Files
tabs/components
zooqueen 385fa229d9 A linked machine's terminal is the same signed-in person as the page
The pane framing a linked machine's shell asked you to sign in again. Its
tunnel is gated on hanzo.id, hanzo.id refuses to be framed — correctly, a login
page inside someone else's document is clickjacking — so the gate's redirect
could not run in the frame, and the workspace fell back to opening a second
sign-in in a second tab. For the same person, already signed in, on the same
identity. Per machine, and again every three hours.

The tunnel is now asked directly, with the token this page already reads the
registry with, and answers with the session the redirect would have set. What
that removes is a whole shape: a pane URL is MINTED for every machine now,
never derived, so the workspace no longer knows whether a pane is a sandbox we
started or a machine you linked — they differ only in who serves the page and
what credential opens it, and neither is a layout's business.

The rescue collapses with it. One card, one button, for any credential that
stopped working: ask for another. A mint that never lands offers it too, rather
than leaving a pane waiting on a frame that was never made.
2026-08-11 10:29:11 -07:00
..