diff --git a/dashboard/.dockerignore b/dashboard/.dockerignore
new file mode 100644
index 0000000..e8260b5
--- /dev/null
+++ b/dashboard/.dockerignore
@@ -0,0 +1,7 @@
+node_modules
+dist
+.git
+Dockerfile
+.dockerignore
+*.local
+.env*
diff --git a/dashboard/.gitignore b/dashboard/.gitignore
new file mode 100644
index 0000000..aaa9103
--- /dev/null
+++ b/dashboard/.gitignore
@@ -0,0 +1,2 @@
+test-results/
+playwright-report/
diff --git a/dashboard/.nvmrc b/dashboard/.nvmrc
new file mode 100644
index 0000000..ce62013
--- /dev/null
+++ b/dashboard/.nvmrc
@@ -0,0 +1 @@
+24.22.1
diff --git a/dashboard/.oxlintrc.json b/dashboard/.oxlintrc.json
new file mode 100644
index 0000000..6fa991d
--- /dev/null
+++ b/dashboard/.oxlintrc.json
@@ -0,0 +1,8 @@
+{
+  "$schema": "./node_modules/oxlint/configuration_schema.json",
+  "plugins": ["react", "typescript", "oxc"],
+  "rules": {
+    "react/rules-of-hooks": "error",
+    "react/only-export-components": ["warn", { "allowConstantExport": true }]
+  }
+}
diff --git a/dashboard/Dockerfile b/dashboard/Dockerfile
new file mode 100644
index 0000000..fd8bdaf
--- /dev/null
+++ b/dashboard/Dockerfile
@@ -0,0 +1,24 @@
+# Two stages. The first turns the React source into plain files; the second keeps
+# only those files and a web server. Node never reaches the running container.
+
+FROM node:24.22.1-alpine AS build
+WORKDIR /app
+
+# package.json and the lockfile first, on their own layer: they change far less
+# often than the source, so npm ci is skipped on most rebuilds.
+COPY package.json package-lock.json ./
+RUN npm ci
+
+COPY . .
+
+# Vite reads VITE_* variables at build time and writes the values into the bundle,
+# so the API address is chosen here, not when the container starts.
+ARG VITE_API_URL=https://api.myrelay.tech
+ENV VITE_API_URL=$VITE_API_URL
+
+RUN npm run build
+
+FROM nginxinc/nginx-unprivileged:1.29.3-alpine
+COPY --from=build /app/dist /usr/share/nginx/html
+COPY nginx.conf /etc/nginx/conf.d/default.conf
+EXPOSE 8080
diff --git a/dashboard/e2e/connect-first.ts b/dashboard/e2e/connect-first.ts
new file mode 100644
index 0000000..5d9f2bb
--- /dev/null
+++ b/dashboard/e2e/connect-first.ts
@@ -0,0 +1,11 @@
+import type { Page } from '@playwright/test'
+
+// Every screen except Connect needs a key in sessionStorage. Going through the
+// real form rather than writing the key directly means the tests break if the
+// gate breaks, instead of quietly walking around it.
+export async function connect(page: Page) {
+  await page.goto('/')
+  await page.getByLabel('API key').fill('relay_live_8f2k')
+  await page.getByRole('button', { name: 'Connect' }).click()
+  await page.waitForURL('/deliveries')
+}
diff --git a/dashboard/e2e/connect.spec.ts b/dashboard/e2e/connect.spec.ts
new file mode 100644
index 0000000..eb1e8fc
--- /dev/null
+++ b/dashboard/e2e/connect.spec.ts
@@ -0,0 +1,31 @@
+import { expect, test } from './fixtures'
+
+// The gate in front of everything else: a key that works gets you in, one that
+// doesn't gets a message, and no key at all gets you sent back.
+
+test('a key the API would reject shows the error from the contract', async ({ page }) => {
+  await page.goto('/')
+  await page.getByLabel('API key').fill('nope')
+  await page.getByRole('button', { name: 'Connect' }).click()
+
+  await expect(page.getByText('Unknown or revoked API key')).toBeVisible()
+  await expect(page).toHaveURL('/')
+})
+
+test('a key that works lands on the delivery log', async ({ page }) => {
+  await page.goto('/')
+  await page.getByLabel('API key').fill('relay_live_8f2k')
+  await page.getByRole('button', { name: 'Connect' }).click()
+
+  await expect(page).toHaveURL('/deliveries')
+  await expect(page.getByRole('heading', { name: 'Delivery log' })).toBeVisible()
+})
+
+test('without a key, a deep link goes back to Connect', async ({ page }) => {
+  // Straight to an inside page, no key in sessionStorage. The guard in App.tsx
+  // has to send us back, or the screens are reachable by typing a URL.
+  await page.goto('/endpoints')
+
+  await expect(page).toHaveURL('/')
+  await expect(page.getByRole('heading', { name: 'Connect to Relay' })).toBeVisible()
+})
diff --git a/dashboard/e2e/deliveries.spec.ts b/dashboard/e2e/deliveries.spec.ts
new file mode 100644
index 0000000..3738b35
--- /dev/null
+++ b/dashboard/e2e/deliveries.spec.ts
@@ -0,0 +1,134 @@
+import type { Page } from '@playwright/test'
+import { expect, test } from './fixtures'
+import { connect } from './connect-first'
+
+// The fixtures in src/mocks.ts are fixed, so the counts are too. Writing them
+// out means a test fails if a fixture quietly disappears, which is how two log
+// rows ended up with no detail screen in the first place.
+const ROWS = { all: 5, pending: 1, delivered: 2, dead: 2 }
+
+test.beforeEach(async ({ page }) => {
+  await connect(page)
+})
+
+// Opens the first row under a filter. Waiting for the heading, not just the URL:
+// React Router changes the address before it renders, so the URL alone can be the
+// detail screen while the DOM is still the log.
+async function openFirst(page: Page, filter: keyof typeof ROWS) {
+  await page.getByRole('button', { name: filter, exact: true }).click()
+  await expect(page.locator('tbody tr')).toHaveCount(ROWS[filter])
+  await page.locator('tbody a').first().click()
+  await expect(page.getByRole('link', { name: '← Back to the log' })).toBeVisible()
+}
+
+// Opens one named delivery. `dead` holds two rows now, and "Old CRM" sorts first
+// because the log is newest first, so a test that means a particular delivery has
+// to say which one instead of taking whichever is on top.
+async function openRow(page: Page, rowText: string) {
+  await page.goto('/deliveries')
+  await page.locator('tbody tr', { hasText: rowText }).locator('a').click()
+  await expect(page.getByRole('link', { name: '← Back to the log' })).toBeVisible()
+}
+
+test('every row in the log opens its delivery', async ({ page }) => {
+  // Two of the four rows used to open "Delivery not found", because only the
+  // pending and dead deliveries had a detail fixture.
+  await expect(page.locator('tbody tr')).toHaveCount(ROWS.all)
+
+  for (let i = 0; i < ROWS.all; i++) {
+    await page.goto('/deliveries')
+    await page.locator('tbody a').nth(i).click()
+
+    await expect(page.getByRole('link', { name: '← Back to the log' })).toBeVisible()
+    await expect(page.getByText('Delivery not found')).toBeHidden()
+    await expect(page.getByTestId('status')).toBeVisible()
+  }
+})
+
+test('the filters narrow the log and can be cleared', async ({ page }) => {
+  await expect(page.locator('tbody tr')).toHaveCount(ROWS.all)
+
+  await page.getByRole('button', { name: 'dead', exact: true }).click()
+  await expect(page.locator('tbody tr')).toHaveCount(ROWS.dead)
+  // An array, not a single string: the filter holds two rows now, and asserting
+  // every one of them is what makes this a filter test rather than a count test.
+  await expect(page.getByTestId('status')).toHaveText(Array(ROWS.dead).fill('dead'))
+
+  await page.getByRole('button', { name: 'all', exact: true }).click()
+  await expect(page.locator('tbody tr')).toHaveCount(ROWS.all)
+})
+
+test('replaying a dead delivery survives the 2 s reload', async ({ page }) => {
+  // The detail screen reloads itself every 2 s while a delivery is pending.
+  // Replay makes it pending, so the reload used to hand back the dead fixture
+  // and undo the replay about two seconds later.
+  // By name, not by position: the dead filter also holds the deleted-endpoint
+  // delivery, which has no Replay button at all.
+  await openRow(page, 'payment.failed')
+  await expect(page.getByTestId('status')).toHaveText('dead')
+
+  await page.getByRole('button', { name: 'Replay' }).click()
+  await expect(page.getByTestId('status')).toHaveText('pending')
+
+  // Past two reloads, not one: the bug needed a single tick to show up.
+  await page.waitForTimeout(5000)
+  await expect(page.getByTestId('status')).toHaveText('pending')
+})
+
+test('a delivered delivery offers no Replay', async ({ page }) => {
+  await openFirst(page, 'delivered')
+
+  await expect(page.getByTestId('status')).toHaveText('delivered')
+  await expect(page.getByRole('button', { name: 'Replay' })).toBeHidden()
+})
+
+test('the deleted-endpoint delivery opens and explains why Replay is gone', async ({ page }) => {
+  // This row arrived with #7 and had no detail fixture registered, so it opened
+  // "Delivery not found" while its fixture sat exported and unused. Counting rows
+  // could not see it: the count was right, the row was there, only the screen
+  // behind it was wrong.
+  await openRow(page, 'Old CRM')
+
+  await expect(page.getByText('Delivery not found')).toBeHidden()
+  await expect(page.getByTestId('status')).toHaveText('dead')
+  await expect(page.getByText('Old CRM')).toBeVisible()
+
+  // The contract refuses this replay with 409 endpoint_deleted, so the button
+  // must not be offered at all.
+  await expect(page.getByRole('button', { name: 'Replay' })).toBeHidden()
+  await expect(page.getByText(/endpoint was deleted/i)).toBeVisible()
+})
+
+test('a replay is still there in the log and on the way back', async ({ page }) => {
+  // Before the shared store, replay only touched the detail screen's own Map: the
+  // log kept saying dead/8 while the detail said pending/0, and the two disagreed
+  // for the rest of the session. One source now, so this walks all three steps:
+  // detail → log → detail.
+  await openRow(page, 'payment.failed')
+  await expect(page.getByTestId('status')).toHaveText('dead')
+
+  await page.getByRole('button', { name: 'Replay' }).click()
+  await expect(page.getByTestId('status')).toHaveText('pending')
+
+  // The log: the row must have followed, both its status and its attempt count.
+  await page.getByRole('link', { name: '← Back to the log' }).click()
+  const row = page.locator('tbody tr', { hasText: 'payment.failed' })
+  await expect(row.getByTestId('status')).toHaveText('pending')
+  await expect(row).toContainText('0')
+
+  // And back in again, to be sure it was stored and not just rendered once. Waiting
+  // for the back link first, like openFirst does: the address changes before the DOM
+  // does, so asserting on the status straight after the click reads the log's five.
+  await row.getByRole('link').click()
+  await expect(page.getByRole('link', { name: '← Back to the log' })).toBeVisible()
+  await expect(page.getByTestId('status')).toHaveText('pending')
+})
+
+test('an id that does not exist says so', async ({ page }) => {
+  // The positive control for the test above: "Delivery not found" has to still
+  // appear for a real miss, or that assertion proves nothing.
+  await page.goto('/deliveries/0199ffff-ffff-7fff-bfff-ffffffffffff')
+
+  await expect(page.getByText('Delivery not found')).toBeVisible()
+  await expect(page.getByTestId('status')).toBeHidden()
+})
diff --git a/dashboard/e2e/endpoints.spec.ts b/dashboard/e2e/endpoints.spec.ts
new file mode 100644
index 0000000..38639ac
--- /dev/null
+++ b/dashboard/e2e/endpoints.spec.ts
@@ -0,0 +1,168 @@
+import { expect, test } from './fixtures'
+import { connect } from './connect-first'
+
+// src/mocks.ts starts with three endpoints. Writing the number out means
+// toHaveCount can wait for the table, where count() would read 0 before React
+// had rendered and quietly compare against nothing.
+const START = 3
+
+test.beforeEach(async ({ page }) => {
+  await connect(page)
+  await page.getByRole('link', { name: 'Endpoints' }).click()
+  await expect(page.getByRole('heading', { name: 'Endpoints' })).toBeVisible()
+  await expect(page.locator('tbody tr')).toHaveCount(START)
+})
+
+test('two added endpoints are two separate rows', async ({ page }) => {
+  // They used to share the mock's id. Counting rows does NOT catch that: React
+  // still draws both rows and only warns. The noConsoleErrors fixture is what
+  // fails the test — see e2e/fixtures.ts. Proven by putting the duplicate id back.
+  const rows = page.locator('tbody tr')
+
+  for (const [name, url] of [
+    ['First one', 'https://example.com/hooks/one'],
+    ['Second one', 'https://example.com/hooks/two'],
+  ]) {
+    await page.getByLabel('Name').fill(name)
+    await page.getByLabel('URL').fill(url)
+    await page.getByRole('button', { name: 'Add endpoint' }).click()
+  }
+
+  await expect(rows).toHaveCount(START + 2)
+  await expect(page.getByRole('cell', { name: 'First one' })).toBeVisible()
+  await expect(page.getByRole('cell', { name: 'Second one' })).toBeVisible()
+})
+
+test('the signing secret is shown once and then let go', async ({ page }) => {
+  await page.getByLabel('Name').fill('Ops webhook')
+  await page.getByLabel('URL').fill('https://example.com/hooks/ops')
+  await page.getByRole('button', { name: 'Add endpoint' }).click()
+
+  const secret = page.getByText(/^whsec_/)
+  await expect(secret).toBeVisible()
+
+  await page.getByRole('button', { name: 'I have copied it' }).click()
+  await expect(secret).toBeHidden()
+})
+
+// Customers' URLs must not point inside our own network (SSRF, docs/CONTEXT.md).
+// The API rejects these with 422 invalid_endpoint_url; the form should too.
+//
+// Each case names the message it must produce. Asserting only "some error showed"
+// let `loopback by name` pass with the loopback rule deleted: localhost fell
+// through to the unrelated "does not look reachable" branch and still errored.
+const PRIVATE = /private or internal/
+const NOT_A_URL = /Enter a full URL/
+
+const refused = [
+  ['https://', 'not a whole URL', NOT_A_URL],
+  ['example.com', 'no scheme', NOT_A_URL],
+  ['http://example.com', 'plain http', /must start with https/],
+  ['https://localhost:3000/hook', 'loopback by name', PRIVATE],
+  ['https://127.0.0.1/hook', 'loopback by address', PRIVATE],
+  ['https://0.0.0.0/hook', '0.0.0.0, which is loopback on Linux', PRIVATE],
+  ['https://192.168.1.10/hook', 'a private range', PRIVATE],
+  ['https://100.64.0.1/hook', 'the CGNAT range', PRIVATE],
+  ['https://169.254.169.254/latest/meta-data', "the cloud's metadata address", PRIVATE],
+  // Inside the cluster nothing is reached by number. These are the three the
+  // comment in Endpoints.tsx names as the threat, and they used to get through.
+  ['https://kubernetes.default.svc.cluster.local/hook', 'the Kubernetes API by name', PRIVATE],
+  ['https://postgres.relay.svc.cluster.local:5432/hook', 'Postgres by name', PRIVATE],
+  ['https://metadata.google.internal/token', 'cloud metadata by name', PRIVATE],
+  // IPv6, which the host-name rule used to decide: these have no dots, so they fell
+  // through to "does not look reachable" instead of being named as private.
+  ['https://[::1]/hook', 'IPv6 loopback', PRIVATE],
+  ['https://[fd00::1]/hook', 'an IPv6 unique-local address', PRIVATE],
+  ['https://[fe80::1]/hook', 'an IPv6 link-local address', PRIVATE],
+] as const
+
+for (const [url, why, message] of refused) {
+  test(`refuses ${why}: ${url}`, async ({ page }) => {
+    await page.getByLabel('Name').fill('Should not be added')
+    await page.getByLabel('URL').fill(url)
+    await page.getByRole('button', { name: 'Add endpoint' }).click()
+
+    // The right message, and nothing added. Either on its own would pass for the
+    // wrong reason: a message can come from a different rule, and a row count can
+    // stay put because the form silently did nothing.
+    await expect(page.locator('form p')).toHaveText(message)
+    await expect(page.locator('tbody tr')).toHaveCount(START)
+  })
+}
+
+// The refusals must not be so eager that ordinary URLs stop working. The second
+// one contains "localhost" inside a public name and has to be accepted.
