From ebe0920f891a4df673935f25fafd41ae9bb84d5a Mon Sep 17 00:00:00 2001
From: Tim Bendt <sirtimbly@gmail.com>
Date: Mon, 1 Jun 2026 10:10:36 -0400
Subject: [PATCH] remove preact and create setup wizard

---
 .dockerignore                                 |    4 -
 .env.example                                  |   11 +
 .gitignore                                    |    6 +-
 .project/README.md                            |    7 +-
 .project/adrs/adr-001-tech-stack.md           |   59 +-
 .project/adrs/adr-003-ssr-strategy.md         |   74 +-
 .project/architecture-overview.md             |    4 +-
 .../milestones/milestone-01-foundation.md     |   10 +-
 .../milestones/milestone-04-collaboration.md  |    2 +-
 .../milestones/milestone-06-production.md     |    2 +-
 .project/notes/discrepancies.md               |    4 +-
 .project/project-plan.md                      |   31 +-
 .project/specs/authentication-api.md          |   12 +-
 .project/specs/deployment-guide.md            |  323 +--
 .project/specs/security-specification.md      |    1 -
 .project/sync-plan-browser.md                 |    2 +-
 Dockerfile                                    |   10 -
 README.md                                     |   62 +-
 apps/server/internal/auth/repository.go       |   94 +
 apps/server/internal/auth/service.go          |  103 +-
 apps/server/internal/auth/service_test.go     |   66 +-
 apps/server/internal/auth/types.go            |    5 +
 apps/server/internal/config/config.go         |   20 +-
 .../000011_instance_settings.down.sql         |    1 +
 .../000011_instance_settings.up.sql           |   13 +
 apps/server/internal/docs/repository.go       |   27 +
 .../internal/httpserver/admin_handlers.go     |   29 +-
 .../internal/httpserver/api_handlers_test.go  |   62 +-
 apps/server/internal/httpserver/app_files.go  |   43 -
 .../internal/httpserver/auth_handlers.go      |   59 +-
 apps/server/internal/httpserver/handlers.go   |   15 +-
 apps/server/internal/httpserver/middleware.go |   35 +-
 apps/server/internal/httpserver/server.go     |   29 +-
 .../server/internal/httpserver/static/auth.js |   39 +
 .../internal/httpserver/static/site.css       |   11 +-
 .../httpserver/templates/account.gohtml       |   12 +
 .../internal/httpserver/templates/base.gohtml |    2 +
 .../httpserver/templates/login.gohtml         |    8 +-
 .../httpserver/templates/setup.gohtml         |   34 +
 apps/web/.prettierignore                      |    2 -
 apps/web/index.html                           |   12 -
 apps/web/package.json                         |   25 -
 apps/web/src/app.tsx                          |  725 ------
 apps/web/src/main.tsx                         |   11 -
 apps/web/src/styles.css                       |  504 ----
 apps/web/src/vite-env.d.ts                    |    6 -
 apps/web/tsconfig.json                        |   21 -
 apps/web/vite.config.ts                       |   50 -
 docker-compose.yml                            |   11 +-
 mise.toml                                     |   51 +-
 package.json                                  |   11 -
 pnpm-lock.yaml                                | 2279 -----------------
 pnpm-workspace.yaml                           |    5 -
 53 files changed, 818 insertions(+), 4226 deletions(-)
 create mode 100644 .env.example
 create mode 100644 apps/server/internal/database/migrations/000011_instance_settings.down.sql
 create mode 100644 apps/server/internal/database/migrations/000011_instance_settings.up.sql
 delete mode 100644 apps/server/internal/httpserver/app_files.go
 create mode 100644 apps/server/internal/httpserver/templates/setup.gohtml
 delete mode 100644 apps/web/.prettierignore
 delete mode 100644 apps/web/index.html
 delete mode 100644 apps/web/package.json
 delete mode 100644 apps/web/src/app.tsx
 delete mode 100644 apps/web/src/main.tsx
 delete mode 100644 apps/web/src/styles.css
 delete mode 100644 apps/web/src/vite-env.d.ts
 delete mode 100644 apps/web/tsconfig.json
 delete mode 100644 apps/web/vite.config.ts
 delete mode 100644 package.json
 delete mode 100644 pnpm-lock.yaml
 delete mode 100644 pnpm-workspace.yaml

diff --git a/.dockerignore b/.dockerignore
index 91f473d..9d8699b 100644
--- a/.dockerignore
+++ b/.dockerignore
@@ -4,9 +4,5 @@
 data
 tmp
 
-**/node_modules
-**/dist
-**/.vite
-
 coverage
 *.log
diff --git a/.env.example b/.env.example
new file mode 100644
index 0000000..72024e1
--- /dev/null
+++ b/.env.example
@@ -0,0 +1,11 @@
+# Required for deployed passkeys and device authorization URLs.
+CAIRNQUIRE_PUBLIC_ORIGIN=https://cairnquire.example.com
+
+# Optional SMTP settings. The bundled Compose file defaults to its local
+# Mailpit service so notifications can be inspected during initial deployment.
+CAIRNQUIRE_EMAIL_SMTP_HOST=mailpit
+CAIRNQUIRE_EMAIL_SMTP_PORT=1025
+CAIRNQUIRE_EMAIL_FROM=notifications@cairnquire.local
+
+# Optional: INFO, DEBUG, WARN, or ERROR.
+CAIRNQUIRE_LOG_LEVEL=INFO
diff --git a/.gitignore b/.gitignore
index 3c111d1..1ac0d6f 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,11 +1,7 @@
 data/
 tmp/
-node_modules/
-dist/
 coverage/
+.env
 .DS_Store
 *.log
-apps/web/node_modules/
-apps/web/dist/
 apps/server/bin/
-
diff --git a/.project/README.md b/.project/README.md
index c1c03c8..ee73aac 100644
--- a/.project/README.md
+++ b/.project/README.md
@@ -11,9 +11,9 @@
 
 | Document | Decision |
 |----------|----------|
-| [ADR-001: Tech Stack](adrs/adr-001-tech-stack.md) | Go backend + Preact frontend |
+| [ADR-001: Tech Stack](adrs/adr-001-tech-stack.md) | Go server with embedded web assets |
 | [ADR-002: Sync Protocol](adrs/adr-002-sync-protocol.md) | SimpleSync content-addressed protocol |
-| [ADR-003: SSR Strategy](adrs/adr-003-ssr-strategy.md) | Go templates with Preact hydration |
+| [ADR-003: SSR Strategy](adrs/adr-003-ssr-strategy.md) | Go templates with embedded browser scripts |
 | [ADR-004: Auth Strategy](adrs/adr-004-auth-strategy.md) | Passkeys primary, passwords fallback |
 | [ADR-005: Storage Strategy](adrs/adr-005-storage-strategy.md) | libsql + content-addressed filesystem |
 | [ADR-006: Email Strategy](adrs/adr-006-email-strategy.md) | Postmark gateway, plain-text only |
@@ -84,8 +84,7 @@ cairnquire/
 │       ├── security-specification.md
 │       └── deployment-guide.md
 ├── apps/
-│   ├── server/          # Go application
-│   └── web/             # Preact frontend
+│   └── server/          # Go application, templates, and static assets
 ├── packages/
 │   └── protocol/        # Shared types
 ├── docker-compose.yml
diff --git a/.project/adrs/adr-001-tech-stack.md b/.project/adrs/adr-001-tech-stack.md
index 02a889d..5cbc2c7 100644
--- a/.project/adrs/adr-001-tech-stack.md
+++ b/.project/adrs/adr-001-tech-stack.md
@@ -1,53 +1,54 @@
-# ADR-001: Go Backend with Preact Frontend
+# ADR-001: Go Server with Embedded Web Assets
 
 ## Status
 Accepted
 
 ## Context
-We need to choose a backend language/framework and frontend technology for a documentation platform with these requirements:
-- Ultra-fast performance
-- Minimal external dependencies
-- No vendor lock-in
-- Battle-tested security
-- Server-side rendering for non-interactive pages
-- Offline-capable web client
+We need a documentation platform with fast page delivery, minimal external
+dependencies, secure server-side rendering, and a straightforward deployment
+artifact.
 
 ## Decision
-**Backend**: Go 1.22+ with standard library plus minimal, well-audited packages  
-**Frontend**: Preact 10 with TypeScript, Vite build system
+Use Go 1.24+ with the standard library plus minimal, audited packages. The Go
+binary serves HTML templates and embeds its CSS, images, and small browser
+scripts. There is no separate SPA, Node dependency tree, or frontend build
+pipeline.
+
+Browser scripts progressively add editing, offline caching, WebSocket updates,
+comments, and authentication interactions to server-rendered pages.
 
 ## Consequences
 
 ### Positive
-- Go's standard library is comprehensive and security-audited
-- Single static binary deployment — no runtime dependencies
-- Preact is 10KB (vs 40KB+ React) with identical API
-- Go's `html/template` provides safe SSR with auto-escaping
-- TypeScript gives type safety without runtime overhead
-- Both ecosystems have excellent supply-chain security (Go modules with checksums, npm audit)
+- One application binary and one build toolchain
+- Go `html/template` provides auto-escaped server rendering
+- Embedded assets deploy with the server binary
+- Fewer supply-chain dependencies and fewer moving parts in CI
+- Pages remain readable before browser scripts execute
 
 ### Negative
-- Go template syntax is less expressive than JSX
-- WebSocket sync logic must be implemented manually (no framework like Socket.io)
-- Preact ecosystem smaller than React (mitigated by using mostly native APIs)
+- Template syntax is less expressive than JSX
+- Browser behavior uses small framework-free modules
+- WebSocket and offline behavior must be maintained directly
 
 ## Alternatives Considered
 
+### Separate Preact SPA
+- **Pros**: Component model, client-side routing, TypeScript ecosystem
+- **Cons**: Adds Node tooling, package dependencies, a second build pipeline,
+  and duplicate UI surfaces
+- **Rejected**: The Go-served UI already covers the application surface
+
 ### Rust + Axum
 - **Pros**: Memory safety guarantees, excellent performance
-- **Cons**: Longer compile times, smaller talent pool, steeper learning curve for team
-- **Rejected**: Go's pragmatic balance of safety and velocity better fits project timeline
-
-### Deno Fresh
-- **Pros**: Island architecture, native TypeScript, no build step
-- **Cons**: Newer ecosystem, fewer audited libraries, Deno runtime less battle-tested than Go
-- **Rejected**: Go's maturity and deployment simplicity preferred
+- **Cons**: Longer compile times and steeper learning curve
+- **Rejected**: Go better fits the project deployment model
 
 ### Next.js / React Server Components
 - **Pros**: Mature ecosystem, built-in SSR
-- **Cons**: Heavy bundle size, complex build system, RSC lock-in, many dependencies
-- **Rejected**: Violates "minimal dependencies" and "no vendor lock-in" principles
+- **Cons**: Heavy build system and more runtime complexity
+- **Rejected**: Violates the minimal dependency goal
 
 ## References
 - Go Security Policy: https://go.dev/security
-- Preact Size Comparison: https://bundlephobia.com/package/preact@10.19.3
+- Go `html/template`: https://pkg.go.dev/html/template
diff --git a/.project/adrs/adr-003-ssr-strategy.md b/.project/adrs/adr-003-ssr-strategy.md
index fa9c6e5..cd0fcea 100644
--- a/.project/adrs/adr-003-ssr-strategy.md
+++ b/.project/adrs/adr-003-ssr-strategy.md
@@ -1,67 +1,55 @@
-# ADR-003: SSR Strategy - Go Templates with Preact Hydration
+# ADR-003: SSR Strategy - Go Templates with Embedded Browser Scripts
 
 ## Status
 Accepted
 
 ## Context
-The application needs to serve document pages that are readable without JavaScript (for performance and accessibility), while providing rich interactivity (comments, editing, search) when JavaScript is available. We need a server-side rendering strategy that works with our Go backend and Preact frontend.
+Document pages must be readable quickly and safely while still supporting
+editing, authentication, comments, offline caching, and real-time updates.
 
 ## Decision
-**Strategy C**: Go's `html/template` renders initial HTML for all pages. Preact hydrates interactive components on the client.
+Go `html/template` renders complete HTML pages. The server embeds and serves
+small framework-free browser scripts for progressive enhancement.
 
 ### Implementation Details
 
 1. **Server Rendering**:
-   - Go handlers query database for document content
-   - Markdown parsed to HTML server-side (Goldmark)
-   - `html/template` renders full page with document HTML embedded
-   - No JavaScript required for reading
+   - Go handlers query document and account data
+   - Goldmark parses Markdown to HTML server-side
+   - `html/template` renders complete pages
+   - Pages are readable before JavaScript executes
 
-2. **Client Hydration**:
-   - Preact components mount into designated DOM containers
-   - Comments, search, editor are Preact islands
-   - Static content remains server-rendered HTML
-   - `preact-iso` handles client-side navigation between pages
-
-3. **Data Passing**:
-   - Initial state embedded as JSON in `<script type="application/json">` tags
-   - Preact reads initial state during hydration, avoids extra API calls
-   - CSP nonce applied to all inline scripts
+2. **Browser Enhancement**:
+   - Embedded scripts handle editing, comments, authentication, offline cache,
+     service-worker behavior, and WebSocket updates
+   - Native browser APIs are preferred over a client framework
+   - There is no separate SPA route or frontend build pipeline
 
 ## Consequences
 
 ### Positive
-- First contentful paint is instant (pure HTML)
-- SEO-friendly without extra complexity
-- Graceful degradation: works without JS
-- Go templates are auto-escaping XSS-safe
-- No V8/JS runtime embedded in Go binary
-- Smaller client bundle (only interactive components)
+- Fast first contentful paint
+- Auto-escaped templates
+- One deployable application artifact
+- Small browser payloads and no Node build dependency
+- Interactive features stay close to their HTTP endpoints
 
 ### Negative
-- Some code duplication: markdown parsing logic in both Go and JS (for preview)
-- Template syntax is verbose compared to JSX
-- Hydration can cause flicker if not carefully managed
-- Client state must reconcile with server-rendered HTML
+- Browser modules need direct DOM event handling
+- Shared UI abstractions require deliberate maintenance
+- More complex browser interactions need focused integration tests
 
 ## Alternatives Considered
 
-### Go Templates Only (No Preact)
-- **Pros**: Zero client JS, maximum performance
-- **Cons**: No interactive features (comments, real-time sync, search)
-- **Rejected**: Doesn't meet collaboration requirements
+### Separate Hydrated SPA
+- **Pros**: Component framework and client-side routing
+- **Cons**: Duplicates UI paths and introduces a second toolchain
+- **Rejected**: The server-rendered UI already supports the required behavior
 
-### Embedded JS Runtime (QuickJS/V8)
-- **Pros**: True isomorphic rendering, JSX templates
-- **Cons**: Adds C dependency, complex build, larger binary, security surface area
-- **Rejected**: Violates minimal dependency principle
-
-### Preact SSR via WASM
-- **Pros**: Same templates on server and client
-- **Cons**: WASM overhead, complex build pipeline, slower than Go templates
-- **Rejected**: Go templates are faster and simpler
+### Embedded JS Runtime
+- **Pros**: Isomorphic rendering
+- **Cons**: Larger binary and additional security surface
+- **Rejected**: Go templates are simpler
 
 ## References
-- Go html/template security: https://pkg.go.dev/html/template
-- Preact hydration: https://preactjs.com/guide/v10/server-side-rendering
-- Islands Architecture: https://jasonformat.com/islands-architecture/
+- Go `html/template`: https://pkg.go.dev/html/template
diff --git a/.project/architecture-overview.md b/.project/architecture-overview.md
index bfdf0e4..ab7ac10 100644
--- a/.project/architecture-overview.md
+++ b/.project/architecture-overview.md
@@ -12,7 +12,7 @@ Cairnquire is a self-hosted documentation platform. A single Go binary serves HT
 │                                                                      │
 │  ┌──────────────┐  ┌──────────────┐  ┌──────────────────────────┐  │
 │  │ Browser      │  │ File Editor  │  │ Mobile / PWA             │  │
-│  │ (Preact SPA) │  │ (VS Code,    │  │ (Responsive Web)         │  │
+│  │ (Go HTML UI) │  │ (VS Code,    │  │ (Responsive Web)         │  │
 │  │              │  │  Vim, etc.)  │  │                          │  │
 │  └──────┬───────┘  └──────┬───────┘  └────────────┬─────────────┘  │
 │         │                  │                        │                │
@@ -142,7 +142,7 @@ Cairnquire is a self-hosted documentation platform. A single Go binary serves HT
 8. Render HTML: AST → html/template with layout
    │
    ▼
-9. Response: HTML with CSP nonce, Preact hydration marker
+9. Response: HTML with embedded static assets and progressive enhancement scripts
 ```
 
 ## Data Flow: File Sync
diff --git a/.project/milestones/milestone-01-foundation.md b/.project/milestones/milestone-01-foundation.md
index 5f826be..11f0958 100644
--- a/.project/milestones/milestone-01-foundation.md
+++ b/.project/milestones/milestone-01-foundation.md
@@ -9,7 +9,7 @@
 
 - [ ] Initialize monorepo structure
   - `apps/server/` with Go module
-  - `apps/web/` with Vite + Preact + TypeScript
+  - embedded templates and static assets under `apps/server/internal/httpserver/`
   - `packages/protocol/` with protobuf schema
   - `docs/` with existing documentation
   
@@ -53,10 +53,10 @@
   - Security headers middleware
   - MIME type detection
   
-- [ ] Initial frontend
-  - Preact app setup with Vite
-  - Basic routing (preact-iso)
-  - Hydration entry point
+- [ ] Initial browser UI
+  - Go template routes
+  - Embedded framework-free browser scripts
+  - Progressive enhancement entry points
   - CSS design system foundation
 
 ## Acceptance Criteria
diff --git a/.project/milestones/milestone-04-collaboration.md b/.project/milestones/milestone-04-collaboration.md
index 64f5f15..9d97582 100644
--- a/.project/milestones/milestone-04-collaboration.md
+++ b/.project/milestones/milestone-04-collaboration.md
@@ -12,7 +12,7 @@
   - Comment threading (parent/child)
   - Line/section anchoring (hash-based)
   - Comment resolution (mark as resolved)
-  - Comment display in Preact UI
+  - Comment display in the Go-served browser UI
   
 - [ ] Notification system
   - Notification queue in database
diff --git a/.project/milestones/milestone-06-production.md b/.project/milestones/milestone-06-production.md
index b54428f..2fadc36 100644
--- a/.project/milestones/milestone-06-production.md
+++ b/.project/milestones/milestone-06-production.md
@@ -9,7 +9,7 @@
 
 - [ ] Unit tests
   - Go: >80% coverage for all packages
-  - Preact: Component testing with uvu
+  - Browser behavior: integration testing for embedded scripts
   - Mock external dependencies (email, filesystem)
   
 - [ ] Integration tests
diff --git a/.project/notes/discrepancies.md b/.project/notes/discrepancies.md
index 7a57118..2780c62 100644
--- a/.project/notes/discrepancies.md
+++ b/.project/notes/discrepancies.md
@@ -2,8 +2,8 @@
 
 ## 2026-04-28
 
-1. The plan and ADRs repeatedly describe a single Go binary, while Milestone 1 also requires `apps/web/` as a separate Vite/Preact app. The current implementation treats the web app as build-time static assets served by the Go binary.
+1. Resolved: the separate Vite/Preact SPA was removed. The Go binary serves templates and embedded static assets directly.
 2. Milestone 1 asks for `packages/protocol/` with a protobuf schema, but the sync ADR and protocol spec describe JSON messages over WebSocket. The protocol package currently preserves both a `.proto` placeholder and TypeScript-facing JSON model notes.
 3. ADR-005 stores content under `data/files/...`, while Milestone 2 examples use `store/...`. The implementation follows ADR-005 and uses `data/files`.
-4. The frontend stack still requires a Node package install step, but local automation is now centralized in `mise` tasks and the lockfile-backed `pnpm` workflow rather than ad hoc commands.
+4. Resolved: the deployment and development toolchain no longer require Node or pnpm.
 5. The foundation milestone specifies `golang-migrate`, but `go-libsql` integration constraints need a clean validation path. A lightweight internal migrator is used now so the project can move forward.
diff --git a/.project/project-plan.md b/.project/project-plan.md
index cfee09c..b4f21e8 100644
--- a/.project/project-plan.md
+++ b/.project/project-plan.md
@@ -29,7 +29,7 @@ A minimal-dependency, ultra-fast documentation platform that publishes markdown
 - [x] Markdown-to-HTML pipeline with most common extensions enabled
 - [x] Static file serving for attachments
 - [x] Basic Dockerfile and docker-compose.yml
-- [x] Dev mode with `air` live reload + Vite HMR proxy
+- [x] Dev mode with `air` live reload
 - [x] Miller column document browser with folder navigation
 - [x] `index.md` default rendering for folders
 - [x] Content-addressed attachment storage with secure serving
@@ -47,7 +47,7 @@ A minimal-dependency, ultra-fast documentation platform that publishes markdown
 
 **Notes:**
 - Mermaid diagrams and math blocks now render client-side after server-rendered markdown loads.
-- Dev mode uses `air` for Go live reload and Vite proxy for frontend HMR.
+- Dev mode uses `air` for Go live reload.
 
 ---
 
@@ -209,8 +209,8 @@ A minimal-dependency, ultra-fast documentation platform that publishes markdown
 ┌─────────────────────────────────────────────────────────────┐
 │                        Client Browser                        │
 │  ┌──────────────┐  ┌──────────────┐  ┌─────────────────┐   │
-│  │   Preact UI  │  │  File Sync   │  │  Search Index   │   │
-│  │  (hydrated)  │  │  (IndexedDB) │  │    (FTS5)       │   │
+│  │ Go HTML UI   │  │  File Sync   │  │  Search Index   │   │
+│  │ + scripts    │  │  (IndexedDB) │  │    (FTS5)       │   │
 │  └──────────────┘  └──────────────┘  └─────────────────┘   │
 └─────────────────────────────────────────────────────────────┘
                              │
@@ -259,17 +259,14 @@ See [architecture-overview.md](architecture-overview.md) for detailed component
 | Crypto        | `crypto/ed25519`, `crypto/sha256`           | Standard library, no external deps       |
 | Templates     | `html/template`                             | Stdlib, auto-escaping, SSR-safe          |
 
-### Frontend (Preact + TypeScript)
+### Browser UI
 
-| Component | Library                        | Justification                           |
-| --------- | ------------------------------ | --------------------------------------- |
-| Framework | `preact` (10KB)                | React API, tiny bundle, fast hydration  |
-| Routing   | `preact-iso`                   | Lightweight isomorphic routing          |
-| Markdown  | `marked` + `micromark`         | Server+client compatible                |
-| Search    | `flexsearch`                   | Client-side full-text, zero server load |
-| Styling   | Native CSS + custom properties | No build-time CSS processing needed     |
-| Icons     | Inline SVG                     | No icon font dependency                 |
-| Build     | `vite`                         | Fast HMR, modern output, minimal config |
+| Component   | Technology                     | Justification                          |
+| ----------- | ------------------------------ | -------------------------------------- |
+| Rendering   | Go `html/template`             | Server-rendered, auto-escaped HTML     |
+| Interaction | Embedded browser scripts       | Small progressive-enhancement modules |
+| Styling     | Native CSS + custom properties | No build-time CSS processing needed   |
+| Icons       | Inline SVG                     | No icon font dependency                |
 
 ### Infrastructure
 
@@ -347,12 +344,8 @@ cairnquire/
 │   │   │   ├── markdown/          # Markdown rendering pipeline
 │   │   │   ├── realtime/          # WebSocket hub
 │   │   │   └── store/             # Content-addressed filesystem
-│   │   ├── static/                # Static assets
+│   │   ├── static/                # Embedded static assets
 │   │   └── templates/             # Go HTML templates
-│   └── web/                       # Preact frontend application
-│       ├── src/
-│       ├── index.html
-│       └── vite.config.ts
 ├── content/                       # Markdown source files
 ├── data/                          # SQLite database & attachments
 └── packages/
diff --git a/.project/specs/authentication-api.md b/.project/specs/authentication-api.md
index 661ec99..a7a7b86 100644
--- a/.project/specs/authentication-api.md
+++ b/.project/specs/authentication-api.md
@@ -8,6 +8,8 @@ Browser users authenticate with passkeys or password fallback. Successful login
 
 Endpoints:
 
+- `GET /setup`
+- `POST /api/setup`
 - `GET /login`
 - `GET /account`
 - `POST /api/auth/register/password`
@@ -21,7 +23,12 @@ Endpoints:
 - `POST /api/auth/passkeys/login/begin`
 - `POST /api/auth/passkeys/login/finish?challengeId=...`
 
-The first registered user bootstraps as `admin`. Later public registrations become `viewer`; role changes are admin-managed from the account screen. Public registration endpoints only create new accounts. Adding or changing credentials on an existing account requires an authenticated browser session.
+On an empty database, the one-time `/setup` wizard creates the first `admin`
+account and records whether public signup is enabled. Later public
+registrations are accepted only when that setting is enabled and always become
+`viewer`; role changes are admin-managed from the account screen. Public
+registration endpoints only create new accounts. Adding or changing
+credentials on an existing account requires an authenticated browser session.
 
 ## API Tokens
 
@@ -64,7 +71,8 @@ This is intentionally inspired by OAuth device authorization, but it is not a ge
 
 ## Route Protection
 
-- Public: health, static assets, document reads, login/account entry pages, password/passkey begin-login/register endpoints, device start/token polling.
+- Setup-only until configured: initial setup page and endpoint.
+- Public: health, static assets, document reads, login/account entry pages, password/passkey begin-login/register endpoints when signups are enabled, device start/token polling.
 - Session or bearer token required: auth profile/logout, edit/save APIs, uploads, sync/content APIs, device approval.
 - Admin role required: admin APIs and API token management.
 
diff --git a/.project/specs/deployment-guide.md b/.project/specs/deployment-guide.md
index f9ef640..a833e46 100644
--- a/.project/specs/deployment-guide.md
+++ b/.project/specs/deployment-guide.md
@@ -4,269 +4,120 @@
 
 - Docker 24.0+
 - Docker Compose 2.20+
-- 1GB RAM minimum (2GB recommended)
-- 10GB disk space
-- TLS certificate (Let's Encrypt or custom)
+- A reverse proxy that terminates TLS for the public hostname
+- A writable checkout directory for `./data` and `./content`
 
-## Quick Start
+## Fresh Deployment
 
 ```bash
-# Clone repository
 git clone https://github.com/your-org/cairnquire.git
 cd cairnquire
-
-# Copy and edit configuration
 cp .env.example .env
-# Edit .env with your domain, email, Postmark API key
-
-# Start services
-docker-compose up -d
-
-# Verify health
-curl https://your-domain.com/health
 ```
 
-## Configuration
+Edit `.env` and set the HTTPS origin that users will open in their browser:
 
-### Environment Variables
-
-| Variable | Required | Default | Description |
-|----------|----------|---------|-------------|
-| `DOMAIN` | Yes | — | Public domain name |
-| `DB_PATH` | No | `/data/db.sqlite` | Database file path |
-| `FILESTORE_PATH` | No | `/data/files` | Content-addressed file storage |
-| `NOTES_PATH` | No | `/notes` | Watched markdown directory |
-| `POSTMARK_API_KEY` | Yes | — | Postmark server API token |
-| `POSTMARK_FROM` | No | `notifications@DOMAIN` | From email address |
-| `SESSION_SECRET` | Yes | — | 32-byte hex for session signing |
-| `ENV` | No | `production` | `development` or `production` |
-
-### Docker Compose
-
-```yaml
-version: "3.8"
-
-services:
-  app:
-    build: .
-    ports:
-      - "8080:8080"
-    volumes:
-      - ./data:/data
-      - ./notes:/notes:ro
-    environment:
-      - DOMAIN=${DOMAIN}
-      - DB_PATH=/data/db.sqlite
-      - FILESTORE_PATH=/data/files
-      - NOTES_PATH=/notes
-      - POSTMARK_API_KEY=${POSTMARK_API_KEY}
-      - SESSION_SECRET=${SESSION_SECRET}
-    env_file:
-      - .env
-    restart: unless-stopped
-    healthcheck:
-      test: ["CMD", "wget", "-q", "--spider", "http://localhost:8080/health"]
-      interval: 30s
-      timeout: 3s
-      retries: 3
-      start_period: 10s
-    security_opt:
-      - no-new-privileges:true
-    read_only: true
-    tmpfs:
-      - /tmp:noexec,nosuid,size=100m
-
-  # Optional: Traefik for auto-HTTPS
-  traefik:
-    image: traefik:v3.0
-    command:
-      - "--api.insecure=false"
-      - "--providers.docker=true"
-      - "--providers.docker.exposedbydefault=false"
-      - "--entrypoints.web.address=:80"
-      - "--entrypoints.websecure.address=:443"
-      - "--certificatesresolvers.letsencrypt.acme.tlschallenge=true"
-      - "--certificatesresolvers.letsencrypt.acme.email=${EMAIL}"
-      - "--certificatesresolvers.letsencrypt.acme.storage=/letsencrypt/acme.json"
-    ports:
-      - "80:80"
-      - "443:443"
-    volumes:
-      - /var/run/docker.sock:/var/run/docker.sock:ro
-      - ./letsencrypt:/letsencrypt
-    labels:
-      - "traefik.enable=true"
-    restart: unless-stopped
+```dotenv
+CAIRNQUIRE_PUBLIC_ORIGIN=https://cairnquire.example.com
 ```
 
-## Production Checklist
-
-### Pre-Deployment
-- [ ] Change default `SESSION_SECRET` (generate: `openssl rand -hex 32`)
-- [ ] Configure `POSTMARK_API_KEY` with valid token
-- [ ] Set `DOMAIN` to public hostname
-- [ ] Configure DNS A/AAAA records
-- [ ] Set up SPF and DKIM for email domain
-- [ ] Review `.env` file — no default secrets
-
-### Security
-- [ ] TLS 1.3 enforced (Traefik or reverse proxy)
-- [ ] HSTS header configured
-- [ ] Firewall rules: only 80/443 open
-- [ ] Fail2ban or rate limiting on SSH
-- [ ] Automatic security updates enabled
-- [ ] Backup encryption key stored securely
-
-### Monitoring
-- [ ] Health check endpoint accessible
-- [ ] Log rotation configured
-- [ ] Disk space alerting (>80%)
-- [ ] Memory usage alerting
-- [ ] Uptime monitoring (external)
-
-## Backup Procedures
-
-### Automated Backup
+Start the application and verify the local container health endpoint:
 
 ```bash
-#!/bin/bash
-# backup.sh
-
-BACKUP_DIR="/backups"
-TIMESTAMP=$(date +%Y%m%d_%H%M%S)
-BACKUP_FILE="$BACKUP_DIR/md-hub-$TIMESTAMP.tar.gz"
-
-# Create backup
-tar czf "$BACKUP_FILE" \
-  -C /data \
-  db.sqlite \
-  files/
-
-# Encrypt (optional)
-gpg --symmetric --cipher-algo AES256 "$BACKUP_FILE"
-rm "$BACKUP_FILE"
-
-# Keep only last 30 days
-find "$BACKUP_DIR" -name "md-hub-*.tar.gz.gpg" -mtime +30 -delete
+docker compose up -d --build
+docker compose ps
+curl http://127.0.0.1:8080/health
 ```
 
-**Cron**: `0 2 * * * /opt/cairnquire/backup.sh`
+Then open `https://cairnquire.example.com/setup`. On an empty database the
+first-run wizard:
 
-### Restore from Backup
+1. Creates the initial administrator account.
+2. Sets its password.
+3. Records whether visitors may create their own accounts.
+4. Signs the administrator in.
+
+The setup endpoint is only available until the first administrator has been
+created. The signup setting can be changed later from the administrator's
+account page.
+
+## Environment Variables
+
+The checked-in Compose file sets the container paths. For a normal single-host
+deployment, only `CAIRNQUIRE_PUBLIC_ORIGIN` must be supplied in `.env`.
+
+| Variable | Required | Compose default | Description |
+|----------|----------|-----------------|-------------|
+| `CAIRNQUIRE_PUBLIC_ORIGIN` | Yes | None | Exact external HTTPS origin. Passkeys and device-flow URLs depend on this value. |
+| `CAIRNQUIRE_EMAIL_SMTP_HOST` | No | `mailpit` | SMTP server used for notifications. |
+| `CAIRNQUIRE_EMAIL_SMTP_PORT` | No | `1025` | SMTP server port. |
+| `CAIRNQUIRE_EMAIL_FROM` | No | `notifications@cairnquire.local` | Notification sender address. |
+| `CAIRNQUIRE_LOG_LEVEL` | No | `INFO` | Application log level. |
+
+The server also accepts these lower-level overrides when it is run outside the
+checked-in Compose deployment:
+
+| Variable | Default | Description |
+|----------|---------|-------------|
+| `CAIRNQUIRE_SERVER_ADDR` | `:8080` | Listen address. |
+| `CAIRNQUIRE_DATABASE_PATH` | `../../data/db.sqlite` | Local SQLite/libsql database path. |
+| `CAIRNQUIRE_DATABASE_PRIMARY_URL` | Empty | Optional remote libsql primary URL for embedded-replica mode. |
+| `CAIRNQUIRE_DATABASE_AUTH_TOKEN` | Empty | Optional auth token for the remote libsql primary. |
+| `CAIRNQUIRE_CONTENT_SOURCE_DIR` | `../../content` | Writable Markdown source directory. |
+| `CAIRNQUIRE_CONTENT_STORE_DIR` | `../../data/files` | Content-addressed attachment store. |
+| `CAIRNQUIRE_CONFIG` | Empty | Optional JSON configuration file. Environment variables override it. |
+| `CAIRNQUIRE_DEV_MODE` | `false` | Local-only auth shortcut. Never enable this on a deployed server. |
+
+## Persistent Data
+
+Compose mounts:
+
+- `./data:/workspace/data` for the database and attachments
+- `./content:/workspace/content` for editable Markdown source
+
+Both mounts must remain writable because uploads, browser edits, and sync
+writebacks modify them.
+
+## Reverse Proxy
+
+Expose container port `8080` through a TLS-terminating reverse proxy. Preserve
+the original hostname and forwarded client address headers. The configured
+`CAIRNQUIRE_PUBLIC_ORIGIN` must exactly match the external origin, including
+`https://`.
+
+## Backup And Restore
+
+Stop writes or stop the app container before copying a fully consistent local
+database backup:
 
 ```bash
-# Stop application
-docker-compose stop app
-
-# Extract backup
-tar xzf md-hub-20240115_020000.tar.gz -C /data
-
-# Restart
-docker-compose up -d app
-
-# Verify
-curl https://your-domain.com/health
+docker compose stop app
+tar czf cairnquire-backup.tgz data content
+docker compose up -d app
 ```
 
-## Upgrade Procedures
+Restore by stopping the app, replacing `data` and `content` from the archive,
+and starting the app again.
+
+## Upgrade
 
-### Minor Update (patch version)
 ```bash
-docker-compose pull
-docker-compose up -d
+docker compose stop app
+tar czf cairnquire-backup-before-upgrade.tgz data content
+git pull
+docker compose up -d --build
+curl http://127.0.0.1:8080/health
 ```
 
-### Major Update
-1. Read release notes for breaking changes
-2. Create backup: `./backup.sh`
-3. Pull new image: `docker-compose pull`
-4. Run database migrations (auto on startup)
-5. Update configuration if needed
-6. Deploy: `docker-compose up -d`
-7. Verify health and functionality
-8. Rollback if issues: restore from backup
+Database migrations run automatically on startup.
 
