diff --git a/README.md b/README.md
index 2ed7547..94f6061 100644
--- a/README.md
+++ b/README.md
@@ -17,10 +17,31 @@ All workers share the single LLM provider you configure in the Setup Wizard.
 
 ## Getting started
 
-1. Install the Honcho package from the Dappnode admin UI
-2. Open the **Setup Wizard** at `http://setup-wizard.honcho.dappnode:8080`
-3. Pick your AI provider and enter your API key and model
-4. Restart the Honcho package to apply the configuration
+1. Install Honcho from the Dappnode admin UI and choose a **Honcho wizard password** in the installation form. Use a password manager to generate and save a strong password of 12–128 printable ASCII characters.
+2. If upgrading an existing installation, set `HONCHO_WIZARD_PASSWORD` for **setup-wizard** in Honcho's **Config** tab, then restart that service.
+3. Open the **Setup Wizard** at `http://setup-wizard.honcho.dappnode:8080` over your Dappnode VPN and unlock it with that password.
+4. Pick your AI provider and enter your API key and model.
+5. Restart the Honcho package to apply the provider configuration.
+
+## Setup Wizard access and migration
+
+The Dappnode installation form requires a separate wizard password. It is supplied as `HONCHO_WIZARD_PASSWORD` **only to the setup-wizard service**, and is never written into the shared provider `.env` or returned by a configuration read. The wizard fails startup with an actionable Config message if the password is missing or invalid. There is no default password or unauthenticated first-visitor registration.
+
+Unlocking exchanges the password for a random, server-side session lasting at most eight hours. The browser keeps only that session token in tab memory; locking or reloading requires unlocking again. Locking requests server-side revocation of the current session. All sessions are invalidated when the wizard restarts. Passwords and sessions are never printed in service logs, placed in URLs or persisted by the UI in cookies, localStorage or sessionStorage; your browser's password manager can save the password normally.
+
+Login attempts are limited to ten per minute across this wizard, including successful attempts. Established sessions remain usable during a login cooldown. Up to 32 sessions are retained; creating another revokes the oldest. All authenticated API routes reject expired or revoked sessions.
+
+To change or recover the wizard password, update `HONCHO_WIZARD_PASSWORD` in the package's **Config** tab and restart **setup-wizard**. You do not need SSH. Existing provider configuration remains unchanged. If upgrading from the earlier token-based development build, its old token is no longer accepted and its auth volume is no longer mounted or used. No credential files or provider data are automatically deleted.
+
+Dappnode manages the password as a service environment setting, visible to trusted host administrators through package configuration and Docker inspection. It is not encrypted in a separate wizard credential vault. Save it in your password manager and set it again when restoring onto another installation; the provider-configuration backup does not include it. API and deriver services do not receive this setting.
+
+The wizard no longer publishes host port 8080. Its existing Dappnode DNS address and container port remain available through Dappnode's private network. Authentication does not encrypt HTTP: use the trusted Dappnode VPN, or configure a trusted HTTPS reverse proxy. Do not expose the raw wizard over the internet or an untrusted LAN.
+
+The default accepted origin/host is `http://setup-wizard.honcho.dappnode:8080`. An administrator using a different HTTPS address must set `HONCHO_WIZARD_ORIGINS` to the exact origin (or comma-separated exact origins) and configure the proxy to preserve that `Host`. Wildcards, arbitrary forwarded headers and cross-site browser requests are not trusted. There is no wildcard CORS access.
+
+Existing `.env` configuration and provider keys are retained on upgrade. Saved keys are never returned to the browser, even after unlocking. Blank or fully masked secret fields keep existing keys; enter a replacement or explicitly select **Clear all saved provider keys** to erase them. Changing an endpoint while keys are saved requires an explicit replacement or clearing decision, to avoid sending an old provider's key to a new destination. Legacy URLs containing embedded credentials, queries or invalid syntax are withheld from the browser and listed by field name in `invalidPublicFields`; replace them with a clean URL and put the key in its dedicated field.
+
+This protects the **Setup Wizard**, not the separate Honcho memory API. The API still listens on port 8000 with authentication disabled by the upstream package entrypoint; it requires a separate access-control review. Keep that endpoint on a trusted network as well.
 
 ## Endpoint
 
@@ -74,3 +95,13 @@ Point the Hermes Dappnode package at `http://honcho.dappnode:8000`. The Honcho s
 - **Honcho**: [plastic-labs/honcho](https://github.com/plastic-labs/honcho) (AGPL-3.0)
 - **Docs**: [docs.honcho.dev](https://docs.honcho.dev)
 - **Evals**: [evals.honcho.dev](https://evals.honcho.dev)
+
+## Wizard regression tests
+
+```sh
+cd setup-wizard
+npm ci --ignore-scripts
+npm test
+```
+
+Tests use synthetic keys, temporary directories, loopback HTTP and stubbed provider responses. They cover password login, session expiry/revocation, login rate limits, redaction, explicit secret updates, origin/host checks, request limits, shell/TOML input safety, and the browser DOM unlock/edit/clear flows. No production provider or database is used. Test dependencies are not installed in the runtime image.
diff --git a/dappnode_package.json b/dappnode_package.json
index 8c9f819..de4e7c0 100644
--- a/dappnode_package.json
+++ b/dappnode_package.json
@@ -29,7 +29,7 @@
   ],
   "changelog": "Initial release. Packages Honcho v3 using honcho-self-hosted config overlay with Dappnode Setup Wizard UI.",
   "warnings": {
-    "onInstall": "Complete the Setup Wizard to select your AI provider. If you choose Local Ollama, the Ollama Dappnode package must already be installed with at least one tool-calling model downloaded (e.g. qwen3:8b).",
+    "onInstall": "Choose a Honcho wizard password in the Dappnode installation form, then use it to unlock the Setup Wizard. On upgrade, set HONCHO_WIZARD_PASSWORD for setup-wizard in the package Config and restart that service. If you choose Local Ollama, install the Ollama Dappnode package and download a tool-calling model first (e.g. qwen3:8b).",
     "onReset": "Resetting this package stops all services but does NOT delete your memory database. To erase all stored memories, remove the honcho-db-data volume from the Dappnode volume manager.",
     "onRemove": "Removing this package will stop all Honcho services. Your memory database volume will be preserved unless you explicitly remove it."
   },
@@ -47,6 +47,6 @@
   },
   "categories": ["Developer tools"],
   "keywords": ["AI", "memory", "agent", "LLM", "Hermes", "Honcho"],
-  "author": Chuy García <chuy@dappnode.io> (https://github.com/dappnode)",
+  "author": "Chuy García <chuy@dappnode.io> (https://github.com/dappnode)",
   "license": "GPL-3.0"
 }
diff --git a/docker-compose.yml b/docker-compose.yml
index 99f3de6..cd07100 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -46,8 +46,7 @@ services:
     restart: unless-stopped
     environment:
       HONCHO_CONFIG_DIR: "/config"
-    ports:
-      - "8080:8080"
+      HONCHO_WIZARD_PASSWORD: ""
     volumes:
       - honcho-config:/config
 
diff --git a/setup-wizard.yml b/setup-wizard.yml
index 7ab42fe..4f5f0a9 100644
--- a/setup-wizard.yml
+++ b/setup-wizard.yml
@@ -1,16 +1,18 @@
 version: "2"
 fields:
-  - id: setupNotice
+  - id: wizardPassword
     target:
       type: environment
-      name: _SETUP_NOTICE
-      service: api
-    title: Setup Instructions
+      name: HONCHO_WIZARD_PASSWORD
+      service: setup-wizard
+    title: Honcho wizard password
     description: >-
-      After installation, open the **Setup Wizard UI** at
-      http://setup-wizard.honcho.dappnode:8080 to configure your
-      AI provider, API key, and model. The Setup Wizard will write
-      all necessary environment variables for Honcho.
-    enum:
-      - "I understand"
+      Choose a separate password for the Honcho Setup Wizard. After installation,
+      open http://setup-wizard.honcho.dappnode:8080 and unlock it with this password
+      to configure your AI provider, API key, and model. You can change this
+      password later in Honcho's Config tab; restart the setup-wizard service
+      afterward. Use a password manager to generate and save a strong password.
+    secret: true
     required: true
+    pattern: '^[\x20-\x7E]{12,128}(?![\s\S])'
+    patternErrorMessage: "Use 12 to 128 printable ASCII characters."
diff --git a/setup-wizard/.dockerignore b/setup-wizard/.dockerignore
new file mode 100644
index 0000000..f6b1338
--- /dev/null
+++ b/setup-wizard/.dockerignore
@@ -0,0 +1,3 @@
+node_modules
+*.test.cjs
+package*.json
diff --git a/setup-wizard/.gitignore b/setup-wizard/.gitignore
new file mode 100644
index 0000000..c2658d7
--- /dev/null
+++ b/setup-wizard/.gitignore
@@ -0,0 +1 @@
+node_modules/
diff --git a/setup-wizard/Dockerfile b/setup-wizard/Dockerfile
index 9301992..3fcbd11 100644
--- a/setup-wizard/Dockerfile
+++ b/setup-wizard/Dockerfile
@@ -1,4 +1,8 @@
-FROM node:20-alpine
+FROM node:22.23.4-alpine3.23
+
+RUN apk add --no-cache --upgrade \
+    'ca-certificates>=20261020' \
+    'ca-certificates-bundle>=20261020'
 
 WORKDIR /app
 
diff --git a/setup-wizard/index.html b/setup-wizard/index.html
index 4cef172..ece5591 100644
--- a/setup-wizard/index.html
+++ b/setup-wizard/index.html
@@ -105,8 +105,19 @@
 </head>
 <body>
 
