: 0 };
+    rec.count += 1;
+    if (rec.count >= MAX_ATTEMPTS) {
+        // escalate: each subsequent lockout doubles, capped at 15 minutes
+        const prior = rec.lockedUntil > Date.now() ? rec.lockedUntil - Date.now() : 0;
+        rec.lockedUntil = Date.now() + Math.min(Math.max(LOCKOUT_MS, prior * 2), 15 * 60_000);
+        rec.count = 0;
+    }
+    loginAttempts.set(key, rec);
+}
+
 /**
  * Login endpoint
  */
-router.post('/login', async (req, res) => {
+router.post('/login', loginThrottle, async (req, res) => {
     try {
         const { username, password } = req.body;
 
@@ -18,14 +63,19 @@ router.post('/login', async (req, res) => {
 
         // Verify credentials
         if (verifyCredentials(username, password)) {
-            const token = generateToken(username);
-            
+            recordLoginResult(req, username, true);
+            // "Remember me": 30-day token vs 1-day (login form default = on)
+            const remember = req.body?.remember !== false;
+            const token = generateToken(username, { expiresIn: remember ? '30d' : '1d' });
+
             res.json({
                 message: 'Login successful',
                 token,
+                remember,
                 user: { username }
             });
         } else {
+            recordLoginResult(req, username, false);
             res.status(401).json({
                 message: 'Invalid username or password'
             });
@@ -44,10 +94,67 @@ router.post('/login', async (req, res) => {
 router.get('/verify', authenticateToken, (req, res) => {
     res.json({
         message: 'Token is valid',
-        user: req.user
+        user: req.user,
+        // First-run hint: tells the dashboard to show the default-credentials
+        // banner (what the login is + how to change it) until they're changed.
+        usingDefaultCredentials: usingDefaultCredentials()
     });
 });
 
+/**
+ * Admin account settings (drives the dashboard's "Admin account" card).
+ */
+router.get('/settings', authenticateToken, (req, res) => {
+    res.json({
+        username: config.security.adminUsername,
+        usingDefaultCredentials: usingDefaultCredentials()
+    });
+});
+
+/**
+ * Change the admin login from inside the app (the packaged-exe path — no .env).
+ * Requires the CURRENT password; rotates the JWT secret so every other session
+ * is signed out, and returns a fresh token so the operator stays logged in.
+ */
+router.post('/credentials', authenticateToken, async (req, res) => {
+    try {
+        const { currentPassword, newUsername, newPassword } = req.body || {};
+
+        if (!verifyCredentials(config.security.adminUsername, currentPassword || '')) {
+            // 400, NOT 401: the dashboard's fetch patch reads 401/403 JSON as
+            // "session expired" and bounces to /login — a wrong current
+            // password is a form error and must stay on the page.
+            return res.status(400).json({ message: 'Current password is incorrect' });
+        }
+        const username = String(newUsername ?? config.security.adminUsername).trim();
+        if (username.length < 2) {
+            return res.status(400).json({ message: 'Username must be at least 2 characters' });
+        }
+        if (typeof newPassword !== 'string' || newPassword.length < 8) {
+            return res.status(400).json({ message: 'New password must be at least 8 characters' });
+        }
+
+        const jwtSecret = mintJwtSecret(); // rotation: old tokens die with the old secret
+        const adminPasswordHash = hashPassword(newPassword);
+        saveSecurityFile({ adminUsername: username, adminPasswordHash, jwtSecret });
+
+        // Hot-apply: middleware and token generation read config at call time.
+        config.security.adminUsername = username;
+        config.security.adminPasswordHash = adminPasswordHash;
+        config.security.jwtSecret = jwtSecret;
+
+        res.json({
+            message: 'Admin login updated — other sessions were signed out',
+            token: generateToken(username),
+            user: { username },
+            usingDefaultCredentials: false
+        });
+    } catch (error) {
+        console.error('Credential change error:', error);
+        res.status(500).json({ message: 'Could not update the admin login' });
+    }
+});
+
 /**
  * Get CSRF token endpoint
  */
diff --git a/src/routes/contact.js b/src/routes/contact.js
index e1379fa..b3b967d 100644
--- a/src/routes/contact.js
+++ b/src/routes/contact.js
@@ -5,17 +5,19 @@ import multer from 'multer';
 import { fileURLToPath } from 'url';
 import logger from '../utils/logger.js';
 import { ValidationError, ErrorCodes } from '../utils/errors.js';
+import { dataDir, uploadsBase } from '../utils/vendorPaths.js';
 
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
 const router = express.Router();
 
-// Path to contact details config file
-const contactConfigPath = path.join(process.cwd(), 'config', 'contact-details.json');
+// Mutable state lives in the data dir (userData in packaged apps, repo
+// config/ in dev) — a packaged app must never write next to its exe.
+const contactConfigPath = path.join(dataDir(), 'contact-details.json');
 
-// Path for event image uploads
-const UPLOADS_DIR = path.join(process.cwd(), 'public', 'uploads', 'events');
+// Path for event image uploads (served from the same base — see app.js)
+const UPLOADS_DIR = path.join(uploadsBase(), 'events');
 
 // Configure multer for event image uploads
 const storage = multer.diskStorage({
diff --git a/src/routes/settings.js b/src/routes/settings.js
index 05c0f62..7acb364 100644
--- a/src/routes/settings.js
+++ b/src/routes/settings.js
@@ -3,16 +3,19 @@ import fs from 'fs-extra';
 import path from 'path';
 import { fileURLToPath } from 'url';
 import multer from 'multer';
+import { dataDir, uploadsBase } from '../utils/vendorPaths.js';
 
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
 const router = express.Router();
 
-// Path to store application settings
-const SETTINGS_DIR = path.join(__dirname, '../../data/settings');
+// Path to store application settings — the writable DATA DIR, never the
+// install dir (packaged apps run from a read-only asar; a repo-relative
+// path there fails ENOTDIR and settings init silently dies).
+const SETTINGS_DIR = path.join(dataDir(), 'settings');
 const MUSIC_FILE_SETTING = path.join(SETTINGS_DIR, 'last-music-file.json');
-const UPLOADS_DIR = path.join(__dirname, '../../public/uploads/music');
+const UPLOADS_DIR = path.join(uploadsBase(), 'music');
 
 // Configure multer for music file uploads
 const storage = multer.diskStorage({
@@ -300,8 +303,8 @@ router.get('/music/verify', async (req, res) => {
 
         if (musicSettings.filename) {
             if (musicSettings.isUploaded) {
-                // Check uploaded files directory
-                const uploadsDir = path.join(__dirname, '../../public/uploads/music');
+                // Check uploaded files directory (writable uploads base)
+                const uploadsDir = path.join(uploadsBase(), 'music');
                 const filePath = path.join(uploadsDir, musicSettings.filename);
                 fileExists = await fs.pathExists(filePath);
                 fileUrl = fileExists ? `/uploads/music/${musicSettings.filename}` : null;
diff --git a/src/routes/streams.js b/src/routes/streams.js
index 590f36d..b830b91 100644
--- a/src/routes/streams.js
+++ b/src/routes/streams.js
@@ -3,9 +3,30 @@ import http from 'http';
 import streamingService from '../services/StreamingService.js';
 import IcecastService from '../services/IcecastService.js';
 import logger from '../utils/logger.js';
+import { ErrorCodes } from '../utils/errors.js';
 
 const router = express.Router();
 
+/**
+ * Build structured stream error payload for start/restart failures.
+ * @param {Error} error - Caught error (may have cause, diagnosis, capacity, shortMessage, stderrSnippet)
+ * @param {string} message - Generic message e.g. "Error starting stream"
+ * @param {string} code - ErrorCodes.STREAM_START_FAILED or STREAM_RESTART_FAILED
+ * @returns {Object} Payload for res.status(500).json()
+ */
+function streamErrorPayload(error, message, code) {
+  const payload = {
+    message,
+    error: error.shortMessage || error.message,
+    code
+  };
+  if (error.cause) payload.cause = error.cause;
+  if (error.diagnosis) payload.diagnosis = error.diagnosis;
+  if (error.capacity) payload.capacity = error.capacity;
+  if (error.stderrSnippet) payload.stderrSnippet = error.stderrSnippet;
+  return payload;
+}
+
 /**
  * @route POST /api/streams/start
  * @description Start a new FFmpeg stream.
@@ -26,9 +47,23 @@ router.post('/start', async (req, res) => {
     });
   } catch (error) {
     logger.error('Error starting stream:', { error: error.message, stack: error.stack });
-    const payload = { message: 'Error starting stream', error: error.shortMessage || error.message };
-    if (error.capacity) payload.capacity = error.capacity;
-    res.status(500).json(payload);
+    logger.info('Stream start failed', { cause: error.cause, streamId: req.body?.id || req.body?.streamId });
+    res.status(500).json(streamErrorPayload(error, 'Error starting stream', ErrorCodes.STREAM_START_FAILED));
+  }
+});
+
+/**
+ * @route POST /api/streams/create
+ * @description Create a stream configuration without starting it (drawer "Save").
+ * @access Public
+ */
+router.post('/create', async (req, res) => {
+  try {
+    const stream = await streamingService.createStoppedStream(req.body || {});
+    res.status(200).json({ message: 'Stream created (stopped)', streamId: stream.id, stream });
+  } catch (error) {
+    logger.error('Error creating stream:', { error: error.message });
+    res.status(400).json({ message: 'Error creating stream', error: error.message });
   }
 });
 
@@ -84,23 +119,24 @@ router.post('/start-all', async (req, res) => {
  * @access Public
  */
 router.post('/restart', async (req, res) => {
+  let id; // declared OUTSIDE try: the catch logs it, and a ReferenceError inside
+          // catch would hang the response forever (unhandledRejection in express 4)
   try {
-    const { id } = req.body;
+    id = req.body?.id;
     logger.info('Received stream restart request:', { streamId: id });
-    
+
     const result = await streamingService.restartStream(id);
     logger.info('Stream restarted successfully:', { streamId: id });
-    
-    res.status(200).json({ 
-      message: 'Stream restarted successfully', 
+
+    res.status(200).json({
+      message: 'Stream restarted successfully',
       streamId: id,
       result: result
     });
   } catch (error) {
     logger.error('Error restarting stream:', { error: error.message, stack: error.stack });
-    const payload = { message: 'Error restarting stream', error: error.shortMessage || error.message };
-    if (error.capacity) payload.capacity = error.capacity;
-    res.status(500).json(payload);
+    logger.info('Stream restart failed', { cause: error.cause, streamId: id });
+    res.status(500).json(streamErrorPayload(error, 'Error restarting stream', ErrorCodes.STREAM_RESTART_FAILED));
   }
 });
 
@@ -135,7 +171,14 @@ router.get('/play/:streamId', (req, res) => {
       return;
     }
     const contentType = upstream.headers['content-type'] || 'audio/mpeg';
+    // Low-latency pass-through: flush headers immediately (no Node output
+    // buffering), disable Nagle so small MP3 frames leave at once (Nagle adds
+    // 40-200ms per frame), and forbid caches from holding the stream. Every
+    // byte is forwarded the moment it arrives.
     res.setHeader('Content-Type', contentType);
+    res.setHeader('Cache-Control', 'no-store');
+    res.flushHeaders();
+    if (typeof res.socket?.setNoDelay === 'function') res.socket.setNoDelay(true);
     upstream.pipe(res);
   });
   clientRequest.on('timeout', () => {
@@ -213,8 +256,8 @@ router.post('/reorder', async (req, res) => {
  */
 router.post('/update', async (req, res) => {
   try {
-    const { streamId, name, deviceId } = req.body;
-    const result = await streamingService.updateStream(streamId, { name, deviceId });
+    const { streamId, name, deviceId, bitrate } = req.body;
+    const result = await streamingService.updateStream(streamId, { name, deviceId, bitrate });
     res.status(200).json({
       message: 'Stream updated successfully',
       oldStreamId: result.oldStreamId,
diff --git a/src/routes/system.js b/src/routes/system.js
index 3a27b4a..cf200b5 100644
--- a/src/routes/system.js
+++ b/src/routes/system.js
@@ -1,7 +1,9 @@
 import express from 'express';
+import QRCode from 'qrcode';
 import audioDeviceService from '../services/AudioDeviceService.js';
 import IcecastService from '../services/IcecastService.js';
 import streamingService from '../services/StreamingService.js';
+import binaryProbe from '../services/BinaryProbeService.js';
 // import { updateService } from '../services/UpdateService.js';
 import { ErrorHandler, errorMiddleware } from '../utils/errors.js';
 
@@ -75,12 +77,14 @@ router.post('/audio-devices/test', async (req, res) => {
       return res.status(400).json({ message: 'Device ID is required' });
     }
 
-    const isAccessible = await audioDeviceService.testDevice(deviceId);
+    const result = await audioDeviceService.testDevice(deviceId);
 
     res.json({
       success: true,
       deviceId,
-      accessible: isAccessible
+      accessible: result.ok,
+      reason: result.reason,
+      deviceName: result.deviceName
     });
   } catch (error) {
     res.status(500).json({ message: 'Error testing audio device', error: error.message });
@@ -149,6 +153,32 @@ router.get('/audio-devices/diagnose', async (req, res) => {
  * @description Get system config for frontend (Icecast port, host). Used for building listener/copy URLs.
  * @access Public
  */
+/**
+ * @route GET /api/qr?url=<http(s) URL>
+ * @description QR code (SVG) for any URL — used by the share popups so people
+ *   can scan to open the listener page on their phones. Fully offline.
+ * @access Public (encodes only the URL the caller provides)
+ */
+router.get('/qr', async (req, res) => {
+  try {
+    const url = String(req.query.url || '');
+    if (!/^https?:\/\/.+/.test(url) || url.length > 512) {
+      return res.status(400).json({ error: 'A valid http(s) url parameter is required' });
+    }
+    const svg = await QRCode.toString(url, {
+      type: 'svg',
+      margin: 1,
+      width: 320,
+      color: { dark: '#000000', light: '#FFFFFF' },
+    });
+    res.setHeader('Content-Type', 'image/svg+xml');
+    res.setHeader('Cache-Control', 'public, max-age=300');
+    res.send(svg);
+  } catch (error) {
+    res.status(500).json({ error: 'Failed to generate QR code' });
+  }
+});
+
 router.get('/config', async (req, res, next) => {
   try {
     await icecastService.ensureInitialized();
@@ -191,6 +221,53 @@ router.get('/icecast-status', async (req, res, next) => {
   }
 });
 
+/**
+ * @route GET /api/system/binary-probe
+ * @description Functional binary self-test result (which FFmpeg/Icecast the
+ *   app can rely on and why) — support's first diagnostic stop.
+ * @access Private (admin)
+ */
+router.get('/binary-probe', (req, res) => {
+  res.json(binaryProbe.getPin() || { result: 'not-run' });
+});
+
+/**
+ * @route GET /api/system/binaries/status
+ * @description Which tier resolved for each engine (vendored / system /
+ *   missing) + the download-on-demand job state. Drives the dashboard
+ *   "streaming engines" notice.
+ * @access Private (admin)
+ */
+router.get('/binaries/status', async (req, res, next) => {
+  try {
+    const { binariesStatus, downloadJobState } = await import('../utils/binaries.js');
+    res.json({ ...binariesStatus(), download: downloadJobState() });
+  } catch (error) {
+    next(error);
+  }
+});
+
+/**
+ * @route POST /api/system/binaries/download
+ * @description Start the pinned FFmpeg download into the writable data-dir
+ *   vendor root (rare tier: neither bundled kit nor system install exists).
+ *   Returns immediately; poll GET /binaries/status for progress.
+ * @access Private (admin)
+ */
+router.post('/binaries/download', async (req, res, next) => {
+  try {
+    const { startBinaryDownload, downloadJobState } = await import('../utils/binaries.js');
+    const before = downloadJobState();
+    if (before.running) {
+      return res.status(409).json({ error: 'Download already running', download: before });
+    }
+    const job = startBinaryDownload();
+    return res.status(202).json({ message: 'Download started', download: job });
+  } catch (error) {
+    next(error);
+  }
+});
+
 /**
  * @route GET /api/system/icecast/search-installations
  * @description Search for Icecast installations on the system
diff --git a/src/routes/telemetry.js b/src/routes/telemetry.js
new file mode 100644
index 0000000..f371b76
--- /dev/null
+++ b/src/routes/telemetry.js
@@ -0,0 +1,105 @@
+import express from 'express';
+import telemetry from '../services/TelemetryService.js';
+
+const router = express.Router();
+
+/**
+ * Listener-browser failure telemetry, relayed through the operator's server.
+ *
+ * Listeners never hold a PostHog key and never decide consent — the server
+ * owns both (TelemetryService). The listener page fire-and-forgets failures
+ * here; if telemetry is disabled the events are dropped silently.
+ *
+ * Privacy: same rules as server-side telemetry — no stream names, no file
+ * paths, no user identity. Stream label (e.g. "S1") + media error code +
+ * browser platform is all a failure report carries.
+ */
+
+const CLIENT_EVENTS = new Set([
+  'playback_error',    // audio element failed while playing a channel
+  'playback_stalled',  // buffering stall (deduped client-side)
+  'reconnect_grace',   // the stream disappeared mid-listen; grace window opened
+  'offair_giveup',     // grace expired without the stream returning
+  'load_failed'        // the listener page could not load the stream list
+]);
+const MAX_PROPS = 8;
+const MAX_STR = 160;
+
+// Tiny in-memory rate limit: LAN app, single instance. 30 events/min/IP is far
+// above any real listener's failure rate and stops a misbehaving tab from
+// spamming the PostHog project.
+const RATE_LIMIT = 30;
+const RATE_WINDOW_MS = 60_000;
+const hits = new Map(); // ip -> { count, windowStart }
+
+router.post('/client-event', (req, res) => {
+  try {
+    const now = Date.now();
+    const ip = req.ip || req.socket?.remoteAddress || 'unknown';
+    let h = hits.get(ip);
+    if (!h || now - h.windowStart > RATE_WINDOW_MS) {
+      h = { count: 0, windowStart: now };
+      hits.set(ip, h);
+    }
+    if (++h.count > RATE_LIMIT) {
+      return res.status(429).json({ error: 'Too many events' });
+    }
+
+    const { event, properties = {} } = req.body || {};
+    if (!CLIENT_EVENTS.has(event)) {
+      return res.status(400).json({ error: 'Unknown event' });
+    }
+
+    // Copy a bounded, primitive-only subset — client strings are untrusted
+    const props = { surface: 'listener' };
+    let count = 0;
+    for (const [k, v] of Object.entries(properties)) {
+      if (count >= MAX_PROPS) break;
+      if (typeof v === 'string') props[k] = v.slice(0, MAX_STR);
+      else if (typeof v === 'number' || typeof v === 'boolean') props[k] = v;
+      count++;
+    }
+
+    // capture() is a no-op unless the operator consented + key resolves
+    telemetry.capture(`client_${event}`, props);
+    return res.json({ ok: true, captured: telemetry.getConsentState().enabled });
+  } catch (error) {
+    return res.status(500).json({ error: 'Failed to record event' });
+  }
+});
+
+/**
+ * @route GET /api/telemetry/consent
+ * @description Current telemetry state for the dashboard Admin account card
+ *   switch. Admin-only (the whole router sits behind the auth gate except the
+ *   explicitly-allowlisted client-event POST).
+ * @access Private (admin)
+ */
+router.get('/consent', async (req, res, next) => {
+  try {
+    await telemetry.init(); // idempotent: state + key loaded before reading
+    const { enabled, consented } = telemetry.getConsentState();
+    return res.json({ enabled, consented, configured: !!telemetry.getKey() });
+  } catch (error) {
+    next(error);
+  }
+});
+
+/**
+ * @route POST /api/telemetry/consent
+ * @description Toggle telemetry from the dashboard (same path as the tray
+ *   menu toggle). Body: { enabled: boolean }.
+ * @access Private (admin)
+ */
+router.post('/consent', async (req, res, next) => {
+  try {
+    const enabled = req.body?.enabled === true;
+    telemetry.setConsented(enabled);
+    const { consented } = telemetry.getConsentState();
+    return res.json({ ok: true, enabled, consented });
+  } catch (error) {
+    next(error);
+  }
+});
+
+export default router;
diff --git a/src/server.js b/src/server.js
index 86dc5d2..bd9093c 100644
--- a/src/server.js
+++ b/src/server.js
@@ -1,235 +1,142 @@
-import express from 'express';
-import path from 'path';
-import { fileURLToPath } from 'url';
 import os from 'os';
 import readline from 'readline';
-import systemRouter from './routes/system.js';
-import streamsRouter from './routes/streams.js';
-import settingsRouter from './routes/settings.js';
-import contactRouter from './routes/contact.js';
-import authRouter from './routes/auth.js';
-import { optionalAuth, authenticateToken } from './middleware/auth.js';
-import { requireLocalhostAdmin } from './middleware/requireLocalhost.js';
+import app, { startServer } from './app.js';
 import streamingService from './services/StreamingService.js';
 import logger from './utils/logger.js';
 
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = path.dirname(__filename);
-
-const app = express();
 const PORT = process.env.PORT || 3001;
 const HOST = process.env.HOST || '0.0.0.0';
 
-// Middleware
-app.use(express.json());
-
-// Serve static files from public directory (so listener page on LAN gets CSS/JS)
-const publicPath = path.join(__dirname, '../public');
-app.use(express.static(publicPath));
-
-// Lock admin to localhost: block admin UI and admin APIs from non-localhost (listener page and APIs stay allowed)
-app.use(requireLocalhostAdmin);
-
-// A simple health check endpoint to confirm the server is running.
-app.get('/api/health', (req, res) => {
-  res.status(200).json({ status: 'OK', message: 'Server is running' });
-});
-
-// console.log('[SERVER] Health check route configured.');
-
-// API Routes
-app.use('/api/auth', authRouter);
-// app.use('/api/system', authenticateToken, systemRouter);
-// app.use('/api/streams', authenticateToken, streamsRouter);
-// app.use('/api/settings', authenticateToken, settingsRouter);
-app.use('/api/system', systemRouter);
-app.use('/api/streams', streamsRouter);
-app.use('/api/settings', settingsRouter);
-app.use('/api', contactRouter); // Contact routes can be public
-
-// Serve login page
-app.get('/login', (req, res) => {
-  res.sendFile(path.join(__dirname, '../public/login.html'));
-});
-
-// Serve dashboard page (protected)
-app.get('/dashboard', optionalAuth, (req, res) => {
-  res.sendFile(path.join(__dirname, '../public/index.html'));
-});
-
-// Serve client page (for listeners)
-app.get('/client', (req, res) => {
-  res.sendFile(path.join(__dirname, '../public/index.html'));
-});
-
-// Serve streams page (for listeners) - both /streams and /streams.html
-app.get('/streams', (req, res) => {
-  res.sendFile(path.join(__dirname, '../public/streams.html'));
-});
-
-app.get('/streams.html', (req, res) => {
-  res.sendFile(path.join(__dirname, '../public/streams.html'));
-});
-
-// Fallback to index for SPA routing (but exclude /streams routes)
-app.get('*', (req, res) => {
-  if (req.path.startsWith('/api/')) {
-    res.status(404).json({ error: 'API endpoint not found' });
-  } else if (req.path === '/streams' || req.path === '/streams.html') {
-    // This should not happen due to the specific routes above, but just in case
-    res.sendFile(path.join(__dirname, '../public/streams.html'));
-  } else if (req.path === '/login.html') {
-    res.sendFile(path.join(__dirname, '../public/login.html'));
-  } else {
-    // Direct access to admin dashboard (no auth required)
-    res.sendFile(path.join(__dirname, '../public/index.html'));
-  }
-});
+// Start the server when this file is run (skip in test so supertest can use app)
+if (process.env.NODE_ENV !== 'test') {
+  const { server, shutdown } = startServer({ port: PORT, host: HOST });
 
-// Global server reference for graceful shutdown
-let server = null;
+  server.on('listening', () => {
+    console.log(`Server is listening on http://${HOST}:${PORT}`);
 
-// Graceful shutdown handler
-async function gracefulShutdown(signal = 'SIGINT') {
-  const rl = readline.createInterface({
-    input: process.stdin,
-    output: process.stdout
-  });
+    // Get local IPv4 address for network access (prioritize local network, exclude VPN)
+    const networkInterfaces = os.networkInterfaces();
+    let localIPv4 = null;
 
-  return new Promise((resolve) => {
-    rl.question(
-      '\n⚠️  Shutdown requested. Stop LANStreamer server? [Y/n] (default: Y) ',
-      async (answer) => {
-        rl.close();
+    const isLocalNetworkIP = (ip) => {
+      return ip.startsWith('192.168.') ||
+             ip.startsWith('10.') ||
+             (ip.startsWith('172.') && parseInt(ip.split('.')[1]) >= 16 && parseInt(ip.split('.')[1]) <= 31);
+    };
 
-        const shouldShutdown = !answer || answer.toLowerCase() === 'y' || answer === '';
+    for (const interfaceName in networkInterfaces) {
+      const interfaces = networkInterfaces[interfaceName];
+      if (interfaces) {
+        for (const iface of interfaces) {
+          if (iface.family === 'IPv4' && !iface.internal && isLocalNetworkIP(iface.address)) {
+            localIPv4 = iface.address;
+            break;
+          }
+        }
+      }
+      if (localIPv4) break;
+    }
 
-        if (!shouldShutdown) {
-          console.log('❌ Shutdown cancelled. Server continues running.\n');
-          resolve(false);
-          return;
+    if (!localIPv4) {
+      for (const interfaceName in networkInterfaces) {
+        const interfaces = networkInterfaces[interfaceName];
+        if (interfaces) {
+          for (const iface of interfaces) {
+            if (iface.family === 'IPv4' && !iface.internal) {
+              localIPv4 = iface.address;
+              break;
+            }
+          }
         }
+        if (localIPv4) break;
+      }
+    }
 
-        console.log('\n🛑 Shutting down LANStreamer server...');
+    if (HOST === '0.0.0.0') {
+      console.log(`Network access: Server is accessible from other devices on your network`);
+      if (localIPv4) {
+        console.log(`Admin Dashboard: http://${localIPv4}:${PORT}`);
+        console.log(`Listener Page: http://${localIPv4}:${PORT}/streams`);
+      } else {
+        console.log(`Admin Dashboard: http://localhost:${PORT}`);
+        console.log(`Listener Page: http://localhost:${PORT}/streams`);
+      }
+    }
 
-        try {
-          // Stop all active streams
-          const stats = streamingService.getStats();
-          const activeCount = stats.streams.filter(s => s.status === 'running').length;
+    console.log('');
+    console.log('⚠️  DO NOT CLOSE THIS TERMINAL TO KEEP LANStreamer SERVER RUNNING!');
+    console.log('');
+  });
 
-          if (activeCount > 0) {
-            console.log(`📡 Stopping ${activeCount} active stream(s)...`);
-            await streamingService.stopAllStreams();
-            console.log('✅ All streams stopped.');
-          } else {
-            console.log('✅ No active streams to stop.');
+  // Interactive shutdown for the CLI (Electron uses the non-interactive shutdown from app.js)
+  async function gracefulShutdown(signal = 'SIGINT') {
+    const rl = readline.createInterface({
+      input: process.stdin,
+      output: process.stdout
+    });
+
+    return new Promise((resolve) => {
+      rl.question(
+        '\n⚠️  Shutdown requested. Stop LANStreamer server? [Y/n] (default: Y) ',
+        async (answer) => {
+          rl.close();
+
+          const shouldShutdown = !answer || answer.toLowerCase() === 'y' || answer === '';
+
+          if (!shouldShutdown) {
+            console.log('❌ Shutdown cancelled. Server continues running.\n');
+            resolve(false);
+            return;
           }
 
-          // Close the server
-          if (server) {
-            server.close(() => {
-              console.log('✅ Server closed.');
-              console.log('\n👋 LANStreamer has been shut down gracefully.\n');
-              resolve(true);
+          console.log('\n🛑 Shutting down LANStreamer server...');
+
+          try {
+            const stats = streamingService.getStats();
+            const activeCount = stats.streams.filter(s => s.status === 'running').length;
+
+            if (activeCount > 0) {
+              console.log(`📡 Stopping ${activeCount} active stream(s)...`);
+              await streamingService.stopAllStreams();
+              console.log('✅ All streams stopped.');
+            } else {
+              console.log('✅ No active streams to stop.');
+            }
+
+            await new Promise((res) => {
+              const forceTimer = setTimeout(() => res(), 5000);
+              server.close(() => {
+                clearTimeout(forceTimer);
+                console.log('✅ Server closed.');
+                res();
+              });
             });
 
-            // Force shutdown after 5 seconds if server doesn't close
-            setTimeout(() => {
-              console.log('\n⚠️  Forced shutdown after timeout.');
-              resolve(true);
-              process.exit(0);
-            }, 5000);
-          } else {
-            console.log('✅ Shutdown complete.');
+            console.log('\n👋 LANStreamer has been shut down gracefully.\n');
+            resolve(true);
+          } catch (error) {
+            logger.error('Error during shutdown:', error);
+            console.log('❌ Error during shutdown:', error.message);
             resolve(true);
           }
-        } catch (error) {
-          logger.error('Error during shutdown:', error);
-          console.log('❌ Error during shutdown:', error.message);
-          resolve(true);
         }
-      }
-    );
-  });
-}
-
-// Handle shutdown signals
-process.on('SIGINT', async () => {
-  const shouldExit = await gracefulShutdown('SIGINT');
-  if (shouldExit) {
-    process.exit(0);
+      );
+    });
   }
-});
 
-process.on('SIGTERM', async () => {
-  const shouldExit = await gracefulShutdown('SIGTERM');
-  if (shouldExit) {
-    process.exit(0);
-  }
-});
-
-// Start the server when this file is run (skip in test so supertest can use app)
-if (process.env.NODE_ENV !== 'test') {
-  server = app.listen(PORT, HOST, () => {
-  console.log(`Server is listening on http://${HOST}:${PORT}`);
-  
-  // Get local IPv4 address for network access (prioritize local network, exclude VPN)
-  const networkInterfaces = os.networkInterfaces();
-  let localIPv4 = null;
-
-  // Function to check if IP is a local network address
-  const isLocalNetworkIP = (ip) => {
-    return ip.startsWith('192.168.') ||
-           ip.startsWith('10.') ||
-           (ip.startsWith('172.') && parseInt(ip.split('.')[1]) >= 16 && parseInt(ip.split('.')[1]) <= 31);
-  };
-
-  // First pass: Look for local network IPs (192.168.x.x, 10.x.x.x, 172.16-31.x.x)
-  for (const interfaceName in networkInterfaces) {
-    const interfaces = networkInterfaces[interfaceName];
-    if (interfaces) {
-      for (const iface of interfaces) {
-        if (iface.family === 'IPv4' && !iface.internal && isLocalNetworkIP(iface.address)) {
-          localIPv4 = iface.address;
-          break;
-        }
-      }
+  process.on('SIGINT', async () => {
+    const shouldExit = await gracefulShutdown('SIGINT');
+    if (shouldExit) {
+      process.exit(0);
     }
-    if (localIPv4) break;
-  }
+  });
 