+for (const url of [
+  'https://example.com/hooks/relay',
+  'https://my-app.localhost.example.com/hook',
+  'https://sub.domain.co.uk/x',
+  // Public IP literals are legitimate endpoints. The IPv6 one is why the dot rule
+  // had to stop applying to literals: [2001:db8::1] contains no dot at all.
+  'https://93.184.216.34/hook',
+  'https://[2001:db8::1]/hook',
+]) {
+  test(`accepts ${url}`, async ({ page }) => {
+    await page.getByLabel('Name').fill('Good one')
+    await page.getByLabel('URL').fill(url)
+    await page.getByRole('button', { name: 'Add endpoint' }).click()
+
+    await expect(page.locator('tbody tr')).toHaveCount(START + 1)
+  })
+}
+
+// The contract's length limits: name 1–100, URL at most 2048 characters
+// (docs/api.md, POST /v1/endpoints). Both sides of each boundary, in one test, so a
+// rule that refuses everything cannot pass as a rule that refuses what it should.
+test('an added endpoint is still there after leaving the screen', async ({ page }) => {
+  // The rows used to live in this screen's own useState, so navigating away threw
+  // the new endpoint away. Only in-app navigation counts here: page.goto() reloads
+  // the page, which restarts the mock store and would hide the bug.
+  await page.getByLabel('Name').fill('Survives navigation')
+  await page.getByLabel('URL').fill('https://example.com/hooks/survives')
+  await page.getByRole('button', { name: 'Add endpoint' }).click()
+  await expect(page.locator('tbody tr')).toHaveCount(START + 1)
+
+  await page.getByRole('link', { name: 'Delivery log' }).click()
+  await expect(page.getByRole('heading', { name: 'Delivery log' })).toBeVisible()
+
+  await page.getByRole('link', { name: 'Endpoints' }).click()
+  await expect(page.locator('tbody tr')).toHaveCount(START + 1)
+  await expect(page.getByRole('cell', { name: 'Survives navigation' })).toBeVisible()
+
+  // The secret must not come back with it: it is shown once, and the stored row
+  // never held it.
+  await expect(page.getByText(/^whsec_/)).toBeHidden()
+})
+
+test('a name is accepted at 100 characters and refused at 101', async ({ page }) => {
+  await page.getByLabel('URL').fill('https://example.com/hooks/limits')
+
+  await page.getByLabel('Name').fill('n'.repeat(101))
+  await page.getByRole('button', { name: 'Add endpoint' }).click()
+  await expect(page.locator('form p')).toHaveText(/at most 100 characters/)
+  await expect(page.locator('tbody tr')).toHaveCount(START)
+
+  await page.getByLabel('Name').fill('n'.repeat(100))
+  await page.getByRole('button', { name: 'Add endpoint' }).click()
+  await expect(page.locator('tbody tr')).toHaveCount(START + 1)
+})
+
+test('a URL is accepted at 2048 characters and refused at 2049', async ({ page }) => {
+  const base = 'https://example.com/'
+  const ofLength = (total: number) => base + 'a'.repeat(total - base.length)
+
+  await page.getByLabel('Name').fill('Long URL')
+
+  const tooLong = ofLength(2049)
+  expect(tooLong).toHaveLength(2049) // the test's own arithmetic, checked
+  await page.getByLabel('URL').fill(tooLong)
+  await page.getByRole('button', { name: 'Add endpoint' }).click()
+  await expect(page.locator('form p')).toHaveText(/at most 2048 characters/)
+  await expect(page.locator('tbody tr')).toHaveCount(START)
+
+  const justFits = ofLength(2048)
+  expect(justFits).toHaveLength(2048)
+  await page.getByLabel('URL').fill(justFits)
+  await page.getByRole('button', { name: 'Add endpoint' }).click()
+  await expect(page.locator('tbody tr')).toHaveCount(START + 1)
+})
diff --git a/dashboard/e2e/fixtures.ts b/dashboard/e2e/fixtures.ts
new file mode 100644
index 0000000..90a329a
--- /dev/null
+++ b/dashboard/e2e/fixtures.ts
@@ -0,0 +1,27 @@
+import { test as base, expect } from '@playwright/test'
+
+// A test that also fails when the browser console logs an error.
+//
+// Why: counting rows can't catch two React children sharing a key — React still
+// draws both rows and only warns. The warning is the only visible symptom, so a
+// test that ignores the console can't see the bug at all. Proven by putting the
+// duplicate id back: the row count stayed right and the test stayed green.
+//
+// This runs against the dev server, where React still emits these warnings; a
+// production build strips them.
+export const test = base.extend<{ noConsoleErrors: void }>({
+  noConsoleErrors: [
+    async ({ page }, use) => {
+      const errors: string[] = []
+      page.on('console', (m) => m.type() === 'error' && errors.push(m.text()))
+      page.on('pageerror', (e) => errors.push(String(e)))
+
+      await use()
+
+      expect(errors, `browser console errors:\n${errors.join('\n')}`).toEqual([])
+    },
+    { auto: true }, // every test in a file that imports this one gets it
+  ],
+})
+
+export { expect } from '@playwright/test'
diff --git a/dashboard/index.html b/dashboard/index.html
new file mode 100644
index 0000000..52b5e14
--- /dev/null
+++ b/dashboard/index.html
@@ -0,0 +1,24 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+
+    <!-- The fonts are loaded here, not from index.css. Tailwind's own @import expands
+         into the stylesheet, which pushes any @import after it past the start of the
+         file, where CSS ignores it: the font never reaches the production build. -->
+    <link rel="preconnect" href="https://fonts.googleapis.com" />
+    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
+    <link
+      rel="stylesheet"
+      href="https://fonts.googleapis.com/css2?family=IBM+Plex+Mono:wght@400;500&family=IBM+Plex+Sans:wght@400;500;600&display=swap"
+    />
+
+    <title>Relay</title>
+  </head>
+  <body>
+    <div id="root"></div>
+    <script type="module" src="/src/main.tsx"></script>
+  </body>
+</html>
diff --git a/dashboard/nginx.conf b/dashboard/nginx.conf
new file mode 100644
index 0000000..4d7d7f6
--- /dev/null
+++ b/dashboard/nginx.conf
@@ -0,0 +1,84 @@
+# Serves the built dashboard. Port 8080 because the unprivileged nginx image runs
+# as uid 101 and cannot bind a port below 1024.
+
+# nginx's add_header does not merge: a location with its own add_header drops every
+# header inherited from the server block. Rather than repeat the security headers in
+# each location, the one header that differs per path is chosen here, so all of them
+# can live in a single place.
+map $uri $cache_control {
+    # Vite puts a content hash in every asset filename, so an asset never changes
+    # under the same name and can be cached for a year.
+    ~^/assets/  "public, max-age=31536000, immutable";
+
+    # Everything else is index.html, which points at the hashed assets. A cached copy
+    # would keep serving the previous deploy.
+    default     "no-cache";
+}
+
+server {
+    listen 8080;
+    server_name _;
+
+    # Stop announcing the exact nginx version in every response: knowing it makes it
+    # cheap to look up vulnerabilities for this specific build.
+    server_tokens off;
+
+    # Redirects go out as a path, not a full URL. nginx would otherwise build one from
+    # this server's own name and port 8080, which is neither the scheme nor the port
+    # the client reached us on through Traefik.
+    absolute_redirect off;
+
+    # Compress text responses. The bundle is 275 kB on the wire and 86 kB gzipped.
+    gzip on;
+    gzip_types application/javascript text/css image/svg+xml application/json;
+    gzip_min_length 1024;
+
+    root /usr/share/nginx/html;
+    index index.html;
+
+    # The dashboard keeps the owner's API key in sessionStorage, which any script on
+    # the page can read. React escapes the values it renders, so that is the first
+    # line of defence; this is the second.
+    #
+    # script-src is what actually stops the attack: an injected script is never run.
+    # connect-src and img-src are defence in depth - they close the easy ways to beacon
+    # the key out, but not every way: CSP cannot restrain a top-level navigation, so
+    # location.href = 'https://…?k=' + key would still get through if a script ran.
+    #
+    # script-src 'self' would be weak on its own here, because the SPA fallback makes
+    # every path serve index.html, so <script src="/anything"> is same-origin. nosniff
+    # is what closes that: text/html is refused as executable. The two only work as a
+    # pair.
+    #
+    # No Strict-Transport-Security: TLS ends at Traefik, so this server cannot tell
+    # whether the request arrived over HTTPS. HSTS belongs on the Ingress.
+    add_header Content-Security-Policy "default-src 'self'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://api.myrelay.tech; img-src 'self' data:; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'" always;
+
+    # Serve files as the type we declared, instead of guessing from the contents. A
+    # guess can turn an uploaded file into an executed script.
+    add_header X-Content-Type-Options "nosniff" always;
+
+    # Delivery ids live in the URL, so don't hand them to any site a user clicks to.
+    add_header Referrer-Policy "no-referrer" always;
+
+    # No "always" on this one, on purpose. During a rollout both the old and the new
+    # pod serve: a client can read the new index.html from one and ask the other for a
+    # hashed asset it does not have. With "always" that 404 would carry the one-year
+    # immutable header and the dashboard would stay broken for that client until they
+    # cleared their cache. Without it, only real 200s are cached.
+    add_header Cache-Control $cache_control;
+
+    # React Router owns the URLs, not nginx. A path like /deliveries/abc is not a file
+    # on disk, so hand anything that is not a real file to index.html and let the app
+    # route it. Without this, reloading a detail screen returns 404.
+    #
+    # /assets/ is excluded on purpose: a missing script should be a clean 404, not
+    # index.html served as JavaScript.
+    location / {
+        try_files $uri $uri/ /index.html;
+    }
+
+    location /assets/ {
+        try_files $uri =404;
+    }
+}
diff --git a/dashboard/package-lock.json b/dashboard/package-lock.json
new file mode 100644
index 0000000..a667f62
--- /dev/null
+++ b/dashboard/package-lock.json
@@ -0,0 +1,1950 @@
+{
+  "name": "relay-dashboard",
+  "version": "0.0.0",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "relay-dashboard",
+      "version": "0.0.0",
+      "dependencies": {
+        "@tailwindcss/vite": "4.3.3",
+        "react": "19.3.1",
+        "react-dom": "19.3.1",
+        "react-router": "8.5.0",
+        "tailwindcss": "4.3.3"
+      },
+      "devDependencies": {
+        "@playwright/test": "1.64.1",
+        "@types/node": "24.19.2",
+        "@types/react": "19.3.0",
+        "@types/react-dom": "19.3.0",
+        "@vitejs/plugin-react": "6.1.2",
+        "oxlint": "1.89.0",
+        "typescript": "6.0.3",
+        "vite": "8.3.5"
+      }
+    },
+    "node_modules/@jridgewell/gen-mapping": {
+      "version": "0.3.13",
+      "resolved": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.13.tgz",
+      "integrity": "sha512-2kkt/7niJ6MgEPxF0bYdQ6etZaA+fQvDcLKckhy1yIQOzaoKjBBjSj63/aLVjYE3qhRt5dvM+uUyfCg6UKCBbA==",
+      "license": "MIT",
+      "dependencies": {
+        "@jridgewell/sourcemap-codec": "^1.5.0",
+        "@jridgewell/trace-mapping": "^0.3.24"
+      }
+    },
+    "node_modules/@jridgewell/remapping": {
+      "version": "2.3.5",
+      "resolved": "https://registry.npmjs.org/@jridgewell/remapping/-/remapping-2.3.5.tgz",
+      "integrity": "sha512-LI9u/+laYG4Ds1TDKSJW2YPrIlcVYOwi2fUC6xB43lueCjgxV4lffOCZCtYFiH6TNOX+tQKXx97T4IKHbhyHEQ==",
+      "license": "MIT",
+      "dependencies": {
+        "@jridgewell/gen-mapping": "^0.3.5",
+        "@jridgewell/trace-mapping": "^0.3.24"
+      }
+    },
+    "node_modules/@jridgewell/resolve-uri": {
+      "version": "3.1.2",
+      "resolved": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz",
+      "integrity": "sha512-bRISgCIjP20/tbWSPWMEi54QVPRZExkuD9lJL+UIxUKtwVJA8wW1Trb1jMs1RFXo1CBTNZ/5hpC9QvmKWdopKw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=6.0.0"
+      }
+    },
+    "node_modules/@jridgewell/sourcemap-codec": {
+      "version": "1.6.0",
+      "resolved": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.6.0.tgz",
+      "integrity": "sha512-T7jf+5zgsZHwNJ4lvQ7/aezbyk0nNX+zJVWpmHA7VYsEx7a7qr5Rg5IbtJFqkgze5Y2sruq1RUY8Q837Od7iFw==",
+      "license": "MIT"
+    },
+    "node_modules/@jridgewell/trace-mapping": {
+      "version": "0.3.31",
+      "resolved": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.31.tgz",
+      "integrity": "sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw==",
+      "license": "MIT",
+      "dependencies": {
+        "@jridgewell/resolve-uri": "^3.1.0",
+        "@jridgewell/sourcemap-codec": "^1.4.14"
+      }
+    },
+    "node_modules/@oxc-project/types": {
+      "version": "0.155.0",
+      "resolved": "https://registry.npmjs.org/@oxc-project/types/-/types-0.155.0.tgz",
+      "integrity": "sha512-SeE8JPwW1xs1tHeNycjUtUBdhorRa8o4jlvjwk49R7/Z291i+4DQa7JJIgOm/TaYQZx+QrPQbVJ/9c8dMIZN8Q==",
+      "license": "MIT",
+      "funding": {
+        "url": "https://github.com/sponsors/oxc-project"
+      }
+    },
+    "node_modules/@oxlint/binding-android-arm-eabi": {
+      "version": "1.89.0",
+      "resolved": "https://registry.npmjs.org/@oxlint/binding-android-arm-eabi/-/binding-android-arm-eabi-1.89.0.tgz",
+      "integrity": "sha512-Pflpba5F3gRAQ12sWglRxvWTHEdAusNDvmi4Y5N1T5SY1AGkM7AixOnET8qkrnLJ/F32qAlNokO6eCknT8tmnw==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxlint/binding-android-arm64": {
+      "version": "1.89.0",
+      "resolved": "https://registry.npmjs.org/@oxlint/binding-android-arm64/-/binding-android-arm64-1.89.0.tgz",
+      "integrity": "sha512-dYmyD1x7LaPlb79vZWUcpTShk8dI9z1I+IubtqrBxWNJaDhQdPHwcsvg7q5StTU4xWyd9AwPfLaTYFZY8NZgtQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxlint/binding-darwin-arm64": {
+      "version": "1.89.0",
+      "resolved": "https://registry.npmjs.org/@oxlint/binding-darwin-arm64/-/binding-darwin-arm64-1.89.0.tgz",
+      "integrity": "sha512-Z/oxOPiIqiS7fItRdxaaOEC+6GD3OpGi0IxoR0dMefzQHolsKLzScw2DNcu/5gUPok3tv+G9mslvYB5bo3i0qg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxlint/binding-darwin-x64": {
+      "version": "1.89.0",