+<div class="page" id="login-panel">
+  <h2>Unlock Honcho Setup</h2>
+  <p class="subtitle" style="margin:1rem 0">Use the wizard password you chose in Dappnode. To change it, update Honcho's Config and restart the setup-wizard service. Connect through your Dappnode VPN or trusted HTTPS.</p>
+  <form id="login-form">
+    <div class="field"><label for="wizard-password">Wizard password</label><input type="password" id="wizard-password" autocomplete="current-password" spellcheck="false" required maxlength="128"></div>
+    <button class="btn btn-primary" type="submit">Unlock</button>
+    <p id="login-error" role="alert" style="color:var(--error);margin-top:1rem"></p>
+  </form>
+</div>
+<div id="wizard-app" hidden>
 <nav class="topnav">
   <div class="logo">&#9679; Honcho Memory</div>
+  <button class="btn btn-secondary" id="logout-button" type="button">Lock</button>
   <div class="tabs">
     <div class="tab active" data-tab="dashboard">Dashboard</div>
     <div class="tab" data-tab="setup">Setup</div>
@@ -193,7 +204,52 @@ <h2 style="text-align:center">Configuration Saved!</h2>
   </div>
 </div>
 
+</div>
 <script>
+  // Session tokens live only in this tab's memory: never URLs, cookies or web storage.
+  let sessionToken = "";
+  let savedConfig = { env: {}, configuredSecrets: {} };
+  const SECRET_KEYS = ["LLM_VLLM_API_KEY", "LLM_OPENAI_API_KEY", "LLM_OPENAI_COMPATIBLE_API_KEY", "LLM_EMBEDDING_API_KEY"];
+  function lockWizard() {
+    sessionToken = "";
+    if (_pollTimer) clearInterval(_pollTimer);
+    _pollTimer = null;
+    document.getElementById("wizard-app").hidden = true;
+    document.getElementById("login-panel").hidden = false;
+    document.querySelectorAll('input[type="password"]').forEach(input => { input.value = ""; });
+    document.getElementById("env-preview").textContent = "";
+    savedConfig = { env: {}, configuredSecrets: {} };
+  }
+  async function apiFetch(url, options = {}) {
+    if (!sessionToken) throw new Error("Unlock the wizard first.");
+    const response = await fetch(url, { ...options, cache: "no-store", credentials: "omit", headers: { ...options.headers, Authorization: "Bearer " + sessionToken } });
+    if (response.status === 401) { lockWizard(); throw new Error("Wizard session expired or rejected. Unlock again."); }
+    if (!response.ok) { const data = await response.json(); throw new Error(data.error || "Request failed."); }
+    return response;
+  }
+  document.getElementById("login-form").addEventListener("submit", async event => {
+    event.preventDefault();
+    const input = document.getElementById("wizard-password");
+    document.getElementById("login-error").textContent = "";
+    const password = input.value; input.value = "";
+    try {
+      const login = await fetch("/api/login", { method: "POST", cache: "no-store", credentials: "omit", headers: { "Content-Type": "application/json" }, body: JSON.stringify({ password }) });
+      const result = await login.json();
+      if (!login.ok) throw new Error(result.error || "Unable to unlock the wizard.");
+      sessionToken = result.token;
+      const response = await apiFetch("/api/config");
+      savedConfig = await response.json();
+      document.getElementById("login-error").textContent = "";
+      document.getElementById("login-panel").hidden = true;
+      document.getElementById("wizard-app").hidden = false;
+      await refreshDashboard();
+    } catch (error) { lockWizard(); document.getElementById("login-error").textContent = error.message; }
+  });
+  document.getElementById("logout-button").addEventListener("click", () => {
+    if (sessionToken) fetch("/api/logout", { method: "POST", cache: "no-store", credentials: "omit", headers: { Authorization: "Bearer " + sessionToken } }).catch(() => {});
+    lockWizard();
+  });
+
   // ── Tab navigation ──
   document.querySelectorAll(".topnav .tab").forEach(tab => {
     tab.addEventListener("click", () => switchTab(tab.dataset.tab));
@@ -210,7 +266,7 @@ <h2 style="text-align:center">Configuration Saved!</h2>
   let _pollTimer = null;
   async function refreshDashboard() {
     try {
-      const resp = await fetch("/api/health");
+      const resp = await apiFetch("/api/health");
       const data = await resp.json();
       const apiEl = document.getElementById("st-api");
       const healthEl = document.getElementById("st-health");
@@ -235,8 +291,9 @@ <h2 style="text-align:center">Configuration Saved!</h2>
     }
     // Read current config to show provider/model
     try {
-      const resp = await fetch("/api/config");
+      const resp = await apiFetch("/api/config");
       const data = await resp.json();
+      savedConfig = data;
       const env = data.env || {};
       // Determine display provider from base URL
       const baseUrl = env.LLM_VLLM_BASE_URL || "";
@@ -253,7 +310,6 @@ <h2 style="text-align:center">Configuration Saved!</h2>
       document.getElementById("st-model").textContent = env.LLM_MODEL || "—";
     } catch {}
   }
-  refreshDashboard();
 
   // ── Providers ──
   const PROVIDERS = [
@@ -315,7 +371,8 @@ <h2 style="text-align:center">Configuration Saved!</h2>
         const id = typeof m === "string" ? m : m.id;
         const ctx = (typeof m === "object" && m.context_length) ? (Math.round(m.context_length / 1000) + "k") : "";
         const div = document.createElement("div"); div.className = "sg-item";
-        div.innerHTML = `<span class="sg-id">${id}</span>${ctx ? `<span class="sg-ctx">${ctx}</span>` : ""}`;
+        const label = document.createElement("span"); label.className = "sg-id"; label.textContent = id; div.appendChild(label);
+        if (ctx) { const context = document.createElement("span"); context.className = "sg-ctx"; context.textContent = ctx; div.appendChild(context); }
         div.addEventListener("mousedown", (e) => { e.preventDefault(); input.value = id; dropdown.classList.remove("open"); });
         dropdown.appendChild(div);
       });
@@ -340,7 +397,7 @@ <h2>Configure DAppNode Nexus</h2>
         <div class="field"><label>Nexus API Key</label><div class="hint">From your Nexus dashboard.</div><input type="password" id="api-key" placeholder="Paste your Nexus API key"></div>
         <div class="field"><label>Model</label><div class="hint">Browse models at <a href="https://nexus.dappnode.com/models" target="_blank" style="color:var(--primary)">nexus.dappnode.com/models</a></div><div id="model-container"></div></div>`;
       document.getElementById("model-container").appendChild(createModelInput("std-model", SUGGESTED_MODELS.nexus || [], "e.g. private/deepseek-v3.2"));
-      return;
+      finishProviderConfig(); return;
     }
     if (p.id === "ollama") {
       container.innerHTML = `
@@ -359,7 +416,7 @@ <h2>Configure OpenRouter</h2>
         <div class="subtitle">200+ models with one API key. Models fetched live.</div>
         <div class="field"><label>OpenRouter API Key</label><div class="hint">Get one at openrouter.ai/keys</div><input type="password" id="api-key" placeholder="Paste your API key"></div>
         <div class="field"><label>Model</label><div class="hint">Type to search or enter any model ID.</div><div id="model-container"><div class="model-suggestions sg-loading" style="display:block;position:static">Loading models...</div></div></div>`;
-      fetchOpenRouterModels();
+      finishProviderConfig(); fetchOpenRouterModels();
       return;
     }
     if (p.id === "custom") {
@@ -369,7 +426,7 @@ <h2>Custom Endpoint</h2>
         <div class="field"><label>Base URL</label><div class="hint">e.g. https://api.example.com/v1</div><input type="text" id="custom-base-url" placeholder="https://api.example.com/v1"></div>
         <div class="field"><label>API Key</label><input type="password" id="api-key" placeholder="sk-..."></div>
         <div class="field"><label>Model</label><input type="text" id="custom-model" placeholder="model-name"></div>`;
-      return;
+      finishProviderConfig(); return;
     }
 
     // Standard providers (openai, anthropic, groq, deepseek)
@@ -381,10 +438,29 @@ <h2>Configure ${p.name}</h2>
       <div class="field"><label>${p.name} API Key</label><div class="hint">Get one at ${hints[p.id] || "the provider's dashboard"}</div><input type="password" id="api-key" placeholder="Paste your API key"></div>
       <div class="field"><label>Model</label><div class="hint">Select or type any supported model ID.</div><div id="model-container"></div></div>`;
     document.getElementById("model-container").appendChild(createModelInput("std-model", suggestions, "Type or select a model..."));
+    finishProviderConfig();
+  }
+
+  function finishProviderConfig() {
+    const input = document.getElementById("api-key");
+    if (!input) return;
+    const configured = Object.values(savedConfig.configuredSecrets || {}).some(Boolean);
+    input.autocomplete = "new-password";
+    input.placeholder = configured ? "Leave blank to keep saved keys" : "Paste your API key";
+    const hint = document.createElement("div"); hint.className = "hint";
+    hint.textContent = "Saved keys are never returned. A blank field keeps them. Enter a new key to replace all provider keys; changing the provider URL requires replacement or explicit clearing.";
+    input.after(hint);
+    const label = document.createElement("label");
+    const clear = document.createElement("input"); clear.type = "checkbox"; clear.id = "clear-api-keys"; clear.style.width = "auto";
+    clear.addEventListener("change", () => { input.disabled = clear.checked; if (clear.checked) input.value = ""; });
+    label.append(clear, document.createTextNode(" Clear all saved provider keys")); hint.after(label);
+    if (selectedProvider.id === "custom") document.getElementById("custom-base-url").value = savedConfig.env.LLM_VLLM_BASE_URL || "";
+    const model = document.getElementById("std-model-input") || document.getElementById("custom-model");
+    if (model && savedConfig.env.LLM_MODEL && (selectedProvider.baseUrl === savedConfig.env.LLM_VLLM_BASE_URL || selectedProvider.id === "custom")) model.value = savedConfig.env.LLM_MODEL;
   }
 