-  // Second pass: If no local network IP found, get any non-internal IPv4
-  if (!localIPv4) {
-    for (const interfaceName in networkInterfaces) {
-      const interfaces = networkInterfaces[interfaceName];
-      if (interfaces) {
-        for (const iface of interfaces) {
-          if (iface.family === 'IPv4' && !iface.internal) {
-            localIPv4 = iface.address;
-            break;
-          }
-        }
-      }
-      if (localIPv4) break;
+  process.on('SIGTERM', async () => {
+    const shouldExit = await gracefulShutdown('SIGTERM');
+    if (shouldExit) {
+      process.exit(0);
     }
-  }
-  
-  if (HOST === '0.0.0.0') {
-    console.log(`Network access: Server is accessible from other devices on your network`);
-    if (localIPv4) {
-      console.log(`Admin Dashboard: http://${localIPv4}:${PORT}`);
-      console.log(`Listener Page: http://${localIPv4}:${PORT}/streams`);
-    } else {
-      console.log(`Admin Dashboard: http://localhost:${PORT}`);
-      console.log(`Listener Page: http://localhost:${PORT}/streams`);
-    }
-  }
-  
-  console.log('');
-  console.log('⚠️  DO NOT CLOSE THIS TERMINAL TO KEEP LANStreamer SERVER RUNNING!');
-  console.log('');
   });
 }
 
-// console.log('[SERVER] Script finished. Exporting app.');
 export default app; // Export the app for testing
diff --git a/src/services/AudioDeviceService.js b/src/services/AudioDeviceService.js
index 6712c44..d54d95a 100644
--- a/src/services/AudioDeviceService.js
+++ b/src/services/AudioDeviceService.js
@@ -92,7 +92,7 @@ class AudioDeviceService {
    * @returns {Array<{id: string, name: string, type: string, deviceType: string}>} List of Windows audio devices.
    */
   async detectWindowsDevices() {
-    const devices = [];
+    let devices = [];
 
     // Get DirectShow input devices
     const dshowCommand = 'ffmpeg -list_devices true -f dshow -i dummy 2>&1';
@@ -176,29 +176,23 @@ class AudioDeviceService {
       throw new Error('🎤 No Audio Devices Available: FFmpeg and PowerShell could not detect any audio devices. This usually means virtual audio drivers (like VB-Audio Virtual Cable) need to be restarted. Try: 1) Restart VB-Audio Virtual Cable Control Panel, 2) Close other audio applications, 3) Use a physical microphone, or 4) Restart your computer.');
     }
 
-    // Remove duplicates based on device name and ID
-    const uniqueDevices = devices.filter((device, index, self) => {
-      return index === self.findIndex(d =>
-        d.name === device.name &&
-        d.deviceType === device.deviceType &&
-        d.id === device.id
-      );
-    });
-
-    // Additional deduplication by name only (in case same device has different IDs)
-    const finalDevices = uniqueDevices.filter((device, index, self) => {
-      const duplicatesByName = self.filter(d => d.name === device.name && d.deviceType === device.deviceType);
-      if (duplicatesByName.length > 1) {
-        // Keep the first occurrence of devices with same name
-        return index === self.findIndex(d => d.name === device.name && d.deviceType === device.deviceType);
+    // Remove duplicates. FFmpeg 9 exposes the same physical device through BOTH
+    // DirectShow and WASAPI with the same id (sanitized name) but a different
+    // deviceType — so dedupe by device id alone, keeping the FIRST occurrence
+    // (DirectShow entries come first and are what streaming spawns with).
+    const finalDevices = (() => {
+      const byId = new Map();
+      for (const d of devices) {
+        const key = String(d.id || d.name || '').toLowerCase().trim();
+        if (!byId.has(key)) byId.set(key, d); // first occurrence wins (DirectShow)
       }
-      return true;
-    });
+      return [...byId.values()];
+    })();
 
     logger.audio('Windows device detection completed', {
       totalFound: devices.length,
-      uniqueDevices: uniqueDevices.length,
       finalDevices: finalDevices.length,
+      duplicatesRemoved: devices.length - finalDevices.length,
       inputCount: finalDevices.filter(d => d.deviceType === 'input').length,
       outputCount: finalDevices.filter(d => d.deviceType === 'output').length
     });
@@ -304,8 +298,9 @@ class AudioDeviceService {
     logger.audio('Parsing Windows devices output', { outputLength: output.length, lineCount: lines.length });
 
     for (const line of lines) {
-      // Look for DirectShow audio input devices
-      const audioInputMatch = line.match(/\[dshow @ .*\] "([^"]+)" \(audio\)/);
+      // Look for DirectShow audio input devices.
+      // FFmpeg 8: [dshow @ 0x...] "Name" (audio); FFmpeg 9: [in#0 @ 0x...] "Name" (audio)
+      const audioInputMatch = line.match(/\[(?:dshow|in#\d+)[^\]]*\] "([^"]+)" \(audio\)/);
       if (audioInputMatch) {
         const deviceName = audioInputMatch[1];
         logger.audio('Found audio input device', { deviceName });
@@ -320,7 +315,7 @@ class AudioDeviceService {
       }
 
       // Look for DirectShow video devices (some have audio capabilities)
-      const videoMatch = line.match(/\[dshow @ .*\] "([^"]+)" \(video\)/);
+      const videoMatch = line.match(/\[(?:dshow|in#\d+)[^\]]*\] "([^"]+)" \(video\)/);
       if (videoMatch) {
         const deviceName = videoMatch[1];
         // Check if it's likely an audio-capable device (webcam with microphone)
@@ -341,7 +336,7 @@ class AudioDeviceService {
 
       // Look for Windows audio output devices (speakers, headphones)
       // These might appear in different formats, so we'll check for common patterns
-      const outputMatch = line.match(/\[dshow @ .*\] "([^"]+)"/);
+      const outputMatch = line.match(/\[(?:dshow|in#\d+)[^\]]*\] "([^"]+)"/);
       if (outputMatch) {
         const deviceName = outputMatch[1];
         // Check if it's likely an output device
@@ -382,8 +377,9 @@ class AudioDeviceService {
     logger.audio('Parsing WASAPI devices output', { outputLength: output.length, lineCount: lines.length });
 
     for (const line of lines) {
-      // Look for WASAPI audio devices - format: [wasapi @ address] "Device Name" (audio, output)
-      const wasapiMatch = line.match(/\[wasapi @ .*\] "([^"]+)"/);
+      // Look for WASAPI audio devices - FFmpeg 8: [wasapi @ addr] "Name" (audio, output);
+      // FFmpeg 9 uses the generic input prefix: [in#0 @ addr] "Name"
+      const wasapiMatch = line.match(/\[(?:wasapi|in#\d+)[^\]]*\] "([^"]+)"/);
       if (wasapiMatch) {
         const deviceName = wasapiMatch[1];
 
@@ -563,36 +559,28 @@ class AudioDeviceService {
   }
 
   /**
-   * Tests if a specific audio device is accessible.
-   * This is a lightweight check that verifies the device exists in our device list.
-   * The actual FFmpeg accessibility will be tested when the stream starts.
+   * Tests if a specific audio device is available (exists in device list).
+   * Lightweight check; actual FFmpeg accessibility is tested when the stream starts.
    * @param {string} deviceId - Device ID to test
-   * @returns {boolean} True if device is accessible
+   * @returns {{ ok: boolean, reason?: string, deviceName?: string }}
    */
   async testDevice(deviceId) {
     try {
-      logger.audio('Testing device accessibility (lightweight check)', { deviceId });
-      
-      // Get fresh device list (bypasses cache if expired)
+      logger.audio('Testing device availability (lightweight check)', { deviceId });
+
       const devices = await this.getAudioDevices();
       const device = devices.find(d => d.id === deviceId);
-      
+
       if (!device) {
         logger.audio('Device not found in device list', { deviceId, availableDevices: devices.map(d => d.id) });
-        return false;
+        return { ok: false, reason: 'Device not in list. It may be disconnected, in use, or the list may be stale. Try "Refresh Devices".' };
       }
 
-      logger.audio('Device found and accessible', { deviceId, deviceName: device.name });
-      
-      // Device exists in the list - assume it's accessible
-      // The actual FFmpeg test will happen when the stream starts
-      // This avoids hanging on slow device tests
-      return true;
-      
+      logger.audio('Device found and available', { deviceId, deviceName: device.name });
+      return { ok: true, deviceName: device.name };
     } catch (error) {
       logger.audio('Device test failed with exception', { deviceId, error: error.message });
-      // If we can't even check the device list, assume it's not accessible
-      return false;
+      return { ok: false, reason: error.message || 'Could not check device list.' };
     }
   }
 }
diff --git a/src/services/BinaryProbeService.js b/src/services/BinaryProbeService.js
new file mode 100644
index 0000000..70921a0
--- /dev/null
+++ b/src/services/BinaryProbeService.js
@@ -0,0 +1,234 @@
+/**
+ * Functional binary probe — proves FFmpeg (and the Icecast kit) can do THIS
+ * APP'S exact job before we rely on them, replacing "check the system specs"
+ * (which can't predict compiled-in codecs) with a staged self-test:
+ *
+ *   A. dshow indev present + audio devices enumerable      (~0.3 s)
+ *   B. encoder chain available (libmp3lame / aac / libvorbis) (~0.3 s)
+ *   C. end-to-end: 2 s of real dshow audio encoded to MP3 and pushed
+ *      through a temporary loopback Icecast                (~3–5 s)
+ *
+ * Result tiers:
+ *  - ok                → pin {path, origin, codec} and use the candidate
+ *  - device-issue      → binaries are fine; the machine has a device problem
+ *                        (unplugged/misbehaving capture device) — runtime UX
+ *  - fail              → every candidate failed A/B, or C failed for
+ *                        non-device reasons → surface full-download prompt
+ *
+ * Scheduling: runs once at first app start (never blocks server start), then
+ * only when the pin is invalid (missing file, app version changed, pinned
+ * path vanished). Never on every start — device contention + latency.
+ */
+import fs from 'fs';
+import os from 'os';
+import path from 'path';
+import net from 'net';
+import crypto from 'crypto';
+import { execFile, spawn } from 'child_process';
+import logger from '../utils/logger.js';
+import { dataDir, vendoredFfmpegPath, vendoredIcecastExePath } from '../utils/vendorPaths.js';
+
+const PROBE_SCHEMA = 1;
+const PIN_FILE = () => path.join(dataDir(), 'binary-probe.json');
+const OVERALL_TIMEOUT_MS = 25_000;
+
+const execFileP = (cmd, args, timeoutMs = 8000) =>
+  new Promise((resolve) => {
+    try {
+      execFile(cmd, args, { timeout: timeoutMs, windowsHide: true, maxBuffer: 4 * 1024 * 1024 }, (err, stdout, stderr) =>
+        resolve({ err, stdout, stderr: String(stderr || '') }));
+    } catch (err) {
+      resolve({ err, stdout: '', stderr: '' });
+    }
+  });
+
+function isFreeLoopback(port) {
+  return new Promise((resolve) => {
+    const probe = net.createServer();
+    probe.once('error', () => resolve(false));
+    probe.listen(port, '127.0.0.1', () => probe.close(() => resolve(true)));
+  });
+}
+
+async function freeProbePort() {
+  for (let port = 18300; port < 18320; port++) {
+    if (await isFreeLoopback(port)) return port;
+  }
+  return 18300;
+}
+
+class BinaryProbeService {
+  constructor() {
+    this._running = null;
+  }
+
+  getPin() {
+    try {
+      if (!fs.existsSync(PIN_FILE())) return null;
+      return JSON.parse(fs.readFileSync(PIN_FILE(), 'utf8'));
+    } catch {
+      return null;
+    }
+  }
+
+  _savePin(pin) {
+    try {
+      fs.mkdirSync(path.dirname(PIN_FILE()), { recursive: true });
+      fs.writeFileSync(PIN_FILE(), JSON.stringify(pin, null, 2));
+    } catch (error) {
+      logger.debug(`Probe pin not saved: ${error.message}`);
+    }
+  }
+
+  /** Cheap per-start validation: no probe needed unless something changed. */
+  needsProbe(appVersion) {
+    const pin = this.getPin();
+    if (!pin || pin.schemaVersion !== PROBE_SCHEMA) return true;
+    if (pin.appVersion !== appVersion) return true;
+    if (pin.result === 'ok' && pin.ffmpeg?.path && !fs.existsSync(pin.ffmpeg.path)) return true;
+    return false;
+  }
+
+  /** Fire-and-forget: never block boot on the probe. */
+  ensureProbed(appVersion) {
+    if (this.needsProbe(appVersion)) {
+      this._running = this._run(appVersion).catch((error) => {
+        logger.warn(`Binary probe crashed (ignored): ${error.message}`);
+        return null;
+      });
+    }
+    return this._running;
+  }
+
+  async _run(appVersion) {
+    const started = Date.now();
+    const candidates = [];
+    const vendored = vendoredFfmpegPath();
+    if (vendored) candidates.push({ path: vendored, origin: 'vendored' });
+    const sys = await execFileP('ffmpeg', ['-version'], 4000);
+    if (!sys.err) candidates.push({ path: 'ffmpeg', origin: 'system' });
+
+    const report = { schemaVersion: PROBE_SCHEMA, appVersion, timestamp: new Date().toISOString(), candidates: [] };
+
+    for (const candidate of candidates) {
+      const a = await this.stageA(candidate.path);
+      const b = await this.stageB(candidate.path);
+      const entry = { ...candidate, dshow: a.dshowOk, audioDevices: a.audioDevices, encoders: b, stage: 'AB' };
+
+      let codec = null;
+      for (const preferred of ['libmp3lame', 'aac', 'libvorbis']) {
+        if (b[preferred]) { codec = preferred; break; }
+      }
+      if (!a.dshowOk || !codec) {
+        entry.result = 'fail';
+        report.candidates.push(entry);
+        continue;
+      }
+
+      const c = await this.stageC(candidate.path, a.devices, codec);
+      entry.stage = 'C';
+      entry.endToEnd = c.result;
+      entry.result = c.result === 'ok' ? 'ok' : c.result;
+      report.candidates.push(entry);
+      if (c.result === 'ok') {
+        report.result = 'ok';
+        report.ffmpeg = { path: candidate.path, origin: candidate.origin, codec };
+        break; // first passing candidate wins (vendored is tried first)
+      }
+      // device-issue means binaries are fine — keep them pinned as usable
+      if (c.result === 'device-issue') {
+        report.result = 'device-issue';
+        report.ffmpeg = { path: candidate.path, origin: candidate.origin, codec };
+        break;
+      }
+    }
+
+    if (!report.result) report.result = 'fail';
+    report.durationMs = Date.now() - started;
+    logger.info(`Binary probe: ${report.result} (${report.durationMs}ms) — ${JSON.stringify(report.candidates.map(c => ({ origin: c.origin, result: c.result })))}`);
+    this._savePin(report);
+    return report;
+  }
+
+  /** Stage A: dshow indev + device enumeration. Exit code 1 is NORMAL here.
+   *  Line-based parse handles both output formats: FFmpeg 8
+   *  `[dshow @ ...] "Name" (audio)` and FFmpeg 9 `[in#0 @ ...] "Name" (audio)`
+   *  (FFmpeg 9 dropped the "DirectShow audio devices" section header). */
+  async stageA(ffmpegPath) {
+    const { err, stderr } = await execFileP(ffmpegPath, ['-f', 'dshow', '-list_devices', 'true', '-i', 'dummy'], 8000);
+    const devices = [];
+    for (const m of stderr.matchAll(/^\[.*?\]\s*"([^"]+)"\s*\(audio\)\s*$/gm)) devices.push(m[1]);
+    const dshowOk = devices.length > 0 || /DirectShow (audio|video) devices/i.test(stderr);
+    return { dshowOk, audioDevices: devices.length, devices };
+  }
+
+  /** Stage B: encoder chain present for our fallback formats. */
+  async stageB(ffmpegPath) {
+    const { stdout } = await execFileP(ffmpegPath, ['-encoders'], 8000);
+    return {
+      libmp3lame: /\blibmp3lame\b/.test(stdout),
+      aac: /\baac\b/.test(stdout),
+      libvorbis: /\blibvorbis\b/.test(stdout)
+    };
+  }
+
+  /**
+   * Stage C: the real job for 2 seconds — dshow → codec → icecast sink against
+   * a throwaway loopback Icecast with random credentials. Device-open errors
+   * are classified as machine problems, not binary problems.
+   */
+  async stageC(ffmpegPath, devices, codec) {
+    const icecastExe = vendoredIcecastExePath();
+    if (!icecastExe || !devices.length) return { result: devices.length ? 'skip' : 'device-issue' };
+
+    const tmp = fs.mkdtempSync(path.join(os.tmpdir(), 'ls-probe-'));
+    let icecast = null;
+    try {
+      const port = await freeProbePort();
+      const password = crypto.randomBytes(8).toString('hex');
+      const config = path.join(tmp, 'icecast.xml');
+      fs.writeFileSync(config,
+        `<icecast><limits><clients>2</clients><sources>2</sources></limits>` +
+        `<authentication><source-password>${password}</source-password><admin-password>${password}</admin-password></authentication>` +
+        `<hostname>localhost</hostname>` +
+        `<listen-socket><port>${port}</port><bind-address>127.0.0.1</bind-address></listen-socket>` +
+        `<paths><logdir>${tmp.replace(/\\/g, '/')}</logdir></paths>` +
+        `<logging><loglevel>4</loglevel></logging></icecast>`);
+
+      icecast = spawn(icecastExe, ['-c', config], { stdio: 'ignore', windowsHide: true });
+      // wait for the port to accept connections (max ~4s)
+      let up = false;
+      for (let i = 0; i < 20 && !up; i++) {
+        await new Promise(r => setTimeout(r, 200));
+        up = await new Promise((resolve) => {
+          const sock = net.connect(port, '127.0.0.1');
+          sock.once('connect', () => { sock.destroy(); resolve(true); });
+          sock.once('error', () => resolve(false));
+        });
+      }
+      if (!up) return { result: 'fail', reason: 'probe-icecast-not-listening' };
+
+      // Try up to 2 devices: a broken first capture device must not fail the probe
+      let lastDeviceError = false;
+      for (const device of devices.slice(0, 2)) {
+        const sink = `icecast://source:${password}@127.0.0.1:${port}/probe`;
+        const { err, stderr } = await execFileP(ffmpegPath, [
+          '-f', 'dshow', '-i', `audio=${device}`,
+          '-t', '2', '-acodec', codec, '-b:a', '128k', '-ar', '44100', '-ac', '2',
+          '-f', codec === 'libmp3lame' ? 'mp3' : (codec === 'aac' ? 'adts' : 'ogg'),
+          sink
+        ], 15000);
+        if (!err) return { result: 'ok', device };
+        const deviceError = /could not (find|open|run)|cannot open|error opening|no such (device|audio)/i.test(stderr);
+        if (!deviceError) return { result: 'fail', reason: 'end-to-end', stderr: stderr.slice(-300) };
+        lastDeviceError = true;
+      }
+      return lastDeviceError ? { result: 'device-issue' } : { result: 'fail', reason: 'no-device' };
+    } finally {
+      try { if (icecast?.pid) spawn('taskkill', ['/pid', String(icecast.pid), '/T', '/F'], { stdio: 'ignore', windowsHide: true }); } catch { /* ignore */ }
+      setTimeout(() => { try { fs.rmSync(tmp, { recursive: true, force: true }); } catch { /* ignore */ } }, 1000).unref?.();
+    }
+  }
+}
+
+export default new BinaryProbeService();
diff --git a/src/services/FFmpegService.js b/src/services/FFmpegService.js
deleted file mode 100644
index f5180fb..0000000
--- a/src/services/FFmpegService.js
+++ /dev/null
@@ -1,253 +0,0 @@
-import { spawn, execSync } from 'child_process'
-import { fileURLToPath } from 'url'
-import { dirname, join } from 'path'
-import fs from 'fs'
-import logger from '../utils/logger.js'
-import config from '../config/index.js'
-import IcecastService from './IcecastService.js'
-
-const __filename = fileURLToPath(import.meta.url)
-const __dirname = dirname(__filename)
-
-class FFmpegService {
-  constructor() {
-    this.activeStreams = {}
-    this.ffmpegPath = this.findFFmpegPath()
-  }
-
-  /**
-   * Find the FFmpeg executable path
-   * @returns {string} Path to FFmpeg executable
-   */
-  findFFmpegPath() {
-    // Check if FFmpeg is in PATH
-    try {
-      execSync('ffmpeg -version', { stdio: 'ignore' })
-      return 'ffmpeg'
-    } catch (error) {
-      // Check for bundled FFmpeg in the project
-      const bundledPath = join(__dirname, '../../bin/ffmpeg.exe')
-      if (fs.existsSync(bundledPath)) {
-        return bundledPath
-      }
-      
-      // Fallback to system PATH
-      return 'ffmpeg'
-    }
-  }
-
-  /**
-   * Returns the current list of active streams.
-   * @returns {Object} A dictionary of active streams.
-   */
-  getActiveStreams() {
-    return this.activeStreams
-  }
-
-  /**
-   * Start a real FFmpeg stream process.
-   * @param {object} streamConfig - The configuration for the stream.
-   */
-  startStream(streamConfig) {
-    if (!streamConfig || !streamConfig.id) {
-      throw new Error('Invalid stream configuration.')
-    }
-
-    if (this.activeStreams[streamConfig.id]) {
-      throw new Error(`Stream ${streamConfig.id} is already running.`)
-    }
-
-    try {
-      logger.info(`Starting FFmpeg stream: ${streamConfig.id}`)
-      
-      // Build FFmpeg command arguments
-      const args = this.buildFFmpegArgs(streamConfig)
-      
-      // Spawn the FFmpeg process
-      const process = spawn(this.ffmpegPath, args, {
-        stdio: ['ignore', 'pipe', 'pipe'],
-        detached: false
-      })
-
-      // Handle process events
-      process.on('error', (error) => {
-        logger.error(`FFmpeg process error for stream ${streamConfig.id}:`, error)
-        this.handleProcessError(streamConfig.id, error)
-      })
-
-      process.on('exit', (code, signal) => {
-        logger.info(`FFmpeg process exited for stream ${streamConfig.id}: code=${code}, signal=${signal}`)
-        this.handleProcessExit(streamConfig.id, code, signal)
-      })
-
-      // Store stream information
-      this.activeStreams[streamConfig.id] = {
-        status: 'running',
-        config: streamConfig,
-        process: process,
-        startedAt: new Date(),
-        pid: process.pid
-      }
-
-      logger.info(`FFmpeg stream ${streamConfig.id} started successfully with PID ${process.pid}`)
-      
-    } catch (error) {
-      logger.error(`Failed to start FFmpeg stream ${streamConfig.id}:`, error)
-      throw error
-    }
-  }
-
-  /**
-   * Get audio format configurations for fallback system
-   * @returns {Array} Array of format configurations
-   */
-  getAudioFormats() {
-    return [
-      {
-        name: 'MP3',
-        codec: 'libmp3lame',
-        format: 'mp3',
-        contentType: 'audio/mpeg'
-      },
-      {
-        name: 'AAC',
-        codec: 'aac',
-        format: 'mp4',  // Changed from 'adts' to 'mp4' for better browser support
-        contentType: 'audio/mp4'  // Changed content type
-      },
-      {
-        name: 'OGG',
-        codec: 'libvorbis',
-        format: 'ogg',
-        contentType: 'audio/ogg'
-      }
-    ];
-  }
-
-  /**
-   * Build FFmpeg command line arguments
-   * @param {object} streamConfig - Stream configuration
-   * @param {number} formatIndex - Index of format to try (for fallback)
-   * @returns {Array} Array of command line arguments
-   */
-  buildFFmpegArgs(streamConfig, formatIndex = 0) {
-    const formats = this.getAudioFormats();
-    const format = formats[formatIndex] || formats[0]; // Fallback to first format
-
-    // Read Icecast config from icecast.xml at runtime (source of truth)
-    // Source connections (FFmpeg → Icecast) must use localhost; getHostname() is for public URLs only
-    const icecastHost = 'localhost'
-    const icecastPort = IcecastService.getActualPort()
-    const icecastSourcePassword = IcecastService.getSourcePassword()
-
-    const args = [
-      '-f', 'dshow',                    // DirectShow input format
-      '-i', `audio="${streamConfig.deviceId}"`, // Audio input device
-      '-acodec', format.codec,          // Audio codec (with fallback support)
-      '-ab', '128k',                    // Audio bitrate
-      '-ar', '44100',                   // Sample rate
-      '-ac', '2',                       // Audio channels
-      '-f', format.format,              // Output format (with fallback support)
-      `icecast://source:${icecastSourcePassword}@${icecastHost}:${icecastPort}/ffmpeg-service-test`, // Output to Icecast
-      '-loglevel', 'error'              // Only show errors
-    ]
-
-    logger.info(`FFmpegService using ${format.name} format (${format.codec})`)
-    return args
-  }
-
-  /**
-   * Stop an FFmpeg stream process.
-   * @param {string} streamId - The ID of the stream to stop.
-   */
-  stopStream(streamId) {
-    const stream = this.activeStreams[streamId]
-    if (!stream) {
-      throw new Error(`Stream ${streamId} not found.`)
-    }
-
-    try {
-      logger.info(`Stopping FFmpeg stream: ${streamId}`)
-      
-      if (stream.process) {
-        // Kill the process gracefully first
-        stream.process.kill('SIGTERM')
-        
-        // Force kill after 5 seconds if still running
-        setTimeout(() => {
-          if (stream.process && !stream.process.killed) {
-            logger.warn(`Force killing FFmpeg process for stream ${streamId}`)
-            stream.process.kill('SIGKILL')
-          }
-        }, 5000)
-      }
-
-      // Remove from active streams
-      delete this.activeStreams[streamId]
-      
-      logger.info(`FFmpeg stream ${streamId} stopped successfully`)
-      
-    } catch (error) {
-      logger.error(`Failed to stop FFmpeg stream ${streamId}:`, error)
-      throw error
-    }
-  }
-
-  /**
-   * Handle FFmpeg process errors
-   * @param {string} streamId - Stream ID
-   * @param {Error} error - Error object
-   */
-  handleProcessError(streamId, error) {
-    logger.error(`FFmpeg process error for stream ${streamId}:`, error)
-    
-    if (this.activeStreams[streamId]) {
-      this.activeStreams[streamId].status = 'error'
-      this.activeStreams[streamId].error = error.message
-    }
-  }
-
-  /**
-   * Handle FFmpeg process exit
-   * @param {string} streamId - Stream ID
-   * @param {number} code - Exit code
-   * @param {string} signal - Exit signal
-   */
-  handleProcessExit(streamId, code, signal) {
-    logger.info(`FFmpeg process exited for stream ${streamId}: code=${code}, signal=${signal}`)
-    
-    if (this.activeStreams[streamId]) {
-      this.activeStreams[streamId].status = 'stopped'
-      this.activeStreams[streamId].exitedAt = new Date()
-      this.activeStreams[streamId].exitCode = code
-      this.activeStreams[streamId].exitSignal = signal
-    }
-  }
-
-  /**
-   * Get stream status
-   * @param {string} streamId - Stream ID
-   * @returns {object|null} Stream status or null if not found
-   */
-  getStreamStatus(streamId) {
-    return this.activeStreams[streamId] || null
-  }
-
-  /**
-   * Stop all active streams
-   */
-  stopAllStreams() {
-    const streamIds = Object.keys(this.activeStreams)
-    logger.info(`Stopping all ${streamIds.length} active streams`)
-    
-    streamIds.forEach(streamId => {
-      try {
-        this.stopStream(streamId)
-      } catch (error) {
-        logger.error(`Failed to stop stream ${streamId}:`, error)
-      }
-    })
-  }
-}
-
-export default new FFmpegService();
\ No newline at end of file
diff --git a/src/services/IcecastService.js b/src/services/IcecastService.js
index 8871557..19b7358 100644
--- a/src/services/IcecastService.js
+++ b/src/services/IcecastService.js
@@ -15,6 +15,7 @@ import {
   ErrorFactory,
   ErrorHandler
 } from '../utils/errors.js'
+import { vendoredIcecastExePath, ensureVendoredIcecastConfig, claimVendoredIcecastPort, dataDir } from '../utils/vendorPaths.js'
 
 const execAsync = promisify(exec)
 
@@ -51,6 +52,12 @@ class IcecastService {
     this.adminPassword = null
     this.hostname = null
 
+    // Poll-response caches: the dashboard polls every few seconds; re-running
+    // installation scans / security checks / config reads each time floods the
+    // log and burns CPU for identical results.
+    this._installCache = null      // { result, ts }
+    this._securityCache = null     // { result, ts }
+
     // Source limit from icecast.xml (parsed during initialization)
     this.sourceLimit = null
 
@@ -69,8 +76,9 @@ class IcecastService {
    * Get the device config file path
    */
   getDeviceConfigPath() {
-    // Use project-based config directory for better visibility and debugging
-    return path.join(process.cwd(), 'config', 'device-config.json')
+    // Data dir (userData in packaged apps, repo config/ in dev) — a packaged
+    // app must never depend on cwd, which is the install dir there.
+    return path.join(dataDir(), 'device-config.json')
   }
 
   /**
@@ -281,9 +289,14 @@ class IcecastService {
    * Detect Icecast installation using simplified strategy pattern
    */
   async detectInstallation() {
-    return ErrorHandler.handle(async () => {
+    // Cached for 30s: called by every dashboard status poll
+    if (this._installCache && Date.now() - this._installCache.ts < 30_000) {
+      return this._installCache.result;
+    }
+    const result = await ErrorHandler.handle(async () => {
       const strategies = [
-        () => this._checkEnvironmentPaths(),
+        () => this._checkEnvironmentPaths(),  // explicit user config always wins
+        () => this._checkVendoredPaths(),     // bundled kit: fresh machines need nothing installed
         () => this._checkStandardPaths(),
         () => this._checkSystemPath(),
         () => this._checkLegacyPaths()
@@ -314,6 +327,8 @@ class IcecastService {
         }
       );
     }, { operation: 'detectInstallation' });
+    this._installCache = { result, ts: Date.now() };
+    return result;
   }
 
   /**
@@ -339,7 +354,26 @@ class IcecastService {
   }
 
   /**
-   * Check environment variable paths (highest priority)
+   * Vendored Icecast kit (bundled with the installer — wins over every
+   * auto-detected system install so a fresh machine needs nothing installed;
+   * explicit env config still outranks it). Creates the writable config +
+   * logdir in the data dir on first use; web/admin assets stay on the kit.
+   */
+  async _checkVendoredPaths() {
+    try {
+      const exe = vendoredIcecastExePath();
+      if (!exe) return null;
+      const vendoredConfig = ensureVendoredIcecastConfig();
+      if (!vendoredConfig) return null;
+      return await this._validatePathSet({ exe, config: vendoredConfig }, 'vendored');
+    } catch (error) {
+      logger.debug(`Vendored icecast check failed: ${error.message}`);
+      return null;
+    }
+  }
+
+  /**
+   * Check environment variable paths (explicit user configuration — highest priority)
    */
   async _checkEnvironmentPaths() {
     const paths = config.icecast?.paths;
@@ -791,6 +825,7 @@ class IcecastService {
       if (hostnameMatch) {
         this.hostname = hostnameMatch[1].trim();
         logger.icecast('Parsed hostname from icecast.xml', { hostname: this.hostname });
+        await this._syncStaleHostname(configContent, this.hostname);
       } else {
         this.hostname = 'localhost';
         logger.warn('Could not parse hostname from icecast.xml, using localhost');
@@ -801,6 +836,43 @@ class IcecastService {
     }
   }
 