 ## Troubleshooting
 
-### Application Won't Start
 ```bash
-# Check logs
-docker-compose logs -f app
-
-# Verify configuration
-docker-compose exec app /server -check-config
-
-# Test database
-docker-compose exec app sqlite3 /data/db.sqlite ".tables"
+docker compose logs -f app
+docker compose ps
+curl http://127.0.0.1:8080/health
 ```
 
-### Sync Not Working
-```bash
-# Check file watcher
-docker-compose exec app ls -la /notes
-
-# Verify WebSocket
-curl -i -N \
-  -H "Connection: Upgrade" \
-  -H "Upgrade: websocket" \
-  -H "Sec-WebSocket-Key: $(openssl rand -base64 16)" \
-  -H "Sec-WebSocket-Version: 13" \
-  https://your-domain.com/ws
-```
-
-### Email Not Sending
-```bash
-# Test Postmark connection
-curl -X POST \
-  https://api.postmarkapp.com/server \
-  -H "X-Postmark-Server-Token: YOUR_TOKEN" \
-  -H "Accept: application/json"
-
-# Check email queue
-docker-compose exec app sqlite3 /data/db.sqlite \
-  "SELECT * FROM email_queue WHERE status='failed'"
-```
-
-## Scaling
-
-### Vertical Scaling
-- Increase container memory/CPU limits
-- SQLite WAL mode handles concurrent reads well
-- For heavy write loads, consider libsql replication
-
-### Horizontal Scaling (Advanced)
-```yaml
-# Requires shared storage and load balancer
-services:
-  app1:
-    # ... same config ...
-    environment:
-      - DB_PATH=/shared/db.sqlite
-      - FILESTORE_PATH=/shared/files
-  
-  app2:
-    # ... same config ...
-    environment:
-      - DB_PATH=/shared/db.sqlite
-      - FILESTORE_PATH=/shared/files
-  
-  nginx:
-    image: nginx:alpine
-    volumes:
-      - ./nginx.conf:/etc/nginx/nginx.conf
-    ports:
-      - "80:80"
-```
-
-**Note**: Horizontal scaling requires:
-- Shared filesystem (NFS, EFS)
-- libsql replication or external database
-- Sticky sessions for WebSocket
-
-## Support
-
-- **Documentation**: `/docs` route (when authenticated)
-- **Health Check**: `GET /health`
-- **Metrics**: `GET /metrics` (Prometheus format)
-- **Logs**: `docker-compose logs -f app`
-- **Issues**: https://github.com/your-org/cairnquire/issues
+If passkey creation fails after deployment, confirm that the browser URL and
+`CAIRNQUIRE_PUBLIC_ORIGIN` are the same HTTPS origin.
diff --git a/.project/specs/security-specification.md b/.project/specs/security-specification.md
index 103d362..11d0290 100644
--- a/.project/specs/security-specification.md
+++ b/.project/specs/security-specification.md
@@ -408,7 +408,6 @@ RUN addgroup -g 1000 appgroup && \
 
 # Read-only root filesystem
 COPY --from=builder /app/server /server
-COPY --from=builder /app/web/dist /web
 
 # Data directory (writable)
 RUN mkdir /data && chown appuser:appgroup /data
diff --git a/.project/sync-plan-browser.md b/.project/sync-plan-browser.md
index 9f9e257..d37a18a 100644
--- a/.project/sync-plan-browser.md
+++ b/.project/sync-plan-browser.md
@@ -37,7 +37,7 @@ Extend the existing web application so it works offline, supports concurrent edi
 
 ### Current State (Already Built)
 - Server: Go HTTP + SQLite + file watcher + WebSocket hub
-- Browser: Preact + IndexedDB cache + `navigator.onLine` detection
+- Browser: Go-served HTML + embedded scripts + IndexedDB cache + `navigator.onLine` detection
 - Documents served at `/:path*` with `index.md` default
 - Real-time updates pushed via WebSocket when files change on disk
 
diff --git a/Dockerfile b/Dockerfile
index 4e41001..04e133a 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,10 +1,3 @@
-FROM node:24-bookworm-slim AS web-build
-WORKDIR /workspace/apps/web
-COPY apps/web/package.json apps/web/package-lock.json* ./
-RUN npm install
-COPY apps/web/ ./
-RUN npm run build
-
 FROM golang:1.24-bookworm AS server-build
 WORKDIR /workspace
 RUN apt-get update && apt-get install -y --no-install-recommends build-essential ca-certificates && rm -rf /var/lib/apt/lists/*
@@ -20,7 +13,6 @@ RUN apt-get update && apt-get install -y --no-install-recommends ca-certificates
 RUN useradd --create-home --shell /usr/sbin/nologin appuser
 WORKDIR /workspace
 COPY --from=server-build /workspace/cairnquire /usr/local/bin/cairnquire
-COPY --from=web-build /workspace/apps/web/dist /workspace/web-dist
 COPY content /workspace/content
 RUN mkdir -p /workspace/data/files && chown -R appuser:appuser /workspace
 USER appuser
@@ -29,7 +21,5 @@ ENV CAIRNQUIRE_SERVER_ADDR=:8080
 ENV CAIRNQUIRE_DATABASE_PATH=/workspace/data/db.sqlite
 ENV CAIRNQUIRE_CONTENT_SOURCE_DIR=/workspace/content
 ENV CAIRNQUIRE_CONTENT_STORE_DIR=/workspace/data/files
-ENV CAIRNQUIRE_WEB_DIST_DIR=/workspace/web-dist
 HEALTHCHECK --interval=10s --timeout=3s --start-period=5s --retries=5 CMD curl --fail http://127.0.0.1:8080/health || exit 1
 ENTRYPOINT ["/usr/local/bin/cairnquire"]
-
diff --git a/README.md b/README.md
index c4ea1a8..4799967 100644
--- a/README.md
+++ b/README.md
@@ -10,7 +10,7 @@ This repository now contains the Milestone 1 foundation scaffold:
 - SQLite/libsql-oriented data layer with startup migrations
 - Markdown rendering pipeline with wiki-link rewriting, tag extraction, and SSR templates
 - Content-addressed attachment storage with secure serving
-- Preact + Vite frontend scaffold for later hydration-focused UI work
+- Go-served HTML templates with embedded CSS and browser scripts
 - Docker, Compose, CI, OpenAPI, and local development targets
 
 ## Quick Start
@@ -30,39 +30,41 @@ mise install
 
 ### Development Mode (with live reload)
 
-Run both the Go server and Vite dev server with live reload:
+Run the Go server with live reload:
 
 ```bash
 mise run dev
 ```
 
-This starts:
-- Go server with `air` live reload on http://localhost:8080
-- Vite dev server with HMR on http://localhost:5173
-- The Go server proxies `/app/*` requests to Vite, so access the app at http://localhost:8080/app/
-
-You can also run them separately in two terminals:
-
-```bash
-# Terminal 1 - Go server with live reload
-mise run dev-server
-
-# Terminal 2 - Vite dev server
-mise run dev-web
-```
+This starts the Go server with `air` live reload on `http://localhost:8080`.
 
 ### Production Mode
 
-Build the web app and run the Go server without Vite proxy:
+Run the Go server:
 
 ```bash
-mise run web-install
-mise run web-build
 mise run server-run
 ```
 
 The server listens on `http://localhost:8080` by default.
 