   async function fetchOpenRouterModels() {
-    try { const resp = await fetch("/api/models/openrouter"); const data = await resp.json(); openRouterModels = data.models || []; } catch { openRouterModels = []; }
+    try { const resp = await apiFetch("/api/models/openrouter"); const data = await resp.json(); openRouterModels = data.models || []; } catch { openRouterModels = []; }
     const mc = document.getElementById("model-container"); if (!mc) return; mc.innerHTML = "";
     const suggestions = openRouterModels.length ? openRouterModels : [{ id: "anthropic/claude-sonnet-4-5" }, { id: "openai/gpt-5.2" }, { id: "google/gemini-2.5-pro" }];
     mc.appendChild(createModelInput("or-model", suggestions, openRouterModels.length ? `Search ${openRouterModels.length} models...` : "Type a model ID"));
@@ -396,9 +472,10 @@ <h2>Configure ${p.name}</h2>
     const btn = document.getElementById("probe-btn"); const icon = document.getElementById("probe-icon"); const resultEl = document.getElementById("probe-result");
     btn.disabled = true; icon.textContent = "\u23F3"; resultEl.innerHTML = "";
     try {
-      const resp = await fetch("/api/ollama/probe"); const data = await resp.json();
+      const resp = await apiFetch("/api/ollama/probe"); const data = await resp.json();
       if (data.reachable) {
-        resultEl.innerHTML = `<div class="probe-result ok"><strong>Found Ollama!</strong> at ${data.url}<br>${data.models.length ? "Models: " + data.models.join(", ") : "No models pulled yet."}</div>`;
+        const message = document.createElement("div"); message.className = "probe-result ok";
+        message.textContent = "Found Ollama at " + data.url + ". " + (data.models.length ? "Models: " + data.models.join(", ") : "No models pulled yet."); resultEl.replaceChildren(message);
         document.getElementById("ollama-url").value = data.url;
         if (data.models.length) { const mc = document.getElementById("model-container"); mc.innerHTML = ""; mc.appendChild(createModelInput("ollama-model", data.models, "Select a model...")); document.getElementById("ollama-model-input").value = data.models[0]; }
       } else { resultEl.innerHTML = `<div class="probe-result fail"><strong>No Ollama found.</strong> Make sure an Ollama package is installed.</div>`; }
@@ -438,14 +515,14 @@ <h2>Configure ${p.name}</h2>
     }
 