+  /**
+   * Machines change LAN IPs (DHCP, different venues). When icecast.xml holds a
+   * hostname that is neither localhost nor one of this machine's current IPs,
+   * rewrite it to the current preferred LAN IP. Purely cosmetic for our own
+   * fetches (they use localhost), but keeps Icecast's advertised host and any
+   * user-visible URLs honest. Best-effort: unwritable config (e.g. Program
+   * Files without elevation) only logs a warning.
+   */
+  async _syncStaleHostname(configContent, parsedHostname) {
+    try {
+      const os = await import('os');
+      const currentIps = Object.values(os.networkInterfaces())
+        .flat()
+        .filter(i => i && i.family === 'IPv4' && !i.internal)
+        .map(i => i.address);
+
+      const isCurrent = parsedHostname === 'localhost' || currentIps.includes(parsedHostname);
+      if (isCurrent) return;
+
+      const preferred = this.getPreferredLANHost() || 'localhost';
+      logger.warn(
+        `icecast.xml hostname "${parsedHostname}" matches none of this machine's IPs `
+        + `(${currentIps.join(', ') || 'none'}). Syncing to "${preferred}".`
+      );
+
+      const updated = configContent.replace(
+        /<hostname>[^<]+<\/hostname>/,
+        `<hostname>${preferred}</hostname>`
+      );
+      await fs.writeFile(this.paths.config, updated, 'utf8');
+      this.hostname = preferred;
+      logger.icecast('icecast.xml hostname synced to current network', { hostname: preferred });
+    } catch (error) {
+      logger.warn(`Could not sync stale icecast.xml hostname (non-fatal): ${error.message}`);
+    }
+  }
+
   /**
    * Get source password (read from icecast.xml at runtime)
    */
@@ -828,25 +900,30 @@ class IcecastService {
    * Prefers 192.168.x.x from Wi‑Fi; falls back to first 192.168.x.x, then icecast hostname.
    */
   getPreferredLANHost() {
-    const current = this.getHostname();
-    if (current && /^192\.168\.\d{1,3}\.\d{1,3}$/.test(current)) {
-      return current;
-    }
+    // Scan the machine's CURRENT 192.168.x IPv4s first (WiFi preferred).
     const ifaces = os.networkInterfaces();
-    const lanIPs = [];
+    const current = [];
     const wifiIPs = [];
+    const lanIPs = [];
     for (const name of Object.keys(ifaces)) {
       const list = ifaces[name];
       if (!list) continue;
       const isWifi = /wi-?fi|wireless|wlan/i.test(name);
       for (const iface of list) {
         if (iface.family === 'IPv4' && !iface.internal && /^192\.168\.\d{1,3}\.\d{1,3}$/.test(iface.address)) {
+          current.push(iface.address);
           if (isWifi) wifiIPs.push(iface.address);
           else lanIPs.push(iface.address);
         }
       }
     }
-    return (wifiIPs[0] || lanIPs[0]) || current || 'localhost';
+    // Trust the persisted icecast.xml hostname ONLY while it still belongs to
+    // this machine. Routers/DHCP change the LAN subnet silently (e.g.
+    // 192.168.1.x -> 192.168.55.x) and a saved-but-dead IP would make the
+    // share card + QR hand listeners an unreachable address.
+    const saved = this.getHostname();
+    if (saved && current.includes(saved)) return saved;
+    return (wifiIPs[0] || lanIPs[0]) || saved || 'localhost';
   }
 
   /**
@@ -954,9 +1031,11 @@ class IcecastService {
         logger.warn('Port not yet parsed from icecast.xml in checkRunningStatus');
         return;
       }
-      const host = this.getHostname();
+      // Always poll localhost: the app and Icecast run on the same machine, and the
+      // hostname in icecast.xml can be a stale LAN IP after network changes (DHCP).
+      const host = 'localhost';
       const response = await fetch(`http://${host}:${port}/admin/stats.xml`, {
-        timeout: 5000
+        signal: AbortSignal.timeout(3000)
       })
       
       if (response.ok) {
@@ -1058,9 +1137,11 @@ class IcecastService {
         logger.warn('Port not yet parsed from icecast.xml in checkRunningStatus');
         return;
       }
-      const host = this.getHostname();
+      // Always poll localhost: the app and Icecast run on the same machine, and the
+      // hostname in icecast.xml can be a stale LAN IP after network changes (DHCP).
+      const host = 'localhost';
       const response = await fetch(`http://${host}:${port}/admin/stats.xml`, {
-        timeout: 5000,
+        signal: AbortSignal.timeout(3000),
         headers: {
           'Authorization': `Basic ${Buffer.from(`admin:${this.getAdminPassword()}`).toString('base64')}`
         }
@@ -1322,13 +1403,21 @@ class IcecastService {
    * Check for security vulnerabilities in Icecast configuration
    */
   async checkSecurityVulnerabilities() {
+    // Cached for 15s: called by every dashboard status poll
+    if (this._securityCache && Date.now() - this._securityCache.ts < 15_000) {
+      return this._securityCache.result;
+    }
+    const _cacheResult = (result) => {
+      this._securityCache = { result, ts: Date.now() };
+      return result;
+    };
     try {
       // Try multiple config path sources
       let configPath = this.paths?.config || this.configPath;
 
-      // If no path found, try the project's config directory
+      // If no path found, try the data directory (repo config/ in dev)
       if (!configPath || !await fs.pathExists(configPath)) {
-        const projectConfigPath = path.join(process.cwd(), 'config', 'icecast.xml');
+        const projectConfigPath = path.join(dataDir(), 'icecast.xml');
         if (await fs.pathExists(projectConfigPath)) {
           configPath = projectConfigPath;
           logger.icecast('Using project config file for security check', { path: configPath });
@@ -1337,14 +1426,14 @@ class IcecastService {
 
       if (!configPath || !await fs.pathExists(configPath)) {
         logger.icecast('No Icecast config file found for security check');
-        return {
+        return _cacheResult({
           hasVulnerabilities: false,
           message: 'Configuration file not found'
-        };
+        });
       }
 
       const configContent = await fs.readFile(configPath, 'utf8');
-      logger.icecast('Security check - reading config file', {
+      logger.debug('Security check - reading config file', {
         path: configPath,
         contentLength: configContent.length
       });
@@ -1355,7 +1444,7 @@ class IcecastService {
       const hasDefaultSourcePassword = configContent.includes('<source-password>hackme</source-password>');
       const hasDefaultRelayPassword = configContent.includes('<relay-password>hackme</relay-password>');
 
-      logger.icecast('Security check - credential detection', {
+      logger.debug('Security check - credential detection', {
         hasDefaultAdmin,
         hasDefaultPassword,
         hasDefaultSourcePassword,
@@ -1371,7 +1460,7 @@ class IcecastService {
           message: 'ICECAST: Default admin credentials (admin/hackme) are in use',
           description: 'Anyone can access the Icecast admin panel and control your server',
           fix: 'Change admin-user and admin-password in icecast.xml',
-          adminUrl: `http://${this.getHostname()}:${this.actualPort}/admin/`
+          adminUrl: `http://localhost:${this.actualPort}/admin/`
         });
       }
 
@@ -1395,12 +1484,12 @@ class IcecastService {
         });
       }
       
-      return {
+      return _cacheResult({
         hasVulnerabilities: vulnerabilities.length > 0,
         vulnerabilities,
         configPath,
         lastChecked: new Date().toISOString()
-      };
+      });
       
     } catch (error) {
       logger.icecast('Failed to check security vulnerabilities', { error: error.message });
@@ -1419,9 +1508,10 @@ class IcecastService {
         logger.warn('Port not yet parsed from icecast.xml in checkRunningStatus');
         return;
       }
-      const host = this.getHostname();
+      // Same machine as Icecast: poll localhost (icecast.xml hostname can be a stale LAN IP)
+      const host = 'localhost';
       const response = await fetch(`http://${host}:${port}/admin/listmounts.xml`, {
-        timeout: 5000,
+        signal: AbortSignal.timeout(3000),
         headers: {
           'Authorization': `Basic ${Buffer.from(`admin:${this.getAdminPassword()}`).toString('base64')}`
         }
@@ -1448,7 +1538,7 @@ class IcecastService {
             content_type: source.content_type || 'unknown',
             stream_start: source.stream_start || null,
             title: source.title || '',
-            url: `http://${this.getHostname()}:${this.actualPort}${source.$.mount}`
+            url: `http://${this.getPreferredLANHost() || this.getHostname()}:${this.actualPort}${source.$.mount}`
           })
         }
       }
@@ -1593,6 +1683,14 @@ class IcecastService {
     try {
       let command, args;
 
+      // Foreign-Icecast race: the operator's own Icecast may have (re)claimed
+      // our generated port since boot. Right before spawning ours, move to a
+      // free port if needed and re-parse so FFmpeg's sink URL matches.
+      if (this.paths?.config && claimVendoredIcecastPort(this.paths.config)) {
+        await this.parsePort();
+        await this.parsePasswords();
+      }
+
       if (icecastCommand.endsWith('.bat')) {
         // For batch files, use cmd.exe to execute them
         command = 'cmd.exe';
@@ -2099,8 +2197,8 @@ class IcecastService {
         if (health.checks.process.status === 'healthy') {
           try {
             const response = await fetch(
-              `http://${this.getHostname()}:${this.actualPort}/admin/stats.xml`,
-              { timeout: 3000 }
+              `http://localhost:${this.actualPort}/admin/stats.xml`,
+              { signal: AbortSignal.timeout(3000) }
             );
 
             if (response.ok) {
@@ -2108,7 +2206,7 @@ class IcecastService {
                 status: 'healthy',
                 message: 'Admin interface accessible',
                 details: {
-                  host: this.getHostname(),
+                  host: 'localhost',
                   port: this.actualPort || 8000,
                   responseStatus: response.status
                 }
@@ -2604,6 +2702,26 @@ class IcecastService {
    */
   async isIcecastRunning() {
     try {
+      const port = this.getActualPort();
+      if (port && this.getAdminPassword()) {
+        // A process named icecast.exe means nothing: the operator may run
+        // their OWN instance, and ours can be a zombie holding no port (both
+        // caused permanent "device busy / 401" confusion). Ask OUR port with
+        // OUR credentials: our server answers 200, a foreign instance 401s,
+        // nothing listening = down.
+        try {
+          const response = await fetch(`http://127.0.0.1:${port}/admin/stats.xml`, {
+            signal: AbortSignal.timeout(2000),
+            headers: {
+              'Authorization': `Basic ${Buffer.from(`admin:${this.getAdminPassword()}`).toString('base64')}`
+            }
+          });
+          return response.ok;
+        } catch {
+          return false;
+        }
+      }
+      // Legacy paths without a parsed port/password: weak process check
       if (process.platform === 'win32') {
         const { stdout } = await execAsync('tasklist /FI "IMAGENAME eq icecast.exe" /FO CSV');
         return stdout.includes('icecast.exe');
diff --git a/src/services/StreamingService.js b/src/services/StreamingService.js
index 9b4bdda..2ae798b 100644
--- a/src/services/StreamingService.js
+++ b/src/services/StreamingService.js
@@ -1,24 +1,49 @@
-import { spawn, execSync } from 'child_process'
+import { spawn, exec, execSync } from 'child_process'
 import { fileURLToPath } from 'url'
 import { dirname, join } from 'path'
 import fs from 'fs'
 import logger from '../utils/logger.js'
 import errorDiagnostics from '../utils/errorDiagnostics.js'
-import FFmpegService from './FFmpegService.js'
 import IcecastService from './IcecastService.js'
 import AudioDeviceService from './AudioDeviceService.js'
 import config from '../config/index.js'
+import { vendoredFfmpegPath, dataDir } from '../utils/vendorPaths.js'
+import binaryProbe from './BinaryProbeService.js'
 
 const __filename = fileURLToPath(import.meta.url)
 const __dirname = dirname(__filename)
 
+/**
+ * Attach diagnosis to an error for structured API response and logging.
+ * Sets cause, diagnosis (category, title, description, solutions), shortMessage, capacity when mount_point, and stderrSnippet.
+ * @param {Error} err - Error instance
+ * @param {Object} diagnosis - Result from errorDiagnostics.diagnose()
+ * @param {Object} context - Optional { capacity, stderrSnippet } for mount_point/technical details
+ */
+function attachDiagnosis(err, diagnosis, context = {}) {
+  err.cause = diagnosis.category || 'unknown'
+  err.shortMessage = diagnosis.title
+  err.diagnosis = {
+    category: diagnosis.category,
+    title: diagnosis.title,
+    description: diagnosis.description,
+    solutions: diagnosis.solutions || []
+  }
+  if (diagnosis.category === 'mount_point' && context.capacity) {
+    err.capacity = context.capacity
+  }
+  // Include stderr snippet for technical debugging (max 1000 chars for UI)
+  if (context.stderrSnippet) {
+    err.stderrSnippet = context.stderrSnippet.slice(0, 1000)
+  }
+}
+
 class StreamingService {
   constructor() {
     this.activeStreams = {}
     /** @type {string[]} Display order of stream IDs (S1=first, S2=second, etc.). Persisted in streams.json as _order. */
     this.streamOrder = []
-    this.ffmpegService = FFmpegService
-    this.streamsConfigPath = join(process.cwd(), 'config', 'streams.json')
+    this.streamsConfigPath = join(dataDir(), 'streams.json')
     this.lastIcecastStatus = 'unknown'
     this.icecastDownSince = null // Track when Icecast went down
     this.ICECAST_GRACE_PERIOD_SECONDS = 30 // Wait 30 seconds before stopping streams
@@ -63,12 +88,78 @@ class StreamingService {
         })
 
         logger.info(`Loaded ${streamIds.length} persistent streams, order: ${this.streamOrder.length} entries`)
+
+        // Auto-start: streams saved with autoStart=true come up with the app.
+        // Fire-and-forget with a small stagger so devices/limits settle; failures
+        // surface on the row like any other start.
+        const autoStartIds = streamIds.filter(id => persistentStreams[id]?.config?.autoStart === true)
+        if (autoStartIds.length > 0) {
+          logger.info(`Auto-starting ${autoStartIds.length} stream(s) on boot: ${autoStartIds.join(', ')}`)
+          autoStartIds.forEach((id, i) => {
+            setTimeout(() => {
+              this.restartStream(id).catch(err => {
+                logger.warn(`Auto-start failed for ${id}: ${err.shortMessage || err.message}`)
+              })
+            }, 1500 + i * 3000)
+          })
+        }
       }
     } catch (error) {
       logger.error('Failed to load persistent streams:', error)
     }
   }
 
+  /**
+   * Generate a stream id when the caller doesn't supply one.
+   * (startStream referenced this forever but the UI always sent an id, so the
+   * missing method only surfaced with createStoppedStream.)
+   */
+  generateUniqueStreamId() {
+    return `stream_${Date.now()}_${Math.random().toString(36).slice(2, 7)}`
+  }
+
+  /**
+   * Create a stream configuration WITHOUT starting it ("Save" in the new-stream
+   * drawer). Persists as stopped so it appears in the Ready group immediately.
+   * @param {object} streamConfig { name, deviceId, bitrate?, autoStart? }
+   * @returns {object} The created (stopped) stream record
+   */
+  createStoppedStream(streamConfig) {
+    if (!streamConfig || !streamConfig.name || !streamConfig.deviceId) {
+      throw new Error('Invalid stream configuration: name and deviceId are required')
+    }
+    const name = String(streamConfig.name).trim()
+    if (!name) throw new Error('Stream name cannot be empty')
+    if (this.streamNameExists(name, null)) {
+      throw new Error(`A stream named "${name}" already exists. Use a unique name.`)
+    }
+
+    const streamId = streamConfig.id || this.generateUniqueStreamId()
+    const config = {
+      ...streamConfig,
+      name,
+      id: streamId,
+      bitrate: parseInt(streamConfig.bitrate, 10) || 192,
+      autoStart: streamConfig.autoStart === true
+    }
+
+    this.activeStreams[streamId] = {
+      id: streamId,
+      deviceId: config.deviceId,
+      name,
+      status: 'stopped',
+      ffmpegProcess: null,
+      startedAt: null,
+      createdAt: new Date(),
+      config,
+      needsRestart: false
+    }
+    this.streamOrder.push(streamId)
+    this.savePersistentStreams()
+    logger.info(`Created stopped stream ${streamId} (${name})`)
+    return this.activeStreams[streamId]
+  }
+
   /**
    * Save streams to persistent storage
    */
@@ -104,21 +195,31 @@ class StreamingService {
    * @param {object} streamConfig - Stream configuration
    * @returns {object} Stream information
    */
+  /**
+   * Icecast dependency: if it isn't running, try to START it automatically
+   * instead of failing with a wall of text. Users reasonably expect
+   * "Go Live" to just work; the old "start Icecast from the dashboard first"
+   * error was the top support issue.
+   */
+  async ensureIcecastRunning() {
+    const isRunning = await IcecastService.isIcecastRunning()
+    if (isRunning) return
+    logger.info('Icecast not running — auto-starting it before starting stream...')
+    const startResult = await IcecastService.start(false).catch(err => ({ success: false, error: err.message }))
+    if (!startResult || startResult.success !== true) {
+      throw new Error(`Icecast server is not running and could not be started automatically (${startResult?.error || 'unknown error'}). Start it from the dashboard Icecast panel, then try again.`)
+    }
+    logger.info('Icecast auto-started successfully')
+  }
+
   async startStream(streamConfig) {
     if (!streamConfig || (!streamConfig.deviceId && !streamConfig.inputFile)) {
       throw new Error('Invalid stream configuration: deviceId or inputFile is required')
     }
 
-    // SIMPLIFIED: Just check if Icecast process is running (don't require admin interface)
+    // Icecast dependency: auto-start it if needed (see ensureIcecastRunning)
     try {
-      const isRunning = await IcecastService.isIcecastRunning()
-      if (!isRunning) {
-        throw new Error(`🧊 Icecast server is not running - Cannot start stream without Icecast.
-
-✅ QUICK FIX:
-1. Start the Icecast server from the dashboard
-2. Then try starting the stream again`)
-      }
+      await this.ensureIcecastRunning()
     } catch (icecastError) {
       // Re-throw with more context
       throw new Error(`Icecast dependency check failed: ${icecastError.message}`)
@@ -148,7 +249,7 @@ class StreamingService {
 
     const streamId = streamConfig.id || `stream_${Date.now()}`
 
-    if (this.activeStreams[streamId]) {
+    if (this.activeStreams[streamId]?.status === 'running') {
       throw new Error(`Stream ${streamId} is already running`)
     }
 
@@ -167,7 +268,9 @@ class StreamingService {
 
       if (conflictingStreams.length > 0) {
         const conflictNames = conflictingStreams.map(s => s.name).join(', ');
-        throw new Error(`Device "${streamConfig.deviceId}" is already in use by: ${conflictNames}. Stop other streams first.`);
+        const err = new Error(`Audio source already in use: "${streamConfig.deviceId}" is streaming on ${conflictNames}. Stop that stream first, or edit this stream to use a different audio source.`);
+        err.shortMessage = `🎤 Audio source busy — already used by ${conflictNames}`;
+        throw err;
       }
     }
 
@@ -236,6 +339,7 @@ class StreamingService {
         this.savePersistentStreams()
 
         logger.info(`Stream ${streamId} started successfully with ${currentFormat.name} format`)
+        import('./TelemetryService.js').then(m => m.default.capture('stream_started', { format: currentFormat.name })).catch(() => {})
         return this.activeStreams[streamId]
 
       } catch (error) {
@@ -252,6 +356,7 @@ class StreamingService {
 
     // If we get here, all formats failed
     logger.error(`Failed to start stream ${streamId} with all available formats:`, lastError)
+    import('./TelemetryService.js').then(m => m.default.capture('stream_failed', { category: lastError?.cause || 'unknown' })).catch(() => {})
     const err = new Error(`Stream failed to start with all audio formats (MP3, AAC, OGG). Last error: ${lastError?.message || 'Unknown error'}`)
     if (lastError?.capacity) err.capacity = lastError.capacity
     if (lastError?.shortMessage) err.shortMessage = lastError.shortMessage
@@ -275,7 +380,11 @@ class StreamingService {
     logger.info(`FFmpeg executable path: ${ffmpegPath}`)
     logger.info(`Full command: ${ffmpegPath} ${args.join(' ')}`)
 
-    const process = spawn(ffmpegPath, args, {
+    // shell:true lets 'ffmpeg' resolve from PATH — but an absolute vendored
+    // path (which may contain spaces, e.g. C:\Users\John Doe\...) must be
+    // quoted or cmd.exe splits it. Bare 'ffmpeg' must NOT be quoted.
+    const spawnCommand = ffmpegPath === 'ffmpeg' ? ffmpegPath : `"${ffmpegPath}"`
+    const process = spawn(spawnCommand, args, {
       stdio: ['ignore', 'pipe', 'pipe'],
       detached: false,
       shell: true  // Required on Windows to resolve 'ffmpeg' from PATH
@@ -359,13 +468,23 @@ class StreamingService {
               
               const errorMsg = `FFmpeg crashed immediately after startup (exit code: ${exitCode}).\n\n${diagnosis.title}\n\n${diagnosis.description}\n\n🔧 Quick fixes:\n${diagnosis.solutions.join('\n')}\n\nFFmpeg Error Output:\n${errorOutput}`;
               const err = new Error(errorMsg);
-              err.shortMessage = diagnosis.title;
+              let context = { stderrSnippet: stderrData || '' };
               if (diagnosis.category === 'mount_point') {
-                const rawLimit = IcecastService.getSourceLimit()
-                const sourceLimit = (typeof rawLimit === 'number' && !Number.isNaN(rawLimit)) ? rawLimit : 2
-                const activeCount = Object.values(this.activeStreams).filter(s => s.status === 'running').length
-                err.capacity = { sourceLimit, activeCount, remaining: Math.max(0, sourceLimit - activeCount), configPath: IcecastService.paths?.config }
+                const rawLimit = IcecastService.getSourceLimit();
+                const sourceLimit = (typeof rawLimit === 'number' && !Number.isNaN(rawLimit)) ? rawLimit : 2;
+                const activeCount = Object.values(this.activeStreams).filter(s => s.status === 'running').length;
+                context.capacity = { sourceLimit, activeCount, remaining: Math.max(0, sourceLimit - activeCount), configPath: IcecastService.paths?.config };
               }
+              attachDiagnosis(err, diagnosis, context);
+              logger.info('Stream start failed (grace period)', {
+                streamId,
+                deviceId: streamConfig.deviceId,
+                exitCode,
+                cause: err.cause,
+                category: diagnosis.category,
+                message: err.shortMessage,
+                stderrSnippet: (stderrData || '').slice(0, 500)
+              });
               hasResolved = true
               reject(err)
             }
@@ -411,13 +530,23 @@ class StreamingService {
           // Format the error message with diagnosis
           const errorMsg = `FFmpeg crashed during startup (exit code: ${code}).\n\n${diagnosis.title}\n\n${diagnosis.description}\n\n🔧 Quick fixes:\n${diagnosis.solutions.join('\n')}\n\nFFmpeg Error Output:\n${errorOutput}`;
           const err = new Error(errorMsg);
-          err.shortMessage = diagnosis.title;
+          let context = { stderrSnippet: stderrData || '' };
           if (diagnosis.category === 'mount_point') {
-            const rawLimit = IcecastService.getSourceLimit()
-            const sourceLimit = (typeof rawLimit === 'number' && !Number.isNaN(rawLimit)) ? rawLimit : 2
-            const activeCount = Object.values(this.activeStreams).filter(s => s.status === 'running').length
-            err.capacity = { sourceLimit, activeCount, remaining: Math.max(0, sourceLimit - activeCount), configPath: IcecastService.paths?.config }
+            const rawLimit = IcecastService.getSourceLimit();
+            const sourceLimit = (typeof rawLimit === 'number' && !Number.isNaN(rawLimit)) ? rawLimit : 2;
+            const activeCount = Object.values(this.activeStreams).filter(s => s.status === 'running').length;
+            context.capacity = { sourceLimit, activeCount, remaining: Math.max(0, sourceLimit - activeCount), configPath: IcecastService.paths?.config };
           }
+          attachDiagnosis(err, diagnosis, context);
+          logger.info('Stream start failed (exit handler)', {
+            streamId,
+            deviceId: streamConfig.deviceId,
+            exitCode: code,
+            cause: err.cause,
+            category: diagnosis.category,
+            message: err.shortMessage,
+            stderrSnippet: (stderrData || '').slice(0, 500)
+          });
           hasResolved = true
           reject(err)
         }
@@ -465,7 +594,7 @@ class StreamingService {
    * @returns {Array} Command line arguments
    */
   buildFFmpegArgs(streamId, streamConfig, formatIndex = 0) {
-    const bitrate = streamConfig.bitrate || 192;
+    const bitrate = streamConfig.bitrate || 96;
 
     // Read Icecast config from icecast.xml at runtime (source of truth)
     // Source connections (FFmpeg → Icecast) must use localhost; getHostname() is for public URLs only
@@ -488,6 +617,7 @@ class StreamingService {
         '-b:a', `${bitrate}k`,          // Audio bitrate (use -b:a for compatibility)
         '-ar', '44100',                 // Sample rate
         '-ac', '2',                     // Audio channels
+        '-flush_packets', '1',          // Low latency: emit each packet as encoded (no muxer batching)
         '-f', format.format,            // Output format
         icecastUrl,                     // Unique Icecast URL per stream
         '-loglevel', 'info'             // Show info level logs
@@ -509,16 +639,23 @@ class StreamingService {
         }
       }
 
-      // SIMPLIFIED: Use minimal FFmpeg command that works (based on manual setup scripts)
-      // Don't add extra parameters that might cause crashes
-      // IMPORTANT: Use quotes around device name for DirectShow (handles spaces and special chars)
+      // Low-latency capture flags sit BEFORE -i (they configure the dshow
+      // demuxer): nobuffer skips input buffering, low_delay sets decoder
+      // flags, probesize/analyzeduration cut the ~0.5-1s stream probing.
+      // Safe for live capture (nothing to probe ahead for); 32k is the
+      // smallest probesize that still identifies the stream.
       args = [
+        '-fflags', 'nobuffer',
+        '-flags', 'low_delay',
+        '-probesize', '32k',
+        '-analyzeduration', '0',
         '-f', 'dshow',                    // DirectShow input format
         '-i', `audio="${deviceName}"`,     // Audio input device (real DirectShow name, quoted for safety)
         '-acodec', format.codec,           // Audio codec (with fallback support)
         '-b:a', `${bitrate}k`,            // Audio bitrate (use -b:a instead of -ab for compatibility)
         '-ar', '44100',                    // Sample rate
         '-ac', '2',                        // Audio channels
+        '-flush_packets', '1',            // Low latency: emit each packet as encoded (no muxer batching, up to ~1.3s at 192k)
         '-f', format.format,               // Output format (with fallback support)
         icecastUrl,                        // Unique Icecast URL per stream
         '-loglevel', 'info'                // Show info level logs
@@ -720,18 +857,11 @@ class StreamingService {
 
     try {
       logger.info(`Stopping stream: ${streamId}`)
+      import('./TelemetryService.js').then(m => m.default.capture('stream_stopped', {})).catch(() => {})
       
       if (stream.ffmpegProcess) {
-        // Kill the FFmpeg process gracefully
-        stream.ffmpegProcess.kill('SIGTERM')
-        
-        // Force kill after 5 seconds if still running
-        setTimeout(() => {
-          if (stream.ffmpegProcess && !stream.ffmpegProcess.killed) {
-            logger.warn(`Force killing FFmpeg process for stream ${streamId}`)
-            stream.ffmpegProcess.kill('SIGKILL')
-          }
-        }, 5000)
+        // Kill the whole tree (shell wrapper + ffmpeg) — see killProcessTree
+        this.killProcessTree(stream.ffmpegProcess, streamId)
       }
 
       // Mark as intentionally stopped to prevent handleProcessExit from marking it as error
@@ -768,6 +898,36 @@ class StreamingService {
     try {
       logger.info(`Restarting stream: ${streamId}`)
 
+      // STOP-FIRST: if this stream is still running (bitrate edit on a live
+      // stream, or restarting a healthy one), kill the old FFmpeg and wait
+      // for the capture device to be released BEFORE spawning the new one.
+      // Without this the new spawn races the old process for the exclusive
+      // dshow device and fails with a misleading "input in use elsewhere"
+      // error (which the old Retry path never hit — its process was dead).
+      if (stream.ffmpegProcess && stream.ffmpegProcess.exitCode === null) {
+        logger.info(`restartStream: stopping old FFmpeg for ${streamId} first (device handoff)`)
+        stream.intentionallyStopped = true // exit handler must not mark an error
+        await new Promise((resolve) => {
+          const pid = stream.ffmpegProcess.pid
+          if (process.platform === 'win32' && pid) {
+            exec(`taskkill /PID ${pid} /T /F`, { windowsHide: true }, () => {
+              // small grace for dshow graph teardown before the new open
+              setTimeout(resolve, 700)
+            })
+          } else {
+            try { stream.ffmpegProcess.kill('SIGTERM') } catch (e) { /* already gone */ }
+            setTimeout(resolve, 1500)
+          }
+        })
+        stream.ffmpegProcess = null
+        stream.status = 'stopped'
+      }
+
+      // Icecast dependency: restarts power the boot autostart and the Retry
+      // button — without this check both fail with "connection refused" when
+      // icecast hasn't been started yet (fresh boot, or it crashed).
+      await this.ensureIcecastRunning()
+
       // Check for device conflicts before restarting
       if (stream.config.deviceId) {
         const conflictingStreams = Object.values(this.activeStreams).filter(s =>
@@ -778,7 +938,9 @@ class StreamingService {
 
         if (conflictingStreams.length > 0) {
           const conflictNames = conflictingStreams.map(s => s.name).join(', ');
-          throw new Error(`Device "${stream.config.deviceId}" is already in use by: ${conflictNames}. Stop other streams first.`);
+          const err = new Error(`Audio source already in use: "${stream.config.deviceId}" is streaming on ${conflictNames}. Stop that stream first, or edit this stream to use a different audio source.`);
+          err.shortMessage = `🎤 Audio source busy — already used by ${conflictNames}`;
+          throw err;
         }
 
         // Validate device is still available
@@ -810,6 +972,11 @@ class StreamingService {
       stream.ffmpegProcess = ffmpegProcess
       stream.startedAt = new Date()
       stream.needsRestart = false
+      // A successful (re)start clears any previous failure — stale error text
+      // on a running row reads as "it failed" and confuses operators.
+      stream.error = undefined
+      stream.errorShort = undefined
+      stream.intentionallyStopped = false // a real crash from here on IS an error
 
       // Save to persistent storage
       this.savePersistentStreams()
@@ -819,10 +986,52 @@ class StreamingService {
       
     } catch (error) {
       logger.error(`Failed to restart stream ${streamId}:`, error)
+      // Surface the failure on the row itself (short summary + expandable detail)
+      if (this.activeStreams[streamId]) {
+        // A failed restart can leave a spawned FFmpeg alive while the stream
+        // reads as errored — a zombie holding the audio device. Kill the tree.
+        this.killProcessTree(this.activeStreams[streamId].ffmpegProcess, streamId)
+        this.activeStreams[streamId].ffmpegProcess = null
+        this.activeStreams[streamId].status = 'error'
+        this.activeStreams[streamId].error = error.message
+        this.activeStreams[streamId].errorShort = error.shortMessage || String(error.message || '').split('\n')[0]
+        this.savePersistentStreams()
+      }
       throw error
     }
   }
 