+### Fresh Server Deployment
+
+The Compose deployment keeps its database and attachment store in `./data` and
+its editable Markdown source in `./content`.
+
+```bash
+cp .env.example .env
+# Edit CAIRNQUIRE_PUBLIC_ORIGIN in .env to match your HTTPS URL.
+docker compose up -d --build
+curl http://127.0.0.1:8080/health
+```
+
+Open `${CAIRNQUIRE_PUBLIC_ORIGIN}/setup` in a browser. The first-run wizard
+creates the admin account and asks whether visitors may create accounts. The
+setup endpoint closes after the first admin is created. An admin can change the
+signup setting later from the account page.
+
 ### Common commands
 
 ```bash
@@ -82,18 +84,20 @@ Configuration can come from:
 
 Supported variables:
 
-- `CAIRNQUIRE_SERVER_ADDR`
-- `CAIRNQUIRE_DATABASE_PATH`
-- `CAIRNQUIRE_DATABASE_PRIMARY_URL`
-- `CAIRNQUIRE_DATABASE_AUTH_TOKEN`
-- `CAIRNQUIRE_CONTENT_SOURCE_DIR`
-- `CAIRNQUIRE_CONTENT_STORE_DIR`
-- `CAIRNQUIRE_WEB_DIST_DIR`
-- `CAIRNQUIRE_DEV_VITE_URL` - Set to proxy `/app/*` to Vite dev server (e.g. `http://localhost:5173`)
-- `CAIRNQUIRE_LOG_LEVEL`
+- `CAIRNQUIRE_PUBLIC_ORIGIN` - Required for deployment. Exact public HTTPS origin used for passkeys and device-flow URLs, for example `https://cairnquire.example.com`.
+- `CAIRNQUIRE_SERVER_ADDR` - Listen address. Defaults to `:8080`.
+- `CAIRNQUIRE_DATABASE_PATH` - Local SQLite/libsql path. Defaults to `../../data/db.sqlite` when running from `apps/server`.
+- `CAIRNQUIRE_DATABASE_PRIMARY_URL` - Optional remote libsql primary URL for an embedded replica.
+- `CAIRNQUIRE_DATABASE_AUTH_TOKEN` - Optional auth token for the remote libsql primary.
+- `CAIRNQUIRE_CONTENT_SOURCE_DIR` - Editable Markdown source directory.
+- `CAIRNQUIRE_CONTENT_STORE_DIR` - Content-addressed attachment store.
+- `CAIRNQUIRE_EMAIL_SMTP_HOST` - SMTP host. Set to an empty string in JSON config to disable delivery.
+- `CAIRNQUIRE_EMAIL_SMTP_PORT` - SMTP port. Defaults to `1025`.
+- `CAIRNQUIRE_EMAIL_FROM` - Notification sender address.
+- `CAIRNQUIRE_LOG_LEVEL` - Defaults to `INFO`.
+- `CAIRNQUIRE_DEV_MODE` - Optional local-only auth shortcut. Do not enable on a deployed server.
 
 ## Noted Gaps
 
-- The docs describe both a single-binary system and a separate Vite/Preact app. This implementation keeps the Go server as the primary runtime and treats the web app as compiled static assets.
 - The docs call for `golang-migrate`, but the current foundation uses an internal migration runner while `go-libsql` integration details are validated.
 - The sync docs describe JSON messages while the Milestone 1 layout mentions a protobuf package; both are preserved in `packages/protocol/` pending a later protocol lock.
diff --git a/apps/server/internal/auth/repository.go b/apps/server/internal/auth/repository.go
index 4300e8a..3b97801 100644
--- a/apps/server/internal/auth/repository.go
+++ b/apps/server/internal/auth/repository.go
@@ -100,6 +100,93 @@ func (r *Repository) CountAdmins(ctx context.Context) (int, error) {
 	return count, nil
 }
 
+func (r *Repository) GetInstanceSettings(ctx context.Context) (InstanceSettings, error) {
+	var setupCompleted string
+	var signupsEnabled int
+	if err := r.db.QueryRowContext(ctx, `
+		SELECT COALESCE(setup_completed_at, ''), signups_enabled
+		FROM instance_settings
+		WHERE id = 1
+	`).Scan(&setupCompleted, &signupsEnabled); err != nil {
+		return InstanceSettings{}, fmt.Errorf("get instance settings: %w", err)
+	}
+	return InstanceSettings{
+		SetupComplete:  setupCompleted != "",
+		SignupsEnabled: signupsEnabled == 1,
+	}, nil
+}
+
+func (r *Repository) CompleteInitialSetup(ctx context.Context, user User, signupsEnabled bool) (User, error) {
+	now := time.Now().UTC()
+	if user.ID == "" {
+		user.ID = "user:" + user.Email
+	}
+	if user.DisplayName == "" {
+		user.DisplayName = user.Email
+	}
+
+	tx, err := r.db.BeginTx(ctx, nil)
+	if err != nil {
+		return User{}, fmt.Errorf("begin initial setup: %w", err)
+	}
+	defer func() { _ = tx.Rollback() }()
+
+	var setupCompleted string
+	if err := tx.QueryRowContext(ctx, `
+		SELECT COALESCE(setup_completed_at, '')
+		FROM instance_settings
+		WHERE id = 1
+	`).Scan(&setupCompleted); err != nil {
+		return User{}, fmt.Errorf("get initial setup state: %w", err)
+	}
+	if setupCompleted != "" {
+		return User{}, fmt.Errorf("initial setup has already been completed")
+	}
+
+	var userCount int
+	if err := tx.QueryRowContext(ctx, `SELECT COUNT(*) FROM users`).Scan(&userCount); err != nil {
+		return User{}, fmt.Errorf("count users during initial setup: %w", err)
+	}
+	if userCount != 0 {
+		return User{}, fmt.Errorf("initial setup requires an empty user database")
+	}
+
+	if _, err := tx.ExecContext(ctx, `
+		INSERT INTO users (id, email, display_name, password_hash, role, created_at, last_seen_at)
+		VALUES (?, ?, ?, ?, ?, ?, ?)
+	`, user.ID, user.Email, user.DisplayName, nullString(user.PasswordHash), string(RoleAdmin), now.Format(time.RFC3339), now.Format(time.RFC3339)); err != nil {
+		return User{}, fmt.Errorf("create initial admin: %w", err)
+	}
+
+	if _, err := tx.ExecContext(ctx, `
+		UPDATE instance_settings
+		SET setup_completed_at = ?, signups_enabled = ?, updated_at = ?
+		WHERE id = 1 AND setup_completed_at IS NULL
+	`, now.Format(time.RFC3339), boolInt(signupsEnabled), now.Format(time.RFC3339)); err != nil {
+		return User{}, fmt.Errorf("complete initial setup: %w", err)
+	}
+
+	if err := tx.Commit(); err != nil {
+		return User{}, fmt.Errorf("commit initial setup: %w", err)
+	}
+	return r.GetUserByEmail(ctx, user.Email)
+}
+
+func (r *Repository) UpdateSignupsEnabled(ctx context.Context, enabled bool) error {
+	result, err := r.db.ExecContext(ctx, `
+		UPDATE instance_settings
+		SET signups_enabled = ?, updated_at = ?
+		WHERE id = 1 AND setup_completed_at IS NOT NULL
+	`, boolInt(enabled), time.Now().UTC().Format(time.RFC3339))
+	if err != nil {
+		return fmt.Errorf("update signup setting: %w", err)
+	}
+	if rows, _ := result.RowsAffected(); rows == 0 {
+		return fmt.Errorf("initial setup is required")
+	}
+	return nil
+}
+
 func (r *Repository) ListUsers(ctx context.Context) ([]User, error) {
 	rows, err := r.db.QueryContext(ctx, `
 		SELECT id, email, COALESCE(display_name, ''), COALESCE(password_hash, ''), COALESCE(role, 'viewer'), created_at, COALESCE(last_seen_at, '')
@@ -522,6 +609,13 @@ func nullString(value string) any {
 	return value
 }
 
+func boolInt(value bool) int {
+	if value {
+		return 1
+	}
+	return 0
+}
+
 func timePtrString(value *time.Time) any {
 	if value == nil {
 		return nil
diff --git a/apps/server/internal/auth/service.go b/apps/server/internal/auth/service.go
index 0b5c705..8a6d115 100644
--- a/apps/server/internal/auth/service.go
+++ b/apps/server/internal/auth/service.go
@@ -55,7 +55,34 @@ func NewService(repo *Repository, publicOrigin string) (*Service, error) {
 	return &Service{repo: repo, webauthn: web, publicOrigin: publicOrigin}, nil
 }
 
+func (s *Service) GetInstanceSettings(ctx context.Context) (InstanceSettings, error) {
+	return s.repo.GetInstanceSettings(ctx)
+}
+
+func (s *Service) CompleteInitialSetup(ctx context.Context, email, displayName, password string, signupsEnabled bool) (User, error) {
+	email = normalizeEmail(email)
+	if email == "" {
+		return User{}, fmt.Errorf("email is required")
+	}
+	if len(password) < 12 {
+		return User{}, fmt.Errorf("password must be at least 12 characters")
+	}
+	passwordHash, err := hashPassword(password)
+	if err != nil {
+		return User{}, err
+	}
+	return s.repo.CompleteInitialSetup(ctx, User{
+		Email:        email,
+		DisplayName:  strings.TrimSpace(displayName),
+		PasswordHash: passwordHash,
+		Role:         RoleAdmin,
+	}, signupsEnabled)
+}
+
 func (s *Service) RegisterPasswordUser(ctx context.Context, email, displayName, password, role string) (User, error) {
+	if err := s.requirePublicSignups(ctx); err != nil {
+		return User{}, err
+	}
 	email = normalizeEmail(email)
 	if email == "" {
 		return User{}, fmt.Errorf("email is required")
@@ -72,21 +99,11 @@ func (s *Service) RegisterPasswordUser(ctx context.Context, email, displayName,
 	if err != nil {
 		return User{}, err
 	}
-	userCount, err := s.repo.CountUsers(ctx)
-	if err != nil {
-		return User{}, err
-	}
-	normalizedRole := RoleViewer
-	if userCount == 0 {
-		normalizedRole = RoleAdmin
-	} else if strings.EqualFold(role, string(RoleViewer)) {
-		normalizedRole = RoleViewer
-	}
 	return s.repo.UpsertUser(ctx, User{
 		Email:        email,
 		DisplayName:  strings.TrimSpace(displayName),
 		PasswordHash: passwordHash,
-		Role:         normalizedRole,
+		Role:         RoleViewer,
 	})
 }
 
@@ -113,23 +130,18 @@ func (s *Service) LoginPassword(ctx context.Context, email, password, ip, userAg
 }
 
 func (s *Service) BeginPasskeyRegistration(ctx context.Context, email, displayName, role string) (any, string, error) {
+	if err := s.requirePublicSignups(ctx); err != nil {
+		return nil, "", err
+	}
 	user, err := s.repo.GetUserByEmail(ctx, normalizeEmail(email))
 	if err != nil {
 		if !isNoRows(err) {
 			return nil, "", err
 		}
-		userCount, err := s.repo.CountUsers(ctx)
-		if err != nil {
-			return nil, "", err
-		}
-		normalizedRole := RoleViewer
-		if userCount == 0 {
-			normalizedRole = RoleAdmin
-		}
 		user, err = s.repo.UpsertUser(ctx, User{
 			Email:       normalizeEmail(email),
 			DisplayName: strings.TrimSpace(displayName),
-			Role:        normalizedRole,
+			Role:        RoleViewer,
 		})
 		if err != nil {
 			return nil, "", err
@@ -278,6 +290,43 @@ func (s *Service) ListUsers(ctx context.Context) ([]User, error) {
 	return s.repo.ListUsers(ctx)
 }
 
+func (s *Service) UpdateSignupsEnabled(ctx context.Context, actor Principal, enabled bool) (InstanceSettings, error) {
+	if !Allows(actor, ScopeAdmin) {
+		return InstanceSettings{}, fmt.Errorf("admin role required")
+	}
+	if err := s.repo.UpdateSignupsEnabled(ctx, enabled); err != nil {
+		return InstanceSettings{}, err
+	}
+	return s.repo.GetInstanceSettings(ctx)
+}
+
+func (s *Service) EnsureDevUser(ctx context.Context) (User, error) {
+	const email = "dev@localhost"
+	settings, err := s.repo.GetInstanceSettings(ctx)
+	if err != nil {
+		return User{}, err
+	}
+	if !settings.SetupComplete {
+		return s.CompleteInitialSetup(ctx, email, "Development Admin", "development-only-password", true)
+	}
+	user, err := s.repo.GetUserByEmail(ctx, email)
+	if err == nil {
+		return user, nil
+	}
+	if !isNoRows(err) {
+		return User{}, err
+	}
+	return s.repo.UpsertUser(ctx, User{Email: email, DisplayName: "Development Admin", Role: RoleAdmin})
+}
+
+func (s *Service) PrincipalForUser(ctx context.Context, userID string) (Principal, error) {
+	user, err := s.repo.GetUserByID(ctx, userID)
+	if err != nil {
+		return Principal{}, err
+	}
+	return principalFromUser(user, "dev", "", "", nil, time.Time{}), nil
+}
+
 func (s *Service) UpdateUserRole(ctx context.Context, actor Principal, userID, role string) (User, error) {
 	if !Allows(actor, ScopeAdmin) {
 		return User{}, fmt.Errorf("admin role required")
@@ -453,6 +502,20 @@ func (s *Service) createSession(ctx context.Context, user User, ip, userAgent st
 	return principalFromUser(user, "session", session.ID, "", nil, session.ExpiresAt), token, nil
 }
 
+func (s *Service) requirePublicSignups(ctx context.Context) error {
+	settings, err := s.repo.GetInstanceSettings(ctx)
+	if err != nil {
+		return err
+	}
+	if !settings.SetupComplete {
+		return fmt.Errorf("initial setup is required")
+	}
+	if !settings.SignupsEnabled {
+		return fmt.Errorf("signups are disabled")
+	}
+	return nil
+}
+
 func principalFromUser(user User, method, sessionID, apiKeyID string, scopes []Scope, expiresAt time.Time) Principal {
 	return Principal{
 		UserID:      user.ID,
diff --git a/apps/server/internal/auth/service_test.go b/apps/server/internal/auth/service_test.go
index 9d24d25..2e67422 100644
--- a/apps/server/internal/auth/service_test.go
+++ b/apps/server/internal/auth/service_test.go
@@ -28,13 +28,23 @@ func setupAuthTestService(t *testing.T) *Service {
 	return service
 }
 
+func setupInitialAdmin(t *testing.T, service *Service, signupsEnabled bool) User {
+	t.Helper()
+
+	user, err := service.CompleteInitialSetup(context.Background(), "admin@example.com", "Admin", "correct horse battery staple", signupsEnabled)
+	if err != nil {
+		t.Fatalf("CompleteInitialSetup() error = %v", err)
+	}
+	return user
+}
+
 func TestPasswordLoginCreatesValidSession(t *testing.T) {
 	service := setupAuthTestService(t)
 	ctx := context.Background()
 
-	user, err := service.RegisterPasswordUser(ctx, "Dev@Example.com", "Dev User", "correct horse battery staple", "editor")
+	user, err := service.CompleteInitialSetup(ctx, "Dev@Example.com", "Dev User", "correct horse battery staple", true)
 	if err != nil {
-		t.Fatalf("RegisterPasswordUser() error = %v", err)
+		t.Fatalf("CompleteInitialSetup() error = %v", err)
 	}
 	if user.Email != "dev@example.com" {
 		t.Fatalf("email = %q, want normalized", user.Email)
@@ -48,7 +58,7 @@ func TestPasswordLoginCreatesValidSession(t *testing.T) {
 		t.Fatal("expected session token")
 	}
 	if principal.Role != RoleAdmin {
-		t.Fatalf("role = %s, want first registered user to bootstrap as admin", principal.Role)
+		t.Fatalf("role = %s, want initial setup user to be admin", principal.Role)
 	}
 
 	validated, err := service.ValidateSessionToken(ctx, token)
@@ -64,10 +74,7 @@ func TestAPIKeyUsesShownOnceBearerToken(t *testing.T) {
 	service := setupAuthTestService(t)
 	ctx := context.Background()
 
-	user, err := service.RegisterPasswordUser(ctx, "admin@example.com", "Admin", "correct horse battery staple", "admin")
-	if err != nil {
-		t.Fatalf("RegisterPasswordUser() error = %v", err)
-	}
+	user := setupInitialAdmin(t, service, true)
 	expires := time.Now().UTC().Add(time.Hour)
 	created, err := service.CreateAPIKey(ctx, user.ID, "CLI", []Scope{ScopeDocsRead, ScopeSyncWrite}, &expires)
 	if err != nil {
@@ -99,10 +106,7 @@ func TestDeviceFlowMintsAPIKeyAfterApproval(t *testing.T) {
 	service := setupAuthTestService(t)
 	ctx := context.Background()
 
-	user, err := service.RegisterPasswordUser(ctx, "admin@example.com", "Admin", "correct horse battery staple", "admin")
-	if err != nil {
-		t.Fatalf("RegisterPasswordUser() error = %v", err)
-	}
+	user := setupInitialAdmin(t, service, true)
 	start, err := service.StartDeviceFlow(ctx, "Laptop", []Scope{ScopeSyncRead})
 	if err != nil {
 		t.Fatalf("StartDeviceFlow() error = %v", err)
@@ -132,10 +136,7 @@ func TestPasswordChangeInvalidatesOldPassword(t *testing.T) {
 	service := setupAuthTestService(t)
 	ctx := context.Background()
 
-	user, err := service.RegisterPasswordUser(ctx, "admin@example.com", "Admin", "correct horse battery staple", "admin")
-	if err != nil {
-		t.Fatalf("RegisterPasswordUser() error = %v", err)
-	}
+	user := setupInitialAdmin(t, service, true)
 	principal := principalFromUser(user, "session", "sess:test", "", nil, time.Now().Add(time.Hour))
 	if err := service.ChangePassword(ctx, principal, "correct horse battery staple", "new correct horse battery staple"); err != nil {
 		t.Fatalf("ChangePassword() error = %v", err)
@@ -152,10 +153,7 @@ func TestCannotDemoteOrDeleteLastAdmin(t *testing.T) {
 	service := setupAuthTestService(t)
 	ctx := context.Background()
 
-	user, err := service.RegisterPasswordUser(ctx, "admin@example.com", "Admin", "correct horse battery staple", "admin")
-	if err != nil {
-		t.Fatalf("RegisterPasswordUser() error = %v", err)
-	}
+	user := setupInitialAdmin(t, service, true)
 	principal := principalFromUser(user, "session", "sess:test", "", nil, time.Now().Add(time.Hour))
 	if _, err := service.UpdateUserRole(ctx, principal, user.ID, string(RoleEditor)); err == nil {
 		t.Fatal("expected demoting last admin to fail")
@@ -169,6 +167,7 @@ func TestPublicRegistrationCannotAttachCredentialsToExistingUser(t *testing.T) {
 	service := setupAuthTestService(t)
 	ctx := context.Background()
 
+	setupInitialAdmin(t, service, true)
 	if _, err := service.RegisterPasswordUser(ctx, "dev@example.com", "Dev", "correct horse battery staple", "admin"); err != nil {
 		t.Fatalf("RegisterPasswordUser() error = %v", err)
 	}
@@ -179,3 +178,32 @@ func TestPublicRegistrationCannotAttachCredentialsToExistingUser(t *testing.T) {
 		t.Fatal("expected public passkey registration for existing account to fail")
 	}
 }
+
+func TestInitialSetupCanDisablePublicRegistration(t *testing.T) {
+	service := setupAuthTestService(t)
+	ctx := context.Background()
+	admin := setupInitialAdmin(t, service, false)
+
+	if admin.Role != RoleAdmin {
+		t.Fatalf("initial role = %s, want admin", admin.Role)
+	}
+	if _, err := service.RegisterPasswordUser(ctx, "viewer@example.com", "Viewer", "correct horse battery staple", "viewer"); err == nil || err.Error() != "signups are disabled" {
+		t.Fatalf("RegisterPasswordUser() error = %v, want signups are disabled", err)
+	}
+
+	principal := principalFromUser(admin, "session", "sess:test", "", nil, time.Now().Add(time.Hour))
+	settings, err := service.UpdateSignupsEnabled(ctx, principal, true)
+	if err != nil {
+		t.Fatalf("UpdateSignupsEnabled() error = %v", err)
+	}
+	if !settings.SignupsEnabled {
+		t.Fatal("expected signups to be enabled")
+	}
+	viewer, err := service.RegisterPasswordUser(ctx, "viewer@example.com", "Viewer", "correct horse battery staple", "admin")
+	if err != nil {
+		t.Fatalf("RegisterPasswordUser() after enabling signups error = %v", err)
+	}
+	if viewer.Role != RoleViewer {
+		t.Fatalf("public signup role = %s, want viewer", viewer.Role)
+	}
+}
diff --git a/apps/server/internal/auth/types.go b/apps/server/internal/auth/types.go
index 9218f2e..9282a65 100644
--- a/apps/server/internal/auth/types.go
+++ b/apps/server/internal/auth/types.go
@@ -92,6 +92,11 @@ type CreatedAPIKey struct {
 	Token  string `json:"token"`
 }
 
+type InstanceSettings struct {
+	SetupComplete  bool `json:"setupComplete"`
+	SignupsEnabled bool `json:"signupsEnabled"`
+}
+
 type DeviceCode struct {
 	ID              string
 	UserID          string
diff --git a/apps/server/internal/config/config.go b/apps/server/internal/config/config.go
index f01f56c..4351d30 100644
--- a/apps/server/internal/config/config.go
+++ b/apps/server/internal/config/config.go
@@ -12,10 +12,10 @@ type Config struct {
 	Server   ServerConfig   `json:"server"`
 	Database DatabaseConfig `json:"database"`
 	Content  ContentConfig  `json:"content"`
-	Web      WebConfig      `json:"web"`
 	Auth     AuthConfig     `json:"auth"`
 	Email    EmailConfig    `json:"email"`
 	LogLevel string         `json:"logLevel"`
+	DevMode  bool           `json:"devMode"`
 }
 
 type ServerConfig struct {
@@ -33,11 +33,6 @@ type ContentConfig struct {
 	StoreDir  string `json:"storeDir"`
 }
 
-type WebConfig struct {
-	DistDir    string `json:"distDir"`
-	DevViteURL string `json:"devViteUrl"`
-}
-
 type AuthConfig struct {
 	PublicOrigin string `json:"publicOrigin"`
 }
@@ -60,10 +55,6 @@ func Default() Config {
 			SourceDir: filepath.Join("..", "..", "content"),
 			StoreDir:  filepath.Join("..", "..", "data", "files"),
 		},
-		Web: WebConfig{
-			DistDir:    filepath.Join("..", "web", "dist"),
-			DevViteURL: os.Getenv("CAIRNQUIRE_DEV_VITE_URL"),
-		},
 		Auth: AuthConfig{
 			PublicOrigin: "http://localhost:8080",
 		},
@@ -91,8 +82,6 @@ func Load() (Config, error) {
 	overrideString(&cfg.Database.AuthToken, "CAIRNQUIRE_DATABASE_AUTH_TOKEN")
 	overrideString(&cfg.Content.SourceDir, "CAIRNQUIRE_CONTENT_SOURCE_DIR")
 	overrideString(&cfg.Content.StoreDir, "CAIRNQUIRE_CONTENT_STORE_DIR")
-	overrideString(&cfg.Web.DistDir, "CAIRNQUIRE_WEB_DIST_DIR")
-	overrideString(&cfg.Web.DevViteURL, "CAIRNQUIRE_DEV_VITE_URL")
 	overrideString(&cfg.Auth.PublicOrigin, "CAIRNQUIRE_PUBLIC_ORIGIN")
 	overrideString(&cfg.Email.SMTPHost, "CAIRNQUIRE_EMAIL_SMTP_HOST")
 	if port := os.Getenv("CAIRNQUIRE_EMAIL_SMTP_PORT"); port != "" {
@@ -102,6 +91,13 @@ func Load() (Config, error) {
 	}
 	overrideString(&cfg.Email.From, "CAIRNQUIRE_EMAIL_FROM")
 	overrideString(&cfg.LogLevel, "CAIRNQUIRE_LOG_LEVEL")
+	if devMode := os.Getenv("CAIRNQUIRE_DEV_MODE"); devMode != "" {
+		parsed, err := strconv.ParseBool(devMode)
+		if err != nil {
+			return Config{}, fmt.Errorf("parse CAIRNQUIRE_DEV_MODE: %w", err)
+		}
+		cfg.DevMode = parsed
+	}
 
 	if cfg.Server.Addr == "" {
 		return Config{}, fmt.Errorf("server.addr must not be empty")
diff --git a/apps/server/internal/database/migrations/000011_instance_settings.down.sql b/apps/server/internal/database/migrations/000011_instance_settings.down.sql
new file mode 100644
index 0000000..e6e38ec
--- /dev/null
+++ b/apps/server/internal/database/migrations/000011_instance_settings.down.sql
@@ -0,0 +1 @@
+DROP TABLE IF EXISTS instance_settings;
diff --git a/apps/server/internal/database/migrations/000011_instance_settings.up.sql b/apps/server/internal/database/migrations/000011_instance_settings.up.sql
new file mode 100644
index 0000000..9c95ab1
--- /dev/null
+++ b/apps/server/internal/database/migrations/000011_instance_settings.up.sql
@@ -0,0 +1,13 @@
+CREATE TABLE IF NOT EXISTS instance_settings (
+    id INTEGER PRIMARY KEY CHECK(id = 1),
+    setup_completed_at TEXT,
+    signups_enabled INTEGER NOT NULL DEFAULT 0 CHECK(signups_enabled IN (0, 1)),
+    updated_at TEXT NOT NULL
+);
+
+INSERT OR IGNORE INTO instance_settings (id, setup_completed_at, signups_enabled, updated_at)
+SELECT
+    1,
+    CASE WHEN EXISTS(SELECT 1 FROM users) THEN datetime('now') ELSE NULL END,
+    CASE WHEN EXISTS(SELECT 1 FROM users) THEN 1 ELSE 0 END,
+    datetime('now');
diff --git a/apps/server/internal/docs/repository.go b/apps/server/internal/docs/repository.go
index 7657306..bde43e0 100644
--- a/apps/server/internal/docs/repository.go
+++ b/apps/server/internal/docs/repository.go
@@ -271,6 +271,33 @@ func (r *Repository) GetAttachment(ctx context.Context, hash string) (*Attachmen
 	return &record, nil
 }
 
+func (r *Repository) ListAttachments(ctx context.Context) ([]AttachmentRecord, error) {
+	rows, err := r.db.QueryContext(ctx, `
+		SELECT hash, original_name, content_type, size_bytes, created_at
+		FROM attachments
+		ORDER BY created_at DESC
+	`)
+	if err != nil {
+		return nil, fmt.Errorf("list attachments: %w", err)
+	}
+	defer rows.Close()
+
+	var attachments []AttachmentRecord
+	for rows.Next() {
+		var record AttachmentRecord
+		var created string
+		if err := rows.Scan(&record.Hash, &record.OriginalName, &record.ContentType, &record.SizeBytes, &created); err != nil {
+			return nil, fmt.Errorf("scan attachment: %w", err)
+		}
+		record.CreatedAt, err = time.Parse(time.RFC3339, created)
+		if err != nil {
+			return nil, fmt.Errorf("parse attachment created_at: %w", err)
+		}
+		attachments = append(attachments, record)
+	}
+	return attachments, rows.Err()
+}
+
 type SearchResult struct {
 	Path  string `json:"path"`
 	Title string `json:"title"`
diff --git a/apps/server/internal/httpserver/admin_handlers.go b/apps/server/internal/httpserver/admin_handlers.go
index 03336d9..9d89bf0 100644
--- a/apps/server/internal/httpserver/admin_handlers.go
+++ b/apps/server/internal/httpserver/admin_handlers.go
@@ -15,6 +15,10 @@ type adminUserInput struct {
 	Role        string `json:"role"`
 }
 
+type adminSettingsInput struct {
+	SignupsEnabled bool `json:"signupsEnabled"`
+}
+
 func (s *Server) handleAdminLogin(w http.ResponseWriter, r *http.Request) {
 	var input adminUserInput
 	if err := json.NewDecoder(r.Body).Decode(&input); err != nil {
@@ -95,7 +99,6 @@ func (s *Server) handleAdminWorkspace(w http.ResponseWriter, r *http.Request) {
 			"databasePath":  s.config.Database.Path,
 			"documentCount": len(documents),
 			"userCount":     len(users),
-			"webDistDir":    s.config.Web.DistDir,
 		},
 		"documents": documents,
 	})
@@ -113,6 +116,30 @@ func (s *Server) handleAdminWorkspaceSync(w http.ResponseWriter, r *http.Request
 	})
 }
 
+func (s *Server) handleAdminSettings(w http.ResponseWriter, r *http.Request) {
+	settings, err := s.auth.GetInstanceSettings(r.Context())
+	if err != nil {
+		writeJSONWithStatus(w, http.StatusInternalServerError, map[string]string{"error": err.Error()})
+		return
+	}
+	writeJSON(w, http.StatusOK, map[string]any{"settings": settings})
+}
+
+func (s *Server) handleAdminSettingsUpdate(w http.ResponseWriter, r *http.Request) {
+	principal, _ := requirePrincipal(r)
+	var input adminSettingsInput
+	if err := json.NewDecoder(r.Body).Decode(&input); err != nil {
+		writeJSONWithStatus(w, http.StatusBadRequest, map[string]string{"error": "invalid json"})
+		return
+	}
+	settings, err := s.auth.UpdateSignupsEnabled(r.Context(), principal, input.SignupsEnabled)
+	if err != nil {
+		writeJSONWithStatus(w, http.StatusBadRequest, map[string]string{"error": err.Error()})
+		return
+	}
+	writeJSON(w, http.StatusOK, map[string]any{"settings": settings})
+}
+
 func (s *Server) normalizeAdminUserInput(input adminUserInput) (docs.UserRecord, bool) {
 	email := strings.TrimSpace(strings.ToLower(input.Email))
 	if email == "" {
diff --git a/apps/server/internal/httpserver/api_handlers_test.go b/apps/server/internal/httpserver/api_handlers_test.go
index d86de00..183393d 100644
--- a/apps/server/internal/httpserver/api_handlers_test.go
+++ b/apps/server/internal/httpserver/api_handlers_test.go
@@ -32,6 +32,10 @@ type apiTestServer struct {
 }
 
 func newAPITestServer(t *testing.T) *apiTestServer {
+	return newAPITestServerWithSetup(t, true)
+}
+
+func newAPITestServerWithSetup(t *testing.T, setupComplete bool) *apiTestServer {
 	t.Helper()
 
 	ctx := context.Background()
@@ -69,9 +73,12 @@ func newAPITestServer(t *testing.T) *apiTestServer {
 	if err != nil {
 		t.Fatalf("create auth service: %v", err)
 	}
-	user, err := authService.RegisterPasswordUser(ctx, "editor@example.com", "Editor", "very secure password", string(auth.RoleEditor))
-	if err != nil {
-		t.Fatalf("create test user: %v", err)
+	var user auth.User
+	if setupComplete {
+		user, err = authService.CompleteInitialSetup(ctx, "editor@example.com", "Editor", "very secure password", false)
+		if err != nil {
+			t.Fatalf("create test user: %v", err)
+		}
 	}
 
 	syncRepo := sync.NewRepository(db.SQL())
@@ -81,7 +88,6 @@ func newAPITestServer(t *testing.T) *apiTestServer {
 				SourceDir: sourceDir,
 				StoreDir:  storeDir,
 			},
-			Web:  config.WebConfig{DistDir: filepath.Join(root, "web-dist")},
 			Auth: config.AuthConfig{PublicOrigin: "http://localhost:8080"},
 		},
 		Logger:       logger,
@@ -106,6 +112,54 @@ func newAPITestServer(t *testing.T) *apiTestServer {
 	}
 }
 
+func TestInitialSetupWizardCreatesAdminAndPersistsSignupPolicy(t *testing.T) {
+	server := newAPITestServerWithSetup(t, false)
+
+	index := httptest.NewRecorder()
+	server.handler.ServeHTTP(index, httptest.NewRequest(http.MethodGet, "/", nil))
+	if index.Code != http.StatusSeeOther || index.Header().Get("Location") != "/setup" {
+		t.Fatalf("initial index response = %d %q, want redirect to /setup", index.Code, index.Header().Get("Location"))
+	}
+