+      "resolved": "https://registry.npmjs.org/@oxlint/binding-darwin-x64/-/binding-darwin-x64-1.89.0.tgz",
+      "integrity": "sha512-eAjTkHSjAxrdCPJxO6y5sPQL5pYLKb2kvxZz9UU7tXnOZk9I/HLtkvx9S7GHY883k+AmL/eC7mqFt+w7WCwk0w==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxlint/binding-freebsd-x64": {
+      "version": "1.89.0",
+      "resolved": "https://registry.npmjs.org/@oxlint/binding-freebsd-x64/-/binding-freebsd-x64-1.89.0.tgz",
+      "integrity": "sha512-0lNCA9Tl1n1FKpqy2/9ckp0kIuSrtJ/l9bMRgaEhOtM7TsOHshFuwOcvW8oA9teXLMOJT61LjEKWiaHDFGxF/w==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxlint/binding-linux-arm-gnueabihf": {
+      "version": "1.89.0",
+      "resolved": "https://registry.npmjs.org/@oxlint/binding-linux-arm-gnueabihf/-/binding-linux-arm-gnueabihf-1.89.0.tgz",
+      "integrity": "sha512-OTFEvi9W+JczaZD1Caj17SGCoW8H7TE+fvx0D7ATEWa1Lohn91UMxFQ6r145SiGy/yCxeIwptMys/RAM7gSVSQ==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxlint/binding-linux-arm-musleabihf": {
+      "version": "1.89.0",
+      "resolved": "https://registry.npmjs.org/@oxlint/binding-linux-arm-musleabihf/-/binding-linux-arm-musleabihf-1.89.0.tgz",
+      "integrity": "sha512-fRxgNHvBLswj6MrhW2uBq5UDhPRQlCbHeq/Nf8yuG9zOxhDsXqX/mi2PX1axgsQxMm88el7HLiJAzglAnflYxw==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxlint/binding-linux-arm64-gnu": {
+      "version": "1.89.0",
+      "resolved": "https://registry.npmjs.org/@oxlint/binding-linux-arm64-gnu/-/binding-linux-arm64-gnu-1.89.0.tgz",
+      "integrity": "sha512-v9ENzHvwrQoYSWTtviH1pOYc7R9UovDxVofnck50cNmPihRRTcrg5X0UlRbLOZ7IVtxPOlh2hb7kDO+FpE8SfQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxlint/binding-linux-arm64-musl": {
+      "version": "1.89.0",
+      "resolved": "https://registry.npmjs.org/@oxlint/binding-linux-arm64-musl/-/binding-linux-arm64-musl-1.89.0.tgz",
+      "integrity": "sha512-vfffe8mQ484AzVadlUOFpgL+JDwhvs9hrzxTgQP1FVfi4ZEUUYeffXlzC9dFV7Dgnu5s/KrNKvfmG6HxBd/ISQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxlint/binding-linux-ppc64-gnu": {
+      "version": "1.89.0",
+      "resolved": "https://registry.npmjs.org/@oxlint/binding-linux-ppc64-gnu/-/binding-linux-ppc64-gnu-1.89.0.tgz",
+      "integrity": "sha512-Buonlp4hVS7RGNP5M7bPpGNQrenyzA2C64JcO/oz9C1c6dGOXJ7VEAnaiAMY7voou0JYyCJdvDVlFQc5DZX3DQ==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxlint/binding-linux-riscv64-gnu": {
+      "version": "1.89.0",
+      "resolved": "https://registry.npmjs.org/@oxlint/binding-linux-riscv64-gnu/-/binding-linux-riscv64-gnu-1.89.0.tgz",
+      "integrity": "sha512-1eVwJJrJ3lYIPT+cm7BcBBZZXY6IQZP/oyonaruTor/MrVyWOpvnwt1oD5CLdsHg5aVBIxXodQSvt+1gK6ck5w==",
+      "cpu": [
+        "riscv64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxlint/binding-linux-riscv64-musl": {
+      "version": "1.89.0",
+      "resolved": "https://registry.npmjs.org/@oxlint/binding-linux-riscv64-musl/-/binding-linux-riscv64-musl-1.89.0.tgz",
+      "integrity": "sha512-fRQQsKUGShdEL5Fl9o9uhj3grkZbeXKLv0icQ5tspUCNYSDy8wzzEcP1WC2bKdTQ0rSszbKlO3iiHORxV22DLg==",
+      "cpu": [
+        "riscv64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxlint/binding-linux-s390x-gnu": {
+      "version": "1.89.0",
+      "resolved": "https://registry.npmjs.org/@oxlint/binding-linux-s390x-gnu/-/binding-linux-s390x-gnu-1.89.0.tgz",
+      "integrity": "sha512-dEtYjIy6+fHcjKklsmtmMkZRhwHr2UbzjmpvuPtQYSeN9awQ2hx5JLms5Wvri+8P/NZtD8v5hfgHALUql+/Ycg==",
+      "cpu": [
+        "s390x"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxlint/binding-linux-x64-gnu": {
+      "version": "1.89.0",
+      "resolved": "https://registry.npmjs.org/@oxlint/binding-linux-x64-gnu/-/binding-linux-x64-gnu-1.89.0.tgz",
+      "integrity": "sha512-hqjwIj5KOYM8Wjef/p7IruNi1iByLhSzbMBk62y22P/E8q7Jj0Pp+DeUTKTRYyZYCDtU1wEGlnWOnttHbyNIww==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxlint/binding-linux-x64-musl": {
+      "version": "1.89.0",
+      "resolved": "https://registry.npmjs.org/@oxlint/binding-linux-x64-musl/-/binding-linux-x64-musl-1.89.0.tgz",
+      "integrity": "sha512-iAQN3e6o9UgUCcdGwqRx/jYcKbG3HK7ur3rH6lTqVcQeNGZ85AeWIg6cgn/edwFQ0ofEZZItMwkzyCVTahnvEA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxlint/binding-openharmony-arm64": {
+      "version": "1.89.0",
+      "resolved": "https://registry.npmjs.org/@oxlint/binding-openharmony-arm64/-/binding-openharmony-arm64-1.89.0.tgz",
+      "integrity": "sha512-MNxjEByz3N/7Q4qFQuPWvc14TpN9LoD3pECEDsJTZbP/wyB7U+hduUXEl7QAbbgVezFwsb9sWtNUO6XVBndOhg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openharmony"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxlint/binding-win32-arm64-msvc": {
+      "version": "1.89.0",
+      "resolved": "https://registry.npmjs.org/@oxlint/binding-win32-arm64-msvc/-/binding-win32-arm64-msvc-1.89.0.tgz",
+      "integrity": "sha512-xxe+i9wfuFso/VnoL4mfj0UlzE+cfCFiUB06vkXCMyQdgVVmItF5FfAF4tATAktSU6uHruWR+FjqvAT9cHZZzg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxlint/binding-win32-ia32-msvc": {
+      "version": "1.89.0",
+      "resolved": "https://registry.npmjs.org/@oxlint/binding-win32-ia32-msvc/-/binding-win32-ia32-msvc-1.89.0.tgz",
+      "integrity": "sha512-saFy07cO94E664glwgLmKLI40HgTL1PY86y4T6+ud4niX4H0Kdqjcmqmjps7mQNdBytV5guGbXDdyQtRfeLbLA==",
+      "cpu": [
+        "ia32"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxlint/binding-win32-x64-msvc": {
+      "version": "1.89.0",
+      "resolved": "https://registry.npmjs.org/@oxlint/binding-win32-x64-msvc/-/binding-win32-x64-msvc-1.89.0.tgz",
+      "integrity": "sha512-hLFJ/o0f/dTJh/EW0vmcbREYSQO9tYgfiAAlsOkiLFiJuRRWvYtFELUXN5o2ijpSo/tlO1n+YlWN58tZwPG18A==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@playwright/test": {
+      "version": "1.64.1",
+      "resolved": "https://registry.npmjs.org/@playwright/test/-/test-1.64.1.tgz",
+      "integrity": "sha512-IaYGml/nSOiZWROfPtuIL7neuu9qDOZ3TNvNljUIrhDMxiGTgPjzj/g9p9RxpS2tSepPDRY+UwAaEeiKtUvIAg==",
+      "dev": true,
+      "dependencies": {
+        "playwright": "1.64.1"
+      },
+      "bin": {
+        "playwright": "cli.js"
+      },
+      "engines": {
+        "node": ">=20"
+      }
+    },
+    "node_modules/@remix-run/route-pattern": {
+      "version": "0.22.1",
+      "resolved": "https://registry.npmjs.org/@remix-run/route-pattern/-/route-pattern-0.22.1.tgz",
+      "integrity": "sha512-czdGJWh09Lapvcqt7Vb09KlrU2PhRJ8xQaI+AItTuD9aDJ5MAgxnS38lnys6Ll+6RJEqPiaUqTwIQhVLwFvv+w==",
+      "license": "MIT"
+    },
+    "node_modules/@rolldown/binding-android-arm-eabi": {
+      "version": "1.2.15",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-android-arm-eabi/-/binding-android-arm-eabi-1.2.15.tgz",
+      "integrity": "sha512-aLcgK9gIJ3YRvrrtfSBbRa27F5WrpiTaPulnFpsHPxpUHgFlSgnU4854MHwoRGEBhfRJDWCS2WQ7lIjskE9Olw==",
+      "cpu": [
+        "arm"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-android-arm64": {
+      "version": "1.2.15",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-android-arm64/-/binding-android-arm64-1.2.15.tgz",
+      "integrity": "sha512-xD7DdZCrbThKuxNg7ooQmvp07ys4J/pnSEMTG3/OdOWl6daC67m/Q4fL78sRHMxTH/N4fGUbYhcPM0MF5WFHkg==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-darwin-arm64": {
+      "version": "1.2.15",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-darwin-arm64/-/binding-darwin-arm64-1.2.15.tgz",
+      "integrity": "sha512-m2WuQ6r0B4OTYxyPpNLtXaMRbRDUbG8YQV2Q3KTdSSK8Th6KHCnC8jVCJt8bvYeSB5WivkkNbc85mKadaSdOxA==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-darwin-x64": {
+      "version": "1.2.15",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-darwin-x64/-/binding-darwin-x64-1.2.15.tgz",
+      "integrity": "sha512-5RtnsHM36nodM9WbMy+zip0LGS/G+y5wro5RHrpOlr4ac24+1zSi9kiV2MP1myZeZ/ifEHfulQcWjnAXzc2C2A==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-freebsd-x64": {
+      "version": "1.2.15",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-freebsd-x64/-/binding-freebsd-x64-1.2.15.tgz",
+      "integrity": "sha512-g3l09pyFqhu+135JKkbkwiKGQmwU5hUMUPJ4VdBADvuqR8d33L6H578rh8m7rtxbdp+VmX/+nzI7nvhSZlzpUQ==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-linux-arm-gnueabihf": {
+      "version": "1.2.15",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm-gnueabihf/-/binding-linux-arm-gnueabihf-1.2.15.tgz",
+      "integrity": "sha512-nIe3VugI97nGQtspPxDqA4sXMUpeiocKIP/CqpY/u/vgbT+alX+cVxu1C/oVBPKg4feNTmYovE91v4DgXvXNwQ==",
+      "cpu": [
+        "arm"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-linux-arm64-gnu": {
+      "version": "1.2.15",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm64-gnu/-/binding-linux-arm64-gnu-1.2.15.tgz",
+      "integrity": "sha512-iTBjXx+B5QSvgI89lJfmqh4wTh8NabR1YZIIN3hNx4zSG0EVfVqkOvLulNpG4251pbd6/IAmZ/LefVk1Y4rPhw==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-linux-arm64-musl": {
+      "version": "1.2.15",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm64-musl/-/binding-linux-arm64-musl-1.2.15.tgz",
+      "integrity": "sha512-uN26XOnVR7rqQupG3V9oAG2EGGatWjcJHOeDOHUFCh4TBWmP2tHTFoVN13aYbwfm0aHqJAEmcwhAu6sooIjfqQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-linux-ppc64-gnu": {
+      "version": "1.2.15",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-ppc64-gnu/-/binding-linux-ppc64-gnu-1.2.15.tgz",
+      "integrity": "sha512-9nWkcdd+H+XhaA3fQIwpHnKIrfx/PQ6rO0pivr78Og07tXlUlctBBJoEYLPfhTmCR/QxEVdn6uPjHV5SymPhdw==",
+      "cpu": [
+        "ppc64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-linux-s390x-gnu": {
+      "version": "1.2.15",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-s390x-gnu/-/binding-linux-s390x-gnu-1.2.15.tgz",
+      "integrity": "sha512-Ggh0ciFjLwIusLSLz7LZYEaGdxOAUJXI+Qu5JCbhPJJHEt8vP+IjRATTJheiJsdzzTYgUiHUiw3X1Ea3ZpMBdA==",
+      "cpu": [
+        "s390x"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-linux-x64-gnu": {
+      "version": "1.2.15",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-x64-gnu/-/binding-linux-x64-gnu-1.2.15.tgz",
+      "integrity": "sha512-FHg60rS6DBePAYZ9X9F67x+JObFdmgn6tupA1C/a3B+CufFmTD4mX+e8M75tCiAO3foR/6xwVBI0KQiI7sn/rw==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-linux-x64-musl": {
+      "version": "1.2.15",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-x64-musl/-/binding-linux-x64-musl-1.2.15.tgz",
+      "integrity": "sha512-/cvV/7v5VGz/moiz0XKRj2dE8DzsKyhIu1KpOvJGPjRywg3yscON889UGvAe8zfiJLHup7VLjBduoGWi3HusWQ==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-openharmony-arm64": {
+      "version": "1.2.15",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-openharmony-arm64/-/binding-openharmony-arm64-1.2.15.tgz",
+      "integrity": "sha512-MyzC5Hrv/sm+Z7TSGKP/j8001RO2xQm1zOpCNVL4j0cY/VhBZviludA2YFQ7i4lH6ZAXxQm0lcMdBzM+99mE7w==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openharmony"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-win32-arm64-msvc": {
+      "version": "1.2.15",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-win32-arm64-msvc/-/binding-win32-arm64-msvc-1.2.15.tgz",
+      "integrity": "sha512-+PgYiS+AH5omy6L45ZLxybasauJaj3M8buoT83D+nzPmCayXlxUV9hydhciCKVyIg0B/v0BtXPDE1uGqNwCPpg==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-win32-x64-msvc": {
+      "version": "1.2.15",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-win32-x64-msvc/-/binding-win32-x64-msvc-1.2.15.tgz",
+      "integrity": "sha512-HFZd2QNQYn1JbIi+Hpd7H+r/lkWxcfIu28nirZ6eCn2LafuvmExMlb/P96Sfx5tf7pPArw39IdhmCF8vmV+NhQ==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/pluginutils": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/@rolldown/pluginutils/-/pluginutils-1.0.1.tgz",
+      "integrity": "sha512-2j9bGt5Jh8hj+vPtgzPtl72j0yRxHAyumoo6TNfAjsLB04UtpSvPbPcDcBMxz7n+9CYB0c1GxQFxYRg2jimqGw==",
+      "license": "MIT"
+    },
+    "node_modules/@tailwindcss/node": {
+      "version": "4.3.3",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/node/-/node-4.3.3.tgz",
+      "integrity": "sha512-/T8IKEsf9VTU6tLjgC7+sv2mOPtQxzE2jMw7u4Tt40Tx+QSZxpzh95/H6cMKoja9XuW7iMdLJYBB0o9G1CaAgg==",
+      "license": "MIT",
+      "dependencies": {
+        "@jridgewell/remapping": "^2.3.5",
+        "enhanced-resolve": "^5.24.1",
+        "jiti": "^2.7.0",
+        "lightningcss": "1.32.0",
+        "magic-string": "^0.30.21",
+        "source-map-js": "^1.2.1",
+        "tailwindcss": "4.3.3"
+      }
+    },
+    "node_modules/@tailwindcss/node/node_modules/lightningcss": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss/-/lightningcss-1.32.0.tgz",
+      "integrity": "sha512-NXYBzinNrblfraPGyrbPoD19C1h9lfI/1mzgWYvXUTe414Gz/X1FD2XBZSZM7rRTrMA8JL3OtAaGifrIKhQ5yQ==",
+      "license": "MPL-2.0",
+      "dependencies": {
+        "detect-libc": "^2.0.3"
+      },
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      },
+      "optionalDependencies": {
+        "lightningcss-android-arm64": "1.32.0",
+        "lightningcss-darwin-arm64": "1.32.0",
+        "lightningcss-darwin-x64": "1.32.0",
+        "lightningcss-freebsd-x64": "1.32.0",
+        "lightningcss-linux-arm-gnueabihf": "1.32.0",
+        "lightningcss-linux-arm64-gnu": "1.32.0",
+        "lightningcss-linux-arm64-musl": "1.32.0",
+        "lightningcss-linux-x64-gnu": "1.32.0",
+        "lightningcss-linux-x64-musl": "1.32.0",
+        "lightningcss-win32-arm64-msvc": "1.32.0",
+        "lightningcss-win32-x64-msvc": "1.32.0"
+      }
+    },
+    "node_modules/@tailwindcss/node/node_modules/lightningcss-android-arm64": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-android-arm64/-/lightningcss-android-arm64-1.32.0.tgz",
+      "integrity": "sha512-YK7/ClTt4kAK0vo6w3X+Pnm0D2cf2vPHbhOXdoNti1Ga0al1P4TBZhwjATvjNwLEBCnKvjJc2jQgHXH0NEwlAg==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/@tailwindcss/node/node_modules/lightningcss-darwin-arm64": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-darwin-arm64/-/lightningcss-darwin-arm64-1.32.0.tgz",
+      "integrity": "sha512-RzeG9Ju5bag2Bv1/lwlVJvBE3q6TtXskdZLLCyfg5pt+HLz9BqlICO7LZM7VHNTTn/5PRhHFBSjk5lc4cmscPQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/@tailwindcss/node/node_modules/lightningcss-darwin-x64": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-darwin-x64/-/lightningcss-darwin-x64-1.32.0.tgz",