     // Primary provider (vllm slot)
-    env.LLM_VLLM_API_KEY = apiKey;
+    if (apiKey) env.LLM_VLLM_API_KEY = apiKey;
     env.LLM_VLLM_BASE_URL = baseUrl;
     // Client initialization key
-    env.LLM_OPENAI_API_KEY = apiKey;
+    if (apiKey) env.LLM_OPENAI_API_KEY = apiKey;
     // Backup provider key (same as primary in single-provider mode)
-    env.LLM_OPENAI_COMPATIBLE_API_KEY = apiKey;
+    if (apiKey) env.LLM_OPENAI_COMPATIBLE_API_KEY = apiKey;
     // Embedding key (same provider)
-    env.LLM_EMBEDDING_API_KEY = apiKey;
+    if (apiKey) env.LLM_EMBEDDING_API_KEY = apiKey;
     // Embedding base URL (must point to an endpoint that supports /v1/embeddings)
     env.LLM_EMBEDDING_BASE_URL = baseUrl;
     // Model (used by entrypoint to rewrite config.toml)
@@ -459,9 +536,12 @@ <h2>Configure ${p.name}</h2>
     const lines = [];
     for (const [k, v] of Object.entries(env)) {
       if (k.includes("KEY") || k.includes("TOKEN")) {
-        lines.push(`${k}=${v.slice(0, 8)}${"*".repeat(Math.max(0, v.length - 8))}`);
+        lines.push(`${k}=[replace with entered key]`);
       } else { lines.push(`${k}=${v}`); }
     }
+    const clearing = document.getElementById("clear-api-keys")?.checked;
+    if (clearing) lines.push("Provider API keys: explicitly clear all");
+    else if (!env.LLM_VLLM_API_KEY) lines.push("Provider API keys: keep saved values");
     document.getElementById("env-preview").textContent = lines.join("\n") || "(no changes)";
     goTo(2);
   }
@@ -471,12 +551,16 @@ <h2>Configure ${p.name}</h2>
     btn.disabled = true; btn.textContent = "Saving...";
     const env = buildEnv();
     try {
-      const resp = await fetch("/api/config", {
+      const resp = await apiFetch("/api/config", {
         method: "POST",
         headers: { "Content-Type": "application/json" },
-        body: JSON.stringify({ env, model: env.LLM_MODEL, baseUrl: env.LLM_VLLM_BASE_URL })
+        body: JSON.stringify({ env, clearSecrets: document.getElementById("clear-api-keys")?.checked ? SECRET_KEYS : [] })
       });
-      if (resp.ok) { goTo(3); }
+      if (resp.ok) {
+        document.querySelectorAll('#provider-config input[type="password"]').forEach(input => { input.value = ""; });
+        const current = await apiFetch("/api/config"); savedConfig = await current.json();
+        goTo(3);
+      }
       else { const data = await resp.json(); alert("Failed: " + (data.error || "Unknown error")); btn.disabled = false; btn.textContent = "Save Configuration"; }
     } catch (err) { alert("Network error: " + err.message); btn.disabled = false; btn.textContent = "Save Configuration"; }
   }
diff --git a/setup-wizard/package-lock.json b/setup-wizard/package-lock.json
new file mode 100644
index 0000000..1bf8077
--- /dev/null
+++ b/setup-wizard/package-lock.json
@@ -0,0 +1,653 @@
+{
+  "name": "honcho-setup-wizard",
+  "version": "0.1.0",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "honcho-setup-wizard",
+      "version": "0.1.0",
+      "devDependencies": {
+        "jsdom": "27.0.1"
+      },
+      "engines": {
+        "node": ">=22.23.4"
+      }
+    },
+    "node_modules/@asamuzakjp/css-color": {
+      "version": "4.1.2",
+      "resolved": "https://registry.npmjs.org/@asamuzakjp/css-color/-/css-color-4.1.2.tgz",
+      "integrity": "sha512-NfBUvBaYgKIuq6E/RBLY1m0IohzNHAYyaJGuTK79Z23uNwmz2jl1mPsC5ZxCCxylinKhT1Amn5oNTlx1wN8cQg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@csstools/css-calc": "^3.0.0",
+        "@csstools/css-color-parser": "^4.0.1",
+        "@csstools/css-parser-algorithms": "^4.0.0",
+        "@csstools/css-tokenizer": "^4.0.0",
+        "lru-cache": "^11.2.5"
+      }
+    },
+    "node_modules/@asamuzakjp/dom-selector": {
+      "version": "6.8.1",
+      "resolved": "https://registry.npmjs.org/@asamuzakjp/dom-selector/-/dom-selector-6.8.1.tgz",
+      "integrity": "sha512-MvRz1nCqW0fsy8Qz4dnLIvhOlMzqDVBabZx6lH+YywFDdjXhMY37SmpV1XFX3JzG5GWHn63j6HX6QPr3lZXHvQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@asamuzakjp/nwsapi": "^2.3.9",
+        "bidi-js": "^1.0.3",
+        "css-tree": "^3.1.0",
+        "is-potential-custom-element-name": "^1.0.1",
+        "lru-cache": "^11.2.6"
+      }
+    },
+    "node_modules/@asamuzakjp/nwsapi": {
+      "version": "2.3.9",
+      "resolved": "https://registry.npmjs.org/@asamuzakjp/nwsapi/-/nwsapi-2.3.9.tgz",
+      "integrity": "sha512-n8GuYSrI9bF7FFZ/SjhwevlHc8xaVlb/7HmHelnc/PZXBD2ZR49NnN9sMMuDdEGPeeRQ5d0hqlSlEpgCX3Wl0Q==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@csstools/color-helpers": {
+      "version": "6.1.2",
+      "resolved": "https://registry.npmjs.org/@csstools/color-helpers/-/color-helpers-6.1.2.tgz",
+      "integrity": "sha512-grhRy3OKmniaAEKXMjua5z/EODX0MSqBGjunw8+j/3HQjOnahs2AGhvEOIYVUWcU6ScApbhLhVrQTX8XqrMrow==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/csstools"
+        },
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/csstools"
+        }
+      ],
+      "license": "MIT-0",
+      "engines": {
+        "node": ">=20.19.0"
+      }
+    },
+    "node_modules/@csstools/css-calc": {
+      "version": "3.4.3",
+      "resolved": "https://registry.npmjs.org/@csstools/css-calc/-/css-calc-3.4.3.tgz",
+      "integrity": "sha512-iex20d8CHVkyvg6B7UKV7uHnI2Bqo9g+EFfT9E0y+GvTvhZ/DwONJ+9aKb1dlqm0ZiGsL5RXjp0fCoJYnkeDjA==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/csstools"
+        },
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/csstools"
+        }
+      ],
+      "license": "MIT",
+      "engines": {
+        "node": ">=20.19.0"
+      },
+      "peerDependencies": {
+        "@csstools/css-parser-algorithms": "^4.0.2",
+        "@csstools/css-tokenizer": "^4.0.2"
+      }
+    },
+    "node_modules/@csstools/css-color-parser": {
+      "version": "4.2.6",
+      "resolved": "https://registry.npmjs.org/@csstools/css-color-parser/-/css-color-parser-4.2.6.tgz",
+      "integrity": "sha512-iiPQ3iRWwnJkeEn6RIu6SJPr7hYrLz6XZ9s/QZl+2/LI5KQVjpl2fdmDSZKuD4xP6GMmMPgHFFXg6k1Wkz0Trg==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/csstools"
+        },
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/csstools"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "@csstools/color-helpers": "^6.1.2",
+        "@csstools/css-calc": "^3.4.3"
+      },
+      "engines": {
+        "node": ">=20.19.0"
+      },
+      "peerDependencies": {
+        "@csstools/css-parser-algorithms": "^4.0.2",
+        "@csstools/css-tokenizer": "^4.0.2"
+      }
+    },
+    "node_modules/@csstools/css-parser-algorithms": {
+      "version": "4.0.2",
+      "resolved": "https://registry.npmjs.org/@csstools/css-parser-algorithms/-/css-parser-algorithms-4.0.2.tgz",
+      "integrity": "sha512-40cSKyMvK+tq4qz6Awrlye2WGuOKt3FwPgtGg6KTfbHOWNw+Rk1rzbAtZnZ6IBhsY491HLRnDXwoyBAijmmILA==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/csstools"
+        },
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/csstools"
+        }
+      ],
+      "license": "MIT",
+      "engines": {
+        "node": ">=20.19.0"
+      },
+      "peerDependencies": {
+        "@csstools/css-tokenizer": "^4.0.2"
+      }
+    },
+    "node_modules/@csstools/css-syntax-patches-for-csstree": {
+      "version": "1.1.15",
+      "resolved": "https://registry.npmjs.org/@csstools/css-syntax-patches-for-csstree/-/css-syntax-patches-for-csstree-1.1.15.tgz",
+      "integrity": "sha512-J0u7HkVl2nzSlhsiTOp4AmwcUQ3D+mGEEKfBy/7To5/y7F2OHwyLrXfrhR0SMgr4p5Lo+eaMVSeai24zUcBIxA==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/csstools"
+        },
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/csstools"
+        }
+      ],
+      "license": "MIT-0",
+      "peerDependencies": {
+        "css-tree": "^3.2.1"
+      },
+      "peerDependenciesMeta": {
+        "css-tree": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/@csstools/css-tokenizer": {
+      "version": "4.0.2",
+      "resolved": "https://registry.npmjs.org/@csstools/css-tokenizer/-/css-tokenizer-4.0.2.tgz",
+      "integrity": "sha512-OoKoR0f76dCY666JlcbhmVTs2drYj1GUXZTYTcbUgJjh9Nv41aFfZ21bPQTERm5+L5cBDo466NltB2lplS5GBw==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/csstools"
+        },
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/csstools"
+        }
+      ],
+      "license": "MIT",
+      "engines": {
+        "node": ">=20.19.0"
+      }
+    },
+    "node_modules/agent-base": {
+      "version": "7.1.4",
+      "resolved": "https://registry.npmjs.org/agent-base/-/agent-base-7.1.4.tgz",
+      "integrity": "sha512-MnA+YT8fwfJPgBx3m60MNqakm30XOkyIoH1y6huTQvC0PwZG7ki8NacLBcrPbNoo8vEZy7Jpuk7+jMO+CUovTQ==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">= 14"
+      }
+    },
+    "node_modules/bidi-js": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/bidi-js/-/bidi-js-1.1.0.tgz",
+      "integrity": "sha512-fX1Onk0tdVPC7obPWB5EbJ1z7NVhLq4m2xZLq2YXBkxzMXIGRpNMU88n0EPgWseKl12J7zXs7qrDxPK4sRs2fg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "require-from-string": "^2.0.2"
+      }
+    },
+    "node_modules/css-tree": {
+      "version": "3.2.1",
+      "resolved": "https://registry.npmjs.org/css-tree/-/css-tree-3.2.1.tgz",
+      "integrity": "sha512-X7sjQzceUhu1u7Y/ylrRZFU2FS6LRiFVp6rKLPg23y3x3c3DOKAwuXGDp+PAGjh6CSnCjYeAul8pcT8bAl+lSA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "mdn-data": "2.27.1",
+        "source-map-js": "^1.2.1"
+      },
+      "engines": {
+        "node": "^10 || ^12.20.0 || ^14.13.0 || >=15.0.0"
+      }
+    },
+    "node_modules/cssstyle": {
+      "version": "5.3.7",
+      "resolved": "https://registry.npmjs.org/cssstyle/-/cssstyle-5.3.7.tgz",
+      "integrity": "sha512-7D2EPVltRrsTkhpQmksIu+LxeWAIEk6wRDMJ1qljlv+CKHJM+cJLlfhWIzNA44eAsHXSNe3+vO6DW1yCYx8SuQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@asamuzakjp/css-color": "^4.1.1",
+        "@csstools/css-syntax-patches-for-csstree": "^1.0.21",
+        "css-tree": "^3.1.0",
+        "lru-cache": "^11.2.4"
+      },
+      "engines": {
+        "node": ">=20"
+      }
+    },
+    "node_modules/data-urls": {
+      "version": "6.0.1",
+      "resolved": "https://registry.npmjs.org/data-urls/-/data-urls-6.0.1.tgz",
+      "integrity": "sha512-euIQENZg6x8mj3fO6o9+fOW8MimUI4PpD/fZBhJfeioZVy9TUpM4UY7KjQNVZFlqwJ0UdzRDzkycB997HEq1BQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "whatwg-mimetype": "^5.0.0",
+        "whatwg-url": "^15.1.0"
+      },
+      "engines": {
+        "node": ">=20"
+      }
+    },
+    "node_modules/data-urls/node_modules/whatwg-mimetype": {
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/whatwg-mimetype/-/whatwg-mimetype-5.0.0.tgz",
+      "integrity": "sha512-sXcNcHOC51uPGF0P/D4NVtrkjSU2fNsm9iog4ZvZJsL3rjoDAzXZhkm2MWt1y+PUdggKAYVoMAIYcs78wJ51Cw==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=20"
+      }
+    },
+    "node_modules/debug": {
+      "version": "4.4.3",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
+      "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "ms": "^2.1.3"
+      },
+      "engines": {
+        "node": ">=6.0"
+      },
+      "peerDependenciesMeta": {
+        "supports-color": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/decimal.js": {
+      "version": "10.6.0",
+      "resolved": "https://registry.npmjs.org/decimal.js/-/decimal.js-10.6.0.tgz",
+      "integrity": "sha512-YpgQiITW3JXGntzdUmyUR1V812Hn8T1YVXhCu+wO3OpS4eU9l4YdD3qjyiKdV6mvV29zapkMeD390UVEf2lkUg==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/entities": {
+      "version": "8.1.0",
+      "resolved": "https://registry.npmjs.org/entities/-/entities-8.1.0.tgz",
+      "integrity": "sha512-kxL7msIffSuh9aaFAMD7rxAIuTRMAHMeBtgHW2yUdWw732ZNh4MehkF2gdjvtdmikkaIP9bFDDJOPlsvm7avrA==",
+      "dev": true,
+      "license": "BSD-2-Clause",
+      "engines": {
+        "node": ">=20.19.0"
+      },
+      "funding": {
+        "url": "https://github.com/fb55/entities?sponsor=1"
+      }
+    },
+    "node_modules/html-encoding-sniffer": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/html-encoding-sniffer/-/html-encoding-sniffer-4.0.0.tgz",
+      "integrity": "sha512-Y22oTqIU4uuPgEemfz7NDJz6OeKf12Lsu+QC+s3BVpda64lTiMYCyGwg5ki4vFxkMwQdeZDl2adZoqUgdFuTgQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "whatwg-encoding": "^3.1.1"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/http-proxy-agent": {
+      "version": "7.0.2",
+      "resolved": "https://registry.npmjs.org/http-proxy-agent/-/http-proxy-agent-7.0.2.tgz",
+      "integrity": "sha512-T1gkAiYYDWYx3V5Bmyu7HcfcvL7mUrTWiM6yOfa3PIphViJ/gFPbvidQ+veqSOHci/PxBcDabeUNCzpOODJZig==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "agent-base": "^7.1.0",
+        "debug": "^4.3.4"
+      },
+      "engines": {
+        "node": ">= 14"
+      }
+    },
+    "node_modules/https-proxy-agent": {
+      "version": "7.0.6",
+      "resolved": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-7.0.6.tgz",
+      "integrity": "sha512-vK9P5/iUfdl95AI+JVyUuIcVtd4ofvtrOr3HNtM2yxC9bnMbEdp3x01OhQNnjb8IJYi38VlTE3mBXwcfvywuSw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "agent-base": "^7.1.2",
+        "debug": "4"
+      },
+      "engines": {
+        "node": ">= 14"
+      }
+    },
+    "node_modules/iconv-lite": {
+      "version": "0.6.3",
+      "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.6.3.tgz",
+      "integrity": "sha512-4fCk79wshMdzMp2rH06qWrJE4iolqLhCUH+OiuIgU++RB0+94NlDL81atO7GX55uUKueo0txHNtvEyI6D7WdMw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "safer-buffer": ">= 2.1.2 < 3.0.0"
+      },
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/is-potential-custom-element-name": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/is-potential-custom-element-name/-/is-potential-custom-element-name-1.0.1.tgz",
+      "integrity": "sha512-bCYeRA2rVibKZd+s2625gGnGF/t7DSqDs4dP7CrLA1m7jKWz6pps0LpYLJN8Q64HtmPKJ1hrN3nzPNKFEKOUiQ==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/jsdom": {
+      "version": "27.0.1",
+      "resolved": "https://registry.npmjs.org/jsdom/-/jsdom-27.0.1.tgz",
+      "integrity": "sha512-SNSQteBL1IlV2zqhwwolaG9CwhIhTvVHWg3kTss/cLE7H/X4644mtPQqYvCfsSrGQWt9hSZcgOXX8bOZaMN+kA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@asamuzakjp/dom-selector": "^6.7.2",
+        "cssstyle": "^5.3.1",
+        "data-urls": "^6.0.0",
+        "decimal.js": "^10.6.0",
+        "html-encoding-sniffer": "^4.0.0",
+        "http-proxy-agent": "^7.0.2",
+        "https-proxy-agent": "^7.0.6",
+        "is-potential-custom-element-name": "^1.0.1",
+        "parse5": "^8.0.0",
+        "rrweb-cssom": "^0.8.0",
+        "saxes": "^6.0.0",
+        "symbol-tree": "^3.2.4",
+        "tough-cookie": "^6.0.0",
+        "w3c-xmlserializer": "^5.0.0",
+        "webidl-conversions": "^8.0.0",
+        "whatwg-encoding": "^3.1.1",
+        "whatwg-mimetype": "^4.0.0",
+        "whatwg-url": "^15.1.0",
+        "ws": "^8.18.3",
+        "xml-name-validator": "^5.0.0"
+      },
+      "engines": {
+        "node": ">=20"
+      },
+      "peerDependencies": {
+        "canvas": "^3.0.0"
+      },
+      "peerDependenciesMeta": {
+        "canvas": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/lru-cache": {
+      "version": "11.5.3",
+      "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-11.5.3.tgz",
+      "integrity": "sha512-U4N8FgzmWxc8k1VH8Kr6lQg18U7Fjvby6wXHVRX/ZZ7IwWbRMgrRbP0Wrb5q5NVinryp4SQampHKdvtecItxUg==",
+      "dev": true,
+      "license": "BlueOak-1.0.0",
+      "engines": {
+        "node": "20 || >=22"
+      }
+    },
+    "node_modules/mdn-data": {
+      "version": "2.27.1",
+      "resolved": "https://registry.npmjs.org/mdn-data/-/mdn-data-2.27.1.tgz",
+      "integrity": "sha512-9Yubnt3e8A0OKwxYSXyhLymGW4sCufcLG6VdiDdUGVkPhpqLxlvP5vl1983gQjJl3tqbrM731mjaZaP68AgosQ==",
+      "dev": true,
+      "license": "CC0-1.0"
+    },
+    "node_modules/ms": {
+      "version": "2.1.3",
+      "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
+      "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/parse5": {
+      "version": "8.0.1",
+      "resolved": "https://registry.npmjs.org/parse5/-/parse5-8.0.1.tgz",
+      "integrity": "sha512-z1e/HMG90obSGeidlli3hj7cbocou0/wa5HacvI3ASx34PecNjNQeaHNo5WIZpWofN9kgkqV1q5YvXe3F0FoPw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "entities": "^8.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/inikulin/parse5?sponsor=1"
+      }
+    },
+    "node_modules/punycode": {
+      "version": "2.3.1",
+      "resolved": "https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz",
+      "integrity": "sha512-vYt7UD1U9Wg6138shLtLOvdAu+8DsC/ilFtEVHcH+wydcSpNE20AfSOduf6MkRFahL5FY7X1oU7nKVZFtfq8Fg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6"
+      }
+    },
+    "node_modules/require-from-string": {
+      "version": "2.0.2",
+      "resolved": "https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz",
+      "integrity": "sha512-Xf0nWe6RseziFMu+Ap9biiUbmplq6S9/p+7w7YXP/JBHhrUDDUhwa+vANyubuqfZWTveU//DYVGsDG7RKL/vEw==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/rrweb-cssom": {
+      "version": "0.8.0",
+      "resolved": "https://registry.npmjs.org/rrweb-cssom/-/rrweb-cssom-0.8.0.tgz",
+      "integrity": "sha512-guoltQEx+9aMf2gDZ0s62EcV8lsXR+0w8915TC3ITdn2YueuNjdAYh/levpU9nFaoChh9RUS5ZdQMrKfVEN9tw==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/safer-buffer": {
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz",
+      "integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/saxes": {
+      "version": "6.0.0",
+      "resolved": "https://registry.npmjs.org/saxes/-/saxes-6.0.0.tgz",
+      "integrity": "sha512-xAg7SOnEhrm5zI3puOOKyy1OMcMlIJZYNJY7xLBwSze0UjhPLnWfj2GF2EpT0jmzaJKIWKHLsaSSajf35bcYnA==",
+      "dev": true,
+      "license": "ISC",
+      "dependencies": {
+        "xmlchars": "^2.2.0"
+      },
+      "engines": {
+        "node": ">=v12.22.7"
+      }
+    },
+    "node_modules/source-map-js": {
+      "version": "1.2.2",
+      "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.2.tgz",
+      "integrity": "sha512-KGj/8Y43x35aZVDtt+J4mK1hoLGHULMYfSkODJNQjNDC3oW1PqPoxMwo0pLUsWM/UEGzON/NxeHywEfNXNP3Vw==",
+      "dev": true,
+      "license": "BSD-3-Clause",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/symbol-tree": {
+      "version": "3.2.4",
+      "resolved": "https://registry.npmjs.org/symbol-tree/-/symbol-tree-3.2.4.tgz",
+      "integrity": "sha512-9QNk5KwDF+Bvz+PyObkmSYjI5ksVUYtjW7AU22r2NKcfLJcXp96hkDWU3+XndOsUb+AQ9QhfzfCT2O+CNWT5Tw==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/tldts": {
+      "version": "7.4.19",
+      "resolved": "https://registry.npmjs.org/tldts/-/tldts-7.4.19.tgz",
+      "integrity": "sha512-48dH6aSpQnpbzDUc4vIQZ1VjB8tkK+e8c1yx05/SZK+rkssgjEOlxDd/yU8/a4vGYQ9vRgJr9dwMq9TJ0b3X2Q==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "tldts-core": "^7.4.19"
+      },
+      "bin": {
+        "tldts": "bin/cli.js"
+      }
+    },
+    "node_modules/tldts-core": {
+      "version": "7.4.19",
+      "resolved": "https://registry.npmjs.org/tldts-core/-/tldts-core-7.4.19.tgz",
+      "integrity": "sha512-goNXV6Ho9TIOfpJZanTd6CKG5DyYgYAL+k+22T0SLh8l6+KHIfBUPFuePuSZv05UttIaaLmI9tb7TmGIdK5AkQ==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/tough-cookie": {
+      "version": "6.0.2",
+      "resolved": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-6.0.2.tgz",
+      "integrity": "sha512-exgYmnmL/sJpR3upZfXG5PoatXQii55xAiXGXzY+sROLZ/Y+SLcp9PgJNI9Vz37HpQ74WvDcLT8eqm+kV3FzrA==",
+      "dev": true,
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "tldts": "^7.0.5"
+      },
+      "engines": {
+        "node": ">=16"
+      }
+    },
+    "node_modules/tr46": {
+      "version": "6.0.0",
+      "resolved": "https://registry.npmjs.org/tr46/-/tr46-6.0.0.tgz",
+      "integrity": "sha512-bLVMLPtstlZ4iMQHpFHTR7GAGj2jxi8Dg0s2h2MafAE4uSWF98FC/3MomU51iQAMf8/qDUbKWf5GxuvvVcXEhw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "punycode": "^2.3.1"
+      },
+      "engines": {
+        "node": ">=20"
+      }
+    },
+    "node_modules/w3c-xmlserializer": {
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/w3c-xmlserializer/-/w3c-xmlserializer-5.0.0.tgz",
+      "integrity": "sha512-o8qghlI8NZHU1lLPrpi2+Uq7abh4GGPpYANlalzWxyWteJOCsr/P+oPBA49TOLu5FTZO4d3F9MnWJfiMo4BkmA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "xml-name-validator": "^5.0.0"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/webidl-conversions": {
+      "version": "8.0.1",
+      "resolved": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-8.0.1.tgz",
+      "integrity": "sha512-BMhLD/Sw+GbJC21C/UgyaZX41nPt8bUTg+jWyDeg7e7YN4xOM05YPSIXceACnXVtqyEw/LMClUQMtMZ+PGGpqQ==",
+      "dev": true,
+      "license": "BSD-2-Clause",
+      "engines": {
+        "node": ">=20"
+      }
+    },
+    "node_modules/whatwg-encoding": {
+      "version": "3.1.1",
+      "resolved": "https://registry.npmjs.org/whatwg-encoding/-/whatwg-encoding-3.1.1.tgz",
+      "integrity": "sha512-6qN4hJdMwfYBtE3YBTTHhoeuUrDBPZmbQaxWAqSALV/MeEnR5z1xd8UKud2RAkFoPkmB+hli1TZSnyi84xz1vQ==",
+      "deprecated": "Use @exodus/bytes instead for a more spec-conformant and faster implementation",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "iconv-lite": "0.6.3"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/whatwg-mimetype": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/whatwg-mimetype/-/whatwg-mimetype-4.0.0.tgz",
+      "integrity": "sha512-QaKxh0eNIi2mE9p2vEdzfagOKHCcj1pJ56EEHGQOVxp8r9/iszLUUV7v89x9O1p/T+NlTM5W7jW6+cz4Fq1YVg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/whatwg-url": {
+      "version": "15.1.0",
+      "resolved": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-15.1.0.tgz",
+      "integrity": "sha512-2ytDk0kiEj/yu90JOAp44PVPUkO9+jVhyf+SybKlRHSDlvOOZhdPIrr7xTH64l4WixO2cP+wQIcgujkGBPPz6g==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "tr46": "^6.0.0",
+        "webidl-conversions": "^8.0.0"
+      },
+      "engines": {
+        "node": ">=20"
+      }
+    },
+    "node_modules/ws": {
+      "version": "8.22.0",
+      "resolved": "https://registry.npmjs.org/ws/-/ws-8.22.0.tgz",
+      "integrity": "sha512-Ydggc987+RO0AnWtZ/7Wq9FtNvcrL1b/RO0ud9mWjUPgDrsAAwQSF51sm2hm1XofbU/4jkpGEsLFsZZxU+1DOg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=10.0.0"
+      },
+      "peerDependencies": {
+        "bufferutil": "^4.0.1",
+        "utf-8-validate": ">=5.0.2"
+      },
+      "peerDependenciesMeta": {
+        "bufferutil": {
+          "optional": true
+        },
+        "utf-8-validate": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/xml-name-validator": {
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/xml-name-validator/-/xml-name-validator-5.0.0.tgz",
+      "integrity": "sha512-EvGK8EJ3DhaHfbRlETOWAS5pO9MZITeauHKJyb8wyajUfQUenkIg2MvLDTZ4T/TgIcm3HU0TFBgWWboAZ30UHg==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/xmlchars": {
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/xmlchars/-/xmlchars-2.2.0.tgz",
+      "integrity": "sha512-JZnDKK8B0RCDw84FNdDAIpZK+JuJw+s7Lz8nksI7SIuU3UXJJslUthsi+uWBUYOwPFwW7W7PRLRfUKpxjtjFCw==",
+      "dev": true,
+      "license": "MIT"
+    }
+  }
+}
diff --git a/setup-wizard/package.json b/setup-wizard/package.json
new file mode 100644
index 0000000..44ec472
--- /dev/null
+++ b/setup-wizard/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "honcho-setup-wizard",
+  "private": true,
+  "version": "0.1.0",
+  "scripts": { "test": "node --test *.test.cjs" },
+  "engines": { "node": ">=22.23.4" },
+  "devDependencies": { "jsdom": "27.0.1" }
+}
diff --git a/setup-wizard/server.cjs b/setup-wizard/server.cjs
index 2459803..5ab218b 100644
--- a/setup-wizard/server.cjs
+++ b/setup-wizard/server.cjs
@@ -4,18 +4,18 @@
 const http = require("node:http");
 const fs = require("node:fs");
 const path = require("node:path");
+const crypto = require("node:crypto");
 