+	setupPage := httptest.NewRecorder()
+	server.handler.ServeHTTP(setupPage, httptest.NewRequest(http.MethodGet, "/setup", nil))
+	if setupPage.Code != http.StatusOK || !bytes.Contains(setupPage.Body.Bytes(), []byte("Initial setup")) {
+		t.Fatalf("setup page response = %d %q", setupPage.Code, setupPage.Body.String())
+	}
+
+	setup := httptest.NewRecorder()
+	server.handler.ServeHTTP(setup, jsonRequest(http.MethodPost, "/api/setup", map[string]any{
+		"email":          "owner@example.com",
+		"displayName":    "Owner",
+		"password":       "correct horse battery staple",
+		"signupsEnabled": false,
+	}))
+	if setup.Code != http.StatusCreated {
+		t.Fatalf("setup status = %d, want %d; body=%s", setup.Code, http.StatusCreated, setup.Body.String())
+	}
+	if len(setup.Result().Cookies()) == 0 {
+		t.Fatal("expected setup to create a browser session")
+	}
+
+	settings, err := server.auth.GetInstanceSettings(context.Background())
+	if err != nil {
+		t.Fatalf("GetInstanceSettings() error = %v", err)
+	}
+	if !settings.SetupComplete || settings.SignupsEnabled {
+		t.Fatalf("settings = %#v, want setup complete with signups disabled", settings)
+	}
+
+	register := httptest.NewRecorder()
+	server.handler.ServeHTTP(register, jsonRequest(http.MethodPost, "/api/auth/register/password", map[string]any{
+		"email":       "viewer@example.com",
+		"displayName": "Viewer",
+		"password":    "correct horse battery staple",
+	}))
+	if register.Code != http.StatusBadRequest || !bytes.Contains(register.Body.Bytes(), []byte("signups are disabled")) {
+		t.Fatalf("register response = %d %q, want disabled signup error", register.Code, register.Body.String())
+	}
+}
+
 func (s *apiTestServer) token(t *testing.T, scopes ...auth.Scope) string {
 	t.Helper()
 
diff --git a/apps/server/internal/httpserver/app_files.go b/apps/server/internal/httpserver/app_files.go
deleted file mode 100644
index 83fe3ea..0000000
--- a/apps/server/internal/httpserver/app_files.go
+++ /dev/null
@@ -1,43 +0,0 @@
-package httpserver
-
-import (
-	"net/http"
-	"net/http/httputil"
-	"net/url"
-	"os"
-	"path/filepath"
-	"strings"
-)
-
-func (s *Server) appFileServer() http.Handler {
-	if s.config.Web.DevViteURL != "" {
-		viteURL, err := url.Parse(s.config.Web.DevViteURL)
-		if err == nil {
-			proxy := httputil.NewSingleHostReverseProxy(viteURL)
-			originalDirector := proxy.Director
-			proxy.Director = func(req *http.Request) {
-				originalDirector(req)
-				req.Host = viteURL.Host
-				// Add back the /app/ prefix that was stripped by http.StripPrefix
-				req.URL.Path = "/app" + req.URL.Path
-			}
-			return proxy
-		}
-	}
-
-	files := http.FileServer(http.Dir(s.config.Web.DistDir))
-	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
-		cleanPath := filepath.Clean(strings.TrimPrefix(r.URL.Path, "/"))
-		if cleanPath == "." {
-			cleanPath = "index.html"
-		}
-
-		target := filepath.Join(s.config.Web.DistDir, cleanPath)
-		if info, err := os.Stat(target); err == nil && !info.IsDir() {
-			files.ServeHTTP(w, r)
-			return
-		}
-
-		http.ServeFile(w, r, filepath.Join(s.config.Web.DistDir, "index.html"))
-	})
-}
diff --git a/apps/server/internal/httpserver/auth_handlers.go b/apps/server/internal/httpserver/auth_handlers.go
index 59b6af8..71c22cd 100644
--- a/apps/server/internal/httpserver/auth_handlers.go
+++ b/apps/server/internal/httpserver/auth_handlers.go
@@ -24,6 +24,13 @@ type passwordLoginRequest struct {
 	Password string `json:"password"`
 }
 
+type initialSetupRequest struct {
+	Email          string `json:"email"`
+	DisplayName    string `json:"displayName"`
+	Password       string `json:"password"`
+	SignupsEnabled bool   `json:"signupsEnabled"`
+}
+
 type passkeyBeginRequest struct {
 	Email       string `json:"email"`
 	DisplayName string `json:"displayName"`
@@ -67,17 +74,61 @@ func (s *Server) handleLoginPage(w http.ResponseWriter, r *http.Request) {
 	if !strings.HasPrefix(nextPath, "/") || strings.HasPrefix(nextPath, "//") {
 		nextPath = "/account"
 	}
+	settings, err := s.auth.GetInstanceSettings(r.Context())
+	if err != nil {
+		s.renderError(w, r, http.StatusInternalServerError, "load registration settings")
+		return
+	}
 	s.renderTemplate(w, http.StatusOK, "login.gohtml", layoutData{
 		Title:        "Sign in",
-		WebEnabled:   s.webEnabled,
 		BodyClass:    "page-auth",
 		BodyTemplate: "login_content",
 		Data: struct {
-			Next string
-		}{Next: nextPath},
+			Next           string
+			SignupsEnabled bool
+		}{Next: nextPath, SignupsEnabled: settings.SignupsEnabled},
 	})
 }
 
+func (s *Server) handleSetupPage(w http.ResponseWriter, r *http.Request) {
+	settings, err := s.auth.GetInstanceSettings(r.Context())
+	if err != nil {
+		s.renderError(w, r, http.StatusInternalServerError, "load initial setup state")
+		return
+	}
+	if settings.SetupComplete {
+		http.Redirect(w, r, "/login", http.StatusSeeOther)
+		return
+	}
+	s.renderTemplate(w, http.StatusOK, "setup.gohtml", layoutData{
+		Title:        "Initial setup",
+		BodyClass:    "page-auth",
+		BodyTemplate: "setup_content",
+	})
+}
+
+func (s *Server) handleSetup(w http.ResponseWriter, r *http.Request) {
+	if !s.allowAuthAttempt(w, r) {
+		return
+	}
+	var req initialSetupRequest
+	if err := json.NewDecoder(r.Body).Decode(&req); err != nil {
+		writeJSONWithStatus(w, http.StatusBadRequest, map[string]string{"error": "invalid json"})
+		return
+	}
+	if _, err := s.auth.CompleteInitialSetup(r.Context(), req.Email, req.DisplayName, req.Password, req.SignupsEnabled); err != nil {
+		writeJSONWithStatus(w, http.StatusBadRequest, map[string]string{"error": err.Error()})
+		return
+	}
+	principal, token, err := s.auth.LoginPassword(r.Context(), req.Email, req.Password, requestIP(r), r.UserAgent())
+	if err != nil {
+		writeJSONWithStatus(w, http.StatusInternalServerError, map[string]string{"error": "initial admin created; sign in to continue"})
+		return
+	}
+	setSessionCookie(w, r, token, principal.ExpiresAt)
+	writeJSONWithStatus(w, http.StatusCreated, map[string]any{"principal": principal})
+}
+
 func (s *Server) handleAccountPage(w http.ResponseWriter, r *http.Request) {
 	principal, ok := requirePrincipal(r)
 	if !ok {
@@ -86,7 +137,6 @@ func (s *Server) handleAccountPage(w http.ResponseWriter, r *http.Request) {
 	}
 	s.renderTemplate(w, http.StatusOK, "account.gohtml", layoutData{
 		Title:        "Account",
-		WebEnabled:   s.webEnabled,
 		BodyClass:    "page-account",
 		BodyTemplate: "account_content",
 		Data:         principal,
@@ -377,7 +427,6 @@ func (s *Server) handleDeviceVerifyPage(w http.ResponseWriter, r *http.Request)
 	userCode := strings.TrimSpace(r.URL.Query().Get("user_code"))
 	s.renderTemplate(w, http.StatusOK, "device_verify.gohtml", layoutData{
 		Title:        "Approve device",
-		WebEnabled:   s.webEnabled,
 		BodyClass:    "page-auth",
 		BodyTemplate: "device_verify_content",
 		Data: struct {
diff --git a/apps/server/internal/httpserver/handlers.go b/apps/server/internal/httpserver/handlers.go
index 46aa4e4..56fb4d0 100644
--- a/apps/server/internal/httpserver/handlers.go
+++ b/apps/server/internal/httpserver/handlers.go
@@ -23,7 +23,6 @@ import (
 
 type layoutData struct {
 	Title        string
-	WebEnabled   bool
 	BodyClass    string
 	BodyTemplate string
 	Data         any
@@ -98,7 +97,6 @@ func (s *Server) handleIndex(w http.ResponseWriter, r *http.Request) {
 	activeFolder := strings.Trim(r.URL.Query().Get("folder"), "/")
 	s.renderTemplate(w, http.StatusOK, "index.gohtml", layoutData{
 		Title:        "Cairnquire",
-		WebEnabled:   s.webEnabled,
 		BodyClass:    "page-index",
 		BodyTemplate: "index_content",
 		Data: indexData{
@@ -118,7 +116,6 @@ func (s *Server) handleSearchPage(w http.ResponseWriter, r *http.Request, query
 
 	s.renderTemplate(w, http.StatusOK, "search.gohtml", layoutData{
 		Title:        "Search: " + query,
-		WebEnabled:   s.webEnabled,
 		BodyClass:    "page-search",
 		BodyTemplate: "search_content",
 		Data: struct {
@@ -225,7 +222,6 @@ func (s *Server) renderDocumentEditor(w http.ResponseWriter, r *http.Request, pa
 
 	s.renderTemplate(w, http.StatusOK, "document_edit.gohtml", layoutData{
 		Title:        "Edit: " + page.Title,
-		WebEnabled:   s.webEnabled,
 		BodyClass:    "page-document-edit",
 		BodyTemplate: "document_edit_content",
 		Data: documentEditData{
@@ -259,7 +255,6 @@ func (s *Server) renderDocumentPage(w http.ResponseWriter, r *http.Request, page
 
 	s.renderTemplate(w, http.StatusOK, "document.gohtml", layoutData{
 		Title:        page.Title,
-		WebEnabled:   s.webEnabled,
 		BodyClass:    "page-document",
 		BodyTemplate: "document_content",
 		Data: documentData{
@@ -403,6 +398,15 @@ func (s *Server) handleAttachment(w http.ResponseWriter, r *http.Request) {
 	_, _ = w.Write(content)
 }
 
+func (s *Server) handleAttachmentsList(w http.ResponseWriter, r *http.Request) {
+	attachments, err := s.repository.ListAttachments(r.Context())
+	if err != nil {
+		writeJSONWithStatus(w, http.StatusInternalServerError, map[string]string{"error": "list attachments"})
+		return
+	}
+	writeJSON(w, http.StatusOK, map[string]any{"attachments": attachments})
+}
+
 func (s *Server) renderTemplate(w http.ResponseWriter, status int, name string, data layoutData) {
 	w.Header().Set("Content-Type", "text/html; charset=utf-8")
 	w.WriteHeader(status)
@@ -414,7 +418,6 @@ func (s *Server) renderTemplate(w http.ResponseWriter, status int, name string,
 func (s *Server) renderError(w http.ResponseWriter, r *http.Request, status int, message string) {
 	s.renderTemplate(w, status, "error.gohtml", layoutData{
 		Title:        http.StatusText(status),
-		WebEnabled:   s.webEnabled,
 		BodyClass:    "page-error",
 		BodyTemplate: "error_content",
 		Data: errorData{
diff --git a/apps/server/internal/httpserver/middleware.go b/apps/server/internal/httpserver/middleware.go
index e32878a..5fe3cec 100644
--- a/apps/server/internal/httpserver/middleware.go
+++ b/apps/server/internal/httpserver/middleware.go
@@ -76,6 +76,33 @@ func (s *Server) authMiddleware(next http.Handler) http.Handler {
 	})
 }
 
+func (s *Server) setupMiddleware(next http.Handler) http.Handler {
+	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		settings, err := s.auth.GetInstanceSettings(r.Context())
+		if err != nil {
+			writeJSONWithStatus(w, http.StatusInternalServerError, map[string]string{"error": "lookup initial setup state"})
+			return
+		}
+		if settings.SetupComplete || isSetupAllowedPath(r.URL.Path) {
+			next.ServeHTTP(w, r)
+			return
+		}
+		if r.Method == http.MethodGet && !strings.HasPrefix(r.URL.Path, "/api/") {
+			http.Redirect(w, r, "/setup", http.StatusSeeOther)
+			return
+		}
+		writeJSONWithStatus(w, http.StatusServiceUnavailable, map[string]string{"error": "initial setup is required"})
+	})
+}
+
+func isSetupAllowedPath(path string) bool {
+	return path == "/setup" ||
+		path == "/api/setup" ||
+		path == "/health" ||
+		path == "/sw.js" ||
+		strings.HasPrefix(path, "/static/")
+}
+
 func (s *Server) authenticateRequest(r *http.Request) (auth.Principal, bool) {
 	if header := r.Header.Get("Authorization"); strings.HasPrefix(header, "Bearer ") {
 		principal, err := s.auth.ValidateBearerToken(r.Context(), strings.TrimSpace(strings.TrimPrefix(header, "Bearer ")))
@@ -87,7 +114,11 @@ func (s *Server) authenticateRequest(r *http.Request) (auth.Principal, bool) {
 	}
 	cookie, err := r.Cookie(auth.SessionCookieName)
 	if err != nil || cookie.Value == "" {
-		return auth.Principal{}, false
+		if s.devUserID == "" {
+			return auth.Principal{}, false
+		}
+		principal, err := s.auth.PrincipalForUser(r.Context(), s.devUserID)
+		return principal, err == nil
 	}
 	principal, err := s.auth.ValidateSessionToken(r.Context(), cookie.Value)
 	if err != nil {
@@ -120,6 +151,8 @@ func requiredScopeForPath(r *http.Request) (auth.Scope, bool) {
 		return auth.ScopeDocsWrite, true
 	case strings.HasPrefix(path, "/api/uploads"):
 		return auth.ScopeDocsWrite, true
+	case path == "/api/attachments":
+		return auth.ScopeDocsRead, true
 	case strings.HasPrefix(path, "/api/sync/"):
 		if method == http.MethodPost {
 			return auth.ScopeSyncWrite, true
diff --git a/apps/server/internal/httpserver/server.go b/apps/server/internal/httpserver/server.go
index 7973014..6adf15a 100644
--- a/apps/server/internal/httpserver/server.go
+++ b/apps/server/internal/httpserver/server.go
@@ -1,11 +1,12 @@
 package httpserver
 
 import (
+	"context"
 	"embed"
+	"fmt"
 	"html/template"
 	"log/slog"
 	"net/http"
-	"os"
 	"strings"
 	"time"
 
@@ -50,7 +51,7 @@ type Server struct {
 	collaboration *collaboration.Service
 	authLimiter   *rateLimiter
 	templates     *template.Template
-	webEnabled    bool
+	devUserID     string
 }
 
 func New(deps Dependencies) (http.Handler, error) {
@@ -81,8 +82,13 @@ func New(deps Dependencies) (http.Handler, error) {
 		templates:     templates,
 	}
 
-	if _, err := os.Stat(deps.Config.Web.DistDir); err == nil {
-		server.webEnabled = true
+	if deps.Config.DevMode {
+		devUser, err := deps.Auth.EnsureDevUser(context.Background())
+		if err != nil {
+			return nil, fmt.Errorf("ensure dev user: %w", err)
+		}
+		server.devUserID = devUser.ID
+		deps.Logger.Info("dev mode enabled", "dev_user_id", devUser.ID)
 	}
 
 	router := chi.NewRouter()
@@ -92,9 +98,11 @@ func New(deps Dependencies) (http.Handler, error) {
 	router.Use(server.timeoutExceptWebSocket(30 * time.Second))
 	router.Use(server.requestLogger)
 	router.Use(server.securityHeaders)
+	router.Use(server.setupMiddleware)
 	router.Use(server.authMiddleware)
 
 	router.Get("/", server.handleIndex)
+	router.Get("/setup", server.handleSetupPage)
 	router.Get("/login", server.handleLoginPage)
 	router.Get("/account", server.handleAccountPage)
 	router.Get("/device/verify", server.handleDeviceVerifyPage)
@@ -102,6 +110,7 @@ func New(deps Dependencies) (http.Handler, error) {
 	router.Get("/sw.js", server.handleServiceWorker)
 	router.Get("/ws", server.handleWebSocket)
 	router.Get("/api/auth/me", server.handleAuthMe)
+	router.Post("/api/setup", server.handleSetup)
 	router.Post("/api/auth/register/password", server.handlePasswordRegister)
 	router.Post("/api/auth/login/password", server.handlePasswordLogin)
 	router.Post("/api/auth/logout", server.handleLogout)
@@ -123,6 +132,8 @@ func New(deps Dependencies) (http.Handler, error) {
 	router.Post("/api/admin/users", server.handleAdminCreateUser)
 	router.Patch("/api/admin/users/{id}/role", server.handleAdminUpdateUserRole)
 	router.Get("/api/admin/auth-users", server.handleAdminAuthUsers)
+	router.Get("/api/admin/settings", server.handleAdminSettings)
+	router.Patch("/api/admin/settings", server.handleAdminSettingsUpdate)
 	router.Get("/api/admin/workspace", server.handleAdminWorkspace)
 	router.Post("/api/admin/workspace/sync", server.handleAdminWorkspaceSync)
 	router.Get("/docs", server.handleDocsIndex)
@@ -131,6 +142,7 @@ func New(deps Dependencies) (http.Handler, error) {
 	router.Post("/api/documents/*", server.handleDocumentSave)
 	router.Get("/api/search", server.handleSearch)
 	router.Post("/api/uploads", server.handleUpload)
+	router.Get("/api/attachments", server.handleAttachmentsList)
 	router.Get("/attachments/{hash}", server.handleAttachment)
 
 	// Collaboration endpoints
@@ -155,18 +167,9 @@ func New(deps Dependencies) (http.Handler, error) {
 
 	router.Handle("/static/*", http.StripPrefix("/static/", http.FileServer(mustSub("static"))))
 
-	if server.webEnabled {
-		router.Get("/app", server.handleAppRedirect)
-		router.Handle("/app/*", http.StripPrefix("/app/", server.appFileServer()))
-	}
-
 	return router, nil
 }
 
-func (s *Server) handleAppRedirect(w http.ResponseWriter, r *http.Request) {
-	http.Redirect(w, r, "/app/", http.StatusMovedPermanently)
-}
-
 func mustSub(path string) http.FileSystem {
 	sub, err := fsSub(path)
 	if err != nil {
diff --git a/apps/server/internal/httpserver/static/auth.js b/apps/server/internal/httpserver/static/auth.js
index c82b980..696ebbe 100644
--- a/apps/server/internal/httpserver/static/auth.js
+++ b/apps/server/internal/httpserver/static/auth.js
@@ -78,6 +78,22 @@
 
   const formJSON = (form) => Object.fromEntries(new FormData(form).entries());
 
+  document.querySelector("[data-initial-setup]")?.addEventListener("submit", async (event) => {
+    event.preventDefault();
+    const form = event.currentTarget;
+    try {
+      await postJSON("/api/setup", {
+        email: form.elements.email.value,
+        displayName: form.elements.displayName.value,
+        password: form.elements.password.value,
+        signupsEnabled: form.elements.signupsEnabled.checked,
+      });
+      window.location.href = "/account";
+    } catch (error) {
+      setStatus("[data-setup-status]", error.message, true);
+    }
+  });
+
   const base64URLToBuffer = (value) => {
     const padded = value.replace(/-/g, "+").replace(/_/g, "/").padEnd(Math.ceil(value.length / 4) * 4, "=");
     const binary = atob(padded);
@@ -350,6 +366,29 @@
     );
   };
 
+  const loadAdminSettings = async () => {
+    const section = document.querySelector("[data-admin-settings-section]");
+    const form = document.querySelector("[data-admin-settings]");
+    if (!section || !form) return;
+    const me = await fetch("/api/auth/me", { credentials: "same-origin" }).then((response) => response.json()).catch(() => null);
+    if (me?.principal?.role !== "admin") return;
+    section.hidden = false;
+    const data = await fetch("/api/admin/settings", { credentials: "same-origin" }).then((response) => response.json());
+    form.elements.signupsEnabled.checked = Boolean(data.settings?.signupsEnabled);
+  };
+
+  document.querySelector("[data-admin-settings]")?.addEventListener("submit", async (event) => {
+    event.preventDefault();
+    try {
+      const form = event.currentTarget;
+      await postJSON("/api/admin/settings", { signupsEnabled: form.elements.signupsEnabled.checked }, { method: "PATCH" });
+      setStatus("[data-admin-settings-status]", "Registration setting saved.");
+    } catch (error) {
+      setStatus("[data-admin-settings-status]", error.message, true);
+    }
+  });
+
   loadTokens().catch(() => {});
   loadAdminUsers().catch(() => {});
+  loadAdminSettings().catch(() => {});
 })();
diff --git a/apps/server/internal/httpserver/static/site.css b/apps/server/internal/httpserver/static/site.css
index 13a1c6f..25f3d86 100644
--- a/apps/server/internal/httpserver/static/site.css
+++ b/apps/server/internal/httpserver/static/site.css
@@ -240,6 +240,16 @@ code {
   font-size: 0.9rem;
 }
 
+.auth-form .auth-choice {
+  display: flex;
+  align-items: center;
+  gap: 0.55rem;
+}
+
+.auth-choice input {
+  width: auto;
+}
+
 .auth-form input,
 .auth-form select,
 .user-row select {
@@ -1817,4 +1827,3 @@ code {
   line-height: 1.5;
 }
 
-
diff --git a/apps/server/internal/httpserver/templates/account.gohtml b/apps/server/internal/httpserver/templates/account.gohtml
index 3024d2e..17f7d42 100644
--- a/apps/server/internal/httpserver/templates/account.gohtml
+++ b/apps/server/internal/httpserver/templates/account.gohtml
@@ -56,6 +56,18 @@
       <p class="form-status" data-admin-users-status></p>
     </section>
 
+    <section class="account-section" data-admin-settings-section hidden>
+      <h2>Registration</h2>
+      <form class="auth-form" data-admin-settings>
+        <label class="auth-choice">
+          <input type="checkbox" name="signupsEnabled" />
+          Allow visitors to create accounts
+        </label>
+        <button type="submit">Save registration setting</button>
+        <p class="form-status" data-admin-settings-status></p>
+      </form>
+    </section>
+
     <section class="account-section account-section--danger">
       <h2>Delete Account</h2>
       <form class="auth-form" data-account-delete>
diff --git a/apps/server/internal/httpserver/templates/base.gohtml b/apps/server/internal/httpserver/templates/base.gohtml
index 68176e1..7eede07 100644
--- a/apps/server/internal/httpserver/templates/base.gohtml
+++ b/apps/server/internal/httpserver/templates/base.gohtml
@@ -50,6 +50,8 @@
     {{ template "search_content" .Data }}
     {{ else if eq .BodyTemplate "login_content" }}
     {{ template "login_content" .Data }}
+    {{ else if eq .BodyTemplate "setup_content" }}
+    {{ template "setup_content" .Data }}
     {{ else if eq .BodyTemplate "account_content" }}
     {{ template "account_content" .Data }}
     {{ else if eq .BodyTemplate "device_verify_content" }}
diff --git a/apps/server/internal/httpserver/templates/login.gohtml b/apps/server/internal/httpserver/templates/login.gohtml
index 1bc8474..4d0e6d5 100644
--- a/apps/server/internal/httpserver/templates/login.gohtml
+++ b/apps/server/internal/httpserver/templates/login.gohtml
@@ -43,12 +43,12 @@
         </div>
       </div>
 
-      <div class="auth-register-cta">
+      {{ if .SignupsEnabled }}<div class="auth-register-cta">
         <button type="button" class="btn-cta" data-register-toggle>Create an Account</button>
-      </div>
+      </div>{{ end }}
     </div>
 
-    <div class="auth-register-panel" data-register-panel hidden>
+    {{ if .SignupsEnabled }}<div class="auth-register-panel" data-register-panel hidden>
       <div class="auth-tabs">
         <div class="auth-tab-list" role="tablist">
           <button type="button" class="auth-tab is-active" role="tab" aria-selected="true" data-tab="passkey-register">Passkey</button>
@@ -93,7 +93,7 @@
       <div class="auth-register-cancel">
         <button type="button" class="btn-secondary" data-register-cancel>Cancel — Back to Log In</button>
       </div>
-    </div>
+    </div>{{ end }}
   </div>
 </section>
 {{ end }}
diff --git a/apps/server/internal/httpserver/templates/setup.gohtml b/apps/server/internal/httpserver/templates/setup.gohtml
new file mode 100644
index 0000000..8c57bf4
--- /dev/null
+++ b/apps/server/internal/httpserver/templates/setup.gohtml
@@ -0,0 +1,34 @@
+{{ define "setup.gohtml" }}{{ template "base" . }}{{ end }}
+
+{{ define "setup_content" }}
+<section class="auth-shell">
+  <div class="auth-panel">
+    <div class="auth-panel__header">
+      <p class="eyebrow">Cairnquire</p>
+      <h1>Initial setup</h1>
+      <p class="auth-note">Create the first administrator account and choose whether visitors can register their own accounts.</p>
+    </div>
+
+    <form class="auth-form" data-initial-setup>
+      <label>
+        Admin email
+        <input type="email" name="email" autocomplete="email" required />
+      </label>
+      <label>
+        Display name
+        <input type="text" name="displayName" autocomplete="name" />
+      </label>
+      <label>
+        Password
+        <input type="password" name="password" autocomplete="new-password" minlength="12" required />
+      </label>
+      <label class="auth-choice">
+        <input type="checkbox" name="signupsEnabled" />
+        Allow visitors to create accounts
+      </label>
+      <button type="submit" class="btn-primary">Finish setup</button>
+      <p class="form-status" data-setup-status></p>
+    </form>
+  </div>
+</section>
+{{ end }}
diff --git a/apps/web/.prettierignore b/apps/web/.prettierignore
deleted file mode 100644
index 30b9507..0000000
--- a/apps/web/.prettierignore
+++ /dev/null
@@ -1,2 +0,0 @@
-dist/
-
diff --git a/apps/web/index.html b/apps/web/index.html
deleted file mode 100644
index 246e26e..0000000
--- a/apps/web/index.html
+++ /dev/null
@@ -1,12 +0,0 @@
-<!doctype html>
-<html lang="en">
-  <head>
-    <meta charset="UTF-8" />
-    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <title>Cairnquire App</title>
-    <script type="module" src="/src/main.tsx"></script>
-  </head>
-  <body>
-    <div id="app"></div>
-  </body>
-</html>
diff --git a/apps/web/package.json b/apps/web/package.json
deleted file mode 100644
index 7ff96e4..0000000
--- a/apps/web/package.json
+++ /dev/null
@@ -1,25 +0,0 @@
-{
-  "name": "cairnquire-web",
-  "version": "0.1.0",
-  "private": true,
-  "type": "module",
-  "scripts": {
-    "dev": "vite",
-    "build": "vite build",
-    "format": "prettier --check .",
-    "typecheck": "tsc --noEmit"
-  },
-  "dependencies": {
-    "katex": "^0.16.45",
-    "lucide-preact": "^1.14.0",
-    "mermaid": "^11.14.0",
-    "preact": "^10.27.2",
-    "preact-iso": "^2.9.3"
-  },
-  "devDependencies": {
-    "@preact/preset-vite": "^2.10.2",
-    "prettier": "^3.6.2",
-    "typescript": "^6.0.3",
-    "vite": "^7.1.12"
-  }
-}
diff --git a/apps/web/src/app.tsx b/apps/web/src/app.tsx
deleted file mode 100644
index 1eadacb..0000000
--- a/apps/web/src/app.tsx
+++ /dev/null
@@ -1,725 +0,0 @@
-import {
-  ChevronRight,
-  Clock3,
-  Database,
-  FileText,
-  Folder,
-  FolderGit2,
-  FolderOpen,
-  LogIn,
-  LogOut,
-  PanelLeftClose,
-  PanelLeftOpen,
-  RefreshCw,
-  Shield,
-  UserPlus,
-  Users,
-} from "lucide-preact";
-import { useEffect, useState } from "preact/hooks";
-
-type Role = "admin" | "editor" | "viewer";
-type View = "workspace" | "users";
-
-type User = {
-  id: string;
-  email: string;
-  displayName: string;
-  role: Role;
-  createdAt: string;
-  lastSeenAt?: string;
-};
-
-type DocumentRecord = {
-  path: string;
-  title: string;
-  currentHash: string;
-  updatedAt: string;
-};
-
-type Workspace = {
-  sourceDir: string;
-  storeDir: string;
-  databasePath: string;
-  documentCount: number;
-  userCount: number;
-  webDistDir: string;
-};
-
-type WorkspaceResponse = {
-  workspace: Workspace;
-  documents: DocumentRecord[];
-};
-
-type Session = {
-  user: User;
-};
-
-type BrowserItem = {
-  type: "folder" | "document";
-  name: string;
-  path: string;
-  document?: DocumentRecord;
-  indexDocument?: DocumentRecord;
-};
-
-type BrowserColumn = {
-  title: string;
-  prefix: string;
-  items: BrowserItem[];
-};
-
-const sessionKey = "mdhub.admin.session";
-
-export function App() {
-  const [session, setSession] = useState<Session | null>(() => readSession());
-  const [activeView, setActiveView] = useState<View>("workspace");
-  const [sidebarOpen, setSidebarOpen] = useState(true);
-  const [users, setUsers] = useState<User[]>([]);
-  const [workspace, setWorkspace] = useState<WorkspaceResponse | null>(null);
-  const [syncing, setSyncing] = useState(false);
-  const [lastSyncedAt, setLastSyncedAt] = useState("");
-  const [activePath, setActivePath] = useState("");
-  const [selectedUserId, setSelectedUserId] = useState("");
-
-  async function refresh() {
-    if (!session) {
-      return;
-    }
-    const [usersResponse, workspaceResponse] = await Promise.all([
-      api<{ users: User[] }>("/api/admin/users"),
-      api<WorkspaceResponse>("/api/admin/workspace"),
-    ]);
-    setUsers(usersResponse.users);
-    setWorkspace(workspaceResponse);
-    setLastSyncedAt(new Date().toISOString());
-  }
-
-  useEffect(() => {
-    void refresh();
-  }, [session?.user.email]);
-
-  useEffect(() => {
-    const documents = workspace?.documents ?? [];
-    if (
-      documents.length > 0 &&
-      !isKnownDocumentLocation(documents, activePath)
