The post-deploy polish layer that takes the P2P-only home route from "works" to
"feels like magic": one URL, one Touch ID, home or away, just works — with
Touch ID the exception, not the rule.
Chosen direction (design: docs/superpowers/specs/2026-06-05-home-route-seamless-ux-design.md):
- Inline login — the dashboard is the door (no
login.html redirect that spawns a session-less channel).
- Discreet transport indicator — small
● direct / ◐ relayed / ◌ connecting dot, tap to reveal; invisible by default.
- Device-key proof-of-possession — after enrolling a device once (Touch ID), the channel itself proves the device, so new pages / reconnects / visits re-auth WITHOUT Touch ID.
Build scope: browser device-keypair + PoP handshake + inline-login shell + state machine + indicator; Pi device_pubkey pin on trusted_devices + PoP-verify → session + step-up gating + revocation. This is the "device-key PoP session" the v1 design deferred.
Open build-time sub-decision: Touch ID frequency — (A) once per visit (default) vs (B) once per device / trusted-device toggle. Step-up always for sensitive actions.
Deferred until the v1 transport is deployed and proven. Full design + state machine + wireframes in the design doc above.
The post-deploy polish layer that takes the P2P-only home route from "works" to
"feels like magic": one URL, one Touch ID, home or away, just works — with
Touch ID the exception, not the rule.
Chosen direction (design:
docs/superpowers/specs/2026-06-05-home-route-seamless-ux-design.md):login.htmlredirect that spawns a session-less channel).● direct / ◐ relayed / ◌ connectingdot, tap to reveal; invisible by default.Build scope: browser device-keypair + PoP handshake + inline-login shell + state machine + indicator; Pi
device_pubkeypin ontrusted_devices+ PoP-verify → session + step-up gating + revocation. This is the "device-key PoP session" the v1 design deferred.Open build-time sub-decision: Touch ID frequency — (A) once per visit (default) vs (B) once per device / trusted-device toggle. Step-up always for sensitive actions.
Deferred until the v1 transport is deployed and proven. Full design + state machine + wireframes in the design doc above.