-const PORT = 8080;
-const CONFIG_DIR = process.env.HONCHO_CONFIG_DIR || "/config";
-const ENV_FILE = path.join(CONFIG_DIR, ".env");
-const CONFIG_TOML_FILE = path.join(CONFIG_DIR, "config.toml");
-const TEMPLATE_TOML = process.env.TEMPLATE_TOML || "/app/config-template.toml";
-const HTML_FILE = path.join(__dirname, "index.html");
-
-// Honcho API inside the Docker network
-const HONCHO_API = "http://api:8000";
-
-// Ollama candidates on Dappnode
+const SECRET_KEYS = ["LLM_VLLM_API_KEY", "LLM_OPENAI_API_KEY", "LLM_OPENAI_COMPATIBLE_API_KEY", "LLM_EMBEDDING_API_KEY"];
+const URL_KEYS = ["LLM_VLLM_BASE_URL", "LLM_EMBEDDING_BASE_URL"];
+const PUBLIC_KEYS = [...URL_KEYS, "LLM_MODEL"];
+const ENV_KEYS = [...SECRET_KEYS, ...PUBLIC_KEYS];
+const MAX_BODY = 16 * 1024;
+const SESSION_TTL_MS = 8 * 60 * 60 * 1000;
+const MAX_SESSIONS = 32;
+const LOGIN_WINDOW_MS = 60 * 1000;
+const MAX_LOGIN_ATTEMPTS = 10;
+const DEFAULT_ORIGIN = "http://setup-wizard.honcho.dappnode:8080";
 const OLLAMA_CANDIDATES = [
   "http://ollama.ollama-nvidia-openwebui.dappnode:11434",
   "http://ollama.ollama-amd-openwebui.dappnode:11434",
@@ -23,224 +23,296 @@ const OLLAMA_CANDIDATES = [
   "http://ollama.dappnode:11434",
 ];
 