-    ) {
-      setActivePath(documents[0].path);
-    }
-  }, [workspace?.documents, activePath]);
-
-  useEffect(() => {
-    if (users.length > 0 && !users.some((user) => user.id === selectedUserId)) {
-      setSelectedUserId(users[0].id);
-    }
-  }, [users, selectedUserId]);
-
-  async function handleLogin(email: string, displayName: string) {
-    const response = await api<{ user: User }>("/api/admin/login", {
-      method: "POST",
-      body: JSON.stringify({ email, displayName, role: "admin" }),
-    });
-    const next = { user: response.user };
-    localStorage.setItem(sessionKey, JSON.stringify(next));
-    setSession(next);
-  }
-
-  async function handleCreateUser(input: {
-    email: string;
-    displayName: string;
-    role: Role;
-  }) {
-    const response = await api<{ user: User }>("/api/admin/users", {
-      method: "POST",
-      body: JSON.stringify(input),
-    });
-    await refresh();
-    setSelectedUserId(response.user.id);
-  }
-
-  async function handleSync() {
-    setSyncing(true);
-    try {
-      await api("/api/admin/workspace/sync", { method: "POST" });
-      await refresh();
-    } finally {
-      setSyncing(false);
-    }
-  }
-
-  function logout() {
-    localStorage.removeItem(sessionKey);
-    setSession(null);
-    setUsers([]);
-    setWorkspace(null);
-    setActivePath("");
-    setSelectedUserId("");
-  }
-
-  if (!session) {
-    return <LoginScreen onLogin={handleLogin} />;
-  }
-
-  const selectedDocument = selectDocument(
-    workspace?.documents ?? [],
-    activePath,
-  );
-  const selectedUser =
-    users.find((user) => user.id === selectedUserId) ?? users[0];
-
-  return (
-    <main class={`admin-shell ${sidebarOpen ? "" : "is-collapsed"}`}>
-      <aside class="admin-sidebar">
-        <div class="sidebar-header">
-          <a class="brand" href="/docs" title="Open public docs">
-            <Shield size={18} />
-            <span>MD Hub</span>
-          </a>
-          <button
-            class="icon-button"
-            type="button"
-            onClick={() => setSidebarOpen((open) => !open)}
-            aria-label={sidebarOpen ? "Collapse sidebar" : "Expand sidebar"}
-          >
-            {sidebarOpen ? (
-              <PanelLeftClose size={17} />
-            ) : (
-              <PanelLeftOpen size={17} />
-            )}
-          </button>
-        </div>
-
-        <nav class="nav-list" aria-label="Admin sections">
-          <button
-            class={activeView === "workspace" ? "is-active" : ""}
-            type="button"
-            onClick={() => setActiveView("workspace")}
-            title="Workspace"
-          >
-            <FolderGit2 size={17} />
-            <span>Workspace</span>
-          </button>
-          <button
-            class={activeView === "users" ? "is-active" : ""}
-            type="button"
-            onClick={() => setActiveView("users")}
-            title="Users"
-          >
-            <Users size={17} />
-            <span>Users</span>
-          </button>
-        </nav>
-
-        <button
-          class="nav-button"
-          type="button"
-          onClick={logout}
-          title="Sign out"
-        >
-          <LogOut size={16} />
-          <span>Sign out</span>
-        </button>
-      </aside>
-
-      <section class="admin-main">
-        <header class="compact-topbar">
-          <div>
-            <span class="section-label">{activeView}</span>
-            <strong>
-              {activeView === "workspace" ? "Documents" : "Accounts"}
-            </strong>
-          </div>
-          <div class="topbar-actions">
-            {activeView === "workspace" && (
-              <button
-                type="button"
-                class="primary-button sync-button"
-                onClick={handleSync}
-                disabled={syncing}
-                aria-label="Sync workspace"
-              >
-                <RefreshCw size={15} />
-                <span>Sync</span>
-              </button>
-            )}
-            <span class="sync-label">
-              <Clock3 size={14} />
-              {syncing
-                ? "Syncing"
-                : lastSyncedAt
-                  ? `Synced ${formatTime(lastSyncedAt)}`
-                  : "Not synced"}
-            </span>
-          </div>
-        </header>
-
-        {activeView === "workspace" ? (
-          <WorkspaceView
-            data={workspace}
-            activePath={activePath}
-            selectedDocument={selectedDocument}
-            onSelectPath={setActivePath}
-          />
-        ) : (
-          <UsersView
-            users={users}
-            selectedUser={selectedUser}
-            onSelectUser={setSelectedUserId}
-            onCreateUser={handleCreateUser}
-          />
-        )}
-      </section>
-    </main>
-  );
-}
-
-function LoginScreen(props: {
-  onLogin: (email: string, displayName: string) => Promise<void>;
-}) {
-  const [email, setEmail] = useState("admin@example.com");
-  const [displayName, setDisplayName] = useState("Admin");
-  const [error, setError] = useState("");
-
-  async function submit(event: Event) {
-    event.preventDefault();
-    setError("");
-    try {
-      await props.onLogin(email, displayName);
-    } catch (cause) {
-      setError(cause instanceof Error ? cause.message : "Login failed");
-    }
-  }
-
-  return (
-    <main class="login-shell">
-      <form class="login-panel" onSubmit={submit}>
-        <div class="login-mark">
-          <Shield size={20} />
-        </div>
-        <h1>Admin login</h1>
-        <label>
-          Email
-          <input
-            type="email"
-            value={email}
-            onInput={(event) => setEmail(event.currentTarget.value)}
-            required
-          />
-        </label>
-        <label>
-          Display name
-          <input
-            type="text"
-            value={displayName}
-            onInput={(event) => setDisplayName(event.currentTarget.value)}
-            required
-          />
-        </label>
-        {error && <p class="form-error">{error}</p>}
-        <button type="submit" class="primary-button">
-          <LogIn size={15} />
-          Sign in
-        </button>
-      </form>
-    </main>
-  );
-}
-
-function WorkspaceView(props: {
-  data: WorkspaceResponse | null;
-  activePath: string;
-  selectedDocument?: DocumentRecord;
-  onSelectPath: (path: string) => void;
-}) {
-  const documents = props.data?.documents ?? [];
-  const columns = buildDocumentColumns(documents, props.activePath);
-
-  return (
-    <div class="workspace-grid">
-      <section class="column-browser" aria-label="Workspace files">
-        {columns.map((column) => (
-          <div class="browser-column" key={column.prefix || "root"}>
-            <header>
-              <Folder size={15} />
-              {column.title}
-            </header>
-            <div class="item-list">
-              {column.items.map((item) => (
-                <button
-                  class={
-                    isActiveItem(item, props.activePath)
-                      ? "list-item is-active"
-                      : "list-item"
-                  }
-                  type="button"
-                  key={`${item.type}:${item.path}`}
-                  onClick={() =>
-                    props.onSelectPath(item.indexDocument?.path ?? item.path)
-                  }
-                >
-                  {item.type === "folder" ? (
-                    isActiveItem(item, props.activePath) ? (
-                      <FolderOpen size={15} />
-                    ) : (
-                      <Folder size={15} />
-                    )
-                  ) : (
-                    <FileText size={15} />
-                  )}
-                  <span>{item.name}</span>
-                  {item.type === "folder" && <ChevronRight size={14} />}
-                </button>
-              ))}
-              {column.items.length === 0 && (
-                <p class="empty-state">No documents</p>
-              )}
-            </div>
-          </div>
-        ))}
-      </section>
-
-      <WorkspaceDetails
-        workspace={props.data?.workspace}
-        document={props.selectedDocument}
-      />
-    </div>
-  );
-}
-
-function WorkspaceDetails(props: {
-  workspace?: Workspace;
-  document?: DocumentRecord;
-}) {
-  return (
-    <aside class="detail-panel">
-      <header class="detail-header">
-        <Database size={17} />
-        <span>Details</span>
-      </header>
-
-      {props.document ? (
-        <>
-          <h2>{props.document.title}</h2>
-          <a class="open-link" href={documentHref(props.document.path)}>
-            Open document
-          </a>
-          <dl class="detail-list">
-            <div>
-              <dt>File</dt>
-              <dd>{props.document.path}</dd>
-            </div>
-            <div>
-              <dt>Hash</dt>
-              <dd>
-                <code>{props.document.currentHash.slice(0, 12)}</code>
-              </dd>
-            </div>
-            <div>
-              <dt>Updated</dt>
-              <dd>{formatDate(props.document.updatedAt)}</dd>
-            </div>
-          </dl>
-        </>
-      ) : (
-        <p class="empty-state">Select a document.</p>
-      )}
-
-      {props.workspace && (
-        <dl class="detail-list compact">
-          <div>
-            <dt>Documents</dt>
-            <dd>{props.workspace.documentCount}</dd>
-          </div>
-          <div>
-            <dt>Content</dt>
-            <dd>{props.workspace.sourceDir}</dd>
-          </div>
-          <div>
-            <dt>Storage</dt>
-            <dd>{props.workspace.storeDir}</dd>
-          </div>
-          <div>
-            <dt>Database</dt>
-            <dd>{props.workspace.databasePath}</dd>
-          </div>
-        </dl>
-      )}
-    </aside>
-  );
-}
-
-function UsersView(props: {
-  users: User[];
-  selectedUser?: User;
-  onSelectUser: (id: string) => void;
-  onCreateUser: (input: {
-    email: string;
-    displayName: string;
-    role: Role;
-  }) => Promise<void>;
-}) {
-  return (
-    <div class="workspace-grid">
-      <section class="browser-column user-column" aria-label="Users">
-        <header>Users</header>
-        <div class="item-list">
-          {props.users.map((user) => (
-            <button
-              class={
-                user.id === props.selectedUser?.id
-                  ? "list-item is-active"
-                  : "list-item"
-              }
-              type="button"
-              key={user.id}
-              onClick={() => props.onSelectUser(user.id)}
-            >
-              <Users size={15} />
-              <span>{user.displayName}</span>
-              <small>{user.role}</small>
-            </button>
-          ))}
-        </div>
-      </section>
-
-      <UserDetails
-        selectedUser={props.selectedUser}
-        onCreateUser={props.onCreateUser}
-      />
-    </div>
-  );
-}
-
-function UserDetails(props: {
-  selectedUser?: User;
-  onCreateUser: (input: {
-    email: string;
-    displayName: string;
-    role: Role;
-  }) => Promise<void>;
-}) {
-  const [email, setEmail] = useState("");
-  const [displayName, setDisplayName] = useState("");
-  const [role, setRole] = useState<Role>("viewer");
-
-  async function submit(event: Event) {
-    event.preventDefault();
-    await props.onCreateUser({ email, displayName, role });
-    setEmail("");
-    setDisplayName("");
-    setRole("viewer");
-  }
-
-  return (
-    <aside class="detail-panel">
-      <header class="detail-header">
-        <UserPlus size={17} />
-        <span>Add user</span>
-      </header>
-
-      <form class="stack-form" onSubmit={submit}>
-        <input
-          type="email"
-          placeholder="email@example.com"
-          value={email}
-          onInput={(event) => setEmail(event.currentTarget.value)}
-          required
-        />
-        <input
-          type="text"
-          placeholder="Display name"
-          value={displayName}
-          onInput={(event) => setDisplayName(event.currentTarget.value)}
-          required
-        />
-        <select
-          value={role}
-          onChange={(event) => setRole(event.currentTarget.value as Role)}
-        >
-          <option value="viewer">Viewer</option>
-          <option value="editor">Editor</option>
-          <option value="admin">Admin</option>
-        </select>
-        <button type="submit" class="primary-button">
-          <UserPlus size={15} />
-          Add
-        </button>
-      </form>
-
-      {props.selectedUser && (
-        <>
-          <h2>{props.selectedUser.displayName}</h2>
-          <dl class="detail-list">
-            <div>
-              <dt>Email</dt>
-              <dd>{props.selectedUser.email}</dd>
-            </div>
-            <div>
-              <dt>Role</dt>
-              <dd>{props.selectedUser.role}</dd>
-            </div>
-            <div>
-              <dt>Created</dt>
-              <dd>{formatDate(props.selectedUser.createdAt)}</dd>
-            </div>
-          </dl>
-        </>
-      )}
-    </aside>
-  );
-}
-
-function buildDocumentColumns(
-  documents: DocumentRecord[],
-  activePath: string,
-): BrowserColumn[] {
-  const activeSegments = activePath.split("/").filter(Boolean);
-  const prefixes = [""];
-  const maxFolderDepth = activePath.endsWith(".md")
-    ? activeSegments.length - 1
-    : activeSegments.length;
-
-  for (let index = 0; index < maxFolderDepth; index += 1) {
-    prefixes.push(activeSegments.slice(0, index + 1).join("/"));
-  }
-
-  return prefixes.map((prefix) => ({
-    title: prefix ? folderLabel(prefix) : "Documents",
-    prefix,
-    items: collectItems(documents, prefix),
-  }));
-}
-
-function collectItems(
-  documents: DocumentRecord[],
-  prefix: string,
-): BrowserItem[] {
-  const items = new Map<string, BrowserItem>();
-  const prefixWithSlash = prefix ? `${prefix}/` : "";
-
-  for (const document of documents) {
-    if (!document.path.startsWith(prefixWithSlash)) {
-      continue;
-    }
-
-    const remainder = document.path.slice(prefixWithSlash.length);
-    if (!remainder || remainder === "index.md") {
-      continue;
-    }
-
-    const [nextSegment, ...rest] = remainder.split("/");
-    if (rest.length > 0) {
-      const folderPath = `${prefixWithSlash}${nextSegment}`;
-      const indexDocument = documents.find(
-        (candidate) => candidate.path === `${folderPath}/index.md`,
-      );
-      items.set(folderPath, {
-        type: "folder",
-        name: folderLabel(nextSegment),
-        path: folderPath,
-        indexDocument,
-      });
-      continue;
-    }
-
-    items.set(document.path, {
-      type: "document",
-      name: document.title || fileLabel(document.path),
-      path: document.path,
-      document,
-    });
-  }
-
-  return [...items.values()].sort((left, right) => {
-    if (left.type !== right.type) {
-      return left.type === "folder" ? -1 : 1;
-    }
-    return left.name.localeCompare(right.name);
-  });
-}
-
-function selectDocument(documents: DocumentRecord[], activePath: string) {
-  if (!activePath) {
-    return documents[0];
-  }
-  return (
-    documents.find((document) => document.path === activePath) ??
-    documents.find((document) => document.path === `${activePath}/index.md`)
-  );
-}
-
-function isKnownDocumentLocation(documents: DocumentRecord[], path: string) {
-  if (!path) {
-    return false;
-  }
-  return documents.some(
-    (document) =>
-      document.path === path ||
-      document.path === `${path}/index.md` ||
-      document.path.startsWith(`${path}/`),
-  );
-}
-
-function isActiveItem(item: BrowserItem, activePath: string) {
-  return (
-    activePath === item.path ||
-    activePath === item.indexDocument?.path ||
-    activePath.startsWith(`${item.path}/`)
-  );
-}
-
-function documentHref(path: string) {
-  return `/docs/${path.replace(/(^|\/)index\.md$/, "").replace(/\.md$/, "")}`;
-}
-
-function folderLabel(path: string) {
-  return fileLabel(path.split("/").filter(Boolean).at(-1) ?? path);
-}
-
-function fileLabel(path: string) {
-  return path
-    .replace(/\.md$/, "")
-    .replace(/[-_]/g, " ")
-    .replace(/\b\w/g, (match) => match.toUpperCase());
-}
-
-async function api<T = unknown>(path: string, init?: RequestInit): Promise<T> {
-  const response = await fetch(path, {
-    ...init,
-    headers: {
-      "Content-Type": "application/json",
-      ...(init?.headers ?? {}),
-    },
-  });
-  if (!response.ok) {
-    const text = await response.text();
-    throw new Error(text || response.statusText);
-  }
-  return response.json() as Promise<T>;
-}
-
-function readSession(): Session | null {
-  try {
-    const raw = localStorage.getItem(sessionKey);
-    return raw ? (JSON.parse(raw) as Session) : null;
-  } catch {
-    return null;
-  }
-}
-
-function formatDate(value: string) {
-  if (!value) {
-    return "";
-  }
-  return new Intl.DateTimeFormat(undefined, {
-    dateStyle: "medium",
-    timeStyle: "short",
-  }).format(new Date(value));
-}
-
-function formatTime(value: string) {
-  return new Intl.DateTimeFormat(undefined, {
-    hour: "numeric",
-    minute: "2-digit",
-  }).format(new Date(value));
-}
diff --git a/apps/web/src/main.tsx b/apps/web/src/main.tsx
deleted file mode 100644
index a977c56..0000000
--- a/apps/web/src/main.tsx
+++ /dev/null
@@ -1,11 +0,0 @@
-import { render } from "preact";
-import { LocationProvider, Route, Router } from "preact-iso";
-import { App } from "./app";
-import "./styles.css";
-
-render(
-  <LocationProvider scope="/app">
-    <Router>{[<Route path="/*" component={App} />]}</Router>
-  </LocationProvider>,
-  document.getElementById("app")!,
-);
diff --git a/apps/web/src/styles.css b/apps/web/src/styles.css
deleted file mode 100644
index 6059151..0000000
--- a/apps/web/src/styles.css
+++ /dev/null
@@ -1,504 +0,0 @@
-:root {
-  color-scheme: light;
-  --bg: #f4f1ea;
-  --surface: rgba(255, 255, 255, 0.76);
-  --surface-strong: #ffffff;
-  --text: #202227;
-  --muted: #626775;
-  --accent: #1947e5;
-  --accent-soft: rgba(25, 71, 229, 0.1);
-  --border: rgba(32, 34, 39, 0.12);
-  --shadow: 0 18px 54px rgba(25, 71, 229, 0.1);
-  font-family: "Iowan Old Style", "Palatino Linotype", "Book Antiqua", serif;
-}
-
-* {
-  box-sizing: border-box;
-}
-
-body {
-  margin: 0;
-  min-height: 100vh;
-  color: var(--text);
-  background:
-    radial-gradient(
-      circle at top left,
-      rgba(25, 71, 229, 0.12),
-      transparent 34%
-    ),
-    radial-gradient(
-      circle at bottom right,
-      rgba(15, 138, 108, 0.14),
-      transparent 30%
-    ),
-    linear-gradient(180deg, #fbf8f2 0%, var(--bg) 100%);
-}
-
-button,
-input,
-select {
-  font: inherit;
-}
-
-button {
-  cursor: pointer;
-}
-
-button:disabled {
-  cursor: wait;
-  opacity: 0.72;
-}
-
-a {
-  color: var(--accent);
-}
-
-code {
-  font-family: ui-monospace, SFMono-Regular, monospace;
-}
-
-.admin-shell {
-  display: grid;
-  grid-template-columns: 11rem minmax(0, 1fr);
-  min-height: 100vh;
-  transition: grid-template-columns 160ms ease;
-}
-
-.admin-shell.is-collapsed {
-  grid-template-columns: 4rem minmax(0, 1fr);
-}
-
-.admin-sidebar {
-  display: flex;
-  min-width: 0;
-  flex-direction: column;
-  gap: 1rem;
-  padding: 0.8rem;
-  border-right: 1px solid var(--border);
-  background: rgba(255, 255, 255, 0.55);
-  backdrop-filter: blur(14px);
-}
-
-.sidebar-header,
-.compact-topbar,
-.topbar-actions,
-.detail-header,
-.brand,
-.nav-list button,
-.nav-button,
-.icon-button,
-.primary-button,
-.sync-label,
-.list-item {
-  display: flex;
-  align-items: center;
-}
-
-.sidebar-header {
-  justify-content: space-between;
-  gap: 0.4rem;
-}
-
-.brand {
-  min-width: 0;
-  gap: 0.5rem;
-  color: var(--text);
-  font-weight: 700;
-  text-decoration: none;
-}
-
-.brand span,
-.nav-list span,
-.nav-button span {
-  overflow: hidden;
-  text-overflow: ellipsis;
-  white-space: nowrap;
-}
-
-.icon-button,
-.nav-list button,
-.nav-button {
-  border: 0;
-  color: var(--text);
-  background: transparent;
-}
-
-.icon-button {
-  justify-content: center;
-  width: 2rem;
-  height: 2rem;
-  flex: 0 0 auto;
-  border-radius: 0.45rem;
-}
-
-.icon-button:hover,
-.nav-list button:hover,
-.nav-button:hover,
-.nav-list button.is-active {
-  color: var(--accent);
-  background: var(--accent-soft);
-}
-
-.nav-list {
-  display: grid;
-  gap: 0.25rem;
-}
-
-.nav-list button,
-.nav-button {
-  min-width: 0;
-  min-height: 2.25rem;
-  gap: 0.55rem;
-  padding: 0.45rem 0.55rem;
-  border-radius: 0.5rem;
-  text-align: left;
-}
-
-.nav-button {
-  margin-top: auto;
-}
-
-.admin-shell.is-collapsed .brand span,
-.admin-shell.is-collapsed .nav-list span,
-.admin-shell.is-collapsed .nav-button span {
-  display: none;
-}
-
-.admin-shell.is-collapsed .sidebar-header,
-.admin-shell.is-collapsed .nav-list button,
-.admin-shell.is-collapsed .nav-button {
-  justify-content: center;
-}
-
-.admin-main {
-  min-width: 0;
-  padding: 0.85rem;
-}
-
-.compact-topbar {
-  min-height: 3rem;
-  justify-content: space-between;
-  gap: 1rem;
-  margin-bottom: 0.8rem;
-}
-
-.compact-topbar > div:first-child {
-  display: grid;
-  gap: 0.1rem;
-}
-
-.section-label {
-  color: var(--accent);
-  font-family: ui-monospace, SFMono-Regular, monospace;
-  font-size: 0.7rem;
-  letter-spacing: 0.12em;
-  text-transform: uppercase;
-}
-
-.topbar-actions {
-  gap: 0.55rem;
-}
-
-.sync-label {
-  gap: 0.4rem;
-  min-height: 2.1rem;
-  padding: 0.25rem 0.55rem;
-  border: 1px solid var(--border);
-  border-radius: 999px;
-  color: var(--muted);
-  background: rgba(255, 255, 255, 0.58);
-  font-size: 0.92rem;
-}
-
-.primary-button {
-  justify-content: center;
-  gap: 0.45rem;
-  min-height: 2.25rem;
-  padding: 0.45rem 0.75rem;
-  border: 0;
-  border-radius: 0.5rem;
-  color: white;
-  background: var(--accent);
-}
-
-.sync-button {
-  width: 2.25rem;
-  padding-inline: 0;
-  flex: 0 0 auto;
-}
-
-.sync-button span {
-  display: none;
-}
-
-.workspace-grid {
-  display: grid;
-  grid-template-columns: minmax(12rem, 1fr) clamp(11.5rem, 20vw, 15rem);
-  gap: 0.65rem;
-  min-height: calc(100vh - 4.8rem);
-}
-
-.column-browser {
-  display: grid;
-  grid-auto-columns: minmax(11rem, 1fr);
-  grid-auto-flow: column;
-  gap: 0.65rem;
-  min-width: 0;
-  overflow-x: auto;
-}
-
-.browser-column,
-.detail-panel,
-.login-panel {
-  min-width: 0;
-  border: 1px solid var(--border);
-  border-radius: 0.55rem;
-  background: var(--surface);
-  box-shadow: var(--shadow);
-}
-
-.browser-column,
-.detail-panel {
-  overflow: hidden;
-}
-
-.browser-column > header,
-.detail-header {
-  min-height: 2.5rem;
-  padding: 0.7rem 0.8rem;
-  border-bottom: 1px solid var(--border);
-  color: var(--muted);
-  font-family: ui-monospace, SFMono-Regular, monospace;
-  font-size: 0.72rem;
-  letter-spacing: 0.1em;
-  text-transform: uppercase;
-}
-
-.detail-header {
-  gap: 0.45rem;
-}
-
-.item-list {
-  display: grid;
-  gap: 0.15rem;
-  padding: 0.45rem;
-}
-
-.list-item {
-  width: 100%;
-  min-width: 0;
-  gap: 0.45rem;
-  min-height: 2.35rem;
-  padding: 0.45rem 0.5rem;
-  border: 0;
-  border-radius: 0.42rem;
-  color: var(--text);
-  background: transparent;
-  text-align: left;
-}
-
-.list-item:hover,
-.list-item.is-active {
-  color: var(--accent);
-  background: var(--accent-soft);
-}
-
-.list-item span {
-  min-width: 0;
-  flex: 1;
-  overflow: hidden;
-  text-overflow: ellipsis;
-  white-space: nowrap;
-}
-
-.list-item small {
-  color: var(--muted);
-  font-family: ui-monospace, SFMono-Regular, monospace;
-  font-size: 0.72rem;
-  text-transform: uppercase;
-}
-
-.user-column {
-  min-height: 22rem;
-}
-
-.detail-panel {
-  padding-bottom: 0.9rem;
-}
-
-.detail-panel h2 {
-  margin: 0.85rem 0.85rem 0.35rem;
-  font-size: 1.45rem;
-  line-height: 1.05;
-}
-
-.open-link {
-  display: inline-flex;
-  margin: 0 0.85rem 0.7rem;
-  font-size: 0.95rem;
-}
-
-.detail-list {
-  display: grid;
-  gap: 0.5rem;
-  margin: 0;
-  padding: 0.85rem;
-}
-
-.detail-list.compact {
-  margin-top: 0.35rem;
-  border-top: 1px solid var(--border);
-}
-
-.detail-list div {
-  min-width: 0;
-}
-
-.detail-list dt {
-  margin-bottom: 0.16rem;
-  color: var(--muted);
-  font-family: ui-monospace, SFMono-Regular, monospace;
-  font-size: 0.72rem;
-  letter-spacing: 0.08em;
-  text-transform: uppercase;
-}
-
-.detail-list dd {
-  min-width: 0;
-  margin: 0;
-  overflow: hidden;
-  text-overflow: ellipsis;
-  white-space: nowrap;
-}
-
-.stack-form {
-  display: grid;
-  gap: 0.5rem;
-  padding: 0.85rem;
-  border-bottom: 1px solid var(--border);
-}
-
-.stack-form input,
-.stack-form select,
-.login-panel input {
-  width: 100%;
-  min-height: 2.25rem;
-  padding: 0.45rem 0.6rem;
-  border: 1px solid var(--border);
-  border-radius: 0.45rem;
-  color: var(--text);
-  background: rgba(255, 255, 255, 0.72);
-}
-
-.empty-state {
-  margin: 0;
-  padding: 0.8rem;
-  color: var(--muted);
-}
-
-.login-shell {
-  display: grid;
-  min-height: 100vh;
-  place-items: center;
-  padding: 1rem;
-}
-
-.login-panel {
-  display: grid;
-  width: min(23rem, 100%);
-  gap: 0.75rem;
-  padding: 1rem;
-}
-
-.login-panel h1 {
-  margin: 0;
-  font-size: 1.6rem;
-}
-
-.login-panel label {
-  display: grid;
-  gap: 0.3rem;
-  color: var(--muted);
-}
-
-.login-mark {
-  display: inline-flex;
-  width: 2.4rem;
-  height: 2.4rem;
-  align-items: center;
-  justify-content: center;
-  border-radius: 0.5rem;
-  color: white;
-  background: var(--accent);
-}
-
-.form-error {
-  margin: 0;
-  color: #a43131;
-}
-
-@media (max-width: 1080px) {
-  .admin-shell,
-  .admin-shell.is-collapsed {
-    grid-template-columns: 1fr;
-  }
-
-  .admin-sidebar {
-    position: sticky;
-    top: 0;
-    z-index: 2;
-    flex-direction: row;
-    align-items: center;
-  }
-
-  .nav-list {
-    display: flex;
-  }
-
-  .nav-button {
-    margin-top: 0;
-  }
-
-  .admin-shell.is-collapsed .brand span,
-  .admin-shell.is-collapsed .nav-list span,
-  .admin-shell.is-collapsed .nav-button span {
-    display: inline;
-  }
-
-  .workspace-grid {
-    grid-template-columns: 1fr;
-  }
-
-  .sync-label {
-    display: none;
-  }
-
-  .column-browser {
-    min-height: 18rem;
-  }
-}
-
-@media (max-width: 640px) {
-  .admin-sidebar,
-  .compact-topbar {
-    align-items: flex-start;
-    flex-direction: column;
-  }
-
-  .sidebar-header,
-  .topbar-actions,
-  .nav-list {
-    width: 100%;
-  }
-
-  .nav-list button,
-  .nav-button,
-  .primary-button {
-    width: 100%;
-  }
-
-  .column-browser {
-    grid-auto-flow: row;
-    grid-auto-columns: auto;
-  }
-}
diff --git a/apps/web/src/vite-env.d.ts b/apps/web/src/vite-env.d.ts
deleted file mode 100644
index a8e86d8..0000000
--- a/apps/web/src/vite-env.d.ts
+++ /dev/null
@@ -1,6 +0,0 @@
-/// <reference types="vite/client" />
-
-declare module "*.css" {
-  const content: string;
-  export default content;