+      "integrity": "sha512-U+QsBp2m/s2wqpUYT/6wnlagdZbtZdndSmut/NJqlCcMLTWp5muCrID+K5UJ6jqD2BFshejCYXniPDbNh73V8w==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/@tailwindcss/node/node_modules/lightningcss-freebsd-x64": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-freebsd-x64/-/lightningcss-freebsd-x64-1.32.0.tgz",
+      "integrity": "sha512-JCTigedEksZk3tHTTthnMdVfGf61Fky8Ji2E4YjUTEQX14xiy/lTzXnu1vwiZe3bYe0q+SpsSH/CTeDXK6WHig==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/@tailwindcss/node/node_modules/lightningcss-linux-arm-gnueabihf": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm-gnueabihf/-/lightningcss-linux-arm-gnueabihf-1.32.0.tgz",
+      "integrity": "sha512-x6rnnpRa2GL0zQOkt6rts3YDPzduLpWvwAF6EMhXFVZXD4tPrBkEFqzGowzCsIWsPjqSK+tyNEODUBXeeVHSkw==",
+      "cpu": [
+        "arm"
+      ],
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/@tailwindcss/node/node_modules/lightningcss-linux-arm64-gnu": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-gnu/-/lightningcss-linux-arm64-gnu-1.32.0.tgz",
+      "integrity": "sha512-0nnMyoyOLRJXfbMOilaSRcLH3Jw5z9HDNGfT/gwCPgaDjnx0i8w7vBzFLFR1f6CMLKF8gVbebmkUN3fa/kQJpQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/@tailwindcss/node/node_modules/lightningcss-linux-arm64-musl": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-musl/-/lightningcss-linux-arm64-musl-1.32.0.tgz",
+      "integrity": "sha512-UpQkoenr4UJEzgVIYpI80lDFvRmPVg6oqboNHfoH4CQIfNA+HOrZ7Mo7KZP02dC6LjghPQJeBsvXhJod/wnIBg==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/@tailwindcss/node/node_modules/lightningcss-linux-x64-gnu": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-x64-gnu/-/lightningcss-linux-x64-gnu-1.32.0.tgz",
+      "integrity": "sha512-V7Qr52IhZmdKPVr+Vtw8o+WLsQJYCTd8loIfpDaMRWGUZfBOYEJeyJIkqGIDMZPwPx24pUMfwSxxI8phr/MbOA==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/@tailwindcss/node/node_modules/lightningcss-linux-x64-musl": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-x64-musl/-/lightningcss-linux-x64-musl-1.32.0.tgz",
+      "integrity": "sha512-bYcLp+Vb0awsiXg/80uCRezCYHNg1/l3mt0gzHnWV9XP1W5sKa5/TCdGWaR/zBM2PeF/HbsQv/j2URNOiVuxWg==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/@tailwindcss/node/node_modules/lightningcss-win32-arm64-msvc": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-win32-arm64-msvc/-/lightningcss-win32-arm64-msvc-1.32.0.tgz",
+      "integrity": "sha512-8SbC8BR40pS6baCM8sbtYDSwEVQd4JlFTOlaD3gWGHfThTcABnNDBda6eTZeqbofalIJhFx0qKzgHJmcPTnGdw==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/@tailwindcss/node/node_modules/lightningcss-win32-x64-msvc": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-win32-x64-msvc/-/lightningcss-win32-x64-msvc-1.32.0.tgz",
+      "integrity": "sha512-Amq9B/SoZYdDi1kFrojnoqPLxYhQ4Wo5XiL8EVJrVsB8ARoC1PWW6VGtT0WKCemjy8aC+louJnjS7U18x3b06Q==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/@tailwindcss/oxide": {
+      "version": "4.3.3",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide/-/oxide-4.3.3.tgz",
+      "integrity": "sha512-krXjAikiaFSPaK/FkAQT5UTx3VormQaiZ5hBFlJZ9UFQGB/rwg1MZIhHAG9smMQRTdyJxP6Qt5MwMtdyU5FWrA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 20"
+      },
+      "optionalDependencies": {
+        "@tailwindcss/oxide-android-arm64": "4.3.3",
+        "@tailwindcss/oxide-darwin-arm64": "4.3.3",
+        "@tailwindcss/oxide-darwin-x64": "4.3.3",
+        "@tailwindcss/oxide-freebsd-x64": "4.3.3",
+        "@tailwindcss/oxide-linux-arm-gnueabihf": "4.3.3",
+        "@tailwindcss/oxide-linux-arm64-gnu": "4.3.3",
+        "@tailwindcss/oxide-linux-arm64-musl": "4.3.3",
+        "@tailwindcss/oxide-linux-x64-gnu": "4.3.3",
+        "@tailwindcss/oxide-linux-x64-musl": "4.3.3",
+        "@tailwindcss/oxide-wasm32-wasi": "4.3.3",
+        "@tailwindcss/oxide-win32-arm64-msvc": "4.3.3",
+        "@tailwindcss/oxide-win32-x64-msvc": "4.3.3"
+      }
+    },
+    "node_modules/@tailwindcss/oxide-android-arm64": {
+      "version": "4.3.3",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-android-arm64/-/oxide-android-arm64-4.3.3.tgz",
+      "integrity": "sha512-Y85A2gmPSkl5Ve5qR86GL4HT509cFqQh1aes9p3sSkyTPwt0Pppf3GkwGe4JPACcRYjgJIEhQgM6dBClnr0NYw==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">= 20"
+      }
+    },
+    "node_modules/@tailwindcss/oxide-darwin-arm64": {
+      "version": "4.3.3",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-darwin-arm64/-/oxide-darwin-arm64-4.3.3.tgz",
+      "integrity": "sha512-BiaWatpBcERQFDlOjRDpIVXuFK5PJez5SA4JMg6VYZdBYU+qKfV/vqjcIs+IYmtitf1xYQZTwXvU/8y4lfZUGw==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">= 20"
+      }
+    },
+    "node_modules/@tailwindcss/oxide-darwin-x64": {
+      "version": "4.3.3",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-darwin-x64/-/oxide-darwin-x64-4.3.3.tgz",
+      "integrity": "sha512-fAeUqfV5ndhxRwai8cXGzdLvul9utWOmeTkv69unv4ZXixjn61Z+p9lCWdwOwA3TYboG3BwdVuN/RDjhBRl0mw==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">= 20"
+      }
+    },
+    "node_modules/@tailwindcss/oxide-freebsd-x64": {
+      "version": "4.3.3",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-freebsd-x64/-/oxide-freebsd-x64-4.3.3.tgz",
+      "integrity": "sha512-iyf5bV6+wnAlflVeEy7R25dupxTNECZN5QMI0qNT6eT+EgaGdZcKhGkr5SdoaWiLJ3spLqIY9VCeSGrwmtg4kw==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": ">= 20"
+      }
+    },
+    "node_modules/@tailwindcss/oxide-linux-arm-gnueabihf": {
+      "version": "4.3.3",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-linux-arm-gnueabihf/-/oxide-linux-arm-gnueabihf-4.3.3.tgz",
+      "integrity": "sha512-aAYUprJAJQWWbRrPvtjdroZ56Md+JM8pMiopS6xGEwDfLhqj+2ver2p4nU4Mb3CRqcMmNBjo8KkUgcxhkzVQGQ==",
+      "cpu": [
+        "arm"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 20"
+      }
+    },
+    "node_modules/@tailwindcss/oxide-linux-arm64-gnu": {
+      "version": "4.3.3",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-linux-arm64-gnu/-/oxide-linux-arm64-gnu-4.3.3.tgz",
+      "integrity": "sha512-nDxldcEENOxZRzC2uu9jrutZdAAQtb+8WWDCSnWL1zvBk1+FN+x6MtDViPB5AJMfttVCUhehGWus3XBPgatM/w==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 20"
+      }
+    },
+    "node_modules/@tailwindcss/oxide-linux-arm64-musl": {
+      "version": "4.3.3",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-linux-arm64-musl/-/oxide-linux-arm64-musl-4.3.3.tgz",
+      "integrity": "sha512-Md44bD6veX/PC5iyF8cDVnw4HBIANZepRZZ7a8DQOvkfo5WUBwcp6iAuCUz23u+4SUkhJlD3eL7hNdW8ezd/kA==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 20"
+      }
+    },
+    "node_modules/@tailwindcss/oxide-linux-x64-gnu": {
+      "version": "4.3.3",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-linux-x64-gnu/-/oxide-linux-x64-gnu-4.3.3.tgz",
+      "integrity": "sha512-tx7us1muwOKAKWao2v/GaafFeQboE6aj88vC6ziN2NCGcRm8gWUhwjzg+YdVB1e4boAtdtma4L43onunI6NS4w==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 20"
+      }
+    },
+    "node_modules/@tailwindcss/oxide-linux-x64-musl": {
+      "version": "4.3.3",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-linux-x64-musl/-/oxide-linux-x64-musl-4.3.3.tgz",
+      "integrity": "sha512-SJxX60smvHgasZoBy11dX6YRjXJFovwWBoedhbQPOBzgFWBHGB+TVPWB9BxzR7TTxU8FQZAI2AyiNCMzFm8Img==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 20"
+      }
+    },
+    "node_modules/@tailwindcss/oxide-wasm32-wasi": {
+      "version": "4.3.3",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-wasm32-wasi/-/oxide-wasm32-wasi-4.3.3.tgz",
+      "integrity": "sha512-jx1+rPhY/5Ympkktd656HBWEBLxP7dH06losBLjjf5vgCODXvi9KhtftWcMIwTFIDqBr7cRnQkdLnAG+IOlGvQ==",
+      "bundleDependencies": [
+        "@napi-rs/wasm-runtime",
+        "@emnapi/core",
+        "@emnapi/runtime",
+        "@tybys/wasm-util",
+        "@emnapi/wasi-threads",
+        "tslib"
+      ],
+      "cpu": [
+        "wasm32"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "@emnapi/core": "^1.11.1",
+        "@emnapi/runtime": "^1.11.1",
+        "@emnapi/wasi-threads": "^1.2.2",
+        "@napi-rs/wasm-runtime": "^1.1.4",
+        "@tybys/wasm-util": "^0.10.2",
+        "tslib": "^2.8.1"
+      },
+      "engines": {
+        "node": ">=14.0.0"
+      }
+    },
+    "node_modules/@tailwindcss/oxide-win32-arm64-msvc": {
+      "version": "4.3.3",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-win32-arm64-msvc/-/oxide-win32-arm64-msvc-4.3.3.tgz",
+      "integrity": "sha512-3rc292Ca2ceK6Ulcc/bAVnTs/3nDtoPhyEKlgPv+yQJQi/JS/AMJlqzxvlDacL1nekbrcf6bTqp/jV4qgnPxNQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">= 20"
+      }
+    },
+    "node_modules/@tailwindcss/oxide-win32-x64-msvc": {
+      "version": "4.3.3",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/oxide-win32-x64-msvc/-/oxide-win32-x64-msvc-4.3.3.tgz",
+      "integrity": "sha512-yJ0pwIVc/nYeGoV02WtsN8KYyLQv7kyI2wDnkezyJlGGjkd4QLwDGAwl47YpPJeuI0M0ObaXGSPjvWDPeTPggw==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">= 20"
+      }
+    },
+    "node_modules/@tailwindcss/vite": {
+      "version": "4.3.3",
+      "resolved": "https://registry.npmjs.org/@tailwindcss/vite/-/vite-4.3.3.tgz",
+      "integrity": "sha512-yYU8cogLeSh/ms2jh8Fj7jaba/EWa7Ja6GoUqYZaraEuCI5YS6ms6ObZgjjedm+jm6XZjdNRWBpPP6Z86oOxcw==",
+      "license": "MIT",
+      "dependencies": {
+        "@tailwindcss/node": "4.3.3",
+        "@tailwindcss/oxide": "4.3.3",
+        "tailwindcss": "4.3.3"
+      },
+      "peerDependencies": {
+        "vite": "^5.2.0 || ^6 || ^7 || ^8"
+      }
+    },
+    "node_modules/@types/node": {
+      "version": "24.19.2",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-24.19.2.tgz",
+      "integrity": "sha512-93d49wCWJkCyN87MxLpNN6KXPCwFw7bVUg79mGUV1OS40JGWwVCr8n61DXCSqz7CV6/VfPkb7xec7uP2M+QHWQ==",
+      "devOptional": true,
+      "license": "MIT",
+      "dependencies": {
+        "undici-types": ">=7.24.0 <7.24.7"
+      }
+    },
+    "node_modules/@types/react": {
+      "version": "19.3.0",
+      "resolved": "https://registry.npmjs.org/@types/react/-/react-19.3.0.tgz",
+      "integrity": "sha512-N0rFCuH9YoxG9/m61l9MfpJKfmLOVU0em7ipIz6TRgSSkvReLB9vL85GB+yr8Bs5leqpvg96JSwF4ZS1s4viQg==",
+      "devOptional": true,
+      "license": "MIT",
+      "dependencies": {
+        "csstype": "^3.2.2"
+      }
+    },
+    "node_modules/@types/react-dom": {
+      "version": "19.3.0",
+      "resolved": "https://registry.npmjs.org/@types/react-dom/-/react-dom-19.3.0.tgz",
+      "integrity": "sha512-ZI7bU42mZXXKHn/qNLEw2IrbiINU7X5+vfgdixBHkCNpYWXjKgfQ/P+uyGb5CjOLB9UcnTeg3rylQtV2hym44Q==",
+      "devOptional": true,
+      "license": "MIT",
+      "peerDependencies": {
+        "@types/react": "^19.3.0"
+      }
+    },
+    "node_modules/@vitejs/plugin-react": {
+      "version": "6.1.2",
+      "resolved": "https://registry.npmjs.org/@vitejs/plugin-react/-/plugin-react-6.1.2.tgz",
+      "integrity": "sha512-fhJNGUdscQa4HkI0xFxwonWyhnVReCPDbXI7FH7jmzpnVCrFQI7PRrhWecO263610vOrs9tr2Y4xcf8uAdFxbw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@rolldown/pluginutils": "^1.0.1"
+      },
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      },
+      "peerDependencies": {
+        "@rolldown/plugin-babel": "^0.1.7 || ^0.2.0",
+        "babel-plugin-react-compiler": "^1.0.0",
+        "oxc-transform-react": "^0.152.0",
+        "vite": "^8.0.0"
+      },
+      "peerDependenciesMeta": {
+        "@rolldown/plugin-babel": {
+          "optional": true
+        },
+        "babel-plugin-react-compiler": {
+          "optional": true
+        },
+        "oxc-transform-react": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/cookie-es": {
+      "version": "3.1.1",
+      "resolved": "https://registry.npmjs.org/cookie-es/-/cookie-es-3.1.1.tgz",
+      "integrity": "sha512-UaXxwISYJPTr9hwQxMFYZ7kNhSXboMXP+Z3TRX6f1/NyaGPfuNUZOWP1pUEb75B2HjfklIYLVRfWiFZJyC6Npg==",
+      "license": "MIT"
+    },
+    "node_modules/csstype": {
+      "version": "3.2.3",
+      "resolved": "https://registry.npmjs.org/csstype/-/csstype-3.2.3.tgz",
+      "integrity": "sha512-z1HGKcYy2xA8AGQfwrn0PAy+PB7X/GSj3UVJW9qKyn43xWa+gl5nXmU4qqLMRzWVLFC8KusUX8T/0kCiOYpAIQ==",
+      "devOptional": true,
+      "license": "MIT"
+    },
+    "node_modules/detect-libc": {
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.1.2.tgz",
+      "integrity": "sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==",
+      "license": "Apache-2.0",
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/enhanced-resolve": {
+      "version": "5.26.0",
+      "resolved": "https://registry.npmjs.org/enhanced-resolve/-/enhanced-resolve-5.26.0.tgz",
+      "integrity": "sha512-9vhedylFonb2YGogzUKX6+Ja72gOJbN1QHAqdrvqLwhdl/QWbKopzoUC9EbQNVsAns/bx/4uyqalrQAoy1IByw==",
+      "license": "MIT",
+      "dependencies": {
+        "graceful-fs": "^4.2.4",
+        "tapable": "^2.3.3"
+      },
+      "engines": {
+        "node": ">=10.13.0"
+      }
+    },
+    "node_modules/fdir": {
+      "version": "6.5.0",
+      "resolved": "https://registry.npmjs.org/fdir/-/fdir-6.5.0.tgz",
+      "integrity": "sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=12.0.0"
+      },
+      "peerDependencies": {
+        "picomatch": "^3 || ^4"
+      },
+      "peerDependenciesMeta": {
+        "picomatch": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/fsevents": {
+      "version": "2.3.3",
+      "resolved": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.3.tgz",
+      "integrity": "sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==",
+      "hasInstallScript": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": "^8.16.0 || ^10.6.0 || >=11.0.0"
+      }
+    },
+    "node_modules/graceful-fs": {
+      "version": "4.2.11",
+      "resolved": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.11.tgz",
+      "integrity": "sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ==",
+      "license": "ISC"
+    },
+    "node_modules/jiti": {
+      "version": "2.7.0",
+      "resolved": "https://registry.npmjs.org/jiti/-/jiti-2.7.0.tgz",
+      "integrity": "sha512-AC/7JofJvZGrrneWNaEnJeOLUx+JlGt7tNa0wZiRPT4MY1wmfKjt2+6O2p2uz2+skll8OZZmJMNqeke7kKbNgQ==",
+      "license": "MIT",
+      "bin": {
+        "jiti": "lib/jiti-cli.mjs"
+      }
+    },
+    "node_modules/lightningcss": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss/-/lightningcss-1.33.0.tgz",