-// ---------------------------------------------------------------------------
-// Helpers
-// ---------------------------------------------------------------------------
-function readBody(req) {
-  return new Promise((resolve, reject) => {
-    const chunks = [];
-    req.on("data", (c) => chunks.push(c));
-    req.on("end", () => resolve(Buffer.concat(chunks).toString()));
-    req.on("error", reject);
-  });
+class RequestError extends Error {
+  constructor(status, message) { super(message); this.status = status; }
 }
 
 function json(res, status, data) {
-  res.writeHead(status, { "Content-Type": "application/json" });
+  res.writeHead(status, { "Content-Type": "application/json; charset=utf-8" });
   res.end(JSON.stringify(data));
 }
 
 function parseEnvFile(content) {
-  const env = {};
+  const env = Object.create(null);
   for (const line of content.split("\n")) {
     const trimmed = line.trim();
     if (!trimmed || trimmed.startsWith("#")) continue;
     const eqIdx = trimmed.indexOf("=");
     if (eqIdx < 1) continue;
     const key = trimmed.slice(0, eqIdx).trim();
-    let val = trimmed.slice(eqIdx + 1).trim();
-    if ((val.startsWith('"') && val.endsWith('"')) || (val.startsWith("'") && val.endsWith("'")))
-      val = val.slice(1, -1);
-    env[key] = val;
+    let value = trimmed.slice(eqIdx + 1).trim();
+    if ((value.startsWith('"') && value.endsWith('"')) || (value.startsWith("'") && value.endsWith("'"))) value = value.slice(1, -1);
+    env[key] = value;
   }
   return env;
 }
 
-function serializeEnv(env) {
-  // Preserve existing lines/comments, update known keys, append new ones
-  let lines = [];
+// API/deriver source this file as shell code. New values must be literal, never shell expressions.
+function serializeEnv(existing, updates) {
   const written = new Set();
-  try {
-    const existing = fs.readFileSync(ENV_FILE, "utf-8");
-    for (const line of existing.split("\n")) {
-      const trimmed = line.trim();
-      if (!trimmed || trimmed.startsWith("#")) { lines.push(line); continue; }
-      const eqIdx = trimmed.indexOf("=");
-      if (eqIdx < 1) { lines.push(line); continue; }
-      const key = trimmed.slice(0, eqIdx).trim();
-      if (key in env) { lines.push(`${key}=${env[key]}`); written.add(key); }
-      else { lines.push(line); }
-    }
-  } catch { /* no existing file */ }
-  for (const [key, val] of Object.entries(env)) {
-    if (!written.has(key)) lines.push(`${key}=${val}`);
+  const lines = existing.split("\n").map(line => {
+    const match = line.match(/^\s*([A-Za-z_][A-Za-z0-9_]*)\s*=/);
+    if (!match || !Object.hasOwn(updates, match[1])) return line;
+    written.add(match[1]);
+    return `${match[1]}='${updates[match[1]]}'`;
+  });
+  for (const [key, value] of Object.entries(updates)) {
+    if (!written.has(key)) lines.push(`${key}='${value}'`);
   }
   return lines.join("\n");
 }
 
-function readEnv() {
-  try { return parseEnvFile(fs.readFileSync(ENV_FILE, "utf-8")); }
-  catch { return {}; }
+function readFile(file, fallback = "") {
+  try { return fs.readFileSync(file, "utf8"); }
+  catch (error) { if (error.code === "ENOENT") return fallback; throw error; }
 }
 
-function readConfigToml() {
-  try { return fs.readFileSync(CONFIG_TOML_FILE, "utf-8"); }
-  catch {
-    // Fall back to template
-    try { return fs.readFileSync(TEMPLATE_TOML, "utf-8"); }
-    catch { return ""; }
-  }
+function atomicWrite(file, content) {
+  const temporary = `${file}.${crypto.randomBytes(8).toString("hex")}.tmp`;
+  try {
+    fs.writeFileSync(temporary, content, { mode: 0o600, flag: "wx" });
+    fs.renameSync(temporary, file);
+  } finally { fs.rmSync(temporary, { force: true }); }
 }
 
-/**
- * Rewrite config.toml for single-provider mode.
- * Sets all MODEL, BACKUP_MODEL, DEDUCTION_MODEL, INDUCTION_MODEL to the chosen model.
- * Sets BACKUP_PROVIDER to "vllm" (same as primary).
- * Sets OPENAI_COMPATIBLE_BASE_URL to the primary base URL.
- * EMBEDDING_PROVIDER stays as "openrouter" (valid Pydantic Literal).
- */
-function rewriteConfigToml(toml, model, baseUrl) {
-  let result = toml;
-  if (model) {
-    result = result.replace(/^MODEL = ".*"/gm, `MODEL = "${model}"`);
-    result = result.replace(/^BACKUP_MODEL = ".*"/gm, `BACKUP_MODEL = "${model}"`);
-    result = result.replace(/^DEDUCTION_MODEL = ".*"/gm, `DEDUCTION_MODEL = "${model}"`);
-    result = result.replace(/^INDUCTION_MODEL = ".*"/gm, `INDUCTION_MODEL = "${model}"`);
-  }
-  // Single provider mode: backup = same as primary
-  result = result.replace(/^BACKUP_PROVIDER = ".*"/gm, 'BACKUP_PROVIDER = "vllm"');
-  if (baseUrl) {
-    result = result.replace(/^OPENAI_COMPATIBLE_BASE_URL = ".*"/gm, `OPENAI_COMPATIBLE_BASE_URL = "${baseUrl}"`);
-  }
-  // EMBEDDING_PROVIDER must stay as openai|gemini|openrouter — keep "openrouter"
-  return result;
+function passwordDigest(password) {
+  return crypto.createHash("sha256").update(password, "utf8").digest();
 }
 
-async function probeOllama() {
-  for (const url of OLLAMA_CANDIDATES) {
-    try {
-      const resp = await fetch(`${url}/api/tags`, { signal: AbortSignal.timeout(5000) });
-      if (resp.ok) {
-        const data = await resp.json();
-        const models = (data.models || []).map((m) => m.name);
-        return { reachable: true, url, models };
-      }
-    } catch {}
+function loadPasswordDigest(password) {
+  if (typeof password !== "string" || password.length < 12 || password.length > 128 || /[^\x20-\x7e]/.test(password)) {
+    throw new Error("Set HONCHO_WIZARD_PASSWORD to 12–128 printable ASCII characters in Honcho's Dappnode Config, then restart the setup-wizard service.");
   }
-  return { reachable: false, url: null, models: [] };
+  // The configured password is managed by Dappnode, not written into the shared provider config.
+  return passwordDigest(password);
 }
 
-// In-memory cache for OpenRouter models
-let orCache = { models: [], ts: 0 };
-const CACHE_TTL = 6 * 60 * 60 * 1000;
-
-async function fetchOpenRouterModels() {
-  const now = Date.now();
-  if (orCache.models.length && (now - orCache.ts) < CACHE_TTL) return orCache.models;
-  try {
-    const resp = await fetch("https://openrouter.ai/api/v1/models", {
-      signal: AbortSignal.timeout(10000),
-      headers: { Accept: "application/json" },
+function readBody(req) {
+  if (!/^application\/json(?:\s*;|$)/i.test(req.headers["content-type"] || "")) throw new RequestError(415, "Use application/json.");
+  if (Number(req.headers["content-length"]) > MAX_BODY) throw new RequestError(413, "Request body too large.");
+  return new Promise((resolve, reject) => {
+    let size = 0;
+    const chunks = [];
+    req.on("data", chunk => {
+      size += chunk.length;
+      if (size > MAX_BODY) { reject(new RequestError(413, "Request body too large.")); return; }
+      chunks.push(chunk);
+    });
+    req.on("end", () => {
+      if (size > MAX_BODY) return;
+      try { resolve(JSON.parse(Buffer.concat(chunks).toString("utf8"))); }
+      catch { reject(new RequestError(400, "Invalid JSON body.")); }
     });
-    if (!resp.ok) return orCache.models;
-    const data = await resp.json();
-    const models = (data.data || [])
-      .filter((m) => m.id && !m.id.includes(":free"))
-      .map((m) => ({ id: m.id, name: m.name || m.id, context_length: m.context_length || 0 }))
-      .sort((a, b) => a.name.localeCompare(b.name));
-    orCache = { models, ts: now };
-    return models;
-  } catch { return orCache.models; }
+    req.on("error", reject);
+  });
 }
 