-}
diff --git a/apps/web/tsconfig.json b/apps/web/tsconfig.json
deleted file mode 100644
index c8fe083..0000000
--- a/apps/web/tsconfig.json
+++ /dev/null
@@ -1,21 +0,0 @@
-{
-  "compilerOptions": {
-    "target": "ES2022",
-    "useDefineForClassFields": true,
-    "lib": ["DOM", "ES2022"],
-    "allowJs": false,
-    "skipLibCheck": true,
-    "esModuleInterop": true,
-    "allowSyntheticDefaultImports": true,
-    "strict": true,
-    "forceConsistentCasingInFileNames": true,
-    "module": "ESNext",
-    "moduleResolution": "Bundler",
-    "resolveJsonModule": true,
-    "isolatedModules": true,
-    "noEmit": true,
-    "jsx": "react-jsx",
-    "jsxImportSource": "preact"
-  },
-  "include": ["src"]
-}
diff --git a/apps/web/vite.config.ts b/apps/web/vite.config.ts
deleted file mode 100644
index c68e6a2..0000000
--- a/apps/web/vite.config.ts
+++ /dev/null
@@ -1,50 +0,0 @@
-import { defineConfig } from "vite";
-import preact from "@preact/preset-vite";
-
-const serverTarget = "http://localhost:8080";
-
-export default defineConfig({
-  base: "/app/",
-  plugins: [preact()],
-  build: {
-    outDir: "dist",
-    sourcemap: true,
-  },
-  server: {
-    port: 5173,
-    proxy: {
-      "/api": {
-        target: serverTarget,
-        changeOrigin: true,
-      },
-      "/attachments": {
-        target: serverTarget,
-        changeOrigin: true,
-      },
-      "/docs": {
-        target: serverTarget,
-        changeOrigin: true,
-      },
-      "/health": {
-        target: serverTarget,
-        changeOrigin: true,
-      },
-      "/static": {
-        target: serverTarget,
-        changeOrigin: true,
-      },
-      "/sw.js": {
-        target: serverTarget,
-        changeOrigin: true,
-      },
-      "/ws": {
-        target: "ws://localhost:8080",
-        ws: true,
-      },
-      "^/app$": {
-        target: serverTarget,
-        changeOrigin: true,
-      },
-    },
-  },
-});
diff --git a/docker-compose.yml b/docker-compose.yml
index 0ac286f..dc44f59 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -10,15 +10,14 @@ services:
       CAIRNQUIRE_DATABASE_PATH: "/workspace/data/db.sqlite"
       CAIRNQUIRE_CONTENT_SOURCE_DIR: "/workspace/content"
       CAIRNQUIRE_CONTENT_STORE_DIR: "/workspace/data/files"
-      CAIRNQUIRE_WEB_DIST_DIR: "/workspace/web-dist"
-      CAIRNQUIRE_PUBLIC_ORIGIN: "https://cairnquire.bendtstudio.com"
+      CAIRNQUIRE_PUBLIC_ORIGIN: "${CAIRNQUIRE_PUBLIC_ORIGIN:?Set CAIRNQUIRE_PUBLIC_ORIGIN in .env}"
+      CAIRNQUIRE_EMAIL_SMTP_HOST: "${CAIRNQUIRE_EMAIL_SMTP_HOST:-mailpit}"
+      CAIRNQUIRE_EMAIL_SMTP_PORT: "${CAIRNQUIRE_EMAIL_SMTP_PORT:-1025}"
+      CAIRNQUIRE_EMAIL_FROM: "${CAIRNQUIRE_EMAIL_FROM:-notifications@cairnquire.local}"
+      CAIRNQUIRE_LOG_LEVEL: "${CAIRNQUIRE_LOG_LEVEL:-INFO}"
     volumes:
       - ./content:/workspace/content
       - ./data:/workspace/data
-    environment:
-      CAIRNQUIRE_EMAIL_SMTP_HOST: mailpit
-      CAIRNQUIRE_EMAIL_SMTP_PORT: "1025"
-      CAIRNQUIRE_EMAIL_FROM: "notifications@cairnquire.local"
     healthcheck:
       test: ["CMD", "curl", "--fail", "http://127.0.0.1:8080/health"]
       interval: 10s
diff --git a/mise.toml b/mise.toml
index 7ccdf1e..7dc9279 100644
--- a/mise.toml
+++ b/mise.toml
@@ -1,23 +1,5 @@
 [tools]
 go = "1.24.2"
-node = "24"
-pnpm = "10.10.0"
-
-[tasks.web-install]
-description = "Install web dependencies"
-dir = "apps/web"
-run = "pnpm install --frozen-lockfile"
-
-[tasks.web-build]
-description = "Build the web app"
-depends = ["web-install"]
-dir = "apps/web"
-run = "pnpm run build"
-
-[tasks.web-dev]
-description = "Start the Vite dev server"
-dir = "apps/web"
-run = "pnpm run dev"
 
 [tasks.server-run]
 description = "Run the Go server"
@@ -37,33 +19,12 @@ run = "CGO_ENABLED=1 go test ./..."
 [tasks.dev-server]
 description = "Run the Go server with air"
 dir = "apps/server"
-run = "CAIRNQUIRE_DEV_VITE_URL=http://localhost:5173 air"
-
-[tasks.dev-web]
-description = "Alias for the Vite dev server"
-depends = ["web-dev"]
-run = "true"
+run = "air"
 
 [tasks.dev]
-description = "Run the Go and Vite dev servers"
-run = '''
-printf 'Starting dev servers...\n'
-printf '  - Go server (with air live reload) on http://localhost:8080\n'
-printf '  - Vite dev server on http://localhost:5173\n\n'
-printf 'Access the app at http://localhost:8080/app/\n\n'
-
-mise run dev-server &
-server_pid=$!
-mise run dev-web &
-web_pid=$!
-
-cleanup() {
-  kill "$server_pid" "$web_pid" 2>/dev/null || true
-}
-
-trap cleanup EXIT INT TERM
-wait "$server_pid" "$web_pid"
-'''
+description = "Start the Go server with live reload"
+depends = ["dev-server"]
+run = "true"
 
 [tasks.docker-build]
 description = "Build the Docker image"
@@ -74,13 +35,11 @@ description = "Run format checks"
 run = '''
 cd apps/server
 go fmt ./...
-cd ../web
-pnpm run format
 '''
 
 [tasks.ci]
 description = "Run the core CI checks"
-depends = ["web-build", "server-test", "server-build"]
+depends = ["server-test", "server-build"]
 run = "true"
 
 [tasks.vulncheck]
diff --git a/package.json b/package.json
deleted file mode 100644
index 225ec7d..0000000
--- a/package.json
+++ /dev/null
@@ -1,11 +0,0 @@
-{
-  "name": "cairnquire",
-  "version": "1.0.0",
-  "private": true,
-  "packageManager": "pnpm@10.10.0",
-  "scripts": {
-    "dev": "pnpm --filter web dev",
-    "build": "pnpm --filter web build",
-    "typecheck": "pnpm --filter web typecheck"
-  }
-}
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
deleted file mode 100644
index f13dad8..0000000
--- a/pnpm-lock.yaml
+++ /dev/null
@@ -1,2279 +0,0 @@
-lockfileVersion: '9.0'
-
-settings:
-  autoInstallPeers: true
-  excludeLinksFromLockfile: false
-
-importers:
-
-  .: {}
-
-  apps/web:
-    dependencies:
-      katex:
-        specifier: ^0.16.45
-        version: 0.16.45
-      lucide-preact:
-        specifier: ^1.14.0
-        version: 1.14.0(preact@10.29.1)
-      mermaid:
-        specifier: ^11.14.0
-        version: 11.14.0
-      preact:
-        specifier: ^10.27.2
-        version: 10.29.1
-      preact-iso:
-        specifier: ^2.9.3
-        version: 2.11.1(preact-render-to-string@6.6.7(preact@10.29.1))(preact@10.29.1)
-    devDependencies:
-      '@preact/preset-vite':
-        specifier: ^2.10.2
-        version: 2.10.5(@babel/core@7.29.0)(preact@10.29.1)(rollup@4.60.2)(vite@7.3.2)
-      prettier:
-        specifier: ^3.6.2
-        version: 3.8.3
-      typescript:
-        specifier: ^6.0.3
-        version: 6.0.3
-      vite:
-        specifier: ^7.1.12
-        version: 7.3.2
-
-packages:
-
-  '@antfu/install-pkg@1.1.0':
-    resolution: {integrity: sha512-MGQsmw10ZyI+EJo45CdSER4zEb+p31LpDAFp2Z3gkSd1yqVZGi0Ebx++YTEMonJy4oChEMLsxZ64j8FH6sSqtQ==}
-
-  '@babel/code-frame@7.29.0':
-    resolution: {integrity: sha512-9NhCeYjq9+3uxgdtp20LSiJXJvN0FeCtNGpJxuMFZ1Kv3cWUNb6DOhJwUvcVCzKGR66cw4njwM6hrJLqgOwbcw==}
-    engines: {node: '>=6.9.0'}
-
-  '@babel/compat-data@7.29.0':
-    resolution: {integrity: sha512-T1NCJqT/j9+cn8fvkt7jtwbLBfLC/1y1c7NtCeXFRgzGTsafi68MRv8yzkYSapBnFA6L3U2VSc02ciDzoAJhJg==}
-    engines: {node: '>=6.9.0'}
-
-  '@babel/core@7.29.0':
-    resolution: {integrity: sha512-CGOfOJqWjg2qW/Mb6zNsDm+u5vFQ8DxXfbM09z69p5Z6+mE1ikP2jUXw+j42Pf1XTYED2Rni5f95npYeuwMDQA==}
-    engines: {node: '>=6.9.0'}
-
-  '@babel/generator@7.29.1':
-    resolution: {integrity: sha512-qsaF+9Qcm2Qv8SRIMMscAvG4O3lJ0F1GuMo5HR/Bp02LopNgnZBC/EkbevHFeGs4ls/oPz9v+Bsmzbkbe+0dUw==}
-    engines: {node: '>=6.9.0'}
-
-  '@babel/helper-annotate-as-pure@7.27.3':
-    resolution: {integrity: sha512-fXSwMQqitTGeHLBC08Eq5yXz2m37E4pJX1qAU1+2cNedz/ifv/bVXft90VeSav5nFO61EcNgwr0aJxbyPaWBPg==}
-    engines: {node: '>=6.9.0'}
-
-  '@babel/helper-compilation-targets@7.28.6':
-    resolution: {integrity: sha512-JYtls3hqi15fcx5GaSNL7SCTJ2MNmjrkHXg4FSpOA/grxK8KwyZ5bubHsCq8FXCkua6xhuaaBit+3b7+VZRfcA==}
-    engines: {node: '>=6.9.0'}
-
-  '@babel/helper-globals@7.28.0':
-    resolution: {integrity: sha512-+W6cISkXFa1jXsDEdYA8HeevQT/FULhxzR99pxphltZcVaugps53THCeiWA8SguxxpSp3gKPiuYfSWopkLQ4hw==}
-    engines: {node: '>=6.9.0'}
-
-  '@babel/helper-module-imports@7.28.6':
-    resolution: {integrity: sha512-l5XkZK7r7wa9LucGw9LwZyyCUscb4x37JWTPz7swwFE/0FMQAGpiWUZn8u9DzkSBWEcK25jmvubfpw2dnAMdbw==}
-    engines: {node: '>=6.9.0'}
-
-  '@babel/helper-module-transforms@7.28.6':
-    resolution: {integrity: sha512-67oXFAYr2cDLDVGLXTEABjdBJZ6drElUSI7WKp70NrpyISso3plG9SAGEF6y7zbha/wOzUByWWTJvEDVNIUGcA==}
-    engines: {node: '>=6.9.0'}
-    peerDependencies:
-      '@babel/core': ^7.0.0
-
-  '@babel/helper-plugin-utils@7.28.6':
-    resolution: {integrity: sha512-S9gzZ/bz83GRysI7gAD4wPT/AI3uCnY+9xn+Mx/KPs2JwHJIz1W8PZkg2cqyt3RNOBM8ejcXhV6y8Og7ly/Dug==}
-    engines: {node: '>=6.9.0'}
-
-  '@babel/helper-string-parser@7.27.1':
-    resolution: {integrity: sha512-qMlSxKbpRlAridDExk92nSobyDdpPijUq2DW6oDnUqd0iOGxmQjyqhMIihI9+zv4LPyZdRje2cavWPbCbWm3eA==}
-    engines: {node: '>=6.9.0'}
-
-  '@babel/helper-validator-identifier@7.28.5':
-    resolution: {integrity: sha512-qSs4ifwzKJSV39ucNjsvc6WVHs6b7S03sOh2OcHF9UHfVPqWWALUsNUVzhSBiItjRZoLHx7nIarVjqKVusUZ1Q==}
-    engines: {node: '>=6.9.0'}
-
-  '@babel/helper-validator-option@7.27.1':
-    resolution: {integrity: sha512-YvjJow9FxbhFFKDSuFnVCe2WxXk1zWc22fFePVNEaWJEu8IrZVlda6N0uHwzZrUM1il7NC9Mlp4MaJYbYd9JSg==}
-    engines: {node: '>=6.9.0'}
-
-  '@babel/helpers@7.29.2':
-    resolution: {integrity: sha512-HoGuUs4sCZNezVEKdVcwqmZN8GoHirLUcLaYVNBK2J0DadGtdcqgr3BCbvH8+XUo4NGjNl3VOtSjEKNzqfFgKw==}
-    engines: {node: '>=6.9.0'}
-
-  '@babel/parser@7.29.2':
-    resolution: {integrity: sha512-4GgRzy/+fsBa72/RZVJmGKPmZu9Byn8o4MoLpmNe1m8ZfYnz5emHLQz3U4gLud6Zwl0RZIcgiLD7Uq7ySFuDLA==}
-    engines: {node: '>=6.0.0'}
-    hasBin: true
-
-  '@babel/plugin-syntax-jsx@7.28.6':
-    resolution: {integrity: sha512-wgEmr06G6sIpqr8YDwA2dSRTE3bJ+V0IfpzfSY3Lfgd7YWOaAdlykvJi13ZKBt8cZHfgH1IXN+CL656W3uUa4w==}
-    engines: {node: '>=6.9.0'}
-    peerDependencies:
-      '@babel/core': ^7.0.0-0
-
-  '@babel/plugin-transform-react-jsx-development@7.27.1':
-    resolution: {integrity: sha512-ykDdF5yI4f1WrAolLqeF3hmYU12j9ntLQl/AOG1HAS21jxyg1Q0/J/tpREuYLfatGdGmXp/3yS0ZA76kOlVq9Q==}
-    engines: {node: '>=6.9.0'}
-    peerDependencies:
-      '@babel/core': ^7.0.0-0
-
-  '@babel/plugin-transform-react-jsx@7.28.6':
-    resolution: {integrity: sha512-61bxqhiRfAACulXSLd/GxqmAedUSrRZIu/cbaT18T1CetkTmtDN15it7i80ru4DVqRK1WMxQhXs+Lf9kajm5Ow==}
-    engines: {node: '>=6.9.0'}
-    peerDependencies:
-      '@babel/core': ^7.0.0-0
-
-  '@babel/template@7.28.6':
-    resolution: {integrity: sha512-YA6Ma2KsCdGb+WC6UpBVFJGXL58MDA6oyONbjyF/+5sBgxY/dwkhLogbMT2GXXyU84/IhRw/2D1Os1B/giz+BQ==}
-    engines: {node: '>=6.9.0'}
-
-  '@babel/traverse@7.29.0':
-    resolution: {integrity: sha512-4HPiQr0X7+waHfyXPZpWPfWL/J7dcN1mx9gL6WdQVMbPnF3+ZhSMs8tCxN7oHddJE9fhNE7+lxdnlyemKfJRuA==}
-    engines: {node: '>=6.9.0'}
-
-  '@babel/types@7.29.0':
-    resolution: {integrity: sha512-LwdZHpScM4Qz8Xw2iKSzS+cfglZzJGvofQICy7W7v4caru4EaAmyUuO6BGrbyQ2mYV11W0U8j5mBhd14dd3B0A==}
-    engines: {node: '>=6.9.0'}
-
-  '@braintree/sanitize-url@7.1.2':
-    resolution: {integrity: sha512-jigsZK+sMF/cuiB7sERuo9V7N9jx+dhmHHnQyDSVdpZwVutaBu7WvNYqMDLSgFgfB30n452TP3vjDAvFC973mA==}
-
-  '@chevrotain/cst-dts-gen@12.0.0':
-    resolution: {integrity: sha512-fSL4KXjTl7cDgf0B5Rip9Q05BOrYvkJV/RrBTE/bKDN096E4hN/ySpcBK5B24T76dlQ2i32Zc3PAE27jFnFrKg==}
-
-  '@chevrotain/gast@12.0.0':
-    resolution: {integrity: sha512-1ne/m3XsIT8aEdrvT33so0GUC+wkctpUPK6zU9IlOyJLUbR0rg4G7ZiApiJbggpgPir9ERy3FRjT6T7lpgetnQ==}
-
-  '@chevrotain/regexp-to-ast@12.0.0':
-    resolution: {integrity: sha512-p+EW9MaJwgaHguhoqwOtx/FwuGr+DnNn857sXWOi/mClXIkPGl3rn7hGNWvo31HA3vyeQxjqe+H36yZJwYU8cA==}
-
-  '@chevrotain/types@12.0.0':
-    resolution: {integrity: sha512-S+04vjFQKeuYw0/eW3U52LkAHQsB1ASxsPGsLPUyQgrZ2iNNibQrsidruDzjEX2JYfespXMG0eZmXlhA6z7nWA==}
-
-  '@chevrotain/utils@12.0.0':
-    resolution: {integrity: sha512-lB59uJoaGIfOOL9knQqQRfhl9g7x8/wqFkp13zTdkRu1huG9kg6IJs1O8hqj9rs6h7orGxHJUKb+mX3rPbWGhA==}
-
-  '@esbuild/aix-ppc64@0.27.7':
-    resolution: {integrity: sha512-EKX3Qwmhz1eMdEJokhALr0YiD0lhQNwDqkPYyPhiSwKrh7/4KRjQc04sZ8db+5DVVnZ1LmbNDI1uAMPEUBnQPg==}
-    engines: {node: '>=18'}
-    cpu: [ppc64]
-    os: [aix]
-
-  '@esbuild/android-arm64@0.27.7':
-    resolution: {integrity: sha512-62dPZHpIXzvChfvfLJow3q5dDtiNMkwiRzPylSCfriLvZeq0a1bWChrGx/BbUbPwOrsWKMn8idSllklzBy+dgQ==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [android]
-
-  '@esbuild/android-arm@0.27.7':
-    resolution: {integrity: sha512-jbPXvB4Yj2yBV7HUfE2KHe4GJX51QplCN1pGbYjvsyCZbQmies29EoJbkEc+vYuU5o45AfQn37vZlyXy4YJ8RQ==}
-    engines: {node: '>=18'}
-    cpu: [arm]
-    os: [android]
-
-  '@esbuild/android-x64@0.27.7':
-    resolution: {integrity: sha512-x5VpMODneVDb70PYV2VQOmIUUiBtY3D3mPBG8NxVk5CogneYhkR7MmM3yR/uMdITLrC1ml/NV1rj4bMJuy9MCg==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [android]
-
-  '@esbuild/darwin-arm64@0.27.7':
-    resolution: {integrity: sha512-5lckdqeuBPlKUwvoCXIgI2D9/ABmPq3Rdp7IfL70393YgaASt7tbju3Ac+ePVi3KDH6N2RqePfHnXkaDtY9fkw==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [darwin]
-
-  '@esbuild/darwin-x64@0.27.7':
-    resolution: {integrity: sha512-rYnXrKcXuT7Z+WL5K980jVFdvVKhCHhUwid+dDYQpH+qu+TefcomiMAJpIiC2EM3Rjtq0sO3StMV/+3w3MyyqQ==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [darwin]
-
-  '@esbuild/freebsd-arm64@0.27.7':
-    resolution: {integrity: sha512-B48PqeCsEgOtzME2GbNM2roU29AMTuOIN91dsMO30t+Ydis3z/3Ngoj5hhnsOSSwNzS+6JppqWsuhTp6E82l2w==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [freebsd]
-
-  '@esbuild/freebsd-x64@0.27.7':
-    resolution: {integrity: sha512-jOBDK5XEjA4m5IJK3bpAQF9/Lelu/Z9ZcdhTRLf4cajlB+8VEhFFRjWgfy3M1O4rO2GQ/b2dLwCUGpiF/eATNQ==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [freebsd]
-
-  '@esbuild/linux-arm64@0.27.7':
-    resolution: {integrity: sha512-RZPHBoxXuNnPQO9rvjh5jdkRmVizktkT7TCDkDmQ0W2SwHInKCAV95GRuvdSvA7w4VMwfCjUiPwDi0ZO6Nfe9A==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [linux]
-
-  '@esbuild/linux-arm@0.27.7':
-    resolution: {integrity: sha512-RkT/YXYBTSULo3+af8Ib0ykH8u2MBh57o7q/DAs3lTJlyVQkgQvlrPTnjIzzRPQyavxtPtfg0EopvDyIt0j1rA==}
-    engines: {node: '>=18'}
-    cpu: [arm]
-    os: [linux]
-
-  '@esbuild/linux-ia32@0.27.7':
-    resolution: {integrity: sha512-GA48aKNkyQDbd3KtkplYWT102C5sn/EZTY4XROkxONgruHPU72l+gW+FfF8tf2cFjeHaRbWpOYa/uRBz/Xq1Pg==}
-    engines: {node: '>=18'}
-    cpu: [ia32]
-    os: [linux]
-
-  '@esbuild/linux-loong64@0.27.7':
-    resolution: {integrity: sha512-a4POruNM2oWsD4WKvBSEKGIiWQF8fZOAsycHOt6JBpZ+JN2n2JH9WAv56SOyu9X5IqAjqSIPTaJkqN8F7XOQ5Q==}
-    engines: {node: '>=18'}
-    cpu: [loong64]
-    os: [linux]
-
-  '@esbuild/linux-mips64el@0.27.7':
-    resolution: {integrity: sha512-KabT5I6StirGfIz0FMgl1I+R1H73Gp0ofL9A3nG3i/cYFJzKHhouBV5VWK1CSgKvVaG4q1RNpCTR2LuTVB3fIw==}
-    engines: {node: '>=18'}
-    cpu: [mips64el]
-    os: [linux]
-
-  '@esbuild/linux-ppc64@0.27.7':
-    resolution: {integrity: sha512-gRsL4x6wsGHGRqhtI+ifpN/vpOFTQtnbsupUF5R5YTAg+y/lKelYR1hXbnBdzDjGbMYjVJLJTd2OFmMewAgwlQ==}
-    engines: {node: '>=18'}
-    cpu: [ppc64]
-    os: [linux]
-
-  '@esbuild/linux-riscv64@0.27.7':
-    resolution: {integrity: sha512-hL25LbxO1QOngGzu2U5xeXtxXcW+/GvMN3ejANqXkxZ/opySAZMrc+9LY/WyjAan41unrR3YrmtTsUpwT66InQ==}
-    engines: {node: '>=18'}
-    cpu: [riscv64]
-    os: [linux]
-
-  '@esbuild/linux-s390x@0.27.7':
-    resolution: {integrity: sha512-2k8go8Ycu1Kb46vEelhu1vqEP+UeRVj2zY1pSuPdgvbd5ykAw82Lrro28vXUrRmzEsUV0NzCf54yARIK8r0fdw==}
-    engines: {node: '>=18'}
-    cpu: [s390x]
-    os: [linux]
-
-  '@esbuild/linux-x64@0.27.7':
-    resolution: {integrity: sha512-hzznmADPt+OmsYzw1EE33ccA+HPdIqiCRq7cQeL1Jlq2gb1+OyWBkMCrYGBJ+sxVzve2ZJEVeePbLM2iEIZSxA==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [linux]
-
-  '@esbuild/netbsd-arm64@0.27.7':
-    resolution: {integrity: sha512-b6pqtrQdigZBwZxAn1UpazEisvwaIDvdbMbmrly7cDTMFnw/+3lVxxCTGOrkPVnsYIosJJXAsILG9XcQS+Yu6w==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [netbsd]
-
-  '@esbuild/netbsd-x64@0.27.7':
-    resolution: {integrity: sha512-OfatkLojr6U+WN5EDYuoQhtM+1xco+/6FSzJJnuWiUw5eVcicbyK3dq5EeV/QHT1uy6GoDhGbFpprUiHUYggrw==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [netbsd]
-
-  '@esbuild/openbsd-arm64@0.27.7':
-    resolution: {integrity: sha512-AFuojMQTxAz75Fo8idVcqoQWEHIXFRbOc1TrVcFSgCZtQfSdc1RXgB3tjOn/krRHENUB4j00bfGjyl2mJrU37A==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [openbsd]
-
-  '@esbuild/openbsd-x64@0.27.7':
-    resolution: {integrity: sha512-+A1NJmfM8WNDv5CLVQYJ5PshuRm/4cI6WMZRg1by1GwPIQPCTs1GLEUHwiiQGT5zDdyLiRM/l1G0Pv54gvtKIg==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [openbsd]
-
-  '@esbuild/openharmony-arm64@0.27.7':
-    resolution: {integrity: sha512-+KrvYb/C8zA9CU/g0sR6w2RBw7IGc5J2BPnc3dYc5VJxHCSF1yNMxTV5LQ7GuKteQXZtspjFbiuW5/dOj7H4Yw==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [openharmony]
-
-  '@esbuild/sunos-x64@0.27.7':
-    resolution: {integrity: sha512-ikktIhFBzQNt/QDyOL580ti9+5mL/YZeUPKU2ivGtGjdTYoqz6jObj6nOMfhASpS4GU4Q/Clh1QtxWAvcYKamA==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [sunos]
-
-  '@esbuild/win32-arm64@0.27.7':
-    resolution: {integrity: sha512-7yRhbHvPqSpRUV7Q20VuDwbjW5kIMwTHpptuUzV+AA46kiPze5Z7qgt6CLCK3pWFrHeNfDd1VKgyP4O+ng17CA==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [win32]
-
-  '@esbuild/win32-ia32@0.27.7':
-    resolution: {integrity: sha512-SmwKXe6VHIyZYbBLJrhOoCJRB/Z1tckzmgTLfFYOfpMAx63BJEaL9ExI8x7v0oAO3Zh6D/Oi1gVxEYr5oUCFhw==}
-    engines: {node: '>=18'}
-    cpu: [ia32]
-    os: [win32]
-
-  '@esbuild/win32-x64@0.27.7':
-    resolution: {integrity: sha512-56hiAJPhwQ1R4i+21FVF7V8kSD5zZTdHcVuRFMW0hn753vVfQN8xlx4uOPT4xoGH0Z/oVATuR82AiqSTDIpaHg==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [win32]
-
-  '@iconify/types@2.0.0':
-    resolution: {integrity: sha512-+wluvCrRhXrhyOmRDJ3q8mux9JkKy5SJ/v8ol2tu4FVjyYvtEzkc/3pK15ET6RKg4b4w4BmTk1+gsCUhf21Ykg==}
-
-  '@iconify/utils@3.1.1':
-    resolution: {integrity: sha512-MwzoDtw9rO1x+qfgLTV/IVXsHDBqeYZoMIQC8SfxfYSlaSUG+oWiAcoiB1yajAda6mqblm4/1/w2E8tRu7a7Tw==}
-
-  '@jridgewell/gen-mapping@0.3.13':
-    resolution: {integrity: sha512-2kkt/7niJ6MgEPxF0bYdQ6etZaA+fQvDcLKckhy1yIQOzaoKjBBjSj63/aLVjYE3qhRt5dvM+uUyfCg6UKCBbA==}
-
-  '@jridgewell/remapping@2.3.5':
-    resolution: {integrity: sha512-LI9u/+laYG4Ds1TDKSJW2YPrIlcVYOwi2fUC6xB43lueCjgxV4lffOCZCtYFiH6TNOX+tQKXx97T4IKHbhyHEQ==}
-
-  '@jridgewell/resolve-uri@3.1.2':
-    resolution: {integrity: sha512-bRISgCIjP20/tbWSPWMEi54QVPRZExkuD9lJL+UIxUKtwVJA8wW1Trb1jMs1RFXo1CBTNZ/5hpC9QvmKWdopKw==}
-    engines: {node: '>=6.0.0'}
-
-  '@jridgewell/sourcemap-codec@1.5.5':
-    resolution: {integrity: sha512-cYQ9310grqxueWbl+WuIUIaiUaDcj7WOq5fVhEljNVgRfOUhY9fy2zTvfoqWsnebh8Sl70VScFbICvJnLKB0Og==}
-
-  '@jridgewell/trace-mapping@0.3.31':
-    resolution: {integrity: sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw==}
-
-  '@mermaid-js/parser@1.1.0':
-    resolution: {integrity: sha512-gxK9ZX2+Fex5zu8LhRQoMeMPEHbc73UKZ0FQ54YrQtUxE1VVhMwzeNtKRPAu5aXks4FasbMe4xB4bWrmq6Jlxw==}
-
-  '@preact/preset-vite@2.10.5':
-    resolution: {integrity: sha512-p0vJpxiVO7KWWazWny3LUZ+saXyZKWv6Ju0bYMWNJRp2YveufRPgSUB1C4MTqGJfz07EehMgfN+AJNwQy+w6Iw==}
-    peerDependencies:
-      '@babel/core': 7.x
-      vite: 2.x || 3.x || 4.x || 5.x || 6.x || 7.x || 8.x
-
-  '@prefresh/babel-plugin@0.5.3':
-    resolution: {integrity: sha512-57LX2SHs4BX2s1IwCjNzTE2OJeEepRCNf1VTEpbNcUyHfMO68eeOWGDIt4ob9aYlW6PEWZ1SuwNikuoIXANDtQ==}
-
-  '@prefresh/core@1.5.9':
-    resolution: {integrity: sha512-IKBKCPaz34OFVC+adiQ2qaTF5qdztO2/4ZPf4KsRTgjKosWqxVXmEbxCiUydYZRY8GVie+DQlKzQr9gt6HQ+EQ==}
-    peerDependencies:
-      preact: ^10.0.0 || ^11.0.0-0
-
-  '@prefresh/utils@1.2.1':
-    resolution: {integrity: sha512-vq/sIuN5nYfYzvyayXI4C2QkprfNaHUQ9ZX+3xLD8nL3rWyzpxOm1+K7RtMbhd+66QcaISViK7amjnheQ/4WZw==}
-
-  '@prefresh/vite@2.4.12':
-    resolution: {integrity: sha512-FY1fzXpUjiuosznMV0YM7XAOPZjB5FIdWS0W24+XnlxYkt9hNAwwsiKYn+cuTEoMtD/ZVazS5QVssBr9YhpCQA==}
-    peerDependencies:
-      preact: ^10.4.0 || ^11.0.0-0
-      vite: '>=2.0.0'
-
-  '@rollup/pluginutils@4.2.1':
-    resolution: {integrity: sha512-iKnFXr7NkdZAIHiIWE+BX5ULi/ucVFYWD6TbAV+rZctiRTY2PL6tsIKhoIOaoskiWAkgu+VsbXgUVDNLHf+InQ==}
-    engines: {node: '>= 8.0.0'}
-
-  '@rollup/pluginutils@5.3.0':
-    resolution: {integrity: sha512-5EdhGZtnu3V88ces7s53hhfK5KSASnJZv8Lulpc04cWO3REESroJXg73DFsOmgbU2BhwV0E20bu2IDZb3VKW4Q==}
-    engines: {node: '>=14.0.0'}
-    peerDependencies:
-      rollup: ^1.20.0||^2.0.0||^3.0.0||^4.0.0
-    peerDependenciesMeta:
-      rollup:
-        optional: true
-
-  '@rollup/rollup-android-arm-eabi@4.60.2':
-    resolution: {integrity: sha512-dnlp69efPPg6Uaw2dVqzWRfAWRnYVb1XJ8CyyhIbZeaq4CA5/mLeZ1IEt9QqQxmbdvagjLIm2ZL8BxXv5lH4Yw==}
-    cpu: [arm]
-    os: [android]
-
-  '@rollup/rollup-android-arm64@4.60.2':
-    resolution: {integrity: sha512-OqZTwDRDchGRHHm/hwLOL7uVPB9aUvI0am/eQuWMNyFHf5PSEQmyEeYYheA0EPPKUO/l0uigCp+iaTjoLjVoHg==}
-    cpu: [arm64]
-    os: [android]
-
-  '@rollup/rollup-darwin-arm64@4.60.2':
-    resolution: {integrity: sha512-UwRE7CGpvSVEQS8gUMBe1uADWjNnVgP3Iusyda1nSRwNDCsRjnGc7w6El6WLQsXmZTbLZx9cecegumcitNfpmA==}
-    cpu: [arm64]
-    os: [darwin]
-
-  '@rollup/rollup-darwin-x64@4.60.2':
-    resolution: {integrity: sha512-gjEtURKLCC5VXm1I+2i1u9OhxFsKAQJKTVB8WvDAHF+oZlq0GTVFOlTlO1q3AlCTE/DF32c16ESvfgqR7343/g==}
-    cpu: [x64]
-    os: [darwin]
-
-  '@rollup/rollup-freebsd-arm64@4.60.2':
-    resolution: {integrity: sha512-Bcl6CYDeAgE70cqZaMojOi/eK63h5Me97ZqAQoh77VPjMysA/4ORQBRGo3rRy45x4MzVlU9uZxs8Uwy7ZaKnBw==}
-    cpu: [arm64]
-    os: [freebsd]
-
-  '@rollup/rollup-freebsd-x64@4.60.2':
-    resolution: {integrity: sha512-LU+TPda3mAE2QB0/Hp5VyeKJivpC6+tlOXd1VMoXV/YFMvk/MNk5iXeBfB4MQGRWyOYVJ01625vjkr0Az98OJQ==}
-    cpu: [x64]
-    os: [freebsd]
-
-  '@rollup/rollup-linux-arm-gnueabihf@4.60.2':
-    resolution: {integrity: sha512-2QxQrM+KQ7DAW4o22j+XZ6RKdxjLD7BOWTP0Bv0tmjdyhXSsr2Ul1oJDQqh9Zf5qOwTuTc7Ek83mOFaKnodPjg==}
-    cpu: [arm]
-    os: [linux]
-
-  '@rollup/rollup-linux-arm-musleabihf@4.60.2':
-    resolution: {integrity: sha512-TbziEu2DVsTEOPif2mKWkMeDMLoYjx95oESa9fkQQK7r/Orta0gnkcDpzwufEcAO2BLBsD7mZkXGFqEdMRRwfw==}
-    cpu: [arm]
-    os: [linux]
-
-  '@rollup/rollup-linux-arm64-gnu@4.60.2':
-    resolution: {integrity: sha512-bO/rVDiDUuM2YfuCUwZ1t1cP+/yqjqz+Xf2VtkdppefuOFS2OSeAfgafaHNkFn0t02hEyXngZkxtGqXcXwO8Rg==}
-    cpu: [arm64]
-    os: [linux]
-
-  '@rollup/rollup-linux-arm64-musl@4.60.2':
-    resolution: {integrity: sha512-hr26p7e93Rl0Za+JwW7EAnwAvKkehh12BU1Llm9Ykiibg4uIr2rbpxG9WCf56GuvidlTG9KiiQT/TXT1yAWxTA==}
-    cpu: [arm64]
-    os: [linux]
-
-  '@rollup/rollup-linux-loong64-gnu@4.60.2':
-    resolution: {integrity: sha512-pOjB/uSIyDt+ow3k/RcLvUAOGpysT2phDn7TTUB3n75SlIgZzM6NKAqlErPhoFU+npgY3/n+2HYIQVbF70P9/A==}
-    cpu: [loong64]
-    os: [linux]
-
-  '@rollup/rollup-linux-loong64-musl@4.60.2':
-    resolution: {integrity: sha512-2/w+q8jszv9Ww1c+6uJT3OwqhdmGP2/4T17cu8WuwyUuuaCDDJ2ojdyYwZzCxx0GcsZBhzi3HmH+J5pZNXnd+Q==}
-    cpu: [loong64]
-    os: [linux]
-
-  '@rollup/rollup-linux-ppc64-gnu@4.60.2':
-    resolution: {integrity: sha512-11+aL5vKheYgczxtPVVRhdptAM2H7fcDR5Gw4/bTcteuZBlH4oP9f5s9zYO9aGZvoGeBpqXI/9TZZihZ609wKw==}
-    cpu: [ppc64]
-    os: [linux]
-
-  '@rollup/rollup-linux-ppc64-musl@4.60.2':
-    resolution: {integrity: sha512-i16fokAGK46IVZuV8LIIwMdtqhin9hfYkCh8pf8iC3QU3LpwL+1FSFGej+O7l3E/AoknL6Dclh2oTdnRMpTzFQ==}
-    cpu: [ppc64]
-    os: [linux]
-
-  '@rollup/rollup-linux-riscv64-gnu@4.60.2':
-    resolution: {integrity: sha512-49FkKS6RGQoriDSK/6E2GkAsAuU5kETFCh7pG4yD/ylj9rKhTmO3elsnmBvRD4PgJPds5W2PkhC82aVwmUcJ7A==}
-    cpu: [riscv64]
-    os: [linux]
-
-  '@rollup/rollup-linux-riscv64-musl@4.60.2':
-    resolution: {integrity: sha512-mjYNkHPfGpUR00DuM1ZZIgs64Hpf4bWcz9Z41+4Q+pgDx73UwWdAYyf6EG/lRFldmdHHzgrYyge5akFUW0D3mQ==}
-    cpu: [riscv64]
-    os: [linux]
-
-  '@rollup/rollup-linux-s390x-gnu@4.60.2':
-    resolution: {integrity: sha512-ALyvJz965BQk8E9Al/JDKKDLH2kfKFLTGMlgkAbbYtZuJt9LU8DW3ZoDMCtQpXAltZxwBHevXz5u+gf0yA0YoA==}
-    cpu: [s390x]
-    os: [linux]
-
-  '@rollup/rollup-linux-x64-gnu@4.60.2':
-    resolution: {integrity: sha512-UQjrkIdWrKI626Du8lCQ6MJp/6V1LAo2bOK9OTu4mSn8GGXIkPXk/Vsp4bLHCd9Z9Iz2OTEaokUE90VweJgIYQ==}
-    cpu: [x64]
-    os: [linux]
-
-  '@rollup/rollup-linux-x64-musl@4.60.2':
-    resolution: {integrity: sha512-bTsRGj6VlSdn/XD4CGyzMnzaBs9bsRxy79eTqTCBsA8TMIEky7qg48aPkvJvFe1HyzQ5oMZdg7AnVlWQSKLTnw==}
-    cpu: [x64]
-    os: [linux]
-
-  '@rollup/rollup-openbsd-x64@4.60.2':
-    resolution: {integrity: sha512-6d4Z3534xitaA1FcMWP7mQPq5zGwBmGbhphh2DwaA1aNIXUu3KTOfwrWpbwI4/Gr0uANo7NTtaykFyO2hPuFLg==}
-    cpu: [x64]
-    os: [openbsd]
-
-  '@rollup/rollup-openharmony-arm64@4.60.2':
-    resolution: {integrity: sha512-NetAg5iO2uN7eB8zE5qrZ3CSil+7IJt4WDFLcC75Ymywq1VZVD6qJ6EvNLjZ3rEm6gB7XW5JdT60c6MN35Z85Q==}
-    cpu: [arm64]
-    os: [openharmony]
-
-  '@rollup/rollup-win32-arm64-msvc@4.60.2':
-    resolution: {integrity: sha512-NCYhOotpgWZ5kdxCZsv6Iudx0wX8980Q/oW4pNFNihpBKsDbEA1zpkfxJGC0yugsUuyDZ7gL37dbzwhR0VI7pQ==}
-    cpu: [arm64]
-    os: [win32]
-
-  '@rollup/rollup-win32-ia32-msvc@4.60.2':
-    resolution: {integrity: sha512-RXsaOqXxfoUBQoOgvmmijVxJnW2IGB0eoMO7F8FAjaj0UTywUO/luSqimWBJn04WNgUkeNhh7fs7pESXajWmkg==}
-    cpu: [ia32]
-    os: [win32]
-
-  '@rollup/rollup-win32-x64-gnu@4.60.2':
-    resolution: {integrity: sha512-qdAzEULD+/hzObedtmV6iBpdL5TIbKVztGiK7O3/KYSf+HIzU257+MX1EXJcyIiDbMAqmbwaufcYPvyRryeZtA==}
-    cpu: [x64]
-    os: [win32]
-
-  '@rollup/rollup-win32-x64-msvc@4.60.2':
-    resolution: {integrity: sha512-Nd/SgG27WoA9e+/TdK74KnHz852TLa94ovOYySo/yMPuTmpckK/jIF2jSwS3g7ELSKXK13/cVdmg1Z/DaCWKxA==}
-    cpu: [x64]
-    os: [win32]
-
-  '@types/d3-array@3.2.2':
-    resolution: {integrity: sha512-hOLWVbm7uRza0BYXpIIW5pxfrKe0W+D5lrFiAEYR+pb6w3N2SwSMaJbXdUfSEv+dT4MfHBLtn5js0LAWaO6otw==}
-
-  '@types/d3-axis@3.0.6':
-    resolution: {integrity: sha512-pYeijfZuBd87T0hGn0FO1vQ/cgLk6E1ALJjfkC0oJ8cbwkZl3TpgS8bVBLZN+2jjGgg38epgxb2zmoGtSfvgMw==}
-
-  '@types/d3-brush@3.0.6':
-    resolution: {integrity: sha512-nH60IZNNxEcrh6L1ZSMNA28rj27ut/2ZmI3r96Zd+1jrZD++zD3LsMIjWlvg4AYrHn/Pqz4CF3veCxGjtbqt7A==}
-
-  '@types/d3-chord@3.0.6':
-    resolution: {integrity: sha512-LFYWWd8nwfwEmTZG9PfQxd17HbNPksHBiJHaKuY1XeqscXacsS2tyoo6OdRsjf+NQYeB6XrNL3a25E3gH69lcg==}
-
-  '@types/d3-color@3.1.3':
-    resolution: {integrity: sha512-iO90scth9WAbmgv7ogoq57O9YpKmFBbmoEoCHDB2xMBY0+/KVrqAaCDyCE16dUspeOvIxFFRI+0sEtqDqy2b4A==}
-
-  '@types/d3-contour@3.0.6':
-    resolution: {integrity: sha512-BjzLgXGnCWjUSYGfH1cpdo41/hgdWETu4YxpezoztawmqsvCeep+8QGfiY6YbDvfgHz/DkjeIkkZVJavB4a3rg==}
-
-  '@types/d3-delaunay@6.0.4':
-    resolution: {integrity: sha512-ZMaSKu4THYCU6sV64Lhg6qjf1orxBthaC161plr5KuPHo3CNm8DTHiLw/5Eq2b6TsNP0W0iJrUOFscY6Q450Hw==}