+      "integrity": "sha512-WkUDrojuJs0xkgGf2udWxa3yGBRxPtxUkB79i6aCZLRgc7PM8fZe9TosfPDcvEpQZbuFASnHYmRLBLUbmLOIIA==",
+      "license": "MPL-2.0",
+      "dependencies": {
+        "detect-libc": "^2.0.3"
+      },
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      },
+      "optionalDependencies": {
+        "lightningcss-android-arm64": "1.33.0",
+        "lightningcss-darwin-arm64": "1.33.0",
+        "lightningcss-darwin-x64": "1.33.0",
+        "lightningcss-freebsd-x64": "1.33.0",
+        "lightningcss-linux-arm-gnueabihf": "1.33.0",
+        "lightningcss-linux-arm64-gnu": "1.33.0",
+        "lightningcss-linux-arm64-musl": "1.33.0",
+        "lightningcss-linux-x64-gnu": "1.33.0",
+        "lightningcss-linux-x64-musl": "1.33.0",
+        "lightningcss-win32-arm64-msvc": "1.33.0",
+        "lightningcss-win32-x64-msvc": "1.33.0"
+      }
+    },
+    "node_modules/lightningcss-android-arm64": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-android-arm64/-/lightningcss-android-arm64-1.33.0.tgz",
+      "integrity": "sha512-gEpRTalKdosp4Bb8qWtc2iOgE5SeIHlpS1up9bFq2wAyYhl1UdTObYiHe98zEM9SQvSoqQZ1IQD0JNpg3Ml5pg==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-darwin-arm64": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-darwin-arm64/-/lightningcss-darwin-arm64-1.33.0.tgz",
+      "integrity": "sha512-Sciaz8eenNTKn9b3t7+xr0ipTp9YxKQY4npwQ3mrRuL0BAVHBLyZxofhaKBAVtzmtRZ/zTyo0/to4B1uWG/Djg==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-darwin-x64": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-darwin-x64/-/lightningcss-darwin-x64-1.33.0.tgz",
+      "integrity": "sha512-Z5UPAxzrjlWNNyGy6i65cJzzvgJ5D3T6wMvs+gWpY9d7qRhANrxqAp6LhxIgZhWEw18RfJTGcRxjuLIBr+m8XQ==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-freebsd-x64": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-freebsd-x64/-/lightningcss-freebsd-x64-1.33.0.tgz",
+      "integrity": "sha512-QQM/Ti/hQajJwCY+RiWuCZ9sdtI/XQk7nDK5vC8kkdwixezOlDgvDx7+RT+QjK6FcFT4MpsuoBnHIo/O3StRRg==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-linux-arm-gnueabihf": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm-gnueabihf/-/lightningcss-linux-arm-gnueabihf-1.33.0.tgz",
+      "integrity": "sha512-N7FVBe6iS24MlM6R/4RBTxGhQheZGs7tiQ9U32UtF75NzP5Q7xWPRqLBCKxlRQRk3rY1jCIPLzx7WzOhuUIRLQ==",
+      "cpu": [
+        "arm"
+      ],
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-linux-arm64-gnu": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-gnu/-/lightningcss-linux-arm64-gnu-1.33.0.tgz",
+      "integrity": "sha512-j2v/itmy4HlNxlc6voKXYgBqNi0Ng2LShg4z7GufpEgs05P+2suBVyi9I6YHq5uoVFx9ETin3eCEhLVyXGQnKg==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-linux-arm64-musl": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-musl/-/lightningcss-linux-arm64-musl-1.33.0.tgz",
+      "integrity": "sha512-yiO5ROMuYQgXbC60yjZU5CYSFZGKXL0HFATXt9mHJn1+zW55oCtMI9NfcVhYLMFDL7gV7oBPon/EmMMGg2OvtQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-linux-x64-gnu": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-x64-gnu/-/lightningcss-linux-x64-gnu-1.33.0.tgz",
+      "integrity": "sha512-ar+Ju7LmcN0Jo4FpL4hpFybwNG9/3A/Br5KW2n2jyODg3MEZXaDYADdemoNS+BDNfMgKvylJLj4S5tyRActuAg==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-linux-x64-musl": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-x64-musl/-/lightningcss-linux-x64-musl-1.33.0.tgz",
+      "integrity": "sha512-RYiYbkokw0trfKqqzfF55lginwEPrD3OJDfTuJzFs1MK6iFnDenaz1fqLLtX4ITG3OktJQXOeTaw1awrBAlZPw==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-win32-arm64-msvc": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-win32-arm64-msvc/-/lightningcss-win32-arm64-msvc-1.33.0.tgz",
+      "integrity": "sha512-1K+MPfLSFVpphzpdbfkhlWk6wBrTObBzS2T6db10PNOZgR9GoVsAWzwNyuhUYYbTp23j+4RrncfujZ4uAzXvwA==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-win32-x64-msvc": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-win32-x64-msvc/-/lightningcss-win32-x64-msvc-1.33.0.tgz",
+      "integrity": "sha512-OlEICDx/Xl0FqSp4bry8zFnCvGpig3Gl4gCquvYwHuqJKEC1+n9NgDniFvqHGmMv1ZkqDJrDqKKSykTDX+ehuA==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/magic-string": {
+      "version": "0.30.21",
+      "resolved": "https://registry.npmjs.org/magic-string/-/magic-string-0.30.21.tgz",
+      "integrity": "sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ==",
+      "license": "MIT",
+      "dependencies": {
+        "@jridgewell/sourcemap-codec": "^1.5.5"
+      }
+    },
+    "node_modules/nanoid": {
+      "version": "3.3.20",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.20.tgz",
+      "integrity": "sha512-uKdg2G3GNCKQn9byYOpxbGqrT2fGO5KRt5J/8b3pok8rT6qxGWF6hxMyJiEYtAf+FVyYuD9hRaDqX5uPFYJ4ZQ==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "license": "MIT",
+      "bin": {
+        "nanoid": "bin/nanoid.cjs"
+      },
+      "engines": {
+        "node": "^10 || ^12 || ^13.7 || ^14 || >=15.0.1"
+      }
+    },
+    "node_modules/oxlint": {
+      "version": "1.89.0",
+      "resolved": "https://registry.npmjs.org/oxlint/-/oxlint-1.89.0.tgz",
+      "integrity": "sha512-a25hkfo61okGPvJz432fRIPoxlKtNnOVy9w4rzrmGgNm4iVTPwpSQlmdqNWnp6p9QyyPVfAZRgnf5XvSBZFk/A==",
+      "dev": true,
+      "license": "MIT",
+      "bin": {
+        "oxlint": "bin/oxlint"
+      },
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/oxc-project"
+      },
+      "optionalDependencies": {
+        "@oxlint/binding-android-arm-eabi": "1.89.0",
+        "@oxlint/binding-android-arm64": "1.89.0",
+        "@oxlint/binding-darwin-arm64": "1.89.0",
+        "@oxlint/binding-darwin-x64": "1.89.0",
+        "@oxlint/binding-freebsd-x64": "1.89.0",
+        "@oxlint/binding-linux-arm-gnueabihf": "1.89.0",
+        "@oxlint/binding-linux-arm-musleabihf": "1.89.0",
+        "@oxlint/binding-linux-arm64-gnu": "1.89.0",
+        "@oxlint/binding-linux-arm64-musl": "1.89.0",
+        "@oxlint/binding-linux-ppc64-gnu": "1.89.0",
+        "@oxlint/binding-linux-riscv64-gnu": "1.89.0",
+        "@oxlint/binding-linux-riscv64-musl": "1.89.0",
+        "@oxlint/binding-linux-s390x-gnu": "1.89.0",
+        "@oxlint/binding-linux-x64-gnu": "1.89.0",
+        "@oxlint/binding-linux-x64-musl": "1.89.0",
+        "@oxlint/binding-openharmony-arm64": "1.89.0",
+        "@oxlint/binding-win32-arm64-msvc": "1.89.0",
+        "@oxlint/binding-win32-ia32-msvc": "1.89.0",
+        "@oxlint/binding-win32-x64-msvc": "1.89.0"
+      },
+      "peerDependencies": {
+        "oxlint-tsgolint": ">=7.0.2003",
+        "vite-plus": "*"
+      },
+      "peerDependenciesMeta": {
+        "oxlint-tsgolint": {
+          "optional": true
+        },
+        "vite-plus": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/picocolors": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/picocolors/-/picocolors-1.1.1.tgz",
+      "integrity": "sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==",
+      "license": "ISC"
+    },
+    "node_modules/picomatch": {
+      "version": "4.0.7",
+      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.7.tgz",
+      "integrity": "sha512-qcJu88Q2IWqJsDD529JKMdwGm/dvInW4HvQnRwiH9JtihJvzGOscDtHE3x1pBKeUOTysQ8kVmLnJ2kJu7yhcGA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/jonschlinkert"
+      }
+    },
+    "node_modules/playwright": {
+      "version": "1.64.1",
+      "resolved": "https://registry.npmjs.org/playwright/-/playwright-1.64.1.tgz",
+      "integrity": "sha512-HCrVhHr5QQuwYoswEUGTb7gGp522yflbv/ST8nF4sFWGuLjQCt17Q/EubpGGSNKYn1tsTCPZxqHhHCfVURu7UA==",
+      "dev": true,
+      "dependencies": {
+        "playwright-core": "1.64.1"
+      },
+      "bin": {
+        "playwright": "cli.js"
+      },
+      "engines": {
+        "node": ">=20"
+      }
+    },
+    "node_modules/playwright-core": {
+      "version": "1.64.1",
+      "resolved": "https://registry.npmjs.org/playwright-core/-/playwright-core-1.64.1.tgz",
+      "integrity": "sha512-BC4s8y6SEVA6Q1rSxZTto8hI1KUI3xXlHGZgvGqP4IqPdI/a6FX9H29IDNz7vKo9l21b6LfYosScPL6M3xxyDQ==",
+      "dev": true,
+      "bin": {
+        "playwright-core": "cli.js"
+      },
+      "engines": {
+        "node": ">=20"
+      }
+    },
+    "node_modules/postcss": {
+      "version": "8.5.31",
+      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.31.tgz",
+      "integrity": "sha512-YUbWYCgErwnMAVkjUnYa+KlMBzGpHwiIt/DE7f0G33AuX2LH9UcTk6KgWxd3zRU+pN3u/C+Xl3EnMLM4Hea7Sg==",
+      "funding": [
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/postcss/"
+        },
+        {
+          "type": "tidelift",
+          "url": "https://tidelift.com/funding/github/npm/postcss"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "nanoid": "^3.3.20",
+        "picocolors": "^1.1.1",
+        "source-map-js": "^1.2.2"
+      },
+      "engines": {
+        "node": "^10 || ^12 || >=14"
+      }
+    },
+    "node_modules/react": {
+      "version": "19.3.1",
+      "resolved": "https://registry.npmjs.org/react/-/react-19.3.1.tgz",
+      "integrity": "sha512-QNhWdt7nrgVWWQG58QuGsAR3jv3Hbe4mb4vz7w2csnHavciZJgda1CPNaldF6eVxv90ud3jUXpKlHL69gO38yw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/react-dom": {
+      "version": "19.3.1",
+      "resolved": "https://registry.npmjs.org/react-dom/-/react-dom-19.3.1.tgz",
+      "integrity": "sha512-Y0bARz53lhEC1NMCASs0/j+faB/zqt3R8hpvg1e8+61ZVJ4UL0UdC4cBbXfZMcIuhrfgeILTLe+ZeBCavQPtKQ==",
+      "license": "MIT",
+      "dependencies": {
+        "scheduler": "^0.28.0"
+      },
+      "peerDependencies": {
+        "react": "^19.3.1"
+      }
+    },
+    "node_modules/react-router": {
+      "version": "8.5.0",
+      "resolved": "https://registry.npmjs.org/react-router/-/react-router-8.5.0.tgz",
+      "integrity": "sha512-9nEd/deifcTJIIcUaNIyQGkyXD0D6QVB9XD2O5GgHpP3xu3U5RXm87YQ8++Wn8JQWgMBM/5+PjWPM/7n7O7WHA==",
+      "license": "MIT",
+      "dependencies": {
+        "@remix-run/route-pattern": "^0.22.1",
+        "cookie-es": "^3.1.1"
+      },
+      "engines": {
+        "node": ">=22.22.0"
+      },
+      "peerDependencies": {
+        "@types/react": ">=19.2.0",
+        "@types/react-dom": ">=19.2.0",
+        "react": ">=19.2.7",
+        "react-dom": ">=19.2.7"
+      },
+      "peerDependenciesMeta": {
+        "@types/react": {
+          "optional": true
+        },
+        "@types/react-dom": {
+          "optional": true
+        },
+        "react-dom": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/rolldown": {
+      "version": "1.2.15",
+      "resolved": "https://registry.npmjs.org/rolldown/-/rolldown-1.2.15.tgz",
+      "integrity": "sha512-6odND+fel5zVw3I4Yc2e69gvguDnX0CAAGiNDZSq4ik5WUcaLrkD2GLuog0XcODbor31hZ5ayEMgVDno+KPV5g==",
+      "license": "MIT",
+      "dependencies": {
+        "@oxc-project/types": "=0.155.0",
+        "@rolldown/pluginutils": "^1.0.0"
+      },
+      "bin": {
+        "rolldown": "bin/cli.mjs"
+      },
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      },
+      "optionalDependencies": {
+        "@rolldown/binding-android-arm-eabi": "1.2.15",
+        "@rolldown/binding-android-arm64": "1.2.15",
+        "@rolldown/binding-darwin-arm64": "1.2.15",
+        "@rolldown/binding-darwin-x64": "1.2.15",
+        "@rolldown/binding-freebsd-x64": "1.2.15",
+        "@rolldown/binding-linux-arm-gnueabihf": "1.2.15",
+        "@rolldown/binding-linux-arm64-gnu": "1.2.15",
+        "@rolldown/binding-linux-arm64-musl": "1.2.15",
+        "@rolldown/binding-linux-ppc64-gnu": "1.2.15",
+        "@rolldown/binding-linux-s390x-gnu": "1.2.15",
+        "@rolldown/binding-linux-x64-gnu": "1.2.15",
+        "@rolldown/binding-linux-x64-musl": "1.2.15",
+        "@rolldown/binding-openharmony-arm64": "1.2.15",
+        "@rolldown/binding-win32-arm64-msvc": "1.2.15",
+        "@rolldown/binding-win32-x64-msvc": "1.2.15"
+      }
+    },
+    "node_modules/scheduler": {
+      "version": "0.28.0",
+      "resolved": "https://registry.npmjs.org/scheduler/-/scheduler-0.28.0.tgz",
+      "integrity": "sha512-juorfCmIkIw8tT+p5BXSm6PJjQF/ycEYmKyzURCIt/RaZIhL+PulbQ9Yu2z1HdOJDdqDTlxA1+xKBmHXJsczAw==",
+      "license": "MIT"
+    },
+    "node_modules/source-map-js": {
+      "version": "1.2.2",
+      "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.2.tgz",
+      "integrity": "sha512-KGj/8Y43x35aZVDtt+J4mK1hoLGHULMYfSkODJNQjNDC3oW1PqPoxMwo0pLUsWM/UEGzON/NxeHywEfNXNP3Vw==",
+      "license": "BSD-3-Clause",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/tailwindcss": {
+      "version": "4.3.3",
+      "resolved": "https://registry.npmjs.org/tailwindcss/-/tailwindcss-4.3.3.tgz",
+      "integrity": "sha512-gOhV3P7ufE62QDGg1zVaTgCR+EtPv92k2nIhVcVKcLmxT1sUBsQGhnZj175j+MqRt4zLF7ic+sCYjfhxMxj7YQ==",
+      "license": "MIT"
+    },
+    "node_modules/tapable": {
+      "version": "2.3.3",
+      "resolved": "https://registry.npmjs.org/tapable/-/tapable-2.3.3.tgz",
+      "integrity": "sha512-uxc/zpqFg6x7C8vOE7lh6Lbda8eEL9zmVm/PLeTPBRhh1xCgdWaQ+J1CUieGpIfm2HdtsUpRv+HshiasBMcc6A==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=6"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/webpack"
+      }
+    },
+    "node_modules/tinyglobby": {
+      "version": "0.2.17",
+      "resolved": "https://registry.npmjs.org/tinyglobby/-/tinyglobby-0.2.17.tgz",
+      "integrity": "sha512-wXR/dYpcqKmfWpEdZjiKJOwCNFndD0DMnrW/cYjVGttEkBfVgcLFHoNrlj47mjOVic9yyNu65alsgF4NQyTa2g==",
+      "license": "MIT",
+      "dependencies": {
+        "fdir": "^6.5.0",
+        "picomatch": "^4.0.4"
+      },
+      "engines": {
+        "node": ">=12.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/SuperchupuDev"
+      }
+    },
+    "node_modules/typescript": {
+      "version": "6.0.3",
+      "resolved": "https://registry.npmjs.org/typescript/-/typescript-6.0.3.tgz",
+      "integrity": "sha512-y2TvuxSZPDyQakkFRPZHKFm+KKVqIisdg9/CZwm9ftvKXLP8NRWj38/ODjNbr43SsoXqNuAisEf1GdCxqWcdBw==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "bin": {
+        "tsc": "bin/tsc",
+        "tsserver": "bin/tsserver"
+      },
+      "engines": {
+        "node": ">=14.17"
+      }
+    },
+    "node_modules/undici-types": {
+      "version": "7.24.6",
+      "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-7.24.6.tgz",
+      "integrity": "sha512-WRNW+sJgj5OBN4/0JpHFqtqzhpbnV0GuB+OozA9gCL7a993SmU+1JBZCzLNxYsbMfIeDL+lTsphD5jN5N+n0zg==",
+      "devOptional": true,