-// ---------------------------------------------------------------------------
-// HTTP Server
-// ---------------------------------------------------------------------------
-const server = http.createServer(async (req, res) => {
-  res.setHeader("Access-Control-Allow-Origin", "*");
-  res.setHeader("Access-Control-Allow-Methods", "GET, POST, OPTIONS");
-  res.setHeader("Access-Control-Allow-Headers", "Content-Type");
-  if (req.method === "OPTIONS") { res.writeHead(204); res.end(); return; }
-
-  const url = new URL(req.url, `http://localhost:${PORT}`);
-
-  // ── Serve HTML ──
-  if (req.method === "GET" && url.pathname === "/") {
-    try {
-      res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
-      res.end(fs.readFileSync(HTML_FILE, "utf-8"));
-    } catch { res.writeHead(500); res.end("Failed to load page"); }
-    return;
+function isObject(value) { return value !== null && typeof value === "object" && !Array.isArray(value); }
+function validateText(value, key, max = 2048) {
+  if (typeof value !== "string" || value.length > max || /[\x00-\x1f\x7f']/.test(value)) throw new RequestError(400, `Invalid ${key}.`);
+  return value;
+}
+function validateValue(key, value) {
+  validateText(value, key);
+  if (key === "LLM_MODEL" && !/^[A-Za-z0-9][A-Za-z0-9._:/@+-]{0,255}$/.test(value)) throw new RequestError(400, "Invalid model ID.");
+  if (URL_KEYS.includes(key)) {
+    let url;
+    try { url = new URL(value); } catch { throw new RequestError(400, "Invalid provider URL."); }
+    if (!/^https?:$/.test(url.protocol) || url.username || url.password || url.hash || url.search || /[\s"\\]/.test(value)) throw new RequestError(400, "Use an HTTP(S) URL without credentials, query or fragment.");
   }
+  return value;
+}
 
-  // ── Read current config ──
-  if (req.method === "GET" && url.pathname === "/api/config") {
-    json(res, 200, { env: readEnv(), configToml: readConfigToml() });
-    return;
+function validateUpdate(body, current) {
+  if (!isObject(body) || Object.keys(body).some(key => !["env", "model", "baseUrl", "clearSecrets"].includes(key))) throw new RequestError(400, "Invalid configuration object.");
+  const env = body.env === undefined ? {} : body.env;
+  if (!isObject(env) || Object.keys(env).some(key => !ENV_KEYS.includes(key))) throw new RequestError(400, "Unknown configuration key.");
+  const updates = Object.create(null);
+  for (const [key, value] of Object.entries(env)) {
+    validateValue(key, value);
+    // Old clients or blank password fields must never erase a saved credential.
+    if (SECRET_KEYS.includes(key) && (value === "" || /^(?:\*+|•+|<redacted>)$/.test(value))) continue;
+    updates[key] = value;
   }
-
-  // ── Save config ──
-  if (req.method === "POST" && url.pathname === "/api/config") {
-    try {
-      const body = JSON.parse(await readBody(req));
-      fs.mkdirSync(CONFIG_DIR, { recursive: true });
-
-      // 1. Write .env
-      if (body.env && typeof body.env === "object") {
-        const current = readEnv();
-        const merged = Object.assign(current, body.env);
-        fs.writeFileSync(ENV_FILE, serializeEnv(merged), "utf-8");
-      }
-
-      // 2. Rewrite config.toml with model + base URL
-      const model = body.model || (body.env && body.env.LLM_MODEL) || null;
-      const baseUrl = body.baseUrl || (body.env && body.env.LLM_VLLM_BASE_URL) || null;
-      let toml = readConfigToml();
-      if (toml) {
-        toml = rewriteConfigToml(toml, model, baseUrl);
-        fs.writeFileSync(CONFIG_TOML_FILE, toml, "utf-8");
-      }
-
-      json(res, 200, { ok: true, message: "Configuration saved. Restart Honcho services to apply." });
-    } catch (err) {
-      json(res, 400, { error: err.message });
+  for (const [field, key] of [["model", "LLM_MODEL"], ["baseUrl", "LLM_VLLM_BASE_URL"]]) {
+    if (body[field] === undefined) continue;
+    validateValue(key, body[field]);
+    if (Object.hasOwn(updates, key) && updates[key] !== body[field]) throw new RequestError(400, "Conflicting configuration values.");
+    updates[key] = body[field];
+  }
+  const clear = body.clearSecrets === undefined ? [] : body.clearSecrets;
+  if (!Array.isArray(clear) || clear.some(key => !SECRET_KEYS.includes(key))) throw new RequestError(400, "Invalid clearSecrets list.");
+  for (const key of clear) {
+    if (Object.hasOwn(updates, key)) throw new RequestError(400, "Cannot replace and clear the same secret.");
+    updates[key] = "";
+  }
+  // Do not silently forward an old provider's key to a newly selected endpoint.
+  for (const [urlKey, secretKeys] of [["LLM_VLLM_BASE_URL", SECRET_KEYS.slice(0, 3)], ["LLM_EMBEDDING_BASE_URL", ["LLM_EMBEDDING_API_KEY"]]]) {
+    if (updates[urlKey] !== undefined && updates[urlKey] !== current[urlKey]) {
+      if (secretKeys.some(key => current[key] && !Object.hasOwn(updates, key))) throw new RequestError(400, "Changing provider URL requires replacing or explicitly clearing its saved API keys.");
     }
-    return;
   }
+  return updates;
+}
 
-  // ── Probe Ollama ──
-  if (req.method === "GET" && url.pathname === "/api/ollama/probe") {
-    json(res, 200, await probeOllama());
-    return;
+function rewriteConfigToml(toml, model, baseUrl) {
+  let result = toml;
+  for (const key of ["MODEL", "BACKUP_MODEL", "DEDUCTION_MODEL", "INDUCTION_MODEL"]) {
+    if (model) result = result.replace(new RegExp(`^${key} = ".*"`, "gm"), () => `${key} = ${JSON.stringify(model)}`);
   }
+  result = result.replace(/^BACKUP_PROVIDER = ".*"/gm, 'BACKUP_PROVIDER = "vllm"');
+  if (baseUrl) result = result.replace(/^OPENAI_COMPATIBLE_BASE_URL = ".*"/gm, () => `OPENAI_COMPATIBLE_BASE_URL = ${JSON.stringify(baseUrl)}`);
+  return result;
+}
 
-  // ── OpenRouter models ──
-  if (req.method === "GET" && url.pathname === "/api/models/openrouter") {
-    json(res, 200, { models: await fetchOpenRouterModels() });
-    return;
-  }
+function createWizard(options = {}) {
+  const configDir = options.configDir || process.env.HONCHO_CONFIG_DIR || "/config";
+  const envFile = path.join(configDir, ".env");
+  const tomlFile = path.join(configDir, "config.toml");
+  const template = options.template || process.env.TEMPLATE_TOML || "/app/config-template.toml";
+  const request = options.fetch || fetch;
+  const expectedPassword = loadPasswordDigest(options.password ?? process.env.HONCHO_WIZARD_PASSWORD);
+  const now = options.now || Date.now;
+  const sessions = new Map();
+  let loginWindowEnd = 0;
+  let loginAttempts = 0;
+  const origins = (options.origins || (process.env.HONCHO_WIZARD_ORIGINS || DEFAULT_ORIGIN).split(",")).map(value => {
+    const url = new URL(value);
+    if (!/^https?:$/.test(url.protocol) || url.origin !== value || url.username || url.password) throw new Error("Invalid HONCHO_WIZARD_ORIGINS; use exact origins.");
+    return url;
+  });
+  const hosts = new Set(origins.map(url => url.host));
+  const allowedOrigins = new Set(origins.map(url => url.origin));
+  let orCache = { models: [], ts: 0 };
 
-  // ── Health check (proxy to Honcho API) ──
-  if (req.method === "GET" && url.pathname === "/api/health") {
-    try {
-      const resp = await fetch(`${HONCHO_API}/health`, { signal: AbortSignal.timeout(5000) });
-      const data = await resp.json();
-      json(res, 200, { apiServer: true, ...data });
-    } catch {
-      json(res, 200, { apiServer: false });
+  async function probeOllama() {
+    for (const url of OLLAMA_CANDIDATES) {
+      try {
+        const resp = await request(`${url}/api/tags`, { signal: AbortSignal.timeout(5000) });
+        if (resp.ok) {
+          const data = await resp.json();
+          return { reachable: true, url, models: (data.models || []).map(model => String(model.name)) };
+        }
+      } catch {}
     }
-    return;
+    return { reachable: false, url: null, models: [] };
   }
-
-  // ── Restart (kill PID 1 — Docker restart policy brings it back) ──
-  if (req.method === "POST" && url.pathname === "/api/restart") {
-    json(res, 200, { ok: true, message: "Restart signal sent." });
-    return;
+  async function fetchModels() {
+    if (orCache.models.length && Date.now() - orCache.ts < 6 * 60 * 60 * 1000) return orCache.models;
+    try {
+      const resp = await request("https://openrouter.ai/api/v1/models", { signal: AbortSignal.timeout(10000), headers: { Accept: "application/json" } });
+      if (!resp.ok) return orCache.models;
+      const data = await resp.json();
+      const models = (data.data || []).filter(model => typeof model.id === "string" && !model.id.includes(":free"))
+        .map(model => ({ id: model.id, name: String(model.name || model.id), context_length: Number(model.context_length) || 0 }))
+        .sort((a, b) => a.name.localeCompare(b.name));
+      orCache = { models, ts: Date.now() };
+    } catch {}
+    return orCache.models;
   }
 