-
-  '@types/d3-dispatch@3.0.7':
-    resolution: {integrity: sha512-5o9OIAdKkhN1QItV2oqaE5KMIiXAvDWBDPrD85e58Qlz1c1kI/J0NcqbEG88CoTwJrYe7ntUCVfeUl2UJKbWgA==}
-
-  '@types/d3-drag@3.0.7':
-    resolution: {integrity: sha512-HE3jVKlzU9AaMazNufooRJ5ZpWmLIoc90A37WU2JMmeq28w1FQqCZswHZ3xR+SuxYftzHq6WU6KJHvqxKzTxxQ==}
-
-  '@types/d3-dsv@3.0.7':
-    resolution: {integrity: sha512-n6QBF9/+XASqcKK6waudgL0pf/S5XHPPI8APyMLLUHd8NqouBGLsU8MgtO7NINGtPBtk9Kko/W4ea0oAspwh9g==}
-
-  '@types/d3-ease@3.0.2':
-    resolution: {integrity: sha512-NcV1JjO5oDzoK26oMzbILE6HW7uVXOHLQvHshBUW4UMdZGfiY6v5BeQwh9a9tCzv+CeefZQHJt5SRgK154RtiA==}
-
-  '@types/d3-fetch@3.0.7':
-    resolution: {integrity: sha512-fTAfNmxSb9SOWNB9IoG5c8Hg6R+AzUHDRlsXsDZsNp6sxAEOP0tkP3gKkNSO/qmHPoBFTxNrjDprVHDQDvo5aA==}
-
-  '@types/d3-force@3.0.10':
-    resolution: {integrity: sha512-ZYeSaCF3p73RdOKcjj+swRlZfnYpK1EbaDiYICEEp5Q6sUiqFaFQ9qgoshp5CzIyyb/yD09kD9o2zEltCexlgw==}
-
-  '@types/d3-format@3.0.4':
-    resolution: {integrity: sha512-fALi2aI6shfg7vM5KiR1wNJnZ7r6UuggVqtDA+xiEdPZQwy/trcQaHnwShLuLdta2rTymCNpxYTiMZX/e09F4g==}
-
-  '@types/d3-geo@3.1.0':
-    resolution: {integrity: sha512-856sckF0oP/diXtS4jNsiQw/UuK5fQG8l/a9VVLeSouf1/PPbBE1i1W852zVwKwYCBkFJJB7nCFTbk6UMEXBOQ==}
-
-  '@types/d3-hierarchy@3.1.7':
-    resolution: {integrity: sha512-tJFtNoYBtRtkNysX1Xq4sxtjK8YgoWUNpIiUee0/jHGRwqvzYxkq0hGVbbOGSz+JgFxxRu4K8nb3YpG3CMARtg==}
-
-  '@types/d3-interpolate@3.0.4':
-    resolution: {integrity: sha512-mgLPETlrpVV1YRJIglr4Ez47g7Yxjl1lj7YKsiMCb27VJH9W8NVM6Bb9d8kkpG/uAQS5AmbA48q2IAolKKo1MA==}
-
-  '@types/d3-path@3.1.1':
-    resolution: {integrity: sha512-VMZBYyQvbGmWyWVea0EHs/BwLgxc+MKi1zLDCONksozI4YJMcTt8ZEuIR4Sb1MMTE8MMW49v0IwI5+b7RmfWlg==}
-
-  '@types/d3-polygon@3.0.2':
-    resolution: {integrity: sha512-ZuWOtMaHCkN9xoeEMr1ubW2nGWsp4nIql+OPQRstu4ypeZ+zk3YKqQT0CXVe/PYqrKpZAi+J9mTs05TKwjXSRA==}
-
-  '@types/d3-quadtree@3.0.6':
-    resolution: {integrity: sha512-oUzyO1/Zm6rsxKRHA1vH0NEDG58HrT5icx/azi9MF1TWdtttWl0UIUsjEQBBh+SIkrpd21ZjEv7ptxWys1ncsg==}
-
-  '@types/d3-random@3.0.3':
-    resolution: {integrity: sha512-Imagg1vJ3y76Y2ea0871wpabqp613+8/r0mCLEBfdtqC7xMSfj9idOnmBYyMoULfHePJyxMAw3nWhJxzc+LFwQ==}
-
-  '@types/d3-scale-chromatic@3.1.0':
-    resolution: {integrity: sha512-iWMJgwkK7yTRmWqRB5plb1kadXyQ5Sj8V/zYlFGMUBbIPKQScw+Dku9cAAMgJG+z5GYDoMjWGLVOvjghDEFnKQ==}
-
-  '@types/d3-scale@4.0.9':
-    resolution: {integrity: sha512-dLmtwB8zkAeO/juAMfnV+sItKjlsw2lKdZVVy6LRr0cBmegxSABiLEpGVmSJJ8O08i4+sGR6qQtb6WtuwJdvVw==}
-
-  '@types/d3-selection@3.0.11':
-    resolution: {integrity: sha512-bhAXu23DJWsrI45xafYpkQ4NtcKMwWnAC/vKrd2l+nxMFuvOT3XMYTIj2opv8vq8AO5Yh7Qac/nSeP/3zjTK0w==}
-
-  '@types/d3-shape@3.1.8':
-    resolution: {integrity: sha512-lae0iWfcDeR7qt7rA88BNiqdvPS5pFVPpo5OfjElwNaT2yyekbM0C9vK+yqBqEmHr6lDkRnYNoTBYlAgJa7a4w==}
-
-  '@types/d3-time-format@4.0.3':
-    resolution: {integrity: sha512-5xg9rC+wWL8kdDj153qZcsJ0FWiFt0J5RB6LYUNZjwSnesfblqrI/bJ1wBdJ8OQfncgbJG5+2F+qfqnqyzYxyg==}
-
-  '@types/d3-time@3.0.4':
-    resolution: {integrity: sha512-yuzZug1nkAAaBlBBikKZTgzCeA+k1uy4ZFwWANOfKw5z5LRhV0gNA7gNkKm7HoK+HRN0wX3EkxGk0fpbWhmB7g==}
-
-  '@types/d3-timer@3.0.2':
-    resolution: {integrity: sha512-Ps3T8E8dZDam6fUyNiMkekK3XUsaUEik+idO9/YjPtfj2qruF8tFBXS7XhtE4iIXBLxhmLjP3SXpLhVf21I9Lw==}
-
-  '@types/d3-transition@3.0.9':
-    resolution: {integrity: sha512-uZS5shfxzO3rGlu0cC3bjmMFKsXv+SmZZcgp0KD22ts4uGXp5EVYGzu/0YdwZeKmddhcAccYtREJKkPfXkZuCg==}
-
-  '@types/d3-zoom@3.0.8':
-    resolution: {integrity: sha512-iqMC4/YlFCSlO8+2Ii1GGGliCAY4XdeG748w5vQUbevlbDu0zSjH/+jojorQVBK/se0j6DUFNPBGSqD3YWYnDw==}
-
-  '@types/d3@7.4.3':
-    resolution: {integrity: sha512-lZXZ9ckh5R8uiFVt8ogUNf+pIrK4EsWrx2Np75WvF/eTpJ0FMHNhjXk8CKEx/+gpHbNQyJWehbFaTvqmHWB3ww==}
-
-  '@types/estree@1.0.8':
-    resolution: {integrity: sha512-dWHzHa2WqEXI/O1E9OjrocMTKJl2mSrEolh1Iomrv6U+JuNwaHXsXx9bLu5gG7BUWFIN0skIQJQ/L1rIex4X6w==}
-
-  '@types/geojson@7946.0.16':
-    resolution: {integrity: sha512-6C8nqWur3j98U6+lXDfTUWIfgvZU+EumvpHKcYjujKH7woYyLj2sUmff0tRhrqM7BohUw7Pz3ZB1jj2gW9Fvmg==}
-
-  '@types/trusted-types@2.0.7':
-    resolution: {integrity: sha512-ScaPdn1dQczgbl0QFTeTOmVHFULt394XJgOQNoyVhZ6r2vLnMLJfBPd53SB52T/3G36VI1/g2MZaX0cwDuXsfw==}
-
-  '@upsetjs/venn.js@2.0.0':
-    resolution: {integrity: sha512-WbBhLrooyePuQ1VZxrJjtLvTc4NVfpOyKx0sKqioq9bX1C1m7Jgykkn8gLrtwumBioXIqam8DLxp88Adbue6Hw==}
-
-  acorn@8.16.0:
-    resolution: {integrity: sha512-UVJyE9MttOsBQIDKw1skb9nAwQuR5wuGD3+82K6JgJlm/Y+KI92oNsMNGZCYdDsVtRHSak0pcV5Dno5+4jh9sw==}
-    engines: {node: '>=0.4.0'}
-    hasBin: true
-
-  babel-plugin-transform-hook-names@1.0.2:
-    resolution: {integrity: sha512-5gafyjyyBTTdX/tQQ0hRgu4AhNHG/hqWi0ZZmg2xvs2FgRkJXzDNKBZCyoYqgFkovfDrgM8OoKg8karoUvWeCw==}
-    peerDependencies:
-      '@babel/core': ^7.12.10
-
-  baseline-browser-mapping@2.10.24:
-    resolution: {integrity: sha512-I2NkZOOrj2XuguvWCK6OVh9GavsNjZjK908Rq3mIBK25+GD8vPX5w2WdxVqnQ7xx3SrZJiCiZFu+/Oz50oSYSA==}
-    engines: {node: '>=6.0.0'}
-    hasBin: true
-
-  boolbase@1.0.0:
-    resolution: {integrity: sha512-JZOSA7Mo9sNGB8+UjSgzdLtokWAky1zbztM3WRLCbZ70/3cTANmQmOdR7y2g+J0e2WXywy1yS468tY+IruqEww==}
-
-  browserslist@4.28.2:
-    resolution: {integrity: sha512-48xSriZYYg+8qXna9kwqjIVzuQxi+KYWp2+5nCYnYKPTr0LvD89Jqk2Or5ogxz0NUMfIjhh2lIUX/LyX9B4oIg==}
-    engines: {node: ^6 || ^7 || ^8 || ^9 || ^10 || ^11 || ^12 || >=13.7}
-    hasBin: true
-
-  caniuse-lite@1.0.30001791:
-    resolution: {integrity: sha512-yk0l/YSrOnFZk3UROpDLQD9+kC1l4meK/wed583AXrzoarMGJcbRi2Q4RaUYbKxYAsZ8sWmaSa/DsLmdBeI1vQ==}
-
-  chevrotain-allstar@0.4.1:
-    resolution: {integrity: sha512-PvVJm3oGqrveUVW2Vt/eZGeiAIsJszYweUcYwcskg9e+IubNYKKD+rHHem7A6XVO22eDAL+inxNIGAzZ/VIWlA==}
-    peerDependencies:
-      chevrotain: ^12.0.0
-
-  chevrotain@12.0.0:
-    resolution: {integrity: sha512-csJvb+6kEiQaqo1woTdSAuOWdN0WTLIydkKrBnS+V5gZz0oqBrp4kQ35519QgK6TpBThiG3V1vNSHlIkv4AglQ==}
-    engines: {node: '>=22.0.0'}
-
-  commander@7.2.0:
-    resolution: {integrity: sha512-QrWXB+ZQSVPmIWIhtEO9H+gwHaMGYiF5ChvoJ+K9ZGHG/sVsa6yiesAD1GC/x46sET00Xlwo1u49RVVVzvcSkw==}
-    engines: {node: '>= 10'}
-
-  commander@8.3.0:
-    resolution: {integrity: sha512-OkTL9umf+He2DZkUq8f8J9of7yL6RJKI24dVITBmNfZBmri9zYZQrKkuXiKhyfPSu8tUhnVBB1iKXevvnlR4Ww==}
-    engines: {node: '>= 12'}
-
-  confbox@0.1.8:
-    resolution: {integrity: sha512-RMtmw0iFkeR4YV+fUOSucriAQNb9g8zFR52MWCtl+cCZOFRNL6zeB395vPzFhEjjn4fMxXudmELnl/KF/WrK6w==}
-
-  convert-source-map@2.0.0:
-    resolution: {integrity: sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg==}
-
-  cose-base@1.0.3:
-    resolution: {integrity: sha512-s9whTXInMSgAp/NVXVNuVxVKzGH2qck3aQlVHxDCdAEPgtMKwc4Wq6/QKhgdEdgbLSi9rBTAcPoRa6JpiG4ksg==}
-
-  cose-base@2.2.0:
-    resolution: {integrity: sha512-AzlgcsCbUMymkADOJtQm3wO9S3ltPfYOFD5033keQn9NJzIbtnZj+UdBJe7DYml/8TdbtHJW3j58SOnKhWY/5g==}
-
-  css-select@5.2.2:
-    resolution: {integrity: sha512-TizTzUddG/xYLA3NXodFM0fSbNizXjOKhqiQQwvhlspadZokn1KDy0NZFS0wuEubIYAV5/c1/lAr0TaaFXEXzw==}
-
-  css-what@6.2.2:
-    resolution: {integrity: sha512-u/O3vwbptzhMs3L1fQE82ZSLHQQfto5gyZzwteVIEyeaY5Fc7R4dapF/BvRoSYFeqfBk4m0V1Vafq5Pjv25wvA==}
-    engines: {node: '>= 6'}
-
-  cytoscape-cose-bilkent@4.1.0:
-    resolution: {integrity: sha512-wgQlVIUJF13Quxiv5e1gstZ08rnZj2XaLHGoFMYXz7SkNfCDOOteKBE6SYRfA9WxxI/iBc3ajfDoc6hb/MRAHQ==}
-    peerDependencies:
-      cytoscape: ^3.2.0
-
-  cytoscape-fcose@2.2.0:
-    resolution: {integrity: sha512-ki1/VuRIHFCzxWNrsshHYPs6L7TvLu3DL+TyIGEsRcvVERmxokbf5Gdk7mFxZnTdiGtnA4cfSmjZJMviqSuZrQ==}
-    peerDependencies:
-      cytoscape: ^3.2.0
-
-  cytoscape@3.33.3:
-    resolution: {integrity: sha512-Gej7U+OKR+LZ8kvX7rb2HhCYJ0IhvEFsnkud4SB1PR+BUY/TsSO0dmOW59WEVLu51b1Rm+gQRKoz4bLYxGSZ2g==}
-    engines: {node: '>=0.10'}
-
-  d3-array@2.12.1:
-    resolution: {integrity: sha512-B0ErZK/66mHtEsR1TkPEEkwdy+WDesimkM5gpZr5Dsg54BiTA5RXtYW5qTLIAcekaS9xfZrzBLF/OAkB3Qn1YQ==}
-
-  d3-array@3.2.4:
-    resolution: {integrity: sha512-tdQAmyA18i4J7wprpYq8ClcxZy3SC31QMeByyCFyRt7BVHdREQZ5lpzoe5mFEYZUWe+oq8HBvk9JjpibyEV4Jg==}
-    engines: {node: '>=12'}
-
-  d3-axis@3.0.0:
-    resolution: {integrity: sha512-IH5tgjV4jE/GhHkRV0HiVYPDtvfjHQlQfJHs0usq7M30XcSBvOotpmH1IgkcXsO/5gEQZD43B//fc7SRT5S+xw==}
-    engines: {node: '>=12'}
-
-  d3-brush@3.0.0:
-    resolution: {integrity: sha512-ALnjWlVYkXsVIGlOsuWH1+3udkYFI48Ljihfnh8FZPF2QS9o+PzGLBslO0PjzVoHLZ2KCVgAM8NVkXPJB2aNnQ==}
-    engines: {node: '>=12'}
-
-  d3-chord@3.0.1:
-    resolution: {integrity: sha512-VE5S6TNa+j8msksl7HwjxMHDM2yNK3XCkusIlpX5kwauBfXuyLAtNg9jCp/iHH61tgI4sb6R/EIMWCqEIdjT/g==}
-    engines: {node: '>=12'}
-
-  d3-color@3.1.0:
-    resolution: {integrity: sha512-zg/chbXyeBtMQ1LbD/WSoW2DpC3I0mpmPdW+ynRTj/x2DAWYrIY7qeZIHidozwV24m4iavr15lNwIwLxRmOxhA==}
-    engines: {node: '>=12'}
-
-  d3-contour@4.0.2:
-    resolution: {integrity: sha512-4EzFTRIikzs47RGmdxbeUvLWtGedDUNkTcmzoeyg4sP/dvCexO47AaQL7VKy/gul85TOxw+IBgA8US2xwbToNA==}
-    engines: {node: '>=12'}
-
-  d3-delaunay@6.0.4:
-    resolution: {integrity: sha512-mdjtIZ1XLAM8bm/hx3WwjfHt6Sggek7qH043O8KEjDXN40xi3vx/6pYSVTwLjEgiXQTbvaouWKynLBiUZ6SK6A==}
-    engines: {node: '>=12'}
-
-  d3-dispatch@3.0.1:
-    resolution: {integrity: sha512-rzUyPU/S7rwUflMyLc1ETDeBj0NRuHKKAcvukozwhshr6g6c5d8zh4c2gQjY2bZ0dXeGLWc1PF174P2tVvKhfg==}
-    engines: {node: '>=12'}
-
-  d3-drag@3.0.0:
-    resolution: {integrity: sha512-pWbUJLdETVA8lQNJecMxoXfH6x+mO2UQo8rSmZ+QqxcbyA3hfeprFgIT//HW2nlHChWeIIMwS2Fq+gEARkhTkg==}
-    engines: {node: '>=12'}
-
-  d3-dsv@3.0.1:
-    resolution: {integrity: sha512-UG6OvdI5afDIFP9w4G0mNq50dSOsXHJaRE8arAS5o9ApWnIElp8GZw1Dun8vP8OyHOZ/QJUKUJwxiiCCnUwm+Q==}
-    engines: {node: '>=12'}
-    hasBin: true
-
-  d3-ease@3.0.1:
-    resolution: {integrity: sha512-wR/XK3D3XcLIZwpbvQwQ5fK+8Ykds1ip7A2Txe0yxncXSdq1L9skcG7blcedkOX+ZcgxGAmLX1FrRGbADwzi0w==}
-    engines: {node: '>=12'}
-
-  d3-fetch@3.0.1:
-    resolution: {integrity: sha512-kpkQIM20n3oLVBKGg6oHrUchHM3xODkTzjMoj7aWQFq5QEM+R6E4WkzT5+tojDY7yjez8KgCBRoj4aEr99Fdqw==}
-    engines: {node: '>=12'}
-
-  d3-force@3.0.0:
-    resolution: {integrity: sha512-zxV/SsA+U4yte8051P4ECydjD/S+qeYtnaIyAs9tgHCqfguma/aAQDjo85A9Z6EKhBirHRJHXIgJUlffT4wdLg==}
-    engines: {node: '>=12'}
-
-  d3-format@3.1.2:
-    resolution: {integrity: sha512-AJDdYOdnyRDV5b6ArilzCPPwc1ejkHcoyFarqlPqT7zRYjhavcT3uSrqcMvsgh2CgoPbK3RCwyHaVyxYcP2Arg==}
-    engines: {node: '>=12'}
-
-  d3-geo@3.1.1:
-    resolution: {integrity: sha512-637ln3gXKXOwhalDzinUgY83KzNWZRKbYubaG+fGVuc/dxO64RRljtCTnf5ecMyE1RIdtqpkVcq0IbtU2S8j2Q==}
-    engines: {node: '>=12'}
-
-  d3-hierarchy@3.1.2:
-    resolution: {integrity: sha512-FX/9frcub54beBdugHjDCdikxThEqjnR93Qt7PvQTOHxyiNCAlvMrHhclk3cD5VeAaq9fxmfRp+CnWw9rEMBuA==}
-    engines: {node: '>=12'}
-
-  d3-interpolate@3.0.1:
-    resolution: {integrity: sha512-3bYs1rOD33uo8aqJfKP3JWPAibgw8Zm2+L9vBKEHJ2Rg+viTR7o5Mmv5mZcieN+FRYaAOWX5SJATX6k1PWz72g==}
-    engines: {node: '>=12'}
-
-  d3-path@1.0.9:
-    resolution: {integrity: sha512-VLaYcn81dtHVTjEHd8B+pbe9yHWpXKZUC87PzoFmsFrJqgFwDe/qxfp5MlfsfM1V5E/iVt0MmEbWQ7FVIXh/bg==}
-
-  d3-path@3.1.0:
-    resolution: {integrity: sha512-p3KP5HCf/bvjBSSKuXid6Zqijx7wIfNW+J/maPs+iwR35at5JCbLUT0LzF1cnjbCHWhqzQTIN2Jpe8pRebIEFQ==}
-    engines: {node: '>=12'}
-
-  d3-polygon@3.0.1:
-    resolution: {integrity: sha512-3vbA7vXYwfe1SYhED++fPUQlWSYTTGmFmQiany/gdbiWgU/iEyQzyymwL9SkJjFFuCS4902BSzewVGsHHmHtXg==}
-    engines: {node: '>=12'}
-
-  d3-quadtree@3.0.1:
-    resolution: {integrity: sha512-04xDrxQTDTCFwP5H6hRhsRcb9xxv2RzkcsygFzmkSIOJy3PeRJP7sNk3VRIbKXcog561P9oU0/rVH6vDROAgUw==}
-    engines: {node: '>=12'}
-
-  d3-random@3.0.1:
-    resolution: {integrity: sha512-FXMe9GfxTxqd5D6jFsQ+DJ8BJS4E/fT5mqqdjovykEB2oFbTMDVdg1MGFxfQW+FBOGoB++k8swBrgwSHT1cUXQ==}
-    engines: {node: '>=12'}
-
-  d3-sankey@0.12.3:
-    resolution: {integrity: sha512-nQhsBRmM19Ax5xEIPLMY9ZmJ/cDvd1BG3UVvt5h3WRxKg5zGRbvnteTyWAbzeSvlh3tW7ZEmq4VwR5mB3tutmQ==}
-
-  d3-scale-chromatic@3.1.0:
-    resolution: {integrity: sha512-A3s5PWiZ9YCXFye1o246KoscMWqf8BsD9eRiJ3He7C9OBaxKhAd5TFCdEx/7VbKtxxTsu//1mMJFrEt572cEyQ==}
-    engines: {node: '>=12'}
-
-  d3-scale@4.0.2:
-    resolution: {integrity: sha512-GZW464g1SH7ag3Y7hXjf8RoUuAFIqklOAq3MRl4OaWabTFJY9PN/E1YklhXLh+OQ3fM9yS2nOkCoS+WLZ6kvxQ==}
-    engines: {node: '>=12'}
-
-  d3-selection@3.0.0:
-    resolution: {integrity: sha512-fmTRWbNMmsmWq6xJV8D19U/gw/bwrHfNXxrIN+HfZgnzqTHp9jOmKMhsTUjXOJnZOdZY9Q28y4yebKzqDKlxlQ==}
-    engines: {node: '>=12'}
-
-  d3-shape@1.3.7:
-    resolution: {integrity: sha512-EUkvKjqPFUAZyOlhY5gzCxCeI0Aep04LwIRpsZ/mLFelJiUfnK56jo5JMDSE7yyP2kLSb6LtF+S5chMk7uqPqw==}
-
-  d3-shape@3.2.0:
-    resolution: {integrity: sha512-SaLBuwGm3MOViRq2ABk3eLoxwZELpH6zhl3FbAoJ7Vm1gofKx6El1Ib5z23NUEhF9AsGl7y+dzLe5Cw2AArGTA==}
-    engines: {node: '>=12'}
-
-  d3-time-format@4.1.0:
-    resolution: {integrity: sha512-dJxPBlzC7NugB2PDLwo9Q8JiTR3M3e4/XANkreKSUxF8vvXKqm1Yfq4Q5dl8budlunRVlUUaDUgFt7eA8D6NLg==}
-    engines: {node: '>=12'}
-
-  d3-time@3.1.0:
-    resolution: {integrity: sha512-VqKjzBLejbSMT4IgbmVgDjpkYrNWUYJnbCGo874u7MMKIWsILRX+OpX/gTk8MqjpT1A/c6HY2dCA77ZN0lkQ2Q==}
-    engines: {node: '>=12'}
-
-  d3-timer@3.0.1:
-    resolution: {integrity: sha512-ndfJ/JxxMd3nw31uyKoY2naivF+r29V+Lc0svZxe1JvvIRmi8hUsrMvdOwgS1o6uBHmiz91geQ0ylPP0aj1VUA==}
-    engines: {node: '>=12'}
-
-  d3-transition@3.0.1:
-    resolution: {integrity: sha512-ApKvfjsSR6tg06xrL434C0WydLr7JewBB3V+/39RMHsaXTOG0zmt/OAXeng5M5LBm0ojmxJrpomQVZ1aPvBL4w==}
-    engines: {node: '>=12'}
-    peerDependencies:
-      d3-selection: 2 - 3
-
-  d3-zoom@3.0.0:
-    resolution: {integrity: sha512-b8AmV3kfQaqWAuacbPuNbL6vahnOJflOhexLzMMNLga62+/nh0JzvJ0aO/5a5MVgUFGS7Hu1P9P03o3fJkDCyw==}
-    engines: {node: '>=12'}
-
-  d3@7.9.0:
-    resolution: {integrity: sha512-e1U46jVP+w7Iut8Jt8ri1YsPOvFpg46k+K8TpCb0P+zjCkjkPnV7WzfDJzMHy1LnA+wj5pLT1wjO901gLXeEhA==}
-    engines: {node: '>=12'}
-
-  dagre-d3-es@7.0.14:
-    resolution: {integrity: sha512-P4rFMVq9ESWqmOgK+dlXvOtLwYg0i7u0HBGJER0LZDJT2VHIPAMZ/riPxqJceWMStH5+E61QxFra9kIS3AqdMg==}
-
-  dayjs@1.11.20:
-    resolution: {integrity: sha512-YbwwqR/uYpeoP4pu043q+LTDLFBLApUP6VxRihdfNTqu4ubqMlGDLd6ErXhEgsyvY0K6nCs7nggYumAN+9uEuQ==}
-
-  debug@4.4.3:
-    resolution: {integrity: sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==}
-    engines: {node: '>=6.0'}
-    peerDependencies:
-      supports-color: '*'
-    peerDependenciesMeta:
-      supports-color:
-        optional: true
-
-  delaunator@5.1.0:
-    resolution: {integrity: sha512-AGrQ4QSgssa1NGmWmLPqN5NY2KajF5MqxetNEO+o0n3ZwZZeTmt7bBnvzHWrmkZFxGgr4HdyFgelzgi06otLuQ==}
-
-  dom-serializer@2.0.0:
-    resolution: {integrity: sha512-wIkAryiqt/nV5EQKqQpo3SToSOV9J0DnbJqwK7Wv/Trc92zIAYZ4FlMu+JPFW1DfGFt81ZTCGgDEabffXeLyJg==}
-
-  domelementtype@2.3.0:
-    resolution: {integrity: sha512-OLETBj6w0OsagBwdXnPdN0cnMfF9opN69co+7ZrbfPGrdpPVNBUj02spi6B1N7wChLQiPn4CSH/zJvXw56gmHw==}
-
-  domhandler@5.0.3:
-    resolution: {integrity: sha512-cgwlv/1iFQiFnU96XXgROh8xTeetsnJiDsTc7TYCLFd9+/WNkIqPTxiM/8pSd8VIrhXGTf1Ny1q1hquVqDJB5w==}
-    engines: {node: '>= 4'}
-
-  dompurify@3.4.1:
-    resolution: {integrity: sha512-JahakDAIg1gyOm7dlgWSDjV4n7Ip2PKR55NIT6jrMfIgLFgWo81vdr1/QGqWtFNRqXP9UV71oVePtjqS2ebnPw==}
-
-  domutils@3.2.2:
-    resolution: {integrity: sha512-6kZKyUajlDuqlHKVX1w7gyslj9MPIXzIFiz/rGu35uC1wMi+kMhQwGhl4lt9unC9Vb9INnY9Z3/ZA3+FhASLaw==}
-
-  electron-to-chromium@1.5.344:
-    resolution: {integrity: sha512-4MxfbmNDm+KPh066EZy+eUnkcDPcZ35wNmOWzFuh/ijvHsve6kbLTLURy88uCNK5FbpN+yk2nQY6BYh1GEt+wg==}
-
-  entities@4.5.0:
-    resolution: {integrity: sha512-V0hjH4dGPh9Ao5p0MoRY6BVqtwCjhz6vI5LT8AJ55H+4g9/4vbHx1I54fS0XuclLhDHArPQCiMjDxjaL8fPxhw==}
-    engines: {node: '>=0.12'}
-
-  esbuild@0.27.7:
-    resolution: {integrity: sha512-IxpibTjyVnmrIQo5aqNpCgoACA/dTKLTlhMHihVHhdkxKyPO1uBBthumT0rdHmcsk9uMonIWS0m4FljWzILh3w==}
-    engines: {node: '>=18'}
-    hasBin: true
-
-  escalade@3.2.0:
-    resolution: {integrity: sha512-WUj2qlxaQtO4g6Pq5c29GTcWGDyd8itL8zTlipgECz3JesAiiOKotd8JU6otB3PACgG6xkJUyVhboMS+bje/jA==}
-    engines: {node: '>=6'}
-
-  estree-walker@2.0.2:
-    resolution: {integrity: sha512-Rfkk/Mp/DL7JVje3u18FxFujQlTNR2q6QfMSMB7AvCBx91NGj/ba3kCfza0f6dVDbw7YlRf/nDrn7pQrCCyQ/w==}
-
-  fdir@6.5.0:
-    resolution: {integrity: sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg==}
-    engines: {node: '>=12.0.0'}
-    peerDependencies:
-      picomatch: ^3 || ^4
-    peerDependenciesMeta:
-      picomatch:
-        optional: true
-
-  fsevents@2.3.3:
-    resolution: {integrity: sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==}
-    engines: {node: ^8.16.0 || ^10.6.0 || >=11.0.0}
-    os: [darwin]
-
-  gensync@1.0.0-beta.2:
-    resolution: {integrity: sha512-3hN7NaskYvMDLQY55gnW3NQ+mesEAepTqlg+VEbj7zzqEMBVNhzcGYYeqFo/TlYz6eQiFcp1HcsCZO+nGgS8zg==}
-    engines: {node: '>=6.9.0'}
-
-  hachure-fill@0.5.2:
-    resolution: {integrity: sha512-3GKBOn+m2LX9iq+JC1064cSFprJY4jL1jCXTcpnfER5HYE2l/4EfWSGzkPa/ZDBmYI0ZOEj5VHV/eKnPGkHuOg==}
-
-  he@1.2.0:
-    resolution: {integrity: sha512-F/1DnUGPopORZi0ni+CvrCgHQ5FyEAHRLSApuYWMmrbSwoN2Mn/7k+Gl38gJnR7yyDZk6WLXwiGod1JOWNDKGw==}
-    hasBin: true
-
-  iconv-lite@0.6.3:
-    resolution: {integrity: sha512-4fCk79wshMdzMp2rH06qWrJE4iolqLhCUH+OiuIgU++RB0+94NlDL81atO7GX55uUKueo0txHNtvEyI6D7WdMw==}
-    engines: {node: '>=0.10.0'}
-
-  internmap@1.0.1:
-    resolution: {integrity: sha512-lDB5YccMydFBtasVtxnZ3MRBHuaoE8GKsppq+EchKL2U4nK/DmEpPHNH8MZe5HkMtpSiTSOZwfN0tzYjO/lJEw==}
-
-  internmap@2.0.3:
-    resolution: {integrity: sha512-5Hh7Y1wQbvY5ooGgPbDaL5iYLAPzMTUrjMulskHLH6wnv/A+1q5rgEaiuqEjB+oxGXIVZs1FF+R/KPN3ZSQYYg==}
-    engines: {node: '>=12'}
-
-  js-tokens@4.0.0:
-    resolution: {integrity: sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==}
-
-  jsesc@3.1.0:
-    resolution: {integrity: sha512-/sM3dO2FOzXjKQhJuo0Q173wf2KOo8t4I8vHy6lF9poUp7bKT0/NHE8fPX23PwfhnykfqnC2xRxOnVw5XuGIaA==}
-    engines: {node: '>=6'}
-    hasBin: true
-
-  json5@2.2.3:
-    resolution: {integrity: sha512-XmOWe7eyHYH14cLdVPoyg+GOH3rYX++KpzrylJwSW98t3Nk+U8XOl8FWKOgwtzdb8lXGf6zYwDUzeHMWfxasyg==}
-    engines: {node: '>=6'}
-    hasBin: true
-
-  katex@0.16.45:
-    resolution: {integrity: sha512-pQpZbdBu7wCTmQUh7ufPmLr0pFoObnGUoL/yhtwJDgmmQpbkg/0HSVti25Fu4rmd1oCR6NGWe9vqTWuWv3GcNA==}
-    hasBin: true
-
-  khroma@2.1.0:
-    resolution: {integrity: sha512-Ls993zuzfayK269Svk9hzpeGUKob/sIgZzyHYdjQoAdQetRKpOLj+k/QQQ/6Qi0Yz65mlROrfd+Ev+1+7dz9Kw==}
-
-  kolorist@1.8.0:
-    resolution: {integrity: sha512-Y+60/zizpJ3HRH8DCss+q95yr6145JXZo46OTpFvDZWLfRCE4qChOyk1b26nMaNpfHHgxagk9dXT5OP0Tfe+dQ==}
-
-  langium@4.2.2:
-    resolution: {integrity: sha512-JUshTRAfHI4/MF9dH2WupvjSXyn8JBuUEWazB8ZVJUtXutT0doDlAv1XKbZ1Pb5sMexa8FF4CFBc0iiul7gbUQ==}
-    engines: {node: '>=20.10.0', npm: '>=10.2.3'}
-
-  layout-base@1.0.2:
-    resolution: {integrity: sha512-8h2oVEZNktL4BH2JCOI90iD1yXwL6iNW7KcCKT2QZgQJR2vbqDsldCTPRU9NifTCqHZci57XvQQ15YTu+sTYPg==}
-
-  layout-base@2.0.1:
-    resolution: {integrity: sha512-dp3s92+uNI1hWIpPGH3jK2kxE2lMjdXdr+DH8ynZHpd6PUlH6x6cbuXnoMmiNumznqaNO31xu9e79F0uuZ0JFg==}
-
-  lodash-es@4.18.1:
-    resolution: {integrity: sha512-J8xewKD/Gk22OZbhpOVSwcs60zhd95ESDwezOFuA3/099925PdHJ7OFHNTGtajL3AlZkykD32HykiMo+BIBI8A==}
-
-  lru-cache@5.1.1:
-    resolution: {integrity: sha512-KpNARQA3Iwv+jTA0utUVVbrh+Jlrr1Fv0e56GGzAFOXN7dk/FviaDW8LHmK52DlcH4WP2n6gI8vN1aesBFgo9w==}
-
-  lucide-preact@1.14.0:
-    resolution: {integrity: sha512-d3N5MpFSukscLyPPtZEeYvSIWohLEj/2OJvjrYovWOTKa40bsHaALX9sIDS6skSu+J6bwYRqfwX6GAxlErfSmQ==}
-    peerDependencies:
-      preact: ^10.27.2
-
-  magic-string@0.30.21:
-    resolution: {integrity: sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ==}
-
-  marked@16.4.2:
-    resolution: {integrity: sha512-TI3V8YYWvkVf3KJe1dRkpnjs68JUPyEa5vjKrp1XEEJUAOaQc+Qj+L1qWbPd0SJuAdQkFU0h73sXXqwDYxsiDA==}
-    engines: {node: '>= 20'}
-    hasBin: true
-
-  mermaid@11.14.0:
-    resolution: {integrity: sha512-GSGloRsBs+JINmmhl0JDwjpuezCsHB4WGI4NASHxL3fHo3o/BRXTxhDLKnln8/Q0lRFRyDdEjmk1/d5Sn1Xz8g==}
-
-  mlly@1.8.2:
-    resolution: {integrity: sha512-d+ObxMQFmbt10sretNDytwt85VrbkhhUA/JBGm1MPaWJ65Cl4wOgLaB1NYvJSZ0Ef03MMEU/0xpPMXUIQ29UfA==}
-
-  ms@2.1.3:
-    resolution: {integrity: sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==}
-
-  nanoid@3.3.11:
-    resolution: {integrity: sha512-N8SpfPUnUp1bK+PMYW8qSWdl9U+wwNWI4QKxOYDy9JAro3WMX7p2OeVRF9v+347pnakNevPmiHhNmZ2HbFA76w==}
-    engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1}
-    hasBin: true
-
-  node-html-parser@6.1.13:
-    resolution: {integrity: sha512-qIsTMOY4C/dAa5Q5vsobRpOOvPfC4pB61UVW2uSwZNUp0QU/jCekTal1vMmbO0DgdHeLUJpv/ARmDqErVxA3Sg==}
-
-  node-releases@2.0.38:
-    resolution: {integrity: sha512-3qT/88Y3FbH/Kx4szpQQ4HzUbVrHPKTLVpVocKiLfoYvw9XSGOX2FmD2d6DrXbVYyAQTF2HeF6My8jmzx7/CRw==}
-
-  nth-check@2.1.1:
-    resolution: {integrity: sha512-lqjrjmaOoAnWfMmBPL+XNnynZh2+swxiX3WUE0s4yEHI6m+AwrK2UZOimIRl3X/4QctVqS8AiZjFqyOGrMXb/w==}
-
-  package-manager-detector@1.6.0:
-    resolution: {integrity: sha512-61A5ThoTiDG/C8s8UMZwSorAGwMJ0ERVGj2OjoW5pAalsNOg15+iQiPzrLJ4jhZ1HJzmC2PIHT2oEiH3R5fzNA==}
-
-  path-data-parser@0.1.0:
-    resolution: {integrity: sha512-NOnmBpt5Y2RWbuv0LMzsayp3lVylAHLPUTut412ZA3l+C4uw4ZVkQbjShYCQ8TCpUMdPapr4YjUqLYD6v68j+w==}
-
-  pathe@2.0.3:
-    resolution: {integrity: sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w==}
-
-  picocolors@1.1.1:
-    resolution: {integrity: sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==}
-
-  picomatch@2.3.2:
-    resolution: {integrity: sha512-V7+vQEJ06Z+c5tSye8S+nHUfI51xoXIXjHQ99cQtKUkQqqO1kO/KCJUfZXuB47h/YBlDhah2H3hdUGXn8ie0oA==}
-    engines: {node: '>=8.6'}
-
-  picomatch@4.0.4:
-    resolution: {integrity: sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==}
-    engines: {node: '>=12'}
-
-  pkg-types@1.3.1:
-    resolution: {integrity: sha512-/Jm5M4RvtBFVkKWRu2BLUTNP8/M2a+UwuAX+ae4770q1qVGtfjG+WTCupoZixokjmHiry8uI+dlY8KXYV5HVVQ==}
-
-  points-on-curve@0.2.0:
-    resolution: {integrity: sha512-0mYKnYYe9ZcqMCWhUjItv/oHjvgEsfKvnUTg8sAtnHr3GVy7rGkXCb6d5cSyqrWqL4k81b9CPg3urd+T7aop3A==}
-
-  points-on-path@0.2.1:
-    resolution: {integrity: sha512-25ClnWWuw7JbWZcgqY/gJ4FQWadKxGWk+3kR/7kD0tCaDtPPMj7oHu2ToLaVhfpnHrZzYby2w6tUA0eOIuUg8g==}
-
-  postcss@8.5.12:
-    resolution: {integrity: sha512-W62t/Se6rA0Az3DfCL0AqJwXuKwBeYg6nOaIgzP+xZ7N5BFCI7DYi1qs6ygUYT6rvfi6t9k65UMLJC+PHZpDAA==}
-    engines: {node: ^10 || ^12 || >=14}
-
-  preact-iso@2.11.1:
-    resolution: {integrity: sha512-rLy0RmzP/hrDjnFdnEblxFgKtzUj4njkHrpGJBGS7S4QuYw1zv0lA38qsWpeAAB10JAz/hF2CsHrLen9ufCtbw==}
-    peerDependencies:
-      preact: '>=10 || >= 11.0.0-0'
-      preact-render-to-string: '>=6.4.0'
-
-  preact-render-to-string@6.6.7:
-    resolution: {integrity: sha512-3XdbsX3+vn9dQW+jJI/FsI9rlkgl6dbeUpqLsChak6jp3j3auFqBCkno7VChbMFs5Q8ylBj6DrUkKRwtVN3nvw==}
-    peerDependencies:
-      preact: '>=10 || >= 11.0.0-0'
-
-  preact@10.29.1:
-    resolution: {integrity: sha512-gQCLc/vWroE8lIpleXtdJhTFDogTdZG9AjMUpVkDf2iTCNwYNWA+u16dL41TqUDJO4gm2IgrcMv3uTpjd4Pwmg==}
-
-  prettier@3.8.3:
-    resolution: {integrity: sha512-7igPTM53cGHMW8xWuVTydi2KO233VFiTNyF5hLJqpilHfmn8C8gPf+PS7dUT64YcXFbiMGZxS9pCSxL/Dxm/Jw==}
-    engines: {node: '>=14'}
-    hasBin: true
-
-  robust-predicates@3.0.3:
-    resolution: {integrity: sha512-NS3levdsRIUOmiJ8FZWCP7LG3QpJyrs/TE0Zpf1yvZu8cAJJ6QMW92H1c7kWpdIHo8RvmLxN/o2JXTKHp74lUA==}
-
-  rollup@4.60.2:
-    resolution: {integrity: sha512-J9qZyW++QK/09NyN/zeO0dG/1GdGfyp9lV8ajHnRVLfo/uFsbji5mHnDgn/qYdUHyCkM2N+8VyspgZclfAh0eQ==}
-    engines: {node: '>=18.0.0', npm: '>=8.0.0'}
-    hasBin: true
-
-  roughjs@4.6.6:
-    resolution: {integrity: sha512-ZUz/69+SYpFN/g/lUlo2FXcIjRkSu3nDarreVdGGndHEBJ6cXPdKguS8JGxwj5HA5xIbVKSmLgr5b3AWxtRfvQ==}
-
-  rw@1.3.3:
-    resolution: {integrity: sha512-PdhdWy89SiZogBLaw42zdeqtRJ//zFd2PgQavcICDUgJT5oW10QCRKbJ6bg4r0/UY2M6BWd5tkxuGFRvCkgfHQ==}
-
-  safer-buffer@2.1.2:
-    resolution: {integrity: sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==}
-
-  semver@6.3.1:
-    resolution: {integrity: sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA==}
-    hasBin: true
-
-  simple-code-frame@1.3.0:
-    resolution: {integrity: sha512-MB4pQmETUBlNs62BBeRjIFGeuy/x6gGKh7+eRUemn1rCFhqo7K+4slPqsyizCbcbYLnaYqaoZ2FWsZ/jN06D8w==}
-
-  source-map-js@1.2.1:
-    resolution: {integrity: sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==}
-    engines: {node: '>=0.10.0'}
-
-  source-map@0.7.6:
-    resolution: {integrity: sha512-i5uvt8C3ikiWeNZSVZNWcfZPItFQOsYTUAOkcUPGd8DqDy1uOUikjt5dG+uRlwyvR108Fb9DOd4GvXfT0N2/uQ==}
-    engines: {node: '>= 12'}
-
-  stack-trace@1.0.0-pre2:
-    resolution: {integrity: sha512-2ztBJRek8IVofG9DBJqdy2N5kulaacX30Nz7xmkYF6ale9WBVmIy6mFBchvGX7Vx/MyjBhx+Rcxqrj+dbOnQ6A==}
-    engines: {node: '>=16'}
-
-  stylis@4.4.0:
-    resolution: {integrity: sha512-5Z9ZpRzfuH6l/UAvCPAPUo3665Nk2wLaZU3x+TLHKVzIz33+sbJqbtrYoC3KD4/uVOr2Zp+L0LySezP9OHV9yA==}
-
-  tinyexec@1.1.2:
-    resolution: {integrity: sha512-dAqSqE/RabpBKI8+h26GfLq6Vb3JVXs30XYQjdMjaj/c2tS8IYYMbIzP599KtRj7c57/wYApb3QjgRgXmrCukA==}
-    engines: {node: '>=18'}
-
-  tinyglobby@0.2.16:
-    resolution: {integrity: sha512-pn99VhoACYR8nFHhxqix+uvsbXineAasWm5ojXoN8xEwK5Kd3/TrhNn1wByuD52UxWRLy8pu+kRMniEi6Eq9Zg==}
-    engines: {node: '>=12.0.0'}
-
-  ts-dedent@2.2.0:
-    resolution: {integrity: sha512-q5W7tVM71e2xjHZTlgfTDoPF/SmqKG5hddq9SzR49CH2hayqRKJtQ4mtRlSxKaJlR/+9rEM+mnBHf7I2/BQcpQ==}
-    engines: {node: '>=6.10'}
-
-  typescript@6.0.3:
-    resolution: {integrity: sha512-y2TvuxSZPDyQakkFRPZHKFm+KKVqIisdg9/CZwm9ftvKXLP8NRWj38/ODjNbr43SsoXqNuAisEf1GdCxqWcdBw==}
-    engines: {node: '>=14.17'}
-    hasBin: true
-
-  ufo@1.6.4:
-    resolution: {integrity: sha512-JFNbkD1Svwe0KvGi8GOeLcP4kAWQ609twvCdcHxq1oSL8svv39ZuSvajcD8B+5D0eL4+s1Is2D/O6KN3qcTeRA==}
-
-  update-browserslist-db@1.2.3:
-    resolution: {integrity: sha512-Js0m9cx+qOgDxo0eMiFGEueWztz+d4+M3rGlmKPT+T4IS/jP4ylw3Nwpu6cpTTP8R1MAC1kF4VbdLt3ARf209w==}
-    hasBin: true
-    peerDependencies:
-      browserslist: '>= 4.21.0'
-
-  uuid@11.1.1:
-    resolution: {integrity: sha512-vIYxrBCC/N/K+Js3qSN88go7kIfNPssr/hHCesKCQNAjmgvYS2oqr69kIufEG+O4+PfezOH4EbIeHCfFov8ZgQ==}
-    hasBin: true
-
-  vite-prerender-plugin@0.5.13:
-    resolution: {integrity: sha512-IKSpYkzDBsKAxa05naRbj7GvNVMSdww/Z/E89oO3xndz+gWnOBOKOAbEXv7qDhktY/j3vHgJmoV1pPzqU2tx9g==}
-    peerDependencies:
-      vite: 5.x || 6.x || 7.x || 8.x
-
-  vite@7.3.2:
-    resolution: {integrity: sha512-Bby3NOsna2jsjfLVOHKes8sGwgl4TT0E6vvpYgnAYDIF/tie7MRaFthmKuHx1NSXjiTueXH3do80FMQgvEktRg==}
-    engines: {node: ^20.19.0 || >=22.12.0}
-    hasBin: true
-    peerDependencies:
-      '@types/node': ^20.19.0 || >=22.12.0
-      jiti: '>=1.21.0'
-      less: ^4.0.0
-      lightningcss: ^1.21.0
-      sass: ^1.70.0
-      sass-embedded: ^1.70.0
-      stylus: '>=0.54.8'
-      sugarss: ^5.0.0