+  /**
+   * Kill an FFmpeg process AND its children. Streams are spawned with
+   * shell:true on Windows (needed to resolve ffmpeg from PATH), so a plain
+   * .kill() only ends the cmd wrapper — the ffmpeg child survives and keeps
+   * the audio device exclusively, which blocks every later start.
+   */
+  killProcessTree(childProcess, streamId = 'unknown') {
+    if (!childProcess || childProcess.exitCode !== null) return
+    const pid = childProcess.pid
+    if (process.platform === 'win32' && pid) {
+      // ORDER MATTERS: taskkill /T must run BEFORE any .kill(). Killing the
+      // cmd wrapper first (synchronous TerminateProcess) severs the parent
+      // link, so the later /T sweep finds a dead PID and no children — ffmpeg
+      // gets orphaned and keeps the audio device exclusively (the classic
+      // "device busy after stop" bug).
+      exec(`taskkill /PID ${pid} /T /F`, { windowsHide: true }, (err) => {
+        if (err) {
+          logger.warn(`taskkill tree failed for stream ${streamId} (pid ${pid}): ${err.message}; falling back to kill()`)
+          try { childProcess.kill('SIGKILL') } catch (e) { /* already dead */ }
+        } else {
+          logger.info(`Killed FFmpeg process tree for stream ${streamId} (pid ${pid})`)
+        }
+      })
+    } else {
+      try { childProcess.kill('SIGTERM') } catch (e) { /* already dead */ }
+      if (pid) {
+        try { process.kill(-pid, 'SIGKILL') } catch (e) { try { process.kill(pid, 'SIGKILL') } catch (e2) { /* dead */ } }
+      }
+    }
+  }
+
   /**
    * Update a stream's configuration
    * @param {string} streamId - Stream ID to update
@@ -868,7 +1077,7 @@ class StreamingService {
       if (stream.status === 'running' && stream.ffmpegProcess) {
         logger.info(`Stopping running stream ${streamId} to update with new ID ${newStreamId}`)
         try {
-          stream.ffmpegProcess.kill('SIGTERM')
+          this.killProcessTree(stream.ffmpegProcess, streamId)
           stream.intentionallyStopped = true
         } catch (e) { /* ignore */ }
       }
@@ -905,15 +1114,29 @@ class StreamingService {
       currentStream.config.deviceId = updates.deviceId
     }
 
+    // Bitrate edit (96/128/192): applies to the stored config; a LIVE stream
+    // picks it up by restarting (FFmpeg args are fixed at spawn time).
+    const prevBitrate = currentStream.config?.bitrate
+    let bitrateChanged = false
+    if (updates.bitrate !== undefined) {
+      const br = parseInt(updates.bitrate, 10)
+      if ([96, 128, 192].includes(br) && br !== prevBitrate) {
+        currentStream.config.bitrate = br
+        bitrateChanged = true
+      }
+    }
+
     // UX: If device changed OR stream was in error OR name changed, reset to a clean stopped state
     const deviceChanged = updates.deviceId !== undefined && updates.deviceId !== prevDeviceId
     const nameChanged = updates.name !== undefined && updates.name !== prevName
 
     if (deviceChanged || currentStream.status === 'error' || nameChanged) {
       logger.info(`Resetting stream state after update (deviceChanged=${deviceChanged}, nameChanged=${nameChanged}, previousStatus=${currentStream.status})`)
-      // Ensure any running process is cleared
+      // Ensure any running process is cleared — killProcessTree, NOT bare
+      // .kill(): a lone SIGTERM only ends the cmd wrapper and orphans ffmpeg
+      // (which keeps the audio device exclusively).
       if (currentStream.ffmpegProcess && typeof currentStream.ffmpegProcess.kill === 'function') {
-        try { currentStream.ffmpegProcess.kill('SIGTERM') } catch (e) { /* ignore */ }
+        try { this.killProcessTree(currentStream.ffmpegProcess, newStreamId) } catch (e) { /* ignore */ }
       }
       currentStream.ffmpegProcess = null
       currentStream.status = 'stopped'
@@ -929,6 +1152,15 @@ class StreamingService {
     // Save to persistent storage
     this.savePersistentStreams()
 
+    // Bitrate-only change on a LIVE stream: restart it so the new bitrate
+    // takes effect immediately (device/name resets above leave it stopped).
+    if (bitrateChanged && !deviceChanged && currentStream.status === 'running') {
+      logger.info(`Bitrate ${prevBitrate}→${currentStream.config.bitrate} on live stream ${newStreamId} — restarting`)
+      this.restartStream(newStreamId).catch(err => {
+        logger.warn(`Bitrate restart failed for ${newStreamId}: ${err.message}`)
+      })
+    }
+
     logger.info(`Stream updated successfully. New ID: ${newStreamId}`)
     logger.info(`Updated stream data:`, {
       id: currentStream.id,
@@ -1116,10 +1348,11 @@ class StreamingService {
    */
   handleProcessError(streamId, error) {
     logger.error(`FFmpeg process error for stream ${streamId}:`, error)
-    
+
     if (this.activeStreams[streamId]) {
       this.activeStreams[streamId].status = 'error'
       this.activeStreams[streamId].error = error.message
+      this.activeStreams[streamId].errorShort = error.shortMessage || String(error.message || '').split('\n')[0]
     }
   }
 
@@ -1163,7 +1396,9 @@ class StreamingService {
         
         // Get device info before parsing error
         const deviceName = stream.deviceName || stream.deviceId || 'Unknown device'
-        this.activeStreams[streamId].error = this.parseFFmpegError(code, safeStderrData, deviceName)
+        const parsed = this.parseFFmpegError(code, safeStderrData, deviceName)
+        this.activeStreams[streamId].error = parsed.message
+        this.activeStreams[streamId].errorShort = parsed.short
         logger.error(`Stream ${streamId} failed with exit code ${code}:`, this.activeStreams[streamId].error)
       }
     }
@@ -1175,7 +1410,7 @@ class StreamingService {
    * @param {number} exitCode - FFmpeg exit code
    * @param {string} stderrData - FFmpeg stderr output
    * @param {string} deviceName - Optional device name for better error messages
-   * @returns {string} Human-readable error message
+   * @returns {{message: string, short: string}} Full message + one-line summary
    */
   parseFFmpegError(exitCode, stderrData, deviceName = null) {
     // Analyze stderr for specific error patterns
@@ -1200,8 +1435,11 @@ class StreamingService {
       icecastPort: actualPort
     })
 
-    // Format the message
-    return errorDiagnostics.formatMessage(diagnosis)
+    // Full message for the expandable details; title for the one-line summary
+    return {
+      message: errorDiagnostics.formatMessage(diagnosis),
+      short: diagnosis.title || 'Stream failed to start'
+    }
   }
 
   /**
@@ -1209,17 +1447,32 @@ class StreamingService {
    * @returns {string} Path to FFmpeg
    */
   findFFmpegPath() {
-    // Check if FFmpeg is in PATH
+    // 1. Explicit user configuration
+    if (process.env.FFMPEG_PATH) return process.env.FFMPEG_PATH
+    // 2. Vendored binary (bundled with the installer — same engine on every
+    //    machine, beats whatever happens to be on PATH)
+    const vendored = vendoredFfmpegPath()
+    if (vendored) return vendored
+    // 3. System install the first-run binary probe PROVED can do our job
+    //    (dshow + encoder chain + 2s end-to-end). A stale/stub PATH ffmpeg
+    //    never gets here — determinism for non-technical operators.
+    try {
+      const pin = binaryProbe.getPin()
+      if ((pin?.result === 'ok' || pin?.result === 'device-issue') && pin.ffmpeg?.origin === 'system' && pin.ffmpeg.path) {
+        return pin.ffmpeg.path
+      }
+    } catch (e) { /* probe unavailable — fall through */ }
+    // 4. System PATH (legacy behavior when no probe pin exists yet)
     try {
       execSync('ffmpeg -version', { stdio: 'ignore' })
       return 'ffmpeg'
     } catch (error) {
-      // Check for bundled FFmpeg in the project
+      // 5. Legacy project-local fallback
       const bundledPath = join(__dirname, '../../bin/ffmpeg.exe')
       if (fs.existsSync(bundledPath)) {
         return bundledPath
       }
-      
+
       // Fallback to system PATH
       return 'ffmpeg'
     }
@@ -1343,9 +1596,12 @@ class StreamingService {
             // Generate error message
             if (exitCode !== null) {
               const deviceName = s.deviceName || s.deviceId || s.name || null
-              s.error = this.parseFFmpegError(exitCode, s.lastStderr || 'FFmpeg process exited without error output', deviceName)
+              const parsed = this.parseFFmpegError(exitCode, s.lastStderr || 'FFmpeg process exited without error output', deviceName)
+              s.error = parsed.message
+              s.errorShort = parsed.short
             } else {
               s.error = 'FFmpeg process terminated unexpectedly (no exit code). This may indicate a system-level issue.'
+              s.errorShort = 'FFmpeg terminated unexpectedly'
             }
 