+      "license": "MIT"
+    },
+    "node_modules/vite": {
+      "version": "8.3.5",
+      "resolved": "https://registry.npmjs.org/vite/-/vite-8.3.5.tgz",
+      "integrity": "sha512-z1YpjieJ9g0ebTmQpLBv/oq9E3F9EIlOe+7LahW8SrE3LTiG3udBRUXQOlYXP9b+IC2q2phHeVxj9xGlw34OEQ==",
+      "license": "MIT",
+      "dependencies": {
+        "lightningcss": "^1.33.0",
+        "picomatch": "^4.0.7",
+        "postcss": "^8.5.30",
+        "rolldown": "~1.2.14",
+        "tinyglobby": "^0.2.17"
+      },
+      "bin": {
+        "vite": "bin/vite.js"
+      },
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      },
+      "funding": {
+        "url": "https://github.com/vitejs/vite?sponsor=1"
+      },
+      "optionalDependencies": {
+        "fsevents": "~2.3.3"
+      },
+      "peerDependencies": {
+        "@types/node": "^20.19.0 || >=22.12.0",
+        "@vitejs/devtools": "^0.7.1 || ^0.8.0",
+        "esbuild": "^0.27.0 || ^0.28.0",
+        "jiti": ">=1.21.0",
+        "less": "^4.0.0",
+        "sass": "^1.70.0",
+        "sass-embedded": "^1.70.0",
+        "stylus": ">=0.54.8",
+        "sugarss": "^5.0.0",
+        "terser": "^5.16.0",
+        "tsx": "^4.8.1",
+        "yaml": "^2.4.2"
+      },
+      "peerDependenciesMeta": {
+        "@types/node": {
+          "optional": true
+        },
+        "@vitejs/devtools": {
+          "optional": true
+        },
+        "esbuild": {
+          "optional": true
+        },
+        "jiti": {
+          "optional": true
+        },
+        "less": {
+          "optional": true
+        },
+        "sass": {
+          "optional": true
+        },
+        "sass-embedded": {
+          "optional": true
+        },
+        "stylus": {
+          "optional": true
+        },
+        "sugarss": {
+          "optional": true
+        },
+        "terser": {
+          "optional": true
+        },
+        "tsx": {
+          "optional": true
+        },
+        "yaml": {
+          "optional": true
+        }
+      }
+    }
+  }
+}
diff --git a/dashboard/package.json b/dashboard/package.json
new file mode 100644
index 0000000..3551555
--- /dev/null
+++ b/dashboard/package.json
@@ -0,0 +1,31 @@
+{
+  "name": "relay-dashboard",
+  "private": true,
+  "version": "0.0.0",
+  "type": "module",
+  "scripts": {
+    "dev": "vite",
+    "build": "tsc -b && vite build",
+    "lint": "oxlint",
+    "preview": "vite preview",
+    "test:e2e": "playwright test",
+    "test:e2e:ui": "playwright test --ui"
+  },
+  "dependencies": {
+    "@tailwindcss/vite": "4.3.3",
+    "react": "19.3.1",
+    "react-dom": "19.3.1",
+    "react-router": "8.5.0",
+    "tailwindcss": "4.3.3"
+  },
+  "devDependencies": {
+    "@playwright/test": "1.64.1",
+    "@types/node": "24.19.2",
+    "@types/react": "19.3.0",
+    "@types/react-dom": "19.3.0",
+    "@vitejs/plugin-react": "6.1.2",
+    "oxlint": "1.89.0",
+    "typescript": "6.0.3",
+    "vite": "8.3.5"
+  }
+}
diff --git a/dashboard/playwright.config.ts b/dashboard/playwright.config.ts
new file mode 100644
index 0000000..bff2e43
--- /dev/null
+++ b/dashboard/playwright.config.ts
@@ -0,0 +1,45 @@
+import { defineConfig, devices } from '@playwright/test'
+
+// End-to-end tests: a real browser clicking the real app.
+//
+// The app still runs on the fixtures in src/mocks.ts, so every run sees the same
+// data and the tests can assert exact values. When src/api.ts replaces the mocks
+// in 5.3, these same tests become the proof that the swap changed nothing.
+
+export default defineConfig({
+  testDir: './e2e',
+
+  // CI must never pass because someone left a .only in a file.
+  forbidOnly: !!process.env.CI,
+
+  // Locally a flaky test should be visible, not retried away. In CI one retry
+  // separates "broken" from "unlucky" without hiding a real failure.
+  retries: process.env.CI ? 1 : 0,
+
+  // One worker in CI: the runner has 2 cores and a Vite dev server to feed.
+  workers: process.env.CI ? 1 : undefined,
+
+  reporter: process.env.CI ? [['github'], ['html', { open: 'never' }]] : [['list']],
+
+  use: {
+    baseURL: 'http://localhost:5173',
+    // Kept only for a failing test: enough to see what happened, nothing to wade
+    // through when everything is green.
+    trace: 'on-first-retry',
+    screenshot: 'only-on-failure',
+  },
+
+  projects: [{ name: 'chromium', use: { ...devices['Desktop Chrome'] } }],
+
+  // Playwright starts Vite itself, so there is no "did you remember to run npm run
+  // dev" step. Locally it reuses a server that is already up; in CI it always
+  // starts its own.
+  webServer: {
+    command: 'npm run dev',
+    url: 'http://localhost:5173',
+    reuseExistingServer: !process.env.CI,
+    timeout: 60 * 1000,
+    stdout: 'ignore',
+    stderr: 'pipe',
+  },
+})
diff --git a/dashboard/public/favicon.svg b/dashboard/public/favicon.svg
new file mode 100644
index 0000000..9bac4ef
--- /dev/null
+++ b/dashboard/public/favicon.svg
@@ -0,0 +1,8 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 32 32" role="img" aria-label="Relay">
+  <title>Relay</title>
+  <rect width="32" height="32" rx="7" fill="#2f6feb"/>
+  <!-- A message handed on: it leaves one point, waits, and arrives at the next. -->
+  <circle cx="8" cy="16" r="3" fill="#ffffff"/>
+  <circle cx="24" cy="16" r="3" fill="#ffffff"/>
+  <path d="M11.5 16h9" stroke="#ffffff" stroke-width="2" stroke-linecap="round" stroke-dasharray="2.5 3"/>
+</svg>
diff --git a/dashboard/src/App.tsx b/dashboard/src/App.tsx
new file mode 100644
index 0000000..f18b347
--- /dev/null
+++ b/dashboard/src/App.tsx
@@ -0,0 +1,109 @@
+import { NavLink, Navigate, Route, Routes, useLocation, useNavigate } from 'react-router'
+import { me } from './mocks'
+import Connect from './pages/Connect'
+import DeliveryDetail from './pages/DeliveryDetail'
+import DeliveryLog from './pages/DeliveryLog'
+import Endpoints from './pages/Endpoints'
+
+const linkClass = ({ isActive }: { isActive: boolean }) =>
+  [
+    'pb-3 text-sm border-b-2 -mb-px transition-colors',
+    isActive
+      ? 'border-[var(--accent)] text-[var(--ink)] font-medium'
+      : 'border-transparent text-[var(--ink-dim)] hover:text-[var(--ink)]',
+  ].join(' ')
+
+// Every screen except Connect needs a key. Without this the log renders fine on
+// mock data but will be an empty page full of 401s once it calls the real API.
+function RequireKey({ children }: { children: React.ReactNode }) {
+  if (!sessionStorage.getItem('relay_key')) return <Navigate to="/" replace />
+  return <>{children}</>
+}
+
+export default function App() {
+  const navigate = useNavigate()
+
+  // Re-read the key on every navigation rather than keeping a copy in state. Connect
+  // and Disconnect both navigate, so useLocation is what makes the header update;
+  // depending on that is why this is written as a read rather than a useState.
+  useLocation()
+  const connected = Boolean(sessionStorage.getItem('relay_key'))
+
+  function disconnect() {
+    sessionStorage.removeItem('relay_key')
+    navigate('/')
+  }
+
+  return (
+    <div className="min-h-screen">
+      <header className="border-b border-[var(--line-soft)] bg-[var(--card)]">
+        <div className="mx-auto flex max-w-5xl items-center gap-8 px-6 pt-4">
+          <NavLink to="/" className="mono pb-3 text-sm font-medium">
+            Relay
+          </NavLink>
+
+          {connected && (
+            <>
+              <nav className="flex gap-6">
+                <NavLink to="/deliveries" className={linkClass}>
+                  Delivery log
+                </NavLink>
+                <NavLink to="/endpoints" className={linkClass}>
+                  Endpoints
+                </NavLink>
+              </nav>
+
+              <div className="ml-auto flex items-center gap-3 pb-3">
+                {/* The prefix comes from GET /v1/me, not from what was typed: the API
+                    is what knows which key this is. Only the prefix is ever shown. */}
+                <span className="mono text-xs text-[var(--ink-faint)]">
+                  {me.key.prefix}
+                </span>
+                <button
+                  onClick={disconnect}
+                  className="text-xs text-[var(--ink-dim)] hover:text-[var(--ink)]"
+                >
+                  Disconnect
+                </button>
+              </div>
+            </>
+          )}
+        </div>
+      </header>
+
+      <main className="mx-auto max-w-5xl px-6 py-8">
+        <Routes>
+          <Route path="/" element={<Connect />} />
+          <Route
+            path="/deliveries"
+            element={
+              <RequireKey>
+                <DeliveryLog />
+              </RequireKey>
+            }
+          />
+          <Route
+            path="/deliveries/:id"
+            element={
+              <RequireKey>
+                <DeliveryDetail />
+              </RequireKey>
+            }
+          />
+          <Route
+            path="/endpoints"
+            element={
+              <RequireKey>
+                <Endpoints />
+              </RequireKey>
+            }
+          />
+
+          {/* nginx hands every unknown path to index.html, so the app owns 404s.
+              Without this, a typo in the URL renders a header above nothing. */}
+          <Route path="*" element={<Navigate to="/" replace />} />
+        </Routes>
+      </main>
+    </div>
+  )
+}
diff --git a/dashboard/src/components/StatusPill.tsx b/dashboard/src/components/StatusPill.tsx
new file mode 100644
index 0000000..a1e9393
--- /dev/null
+++ b/dashboard/src/components/StatusPill.tsx
@@ -0,0 +1,21 @@
+import type { DeliveryStatus, EndpointStatus } from '../types'
+
+// One colour per state, from the wireframe palette: green for the happy path,
+// amber for work still in progress, red for something that needs a person.
+const colours: Record<DeliveryStatus | EndpointStatus, string> = {
+  delivered: 'bg-[var(--ok-bg)] text-[var(--ok)]',
+  active: 'bg-[var(--ok-bg)] text-[var(--ok)]',
+  pending: 'bg-[var(--warn-bg)] text-[var(--warn)]',
+  failing: 'bg-[var(--warn-bg)] text-[var(--warn)]',
+  dead: 'bg-[var(--bad-bg)] text-[var(--bad)]',
+}
+
+export default function StatusPill({ status }: { status: DeliveryStatus | EndpointStatus }) {
+  return (
+    // data-testid: the e2e tests find the status by this, not by its colour classes,
+    // so restyling the pill can't break them.
+    <span data-testid="status" className={`mono rounded-full px-2 py-0.5 text-xs ${colours[status]}`}>
+      {status}
+    </span>
+  )
+}
diff --git a/dashboard/src/format.ts b/dashboard/src/format.ts
new file mode 100644
index 0000000..beb3438
--- /dev/null
+++ b/dashboard/src/format.ts
@@ -0,0 +1,30 @@
+// How times are written on screen. One place, because the log and the detail
+// screen have to agree: the same moment must read the same way on both.
+
+const LOCALE = 'en-GB' // 24-hour clock, English month names to match the rest of the UI
+
+function isToday(d: Date) {
+  return d.toDateString() === new Date().toDateString()
+}
+
+/**
+ * A timestamp as the clock time, with the date in front whenever it is not today.
+ *
+ * The clock alone is what you scan the log for, and most rows are from today, so
+ * the date would be noise. But an attempt log can run over days, and then a bare
+ * clock lies about the order: try 7 at 03:36 looks earlier than try 6 at 22:36.
+ */
+export function clock(iso: string, withSeconds = false) {
+  const d = new Date(iso)
+
+  const time = d.toLocaleTimeString(LOCALE, {
+    hour: '2-digit',
+    minute: '2-digit',
+    hourCycle: 'h23',
+    ...(withSeconds ? { second: '2-digit' } : {}),
+  })
+
+  if (isToday(d)) return time
+
+  return `${d.toLocaleDateString(LOCALE, { day: 'numeric', month: 'short' })} ${time}`
+}
diff --git a/dashboard/src/index.css b/dashboard/src/index.css
new file mode 100644
index 0000000..8fd9761
--- /dev/null
+++ b/dashboard/src/index.css
@@ -0,0 +1,61 @@
+@import 'tailwindcss';
+
+/* The palette comes straight from docs/design/relay-wireframe.html, so the built app
+   and the sketch stay the same thing. Plain CSS variables rather than Tailwind theme
+   tokens, because they have to swap on the dark-mode query.
+
+   The two fonts are loaded from index.html, not here: Tailwind's @import above expands
+   into this file, so anything imported after it is no longer at the start of the
+   stylesheet and gets dropped from the production build. */
+
+:root {
+  --paper: #f6f8fa;
+  --ink: #1f2328;
+  --ink-dim: #59636e;
+  --ink-faint: #656d76; /* 5.25:1 on card, 4.93:1 on paper - WCAG AA */
+  --card: #ffffff;
+  --line: #afb8c1;
+  --line-soft: #d0d7de;
+  --accent: #2f6feb;
+  --accent-soft: #eaf2ff;
+  --ok: #1a7f37;
+  --ok-bg: #dafbe1;
+  --warn: #9a6700;
+  --warn-bg: #fff8c5;
+  --bad: #cf222e;
+  --bad-bg: #ffebe9;
+}
+
+@media (prefers-color-scheme: dark) {
+  :root {
+    --paper: #0d1117;
+    --ink: #e6edf3;
+    --ink-dim: #9198a1;
+    --ink-faint: #7d8590; /* 4.64:1 on card, 5.07:1 on paper - WCAG AA */
+    --card: #161b22;
+    --line: #3d444d;
+    --line-soft: #21262d;
+    --accent: #4493f8;
+    --accent-soft: #11253d;
+    --ok: #3fb950;
+    --ok-bg: #122117;
+    --warn: #d29922;
+    --warn-bg: #2b2111;
+    --bad: #f85149;
+    --bad-bg: #2d1214;
+  }
+}
+
+body {
+  margin: 0;
+  background: var(--paper);
+  color: var(--ink);
+  font-family: 'IBM Plex Sans', ui-sans-serif, system-ui, sans-serif;
+  -webkit-font-smoothing: antialiased;
+}
+
+code,
+pre,
+.mono {
+  font-family: 'IBM Plex Mono', ui-monospace, SFMono-Regular, Menlo, monospace;
+}
diff --git a/dashboard/src/main.tsx b/dashboard/src/main.tsx
new file mode 100644
index 0000000..ae3d161
--- /dev/null
+++ b/dashboard/src/main.tsx
@@ -0,0 +1,13 @@
+import { StrictMode } from 'react'
+import { createRoot } from 'react-dom/client'
+import { BrowserRouter } from 'react-router'
+import './index.css'
+import App from './App.tsx'
+
+createRoot(document.getElementById('root')!).render(
+  <StrictMode>
+    <BrowserRouter>
+      <App />
+    </BrowserRouter>
+  </StrictMode>,
+)
diff --git a/dashboard/src/mockStore.ts b/dashboard/src/mockStore.ts
new file mode 100644
index 0000000..4db36f3
--- /dev/null
+++ b/dashboard/src/mockStore.ts
@@ -0,0 +1,131 @@
+// Stands in for the server's database until `src/api.ts` replaces it in phase 5.3.