-      terser: ^5.16.0
-      tsx: ^4.8.1
-      yaml: ^2.4.2
-    peerDependenciesMeta:
-      '@types/node':
-        optional: true
-      jiti:
-        optional: true
-      less:
-        optional: true
-      lightningcss:
-        optional: true
-      sass:
-        optional: true
-      sass-embedded:
-        optional: true
-      stylus:
-        optional: true
-      sugarss:
-        optional: true
-      terser:
-        optional: true
-      tsx:
-        optional: true
-      yaml:
-        optional: true
-
-  vscode-jsonrpc@8.2.0:
-    resolution: {integrity: sha512-C+r0eKJUIfiDIfwJhria30+TYWPtuHJXHtI7J0YlOmKAo7ogxP20T0zxB7HZQIFhIyvoBPwWskjxrvAtfjyZfA==}
-    engines: {node: '>=14.0.0'}
-
-  vscode-languageserver-protocol@3.17.5:
-    resolution: {integrity: sha512-mb1bvRJN8SVznADSGWM9u/b07H7Ecg0I3OgXDuLdn307rl/J3A9YD6/eYOssqhecL27hK1IPZAsaqh00i/Jljg==}
-
-  vscode-languageserver-textdocument@1.0.12:
-    resolution: {integrity: sha512-cxWNPesCnQCcMPeenjKKsOCKQZ/L6Tv19DTRIGuLWe32lyzWhihGVJ/rcckZXJxfdKCFvRLS3fpBIsV/ZGX4zA==}
-
-  vscode-languageserver-types@3.17.5:
-    resolution: {integrity: sha512-Ld1VelNuX9pdF39h2Hgaeb5hEZM2Z3jUrrMgWQAu82jMtZp7p3vJT3BzToKtZI7NgQssZje5o0zryOrhQvzQAg==}
-
-  vscode-languageserver@9.0.1:
-    resolution: {integrity: sha512-woByF3PDpkHFUreUa7Hos7+pUWdeWMXRd26+ZX2A8cFx6v/JPTtd4/uN0/jB6XQHYaOlHbio03NTHCqrgG5n7g==}
-    hasBin: true
-
-  vscode-uri@3.1.0:
-    resolution: {integrity: sha512-/BpdSx+yCQGnCvecbyXdxHDkuk55/G3xwnC0GqY4gmQ3j+A+g8kzzgB4Nk/SINjqn6+waqw3EgbVF2QKExkRxQ==}
-
-  yallist@3.1.1:
-    resolution: {integrity: sha512-a4UGQaWPH59mOXUYnAG2ewncQS4i4F43Tv3JoAM+s2VDAmS9NsK8GpDMLrCHPksFT7h3K6TOoUNn2pb7RoXx4g==}
-
-  zimmerframe@1.1.4:
-    resolution: {integrity: sha512-B58NGBEoc8Y9MWWCQGl/gq9xBCe4IiKM0a2x7GZdQKOW5Exr8S1W24J6OgM1njK8xCRGvAJIL/MxXHf6SkmQKQ==}
-
-snapshots:
-
-  '@antfu/install-pkg@1.1.0':
-    dependencies:
-      package-manager-detector: 1.6.0
-      tinyexec: 1.1.2
-
-  '@babel/code-frame@7.29.0':
-    dependencies:
-      '@babel/helper-validator-identifier': 7.28.5
-      js-tokens: 4.0.0
-      picocolors: 1.1.1
-
-  '@babel/compat-data@7.29.0': {}
-
-  '@babel/core@7.29.0':
-    dependencies:
-      '@babel/code-frame': 7.29.0
-      '@babel/generator': 7.29.1
-      '@babel/helper-compilation-targets': 7.28.6
-      '@babel/helper-module-transforms': 7.28.6(@babel/core@7.29.0)
-      '@babel/helpers': 7.29.2
-      '@babel/parser': 7.29.2
-      '@babel/template': 7.28.6
-      '@babel/traverse': 7.29.0
-      '@babel/types': 7.29.0
-      '@jridgewell/remapping': 2.3.5
-      convert-source-map: 2.0.0
-      debug: 4.4.3
-      gensync: 1.0.0-beta.2
-      json5: 2.2.3
-      semver: 6.3.1
-    transitivePeerDependencies:
-      - supports-color
-
-  '@babel/generator@7.29.1':
-    dependencies:
-      '@babel/parser': 7.29.2
-      '@babel/types': 7.29.0
-      '@jridgewell/gen-mapping': 0.3.13
-      '@jridgewell/trace-mapping': 0.3.31
-      jsesc: 3.1.0
-
-  '@babel/helper-annotate-as-pure@7.27.3':
-    dependencies:
-      '@babel/types': 7.29.0
-
-  '@babel/helper-compilation-targets@7.28.6':
-    dependencies:
-      '@babel/compat-data': 7.29.0
-      '@babel/helper-validator-option': 7.27.1
-      browserslist: 4.28.2
-      lru-cache: 5.1.1
-      semver: 6.3.1
-
-  '@babel/helper-globals@7.28.0': {}
-
-  '@babel/helper-module-imports@7.28.6':
-    dependencies:
-      '@babel/traverse': 7.29.0
-      '@babel/types': 7.29.0
-    transitivePeerDependencies:
-      - supports-color
-
-  '@babel/helper-module-transforms@7.28.6(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-module-imports': 7.28.6
-      '@babel/helper-validator-identifier': 7.28.5
-      '@babel/traverse': 7.29.0
-    transitivePeerDependencies:
-      - supports-color
-
-  '@babel/helper-plugin-utils@7.28.6': {}
-
-  '@babel/helper-string-parser@7.27.1': {}
-
-  '@babel/helper-validator-identifier@7.28.5': {}
-
-  '@babel/helper-validator-option@7.27.1': {}
-
-  '@babel/helpers@7.29.2':
-    dependencies:
-      '@babel/template': 7.28.6
-      '@babel/types': 7.29.0
-
-  '@babel/parser@7.29.2':
-    dependencies:
-      '@babel/types': 7.29.0
-
-  '@babel/plugin-syntax-jsx@7.28.6(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-plugin-utils': 7.28.6
-
-  '@babel/plugin-transform-react-jsx-development@7.27.1(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/plugin-transform-react-jsx': 7.28.6(@babel/core@7.29.0)
-    transitivePeerDependencies:
-      - supports-color
-
-  '@babel/plugin-transform-react-jsx@7.28.6(@babel/core@7.29.0)':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/helper-annotate-as-pure': 7.27.3
-      '@babel/helper-module-imports': 7.28.6
-      '@babel/helper-plugin-utils': 7.28.6
-      '@babel/plugin-syntax-jsx': 7.28.6(@babel/core@7.29.0)
-      '@babel/types': 7.29.0
-    transitivePeerDependencies:
-      - supports-color
-
-  '@babel/template@7.28.6':
-    dependencies:
-      '@babel/code-frame': 7.29.0
-      '@babel/parser': 7.29.2
-      '@babel/types': 7.29.0
-
-  '@babel/traverse@7.29.0':
-    dependencies:
-      '@babel/code-frame': 7.29.0
-      '@babel/generator': 7.29.1
-      '@babel/helper-globals': 7.28.0
-      '@babel/parser': 7.29.2
-      '@babel/template': 7.28.6
-      '@babel/types': 7.29.0
-      debug: 4.4.3
-    transitivePeerDependencies:
-      - supports-color
-
-  '@babel/types@7.29.0':
-    dependencies:
-      '@babel/helper-string-parser': 7.27.1
-      '@babel/helper-validator-identifier': 7.28.5
-
-  '@braintree/sanitize-url@7.1.2': {}
-
-  '@chevrotain/cst-dts-gen@12.0.0':
-    dependencies:
-      '@chevrotain/gast': 12.0.0
-      '@chevrotain/types': 12.0.0
-
-  '@chevrotain/gast@12.0.0':
-    dependencies:
-      '@chevrotain/types': 12.0.0
-
-  '@chevrotain/regexp-to-ast@12.0.0': {}
-
-  '@chevrotain/types@12.0.0': {}
-
-  '@chevrotain/utils@12.0.0': {}
-
-  '@esbuild/aix-ppc64@0.27.7':
-    optional: true
-
-  '@esbuild/android-arm64@0.27.7':
-    optional: true
-
-  '@esbuild/android-arm@0.27.7':
-    optional: true
-
-  '@esbuild/android-x64@0.27.7':
-    optional: true
-
-  '@esbuild/darwin-arm64@0.27.7':
-    optional: true
-
-  '@esbuild/darwin-x64@0.27.7':
-    optional: true
-
-  '@esbuild/freebsd-arm64@0.27.7':
-    optional: true
-
-  '@esbuild/freebsd-x64@0.27.7':
-    optional: true
-
-  '@esbuild/linux-arm64@0.27.7':
-    optional: true
-
-  '@esbuild/linux-arm@0.27.7':
-    optional: true
-
-  '@esbuild/linux-ia32@0.27.7':
-    optional: true
-
-  '@esbuild/linux-loong64@0.27.7':
-    optional: true
-
-  '@esbuild/linux-mips64el@0.27.7':
-    optional: true
-
-  '@esbuild/linux-ppc64@0.27.7':
-    optional: true
-
-  '@esbuild/linux-riscv64@0.27.7':
-    optional: true
-
-  '@esbuild/linux-s390x@0.27.7':
-    optional: true
-
-  '@esbuild/linux-x64@0.27.7':
-    optional: true
-
-  '@esbuild/netbsd-arm64@0.27.7':
-    optional: true
-
-  '@esbuild/netbsd-x64@0.27.7':
-    optional: true
-
-  '@esbuild/openbsd-arm64@0.27.7':
-    optional: true
-
-  '@esbuild/openbsd-x64@0.27.7':
-    optional: true
-
-  '@esbuild/openharmony-arm64@0.27.7':
-    optional: true
-
-  '@esbuild/sunos-x64@0.27.7':
-    optional: true
-
-  '@esbuild/win32-arm64@0.27.7':
-    optional: true
-
-  '@esbuild/win32-ia32@0.27.7':
-    optional: true
-
-  '@esbuild/win32-x64@0.27.7':
-    optional: true
-
-  '@iconify/types@2.0.0': {}
-
-  '@iconify/utils@3.1.1':
-    dependencies:
-      '@antfu/install-pkg': 1.1.0
-      '@iconify/types': 2.0.0
-      mlly: 1.8.2
-
-  '@jridgewell/gen-mapping@0.3.13':
-    dependencies:
-      '@jridgewell/sourcemap-codec': 1.5.5
-      '@jridgewell/trace-mapping': 0.3.31
-
-  '@jridgewell/remapping@2.3.5':
-    dependencies:
-      '@jridgewell/gen-mapping': 0.3.13
-      '@jridgewell/trace-mapping': 0.3.31
-
-  '@jridgewell/resolve-uri@3.1.2': {}
-
-  '@jridgewell/sourcemap-codec@1.5.5': {}
-
-  '@jridgewell/trace-mapping@0.3.31':
-    dependencies:
-      '@jridgewell/resolve-uri': 3.1.2
-      '@jridgewell/sourcemap-codec': 1.5.5
-
-  '@mermaid-js/parser@1.1.0':
-    dependencies:
-      langium: 4.2.2
-
-  '@preact/preset-vite@2.10.5(@babel/core@7.29.0)(preact@10.29.1)(rollup@4.60.2)(vite@7.3.2)':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@babel/plugin-transform-react-jsx': 7.28.6(@babel/core@7.29.0)
-      '@babel/plugin-transform-react-jsx-development': 7.27.1(@babel/core@7.29.0)
-      '@prefresh/vite': 2.4.12(preact@10.29.1)(vite@7.3.2)
-      '@rollup/pluginutils': 5.3.0(rollup@4.60.2)
-      babel-plugin-transform-hook-names: 1.0.2(@babel/core@7.29.0)
-      debug: 4.4.3
-      magic-string: 0.30.21
-      picocolors: 1.1.1
-      vite: 7.3.2
-      vite-prerender-plugin: 0.5.13(vite@7.3.2)
-      zimmerframe: 1.1.4
-    transitivePeerDependencies:
-      - preact
-      - rollup
-      - supports-color
-
-  '@prefresh/babel-plugin@0.5.3': {}
-
-  '@prefresh/core@1.5.9(preact@10.29.1)':
-    dependencies:
-      preact: 10.29.1
-
-  '@prefresh/utils@1.2.1': {}
-
-  '@prefresh/vite@2.4.12(preact@10.29.1)(vite@7.3.2)':
-    dependencies:
-      '@babel/core': 7.29.0
-      '@prefresh/babel-plugin': 0.5.3
-      '@prefresh/core': 1.5.9(preact@10.29.1)
-      '@prefresh/utils': 1.2.1
-      '@rollup/pluginutils': 4.2.1
-      preact: 10.29.1
-      vite: 7.3.2
-    transitivePeerDependencies:
-      - supports-color
-
-  '@rollup/pluginutils@4.2.1':
-    dependencies:
-      estree-walker: 2.0.2
-      picomatch: 2.3.2
-
-  '@rollup/pluginutils@5.3.0(rollup@4.60.2)':
-    dependencies:
-      '@types/estree': 1.0.8
-      estree-walker: 2.0.2
-      picomatch: 4.0.4
-    optionalDependencies:
-      rollup: 4.60.2
-
-  '@rollup/rollup-android-arm-eabi@4.60.2':
-    optional: true
-
-  '@rollup/rollup-android-arm64@4.60.2':
-    optional: true
-
-  '@rollup/rollup-darwin-arm64@4.60.2':
-    optional: true
-
-  '@rollup/rollup-darwin-x64@4.60.2':
-    optional: true
-
-  '@rollup/rollup-freebsd-arm64@4.60.2':
-    optional: true
-
-  '@rollup/rollup-freebsd-x64@4.60.2':
-    optional: true
-
-  '@rollup/rollup-linux-arm-gnueabihf@4.60.2':
-    optional: true
-
-  '@rollup/rollup-linux-arm-musleabihf@4.60.2':
-    optional: true
-
-  '@rollup/rollup-linux-arm64-gnu@4.60.2':
-    optional: true
-
-  '@rollup/rollup-linux-arm64-musl@4.60.2':
-    optional: true
-
-  '@rollup/rollup-linux-loong64-gnu@4.60.2':
-    optional: true
-
-  '@rollup/rollup-linux-loong64-musl@4.60.2':
-    optional: true
-
-  '@rollup/rollup-linux-ppc64-gnu@4.60.2':
-    optional: true
-
-  '@rollup/rollup-linux-ppc64-musl@4.60.2':
-    optional: true
-
-  '@rollup/rollup-linux-riscv64-gnu@4.60.2':
-    optional: true
-
-  '@rollup/rollup-linux-riscv64-musl@4.60.2':
-    optional: true
-
-  '@rollup/rollup-linux-s390x-gnu@4.60.2':
-    optional: true
-
-  '@rollup/rollup-linux-x64-gnu@4.60.2':
-    optional: true
-
-  '@rollup/rollup-linux-x64-musl@4.60.2':
-    optional: true
-
-  '@rollup/rollup-openbsd-x64@4.60.2':
-    optional: true
-
-  '@rollup/rollup-openharmony-arm64@4.60.2':
-    optional: true
-
-  '@rollup/rollup-win32-arm64-msvc@4.60.2':
-    optional: true
-
-  '@rollup/rollup-win32-ia32-msvc@4.60.2':
-    optional: true
-
-  '@rollup/rollup-win32-x64-gnu@4.60.2':
-    optional: true
-
-  '@rollup/rollup-win32-x64-msvc@4.60.2':
-    optional: true
-
-  '@types/d3-array@3.2.2': {}
-
-  '@types/d3-axis@3.0.6':
-    dependencies:
-      '@types/d3-selection': 3.0.11
-
-  '@types/d3-brush@3.0.6':
-    dependencies:
-      '@types/d3-selection': 3.0.11
-
-  '@types/d3-chord@3.0.6': {}
-
-  '@types/d3-color@3.1.3': {}
-
-  '@types/d3-contour@3.0.6':
-    dependencies:
-      '@types/d3-array': 3.2.2
-      '@types/geojson': 7946.0.16
-
-  '@types/d3-delaunay@6.0.4': {}
-
-  '@types/d3-dispatch@3.0.7': {}
-
-  '@types/d3-drag@3.0.7':
-    dependencies:
-      '@types/d3-selection': 3.0.11
-
-  '@types/d3-dsv@3.0.7': {}
-
-  '@types/d3-ease@3.0.2': {}
-
-  '@types/d3-fetch@3.0.7':
-    dependencies:
-      '@types/d3-dsv': 3.0.7
-
-  '@types/d3-force@3.0.10': {}
-
-  '@types/d3-format@3.0.4': {}
-
-  '@types/d3-geo@3.1.0':
-    dependencies:
-      '@types/geojson': 7946.0.16
-
-  '@types/d3-hierarchy@3.1.7': {}
-
-  '@types/d3-interpolate@3.0.4':
-    dependencies:
-      '@types/d3-color': 3.1.3
-
-  '@types/d3-path@3.1.1': {}
-
-  '@types/d3-polygon@3.0.2': {}
-
-  '@types/d3-quadtree@3.0.6': {}
-
-  '@types/d3-random@3.0.3': {}
-
-  '@types/d3-scale-chromatic@3.1.0': {}
-
-  '@types/d3-scale@4.0.9':
-    dependencies:
-      '@types/d3-time': 3.0.4
-
-  '@types/d3-selection@3.0.11': {}
-
-  '@types/d3-shape@3.1.8':
-    dependencies:
-      '@types/d3-path': 3.1.1
-
-  '@types/d3-time-format@4.0.3': {}
-
-  '@types/d3-time@3.0.4': {}
-
-  '@types/d3-timer@3.0.2': {}
-
-  '@types/d3-transition@3.0.9':
-    dependencies:
-      '@types/d3-selection': 3.0.11
-
-  '@types/d3-zoom@3.0.8':
-    dependencies:
-      '@types/d3-interpolate': 3.0.4
-      '@types/d3-selection': 3.0.11
-
-  '@types/d3@7.4.3':
-    dependencies:
-      '@types/d3-array': 3.2.2
-      '@types/d3-axis': 3.0.6
-      '@types/d3-brush': 3.0.6
-      '@types/d3-chord': 3.0.6
-      '@types/d3-color': 3.1.3
-      '@types/d3-contour': 3.0.6
-      '@types/d3-delaunay': 6.0.4
-      '@types/d3-dispatch': 3.0.7
-      '@types/d3-drag': 3.0.7
-      '@types/d3-dsv': 3.0.7
-      '@types/d3-ease': 3.0.2
-      '@types/d3-fetch': 3.0.7
-      '@types/d3-force': 3.0.10
-      '@types/d3-format': 3.0.4
-      '@types/d3-geo': 3.1.0
-      '@types/d3-hierarchy': 3.1.7
-      '@types/d3-interpolate': 3.0.4
-      '@types/d3-path': 3.1.1
-      '@types/d3-polygon': 3.0.2
-      '@types/d3-quadtree': 3.0.6
-      '@types/d3-random': 3.0.3
-      '@types/d3-scale': 4.0.9
-      '@types/d3-scale-chromatic': 3.1.0
-      '@types/d3-selection': 3.0.11
-      '@types/d3-shape': 3.1.8
-      '@types/d3-time': 3.0.4
-      '@types/d3-time-format': 4.0.3
-      '@types/d3-timer': 3.0.2
-      '@types/d3-transition': 3.0.9
-      '@types/d3-zoom': 3.0.8
-
-  '@types/estree@1.0.8': {}
-
-  '@types/geojson@7946.0.16': {}
-
-  '@types/trusted-types@2.0.7':
-    optional: true
-
-  '@upsetjs/venn.js@2.0.0':
-    optionalDependencies:
-      d3-selection: 3.0.0
-      d3-transition: 3.0.1(d3-selection@3.0.0)
-
-  acorn@8.16.0: {}
-
-  babel-plugin-transform-hook-names@1.0.2(@babel/core@7.29.0):
-    dependencies:
-      '@babel/core': 7.29.0
-
-  baseline-browser-mapping@2.10.24: {}
-
-  boolbase@1.0.0: {}
-
-  browserslist@4.28.2:
-    dependencies:
-      baseline-browser-mapping: 2.10.24
-      caniuse-lite: 1.0.30001791
-      electron-to-chromium: 1.5.344
-      node-releases: 2.0.38
-      update-browserslist-db: 1.2.3(browserslist@4.28.2)
-
-  caniuse-lite@1.0.30001791: {}
-
-  chevrotain-allstar@0.4.1(chevrotain@12.0.0):
-    dependencies:
-      chevrotain: 12.0.0
-      lodash-es: 4.18.1
-
-  chevrotain@12.0.0:
-    dependencies:
-      '@chevrotain/cst-dts-gen': 12.0.0
-      '@chevrotain/gast': 12.0.0
-      '@chevrotain/regexp-to-ast': 12.0.0
-      '@chevrotain/types': 12.0.0
-      '@chevrotain/utils': 12.0.0
-
-  commander@7.2.0: {}
-
-  commander@8.3.0: {}
-
-  confbox@0.1.8: {}
-
-  convert-source-map@2.0.0: {}
-
-  cose-base@1.0.3:
-    dependencies:
-      layout-base: 1.0.2
-
-  cose-base@2.2.0:
-    dependencies:
-      layout-base: 2.0.1
-
-  css-select@5.2.2:
-    dependencies:
-      boolbase: 1.0.0
-      css-what: 6.2.2
-      domhandler: 5.0.3
-      domutils: 3.2.2
-      nth-check: 2.1.1
-
-  css-what@6.2.2: {}
-
-  cytoscape-cose-bilkent@4.1.0(cytoscape@3.33.3):
-    dependencies:
-      cose-base: 1.0.3
-      cytoscape: 3.33.3
-
-  cytoscape-fcose@2.2.0(cytoscape@3.33.3):
-    dependencies:
-      cose-base: 2.2.0
-      cytoscape: 3.33.3
-
-  cytoscape@3.33.3: {}
-
-  d3-array@2.12.1:
-    dependencies:
-      internmap: 1.0.1
-
-  d3-array@3.2.4:
-    dependencies:
-      internmap: 2.0.3
-
-  d3-axis@3.0.0: {}
-
-  d3-brush@3.0.0:
-    dependencies:
-      d3-dispatch: 3.0.1
-      d3-drag: 3.0.0
-      d3-interpolate: 3.0.1
-      d3-selection: 3.0.0
-      d3-transition: 3.0.1(d3-selection@3.0.0)
-
-  d3-chord@3.0.1:
-    dependencies:
-      d3-path: 3.1.0
-
-  d3-color@3.1.0: {}
-
-  d3-contour@4.0.2:
-    dependencies:
-      d3-array: 3.2.4
-
-  d3-delaunay@6.0.4:
-    dependencies:
-      delaunator: 5.1.0
-
-  d3-dispatch@3.0.1: {}
-
-  d3-drag@3.0.0:
-    dependencies:
-      d3-dispatch: 3.0.1
-      d3-selection: 3.0.0
-
-  d3-dsv@3.0.1:
-    dependencies:
-      commander: 7.2.0
-      iconv-lite: 0.6.3
-      rw: 1.3.3
-
-  d3-ease@3.0.1: {}
-
-  d3-fetch@3.0.1:
-    dependencies:
-      d3-dsv: 3.0.1
-
-  d3-force@3.0.0:
-    dependencies:
-      d3-dispatch: 3.0.1
-      d3-quadtree: 3.0.1
-      d3-timer: 3.0.1
-
-  d3-format@3.1.2: {}
-
-  d3-geo@3.1.1:
-    dependencies:
-      d3-array: 3.2.4
-
-  d3-hierarchy@3.1.2: {}
-
-  d3-interpolate@3.0.1:
-    dependencies:
-      d3-color: 3.1.0
-
-  d3-path@1.0.9: {}
-
-  d3-path@3.1.0: {}
-
-  d3-polygon@3.0.1: {}
-
-  d3-quadtree@3.0.1: {}
-
-  d3-random@3.0.1: {}
-
-  d3-sankey@0.12.3:
-    dependencies:
-      d3-array: 2.12.1
-      d3-shape: 1.3.7
-
-  d3-scale-chromatic@3.1.0:
-    dependencies:
-      d3-color: 3.1.0
-      d3-interpolate: 3.0.1
-
-  d3-scale@4.0.2:
-    dependencies:
-      d3-array: 3.2.4
-      d3-format: 3.1.2
-      d3-interpolate: 3.0.1
-      d3-time: 3.1.0
-      d3-time-format: 4.1.0
-
-  d3-selection@3.0.0: {}
-
-  d3-shape@1.3.7:
-    dependencies:
-      d3-path: 1.0.9
-
-  d3-shape@3.2.0:
-    dependencies:
-      d3-path: 3.1.0
-
-  d3-time-format@4.1.0:
-    dependencies:
-      d3-time: 3.1.0
-
-  d3-time@3.1.0:
-    dependencies:
-      d3-array: 3.2.4
-
-  d3-timer@3.0.1: {}
-
-  d3-transition@3.0.1(d3-selection@3.0.0):
-    dependencies:
-      d3-color: 3.1.0
-      d3-dispatch: 3.0.1
-      d3-ease: 3.0.1
-      d3-interpolate: 3.0.1
-      d3-selection: 3.0.0
-      d3-timer: 3.0.1
-
-  d3-zoom@3.0.0:
-    dependencies:
-      d3-dispatch: 3.0.1
-      d3-drag: 3.0.0
-      d3-interpolate: 3.0.1
-      d3-selection: 3.0.0
-      d3-transition: 3.0.1(d3-selection@3.0.0)
-
-  d3@7.9.0:
-    dependencies:
-      d3-array: 3.2.4
-      d3-axis: 3.0.0
-      d3-brush: 3.0.0
-      d3-chord: 3.0.1
-      d3-color: 3.1.0
-      d3-contour: 4.0.2
-      d3-delaunay: 6.0.4
-      d3-dispatch: 3.0.1
-      d3-drag: 3.0.0
-      d3-dsv: 3.0.1
-      d3-ease: 3.0.1
-      d3-fetch: 3.0.1
-      d3-force: 3.0.0
-      d3-format: 3.1.2
-      d3-geo: 3.1.1
-      d3-hierarchy: 3.1.2
-      d3-interpolate: 3.0.1
-      d3-path: 3.1.0
-      d3-polygon: 3.0.1
-      d3-quadtree: 3.0.1
-      d3-random: 3.0.1
-      d3-scale: 4.0.2
-      d3-scale-chromatic: 3.1.0
-      d3-selection: 3.0.0
-      d3-shape: 3.2.0
-      d3-time: 3.1.0
-      d3-time-format: 4.1.0
-      d3-timer: 3.0.1
-      d3-transition: 3.0.1(d3-selection@3.0.0)
-      d3-zoom: 3.0.0
-
-  dagre-d3-es@7.0.14:
-    dependencies:
-      d3: 7.9.0
-      lodash-es: 4.18.1
-
-  dayjs@1.11.20: {}
-
-  debug@4.4.3:
-    dependencies:
-      ms: 2.1.3
-
-  delaunator@5.1.0:
-    dependencies:
-      robust-predicates: 3.0.3
-
-  dom-serializer@2.0.0:
-    dependencies:
-      domelementtype: 2.3.0
-      domhandler: 5.0.3
-      entities: 4.5.0
-
-  domelementtype@2.3.0: {}
-
-  domhandler@5.0.3:
-    dependencies:
-      domelementtype: 2.3.0
-
-  dompurify@3.4.1:
-    optionalDependencies:
-      '@types/trusted-types': 2.0.7
-
-  domutils@3.2.2:
-    dependencies:
-      dom-serializer: 2.0.0
-      domelementtype: 2.3.0
-      domhandler: 5.0.3
-
-  electron-to-chromium@1.5.344: {}
-
-  entities@4.5.0: {}
-
-  esbuild@0.27.7:
-    optionalDependencies:
-      '@esbuild/aix-ppc64': 0.27.7
-      '@esbuild/android-arm': 0.27.7
-      '@esbuild/android-arm64': 0.27.7
-      '@esbuild/android-x64': 0.27.7
-      '@esbuild/darwin-arm64': 0.27.7
-      '@esbuild/darwin-x64': 0.27.7
-      '@esbuild/freebsd-arm64': 0.27.7
-      '@esbuild/freebsd-x64': 0.27.7
-      '@esbuild/linux-arm': 0.27.7
-      '@esbuild/linux-arm64': 0.27.7
-      '@esbuild/linux-ia32': 0.27.7
-      '@esbuild/linux-loong64': 0.27.7
-      '@esbuild/linux-mips64el': 0.27.7
-      '@esbuild/linux-ppc64': 0.27.7
-      '@esbuild/linux-riscv64': 0.27.7
-      '@esbuild/linux-s390x': 0.27.7
-      '@esbuild/linux-x64': 0.27.7
-      '@esbuild/netbsd-arm64': 0.27.7
-      '@esbuild/netbsd-x64': 0.27.7
-      '@esbuild/openbsd-arm64': 0.27.7
-      '@esbuild/openbsd-x64': 0.27.7
-      '@esbuild/openharmony-arm64': 0.27.7
-      '@esbuild/sunos-x64': 0.27.7
-      '@esbuild/win32-arm64': 0.27.7
-      '@esbuild/win32-ia32': 0.27.7
-      '@esbuild/win32-x64': 0.27.7
-
-  escalade@3.2.0: {}
-
-  estree-walker@2.0.2: {}
-
-  fdir@6.5.0(picomatch@4.0.4):
-    optionalDependencies:
-      picomatch: 4.0.4
-
-  fsevents@2.3.3:
-    optional: true
-
-  gensync@1.0.0-beta.2: {}
-
-  hachure-fill@0.5.2: {}
-
-  he@1.2.0: {}
-
-  iconv-lite@0.6.3:
-    dependencies:
-      safer-buffer: 2.1.2
-
-  internmap@1.0.1: {}
-
-  internmap@2.0.3: {}
-
-  js-tokens@4.0.0: {}
-
-  jsesc@3.1.0: {}
-
-  json5@2.2.3: {}
-
-  katex@0.16.45:
-    dependencies:
-      commander: 8.3.0
-
-  khroma@2.1.0: {}
-
-  kolorist@1.8.0: {}
-
-  langium@4.2.2:
-    dependencies:
-      '@chevrotain/regexp-to-ast': 12.0.0
-      chevrotain: 12.0.0
-      chevrotain-allstar: 0.4.1(chevrotain@12.0.0)
-      vscode-languageserver: 9.0.1
-      vscode-languageserver-textdocument: 1.0.12
-      vscode-uri: 3.1.0
-
-  layout-base@1.0.2: {}
-
-  layout-base@2.0.1: {}
-
-  lodash-es@4.18.1: {}
-
-  lru-cache@5.1.1:
-    dependencies:
-      yallist: 3.1.1
-
-  lucide-preact@1.14.0(preact@10.29.1):
-    dependencies:
-      preact: 10.29.1
-
-  magic-string@0.30.21:
-    dependencies:
-      '@jridgewell/sourcemap-codec': 1.5.5
-
-  marked@16.4.2: {}
-
-  mermaid@11.14.0:
-    dependencies:
-      '@braintree/sanitize-url': 7.1.2
-      '@iconify/utils': 3.1.1
-      '@mermaid-js/parser': 1.1.0
-      '@types/d3': 7.4.3
-      '@upsetjs/venn.js': 2.0.0
-      cytoscape: 3.33.3
-      cytoscape-cose-bilkent: 4.1.0(cytoscape@3.33.3)
-      cytoscape-fcose: 2.2.0(cytoscape@3.33.3)
-      d3: 7.9.0
-      d3-sankey: 0.12.3
-      dagre-d3-es: 7.0.14
-      dayjs: 1.11.20
-      dompurify: 3.4.1
-      katex: 0.16.45
-      khroma: 2.1.0
-      lodash-es: 4.18.1
-      marked: 16.4.2
-      roughjs: 4.6.6
-      stylis: 4.4.0
-      ts-dedent: 2.2.0
-      uuid: 11.1.1
-
-  mlly@1.8.2:
-    dependencies:
-      acorn: 8.16.0
-      pathe: 2.0.3
-      pkg-types: 1.3.1
-      ufo: 1.6.4
-
-  ms@2.1.3: {}
-
-  nanoid@3.3.11: {}
-
-  node-html-parser@6.1.13:
-    dependencies:
-      css-select: 5.2.2
-      he: 1.2.0
-
-  node-releases@2.0.38: {}
-
-  nth-check@2.1.1:
-    dependencies:
-      boolbase: 1.0.0
-
-  package-manager-detector@1.6.0: {}
-
-  path-data-parser@0.1.0: {}
-
-  pathe@2.0.3: {}
-
-  picocolors@1.1.1: {}
-
-  picomatch@2.3.2: {}
-
-  picomatch@4.0.4: {}
-
-  pkg-types@1.3.1:
-    dependencies:
-      confbox: 0.1.8
-      mlly: 1.8.2
-      pathe: 2.0.3
-
-  points-on-curve@0.2.0: {}
-
-  points-on-path@0.2.1:
-    dependencies:
-      path-data-parser: 0.1.0
-      points-on-curve: 0.2.0
-
-  postcss@8.5.12:
-    dependencies:
-      nanoid: 3.3.11
-      picocolors: 1.1.1
-      source-map-js: 1.2.1
-
-  preact-iso@2.11.1(preact-render-to-string@6.6.7(preact@10.29.1))(preact@10.29.1):
-    dependencies:
-      preact: 10.29.1
-      preact-render-to-string: 6.6.7(preact@10.29.1)
-
-  preact-render-to-string@6.6.7(preact@10.29.1):
-    dependencies:
-      preact: 10.29.1
-
-  preact@10.29.1: {}
-
-  prettier@3.8.3: {}
-
-  robust-predicates@3.0.3: {}
-
-  rollup@4.60.2:
-    dependencies:
-      '@types/estree': 1.0.8
-    optionalDependencies:
-      '@rollup/rollup-android-arm-eabi': 4.60.2
-      '@rollup/rollup-android-arm64': 4.60.2
-      '@rollup/rollup-darwin-arm64': 4.60.2
-      '@rollup/rollup-darwin-x64': 4.60.2
-      '@rollup/rollup-freebsd-arm64': 4.60.2
-      '@rollup/rollup-freebsd-x64': 4.60.2
-      '@rollup/rollup-linux-arm-gnueabihf': 4.60.2
-      '@rollup/rollup-linux-arm-musleabihf': 4.60.2
-      '@rollup/rollup-linux-arm64-gnu': 4.60.2
-      '@rollup/rollup-linux-arm64-musl': 4.60.2
-      '@rollup/rollup-linux-loong64-gnu': 4.60.2
-      '@rollup/rollup-linux-loong64-musl': 4.60.2
-      '@rollup/rollup-linux-ppc64-gnu': 4.60.2
-      '@rollup/rollup-linux-ppc64-musl': 4.60.2
-      '@rollup/rollup-linux-riscv64-gnu': 4.60.2
-      '@rollup/rollup-linux-riscv64-musl': 4.60.2
-      '@rollup/rollup-linux-s390x-gnu': 4.60.2
-      '@rollup/rollup-linux-x64-gnu': 4.60.2
-      '@rollup/rollup-linux-x64-musl': 4.60.2
-      '@rollup/rollup-openbsd-x64': 4.60.2
-      '@rollup/rollup-openharmony-arm64': 4.60.2
-      '@rollup/rollup-win32-arm64-msvc': 4.60.2
-      '@rollup/rollup-win32-ia32-msvc': 4.60.2
-      '@rollup/rollup-win32-x64-gnu': 4.60.2
-      '@rollup/rollup-win32-x64-msvc': 4.60.2
-      fsevents: 2.3.3
-
-  roughjs@4.6.6:
-    dependencies:
-      hachure-fill: 0.5.2
-      path-data-parser: 0.1.0
-      points-on-curve: 0.2.0
-      points-on-path: 0.2.1
-
-  rw@1.3.3: {}
-
-  safer-buffer@2.1.2: {}
-
-  semver@6.3.1: {}
-
-  simple-code-frame@1.3.0:
-    dependencies:
-      kolorist: 1.8.0
-
-  source-map-js@1.2.1: {}
-
-  source-map@0.7.6: {}
-
-  stack-trace@1.0.0-pre2: {}
-
-  stylis@4.4.0: {}
-
-  tinyexec@1.1.2: {}
-
-  tinyglobby@0.2.16:
-    dependencies:
-      fdir: 6.5.0(picomatch@4.0.4)
-      picomatch: 4.0.4
-
-  ts-dedent@2.2.0: {}
-
-  typescript@6.0.3: {}
-
-  ufo@1.6.4: {}
-
-  update-browserslist-db@1.2.3(browserslist@4.28.2):
-    dependencies:
-      browserslist: 4.28.2
-      escalade: 3.2.0
-      picocolors: 1.1.1
-
-  uuid@11.1.1: {}
-
-  vite-prerender-plugin@0.5.13(vite@7.3.2):
-    dependencies:
-      kolorist: 1.8.0
-      magic-string: 0.30.21
-      node-html-parser: 6.1.13
-      simple-code-frame: 1.3.0
-      source-map: 0.7.6
-      stack-trace: 1.0.0-pre2
-      vite: 7.3.2
-
-  vite@7.3.2:
-    dependencies:
-      esbuild: 0.27.7
-      fdir: 6.5.0(picomatch@4.0.4)
-      picomatch: 4.0.4
-      postcss: 8.5.12
-      rollup: 4.60.2
-      tinyglobby: 0.2.16
-    optionalDependencies:
-      fsevents: 2.3.3
-
-  vscode-jsonrpc@8.2.0: {}
-
-  vscode-languageserver-protocol@3.17.5:
-    dependencies:
-      vscode-jsonrpc: 8.2.0
-      vscode-languageserver-types: 3.17.5
-
-  vscode-languageserver-textdocument@1.0.12: {}
-
-  vscode-languageserver-types@3.17.5: {}
-
-  vscode-languageserver@9.0.1:
-    dependencies:
-      vscode-languageserver-protocol: 3.17.5
-
-  vscode-uri@3.1.0: {}
-
-  yallist@3.1.1: {}
-
-  zimmerframe@1.1.4: {}
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
deleted file mode 100644
index 85e7a0d..0000000
--- a/pnpm-workspace.yaml
+++ /dev/null
@@ -1,5 +0,0 @@
-packages:
-  - 'apps/*'
-
-# Delay installs of newly published packages by 7 days.
-minimumReleaseAge: 10080