             // Clear the dead process reference
@@ -1388,6 +1644,7 @@ class StreamingService {
         startedAt: s.startedAt,
         createdAt: s.createdAt,
         error: s.error,
+        errorShort: s.errorShort,
         uptime: s.startedAt ? Date.now() - s.startedAt.getTime() : 0
       }))
     }
diff --git a/src/services/SystemService.js b/src/services/SystemService.js
deleted file mode 100644
index 9ab98a3..0000000
--- a/src/services/SystemService.js
+++ /dev/null
@@ -1,435 +0,0 @@
-const os = require('os')
-const fs = require('fs-extra')
-const path = require('path')
-const { exec } = require('child_process')
-const { promisify } = require('util')
-const si = require('systeminformation')
-const ping = require('ping')
-const portfinder = require('portfinder')
-
-const config = require('../config')
-const logger = require('../utils/logger')
-const { AppError } = require('../middleware/errorHandler')
-const IcecastService = require('./IcecastService.js')
-
-const execAsync = promisify(exec)
-
-class SystemService {
-  constructor() {
-    this.setupStatus = {
-      isComplete: false,
-      currentStep: 0,
-      steps: [
-        'System Validation',
-        'Dependency Check',
-        'Icecast Configuration',
-        'FFmpeg Configuration',
-        'Audio Device Setup',
-        'Network Configuration',
-        'Final Testing'
-      ]
-    }
-    this.metrics = {
-      startTime: Date.now(),
-      requestCount: 0,
-      errorCount: 0
-    }
-  }
-
-  async initialize() {
-    logger.system('Initializing System Service')
-    
-    // Ensure required directories exist
-    await this.ensureDirectories()
-    
-    // Load setup status
-    await this.loadSetupStatus()
-    
-    // Start metrics collection
-    this.startMetricsCollection()
-    
-    logger.system('System Service initialized')
-  }
-
-  async ensureDirectories() {
-    const directories = [
-      config.logging.filePath,
-      config.database.configDbPath.replace('/config.json', ''),
-      config.upload.uploadPath,
-      config.backup.path
-    ]
-
-    for (const dir of directories) {
-      await fs.ensureDir(dir)
-    }
-  }
-
-  async loadSetupStatus() {
-    try {
-      const statusFile = path.join(config.database.configDbPath.replace('/config.json', ''), 'setup.json')
-      if (await fs.pathExists(statusFile)) {
-        this.setupStatus = await fs.readJson(statusFile)
-      }
-    } catch (error) {
-      logger.warn('Could not load setup status:', error.message)
-    }
-  }
-
-  async saveSetupStatus() {
-    try {
-      const statusFile = path.join(config.database.configDbPath.replace('/config.json', ''), 'setup.json')
-      await fs.writeJson(statusFile, this.setupStatus, { spaces: 2 })
-    } catch (error) {
-      logger.error('Could not save setup status:', error)
-    }
-  }
-
-  async getSystemInfo() {
-    try {
-      const [cpu, mem, osInfo, network] = await Promise.all([
-        si.cpu(),
-        si.mem(),
-        si.osInfo(),
-        si.networkInterfaces()
-      ])
-
-      const networkInterfaces = os.networkInterfaces()
-      const primaryInterface = this.getPrimaryNetworkInterface(networkInterfaces)
-
-      return {
-        hostname: os.hostname(),
-        platform: os.platform(),
-        arch: os.arch(),
-        uptime: os.uptime(),
-        loadAverage: os.loadavg(),
-        totalMemory: os.totalmem(),
-        freeMemory: os.freemem(),
-        cpuCount: os.cpus().length,
-        nodeVersion: process.version,
-        cpu: {
-          manufacturer: cpu.manufacturer,
-          brand: cpu.brand,
-          speed: cpu.speed,
-          cores: cpu.cores
-        },
-        memory: {
-          total: mem.total,
-          free: mem.free,
-          used: mem.used,
-          active: mem.active,
-          available: mem.available
-        },
-        os: {
-          platform: osInfo.platform,
-          distro: osInfo.distro,
-          release: osInfo.release,
-          kernel: osInfo.kernel,
-          arch: osInfo.arch
-        },
-        network: {
-          interfaces: network.filter(iface => !iface.internal),
-          primaryInterface,
-          externalIp: await this.getExternalIp()
-        }
-      }
-    } catch (error) {
-      logger.error('Failed to get system info:', error)
-      throw new AppError('Failed to retrieve system information', 500)
-    }
-  }
-
-  getPrimaryNetworkInterface(interfaces) {
-    for (const [name, addresses] of Object.entries(interfaces)) {
-      for (const addr of addresses) {
-        if (!addr.internal && addr.family === 'IPv4') {
-          return {
-            name,
-            address: addr.address,
-            netmask: addr.netmask,
-            mac: addr.mac
-          }
-        }
-      }
-    }
-    return null
-  }
-
-  async getExternalIp() {
-    try {
-      const { stdout } = await execAsync('curl -s https://api.ipify.org')
-      return stdout.trim()
-    } catch (error) {
-      logger.debug('Could not get external IP:', error.message)
-      return null
-    }
-  }
-
-  async getStatus() {
-    try {
-      const [cpu, mem, load] = await Promise.all([
-        si.currentLoad(),
-        si.mem(),
-        si.load()
-      ])
-
-      const status = {
-        status: 'healthy',
-        timestamp: new Date().toISOString(),
-        uptime: process.uptime(),
-        cpu: {
-          usage: cpu.currentload,
-          cores: cpu.cpus.map(core => core.load)
-        },
-        memory: {
-          total: mem.total,
-          used: mem.used,
-          free: mem.free,
-          usage: (mem.used / mem.total) * 100
-        },
-        load: {
-          avg1: load.avgload,
-          avg5: load.avgload5,
-          avg15: load.avgload15
-        }
-      }
-
-      // Determine status based on resource usage
-      if (status.cpu.usage > 90 || status.memory.usage > 90) {
-        status.status = 'warning'
-      }
-      if (status.cpu.usage > 95 || status.memory.usage > 95) {
-        status.status = 'error'
-      }
-
-      return status
-    } catch (error) {
-      logger.error('Failed to get system status:', error)
-      return {
-        status: 'error',
-        error: error.message,
-        timestamp: new Date().toISOString()
-      }
-    }
-  }
-
-  async getMetrics() {
-    const uptime = Date.now() - this.metrics.startTime
-    
-    return {
-      uptime,
-      requestCount: this.metrics.requestCount,
-      errorCount: this.metrics.errorCount,
-      requestsPerMinute: (this.metrics.requestCount / (uptime / 60000)).toFixed(2),
-      errorRate: this.metrics.errorCount > 0 ? 
-        ((this.metrics.errorCount / this.metrics.requestCount) * 100).toFixed(2) : 0,
-      memoryUsage: process.memoryUsage(),
-      cpuUsage: process.cpuUsage()
-    }
-  }
-
-  async getNetworkInfo() {
-    try {
-      const interfaces = await si.networkInterfaces()
-      const stats = await si.networkStats()
-      
-      return {
-        interfaces: interfaces.filter(iface => !iface.internal),
-        stats: stats.map(stat => ({
-          iface: stat.iface,
-          operstate: stat.operstate,
-          rx_bytes: stat.rx_bytes,
-          tx_bytes: stat.tx_bytes,
-          rx_sec: stat.rx_sec,
-          tx_sec: stat.tx_sec
-        })),
-        connectivity: await this.checkConnectivity()
-      }
-    } catch (error) {
-      logger.error('Failed to get network info:', error)
-      throw new AppError('Failed to retrieve network information', 500)
-    }
-  }
-
-  async checkConnectivity() {
-    const hosts = ['8.8.8.8', 'google.com', 'github.com']
-    const results = []
-
-    for (const host of hosts) {
-      try {
-        const result = await ping.promise.probe(host, { timeout: 5 })
-        results.push({
-          host,
-          alive: result.alive,
-          time: result.time,
-          min: result.min,
-          max: result.max,
-          avg: result.avg
-        })
-      } catch (error) {
-        results.push({
-          host,
-          alive: false,
-          error: error.message
-        })
-      }
-    }
-
-    return {
-      online: results.some(r => r.alive),
-      results
-    }
-  }
-
-  async validateSystemRequirements() {
-    const validation = {
-      passed: true,
-      issues: [],
-      requirements: {}
-    }
-
-    try {
-      // Check Node.js version
-      const nodeVersion = process.version
-      const requiredNodeVersion = '16.0.0'
-      validation.requirements.nodeVersion = {
-        current: nodeVersion,
-        required: `>=${requiredNodeVersion}`,
-        passed: this.compareVersions(nodeVersion.slice(1), requiredNodeVersion) >= 0
-      }
-
-      // Check available memory
-      const totalMemory = os.totalmem()
-      const requiredMemory = 4 * 1024 * 1024 * 1024 // 4GB
-      validation.requirements.memory = {
-        current: `${(totalMemory / 1024 / 1024 / 1024).toFixed(1)}GB`,
-        required: '4GB',
-        passed: totalMemory >= requiredMemory
-      }
-
-      // Check available disk space
-      const diskSpace = await si.fsSize()
-      const systemDisk = diskSpace.find(disk => disk.mount === '/' || disk.mount === 'C:')
-      const requiredSpace = 1 * 1024 * 1024 * 1024 // 1GB
-      validation.requirements.diskSpace = {
-        current: `${(systemDisk.available / 1024 / 1024 / 1024).toFixed(1)}GB`,
-        required: '1GB',
-        passed: systemDisk.available >= requiredSpace
-      }
-
-      // Check port availability
-      const icecastPort = IcecastService.getActualPort() || 8000;
-      const requiredPorts = [config.server.port, icecastPort, config.network.clientPort]
-      validation.requirements.ports = {
-        required: requiredPorts,
-        available: [],
-        passed: true
-      }
-
-      for (const port of requiredPorts) {
-        try {
-          const availablePort = await portfinder.getPortPromise({ port })
-          const isAvailable = availablePort === port
-          validation.requirements.ports.available.push({ port, available: isAvailable })
-          if (!isAvailable) {
-            validation.requirements.ports.passed = false
-          }
-        } catch (error) {
-          validation.requirements.ports.available.push({ port, available: false, error: error.message })
-          validation.requirements.ports.passed = false
-        }
-      }
-
-      // Check network connectivity
-      const connectivity = await this.checkConnectivity()
-      validation.requirements.network = {
-        online: connectivity.online,
-        passed: connectivity.online
-      }
-
-      // Collect all issues
-      Object.entries(validation.requirements).forEach(([key, req]) => {
-        if (!req.passed) {
-          validation.passed = false
-          validation.issues.push(`${key}: ${req.current || 'Failed'} (required: ${req.required || 'Available'})`)
-        }
-      })
-
-    } catch (error) {
-      logger.error('System validation failed:', error)
-      validation.passed = false
-      validation.issues.push(`Validation error: ${error.message}`)
-    }
-
-    return validation
-  }
-
-  compareVersions(version1, version2) {
-    const v1parts = version1.split('.').map(Number)
-    const v2parts = version2.split('.').map(Number)
-    
-    for (let i = 0; i < Math.max(v1parts.length, v2parts.length); i++) {
-      const v1part = v1parts[i] || 0
-      const v2part = v2parts[i] || 0
-      
-      if (v1part > v2part) return 1
-      if (v1part < v2part) return -1
-    }
-    return 0
-  }
-
-  startMetricsCollection() {
-    // Increment request counter
-    setInterval(() => {
-      this.metrics.requestCount++
-    }, 1000)
-  }
-
-  async getSetupStatus() {
-    return {
-      ...this.setupStatus,
-      timestamp: new Date().toISOString()
-    }
-  }
-
-  async startSetup() {
-    this.setupStatus.isComplete = false
-    this.setupStatus.currentStep = 0
-    await this.saveSetupStatus()
-    
-    return {
-      id: Date.now().toString(),
-      ...this.setupStatus
-    }
-  }
-
-  async completeSetup() {
-    this.setupStatus.isComplete = true
-    this.setupStatus.currentStep = this.setupStatus.steps.length
-    this.setupStatus.completedAt = new Date().toISOString()
-    await this.saveSetupStatus()
-    
-    return {
-      success: true,
-      setupComplete: true
-    }
-  }
-
-  async resetSetup() {
-    this.setupStatus.isComplete = false
-    this.setupStatus.currentStep = 0
-    delete this.setupStatus.completedAt
-    await this.saveSetupStatus()
-    
-    return {
-      success: true,
-      setupComplete: false
-    }
-  }
-
-  async cleanup() {
-    logger.system('Cleaning up System Service')
-    // Cleanup logic here
-  }
-}
-
-module.exports = SystemService
diff --git a/src/services/TelemetryService.js b/src/services/TelemetryService.js
new file mode 100644
index 0000000..0929406
--- /dev/null
+++ b/src/services/TelemetryService.js
@@ -0,0 +1,217 @@
+import fs from 'fs';
+import path from 'path';
+import os from 'os';
+import crypto from 'crypto';
+import { createRequire } from 'module';
+import logger from '../utils/logger.js';
+import { dataDir } from '../utils/vendorPaths.js';
+
+const require = createRequire(import.meta.url);
+
+/**
+ * Voluntary, privacy-minimal product telemetry (PostHog).
+ *
+ * Principles (documented in README "Telemetry & Privacy"):
+ *  - OFF until the user allows it in the first-run prompt (or POSTHOG_KEY absent).
+ *  - Anonymous install ID only — no IP logging, no machine/user names, never
+ *    audio, never stream names, never file paths.
+ *  - Queue-and-flush: a LAN-first app is often offline; telemetry must never
+ *    block or break anything. Every call is try/caught.
+ *
+ * Collected event properties: event name, timestamp, app version, OS +
+ * architecture, anonymous install ID, and for failures the error category
+ * (from errorDiagnostics) — nothing else. Every event also carries the fixed
+ * app=lanstreamer tag (the maintainer's PostHog project is shared with other
+ * apps; the tag is how insights tell this app's events apart). See
+ * docs/APP-FLOW.md and README.
+ *
+ * Config: config/telemetry.json { installId, consented: boolean|null }
+ * Env: POSTHOG_KEY (project API key), POSTHOG_HOST (default us.i.posthog.com).
+ */
+class TelemetryService {
+  constructor() {
+    this.configPath = path.join(dataDir(), 'telemetry.json');
+    this.client = null;
+    this.installId = null;
+    this.consented = null; // null = undecided, true/false = user choice
+    this.queue = [];
+    this.enabled = false;
+  }
+
+  init() {
+    if (process.env.NODE_ENV === 'test' || this._initialized) return; // never in tests, once per process
+    this._initialized = true;
+    try {
+      this._loadState();
+      this._maybeStartClient();
+      if (this.enabled) {
+        this.capture('app_start', {});
+        this._startFlushInterval();
+      }
+    } catch (error) {
+      logger.debug(`Telemetry init skipped: ${error.message}`);
+    }
+  }
+
+  _loadState() {
+    let state = {};
+    try {
+      if (fs.existsSync(this.configPath)) {
+        state = JSON.parse(fs.readFileSync(this.configPath, 'utf8'));
+      }
+    } catch {
+      state = {};
+    }
+    this.installId = state.installId || crypto.randomUUID();
+    this.consented = typeof state.consented === 'boolean' ? state.consented : null;
+    // Key/host resolution order:
+    //   1. env (dev: POSTHOG_KEY / POSTHOG_HOST, typically via .env)
+    //   2. config/telemetry.json (operator-configurable at runtime)
+    //   3. electron/telemetry-key.json (injected at build time so packaged
+    //      apps ship telemetry with zero user configuration)
+    this._configKey = state.posthogKey || this._readSecretsStore()?.posthogKey || this._readBundledKey()?.posthogKey || null;
+    this._configHost = state.posthogHost || this._readSecretsStore()?.posthogHost || this._readBundledKey()?.posthogHost || null;
+    if (!state.installId) this._saveState();
+  }
+
+  _readBundledKey() {
+    // Candidates: dev checkout (cwd), packaged app (inside the asar — Electron's
+    // patched fs reads through it), and unpacked resources as a fallback. Without
+    // the asar path, distributed installs on machines WITHOUT ~/.secrets can
+    // never enable telemetry (the key only exists inside the packaged app).
+    const candidates = [
+      path.join(process.cwd(), 'electron', 'telemetry-key.json'),
+      process.resourcesPath ? path.join(process.resourcesPath, 'app.asar', 'electron', 'telemetry-key.json') : null,
+      process.resourcesPath ? path.join(process.resourcesPath, 'app', 'electron', 'telemetry-key.json') : null
+    ].filter(Boolean);
+    for (const bundledPath of candidates) {
+      try {
+        if (fs.existsSync(bundledPath)) {
+          return JSON.parse(fs.readFileSync(bundledPath, 'utf8'));
+        }
+      } catch { /* try next candidate */ }
+    }
+    return null;
+  }
+
+  /**
+   * Machine credential store convention (this operator's setup):
+   * ~/.secrets/posthog with KEY=VALUE lines — POSTHOG_PROJECT_TOKEN and
+   * optional POSTHOG_HOST. Values are never logged.
+   */
+  _readSecretsStore() {
+    try {
+      const secretsPath = path.join(os.homedir(), '.secrets', 'posthog');
+      if (!fs.existsSync(secretsPath)) return null;
+      const lines = fs.readFileSync(secretsPath, 'utf8').split('\n');
+      const map = {};
+      for (const line of lines) {
+        const m = line.match(/^\s*([A-Z0-9_]+)\s*=\s*(.+?)\s*$/);
+        if (m) map[m[1]] = m[2];
+      }
+      if (!map.POSTHOG_PROJECT_TOKEN) return null;
+      return {
+        posthogKey: map.POSTHOG_PROJECT_TOKEN,
+        ...(map.POSTHOG_HOST ? { posthogHost: map.POSTHOG_HOST } : {}),
+      };
+    } catch { /* ignore */ }
+    return null;
+  }
+
+  getKey() {
+    return process.env.POSTHOG_KEY || this._configKey;
+  }
+
+  getHost() {
+    return process.env.POSTHOG_HOST || this._configHost || 'https://us.i.posthog.com';
+  }
+
+  _saveState() {
+    try {
+      fs.mkdirSync(path.dirname(this.configPath), { recursive: true });
+      fs.writeFileSync(this.configPath, JSON.stringify({
+        installId: this.installId,
+        consented: this.consented,
+        posthogKey: this._configKey || undefined,
+        posthogHost: this._configHost || undefined,
+      }, null, 2));
+    } catch (error) {
+      logger.debug(`Telemetry state not saved: ${error.message}`);
+    }
+  }
+
+  _maybeStartClient() {
+    const key = this.getKey();
+    // OPT-OUT model (owner decision 2026-11-01): telemetry is ON unless the
+    // operator explicitly turned it off (consented === false). A fresh install
+    // (consented null) sends; the first-run dialog is an informational notice
+    // with a one-click "Turn off", and the dashboard/tray toggles flip it.
+    if (!key || this.consented === false) {
+      this.enabled = false;
+      return;
+    }
+    try {
+      // Lazy import so a missing/broken SDK never affects the app
+      const { PostHog } = require('posthog-node');
+      this.client = new PostHog(key, {
+        host: this.getHost(),
+        flushAt: 10,
+        flushInterval: 30_000,
+      });
+      this.enabled = true;
+    } catch (error) {
+      logger.debug(`PostHog client not started: ${error.message}`);
+      this.enabled = false;
+    }
+  }
+
+  getConsentState() {
+    return { installId: this.installId, consented: this.consented, enabled: this.enabled };
+  }
+
+  /** User decision from the first-run prompt (or settings/tray toggle). */
+  setConsented(value) {
+    this.consented = Boolean(value);
+    this._saveState();
+    this._maybeStartClient();
+    if (this.enabled && !this._flushTimer) this._startFlushInterval();
+    this.capture(value ? 'telemetry_enabled' : 'telemetry_disabled', {});
+    if (this.client) this.client.flush().catch(() => {});
+    return this.getConsentState();
+  }
+
+  capture(event, properties = {}) {
+    if (!this.enabled || !this.client) return;
+    try {
+      this.client.capture({
+        distinctId: this.installId,
+        event: `lanstreamer_${event}`,
+        properties: {
+          app: 'lanstreamer',
+          appVersion: process.env.npm_package_version || 'unknown',
+          platform: process.platform,
+          arch: process.arch,
+          ...properties,
+        },
+      });
+    } catch (error) {
+      logger.debug(`Telemetry capture failed (ignored): ${error.message}`);
+    }
+  }
+
+  _startFlushInterval() {
+    if (this._flushTimer) return;
+    this._flushTimer = setInterval(() => {
+      if (this.client) this.client.flush().catch(() => {});
+    }, 60_000);
+    this._flushTimer.unref?.();
+  }
+
+  async shutdown() {
+    try {
+      if (this.client) await this.client.shutdown();
+    } catch { /* ignore */ }
+  }
+}
+
+export default new TelemetryService();
diff --git a/src/services/WebSocketService.js b/src/services/WebSocketService.js
deleted file mode 100644
index b386ceb..0000000
--- a/src/services/WebSocketService.js
+++ /dev/null
@@ -1,417 +0,0 @@
-const logger = require('../utils/logger')
-
-class WebSocketService {
-  constructor(io) {
-    this.io = io
-    this.connectedClients = new Map()
-    this.rooms = new Set(['admin', 'operators', 'viewers'])
-    this.updateInterval = null
-  }
-
-  setupEventHandlers() {
-    logger.system('Setting up WebSocket event handlers')
-
-    this.io.on('connection', (socket) => {
-      this.handleConnection(socket)
-    })
-
-    // Start periodic updates
-    this.startPeriodicUpdates()
-  }
-
-  handleConnection(socket) {
-    const clientId = socket.id
-    const clientInfo = {
-      id: clientId,
-      connectedAt: new Date().toISOString(),
-      ip: socket.handshake.address,
-      userAgent: socket.handshake.headers['user-agent'],
-      authenticated: false,
-      role: 'viewer',
-      rooms: []
-    }
-
-    this.connectedClients.set(clientId, clientInfo)
-
-    logger.system('WebSocket client connected', {
-      clientId,
-      ip: clientInfo.ip,
-      totalClients: this.connectedClients.size
-    })
-
-    // Send welcome message
-    socket.emit('connected', {
-      clientId,
-      timestamp: new Date().toISOString(),
-      serverInfo: {
-        name: 'LANStreamer',
-        version: require('../../package.json').version
-      }
-    })
-
-    // Handle authentication
-    socket.on('authenticate', (data) => {
-      this.handleAuthentication(socket, data)
-    })
-
-    // Handle room joining
-    socket.on('join-room', (roomName) => {
-      this.handleJoinRoom(socket, roomName)
-    })
-
-    // Handle room leaving
-    socket.on('leave-room', (roomName) => {
-      this.handleLeaveRoom(socket, roomName)
-    })
-
-    // Handle stream subscription
-    socket.on('subscribe-stream', (streamId) => {
-      this.handleStreamSubscription(socket, streamId)
-    })
-
-    // Handle stream unsubscription
-    socket.on('unsubscribe-stream', (streamId) => {
-      this.handleStreamUnsubscription(socket, streamId)
-    })
-
-    // Handle ping/pong for connection health
-    socket.on('ping', () => {
-      socket.emit('pong', { timestamp: new Date().toISOString() })
-    })
-
-    // Handle client requests for data
-    socket.on('request-system-status', () => {
-      this.sendSystemStatus(socket)
-    })
-
-    socket.on('request-stream-list', () => {
-      this.sendStreamList(socket)
-    })
-
-    // Handle disconnection
-    socket.on('disconnect', (reason) => {
-      this.handleDisconnection(socket, reason)
-    })
-
-    // Handle errors
-    socket.on('error', (error) => {
-      logger.error('WebSocket error:', error)
-    })
-  }
-
-  handleAuthentication(socket, data) {
-    const clientInfo = this.connectedClients.get(socket.id)
-    if (!clientInfo) return
-
-    try {
-      // In a real implementation, verify the JWT token
-      const { token, role } = data
-      
-      // Simulate token verification
-      if (token && token.length > 10) {
-        clientInfo.authenticated = true
-        clientInfo.role = role || 'viewer'
-        clientInfo.authenticatedAt = new Date().toISOString()
-
-        this.connectedClients.set(socket.id, clientInfo)
-
-        socket.emit('authenticated', {
-          success: true,
-          role: clientInfo.role,
-          permissions: this.getRolePermissions(clientInfo.role)
-        })
-
-        // Join appropriate room based on role
-        this.joinRoomByRole(socket, clientInfo.role)
-
-        logger.system('WebSocket client authenticated', {
-          clientId: socket.id,
-          role: clientInfo.role
-        })
-      } else {
-        socket.emit('authentication-failed', {
-          error: 'Invalid token'
-        })
-      }
-    } catch (error) {
-      logger.error('WebSocket authentication error:', error)
-      socket.emit('authentication-failed', {
-        error: 'Authentication failed'
-      })
-    }
-  }
-
-  handleJoinRoom(socket, roomName) {
-    const clientInfo = this.connectedClients.get(socket.id)
-    if (!clientInfo) return
-
-    if (!this.rooms.has(roomName)) {
-      socket.emit('room-error', {
-        error: `Room '${roomName}' does not exist`
-      })
-      return
-    }
-
-    // Check permissions
-    if (!this.canJoinRoom(clientInfo.role, roomName)) {
-      socket.emit('room-error', {
-        error: `Insufficient permissions to join room '${roomName}'`
-      })
-      return
-    }
-
-    socket.join(roomName)
-    clientInfo.rooms.push(roomName)
-    this.connectedClients.set(socket.id, clientInfo)
-
-    socket.emit('room-joined', {
-      room: roomName,
-      timestamp: new Date().toISOString()
-    })
-
-    logger.system('Client joined room', {
-      clientId: socket.id,
-      room: roomName,
-      role: clientInfo.role
-    })
-  }
-
-  handleLeaveRoom(socket, roomName) {
-    const clientInfo = this.connectedClients.get(socket.id)
-    if (!clientInfo) return
-
-    socket.leave(roomName)
-    clientInfo.rooms = clientInfo.rooms.filter(room => room !== roomName)
-    this.connectedClients.set(socket.id, clientInfo)
-
-    socket.emit('room-left', {
-      room: roomName,
-      timestamp: new Date().toISOString()
-    })
-
-    logger.system('Client left room', {
-      clientId: socket.id,
-      room: roomName
-    })
-  }
-
-  handleStreamSubscription(socket, streamId) {
-    const clientInfo = this.connectedClients.get(socket.id)
-    if (!clientInfo) return
-
-    const streamRoom = `stream-${streamId}`
-    socket.join(streamRoom)
-
-    if (!clientInfo.subscribedStreams) {
-      clientInfo.subscribedStreams = []
-    }
-    clientInfo.subscribedStreams.push(streamId)
-    this.connectedClients.set(socket.id, clientInfo)
-
-    socket.emit('stream-subscribed', {
-      streamId,
-      timestamp: new Date().toISOString()
-    })
-
-    logger.system('Client subscribed to stream', {
-      clientId: socket.id,
-      streamId
-    })
-  }
-
-  handleStreamUnsubscription(socket, streamId) {
-    const clientInfo = this.connectedClients.get(socket.id)
-    if (!clientInfo) return
-
-    const streamRoom = `stream-${streamId}`
-    socket.leave(streamRoom)
-
-    if (clientInfo.subscribedStreams) {
-      clientInfo.subscribedStreams = clientInfo.subscribedStreams.filter(id => id !== streamId)
-      this.connectedClients.set(socket.id, clientInfo)
-    }
-
-    socket.emit('stream-unsubscribed', {
-      streamId,
-      timestamp: new Date().toISOString()
-    })
-
-    logger.system('Client unsubscribed from stream', {
-      clientId: socket.id,
-      streamId
-    })
-  }
-
-  handleDisconnection(socket, reason) {
-    const clientInfo = this.connectedClients.get(socket.id)
-    
-    if (clientInfo) {
-      logger.system('WebSocket client disconnected', {
-        clientId: socket.id,
-        reason,
-        connectedDuration: Date.now() - new Date(clientInfo.connectedAt).getTime(),
-        totalClients: this.connectedClients.size - 1
-      })
-    }
-
-    this.connectedClients.delete(socket.id)
-  }
-
-  joinRoomByRole(socket, role) {
-    let roomName
-    switch (role) {
-      case 'admin':
-        roomName = 'admin'
-        break
-      case 'operator':
-        roomName = 'operators'
-        break
-      default:
-        roomName = 'viewers'
-    }
-
-    this.handleJoinRoom(socket, roomName)
-  }
-
-  canJoinRoom(role, roomName) {
-    switch (roomName) {
-      case 'admin':
-        return role === 'admin'
-      case 'operators':
-        return role === 'admin' || role === 'operator'
-      case 'viewers':
-        return true
-      default:
-        return false
-    }
-  }
-
-  getRolePermissions(role) {
-    switch (role) {
-      case 'admin':
-        return ['read', 'write', 'admin', 'system', 'config']
-      case 'operator':
-        return ['read', 'write', 'streams']
-      case 'viewer':
-        return ['read']
-      default:
-        return []
-    }
-  }
-
-  // Broadcasting methods
-  broadcastToAll(event, data) {
-    this.io.emit(event, {
-      ...data,
-      timestamp: new Date().toISOString()
-    })
-  }
-
-  broadcastToRoom(room, event, data) {
-    this.io.to(room).emit(event, {
-      ...data,
-      timestamp: new Date().toISOString()
-    })
-  }
-
-  broadcastToAdmins(event, data) {
-    this.broadcastToRoom('admin', event, data)
-  }
-
-  broadcastToOperators(event, data) {
-    this.broadcastToRoom('operators', event, data)
-  }
-
-  broadcastStreamUpdate(streamId, data) {
-    this.io.to(`stream-${streamId}`).emit('stream-update', {
-      streamId,
-      ...data,
-      timestamp: new Date().toISOString()
-    })
-  }
-
-  // Data sending methods
-  async sendSystemStatus(socket) {
-    try {
-      // This would typically get data from other services
-      const systemStatus = {
-        status: 'healthy',
-        uptime: process.uptime(),
-        memory: process.memoryUsage(),
-        timestamp: new Date().toISOString()
-      }
-
-      socket.emit('system-status', systemStatus)
-    } catch (error) {
-      logger.error('Failed to send system status:', error)
-    }
-  }
-
-  async sendStreamList(socket) {
-    try {
-      // This would typically get data from FFmpegService
-      const streams = []
-
-      socket.emit('stream-list', {
-        streams,
-        count: streams.length,
-        timestamp: new Date().toISOString()
-      })
-    } catch (error) {
-      logger.error('Failed to send stream list:', error)
-    }
-  }
-
-  startPeriodicUpdates() {
-    // Send periodic updates to connected clients
-    this.updateInterval = setInterval(() => {
-      this.sendPeriodicUpdates()
-    }, 30000) // Every 30 seconds
-
-    logger.system('WebSocket periodic updates started')
-  }
-
-  async sendPeriodicUpdates() {
-    try {
-      // Send system status to admin room
-      this.broadcastToRoom('admin', 'periodic-system-update', {
-        uptime: process.uptime(),
-        memory: process.memoryUsage(),
-        connectedClients: this.connectedClients.size
-      })
-
-      // Send stream status to all rooms
-      this.broadcastToAll('periodic-stream-update', {
-        activeStreams: 0, // This would come from FFmpegService
-        totalListeners: 0 // This would come from IcecastService
-      })
-    } catch (error) {
-      logger.error('Failed to send periodic updates:', error)
-    }
-  }
-
-  getConnectedClients() {
-    return Array.from(this.connectedClients.values())
-  }
-
-  getClientCount() {
-    return this.connectedClients.size
-  }
-
-  getClientsByRole(role) {
-    return Array.from(this.connectedClients.values()).filter(client => client.role === role)
-  }
-
-  cleanup() {
-    logger.system('Cleaning up WebSocket Service')
-    
-    if (this.updateInterval) {
-      clearInterval(this.updateInterval)
-    }
-
-    // Disconnect all clients
-    this.io.disconnectSockets()
-  }
-}
-
-module.exports = WebSocketService
diff --git a/src/tailwind.css b/src/tailwind.css
new file mode 100644
index 0000000..b5c61c9
--- /dev/null
+++ b/src/tailwind.css
@@ -0,0 +1,3 @@
+@tailwind base;
+@tailwind components;
+@tailwind utilities;
diff --git a/src/utils/binaries.js b/src/utils/binaries.js
new file mode 100644
index 0000000..07e3879
--- /dev/null
+++ b/src/utils/binaries.js
@@ -0,0 +1,270 @@
+/**
+ * Binary provisioning — the single source of truth for FFmpeg/Icecast vendoring.
+ * Used by scripts/fetch-vendor-binaries.mjs (build time) AND the dashboard's
+ * download-on-demand tier (runtime, for the rare case where neither the
+ * bundled kit nor a system install exists).
+ *
+ * Supply-chain rule (maintainer's min-release-age mindset): the FFmpeg zip
+ * URL is a ROLLING "latest release" link, so its SHA256 is PINNED below.
+ * When FFmpeg publishes a new build the check fails on purpose — re-download
+ * from the official domain, verify, and update the pin consciously.
+ */
+import fs from 'fs';
+import path from 'path';
+import os from 'os';
+import { execSync } from 'child_process';
+import crypto from 'crypto';
+import { vendorDir, dataDir, vendoredFfmpegPath, vendoredIcecastExePath } from './vendorPaths.js';
+
+export const PINNED_FFMPEG = {
+  url: 'https://www.gyan.dev/ffmpeg/builds/ffmpeg-release-essentials.zip',
+  sha256: '60f467265b1e312373dbcd92200c2618a74850f98d3d078e94296bb3fa2047ba',
+  size: 114768076
+};
+
+const LICENSE_SOURCES = [
+  {
+    name: 'GPL-3.0.txt', expect: 'GNU GENERAL PUBLIC LICENSE',
+    urls: ['https://www.gnu.org/licenses/gpl-3.0.txt', 'https://raw.githubusercontent.com/spdx/license-list-data/main/text/GPL-3.0-only.txt']
+  },
+  {
+    name: 'GPL-2.0.txt', expect: 'GNU GENERAL PUBLIC LICENSE',
+    urls: ['https://www.gnu.org/licenses/gpl-2.0.txt', 'https://raw.githubusercontent.com/spdx/license-list-data/main/text/GPL-2.0-only.txt']
+  }
+];
+
+/** Clean stock template — never ship a local install's real credentials. */
+export const ICECAST_TEMPLATE = `<icecast>
+  <limits>
+    <clients>100</clients>
+    <sources>10</sources>
+    <queue-size>524288</queue-size>
+    <client-timeout>30</client-timeout>
+    <header-timeout>15</header-timeout>
+    <source-timeout>10</source-timeout>
+    <burst-on-connect>1</burst-on-connect>
+    <!-- 16KB ≈ 0.7s at 128k: enough to start playback promptly without
+         pre-pushing seconds of history as initial latency (65535 ≈ 4s) -->
+    <burst-size>16384</burst-size>
+  </limits>
+  <authentication>
+    <source-password>hackme</source-password>
+    <relay-password>hackme</relay-password>
+    <admin-user>admin</admin-user>
+    <admin-password>hackme</admin-password>
+  </authentication>
+  <hostname>localhost</hostname>
+  <listen-socket>
+    <port>8200</port>
+    <!-- LOOPBACK ONLY: listeners reach audio through the app's :3001 play
+         proxy; binding the LAN would expose Icecast's own admin plane to
+         anyone who knows the stock kit values this template ships with.
+         The app randomizes the passwords below per install at generation
+         time (vendorPaths.ensureVendoredIcecastConfig). -->
+    <bind-address>127.0.0.1</bind-address>
+  </listen-socket>
+  <fileserve>1</fileserve>
+  <paths>
+    <logdir>./log</logdir>
+    <webroot>./web</webroot>
+    <adminroot>./admin</adminroot>
+    <alias source="/" destination="/status.xsl"/>
+  </paths>
+  <logging>
+    <accesslog>access.log</accesslog>
+    <errorlog>error.log</errorlog>
+    <loglevel>3</loglevel>
+    <logsize>10000</logsize>
+    <logarchive>0</logarchive>
+  </logging>
+  <security>
+    <chroot>0</chroot>
+  </security>
+</icecast>
+`;
+
+export function writeIcecastTemplate(root) {
+  fs.writeFileSync(path.join(root, 'icecast', 'icecast.xml'), ICECAST_TEMPLATE);
+}
+
+/**
+ * Copy an Icecast kit directory (e.g. the validated 2.5.0 portable) into
+ * <root>/icecast, stripping installer junk, then write the clean template.
+ */
+export function installIcecastKit(root, srcDir) {
+  if (!fs.existsSync(path.join(srcDir, 'bin', 'icecast.exe'))) {
+    throw new Error(`No Icecast kit at ${srcDir} (expected bin/icecast.exe)`);
+  }
+  const dest = path.join(root, 'icecast');
+  fs.cpSync(srcDir, dest, { recursive: true });
+  for (const junk of ['$PLUGINSDIR', 'Uninstall.exe', 'doc', 'log', 'logs']) {
+    fs.rmSync(path.join(dest, junk), { recursive: true, force: true });
+  }
+  writeIcecastTemplate(root);
+}
+
+/** Verify + extract a downloaded FFmpeg essentials zip; returns the exe dest. */
+export function installFFmpegFromZip(root, zipPath, expectedSha256) {
+  const actual = crypto.createHash('sha256').update(fs.readFileSync(zipPath)).digest('hex');
+  if (expectedSha256 && actual !== expectedSha256) {
+    throw new Error(`FFmpeg zip hash mismatch — expected ${expectedSha256.slice(0, 12)}…, got ${actual.slice(0, 12)}…. Refusing to install (pinned supply-chain check). Re-pin consciously after verifying a new official build.`);
+  }
+  const dest = path.join(root, 'ffmpeg', 'ffmpeg.exe');
+  fs.mkdirSync(path.dirname(dest), { recursive: true });
+  const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'ffmpeg-'));
+  try {
+    // Expand-Archive, not tar: in Git Bash environments GNU tar shadows Windows
+    // bsdtar and misreads "C:\..." as a remote host spec ("Cannot connect to C:")
+    execSync(
+      `powershell -NoProfile -Command "Expand-Archive -LiteralPath '${zipPath.replace(/'/g, "''")}' -DestinationPath '${tmpDir.replace(/'/g, "''")}' -Force"`,
+      { stdio: 'ignore', windowsHide: true, timeout: 300000 }
+    );
+    const found = execSync(`dir /s /b "${tmpDir}\\ffmpeg.exe"`, { encoding: 'utf8', windowsHide: true }).trim().split('\n')[0].trim();
+    fs.copyFileSync(found, dest);
+  } finally {
+    fs.rmSync(tmpDir, { recursive: true, force: true });
+  }
+  return dest;
+}
+
+/**
+ * Download the pinned FFmpeg build with hash verification.
+ * onProgress(bytes, total) feeds the dashboard progress display.
+ * Buffered in memory (~110 MB, one-time desktop download) — simpler and
+ * avoids stream-plumbing edge cases.
+ */
+export async function downloadPinnedFFmpeg(root, onProgress) {
+  const res = await fetch(PINNED_FFMPEG.url);
+  if (!res.ok) throw new Error(`FFmpeg download failed: HTTP ${res.status}`);
+  const total = Number(res.headers.get('content-length')) || PINNED_FFMPEG.size;
+  const chunks = [];
+  let seen = 0;
+  for await (const chunk of res.body) {
+    chunks.push(chunk);
+    seen += chunk.length;
+    try { onProgress?.(seen, total); } catch { /* progress is advisory */ }
+  }
+  const buf = Buffer.concat(chunks);
+  const actual = crypto.createHash('sha256').update(buf).digest('hex');
+  if (actual !== PINNED_FFMPEG.sha256) {
+    throw new Error(`FFmpeg download failed the pinned hash check (expected ${PINNED_FFMPEG.sha256.slice(0, 12)}…, got ${actual.slice(0, 12)}…). The upstream build likely changed — re-verify and re-pin in src/utils/binaries.js.`);
+  }
+  const tmpZip = path.join(os.tmpdir(), `ffmpeg-${Date.now()}.zip`);
+  fs.writeFileSync(tmpZip, buf);
+  try {
+    return installFFmpegFromZip(root, tmpZip, null); // hash already verified
+  } finally {
+    fs.rmSync(tmpZip, { force: true });
+  }
+}
+
+/**
+ * GPL compliance: license texts + a written-offer README inside vendor/, so
+ * they ship inside the installer via extraResources.
+ */
+export async function fetchLicenseTexts(root) {
+  const dir = path.join(root, 'licenses');
+  fs.mkdirSync(dir, { recursive: true });
+  for (const { name, urls, expect } of LICENSE_SOURCES) {
+    const dest = path.join(dir, name);
+    if (fs.existsSync(dest)) continue;
+    let text = null, lastErr = null;
+    for (const url of urls) {
+      try {
+        const res = await fetch(url, { headers: { 'User-Agent': 'LANStreamer-build/1.0 (GPL compliance fetch)' }, signal: AbortSignal.timeout(20000) });
+        if (!res.ok) { lastErr = new Error(`HTTP ${res.status} from ${url}`); continue; }
+        const t = await res.text();
+        if (!t.includes(expect)) { lastErr = new Error(`sanity check failed for ${url}`); continue; }
+        text = t;
+        break;
+      } catch (err) { lastErr = err; }
+    }
+    if (text === null) throw new Error(`License download failed (${name}): ${lastErr?.message}`);
+    fs.writeFileSync(dest, text);
+  }
+  fs.writeFileSync(path.join(dir, 'README.md'), `# Bundled binaries — licenses and source offer
+
+This distribution bundles GPL-licensed binaries:
+
+- **FFmpeg** (gyan.dev essentials build, ${PINNED_FFMPEG.url}) — GPLv3. Source: official builds at gyan.dev/ffmpeg/builds/ (source code links published there) or https://ffmpeg.org/download.html
+- **Icecast** (2.5.x Windows kit, icecast.org) — GPLv2. Source: https://icecast.org/download/
+
+Complete license texts are the GPL-2.0.txt / GPL-3.0.txt files in this
+directory. The corresponding source code is available from the official
+upstream download pages above (written offer: maintainers of LANStreamer
+will provide or point to the exact source on request).
+`);
+}
+
+/**
+ * Runtime probe for the dashboard download-on-demand tier:
+ * which tier resolved — vendored, system, or missing entirely.
+ */
+export function binariesStatus() {
+  const ffmpegVendored = !!vendoredFfmpegPath();
+  let ffmpegSystem = false;
+  if (!ffmpegVendored) {
+    try { execSync('ffmpeg -version', { stdio: 'ignore', windowsHide: true }); ffmpegSystem = true; } catch { /* absent */ }
+  }
+  const icecastVendored = !!vendoredIcecastExePath();
+  let icecastSystem = false;
+  if (!icecastVendored) {
+    const candidates = [
+      process.env.ICECAST_EXE_PATH,
+      'C:\\Program Files (x86)\\Icecast\\bin\\icecast.exe',
+      'C:\\Program Files\\Icecast\\bin\\icecast.exe'
+    ].filter(Boolean);
+    icecastSystem = candidates.some(p => fs.existsSync(p));
+  }
+  return {
+    ffmpeg: ffmpegVendored ? 'vendored' : (ffmpegSystem ? 'system' : 'missing'),
+    icecast: icecastVendored ? 'vendored' : (icecastSystem ? 'system' : 'missing'),
+    canStream: (ffmpegVendored || ffmpegSystem) && (icecastVendored || icecastSystem),
+    vendorRoot: vendorDir()
+  };
+}
+
+/** Writable vendor root for on-demand downloads (packaged: userData, never the read-only resources dir). */
+export function downloadTargetRoot() {
+  return path.join(dataDir(), 'vendor');
+}
+
+/**
+ * Download-on-demand job (dashboard tier): fetch the pinned FFmpeg build into
+ * the writable data-dir vendor root. Progress is polled via downloadJobState()
+ * — the POST returns immediately and the download runs detached.
+ * Icecast stays a guided external install (official installer) — see the
+ * dashboard card copy.
+ */
+const job = { running: false, bytes: 0, total: 0, error: null, done: false, finishedAt: null };
+
+export function downloadJobState() {
+  return { ...job };
+}
+
+export async function startBinaryDownload() {
+  if (job.running) return job;
+  job.running = true;
+  job.error = null;
+  job.done = false;
+  job.bytes = 0;
+  job.total = PINNED_FFMPEG.size;
+  const root = downloadTargetRoot();
+  downloadPinnedFFmpeg(root, (bytes, total) => {
+    job.bytes = bytes;
+    job.total = total;
+  })
+    .then(async () => {
+      try { await fetchLicenseTexts(root); } catch { /* licenses are best-effort here */ }
+      job.done = true;
+      job.finishedAt = Date.now();
+    })
+    .catch(err => {
+      job.error = err.message;
+      job.finishedAt = Date.now();
+    })
+    .finally(() => {
+      job.running = false;
+    });
+  return job;
+}
diff --git a/src/utils/errorDiagnostics.js b/src/utils/errorDiagnostics.js
index 66f9d00..8cfb240 100644
--- a/src/utils/errorDiagnostics.js
+++ b/src/utils/errorDiagnostics.js
@@ -69,19 +69,19 @@ class ErrorDiagnostics {
         diagnose: (stderr, exitCode, context) => this.diagnosePortConflict(stderr, exitCode, context)
       },
 
-      // Authentication Errors
+      // Device In Use Errors (must come before authentication to catch "exclusive access denied")
       {
-        category: 'authentication',
+        category: 'device_busy',
         patterns: [
-          /401 unauthorized/i,
-          /authentication failed/i,
-          /invalid password/i,
-          /access denied/i,
-          /permission denied/i,
-          /wrong password/i,
-          /source client not accepted/i,
+          /device or resource busy/i,
+          /device is being used/i,
+          /exclusive access/i,
+          /cannot open.*device/i,
+          /could not open (?:the )?(?:audio )?device/i,
+          /\[dshow[^\]]*\].*(?:error|fail|could not)/i,
+          /\[wasapi[^\]]*\].*(?:error|fail|could not)/i,
         ],
-        diagnose: (stderr, exitCode, context) => this.diagnoseAuthError(stderr, exitCode, context)
+        diagnose: (stderr, exitCode, context) => this.diagnoseDeviceBusy(stderr, exitCode, context)
       },
 
       // Mount Point Errors
@@ -97,33 +97,21 @@ class ErrorDiagnostics {
         diagnose: (stderr, exitCode, context) => this.diagnoseMountPointError(stderr, exitCode, context)
       },
 
-      // Audio Device Errors
+      // Authentication Errors (specific to Icecast password/auth)
       {
-        category: 'device_not_found',
-        patterns: [
-          /could not find audio device/i,
-          /no such device/i,
-          /device not found/i,
-          /cannot find.*device/i,
-          /immediate exit requested/i,
-        ],
-        diagnose: (stderr, exitCode, context) => this.diagnoseDeviceNotFound(stderr, exitCode, context)
-      },
-
-      // Device In Use Errors
-      {
-        category: 'device_busy',
+        category: 'authentication',
         patterns: [
-          /device or resource busy/i,
-          /device is being used/i,
-          /exclusive access/i,
-          /cannot open.*device/i,
-          /access to.*denied/i,
+          /401 unauthorized/i,
+          /authentication failed/i,
+          /invalid password/i,
+          /permission denied(?!.*exclusive)/i,
+          /wrong password/i,
+          /source client not accepted/i,
         ],
-        diagnose: (stderr, exitCode, context) => this.diagnoseDeviceBusy(stderr, exitCode, context)
+        diagnose: (stderr, exitCode, context) => this.diagnoseAuthError(stderr, exitCode, context)
       },
 
-      // Virtual Audio Device Errors
+      // Virtual Audio Device Errors (must come before generic device_not_found)
       {
         category: 'virtual_audio',
         patterns: [
@@ -135,12 +123,32 @@ class ErrorDiagnostics {
         diagnose: (stderr, exitCode, context) => this.diagnoseVirtualAudioError(stderr, exitCode, context)
       },
 
+      // Audio Device Errors
+      {
+        category: 'device_not_found',
+        patterns: [
+          /could not find audio device/i,
+          /could not find (?:any )?(?:audio |video )?device/i,
+          /no such device/i,
+          /no such audio device/i,
+          /device not found/i,
+          /cannot find.*device/i,
+          /immediate exit requested/i,
+          // FFmpeg 9 wraps DirectShow failures under [in#0/...] — "Error opening
+          // input: Immediate exit requested" is the common device-open failure.
+          /error opening input/i,
+        ],
+        diagnose: (stderr, exitCode, context) => this.diagnoseDeviceNotFound(stderr, exitCode, context)
+      },
+
       // DirectShow Errors (Windows)
       {
         category: 'directshow',
         patterns: [
           /dshow/i,
           /directshow/i,
+          /\[in#0\/dshow[^\]]*\]/i,
+          /\[in#0\/wasapi[^\]]*\]/i,
           /could not set video options/i,
           /could not enumerate.*devices/i,
         ],
@@ -219,12 +227,20 @@ class ErrorDiagnostics {
     // Check for specific exit codes first (Windows crash codes)
     if (this.windowsExitCodes[exitCodeStr]) {
       const codeInfo = this.windowsExitCodes[exitCodeStr];
-      
-      // Exit code -5 or 4294967291 typically means connection refused
+
+      // Exit code -5 or 4294967291 can mean connection refused OR access
+      // denied while opening a capture device. Only trust the connection
+      // reading when stderr agrees (or is empty with no device involved);
+      // otherwise let the pattern matcher classify device errors below.
       if (codeInfo.signed === -5) {
-        return this.diagnoseConnectionError(stderr, exitCode, context);
+        const looksLikeConnection = /connection refused|could not connect|econnrefused|network is unreachable/i.test(stderrLower);
+        const noUsableOutput = !stderrLower ||
+          (!stderrLower.includes('error') && !stderrLower.includes('fail') && !stderrLower.includes('could not'));
+        if (looksLikeConnection || (noUsableOutput && !(context.deviceId || context.deviceName))) {
+          return this.diagnoseConnectionError(stderr, exitCode, context);
+        }
       }
-      
+
       // Windows process crash code
       if (codeInfo.hex === '0xA7F00008') {
         return this.diagnoseWindowsCrash(stderr, exitCode, context);
@@ -414,6 +430,33 @@ class ErrorDiagnostics {
    */
   diagnoseDeviceBusy(stderr, exitCode, context) {
     const deviceName = context.deviceName || context.deviceId || 'Audio device';
+    const s = (stderr || '').toLowerCase();
+    // FFmpeg could see the device name but failed to open it — most often the
+    // device does not exist as a DirectShow audio capture source (e.g. virtual
+    // camera audio pins) or another process holds it.
+    const notFound = /could not find|no such device|error opening input/.test(s);
+
+    if (notFound) {
+      return {
+        category: 'device_busy',
+        severity: 'warning',
+        title: `🎤 Audio Source "${deviceName}" Could Not Be Opened`,
+        description: `FFmpeg could not open "${deviceName}" as a capture device. Either it is not a real audio input, or another program/stream is holding it.`,
+        causes: [
+          `"${deviceName}" is a video device's audio pin that DirectShow cannot capture (e.g. OBS Virtual Camera)`,
+          'Another LANStreamer stream is already using the same audio source',
+          'Another application holds the device (OBS, Zoom, Teams, Discord, Audacity)',
+          'A virtual audio device (VB-Audio/VoiceMeeter) stopped or needs a restart',
+        ],
+        solutions: [
+          '1. If another stream in LANStreamer uses the same source: stop it first, or pick a different source for this stream',
+          '2. Pick a different input in the stream editor (mic, line-in, or a virtual cable output)',
+          '3. Close other apps that may hold the microphone',
+          '4. For virtual devices: restart VoiceMeeter/VB-Cable, then Refresh Devices',
+        ],
+        technicalDetails: `Device: ${deviceName}\nExit code: ${exitCode}\nStderr preview: ${(stderr || '').substring(0, 400)}`,
+      };
+    }
 
     return {
       category: 'device_busy',
@@ -663,6 +706,12 @@ class ErrorDiagnostics {
       !stderrLower.includes('denied');
 
     if (hasOnlyVersionInfo) {
+      // With no usable stderr, the best signal we have: if a capture device was
+      // involved, blame the device before blaming Icecast (exit -5 also matches
+      // access-denied on Windows, which dshow open failures produce).
+      if (context.deviceId || context.deviceName) {
+        return this.diagnoseDeviceNotFound(stderr, exitCode, context);
+      }
       return this.diagnoseConnectionError(stderr, exitCode, context);
     }
 
diff --git a/src/utils/errors.js b/src/utils/errors.js
index c614692..bb4cd80 100644
--- a/src/utils/errors.js
+++ b/src/utils/errors.js
@@ -172,7 +172,31 @@ export const ErrorCodes = {
   // Audio
   AUDIO_DEVICE_NOT_FOUND: 'AUDIO_DEVICE_NOT_FOUND',
   AUDIO_DEVICE_BUSY: 'AUDIO_DEVICE_BUSY',
-  AUDIO_FORMAT_UNSUPPORTED: 'AUDIO_FORMAT_UNSUPPORTED'
+  AUDIO_FORMAT_UNSUPPORTED: 'AUDIO_FORMAT_UNSUPPORTED',
+
+  // Stream start/restart
+  STREAM_START_FAILED: 'STREAM_START_FAILED',
+  STREAM_RESTART_FAILED: 'STREAM_RESTART_FAILED'
+};
+
+/**
+ * Stream failure causes (maps from errorDiagnostics category to API/client).
+ * Used for cause attribution so logs and UI can say "this is why it failed".
+ */
+export const StreamFailureCause = {
+  CONNECTION_REFUSED: 'connection',
+  PORT_CONFLICT: 'port_conflict',
+  AUTH_FAILED: 'authentication',
+  MOUNT_POINT_FULL: 'mount_point',
+  DEVICE_NOT_FOUND: 'device_not_found',
+  DEVICE_BUSY: 'device_busy',
+  VIRTUAL_AUDIO: 'virtual_audio',
+  DIRECTSHOW: 'directshow',
+  CODEC_ERROR: 'codec',
+  FORMAT_ERROR: 'format',
+  RESOURCE_ERROR: 'resource',
+  TIMEOUT_ERROR: 'timeout',
+  UNKNOWN: 'unknown'
 };
 
