Enable local control with cloud authorization or browser approval

[fkesheh]

Cloud outages previously left local session management dependent on cloud RPC. This adds direct local commands, updates, and terminal access through the same session and loop controllers.

• Add This computer before login and on the cloud dashboard. Authenticated cloud presence automatically establishes remembered local access, so switching from Cloud requires no additional pairing.
• Add ftown-bridge --local for startup without cloud onboarding, and pair, devices, and revoke for standalone browser approval. Credentials are bound to the bridge and exact browser origin; the bridge persists only hashes.
• Keep local operations responsive when cloud delivery fails or hangs. Add bounded event history, command deduplication, reconnection, stable local ports, and terminal revocation.
• Preserve the existing Solo deployment and bump the bridge to 0.19.28.

Validation: 798 bridge tests and 271 UI tests pass. Bridge TypeScript build and UI production build (including lint/type checks, using dummy build-only auth secrets) pass. Assembled HTTP/WebSocket tests cover approval, session create/list/remove, disconnected cloud updates, terminal input, revocation, origin/Host rejection, and port reuse; process execution uses a runner fake. The running bridge's read-only harness status also passes.

Switching the dashboard between Cloud and This computer remains explicit. The hosted UI must load initially; offline/PWA caching is outside this change. No live bridge restart or deployment was performed.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
ftown	Ready	Preview	Sep 18, 2026 1:17am UTC