+//
+// Why a module and not component state: a replay used to live in the detail
+// screen's own Map, so the log still said dead/8 while the detail said pending/0,
+// and a new endpoint was forgotten as soon as you navigated away. Both screens now
+// read the same data, and it outlives them.
+//
+// One source of truth, like the real API: only the **detail** fixtures are stored,
+// and the log's rows are derived from them. Keeping a second list of rows and
+// updating both on replay is the same shape as the bug where a log row had no
+// detail screen at all - so that shape is gone rather than guarded by a test.
+//
+// Not a state library on purpose. Mutable data behind plain functions, read when a
+// screen mounts; React Router mounts a screen again on every navigation, which is
+// all the freshness these four screens need. No context, no subscriptions.
+import {
+  deliveredDeliveryDetail,
+  deliveries,
+  deliveryDetail,
+  endpointCreated,
+  endpointDeletedDetail,
+  endpoints,
+  pendingDeliveryDetail,
+  recoveredDeliveryDetail,
+  replayResponse,
+} from './mocks'
+import type {
+  Delivery,
+  DeliveryDetail,
+  Endpoint,
+  EndpointCreated,
+  Page,
+} from './types'
+
+const details = new Map<string, DeliveryDetail>(
+  [
+    pendingDeliveryDetail,
+    deliveryDetail,
+    deliveredDeliveryDetail,
+    recoveredDeliveryDetail,
+    endpointDeletedDetail,
+  ].map((d) => [d.id, d]),
+)
+
+// A log row is a delivery without its attempt history, and with the short event and
+// endpoint objects. Written out rather than spread, so adding a field to
+// DeliveryDetail cannot leak the payload into the list by accident.
+function toRow(d: DeliveryDetail): Delivery {
+  return {
+    id: d.id,
+    status: d.status,
+    attempts: d.attempts,
+    next_attempt_at: d.next_attempt_at,
+    last_status_code: d.last_status_code,
+    last_error: d.last_error,
+    delivered_at: d.delivered_at,
+    created_at: d.created_at,
+    event: { id: d.event.id, type: d.event.type },
+    endpoint: { id: d.endpoint.id, name: d.endpoint.name },
+  }
+}
+
+/**
+ * Stands in for `GET /v1/deliveries`. Newest first, as docs/api.md specifies.
+ *
+ * The sort is a plain string compare: every timestamp is ISO 8601 in UTC, and those
+ * sort lexicographically in the same order as they do in time. `next_cursor` comes
+ * from the fixture, so the shape the screens read is the shape the API will send.
+ */
+export function listDeliveries(): Page<Delivery> {
+  const data = [...details.values()]
+    .sort((a, b) => b.created_at.localeCompare(a.created_at))
+    .map(toRow)
+
+  return { data, next_cursor: deliveries.next_cursor }
+}
+
+/** Stands in for `GET /v1/deliveries/:id`. */
+export function getDelivery(id: string | undefined): DeliveryDetail | null {
+  if (!id) return null
+  return details.get(id) ?? null
+}
+
+/**
+ * Stands in for `POST /v1/deliveries/:id/replay`.
+ *
+ * Takes only the four fields the answer changes. Replay answers with a `Delivery`,
+ * not a `DeliveryDetail`, so spreading the whole answer would replace `event` with
+ * the short version and lose the payload the detail screen shows.
+ *
+ * `attempts` goes back to 0: it is the retry budget for the current cycle, not the
+ * history. The history stays in `attempt_log`, and the next try becomes number 9.
+ */
+export function replayDelivery(id: string): DeliveryDetail | null {
+  const current = details.get(id)
+  if (!current) return null
+
+  const next: DeliveryDetail = {
+    ...current,
+    status: replayResponse.status,
+    attempts: replayResponse.attempts,
+    next_attempt_at: replayResponse.next_attempt_at,
+    last_error: replayResponse.last_error,
+  }
+
+  details.set(id, next)
+  return next
+}
+
+const endpointRows: Endpoint[] = [...endpoints.data]
+
+/** Stands in for `GET /v1/endpoints`: at most 20 per owner, so no paging. */
+export function listEndpoints(): Endpoint[] {
+  return [...endpointRows]
+}
+
+/**
+ * Stands in for `POST /v1/endpoints`, the one answer that carries the secret.
+ *
+ * The stored row is built without `signing_secret`, because the list the API later
+ * returns never has one. The caller gets the secret to show once and nothing keeps
+ * a copy, so it is gone for good when that box is dismissed.
+ */
+export function addEndpoint(name: string, url: string): EndpointCreated {
+  const { signing_secret, ...template } = endpointCreated
+
+  const row: Endpoint = { ...template, id: crypto.randomUUID(), name, url }
+  endpointRows.push(row)
+
+  return { ...row, signing_secret }
+}
diff --git a/dashboard/src/mocks.ts b/dashboard/src/mocks.ts
index 9d33188..426599c 100644
--- a/dashboard/src/mocks.ts
+++ b/dashboard/src/mocks.ts
@@ -365,6 +365,79 @@ export const endpointDeletedDetail: DeliveryDetail = {
   ],
 };
 
+/**
+ * The straightforward one: accepted on the first try, 95 ms. Its detail screen has
+ * no Replay button and nothing to wait for, which is the state the other two
+ * fixtures never show.
+ */
+export const deliveredDeliveryDetail: DeliveryDetail = {
+  ...deliveredDelivery,
+  event: {
+    id: deliveredDelivery.event.id,
+    type: 'invoice.paid',
+    payload: {
+      invoice_id: 'INV-2026-0884',
+      customer_id: 'cus_8Hq2Lm',
+      amount: 4990.0,
+      currency: 'SEK',
+    },
+    created_at: '2026-10-25T15:10:00.000Z',
+  },
+  endpoint: slack,
+  attempt_log: [
+    {
+      id: '0199c5a7-7001-7a11-8b02-1c3d5e7f9a04',
+      number: 1,
+      started_at: '2026-10-25T15:10:00.000Z',
+      duration_ms: 95,
+      status_code: 200,
+      error: null,
+      response_excerpt: '{"ok":true}',
+    },
+  ],
+};
+
+/**
+ * Timed out once, then went through five seconds later. The point of this one is
+ * that `attempts: 2` and a green `delivered` belong together: a retry that worked
+ * is a success, not a half-failure.
+ */
+export const recoveredDeliveryDetail: DeliveryDetail = {
+  ...recoveredDelivery,
+  event: {
+    id: recoveredDelivery.event.id,
+    type: 'payment.completed',
+    payload: {
+      order_id: 'A-1098',
+      customer_id: 'cus_2Kp9Wd',
+      amount: 549.0,
+      currency: 'SEK',
+    },
+    created_at: '2026-10-25T14:45:00.000Z',
+  },
+  endpoint: n8n,
+  attempt_log: [
+    {
+      id: '0199c59c-5001-7b11-9c02-2d4e6f8a0b15',
+      number: 1,
+      started_at: '2026-10-25T14:45:00.000Z',
+      duration_ms: 10000,
+      status_code: null,
+      error: 'timeout',
+      response_excerpt: null,
+    },
+    {
+      id: '0199c59c-5002-7c22-ad13-3e5f7a9b1c26',
+      number: 2,
+      started_at: '2026-10-25T14:45:15.000Z',
+      duration_ms: 120,
+      status_code: 200,
+      error: null,
+      response_excerpt: '{"received":true}',
+    },
+  ],
+};
+
 // Errors
 //
 // Every failing request answers with this shape. The dashboard renders these
diff --git a/dashboard/src/pages/Connect.tsx b/dashboard/src/pages/Connect.tsx
new file mode 100644
index 0000000..991832a
--- /dev/null
+++ b/dashboard/src/pages/Connect.tsx
@@ -0,0 +1,71 @@
+import { useState, type FormEvent } from 'react'
+import { useNavigate } from 'react-router'
+import { errorUnauthorized, me } from '../mocks'
+import type { Me } from '../types'
+
+// Stands in for GET /v1/me until the API exists. The real check is the same:
+// send the key, and let the API say whether it knows it.
+function check(key: string): Me | null {
+  return key.startsWith('relay_live_') ? me : null
+}
+
+export default function Connect() {
+  const navigate = useNavigate()
+  const [key, setKey] = useState('')
+  const [error, setError] = useState<string | null>(null)
+
+  function connect(e: FormEvent) {
+    e.preventDefault()
+
+    const owner = check(key.trim())
+    if (!owner) return setError(errorUnauthorized.error.message)
+
+    // The key stays in sessionStorage, not localStorage: it is gone when the tab
+    // closes, so a shared machine does not keep someone signed in.
+    sessionStorage.setItem('relay_key', key.trim())
+    navigate('/deliveries')
+  }
+
+  return (
+    <div className="mx-auto flex max-w-md flex-col gap-5 pt-12">
+      <div className="flex flex-col gap-1">
+        <h1 className="text-xl font-medium">Connect to Relay</h1>
+        <p className="text-sm text-[var(--ink-dim)]">
+          Paste the API key for your account. It is the same key your apps use to send
+          events.
+        </p>
+      </div>
+
+      <form
+        onSubmit={connect}
+        className="flex flex-col gap-3 rounded-md border border-[var(--line-soft)] bg-[var(--card)] p-4"
+      >
+        <label htmlFor="key" className="flex flex-col gap-1 text-xs text-[var(--ink-dim)]">
+          API key
+          <input
+            id="key"
+            type="password"
+            value={key}
+            onChange={(e) => setKey(e.target.value)}
+            placeholder="relay_live_..."
+            autoComplete="off"
+            className="mono w-full rounded-md border border-[var(--line-soft)] bg-[var(--paper)] px-3 py-1.5 text-sm text-[var(--ink)] placeholder:text-[var(--ink-faint)] focus:border-[var(--accent)] focus:outline-none"
+          />
+        </label>
+
+        {error && <p className="text-sm text-[var(--bad)]">{error}</p>}
+
+        <button
+          type="submit"
+          className="rounded-md bg-[var(--accent)] px-3 py-2 text-sm font-medium text-white hover:opacity-90"
+        >
+          Connect
+        </button>
+      </form>
+
+      <p className="text-xs text-[var(--ink-faint)]">
+        The key is kept for this tab only and is forgotten when you close it.
+      </p>
+    </div>
+  )
+}
diff --git a/dashboard/src/pages/DeliveryDetail.tsx b/dashboard/src/pages/DeliveryDetail.tsx
new file mode 100644
index 0000000..c5261e8
--- /dev/null
+++ b/dashboard/src/pages/DeliveryDetail.tsx
@@ -0,0 +1,143 @@
+import { useEffect, useState } from 'react'
+import { Link, useParams } from 'react-router'
+import StatusPill from '../components/StatusPill'
+import { clock } from '../format'
+import { getDelivery, replayDelivery } from '../mockStore'
+
+function Row({ label, children }: { label: string; children: React.ReactNode }) {
+  return (
+    <div className="flex flex-col gap-0.5">
+      <dt className="text-xs text-[var(--ink-dim)]">{label}</dt>
+      <dd className="m-0 text-sm">{children}</dd>
+    </div>
+  )
+}
+
+export default function DeliveryDetail() {
+  const { id } = useParams()
+  const [delivery, setDelivery] = useState(() => getDelivery(id))
+
+  // A pending delivery is waiting for its next try, so the screen reloads itself
+  // until it is not pending any more. Nothing is started for a delivery that is
+  // already delivered or dead, and the timer is cleared on the way out so it
+  // cannot outlive the screen.
+  useEffect(() => {
+    if (delivery?.status !== 'pending') return
+
+    const timer = setInterval(() => setDelivery(getDelivery(id)), 2000)
+
+    return () => clearInterval(timer)
+  }, [delivery?.status, id])
+
+  if (!delivery) {
+    return (
+      <p className="text-sm text-[var(--ink-dim)]">
+        Delivery not found.{' '}
+        <Link to="/deliveries" className="text-[var(--accent)] hover:underline">
+          Back to the log
+        </Link>
+      </p>
+    )
+  }
+
+  // The store does the work, so the log sees the replay too. ADR 0002: "Replay
+  // triggers one reload" - the answer is put on screen now, and the 2 s poll then
+  // reads the same store rather than handing back the old row.
+  function replay() {
+    setDelivery(replayDelivery(delivery!.id))
+  }
+
+  return (
+    <div className="flex flex-col gap-5">
+      <Link to="/deliveries" className="mono text-xs text-[var(--accent)] hover:underline">
+        ← Back to the log
+      </Link>
+
+      <div className="flex flex-wrap items-center gap-3">
+        <h1 className="mono text-xl font-medium">{delivery.event.type}</h1>
+        <StatusPill status={delivery.status} />
+        {/* A delivered delivery has nothing to retry, and the contract refuses a
+            replay whose endpoint was deleted with 409 endpoint_deleted. Showing a
+            button that can only fail is worse than showing why it is gone. A
+            pending delivery keeps its button: replaying it means "try now". */}
+        {delivery.status === 'delivered' ? null : delivery.last_error === 'endpoint_deleted' ? (
+          <p className="ml-auto text-xs text-[var(--ink-dim)]">
+            Its endpoint was deleted, so this cannot be replayed.
+          </p>
+        ) : (
+          <button
+            onClick={replay}
+            className="ml-auto rounded-md bg-[var(--accent)] px-3 py-1.5 text-sm font-medium text-white hover:opacity-90"
+          >
+            Replay
+          </button>
+        )}
+      </div>
+
+      <dl className="grid grid-cols-2 gap-4 rounded-md border border-[var(--line-soft)] bg-[var(--card)] p-4 sm:grid-cols-4">
+        <Row label="Attempts">
+          <span className="mono tabular-nums">{delivery.attempts}</span>
+        </Row>
+        <Row label="Endpoint">{delivery.endpoint.name}</Row>
+        <Row label="Next attempt">
+          <span className="mono">
+            {delivery.next_attempt_at ? clock(delivery.next_attempt_at, true) : '—'}
+          </span>
+        </Row>
+        <Row label="Delivered">
+          <span className="mono">
+            {delivery.delivered_at ? clock(delivery.delivered_at, true) : '—'}
+          </span>
+        </Row>
+      </dl>
+
+      <section className="flex flex-col gap-2">
+        <h2 className="text-sm font-medium">Payload</h2>
+        <pre className="overflow-x-auto rounded-md border border-[var(--line-soft)] bg-[var(--card)] px-4 py-3 text-xs">
+          {JSON.stringify(delivery.event.payload, null, 2)}
+        </pre>
+        <p className="mono text-xs text-[var(--ink-faint)]">
+          sent to {delivery.endpoint.url}
+        </p>
+      </section>
+
+      <section className="flex flex-col gap-2">
+        <h2 className="text-sm font-medium">Attempts</h2>
+        <div className="overflow-x-auto rounded-md border border-[var(--line-soft)] bg-[var(--card)]">
+          <table className="w-full min-w-xl text-sm">
+            <thead>
+              <tr className="border-b border-[var(--line-soft)] text-left text-xs text-[var(--ink-dim)]">
+                <th className="px-4 py-2 font-medium">#</th>
+                <th className="px-4 py-2 font-medium">Started</th>
+                <th className="px-4 py-2 text-right font-medium">Took</th>
+                <th className="px-4 py-2 text-right font-medium">Code</th>
+                <th className="px-4 py-2 font-medium">Error</th>
+              </tr>
+            </thead>
+            <tbody>
+              {delivery.attempt_log.map((a) => (
+                <tr key={a.id} className="border-b border-[var(--line-soft)] last:border-0">
+                  <td className="mono px-4 py-2 tabular-nums text-[var(--ink-dim)]">
+                    {a.number}
+                  </td>
+                  <td className="mono px-4 py-2 tabular-nums">{clock(a.started_at, true)}</td>
+                  <td className="mono px-4 py-2 text-right tabular-nums text-[var(--ink-dim)]">
+                    {a.duration_ms} ms
+                  </td>
+                  <td
+                    className={`mono px-4 py-2 text-right tabular-nums ${
+                      a.status_code && a.status_code >= 400 ? 'text-[var(--bad)]' : ''
+                    }`}
+                  >
+                    {a.status_code ?? '—'}
+                  </td>
+                  <td className="mono px-4 py-2 text-xs text-[var(--bad)]">{a.error ?? ''}</td>
+                </tr>
+              ))}
+            </tbody>
+          </table>
+        </div>
+      </section>
+    </div>
+  )
+}
diff --git a/dashboard/src/pages/DeliveryLog.tsx b/dashboard/src/pages/DeliveryLog.tsx
new file mode 100644
index 0000000..2c67953
--- /dev/null
+++ b/dashboard/src/pages/DeliveryLog.tsx
@@ -0,0 +1,94 @@
+import { useState } from 'react'
+import { Link } from 'react-router'
+import StatusPill from '../components/StatusPill'
+import { clock } from '../format'
+import { listDeliveries } from '../mockStore'
+import type { DeliveryStatus } from '../types'
+
+type Filter = DeliveryStatus | 'all'
+
+const filters: Filter[] = ['all', 'pending', 'delivered', 'dead']
+
+export default function DeliveryLog() {
+  const [filter, setFilter] = useState<Filter>('all')
+
+  // Read once per mount, from the same store the detail screen writes to. React
+  // Router mounts this screen again every time you come back to it, so a replay
+  // made on the detail screen is here when you return.