 /**
diff --git a/src/utils/securityStore.js b/src/utils/securityStore.js
new file mode 100644
index 0000000..31ff0ec
--- /dev/null
+++ b/src/utils/securityStore.js
@@ -0,0 +1,58 @@
+/**
+ * Persisted admin credentials for the in-app settings path (dashboard →
+ * Admin account). Packaged installs have no .env to edit, so credential
+ * changes live in a small JSON file in the writable data dir.
+ *
+ * File: { adminUsername, adminPasswordHash, jwtSecret } — the password is
+ * stored as a salted scrypt hash, never plaintext. Once the file exists it
+ * takes precedence over env/defaults (an explicit in-app change must win);
+ * config/index.js applies it at boot and routes/auth.js applies it at runtime.
+ */
+import fs from 'fs';
+import path from 'path';
+import crypto from 'crypto';
+import { dataDir } from './vendorPaths.js';
+
+const SCRYPT = { N: 16384, r: 8, p: 1, keylen: 64, maxmem: 64 * 1024 * 1024 };
+
+export function securityFilePath() {
+  // LS_SECURITY_FILE exists so tests can aim the store at a throwaway path.
+  return process.env.LS_SECURITY_FILE || path.join(dataDir(), 'security.json');
+}
+
+export function hashPassword(password) {
+  const salt = crypto.randomBytes(16);
+  const hash = crypto.scryptSync(password, salt, SCRYPT.keylen, SCRYPT);
+  return ['scrypt', SCRYPT.N, SCRYPT.r, SCRYPT.p, salt.toString('hex'), hash.toString('hex')].join(':');
+}
+
+export function verifyPasswordHash(password, encoded) {
+  try {
+    const [scheme, N, r, p, saltHex, hashHex] = String(encoded).split(':');
+    if (scheme !== 'scrypt' || !saltHex || !hashHex) return false;
+    const expected = Buffer.from(hashHex, 'hex');
+    const actual = crypto.scryptSync(password, Buffer.from(saltHex, 'hex'), expected.length, { N: +N, r: +r, p: +p, maxmem: SCRYPT.maxmem });
+    return actual.length === expected.length && crypto.timingSafeEqual(actual, expected);
+  } catch {
+    return false;
+  }
+}
+
+export function loadSecurityFile() {
+  try {
+    const p = securityFilePath();
+    if (fs.existsSync(p)) return JSON.parse(fs.readFileSync(p, 'utf8')) || {};
+  } catch { /* unreadable/corrupt file = fall back to env/defaults */ }
+  return {};
+}
+
+export function saveSecurityFile(data) {
+  const p = securityFilePath();
+  fs.mkdirSync(path.dirname(p), { recursive: true });
+  fs.writeFileSync(p, JSON.stringify(data, null, 2), { mode: 0o600 });
+  return p;
+}
+
+export function mintJwtSecret() {
+  return crypto.randomBytes(48).toString('hex');
+}
diff --git a/src/utils/vendorPaths.js b/src/utils/vendorPaths.js
new file mode 100644
index 0000000..02a1344
--- /dev/null
+++ b/src/utils/vendorPaths.js
@@ -0,0 +1,193 @@
+/**
+ * Vendored-binary resolution — the "works on every PC" layer.
+ *
+ * The installer bundles FFmpeg + the Icecast kit under resources/vendor/ so a
+ * fresh machine needs NOTHING installed. Resolution order (first hit wins):
+ *
+ *   1. LANSTREAMER_VENDOR_DIR env (tests / custom layouts)
+ *   2. Electron packaged app: <resourcesPath>/vendor   (extraResources in build)
+ *   3. Dev checkout: <repo>/vendor                     (populated by scripts/fetch-vendor-binaries.mjs)
+ *   4. null → fall back to system PATH / standard installs (legacy behavior)
+ *
+ * Layout inside the vendor dir:
+ *   vendor/ffmpeg/ffmpeg.exe
+ *   vendor/icecast/bin/icecast.exe (+ dlls), admin/, web/, mime.types, icecast.xml (template)
+ *
+ * The bundled Icecast needs a WRITABLE config + logdir (Program-Files style
+ * EPERM problems must not follow us into the bundle), so the vendored icecast
+ * config lives in the data dir (LANSTREAMER_DATA_DIR, else <repo>/config):
+ *   <dataDir>/icecast/icecast.xml  +  <dataDir>/icecast/log/
+ */
+import fs from 'fs';
+import crypto from 'crypto';
+import { execSync } from 'node:child_process';
+import path from 'path';
+import { fileURLToPath } from 'url';
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+
+export function vendorDir() {
+  const candidates = [
+    process.env.LANSTREAMER_VENDOR_DIR,
+    process.resourcesPath ? path.join(process.resourcesPath, 'vendor') : null, // Electron main (packaged, bundled)
+    path.join(dataDir(), 'vendor'), // runtime download-on-demand tier (writable)
+    path.join(__dirname, '..', '..', 'vendor') // dev checkout
+  ];
+  for (const dir of candidates) {
+    if (dir && fs.existsSync(dir)) return dir;
+  }
+  return null;
+}
+
+export function vendoredFfmpegPath() {
+  const dir = vendorDir();
+  if (!dir) return null;
+  const exe = path.join(dir, 'ffmpeg', 'ffmpeg.exe');
+  return fs.existsSync(exe) ? exe : null;
+}
+
+export function vendoredIcecastExePath() {
+  const dir = vendorDir();
+  if (!dir) return null;
+  const exe = path.join(dir, 'icecast', 'bin', 'icecast.exe');
+  return fs.existsSync(exe) ? exe : null;
+}
+
+export function dataDir() {
+  // Packaged Electron sets LANSTREAMER_DATA_DIR to userData (writable, per-user);
+  // everything else (CLI/dev) uses the repo config/ dir.
+  return process.env.LANSTREAMER_DATA_DIR || path.join(__dirname, '..', '..', 'config');
+}
+
+/**
+ * Base dir for operator uploads (event banners, lobby music). Packaged apps
+ * cannot write into public/ (it lives inside the read-only asar), so uploads
+ * go to the data dir and are served from there; dev keeps public/uploads so
+ * existing URLs and files stay put.
+ */
+export function uploadsBase() {
+  if (process.env.LANSTREAMER_DATA_DIR) return path.join(dataDir(), 'uploads');
+  return path.join(__dirname, '..', '..', 'public', 'uploads');
+}
+
+/**
+ * Create the writable vendored Icecast config if missing. Path rewrites only
+ * (logdir → data dir, web/admin assets stay on the read-only kit) — EVERYTHING
+ * ELSE stays exactly as the stock template ships it. Deliberate decision
+ * (Jerry, 2026-10-30, recorded in GO-LIVE-CHECKLIST §0.1): the packaged app
+ * must behave like a plain Icecast install with no hidden divergence — stock
+ * credentials, stock binding, stock port. Security is handled by advice (the
+ * dashboard banner calls out stock credentials; README documents changing
+ * them), not by silently diverging. Two stock instances on one machine are
+ * interchangeable, which also makes multi-install machines just work.
+ *
+ * Conflict recovery only: if OUR port is later held by an instance that
+ * rejects our (stock) credentials, claimVendoredIcecastPort moves our
+ * generated file to the next free port — recovery, not divergence.
+ * Idempotent: an existing config (incl. operator edits) is never rewritten
+ * beyond that port claim.
+ */
+export function ensureVendoredIcecastConfig() {
+  const dir = vendorDir();
+  const exe = vendoredIcecastExePath();
+  if (!dir || !exe) return null;
+
+  const kitDir = path.join(dir, 'icecast');
+  const template = path.join(kitDir, 'icecast.xml');
+  if (!fs.existsSync(template)) return null;
+
+  const icecastDataDir = path.join(dataDir(), 'icecast');
+  const logDir = path.join(icecastDataDir, 'log');
+  const configPath = path.join(icecastDataDir, 'icecast.xml');
+
+  if (!fs.existsSync(configPath)) {
+    fs.mkdirSync(logDir, { recursive: true });
+    let xml = fs.readFileSync(template, 'utf8');
+    // Two transformations:
+    //  1. Absolute paths — kills cwd dependence, logs go to a writable dir.
+    //  2. RANDOM per-install Icecast passwords. The app parses them back at
+    //     runtime (nobody ever types them), so a public app shipping the
+    //     template's stock kit values can never be "hacked" by someone who
+    //     simply knows LANStreamer's defaults — the same reason the template
+    //     binds 127.0.0.1 (listeners use the :3001 play proxy, never 8200).
+    const rand = () => crypto.randomBytes(16).toString('hex');
+    xml = xml
+      .replace(/<logdir>[\s\S]*?<\/logdir>/g, `<logdir>${logDir}</logdir>`)
+      .replace(/<webroot>[\s\S]*?<\/webroot>/g, `<webroot>${path.join(kitDir, 'web')}</webroot>`)
+      .replace(/<adminroot>[\s\S]*?<\/adminroot>/g, `<adminroot>${path.join(kitDir, 'admin')}</adminroot>`)
+      .replace(/<bind-address>[\s\S]*?<\/bind-address>/g, '<bind-address>127.0.0.1</bind-address>')
+      .replace(/<source-password>[\s\S]*?<\/source-password>/g, `<source-password>ls-${rand()}</source-password>`)
+      .replace(/<relay-password>[\s\S]*?<\/relay-password>/g, `<relay-password>ls-${rand()}</relay-password>`)
+      .replace(/<admin-password>[\s\S]*?<\/admin-password>/g, `<admin-password>ls-${rand()}</admin-password>`)
+      + '\n<!-- lanstreamer-generated: random per-install credentials, loopback bind, port may be auto-reclaimed on conflict -->\n';
+    fs.writeFileSync(configPath, xml);
+    // no logger import here on purpose: config/index.js depends on this module
+    console.log('[vendorPaths] generated bundled Icecast config (random credentials, loopback bind, writable paths)');
+  }
+  // NOTE: no port claim here on purpose — detection-time claiming would dodge
+  // an operator's STOCK instance, which is interchangeable with ours and
+  // therefore fine to use as-is. Claiming happens only in the start path,
+  // reached when the credential probe already proved the listener isn't ours.
+  return configPath;
+}
+
+function isGeneratedByUs(configPath) {
+  try {
+    return /lanstreamer-generated/.test(fs.readFileSync(configPath, 'utf8'));
+  } catch {
+    return false;
+  }
+}
+
+/**
+ * Conflict recovery (runs at detection AND start): if our config's port is
+ * held by a listener that is NOT interchangeable with us (different
+ * credentials — a stock-vs-stock collision needs nothing, we just use the
+ * running instance), move OUR generated file to the next free port. Returns
+ * true when the port changed (caller must re-parse port + passwords).
+ */
+export function claimVendoredIcecastPort(configPath, base = 8200, span = 10) {
+  try {
+    const xml = fs.readFileSync(configPath, 'utf8');
+    const current = Number(xml.match(/<port>(\d+)<\/port>/)?.[1]);
+    if (!current) return false;
+    if (!isLoopbackOccupiedSync(current)) return false; // free or ours
+    const next = findFreeLoopbackPort(Math.max(current + 1, base), span);
+    if (next === current) return false;
+    fs.writeFileSync(configPath, xml.replace(/<port>\d+<\/port>/, `<port>${next}</port>`));
+    console.log(`[vendorPaths] bundled Icecast port ${current} occupied by a non-interchangeable listener — reclaimed ${next}`);
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+function isLoopbackOccupiedSync(port) {
+  return listeningPorts().has(port);
+}
+
+/**
+ * First port in [start, start+attempts) that nothing is listening on.
+ * net.createServer().listen() is ASYNC — an EADDRINUSE lands a tick later, so
+ * a "sync" bind probe always reports free. Parse netstat instead: one spawn,
+ * deterministic, genuinely synchronous.
+ */
+export function findFreeLoopbackPort(start, attempts) {
+  const taken = listeningPorts();
+  for (let port = start; port < start + attempts; port++) {
+    if (!taken.has(port)) return port;
+  }
+  return start; // fall through with the default; bind failures surface in the dashboard
+}
+
+/** Set of local TCP ports with a listener (any address — 0.0.0.0 covers loopback). */
+function listeningPorts() {
+  const ports = new Set();
+  try {
+    const out = execSync('netstat -an -p tcp', { encoding: 'utf8', windowsHide: true, timeout: 5000 });
+    for (const m of out.matchAll(/TCP\s+\S+?:(\d+)\s+\S+\s+LISTENING/gi)) {
+      ports.add(Number(m[1]));
+    }
+  } catch { /* netstat unavailable — treat everything as free */ }
+  return ports;
+}
diff --git a/tailwind.config.js b/tailwind.config.js
new file mode 100644
index 0000000..0e3b919
--- /dev/null
+++ b/tailwind.config.js
@@ -0,0 +1,58 @@
+import forms from '@tailwindcss/forms';
+import containerQueries from '@tailwindcss/container-queries';
+
+/**
+ * LANStreamer design system.
+ * Single source of truth: public/assets/css/tokens.css defines the --tok-*
+ * CSS variables (dark default + [data-theme="light"] overrides). This config
+ * maps them into Tailwind (v3 theme.extend) so semantic utilities like
+ * `bg-surface-1`, `text-muted`, `border-line` work in markup and stay
+ * theme-aware automatically. Do NOT hardcode hex colors in new UI code.
+ */
+/** @type {import('tailwindcss').Config} */
+export default {
+  content: [
+    './public/**/*.html',
+    './public/**/*.js',
+  ],
+  theme: {
+    extend: {
+      fontFamily: {
+        sans: ['Space Grotesk', 'Inter', 'system-ui', 'sans-serif'],
+        mono: ['JetBrains Mono', 'ui-monospace', 'SFMono-Regular', 'Menlo', 'monospace'],
+      },
+      colors: {
+        bg: 'var(--tok-bg)',
+        'surface-1': 'var(--tok-surface-1)',
+        'surface-2': 'var(--tok-surface-2)',
+        inset: 'var(--tok-surface-inset)',
+        ink: 'var(--tok-text-1)',
+        muted: 'var(--tok-text-2)',
+        faint: 'var(--tok-text-3)',
+        line: 'var(--tok-line)',
+        'line-strong': 'var(--tok-line-strong)',
+        accent: 'var(--tok-accent)',
+        'accent-strong': 'var(--tok-accent-strong)',
+        'accent-soft': 'var(--tok-accent-soft)',
+        live: 'var(--tok-live)',
+        warn: 'var(--tok-warning)',
+        danger: 'var(--tok-danger)',
+        onair: 'var(--tok-onair)',
+      },
+      borderRadius: {
+        card: 'var(--tok-radius-card)',
+        input: 'var(--tok-radius-input)',
+        pill: 'var(--tok-radius-btn)',
+      },
+      boxShadow: {
+        card: 'var(--tok-shadow-card)',
+        pop: 'var(--tok-shadow-pop)',
+        glow: 'var(--tok-accent-glow)',
+      },
+    },
+  },
+  plugins: [
+    forms,
+    containerQueries,
+  ],
+};
diff --git a/test-out.txt b/test-out.txt
deleted file mode 100644
index 62a6c6b..0000000
--- a/test-out.txt
+++ /dev/null
@@ -1,1005 +0,0 @@
-node.exe : npm warn invalid config cache=false set in command line options
-At C:\Program Files\nodejs\npm.ps1:29 char:3
-+   & $NODE_EXE $NPM_CLI_JS $args
-+   ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-    + CategoryInfo          : NotSpecified: (npm warn invali...nd line options:String) [], RemoteException
-    + FullyQualifiedErrorId : NativeCommandError
- 
-npm warn invalid config Must be valid filesystem path
-
-> lanstreamer-server@1.2.3 test
-> node --experimental-vm-modules node_modules/jest/bin/jest.js
-
-(node:17328) ExperimentalWarning: VM Modules is an experimental feature and might change at any time
-(Use `node --trace-warnings ...` to show where the warning was created)
-  console.log
-    [dotenv@17.2.1] injecting env (0) from .env -- tip: ­ƒöÉ encrypt with Dotenvx: https://dotenvx.com
-
-      at _log (node_modules/dotenv/lib/main.js:139:11)
-
-  console.log
-    [dotenv@17.2.1] injecting env (0) from .env -- tip: ­ƒôí auto-backup env with Radar: https://dotenvx.com/radar
-
-      at _log (node_modules/dotenv/lib/main.js:139:11)
-
-  console.log
-    [dotenv@17.2.1] injecting env (0) from .env -- tip: ­ƒøá´©Å  run anywhere with `dotenvx run -- yourcommand`
-
-      at _log (node_modules/dotenv/lib/main.js:139:11)
-
-2026-02-02 12:19:26 [INFO]: Error diagnostics starting
-{
-  "exitCode": 4294967291,
-  "stderrLength": 284,
-  "context": {
-    "icecastPort": 8000
-  }
-}
-2026-02-02 12:19:26 [INFO]: Error diagnostics starting
-{
-  "exitCode": 4294967291,
-  "stderrLength": 284,
-  "context": {
-    "icecastPort": 8000
-  }
-}
-2026-02-02 12:19:26 [INFO]: Error diagnostics starting
-{
-  "exitCode": 1,
-  "stderrLength": 143,
-  "context": {
-    "port": 8000
-  }
-}
-2026-02-02 12:19:26 [INFO]: Error diagnostics starting
-{
-  "exitCode": 4294967291,
-  "stderrLength": 0,
-  "context": {
-    "icecastPort": 8200
-  }
-}
-2026-02-02 12:19:26 [INFO]: Error matched category: port_conflict
-2026-02-02 12:19:26 [INFO]: Error diagnostics starting
-{
-  "exitCode": 1,
-  "stderrLength": 143,
-  "context": {
-    "port": 8000
-  }
-}
-  console.log
-    [dotenv@17.2.1] injecting env (0) from .env -- tip: ­ƒöÉ encrypt with Dotenvx: https://dotenvx.com
-
-      at _log (node_modules/dotenv/lib/main.js:139:11)
-
-2026-02-02 12:19:26 [INFO]: Error matched category: port_conflict
-2026-02-02 12:19:26 [INFO]: Error diagnostics starting
-{
-  "exitCode": 4294967291,
-  "stderrLength": 0,
-  "context": {
-    "icecastPort": 8000
-  }
-}
-2026-02-02 12:19:26 [INFO]: Error diagnostics starting
-{
-  "exitCode": 1,
-  "stderrLength": 183,
-  "context": {}
-}
-2026-02-02 12:19:26 [INFO]: Error matched category: authentication
-2026-02-02 12:19:26 [INFO]: Error diagnostics starting
-{
-  "exitCode": 1,
-  "stderrLength": 18,
-  "context": {
-    "icecastPort": 8200
-  }
-}
-2026-02-02 12:19:26 [INFO]: Error matched category: connection
-2026-02-02 12:19:26 [INFO]: Error diagnostics starting
-{
-  "exitCode": 1,
-  "stderrLength": 183,
-  "context": {}
-}
-2026-02-02 12:19:26 [INFO]: Error matched category: authentication
-2026-02-02 12:19:26 [INFO]: Error diagnostics starting
-{
-  "exitCode": 1,
-  "stderrLength": 12,
-  "context": {}
-}
-2026-02-02 12:19:26 [INFO]: Error matched category: connection
-2026-02-02 12:19:26 [INFO]: Error diagnostics starting
-{
-  "exitCode": 1,
-  "stderrLength": 124,
-  "context": {}
-}
-2026-02-02 12:19:26 [INFO]: Error diagnostics starting
-{
-  "exitCode": 4294967291,
-  "stderrLength": 0,
-  "context": {
-    "port": 9000
-  }
-}
-2026-02-02 12:19:26 [INFO]: Error matched category: mount_point
-2026-02-02 12:19:26 [INFO]: Error diagnostics starting
-{
-  "exitCode": 99,
-  "stderrLength": 0,
-  "context": {}
-}
-2026-02-02 12:19:26 [INFO]: Error diagnostics starting
-{
-  "exitCode": 1,
-  "stderrLength": 124,
-  "context": {}
-}
-2026-02-02 12:19:26 [INFO]: Error matched category: mount_point
-2026-02-02 12:19:26 [INFO]: Error diagnostics starting
-{
-  "exitCode": 4294967291,
-  "stderrLength": 0,
-  "context": {
-    "icecastPort": 8200
-  }
-}
-2026-02-02 12:19:26 [INFO]: Error diagnostics starting
-{
-  "exitCode": 1,
-  "stderrLength": 211,
-  "context": {
-    "deviceId": "microphone-hd-pro-webcam-c910",
-    "deviceName": "Microphone (HD Pro Webcam C910)"
-  }
-}
-2026-02-02 12:19:26 [INFO]: Error matched category: device_not_found
-2026-02-02 12:19:26 [INFO]: Error diagnostics starting
-{
-  "exitCode": 1,
-  "stderrLength": 66,
-  "context": {
-    "deviceId": "OBS Virtual Camera (Audio)",
-    "deviceName": "OBS Virtual Camera (Audio)"
-  }
-}
-2026-02-02 12:19:26 [INFO]: Error diagnostics starting
-{
-  "exitCode": 1,
-  "stderrLength": 211,
-  "context": {
-    "deviceId": "microphone-hd-pro-webcam-c910",
-    "deviceName": "Microphone (HD Pro Webcam C910)"
-  }
-}
-2026-02-02 12:19:26 [INFO]: Error matched category: device_not_found
-2026-02-02 12:19:26 [INFO]: Error matched category: device_not_found
-(node:27612) ExperimentalWarning: VM Modules is an experimental feature and might change at any time
-(Use `node --trace-warnings ...` to show where the warning was created)
-2026-02-02 12:19:26 [INFO]: Error diagnostics starting
-{
-  "exitCode": 1,
-  "stderrLength": 158,
-  "context": {
-    "deviceName": "Microphone (Realtek Audio)"
-  }
-}
-2026-02-02 12:19:26 [INFO]: Error matched category: authentication
-2026-02-02 12:19:26 [INFO]: Error diagnostics starting
-{
-  "exitCode": 1,
-  "stderrLength": 158,
-  "context": {
-    "deviceName": "Microphone (Realtek Audio)"
-  }
-}
-2026-02-02 12:19:26 [INFO]: Error matched category: authentication
-(node:37904) ExperimentalWarning: VM Modules is an experimental feature and might change at any time
-(Use `node --trace-warnings ...` to show where the warning was created)
-2026-02-02 12:19:26 [INFO]: Error diagnostics starting
-{
-  "exitCode": 1,
-  "stderrLength": 153,
-  "context": {
-    "deviceId": "vb-audio-virtual-cable",
-    "deviceName": "CABLE Output (VB-Audio Virtual Cable)"
-  }
-}
-2026-02-02 12:19:26 [INFO]: Error matched category: device_not_found
-2026-02-02 12:19:26 [INFO]: Error diagnostics starting
-{
-  "exitCode": 1,
-  "stderrLength": 133,
-  "context": {}
-}
-2026-02-02 12:19:26 [INFO]: Error matched category: directshow
-2026-02-02 12:19:26 [INFO]: Error diagnostics starting
-{
-  "exitCode": 1,
-  "stderrLength": 107,
-  "context": {}
-}
-2026-02-02 12:19:26 [INFO]: Error matched category: codec
-2026-02-02 12:19:26 [INFO]: Error diagnostics starting
-{
-  "exitCode": 1,
-  "stderrLength": 107,
-  "context": {}
-}
-2026-02-02 12:19:26 [INFO]: Error matched category: codec
-2026-02-02 12:19:26 [INFO]: Error diagnostics starting
-{
-  "exitCode": 1,
-  "stderrLength": 120,
-  "context": {
-    "icecastPort": 8000
-  }
-}
-2026-02-02 12:19:26 [INFO]: Error matched category: timeout
-2026-02-02 12:19:26 [INFO]: Error diagnostics starting
-{
-  "exitCode": 4294967291,
-  "stderrLength": 0,
-  "context": {
-    "icecastPort": 8200
-  }
-}
-2026-02-02 12:19:26 [INFO]: Error diagnostics starting
-{
-  "exitCode": 4294967291,
-  "stderrLength": 0,
-  "context": {
-    "icecastPort": 8200
-  }
-}
-2026-02-02 12:19:26 [INFO]: Error diagnostics starting
-{
-  "exitCode": 999,
-  "stderrLength": 85,
-  "context": {}
-}
-2026-02-02 12:19:26 [INFO]: Error diagnostics starting
-{
-  "exitCode": 999,
-  "stderrLength": 85,
-  "context": {}
-}
-2026-02-02 12:19:26 [INFO]: Error diagnostics starting
-{
-  "exitCode": 1,
-  "stderrLength": 26,
-  "context": {}
-}
-(node:29144) ExperimentalWarning: VM Modules is an experimental feature and might change at any time
-(Use `node --trace-warnings ...` to show where the warning was created)
-2026-02-02 12:19:26 [INFO]: Loaded 7 persistent streams
-2026-02-02 12:19:26 [INFO]: Built FFmpeg args for stream my_stream_id:
-{
-  "streamId": "my_stream_id",
-  "audioFormat": "MP3",
-  "codec": "libmp3lame",
-  "formatDescription": "MP3 - Universal browser support (BEST)",
-  "bitrate": "192k",
-  "icecastUrl": "icecast://source:hackme@localhost:8200/my_stream_id",
-  "inputType": "file",
-  "inputSource": "test.ogg",
-  "actualDeviceName": null,
-  "fullArgs": [
-    "-re",
-    "-i",
-    "test.ogg",
-    "-acodec",
-    "libmp3lame",
-    "-b:a",
-    "192k",
-    "-ar",
-    "44100",
-    "-ac",
-    "2",
-    "-f",
-    "mp3",
-    "icecast://source:hackme@localhost:8200/my_stream_id",
-    "-content_type",
-    "audio/mpeg",
-    "-loglevel",
-    "info"
-  ]
-}
-2026-02-02 12:19:26 [INFO]: Full FFmpeg command for stream my_stream_id (MP3): ffmpeg -re -i test.ogg -acodec libmp3lame -b:a 192k -ar 44100 -ac 2 -f mp3 icecast://source:hackme@localhost:8200/my_stream_id -content_type audio/mpeg -loglevel info
-2026-02-02 12:19:26 [INFO]: Built FFmpeg args for stream stream_1:
-{
-  "streamId": "stream_1",
-  "audioFormat": "MP3",
-  "codec": "libmp3lame",
-  "formatDescription": "MP3 - Universal browser support (BEST)",
-  "bitrate": "192k",
-  "icecastUrl": "icecast://source:hackme@localhost:8200/stream_1",
-  "inputType": "file",
-  "inputSource": "x.ogg",
-  "actualDeviceName": null,
-  "fullArgs": [
-    "-re",
-    "-i",
-    "x.ogg",
-    "-acodec",
-    "libmp3lame",
-    "-b:a",
-    "192k",
-    "-ar",
-    "44100",
-    "-ac",
-    "2",
-    "-f",
-    "mp3",
-    "icecast://source:hackme@localhost:8200/stream_1",
-    "-content_type",
-    "audio/mpeg",
-    "-loglevel",
-    "info"
-  ]
-}
-2026-02-02 12:19:26 [INFO]: Full FFmpeg command for stream stream_1 (MP3): ffmpeg -re -i x.ogg -acodec libmp3lame -b:a 192k -ar 44100 -ac 2 -f mp3 icecast://source:hackme@localhost:8200/stream_1 -content_type audio/mpeg -loglevel info
-2026-02-02 12:19:26 [INFO]: Built FFmpeg args for stream test_2026_v3_1769900463252:
-{
-  "streamId": "test_2026_v3_1769900463252",
-  "audioFormat": "MP3",
-  "codec": "libmp3lame",
-  "formatDescription": "MP3 - Universal browser support (BEST)",
-  "bitrate": "192k",
-  "icecastUrl": "icecast://source:hackme@localhost:8200/test_2026_v3_1769900463252",
-  "inputType": "file",
-  "inputSource": "f.ogg",
-  "actualDeviceName": null,
-  "fullArgs": [
-    "-re",
-    "-i",
-    "f.ogg",
-    "-acodec",
-    "libmp3lame",
-    "-b:a",
-    "192k",
-    "-ar",
-    "44100",
-    "-ac",
-    "2",
-    "-f",
-    "mp3",
-    "icecast://source:hackme@localhost:8200/test_2026_v3_1769900463252",
-    "-content_type",
-    "audio/mpeg",
-    "-loglevel",
-    "info"
-  ]
-}
-2026-02-02 12:19:26 [INFO]: Full FFmpeg command for stream test_2026_v3_1769900463252 (MP3): ffmpeg -re -i f.ogg -acodec libmp3lame -b:a 192k -ar 44100 -ac 2 -f mp3 icecast://source:hackme@localhost:8200/test_2026_v3_1769900463252 -content_type audio/mpeg -loglevel info
-2026-02-02 12:19:26 [INFO]: Built FFmpeg args for stream id:
-{
-  "streamId": "id",
-  "audioFormat": "MP3",
-  "codec": "libmp3lame",
-  "formatDescription": "MP3 - Universal browser support (BEST)",
-  "bitrate": "192k",
-  "icecastUrl": "icecast://source:hackme@localhost:8200/id",
-  "inputType": "file",
-  "inputSource": "f.ogg",
-  "actualDeviceName": null,
-  "fullArgs": [
-    "-re",
-    "-i",
-    "f.ogg",
-    "-acodec",
-    "libmp3lame",
-    "-b:a",
-    "192k",
-    "-ar",
-    "44100",
-    "-ac",
-    "2",
-    "-f",
-    "mp3",
-    "icecast://source:hackme@localhost:8200/id",
-    "-content_type",
-    "audio/mpeg",
-    "-loglevel",
-    "info"
-  ]
-}
-2026-02-02 12:19:26 [INFO]: Full FFmpeg command for stream id (MP3): ffmpeg -re -i f.ogg -acodec libmp3lame -b:a 192k -ar 44100 -ac 2 -f mp3 icecast://source:hackme@localhost:8200/id -content_type audio/mpeg -loglevel info
-2026-02-02 12:19:26 [WARN]: AudioDeviceService cache is empty
-2026-02-02 12:19:26 [INFO]: Generated DirectShow name "Microphone (SomeDevice)" from device ID "SomeDevice"
-2026-02-02 12:19:26 [WARN]: AudioDeviceService cache is empty
-2026-02-02 12:19:26 [INFO]: Generated DirectShow name "Microphone (SomeDevice)" from device ID "SomeDevice"
-2026-02-02 12:19:26 [INFO]: Built FFmpeg args for stream id:
-{
-  "streamId": "id",
-  "audioFormat": "MP3",
-  "codec": "libmp3lame",
-  "formatDescription": "MP3 - Universal browser support (BEST)",
-  "bitrate": "192k",
-  "icecastUrl": "icecast://source:hackme@localhost:8200/id",
-  "inputType": "device",
-  "inputSource": "SomeDevice",
-  "actualDeviceName": "Microphone (SomeDevice)",
-  "fullArgs": [
-    "-f",
-    "dshow",
-    "-i",
-    "audio=\"Microphone (SomeDevice)\"",
-    "-acodec",
-    "libmp3lame",
-    "-b:a",
-    "192k",
-    "-ar",
-    "44100",
-    "-ac",
-    "2",
-    "-f",
-    "mp3",
-    "icecast://source:hackme@localhost:8200/id",
-    "-content_type",
-    "audio/mpeg",
-    "-loglevel",
-    "info"
-  ]
-}
-2026-02-02 12:19:26 [INFO]: Full FFmpeg command for stream id (MP3): ffmpeg -f dshow -i audio="Microphone (SomeDevice)" -acodec libmp3lame -b:a 192k -ar 44100 -ac 2 -f mp3 icecast://source:hackme@localhost:8200/id -content_type audio/mpeg -loglevel info
-(node:35872) ExperimentalWarning: VM Modules is an experimental feature and might change at any time
-(Use `node --trace-warnings ...` to show where the warning was created)
-PASS tests/integration/ffmpeg-spawn.test.js
-  FFmpeg spawn options (Windows)
-     StreamingService spawn call includes shell: true in options (7 ms)
-
-  console.log
-    [dotenv@17.2.1] injecting env (0) from .env -- tip: ÔÜÖ´©Å  load multiple .env files with { path: ['.env.local', '.env'] }
-
-      at _log (node_modules/dotenv/lib/main.js:139:11)
-
-  console.log
-    [dotenv@17.2.1] injecting env (0) from .env -- tip: ­ƒôí auto-backup env with Radar: https://dotenvx.com/radar
-
-      at _log (node_modules/dotenv/lib/main.js:139:11)
-
-  console.log
-    [dotenv@17.2.1] injecting env (0) from .env -- tip: ÔÜÖ´©Å  load multiple .env files with { path: ['.env.local', '.env'] }
-
-      at _log (node_modules/dotenv/lib/main.js:139:11)
-
-  console.log
-    [dotenv@17.2.1] injecting env (0) from .env -- tip: ÔÜÖ´©Å  write to custom object with { processEnv: myObject }
-
-      at _log (node_modules/dotenv/lib/main.js:139:11)
-
-2026-02-02 12:19:26 [INFO]: Initializing Icecast Service
-{
-  "service": "icecast"
-}
-  console.log
-     Settings system initialized
-
-      at log (src/routes/settings.js:85:17)
-
-(node:32632) ExperimentalWarning: VM Modules is an experimental feature and might change at any time
-(Use `node --trace-warnings ...` to show where the warning was created)
-PASS tests/unit/errorDiagnostics.test.js
-  errorDiagnostics
-    diagnose
-       returns connection category for Windows unsigned exit code 4294967291 (-5) (13 ms)
-       returns connection category for Windows unsigned 4294967291 with port 8000 (2 ms)
-       returns connection category when stderr contains "connection refused" (3 ms)
-       returns connection category when stderr contains ECONNREFUSED (2 ms)
-       uses context.port fallback when icecastPort not provided (4294967291) (1 ms)
-       returns generic diagnosis for unknown exit code when no pattern matches (6 ms)
-       handles empty stderr with 4294967291 (connection refused) (4 ms)
-       returns device_not_found when stderr contains "could not find audio device" and context has deviceId (20 ms)
-
-2026-02-02 12:19:26 [INFO]: Received stream start request:
-{
-  "streamConfig": {
-    "deviceId": "d1",
-    "id": "stream1",
-    "name": "Test"
-  }
-}
-2026-02-02 12:19:26 [INFO]: Loaded 7 persistent streams
-2026-02-02 12:19:26 [INFO]: Initializing Icecast Service
-{
-  "service": "icecast"
-}
-2026-02-02 12:19:26 [ERROR]: Error starting stream:
-Error: Stream failed
-    at C:\Users\Username\Documents\github\LANStreamer\tests\integration\stream-start-error.test.js:8:28
-    at SourceTextModule.evaluate (node:internal/vm/module:227:23)
-    at Runtime.linkAndEvaluateModule (C:\Users\Username\Documents\github\LANStreamer\node_modules\jest-runtime\build\index.js:686:20)
-    at jestAdapter (C:\Users\Username\Documents\github\LANStreamer\node_modules\jest-circus\build\runner.js:93:5)
-    at runTestInternal (C:\Users\Username\Documents\github\LANStreamer\node_modules\jest-runner\build\testWorker.js:275:16)
-    at runTest (C:\Users\Username\Documents\github\LANStreamer\node_modules\jest-runner\build\testWorker.js:343:7)
-    at Object.worker (C:\Users\Username\Documents\github\LANStreamer\node_modules\jest-runner\build\testWorker.js:497:12)
-{
-  "error": "Stream failed"
-}
-2026-02-02 12:19:26 [INFO]: Stream start failed
-{
-  "cause": "device_not_found",
-  "streamId": "stream1"
-}
-2026-02-02 12:19:26 [INFO]: Loaded 7 persistent streams
-2026-02-02 12:19:26 [INFO]: Initializing Icecast Service
-{
-  "service": "icecast"
-}
-  console.log
-     Settings system initialized
-
-      at log (src/routes/settings.js:85:17)
-
-2026-02-02 12:19:26 [INFO]: Loaded device config
-{
-  "path": "C:\\Program Files (x86)\\Icecast\\bin\\icecast.exe",
-  "port": 8200,
-  "source": "project-config",
-  "service": "icecast"
-}
-  console.log
-     Settings system initialized
-
-      at log (src/routes/settings.js:85:17)
-
-(node:32836) ExperimentalWarning: VM Modules is an experimental feature and might change at any time
-(Use `node --trace-warnings ...` to show where the warning was created)
-PASS tests/unit/IcecastService.test.js
-  IcecastService
-    getActualPort
-       returns a number (16 ms)
-       returns 8000 or 8200 when not yet initialised (fallback) (1 ms)
-    getHostname
-       returns a string (1 ms)
-       returns localhost when hostname not yet parsed (1 ms)
-
-(node:5312) ExperimentalWarning: VM Modules is an experimental feature and might change at any time
-(Use `node --trace-warnings ...` to show where the warning was created)
-2026-02-02 12:19:26 [INFO]: Loaded device config
-{
-  "path": "C:\\Program Files (x86)\\Icecast\\bin\\icecast.exe",
-  "port": 8200,
-  "source": "project-config",
-  "service": "icecast"
-}
-2026-02-02 12:19:26 [INFO]: Loaded 7 persistent streams
-2026-02-02 12:19:26 [INFO]: Initializing Icecast Service
-{
-  "service": "icecast"
-}
-FAIL tests/scenarios/errorScenarios.test.js
-  console.log
-     Settings system initialized
-
-      at log (src/routes/settings.js:85:17)
-
-  Error Scenarios (real stderr samples)
-    Scenario: Icecast not running (connection refused)
-       diagnoses as connection error with port 8000 (12 ms)
-       provides actionable solutions (1 ms)
-    Scenario: Port conflict (Docker using port 8000)
-       diagnoses as port_conflict (3 ms)
-       mentions Docker as a common cause (2 ms)
-    Scenario: Wrong Icecast source password
-       diagnoses as authentication error (5 ms)
-       mentions icecast.xml password configuration (2 ms)
-    Scenario: Mount point limit reached (2 streams max)
-       diagnoses as mount_point error (5 ms)
-       mentions the default 2-stream limit (3 ms)
-    Scenario: Audio device not found (disconnected)
-       diagnoses as device_not_found when deviceId in context (16 ms)
-       includes the device name in the error message (9 ms)
-    Scenario: Device busy (another app using microphone)
-      × diagnoses as device_busy (16 ms)
-      × mentions common apps that lock the microphone (3 ms)
-    Scenario: VB-Audio Virtual Cable not working
-      × diagnoses as virtual_audio when vb-audio pattern detected (2 ms)
-    Scenario: DirectShow error (Windows audio subsystem)
-       diagnoses as directshow error (2 ms)
-    Scenario: Codec not found (minimal FFmpeg build)
-       diagnoses as codec error (2 ms)
-       mentions MP3/libmp3lame specifically (2 ms)
-    Scenario: Connection timeout (Icecast not responding)
-       diagnoses as timeout error (2 ms)
-    Scenario: Empty stderr with Windows exit code 4294967291
-       diagnoses as connection error (exit code implies connection refused) (1 ms)
-       includes the port in solutions (1 ms)
-    Scenario: Unknown/generic error (no pattern match)
-       returns a diagnosis anyway (no crash) (2 ms)
-       provides generic troubleshooting steps (1 ms)
-    Scenario: [Your error here]
-       diagnoses correctly (1 ms)
-
-  ÔùÅ Error Scenarios (real stderr samples) ÔÇ║ Scenario: Device busy (another app using microphone) ÔÇ║ diagnoses as 
-device_busy
-
-    expect(received).toBe(expected) // Object.is equality
-
-    Expected: "device_busy"
-    Received: "authentication"
-
-      135 |         deviceName: 'Microphone (Realtek Audio)'
-      136 |       });
-    > 137 |       expect(result.category).toBe('device_busy');
-          |                               ^
-      138 |       expect(result.title).toMatch(/busy|in use/i);
-      139 |     });
-      140 |
-
-      at Object.toBe (tests/scenarios/errorScenarios.test.js:137:31)
-
-  ÔùÅ Error Scenarios (real stderr samples) ÔÇ║ Scenario: Device busy (another app using microphone) ÔÇ║ mentions 
-common apps that lock the microphone
-
-    expect(received).toBe(expected) // Object.is equality
-
-    Expected: true
-    Received: false
-
-      147 |         result.solutions.some(s => s.toLowerCase().includes(app))
-      148 |       );
-    > 149 |       expect(hasAppMention).toBe(true);
-          |                             ^
-      150 |     });
-      151 |   });
-      152 |
-
-      at Object.toBe (tests/scenarios/errorScenarios.test.js:149:29)
-
-  ÔùÅ Error Scenarios (real stderr samples) ÔÇ║ Scenario: VB-Audio Virtual Cable not working ÔÇ║ diagnoses as 
-virtual_audio when vb-audio pattern detected
-
-    expect(received).toBe(expected) // Object.is equality
-
-    Expected: "virtual_audio"
-    Received: "device_not_found"
-
-      163 |         deviceName: 'CABLE Output (VB-Audio Virtual Cable)'
-      164 |       });
-    > 165 |       expect(result.category).toBe('virtual_audio');
-          |                               ^
-      166 |       expect(result.title).toMatch(/vb-audio|virtual cable/i);
-      167 |     });
-      168 |   });
-
-      at Object.toBe (tests/scenarios/errorScenarios.test.js:165:31)
-
-2026-02-02 12:19:26 [INFO]: Loaded device config
-{
-  "path": "C:\\Program Files (x86)\\Icecast\\bin\\icecast.exe",
-  "port": 8200,
-  "source": "project-config",
-  "service": "icecast"
-}
-2026-02-02 12:19:26 [INFO]: Saved path validation successful
-{
-  "path": "C:\\Program Files (x86)\\Icecast\\bin\\icecast.exe",
-  "version": "2.4.4",
-  "service": "icecast"
-}
-2026-02-02 12:19:26 [INFO]: Using validated device config
-{
-  "path": "C:\\Program Files (x86)\\Icecast\\bin\\icecast.exe",
-  "source": "project-config",
-  "service": "icecast"
-}
-2026-02-02 12:19:26 [INFO]: Ensuring config directory exists
-{
-  "configDir": "C:\\Program Files (x86)\\Icecast",
-  "service": "icecast"
-}
-2026-02-02 12:19:26 [INFO]: Config directory ready
-{
-  "configDir": "C:\\Program Files (x86)\\Icecast",
-  "service": "icecast"
-}
-2026-02-02 12:19:26 [INFO]: Parsed max listeners from icecast.xml
-{
-  "maxListeners": 200,
-  "configPath": "C:\\Program Files (x86)\\Icecast\\icecast.xml",
-  "service": "icecast"
-}
-2026-02-02 12:19:26 [INFO]: Parsed port from icecast.xml
-{
-  "port": 8200,
-  "configPath": "C:\\Program Files (x86)\\Icecast\\icecast.xml",
-  "service": "icecast"
-}
-2026-02-02 12:19:26 [INFO]: Synced port to device-config.json
-{
-  "port": 8200,
-  "source": "icecast.xml",
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Parsed source-password from icecast.xml
-{
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Parsed admin-password from icecast.xml
-{
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Parsed hostname from icecast.xml
-{
-  "hostname": "192.168.1.244",
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Parsed source limit from icecast.xml
-{
-  "sourceLimit": 10,
-  "configPath": "C:\\Program Files (x86)\\Icecast\\icecast.xml",
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Started watching icecast.xml for changes
-{
-  "path": "C:\\Program Files (x86)\\Icecast\\icecast.xml",
-  "service": "icecast"
-}
-(node:9532) ExperimentalWarning: VM Modules is an experimental feature and might change at any time
-(Use `node --trace-warnings ...` to show where the warning was created)
-2026-02-02 12:19:27 [INFO]: Saved path validation successful
-{
-  "path": "C:\\Program Files (x86)\\Icecast\\bin\\icecast.exe",
-  "version": "2.4.4",
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Using validated device config
-{
-  "path": "C:\\Program Files (x86)\\Icecast\\bin\\icecast.exe",
-  "source": "project-config",
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Ensuring config directory exists
-{
-  "configDir": "C:\\Program Files (x86)\\Icecast",
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Parsed port synchronously (fallback)
-{
-  "port": 8200,
-  "configPath": "C:\\Program Files (x86)\\Icecast\\icecast.xml",
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Loaded device config
-{
-  "path": "C:\\Program Files (x86)\\Icecast\\bin\\icecast.exe",
-  "port": 8200,
-  "source": "project-config",
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Config directory ready
-{
-  "configDir": "C:\\Program Files (x86)\\Icecast",
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Parsed max listeners from icecast.xml
-{
-  "maxListeners": 200,
-  "configPath": "C:\\Program Files (x86)\\Icecast\\icecast.xml",
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Parsed port from icecast.xml
-{
-  "port": 8200,
-  "configPath": "C:\\Program Files (x86)\\Icecast\\icecast.xml",
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Synced port to device-config.json
-{
-  "port": 8200,
-  "source": "icecast.xml",
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Icecast Service initialized successfully
-{
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Parsed source-password from icecast.xml
-{
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Parsed admin-password from icecast.xml
-{
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Parsed hostname from icecast.xml
-{
-  "hostname": "192.168.1.244",
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Parsed source limit from icecast.xml
-{
-  "sourceLimit": 10,
-  "configPath": "C:\\Program Files (x86)\\Icecast\\icecast.xml",
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Started watching icecast.xml for changes
-{
-  "path": "C:\\Program Files (x86)\\Icecast\\icecast.xml",
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Saved path validation successful
-{
-  "path": "C:\\Program Files (x86)\\Icecast\\bin\\icecast.exe",
-  "version": "2.4.4",
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Using validated device config
-{
-  "path": "C:\\Program Files (x86)\\Icecast\\bin\\icecast.exe",
-  "source": "project-config",
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Ensuring config directory exists
-{
-  "configDir": "C:\\Program Files (x86)\\Icecast",
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Config directory ready
-{
-  "configDir": "C:\\Program Files (x86)\\Icecast",
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Icecast Service initialized successfully
-{
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Parsed max listeners from icecast.xml
-{
-  "maxListeners": 200,
-  "configPath": "C:\\Program Files (x86)\\Icecast\\icecast.xml",
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Parsed port from icecast.xml
-{
-  "port": 8200,
-  "configPath": "C:\\Program Files (x86)\\Icecast\\icecast.xml",
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Synced port to device-config.json
-{
-  "port": 8200,
-  "source": "icecast.xml",
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Parsed source-password from icecast.xml
-{
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Parsed admin-password from icecast.xml
-{
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Parsed hostname from icecast.xml
-{
-  "hostname": "192.168.1.244",
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Parsed source limit from icecast.xml
-{
-  "sourceLimit": 10,
-  "configPath": "C:\\Program Files (x86)\\Icecast\\icecast.xml",
-  "service": "icecast"
-}
-PASS tests/unit/StreamingService.test.js
-  StreamingService
-    buildFFmpegArgs
-       builds Icecast URL with localhost (not getHostname()) (9 ms)
-       builds Icecast URL with port from IcecastService (8200) (2 ms)
-       includes streamId in Icecast URL (2 ms)
-       uses format fallback when formatIndex out of range (1 ms)
-       builds device-mode args and Icecast URL still uses localhost (3 ms)
-
-2026-02-02 12:19:27 [INFO]: Started watching icecast.xml for changes
-{
-  "path": "C:\\Program Files (x86)\\Icecast\\icecast.xml",
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Saved path validation successful
-{
-  "path": "C:\\Program Files (x86)\\Icecast\\bin\\icecast.exe",
-  "version": "2.4.4",
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Using validated device config
-{
-  "path": "C:\\Program Files (x86)\\Icecast\\bin\\icecast.exe",
-  "source": "project-config",
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Ensuring config directory exists
-{
-  "configDir": "C:\\Program Files (x86)\\Icecast",
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Config directory ready
-{
-  "configDir": "C:\\Program Files (x86)\\Icecast",
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Parsed max listeners from icecast.xml
-{
-  "maxListeners": 200,
-  "configPath": "C:\\Program Files (x86)\\Icecast\\icecast.xml",
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Parsed port from icecast.xml
-{
-  "port": 8200,
-  "configPath": "C:\\Program Files (x86)\\Icecast\\icecast.xml",
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Synced port to device-config.json
-{
-  "port": 8200,
-  "source": "icecast.xml",
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Parsed source-password from icecast.xml
-{
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Parsed admin-password from icecast.xml
-{
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Parsed hostname from icecast.xml
-{
-  "hostname": "192.168.1.244",
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Parsed source limit from icecast.xml
-{
-  "sourceLimit": 10,
-  "configPath": "C:\\Program Files (x86)\\Icecast\\icecast.xml",
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Started watching icecast.xml for changes
-{
-  "path": "C:\\Program Files (x86)\\Icecast\\icecast.xml",
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Icecast Service initialized successfully
-{
-  "service": "icecast"
-}
-2026-02-02 12:19:27 [INFO]: Icecast Service initialized successfully
-{
-  "service": "icecast"
-}
-PASS tests/integration/stream-start-error.test.js
-  POST /api/streams/start (error response)
-     returns 500 with cause and diagnosis when start fails (37 ms)
-
-PASS tests/integration/server.startup.test.js
-  Server startup
-     app loads without throwing (4 ms)
-     GET /api/health returns 200 (22 ms)
-
-PASS tests/integration/stream-proxy.test.js
-  GET /api/streams/play/:streamId
-     returns 502 or 200 (proxy to Icecast) (38 ms)
-     does not return 500 (route exists and handles errors) (16 ms)
-     when 200 and content-type set, is stream or html (proxy forwards or Icecast page) (25 ms)
-
-PASS tests/integration/config-endpoint.test.js
-  GET /api/system/config
-     returns 200 (111 ms)
-     returns body with icecast.port as number (6 ms)
-     returns body with icecast.host (11 ms)
-     returns source capacity fields (sourceLimit, activeStreams, remaining, configPath) (6 ms)
-
-A worker process has failed to exit gracefully and has been force exited. This is likely caused by tests leaking due 
-to improper teardown. Try running with --detectOpenHandles to find leaks. Active timers can also cause this, ensure 
-that .unref() was called on them.
-Test Suites: 1 failed, 8 passed, 9 total
-Tests:       3 failed, 47 passed, 50 total
-Snapshots:   0 total
-Time:        2.886 s, estimated 3 s
-Ran all test suites.
diff --git a/tests/integration/admin-credentials.test.js b/tests/integration/admin-credentials.test.js
new file mode 100644
index 0000000..f70c318
--- /dev/null
+++ b/tests/integration/admin-credentials.test.js
@@ -0,0 +1,116 @@
+/**
+ * Integration test: in-app admin credential change (dashboard → Admin account)
+ * - GET /api/auth/settings reports the current username + defaults flag
+ * - POST /api/auth/credentials requires the current password
+ * - success stores a scrypt hash (never plaintext), rotates the JWT secret
+ *   (old token dies, fresh token works), and the new login is active
+ * - the persisted file is what a packaged install would keep across restarts
+ */
+import request from 'supertest';
+import { jest } from '@jest/globals';
+import fs from 'fs';
+import os from 'os';
+import path from 'path';
+
+// Re-enable the auth gate that tests/setup.js disables for the older suites.
+delete process.env.AUTH_DISABLED;
+
+// Point the credential store at a throwaway file BEFORE the app (and its
+// config singleton) loads — never the repo's real config/security.json.
+const storePath = path.join(os.tmpdir(), `ls-sec-test-${Date.now()}.json`);
+process.env.LS_SECURITY_FILE = storePath;
+
+jest.unstable_mockModule('../../src/services/StreamingService.js', () => ({
+  default: {
+    stopStream: jest.fn(),
+    startStream: jest.fn(),
+    stopAllStreams: jest.fn().mockResolvedValue({}),
+    restartStream: jest.fn().mockResolvedValue(),
+    getStats: jest.fn().mockReturnValue({ total: 0, running: 0, errors: 0, streams: [] }),
+    cleanupOldStreams: jest.fn().mockReturnValue(0),
+    updateStream: jest.fn().mockResolvedValue({}),
+    deleteStream: jest.fn().mockResolvedValue(),
+    createStoppedStream: jest.fn(),
+    activeStreams: {}
+  }
+}));
+
+const { default: app } = await import('../../src/server.js');
+
+const DEFAULTS = { username: 'admin', password: 'lanstreamer123' };
+
+afterAll(() => {
+  try { fs.rmSync(storePath, { force: true }); } catch { /* ignore */ }
+});
+
+describe('In-app admin credential change', () => {
+  let token;
+
+  it('reports defaults via /api/auth/settings', async () => {
+    const login = await request(app).post('/api/auth/login').send(DEFAULTS);
+    expect(login.status).toBe(200);
+    token = login.body.token;
+    expect(token).toBeTruthy();
+
+    const res = await request(app)
+      .get('/api/auth/settings')
+      .set('Authorization', `Bearer ${token}`);
+    expect(res.status).toBe(200);
+    expect(res.body).toMatchObject({ username: 'admin', usingDefaultCredentials: true });
+  });
+
+  it('rejects the change with a wrong current password (400 — not a session-killing 401)', async () => {
+    const res = await request(app)
+      .post('/api/auth/credentials')
+      .set('Authorization', `Bearer ${token}`)
+      .send({ currentPassword: 'wrong', newUsername: 'op', newPassword: 'long-enough-9' });
+    expect(res.status).toBe(400);
+    expect(res.body.message).toMatch(/incorrect/i);
+  });
+
+  it('rejects a too-short new password', async () => {
+    const res = await request(app)
+      .post('/api/auth/credentials')
+      .set('Authorization', `Bearer ${token}`)
+      .send({ currentPassword: DEFAULTS.password, newUsername: 'op', newPassword: 'short' });
+    expect(res.status).toBe(400);
+  });
+
+  it('changes the login: fresh token works, old token dies, file stores a hash', async () => {
+    const res = await request(app)
+      .post('/api/auth/credentials')
+      .set('Authorization', `Bearer ${token}`)
+      .send({ currentPassword: DEFAULTS.password, newUsername: 'op', newPassword: 'new-secret-9' });
+    expect(res.status).toBe(200);
+    expect(res.body.token).toBeTruthy();
+    expect(res.body.user.username).toBe('op');
+
+    // Old session is dead (JWT secret rotated)
+    const old = await request(app)
+      .get('/api/auth/settings')
+      .set('Authorization', `Bearer ${token}`);
+    expect([401, 403]).toContain(old.status);
+
+    // Fresh session works and the defaults flag retired
+    const fresh = await request(app)
+      .get('/api/auth/settings')
+      .set('Authorization', `Bearer ${res.body.token}`);
+    expect(fresh.status).toBe(200);
+    expect(fresh.body).toMatchObject({ username: 'op', usingDefaultCredentials: false });
+
+    // Old credentials no longer log in; new ones do
+    const badLogin = await request(app).post('/api/auth/login').send(DEFAULTS);
+    expect(badLogin.status).toBe(401);
+    const goodLogin = await request(app)
+      .post('/api/auth/login')
+      .send({ username: 'op', password: 'new-secret-9' });
+    expect(goodLogin.status).toBe(200);
+
+    // Persisted file: scrypt hash present, plaintext never stored
+    const stored = JSON.parse(fs.readFileSync(storePath, 'utf8'));
+    expect(stored.adminUsername).toBe('op');
+    expect(stored.adminPasswordHash).toMatch(/^scrypt:/);
+    expect(JSON.stringify(stored)).not.toContain('new-secret-9');
+    expect(stored.jwtSecret.length).toBeGreaterThanOrEqual(64);
+  });
+});
diff --git a/tests/integration/auth.test.js b/tests/integration/auth.test.js
new file mode 100644
index 0000000..c2a3608
--- /dev/null
+++ b/tests/integration/auth.test.js
@@ -0,0 +1,87 @@
+/**
+ * Integration test: admin auth gate
+ * - POST /api/auth/login issues a token for the default credentials
+ * - wrong credentials -> 401
+ * - protected routes answer 401 without a token, pass with one
+ * - listener-facing reads stay public
+ */
+import request from 'supertest';
+import { jest } from '@jest/globals';
+
+// Re-enable the auth gate that tests/setup.js disables for the older suites.
+delete process.env.AUTH_DISABLED;
+
+const stopStreamMock = jest.fn().mockRejectedValue(new Error('Stream x not found'));
+
+jest.unstable_mockModule('../../src/services/StreamingService.js', () => ({
+  default: {
+    stopStream: stopStreamMock,
+    startStream: jest.fn(),
+    stopAllStreams: jest.fn().mockResolvedValue({}),
+    restartStream: jest.fn().mockResolvedValue(),
+    getStats: jest.fn().mockReturnValue({ total: 0, running: 0, errors: 0, streams: [] }),
+    cleanupOldStreams: jest.fn().mockReturnValue(0),
+    updateStream: jest.fn().mockResolvedValue({}),
+    deleteStream: jest.fn().mockResolvedValue(),
+    createStoppedStream: jest.fn(),
+    activeStreams: {}
+  }
+}));
+
+const { default: app } = await import('../../src/server.js');
+
+describe('Admin auth gate', () => {
+  let token;
+
+  it('rejects wrong credentials', async () => {
+    const res = await request(app)
+      .post('/api/auth/login')
+      .send({ username: 'admin', password: 'nope' });
+    expect(res.status).toBe(401);
+  });
+
+  it('issues a token for the default credentials (README-documented)', async () => {
+    const res = await request(app)
+      .post('/api/auth/login')
+      .send({ username: 'admin', password: 'lanstreamer123' });
+    expect(res.status).toBe(200);
+    expect(res.body.token).toBeTruthy();
+    token = res.body.token;
+  });
+
+  it('blocks protected routes without a token', async () => {
+    const res = await request(app).post('/api/streams/stop').send({ id: 'x' });
+    expect(res.status).toBe(401);
+  });
+
+  it('lets protected routes through with a valid token', async () => {
+    const res = await request(app)
+      .post('/api/streams/stop')
+      .set('Authorization', `Bearer ${token}`)
+      .send({ id: 'x' });
+    // 401 would mean the gate rejected it; 500 "not found" means it got through
+    // to the (mocked) service, which is exactly what we assert here.
+    expect(res.status).toBe(500);
+    expect(stopStreamMock).toHaveBeenCalled();
+  });
+
+  it('verify reports when default admin credentials are active (first-run banner)', async () => {
+    const res = await request(app)
+      .get('/api/auth/verify')
+      .set('Authorization', `Bearer ${token}`);
+    expect(res.status).toBe(200);
+    expect(res.body.usingDefaultCredentials).toBe(true);
+  });
+
+  it('keeps listener-facing reads public', async () => {
+    const res = await request(app).get('/api/streams/status');
+    expect(res.status).toBe(200);
+    expect(res.body.total).toBe(0);
+  });
+
+  it('keeps the login page reachable', async () => {
+    const res = await request(app).get('/login');
+    expect(res.status).toBe(200);
+    expect(res.text).toContain('Admin sign in');
+  });
+});
diff --git a/tests/integration/ffmpeg-spawn.test.js b/tests/integration/ffmpeg-spawn.test.js
index 1f2566c..c5a46a7 100644
--- a/tests/integration/ffmpeg-spawn.test.js
+++ b/tests/integration/ffmpeg-spawn.test.js
@@ -13,9 +13,32 @@ describe('FFmpeg spawn options (Windows)', () => {
     const streamingPath = path.join(__dirname, '../../src/services/StreamingService.js');
     const content = fs.readFileSync(streamingPath, 'utf8');
     expect(content).toMatch(/shell:\s*true/);
-    expect(content).toMatch(/spawn\s*\(\s*ffmpegPath\s*,\s*args\s*,/);
-    const spawnBlock = content.match(/spawn\s*\([^)]+\)/s);
+    // ffmpegPath (PATH) or spawnCommand (quoted absolute vendored path) — both valid
+    expect(content).toMatch(/spawn\s*\(\s*(ffmpegPath|spawnCommand)\s*,\s*args\s*,/);
+    const spawnBlock = content.match(/spawn\s*\(\s*(ffmpegPath|spawnCommand)\s*,\s*args\s*,\s*\{[^}]*shell:\s*true/s);
     expect(spawnBlock).toBeDefined();
-    expect(spawnBlock[0]).toMatch(/shell:\s*true/);
+  });
+
+  it('Low-latency flags present on BOTH input paths (capture-side before -i, flush_packets output-side)', () => {
+    const streamingPath = path.join(__dirname, '../../src/services/StreamingService.js');
+    const content = fs.readFileSync(streamingPath, 'utf8');
+    // Device capture: input flags precede dshow -i (probing/buffering costs ~0.5-1s+ startup
+    // and steady-state muxer batching up to ~1.3s at 192k without flush_packets)
+    expect(content).toMatch(/'-fflags',\s*'nobuffer'/);
+    expect(content).toMatch(/'-flags',\s*'low_delay'/);
+    expect(content).toMatch(/'-probesize',\s*'32k'/);
+    expect(content).toMatch(/'-analyzeduration',\s*'0'/);
+    expect(content).toMatch(/'-flush_packets',\s*'1'/);
+    // File-input path also flushes per packet
+    const fileBlock = content.match(/inputFile\)[\s\S]{0,900}?icecastUrl/);
+    expect(fileBlock).toBeDefined();
+    expect(fileBlock[0]).toContain("'-flush_packets', '1'");
+    // Device-input path carries the capture flags BEFORE the dshow input
+    // (input flags configure the demuxer; output-side placement is a no-op)
+    const dshowIdx = content.indexOf("'-f', 'dshow'");
+    const nobufIdx = content.indexOf("'-fflags', 'nobuffer'");
+    expect(dshowIdx).toBeGreaterThan(0);
+    expect(nobufIdx).toBeGreaterThan(-1);
+    expect(nobufIdx).toBeLessThan(dshowIdx);
   });
 });
diff --git a/tests/integration/shutdown.test.js b/tests/integration/shutdown.test.js
new file mode 100644
index 0000000..76c9cd1
--- /dev/null
+++ b/tests/integration/shutdown.test.js
@@ -0,0 +1,41 @@
+/**
+ * Integration test: startServer shutdown contract.
+ * stopStreams:false (the Electron shell already stopped streams/icecast in its
+ * own ordered teardown) must skip the duplicate stop pass and still close the
+ * HTTP server.
+ */
+import { jest } from '@jest/globals';
+
+const stopAllStreams = jest.fn().mockResolvedValue({});
+jest.unstable_mockModule('../../src/services/StreamingService.js', () => ({
+  default: {
+    stopAllStreams,
+    getStats: jest.fn().mockReturnValue({ total: 1, running: 1, errors: 0, streams: [{ id: 's1', status: 'running' }] }),
+    loadPersistentStreams: jest.fn(),
+    cleanupOldStreams: jest.fn().mockReturnValue(0)
+  }
+}));
+jest.unstable_mockModule('../../src/services/IcecastService.js', () => ({
+  default: { process: null, stop: jest.fn().mockResolvedValue({}), initialize: jest.fn().mockResolvedValue() }
+}));
+
+const { startServer } = await import('../../src/app.js');
+
+describe('startServer shutdown', () => {
+  it('default: stops running streams, then closes', async () => {
+    const handle = startServer({ port: 0 });
+    await new Promise(r => handle.server.once('listening', r));
+    await handle.shutdown({ timeoutMs: 1000 });
+    expect(stopAllStreams).toHaveBeenCalledTimes(1);
+    expect(handle.server.listening).toBe(false);
+  });
+
+  it('stopStreams:false skips the duplicate stop pass (Electron ordered teardown)', async () => {
+    stopAllStreams.mockClear();
+    const handle = startServer({ port: 0 });
+    await new Promise(r => handle.server.once('listening', r));
+    await handle.shutdown({ timeoutMs: 1000, stopStreams: false });
+    expect(stopAllStreams).not.toHaveBeenCalled();
+    expect(handle.server.listening).toBe(false);
+  });
+});
diff --git a/tests/integration/stream-create.test.js b/tests/integration/stream-create.test.js
new file mode 100644
index 0000000..1b732fd
--- /dev/null
+++ b/tests/integration/stream-create.test.js
@@ -0,0 +1,62 @@
+/**
+ * Integration test: POST /api/streams/create (drawer "Save")
+ * Guards: creates a STOPPED stream without starting it; rejects bad payloads.
+ */
+import request from 'supertest';
+import { jest } from '@jest/globals';
+
+// Mock instance captured OUTSIDE the factory: unstable_mockModule may re-run
+// the factory per import, and the route + test must share ONE jest.fn.
+const createStoppedStreamMock = jest.fn();
+
+jest.unstable_mockModule('../../src/services/StreamingService.js', () => ({
+  default: {
+    createStoppedStream: createStoppedStreamMock,
+    startStream: jest.fn(),
+    stopStream: jest.fn().mockResolvedValue(),
+    stopAllStreams: jest.fn().mockResolvedValue({}),
+    restartStream: jest.fn().mockResolvedValue(),
+    getStats: jest.fn().mockReturnValue({ total: 0, running: 0, errors: 0, streams: [] }),
+    cleanupOldStreams: jest.fn().mockReturnValue(0),
+    updateStream: jest.fn().mockResolvedValue({}),
+    deleteStream: jest.fn().mockResolvedValue(),
+    activeStreams: {}
+  }
+}));
+
+const { default: app } = await import('../../src/server.js');
+
+describe('POST /api/streams/create (save as stopped)', () => {
+  it('creates a stopped stream and returns it', async () => {
+    const created = {
+      id: 'created_1', name: 'Main Room English', deviceId: 'cable-output', status: 'stopped',
+      config: { name: 'Main Room English', deviceId: 'cable-output', bitrate: 192, autoStart: true }
+    };
+    createStoppedStreamMock.mockResolvedValueOnce(created);
+
+    const res = await request(app)
+      .post('/api/streams/create')
+      .send({ name: 'Main Room English', deviceId: 'cable-output', bitrate: 192, autoStart: true });
+
+    expect(res.status).toBe(200);
+    expect(res.body.message).toBe('Stream created (stopped)');
+    expect(res.body.streamId).toBe('created_1');
+    expect(res.body.stream.status).toBe('stopped');
+    expect(createStoppedStreamMock).toHaveBeenCalledWith(
+      expect.objectContaining({ name: 'Main Room English', autoStart: true })
+    );
+  });
+
+  it('returns 400 when the service rejects (duplicate name / missing fields)', async () => {
+    createStoppedStreamMock.mockRejectedValueOnce(
+      new Error('A stream named "X" already exists. Use a unique name.')
+    );
+
+    const res = await request(app)
+      .post('/api/streams/create')
+      .send({ name: 'X', deviceId: 'd' });
+
+    expect(res.status).toBe(400);
+    expect(res.body.error).toMatch(/already exists/);
+  });
+});
diff --git a/tests/integration/stream-start-error.test.js b/tests/integration/stream-start-error.test.js
new file mode 100644
index 0000000..2702490
--- /dev/null
+++ b/tests/integration/stream-start-error.test.js
@@ -0,0 +1,50 @@
+/**
+ * Integration test: POST /api/streams/start returns structured error (cause, diagnosis) on failure
+ * Guards: Stream error payload includes cause and diagnosis for UI and logging
+ */
+import request from 'supertest';
+import { jest } from '@jest/globals';
+
+const streamFailureError = new Error('Stream failed');
+streamFailureError.shortMessage = 'Audio Device Not Found';
+streamFailureError.cause = 'device_not_found';
+streamFailureError.diagnosis = {
+  category: 'device_not_found',
+  title: 'Audio Device Not Found',
+  description: 'The audio device cannot be found by FFmpeg.',
+  solutions: ['Click "Refresh Devices"', 'Check Windows Sound settings']
+};
+
+jest.unstable_mockModule('../../src/services/StreamingService.js', () => ({
+  default: {
+    startStream: jest.fn().mockRejectedValue(streamFailureError),
+    stopStream: jest.fn().mockResolvedValue(),
+    stopAllStreams: jest.fn().mockResolvedValue({}),
+    restartStream: jest.fn().mockResolvedValue(),
+    getStats: jest.fn().mockReturnValue({ total: 0, running: 0, errors: 0, streams: [] }),
+    cleanupOldStreams: jest.fn().mockReturnValue(0),
+    updateStream: jest.fn().mockResolvedValue({}),
+    deleteStream: jest.fn().mockResolvedValue(),
+    activeStreams: {}
+  }
+}));
+
+const { default: app } = await import('../../src/server.js');
+
+describe('POST /api/streams/start (error response)', () => {
+  it('returns 500 with cause and diagnosis when start fails', async () => {
+    const res = await request(app)
+      .post('/api/streams/start')
+      .send({ deviceId: 'd1', id: 'stream1', name: 'Test' });
+    expect(res.status).toBe(500);
+    expect(res.body).toHaveProperty('message', 'Error starting stream');
+    expect(res.body).toHaveProperty('error', 'Audio Device Not Found');
+    expect(res.body).toHaveProperty('code');
+    expect(res.body).toHaveProperty('cause', 'device_not_found');
+    expect(res.body).toHaveProperty('diagnosis');
+    expect(res.body.diagnosis).toHaveProperty('category', 'device_not_found');
+    expect(res.body.diagnosis).toHaveProperty('title', 'Audio Device Not Found');
+    expect(res.body.diagnosis).toHaveProperty('solutions');
+    expect(Array.isArray(res.body.diagnosis.solutions)).toBe(true);
+  });
+});
diff --git a/tests/integration/telemetry-client.test.js b/tests/integration/telemetry-client.test.js
new file mode 100644
index 0000000..2308c6b
--- /dev/null
+++ b/tests/integration/telemetry-client.test.js
@@ -0,0 +1,96 @@
+/**
+ * Integration test: listener client-event telemetry relay
+ * - POST /api/telemetry/client-event stays PUBLIC (listeners never log in)
+ *   while the auth gate still protects other POSTs
+ * - event whitelist (unknown -> 400)
+ * - property caps: strings truncated, non-primitives dropped
+ * - forwards to TelemetryService.capture as client_<event> with surface tag
+ * - per-IP rate limit trips after 30 events/minute
+ */
+import request from 'supertest';
+import { jest } from '@jest/globals';
+
+// Re-enable the auth gate that tests/setup.js disables for the older suites.
+delete process.env.AUTH_DISABLED;
+
+const captureMock = jest.fn();
+jest.unstable_mockModule('../../src/services/TelemetryService.js', () => ({
+  default: {
+    capture: captureMock,
+    getConsentState: () => ({ installId: 'test-install', consented: true, enabled: true })
+  }
+}));
+
+// Mock StreamingService like auth.test.js — the real constructor enumerates
+// audio devices (spawns ffmpeg) at import time and hangs the worker.
+jest.unstable_mockModule('../../src/services/StreamingService.js', () => ({
+  default: {
+    stopStream: jest.fn(),
+    startStream: jest.fn(),
+    stopAllStreams: jest.fn().mockResolvedValue({}),
+    restartStream: jest.fn().mockResolvedValue(),
+    getStats: jest.fn().mockReturnValue({ total: 0, running: 0, errors: 0, streams: [] }),
+    cleanupOldStreams: jest.fn().mockReturnValue(0),
+    updateStream: jest.fn().mockResolvedValue({}),
+    deleteStream: jest.fn().mockResolvedValue(),
+    createStoppedStream: jest.fn(),
+    activeStreams: {}
+  }
+}));
+
+const { default: app } = await import('../../src/server.js');
+
+describe('Listener client-event relay', () => {
+  it('accepts a playback failure WITHOUT a token (public surface)', async () => {
+    const res = await request(app)
+      .post('/api/telemetry/client-event')
+      .send({
+        event: 'playback_error',
+        properties: { streamId: 's1', label: 'S1', code: 4, msg: 'MEDIA_ERR_SRC_NOT_SUPPORTED', platform: 'Win32', ua: 'Mozilla/5.0' }
+      });
+    expect(res.status).toBe(200);
+    expect(res.body).toEqual({ ok: true, captured: true });
+    expect(captureMock).toHaveBeenCalledWith('client_playback_error', expect.objectContaining({
+      surface: 'listener',
+      streamId: 's1',
+      code: 4
+    }));
+  });
+
+  it('still guards other POST routes (401 without token)', async () => {
+    const res = await request(app).post('/api/streams/start').send({});
+    expect(res.status).toBe(401);
+  });
+
+  it('rejects unknown event names', async () => {
+    const res = await request(app)
+      .post('/api/telemetry/client-event')
+      .send({ event: 'arbitrary_thing', properties: {} });
+    expect(res.status).toBe(400);
+  });
+
+  it('truncates long strings and drops non-primitive property values', async () => {
+    const long = 'x'.repeat(500);
+    const res = await request(app)
+      .post('/api/telemetry/client-event')
+      .send({ event: 'load_failed', properties: { msg: long, evil: { nested: true }, ok: true } });
+    expect(res.status).toBe(200);
+    const props = captureMock.mock.calls.at(-1)[1];
+    expect(props.msg.length).toBe(160);
+    expect(props).not.toHaveProperty('evil');
+    expect(props.ok).toBe(true);
+  });
+
+  it('rate-limits to 30 events per minute per IP', async () => {
+    const statuses = [];
+    for (let i = 0; i < 35; i++) {
+      const res = await request(app)
+        .post('/api/telemetry/client-event')
+        .send({ event: 'playback_stalled', properties: { streamId: 's1' } });
+      statuses.push(res.status);
+    }
+    const allowed = statuses.filter(s => s === 200).length;
+    expect(allowed).toBeLessThanOrEqual(30);
+    expect(statuses.at(-1)).toBe(429);
+  });
+});
diff --git a/tests/scenarios/errorScenarios.test.js b/tests/scenarios/errorScenarios.test.js
new file mode 100644
index 0000000..9e3e83c
--- /dev/null
+++ b/tests/scenarios/errorScenarios.test.js
@@ -0,0 +1,273 @@
+/**
+ * Scenario-based error diagnostics tests
+ *
+ * These tests use REAL stderr samples from actual FFmpeg/Icecast failures
+ * to ensure the error diagnostics system correctly identifies and reports issues.
+ *
+ * Run with: npm test errorScenarios
+ */
+import errorDiagnostics from '../../src/utils/errorDiagnostics.js';
+
+describe('Error Scenarios (real stderr samples)', () => {
+  describe('Scenario: Icecast not running (connection refused)', () => {
+    const realStderr = `
+[info] Starting audio stream...
+[info] Using input device: Microphone (Realtek Audio)
+[info] FFmpeg version 5.1.2
+[info] Configuration: --enable-gpl --enable-version3
+[info]  Output: icecast://source:****@localhost:8000/stream1
+[error] Connection refused
+[error] socket error: 10061
+`;
+
+    it('diagnoses as connection error with port 8000', () => {
+      const result = errorDiagnostics.diagnose(realStderr, 4294967291, { icecastPort: 8000 });
+      expect(result.category).toBe('connection');
+      expect(result.title).toMatch(/icecast|connect/i);
+      expect(result.solutions.some(s => s.includes('8000'))).toBe(true);
+    });
+
+    it('provides actionable solutions', () => {
+      const result = errorDiagnostics.diagnose(realStderr, 4294967291, { icecastPort: 8000 });
+      expect(result.solutions.length).toBeGreaterThan(0);
+      // Should mention checking if Icecast is running
+      expect(result.solutions.some(s => /running/i.test(s) && /icecast/i.test(s))).toBe(true);
+    });
+  });
+
+  describe('Scenario: Port conflict (Docker using port 8000)', () => {
+    const realStderr = `
+[info] Starting Icecast...
+[error] bind failed: Address already in use
+[error] EADDRINUSE: :::8000
+[error] Another process is using port 8000
+`;
+
+    it('diagnoses as port_conflict', () => {
+      const result = errorDiagnostics.diagnose(realStderr, 1, { port: 8000 });
+      expect(result.category).toBe('port_conflict');
+      expect(result.title).toMatch(/port|in use/i);
+    });
+
+    it('mentions Docker as a common cause', () => {
+      const result = errorDiagnostics.diagnose(realStderr, 1, { port: 8000 });
+      expect(result.causes.some(c => /docker/i.test(c))).toBe(true);
+    });
+  });
+
+  describe('Scenario: Wrong Icecast source password', () => {
+    const realStderr = `
+[info] Connecting to Icecast...
+[info] URL: icecast://source:password@localhost:8000/stream
+[error] 401 Unauthorized
+[error] Authentication failed
+[error] Source client not accepted
+`;
+
+    it('diagnoses as authentication error', () => {
+      const result = errorDiagnostics.diagnose(realStderr, 1, {});
+      expect(result.category).toBe('authentication');
+      expect(result.title).toMatch(/auth|password/i);
+    });
+
+    it('mentions icecast.xml password configuration', () => {
+      const result = errorDiagnostics.diagnose(realStderr, 1, {});
+      expect(result.solutions.some(s => /icecast\.xml/i.test(s) && /password/i.test(s))).toBe(true);
+    });
+  });
+
+  describe('Scenario: Mount point limit reached (2 streams max)', () => {
+    const realStderr = `
+[info] Starting stream 3...
+[error] 403 Forbidden
+[error] Mount point /stream3 already in use
+[error] Source limit reached
+`;
+
+    it('diagnoses as mount_point error', () => {
+      const result = errorDiagnostics.diagnose(realStderr, 1, {});
+      expect(result.category).toBe('mount_point');
+      expect(result.title).toMatch(/limit|mount/i);
+    });
+
+    it('mentions the default 2-stream limit', () => {
+      const result = errorDiagnostics.diagnose(realStderr, 1, {});
+      expect(result.causes.some(c => /2.*concurrent|default.*2/i.test(c))).toBe(true);
+    });
+  });
+
+  describe('Scenario: Audio device not found (disconnected)', () => {
+    const realStderr = `
+[info] Input: audio=Microphone (HD Pro Webcam C910)
+[error] Error opening input: could not find audio device
+[error] Device with name [Microphone (HD Pro Webcam C910)] not found
+[info] Immediate exit requested
+`;
+
+    it('diagnoses as device_not_found when deviceId in context', () => {
+      const result = errorDiagnostics.diagnose(realStderr, 1, {
+        deviceId: 'microphone-hd-pro-webcam-c910',
+        deviceName: 'Microphone (HD Pro Webcam C910)'
+      });
+      expect(result.category).toBe('device_not_found');
+      expect(result.title).toMatch(/device|not found/i);
+    });
+
+    it('includes the device name in the error message', () => {
+      const result = errorDiagnostics.diagnose(realStderr, 1, {
+        deviceId: 'microphone-hd-pro-webcam-c910',
+        deviceName: 'Microphone (HD Pro Webcam C910)'
+      });
+      expect(result.description).toContain('Microphone (HD Pro Webcam C910)');
+    });
+  });
+
+  describe('Scenario: Device busy (another app using microphone)', () => {
+    const realStderr = `
+[info] Attempting to open: audio=Microphone (Realtek Audio)
+[error] Cannot open audio device
+[error] Device or resource busy
+[error] Exclusive access denied
+`;
+
+    it('diagnoses as device_busy', () => {
+      const result = errorDiagnostics.diagnose(realStderr, 1, {
+        deviceName: 'Microphone (Realtek Audio)'
+      });
+      expect(result.category).toBe('device_busy');
+      expect(result.title).toMatch(/busy|in use/i);
+    });
+
+    it('mentions common apps that lock the microphone', () => {
+      const result = errorDiagnostics.diagnose(realStderr, 1, {
+        deviceName: 'Microphone (Realtek Audio)'
+      });
+      const commonApps = ['zoom', 'teams', 'discord', 'skype'];
+      const hasAppMention = commonApps.some(app =>
+        result.solutions.some(s => s.toLowerCase().includes(app))
+      );
+      expect(hasAppMention).toBe(true);
+    });
+  });
+
+  describe('Scenario: VB-Audio Virtual Cable not working', () => {
+    const realStderr = `
+[info] Input: audio=CABLE Output (VB-Audio Virtual Cable)
+[error] Error opening input: could not find audio device
+[error] VB-Audio Virtual Cable error
+`;
+
+    it('diagnoses as virtual_audio when vb-audio pattern detected', () => {
+      const result = errorDiagnostics.diagnose(realStderr, 1, {
+        deviceId: 'vb-audio-virtual-cable',
+        deviceName: 'CABLE Output (VB-Audio Virtual Cable)'
+      });
+      expect(result.category).toBe('virtual_audio');
+      expect(result.title).toMatch(/vb-audio|virtual cable/i);
+    });
+  });
+
+  describe('Scenario: DirectShow error (Windows audio subsystem)', () => {
+    const realStderr = `
+[info] Using dshow input format
+[error] Error opening dshow: Could not enumerate audio devices
+[error] DirectShow error: 0x80070000
+`;
+
+    it('diagnoses as directshow error', () => {
+      const result = errorDiagnostics.diagnose(realStderr, 1, {});
+      expect(result.category).toBe('directshow');
+      expect(result.title).toMatch(/windows|directshow/i);
+    });
+  });
+
+  describe('Scenario: Codec not found (minimal FFmpeg build)', () => {
+    const realStderr = `
+[info] Output codec: libmp3lame
+[error] Encoder libmp3lame not found
+[error] Unknown encoder 'libmp3lame'
+`;
+
+    it('diagnoses as codec error', () => {
+      const result = errorDiagnostics.diagnose(realStderr, 1, {});
+      expect(result.category).toBe('codec');
+      expect(result.title).toMatch(/codec|not available/i);
+    });
+
+    it('mentions MP3/libmp3lame specifically', () => {
+      const result = errorDiagnostics.diagnose(realStderr, 1, {});
+      expect(result.description).toContain('MP3');
+      expect(result.solutions.some(s => /libmp3lame/i.test(s))).toBe(true);
+    });
+  });
+
+  describe('Scenario: Connection timeout (Icecast not responding)', () => {
+    const realStderr = `
+[info] Connecting to Icecast at localhost:8000...
+[error] Connection timed out
+[error] Operation timeout after 10000ms
+`;
+
+    it('diagnoses as timeout error', () => {
+      const result = errorDiagnostics.diagnose(realStderr, 1, { icecastPort: 8000 });
+      expect(result.category).toBe('timeout');
+      expect(result.title).toMatch(/timeout/i);
+    });
+  });
+
+  describe('Scenario: Empty stderr with Windows exit code 4294967291', () => {
+    it('diagnoses as connection error (exit code implies connection refused)', () => {
+      const result = errorDiagnostics.diagnose('', 4294967291, { icecastPort: 8200 });
+      expect(result.category).toBe('connection');
+      expect(result.severity).toBe('critical');
+    });
+
+    it('includes the port in solutions', () => {
+      const result = errorDiagnostics.diagnose('', 4294967291, { icecastPort: 8200 });
+      expect(result.solutions.some(s => s.includes('8200'))).toBe(true);
+    });
+  });
+
+  describe('Scenario: Unknown/generic error (no pattern match)', () => {
+    const weirdStderr = `
+[info] Some FFmpeg output
+[error] Something strange happened
+[error] Exit code: 999
+`;
+
+    it('returns a diagnosis anyway (no crash)', () => {
+      const result = errorDiagnostics.diagnose(weirdStderr, 999, {});
+      expect(result).toBeDefined();
+      expect(result.category).toBeDefined();
+      expect(result.title).toBeDefined();
+      expect(result.solutions).toBeDefined();
+      expect(result.solutions.length).toBeGreaterThan(0);
+    });
+
+    it('provides generic troubleshooting steps', () => {
+      const result = errorDiagnostics.diagnose(weirdStderr, 999, {});
+      expect(result.category).toBe('unknown');
+      // Should suggest checking Icecast status
+      expect(result.solutions.some(s => /icecast|running/i.test(s))).toBe(true);
+      // Should suggest checking logs
+      expect(result.solutions.some(s => /log|troubleshoot/i.test(s))).toBe(true);
+    });
+  });
+
+  /**
+   * ADD YOUR SCENARIOS HERE
+   * When you encounter a new error, add the stderr and expected diagnosis below.
+   */
+  describe('Scenario: [Your error here]', () => {
+    // TODO: Add stderr from actual failure
+    const yourRealStderr = `
+[PASTE YOUR STDERR HERE]
+`;
+
+    it('diagnoses correctly', () => {
+      const result = errorDiagnostics.diagnose(yourRealStderr, 1, {});
+      // Update this assertion based on what you expect
+      // expect(result.category).toBe('expected_category');
+    });
+  });
+});
diff --git a/tests/setup.js b/tests/setup.js
index d85b708..1e4e297 100644
--- a/tests/setup.js
+++ b/tests/setup.js
@@ -7,6 +7,9 @@
 process.env.NODE_ENV = 'test';
 process.env.PORT = '3001';
 process.env.HOST = '127.0.0.1';
+// Older integration tests predate admin auth; they exercise the routes, not
+// the gate. tests/integration/auth.test.js clears this to test auth for real.
+process.env.AUTH_DISABLED = '1';
 