+  const [page] = useState(listDeliveries)
+
+  const rows = filter === 'all' ? page.data : page.data.filter((d) => d.status === filter)
+
+  return (
+    <div className="flex flex-col gap-5">
+      <h1 className="text-xl font-medium">Delivery log</h1>
+
+      <div className="flex gap-2">
+        {filters.map((f) => (
+          <button
+            key={f}
+            onClick={() => setFilter(f)}
+            className={[
+              'mono rounded-full border px-3 py-1 text-xs transition-colors',
+              f === filter
+                ? 'border-[var(--accent)] bg-[var(--accent-soft)] text-[var(--accent)]'
+                : 'border-[var(--line-soft)] text-[var(--ink-dim)] hover:border-[var(--line)]',
+            ].join(' ')}
+          >
+            {f}
+          </button>
+        ))}
+      </div>
+
+      <div className="overflow-x-auto rounded-md border border-[var(--line-soft)] bg-[var(--card)]">
+        <table className="w-full min-w-xl text-sm">
+          <thead>
+            <tr className="border-b border-[var(--line-soft)] text-left text-xs text-[var(--ink-dim)]">
+              <th className="px-4 py-2 font-medium">Event</th>
+              <th className="px-4 py-2 font-medium">Endpoint</th>
+              <th className="px-4 py-2 font-medium">Status</th>
+              <th className="px-4 py-2 text-right font-medium">Attempts</th>
+              <th className="px-4 py-2 text-right font-medium">Created</th>
+            </tr>
+          </thead>
+          <tbody>
+            {rows.map((d) => (
+              <tr
+                key={d.id}
+                className="border-b border-[var(--line-soft)] last:border-0 hover:bg-[var(--paper)]"
+              >
+                <td className="px-4 py-2.5">
+                  <Link
+                    to={`/deliveries/${d.id}`}
+                    className="mono text-[var(--accent)] hover:underline"
+                  >
+                    {d.event.type}
+                  </Link>
+                </td>
+                <td className="px-4 py-2.5 text-[var(--ink-dim)]">{d.endpoint.name}</td>
+                <td className="px-4 py-2.5">
+                  <StatusPill status={d.status} />
+                  {d.next_attempt_at && (
+                    <span className="mono ml-2 text-xs text-[var(--ink-faint)]">
+                      next {clock(d.next_attempt_at)}
+                    </span>
+                  )}
+                </td>
+                <td className="mono px-4 py-2.5 text-right tabular-nums">{d.attempts}</td>
+                <td className="mono px-4 py-2.5 text-right tabular-nums text-[var(--ink-dim)]">
+                  {clock(d.created_at)}
+                </td>
+              </tr>
+            ))}
+          </tbody>
+        </table>
+
+        {rows.length === 0 && (
+          <p className="px-4 py-8 text-center text-sm text-[var(--ink-dim)]">
+            No deliveries with status {filter}.
+          </p>
+        )}
+      </div>
+    </div>
+  )
+}
diff --git a/dashboard/src/pages/Endpoints.tsx b/dashboard/src/pages/Endpoints.tsx
new file mode 100644
index 0000000..069f318
--- /dev/null
+++ b/dashboard/src/pages/Endpoints.tsx
@@ -0,0 +1,204 @@
+import { useState, type FormEvent } from 'react'
+import StatusPill from '../components/StatusPill'
+import { addEndpoint, listEndpoints } from '../mockStore'
+import type { Endpoint, EndpointCreated } from '../types'
+
+const field =
+  'mono w-full rounded-md border border-[var(--line-soft)] bg-[var(--paper)] px-3 py-1.5 text-sm text-[var(--ink)] placeholder:text-[var(--ink-faint)] focus:border-[var(--accent)] focus:outline-none'
+
+// The contract's length limits (docs/api.md, POST /v1/endpoints). The server stays
+// the authority; these only let the form name the wrong field before a round trip.
+const NAME_MAX = 100
+const URL_MAX = 2048
+
+// Addresses by number: loopback, 0.0.0.0, the three private IPv4 ranges, CGNAT,
+// link-local, IPv6 loopback, IPv6 unique-local (fc00::/7) and IPv6 link-local
+// (fe80::/10). The URL parser hands IPv6 hosts back bracketed, so the brackets are
+// optional in the pattern rather than stripped beforehand.
+const PRIVATE_ADDRESS =
+  /^(localhost$|127\.|0\.0\.0\.0$|10\.|192\.168\.|169\.254\.|172\.(1[6-9]|2\d|3[01])\.|100\.(6[4-9]|[7-9]\d|1[01]\d|12[0-7])\.|\[?::1\]?$|\[?f[cd][0-9a-f]{2}:|\[?fe[89ab][0-9a-f]:)/i
+
+// An IPv4 literal is four numbers; an IPv6 literal arrives bracketed. Neither is a
+// host name, so the "looks like a name" rule must not be applied to them.
+const IPV4_LITERAL = /^\d{1,3}(\.\d{1,3}){3}$/
+
+// Addresses by name. Inside the cluster nothing is reached by number: the API is
+// kubernetes.default.svc.cluster.local and Postgres is postgres.relay.svc…, so a
+// rule that only knows about digits lets both straight through. Cloud metadata
+// answers to a name too (metadata.google.internal).
+const INTERNAL_NAME = /(^|\.)(local|internal|localdomain)$|(^|\.)svc(\.|$)/i
+
+// A helpful form check, not SSRF protection. Worth being exact about the difference:
+// the real check is server-side (step 3.2), run after the name is resolved and again
+// before every delivery attempt, and it also blocks our own VPS address, which this
+// one does not. This check runs in the browser, so it can be skipped entirely by
+// calling the API directly, and it only sees the host name — a public name whose DNS
+// points at 127.0.0.1 passes here. What it buys is a clear message on the field
+// instead of a bare 422, and one less round trip.
+//
+// The SSRF risk it mirrors: a worker runs inside the cluster, so an endpoint pointing
+// at a private address would have us fetch something the customer could never reach
+// from outside (the Kubernetes API, Postgres, /metrics). The firewall cannot stop
+// that, because the call comes from within.
+function checkUrl(raw: string): string | null {
+  const trimmed = raw.trim()
+
+  // Before parsing: a 4000-character string can still be a valid URL, and the
+  // contract's limit is on the characters, not on what they parse to.
+  if (trimmed.length > URL_MAX) return `The URL can be at most ${URL_MAX} characters`
+
+  let parsed: URL
+  try {
+    parsed = new URL(trimmed)
+  } catch {
+    return 'Enter a full URL, for example https://example.com/hooks/relay'
+  }
+
+  if (parsed.protocol !== 'https:') return 'The URL must start with https://'
+
+  const host = parsed.hostname
+  if (PRIVATE_ADDRESS.test(host) || INTERNAL_NAME.test(host)) {
+    return 'The URL must not point at a private or internal address'
+  }
+
+  // Only host names have to look like names. A public IP literal is a legitimate
+  // endpoint, and an IPv6 one has no dots at all — [2001:db8::1] used to be refused
+  // by the dot rule below.
+  const isLiteral = (host.startsWith('[') && host.endsWith(']')) || IPV4_LITERAL.test(host)
+  if (!isLiteral && (!host.includes('.') || host.endsWith('.'))) {
+    return 'That host name does not look reachable'
+  }
+
+  return null
+}
+
+export default function Endpoints() {
+  // From the store, not the fixture, so an endpoint added earlier in the session is
+  // still listed after navigating away and coming back.
+  const [rows, setRows] = useState<Endpoint[]>(listEndpoints)
+  const [name, setName] = useState('')
+  const [url, setUrl] = useState('')
+  const [error, setError] = useState<string | null>(null)
+
+  // The signing secret comes back once, in the answer to POST /v1/endpoints, and
+  // is never returned again. Holding it here is what lets the screen show it; it
+  // disappears for good as soon as this state is cleared.
+  const [secret, setSecret] = useState<EndpointCreated | null>(null)
+
+  function add(e: FormEvent) {
+    e.preventDefault()
+
+    const trimmedName = name.trim()
+    if (!trimmedName) return setError('Give the endpoint a name.')
+    if (trimmedName.length > NAME_MAX) {
+      return setError(`The name can be at most ${NAME_MAX} characters`)
+    }
+
+    const urlError = checkUrl(url)
+    if (urlError) return setError(urlError)
+
+    // The store keeps the row without the secret, the way the API's list does, and
+    // hands the secret back here to be shown once. Reading the list back from the
+    // store rather than appending to local state is what makes the new endpoint
+    // still be here after navigating away and returning.
+    const created = addEndpoint(trimmedName, url.trim())
+
+    setRows(listEndpoints())
+    setSecret(created)
+    setName('')
+    setUrl('')
+    setError(null)
+  }
+
+  return (
+    <div className="flex flex-col gap-5">
+      <h1 className="text-xl font-medium">Endpoints</h1>
+
+      <div className="overflow-x-auto rounded-md border border-[var(--line-soft)] bg-[var(--card)]">
+        <table className="w-full min-w-xl text-sm">
+          <thead>
+            <tr className="border-b border-[var(--line-soft)] text-left text-xs text-[var(--ink-dim)]">
+              <th className="px-4 py-2 font-medium">Name</th>
+              <th className="px-4 py-2 font-medium">URL</th>
+              <th className="px-4 py-2 font-medium">Event types</th>
+              <th className="px-4 py-2 font-medium">Status</th>
+            </tr>
+          </thead>
+          <tbody>
+            {rows.map((e) => (
+              <tr
+                key={e.id}
+                className="border-b border-[var(--line-soft)] last:border-0 hover:bg-[var(--paper)]"
+              >
+                <td className="px-4 py-2.5">{e.name}</td>
+                <td className="mono px-4 py-2.5 text-[var(--ink-dim)]">{e.url}</td>
+                <td className="mono px-4 py-2.5 text-xs text-[var(--ink-dim)]">
+                  {e.event_types.join(', ')}
+                </td>
+                <td className="px-4 py-2.5">
+                  <StatusPill status={e.status} />
+                </td>
+              </tr>
+            ))}
+          </tbody>
+        </table>
+      </div>
+
+      {secret && (
+        <div className="rounded-md border border-[var(--warn)] bg-[var(--warn-bg)] p-4">
+          <h2 className="text-sm font-medium">Signing secret for {secret.name}</h2>
+          <p className="mt-1 text-sm text-[var(--ink-dim)]">
+            Copy it now. It is shown once and cannot be retrieved later.
+          </p>
+          <pre className="mt-3 overflow-x-auto rounded-md border border-[var(--line-soft)] bg-[var(--card)] px-3 py-2 text-xs">
+            {secret.signing_secret}
+          </pre>
+          <button
+            onClick={() => setSecret(null)}
+            className="mt-3 rounded-md border border-[var(--line)] px-3 py-1.5 text-sm hover:bg-[var(--card)]"
+          >
+            I have copied it
+          </button>
+        </div>
+      )}
+
+      <form
+        onSubmit={add}
+        className="flex max-w-md flex-col gap-3 rounded-md border border-[var(--line-soft)] bg-[var(--card)] p-4"
+      >
+        <h2 className="text-sm font-medium">Add endpoint</h2>
+
+        <label htmlFor="name" className="flex flex-col gap-1 text-xs text-[var(--ink-dim)]">
+          Name
+          <input
+            id="name"
+            value={name}
+            onChange={(e) => setName(e.target.value)}
+            placeholder="Slack alerts"
+            className={field}
+          />
+        </label>
+
+        <label htmlFor="url" className="flex flex-col gap-1 text-xs text-[var(--ink-dim)]">
+          URL
+          <input
+            id="url"
+            value={url}
+            onChange={(e) => setUrl(e.target.value)}
+            placeholder="https://example.com/hooks/relay"
+            className={field}
+          />
+        </label>
+
+        {error && <p className="text-sm text-[var(--bad)]">{error}</p>}
+
+        <button
+          type="submit"
+          className="self-start rounded-md bg-[var(--accent)] px-3 py-1.5 text-sm font-medium text-white hover:opacity-90"
+        >
+          Add endpoint
+        </button>
+      </form>
+    </div>
+  )
+}
diff --git a/dashboard/tsconfig.app.json b/dashboard/tsconfig.app.json
new file mode 100644
index 0000000..6830b6f
--- /dev/null
+++ b/dashboard/tsconfig.app.json
@@ -0,0 +1,26 @@
+{
+  "compilerOptions": {
+    "tsBuildInfoFile": "./node_modules/.tmp/tsconfig.app.tsbuildinfo",
+    "target": "es2023",
+    "lib": ["ES2023", "DOM"],
+    "module": "esnext",
+    "types": ["vite/client"],
+    "allowArbitraryExtensions": true,
+    "skipLibCheck": true,
+
+    /* Bundler mode */
+    "moduleResolution": "bundler",
+    "allowImportingTsExtensions": true,
+    "verbatimModuleSyntax": true,
+    "moduleDetection": "force",
+    "noEmit": true,
+    "jsx": "react-jsx",
+
+    /* Linting */
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "erasableSyntaxOnly": true,
+    "noFallthroughCasesInSwitch": true
+  },
+  "include": ["src"]
+}
diff --git a/dashboard/tsconfig.json b/dashboard/tsconfig.json
new file mode 100644
index 0000000..1ffef60
--- /dev/null
+++ b/dashboard/tsconfig.json
@@ -0,0 +1,7 @@
+{
+  "files": [],
+  "references": [
+    { "path": "./tsconfig.app.json" },
+    { "path": "./tsconfig.node.json" }
+  ]
+}
diff --git a/dashboard/tsconfig.node.json b/dashboard/tsconfig.node.json
new file mode 100644
index 0000000..8455dcb
--- /dev/null
+++ b/dashboard/tsconfig.node.json
@@ -0,0 +1,23 @@
+{
+  "compilerOptions": {
+    "tsBuildInfoFile": "./node_modules/.tmp/tsconfig.node.tsbuildinfo",
+    "target": "es2023",
+    "lib": ["ES2023"],
+    "types": ["node"],
+    "skipLibCheck": true,
+
+    /* Bundler mode */
+    "module": "nodenext",
+    "allowImportingTsExtensions": true,
+    "verbatimModuleSyntax": true,
+    "moduleDetection": "force",
+    "noEmit": true,
+
+    /* Linting */
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "erasableSyntaxOnly": true,
+    "noFallthroughCasesInSwitch": true
+  },
+  "include": ["vite.config.ts"]
+}
diff --git a/dashboard/vite.config.ts b/dashboard/vite.config.ts
new file mode 100644
index 0000000..9f9b446
--- /dev/null
+++ b/dashboard/vite.config.ts
@@ -0,0 +1,8 @@
+import tailwindcss from '@tailwindcss/vite'
+import react from '@vitejs/plugin-react'
+import { defineConfig } from 'vite'
+
+// https://vite.dev/config/
+export default defineConfig({
+  plugins: [react(), tailwindcss()],
+})