 // Mock console methods in tests to reduce noise
 global.console = {
diff --git a/tests/unit/errorDiagnostics.test.js b/tests/unit/errorDiagnostics.test.js
index a6d9ddd..c85a1b3 100644
--- a/tests/unit/errorDiagnostics.test.js
+++ b/tests/unit/errorDiagnostics.test.js
@@ -55,5 +55,37 @@ describe('errorDiagnostics', () => {
       expect(result).toBeDefined();
       expect(result.category).toBe('connection');
     });
+
+    it('returns device_not_found when stderr contains "could not find audio device" and context has deviceId', () => {
+      const stderr = 'Could not find audio device with name [OBS Virtual Camera (Audio)]';
+      const result = errorDiagnostics.diagnose(stderr, 1, { deviceId: 'OBS Virtual Camera (Audio)', deviceName: 'OBS Virtual Camera (Audio)' });
+      expect(result).toBeDefined();
+      expect(result.category).toBe('device_not_found');
+      expect(result.title).toBeDefined();
+      expect(result.solutions).toBeDefined();
+      expect(result.solutions.length).toBeGreaterThan(0);
+    });
+
+    // Regression: FFmpeg 9 device-open failures can exit with -5; the exit-code
+    // shortcut used to misclassify them as Icecast connection errors.
+    it('classifies FFmpeg 9 [in#0/dshow] open failure with exit -5 as a device error, not connection', () => {
+      const stderr = '[in#0/dshow @ 0000] Error opening input: Immediate exit requested\n[dshow @ 0000] Could not find device "OBS Virtual Camera (Audio)"';
+      const result = errorDiagnostics.diagnose(stderr, -5, { deviceId: 'OBS Virtual Camera (Audio)', deviceName: 'OBS Virtual Camera (Audio)', icecastPort: 8200 });
+      expect(result.category).not.toBe('connection');
+      expect(['device_not_found', 'device_busy', 'directshow']).toContain(result.category);
+      expect(result.title).toMatch(/device|audio source/i);
+    });
+
+    it('classifies "Error opening input" (no dshow tag) as device_not_found', () => {
+      const stderr = 'in#0/dshow: Error opening input: Immediate exit requested';
+      const result = errorDiagnostics.diagnose(stderr, 1, { deviceId: 'Mic', deviceName: 'Mic' });
+      expect(result.category).toBe('device_not_found');
+    });
+
+    it('still classifies genuine connection refusals with exit -5 as connection', () => {
+      const stderr = '[icecast @ 0000] Connection refused';
+      const result = errorDiagnostics.diagnose(stderr, -5, { deviceId: 'Mic', icecastPort: 8200 });
+      expect(result.category).toBe('connection');
+    });
   });
 });
diff --git a/tests/unit/vendorPaths.test.js b/tests/unit/vendorPaths.test.js
new file mode 100644
index 0000000..f02b831
--- /dev/null
+++ b/tests/unit/vendorPaths.test.js
@@ -0,0 +1,98 @@
+/**
+ * Unit tests: vendored binary resolution + bundled Icecast config generation.
+ * The bundle is what makes a packaged install work on machines with NOTHING
+ * installed — these paths must resolve deterministically.
+ */
+import fs from 'fs';
+import os from 'os';
+import path from 'path';
+import { jest } from '@jest/globals';
+
+const vendorPaths = await import('../../src/utils/vendorPaths.js');
+
+function makeVendorFixture() {
+  const base = fs.mkdtempSync(path.join(os.tmpdir(), 'ls-vendor-'));
+  const vendor = path.join(base, 'vendor');
+  fs.mkdirSync(path.join(vendor, 'ffmpeg'), { recursive: true });
+  fs.writeFileSync(path.join(vendor, 'ffmpeg', 'ffmpeg.exe'), 'stub');
+  fs.mkdirSync(path.join(vendor, 'icecast', 'bin'), { recursive: true });
+  fs.writeFileSync(path.join(vendor, 'icecast', 'bin', 'icecast.exe'), 'stub');
+  fs.writeFileSync(path.join(vendor, 'icecast', 'icecast.xml'),
+    '<icecast><authentication><source-password>hackme</source-password><admin-password>hackme</admin-password><relay-password>hackme</relay-password></authentication>' +
+    '<listen-socket><port>8200</port><bind-address>0.0.0.0</bind-address></listen-socket>' +
+    '<paths><logdir>./log</logdir><webroot>./web</webroot><adminroot>./admin</adminroot></paths></icecast>');
+  return { base, vendor };
+}
+
+describe('vendorPaths resolution', () => {
+  let fixture;
+
+  beforeEach(() => {
+    fixture = makeVendorFixture();
+    process.env.LANSTREAMER_VENDOR_DIR = fixture.vendor;
+    process.env.LANSTREAMER_DATA_DIR = path.join(fixture.base, 'data');
+    delete process.resourcesPath;
+  });
+
+  afterEach(() => {
+    fs.rmSync(fixture.base, { recursive: true, force: true });
+    delete process.env.LANSTREAMER_VENDOR_DIR;
+    delete process.env.LANSTREAMER_DATA_DIR;
+  });
+
+  it('resolves the vendor dir from the env override', () => {
+    expect(vendorPaths.vendorDir()).toBe(fixture.vendor);
+  });
+
+  it('finds the vendored ffmpeg and icecast executables', () => {
+    expect(vendorPaths.vendoredFfmpegPath()).toBe(path.join(fixture.vendor, 'ffmpeg', 'ffmpeg.exe'));
+    expect(vendorPaths.vendoredIcecastExePath()).toBe(path.join(fixture.vendor, 'icecast', 'bin', 'icecast.exe'));
+  });
+
+  it('falls back to the repo checkout vendor/ when the env dir is missing', () => {
+    // In this repo, vendor/ exists (populated by fetch-vendor-binaries.mjs), so
+    // a bad env override resolves to the repo kit rather than null.
+    process.env.LANSTREAMER_VENDOR_DIR = path.join(fixture.base, 'missing');
+    const dir = vendorPaths.vendorDir();
+    expect(dir).not.toBe(fixture.vendor);
+    expect(dir === null || dir.endsWith('vendor')).toBe(true);
+  });
+
+  it('generates a WRITABLE icecast config with absolute rewritten paths', () => {
+    const cfg = vendorPaths.ensureVendoredIcecastConfig();
+    expect(cfg).toBe(path.join(fixture.base, 'data', 'icecast', 'icecast.xml'));
+
+    const xml = fs.readFileSync(cfg, 'utf8');
+    expect(xml).toContain(`<logdir>${path.join(fixture.base, 'data', 'icecast', 'log')}</logdir>`);
+    expect(xml).toContain(`<webroot>${path.join(fixture.vendor, 'icecast', 'web')}</webroot>`);
+    expect(xml).toContain(`<adminroot>${path.join(fixture.vendor, 'icecast', 'admin')}</adminroot>`);
+    // logdir must actually exist (icecast fails to start otherwise)
+    expect(fs.existsSync(path.join(fixture.base, 'data', 'icecast', 'log'))).toBe(true);
+  });
+
+  it('hardens the generated config: loopback bind + per-install random credentials (owner decision 2026-10-30)', () => {
+    const cfg = vendorPaths.ensureVendoredIcecastConfig();
+    const xml = fs.readFileSync(cfg, 'utf8');
+    // The app is public software: shipping a LAN-reachable Icecast running
+    // the stock kit values would let anyone who knows LANStreamer control it
+    // (kill source, harvest listeners, hijack mounts). Loopback bind because
+    // listeners receive audio through the :3001 play proxy, never :8200.
+    expect(xml).not.toMatch(/<source-password>hackme</);
+    expect(xml).not.toMatch(/<admin-password>hackme</);
+    expect(xml).toContain('<bind-address>127.0.0.1</bind-address>');
+    expect(xml).not.toContain('<bind-address>0.0.0.0</bind-address>');
+    expect(xml).toContain('<port>8200</port>');
+    expect(xml).toMatch(/<source-password>ls-[0-9a-f]{32}<\/source-password>/);
+    expect(xml).toMatch(/<admin-password>ls-[0-9a-f]{32}<\/admin-password>/);
+    // generated marker present (enables conflict-recovery port claiming later)
+    expect(xml).toContain('lanstreamer-generated');
+  });
+
+  it('is idempotent — an existing generated config is not rewritten', async () => {
+    const cfg = vendorPaths.ensureVendoredIcecastConfig();
+    fs.writeFileSync(cfg, '<icecast><!-- operator-edited --></icecast>');
+    const again = vendorPaths.ensureVendoredIcecastConfig();
+    expect(again).toBe(cfg);
+    expect(fs.readFileSync(cfg, 'utf8')).toContain('operator-edited');
+  });
+});