-  res.writeHead(404); res.end("Not found");
-});
+  const server = http.createServer(async (req, res) => {
+    res.setHeader("Cache-Control", "no-store");
+    res.setHeader("X-Content-Type-Options", "nosniff");
+    res.setHeader("Referrer-Policy", "no-referrer");
+    res.setHeader("X-Frame-Options", "DENY");
+    res.setHeader("Content-Security-Policy", "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self'; frame-ancestors 'none'; base-uri 'none'; form-action 'self'");
+    try {
+      // Host allowlisting also prevents browser DNS rebinding to an attacker-controlled origin.
+      if (!hosts.has((req.headers.host || "").toLowerCase())) throw new RequestError(403, "Unrecognized wizard host.");
+      if ((req.headers.origin && !allowedOrigins.has(req.headers.origin)) || req.headers["sec-fetch-site"] === "cross-site") throw new RequestError(403, "Cross-origin access denied.");
+      const url = new URL(req.url, DEFAULT_ORIGIN);
+      if (req.method === "GET" && url.pathname === "/") {
+        res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
+        res.end(fs.readFileSync(path.join(__dirname, "index.html"), "utf8"));
+        return;
+      }
+      if (!url.pathname.startsWith("/api/")) { json(res, 404, { error: "Not found." }); return; }
+      if (req.method === "POST" && url.pathname === "/api/login") {
+        const time = now();
+        if (time >= loginWindowEnd) { loginWindowEnd = time + LOGIN_WINDOW_MS; loginAttempts = 0; }
+        if (loginAttempts >= MAX_LOGIN_ATTEMPTS) {
+          res.setHeader("Retry-After", String(Math.ceil((loginWindowEnd - time) / 1000)));
+          throw new RequestError(429, "Too many login attempts. Try again in one minute.");
+        }
+        loginAttempts++;
+        const body = await readBody(req);
+        if (!isObject(body) || Object.keys(body).some(key => key !== "password") || typeof body.password !== "string" || body.password.length > 128) throw new RequestError(400, "Invalid login request.");
+        if (!crypto.timingSafeEqual(passwordDigest(body.password), expectedPassword)) throw new RequestError(401, "Incorrect wizard password.");
+        for (const [token, expires] of sessions) if (expires <= time) sessions.delete(token);
+        if (sessions.size >= MAX_SESSIONS) sessions.delete(sessions.keys().next().value);
+        const token = crypto.randomBytes(32).toString("hex");
+        sessions.set(token, time + SESSION_TTL_MS);
+        json(res, 200, { token, expiresIn: SESSION_TTL_MS / 1000 });
+        return;
+      }
+      const credential = /^Bearer ([a-f0-9]{64})$/.exec(req.headers.authorization || "");
+      const token = credential?.[1];
+      if (!token || !sessions.has(token) || sessions.get(token) <= now()) {
+        if (token) sessions.delete(token);
+        throw new RequestError(401, "Wizard session required. Unlock with your password.");
+      }
+      if (req.method === "POST" && url.pathname === "/api/logout") {
+        sessions.delete(token);
+        json(res, 200, { ok: true });
+        return;
+      }
+      if (req.method === "GET" && url.pathname === "/api/config") {
+        const current = parseEnvFile(readFile(envFile));
+        const publicEnv = {};
+        const invalidPublicFields = [];
+        for (const key of PUBLIC_KEYS) {
+          if (!Object.hasOwn(current, key)) continue;
+          try { publicEnv[key] = validateValue(key, current[key]); }
+          catch { invalidPublicFields.push(key); }
+        }
+        json(res, 200, {
+          env: publicEnv,
+          invalidPublicFields,
+          configuredSecrets: Object.fromEntries(SECRET_KEYS.map(key => [key, !!current[key]])),
+        });
+        return;
+      }
+      if (req.method === "POST" && url.pathname === "/api/config") {
+        const body = await readBody(req);
+        const existing = readFile(envFile);
+        const current = parseEnvFile(existing);
+        const updates = validateUpdate(body, current);
+        const merged = { ...current, ...updates };
+        const toml = readFile(tomlFile, readFile(template));
+        const newToml = rewriteConfigToml(toml, merged.LLM_MODEL, merged.LLM_VLLM_BASE_URL);
+        fs.mkdirSync(configDir, { recursive: true });
+        // All input validation completes before either file is changed. Each file is replaced atomically.
+        if (newToml) atomicWrite(tomlFile, newToml);
+        atomicWrite(envFile, serializeEnv(existing, updates));
+        json(res, 200, { ok: true, message: "Configuration saved. Restart Honcho services to apply." });
+        return;
+      }
+      if (req.method === "GET" && url.pathname === "/api/ollama/probe") { json(res, 200, await probeOllama()); return; }
+      if (req.method === "GET" && url.pathname === "/api/models/openrouter") { json(res, 200, { models: await fetchModels() }); return; }
+      if (req.method === "GET" && url.pathname === "/api/health") {
+        try {
+          const resp = await request("http://api.honcho.dappnode:8000/health", { signal: AbortSignal.timeout(5000) });
+          // Do not relay arbitrary internal API content to the browser.
+          json(res, 200, { apiServer: resp.ok });
+        } catch { json(res, 200, { apiServer: false }); }
+        return;
+      }
+      // The previous restart endpoint was a no-op; restarting remains an admin-UI operation.
+      json(res, 404, { error: "Not found." });
+    } catch (error) {
+      if (error instanceof RequestError) json(res, error.status, { error: error.message });
+      else { console.error("Wizard request failed; configuration was not returned."); json(res, 500, { error: "Unable to process configuration. Check the local service and storage." }); }
+    }
+  });
+  server.requestTimeout = 15000;
+  server.headersTimeout = 10000;
+  return server;
+}
 
-server.listen(PORT, "0.0.0.0", () => {
-  console.log(`Honcho Setup Wizard running at http://0.0.0.0:${PORT}`);
-});
+if (require.main === module) {
+  createWizard().listen(8080, "0.0.0.0", () => {
+    console.log("Honcho Setup Wizard listening on :8080. Unlock with the wizard password configured in Dappnode.");
+  });
+}
+module.exports = { createWizard, parseEnvFile, serializeEnv, validateUpdate, rewriteConfigToml, SECRET_KEYS };
diff --git a/setup-wizard/server.test.cjs b/setup-wizard/server.test.cjs
new file mode 100644
index 0000000..4230757
--- /dev/null
+++ b/setup-wizard/server.test.cjs
@@ -0,0 +1,241 @@
+"use strict";
+const { test } = require("node:test");
+const assert = require("node:assert/strict");
+const fs = require("node:fs");
+const os = require("node:os");
+const path = require("node:path");
+const http = require("node:http");
+const { execFileSync } = require("node:child_process");
+const { createWizard, parseEnvFile, SECRET_KEYS } = require("./server.cjs");
+const ORIGIN = "http://setup-wizard.honcho.dappnode:8080";
+const INITIAL = "synthetic-provider-key-not-real";
+const MODEL = "example/model:1";
+const BASE = "https://example.invalid/v1";
+const PASSWORD = "synthetic-wizard-password";
+const TOML = '[llm]\nMODEL = "old"\nBACKUP_MODEL = "old"\nDEDUCTION_MODEL = "old"\nINDUCTION_MODEL = "old"\nBACKUP_PROVIDER = "old"\nOPENAI_COMPATIBLE_BASE_URL = "https://old.invalid"\n';
+
+async function fixture(t, { configured = true, failNetwork = false, password = PASSWORD } = {}) {
+  const dir = fs.mkdtempSync(path.join(os.tmpdir(), "honcho-wizard-test-"));
+  const configDir = path.join(dir, "config");
+  fs.mkdirSync(configDir);
+  const template = path.join(dir, "template.toml"); fs.writeFileSync(template, TOML);
+  if (configured) fs.writeFileSync(path.join(configDir, ".env"), ["# retain this comment", "UNRELATED_PRIVATE_KEY=synthetic-other-secret", ...SECRET_KEYS.map(key => `${key}=${INITIAL}`), `LLM_MODEL=${MODEL}`, `LLM_VLLM_BASE_URL=${BASE}`, `LLM_EMBEDDING_BASE_URL=${BASE}`].join("\n"));
+  const calls = [];
+  const fakeFetch = async url => {
+    calls.push(url);
+    if (failNetwork) throw new Error("synthetic failure");
+    if (url.endsWith("/api/tags")) return { ok: true, json: async () => ({ models: [{ name: '<img src=x onerror="alert(1)">' }, { name: "qwen:8b" }] }) };
+    if (url.includes("openrouter.ai")) return { ok: true, json: async () => ({ data: [{ id: "paid/model", name: "Paid" }, { id: "skip:free" }] }) };
+    if (url === "http://api.honcho.dappnode:8000/health") return { ok: true, json: async () => ({ secret: INITIAL }) };
+    throw new Error("Unexpected service endpoint");
+  };
+  let server, token;
+  let time = Date.now();
+  async function start() {
+    server = createWizard({ configDir, password, template, fetch: fakeFetch, now: () => time });
+    await new Promise(resolve => server.listen(0, "127.0.0.1", resolve));
+  }
+  await start();
+  t.after(async () => { await new Promise(resolve => server.close(resolve)); fs.rmSync(dir, { recursive: true, force: true }); });
+  async function request(route = "/api/config", { method = "GET", body, authorized = true, headers = {}, raw } = {}) {
+    let data = raw === undefined ? (body === undefined ? undefined : JSON.stringify(body)) : raw;
+    const requestHeaders = { Host: new URL(ORIGIN).host, ...(authorized ? { Authorization: `Bearer ${token}` } : {}), ...(data === undefined ? {} : { "Content-Type": "application/json" }), ...headers };
+    return new Promise((resolve, reject) => {
+      const req = http.request({ hostname: "127.0.0.1", port: server.address().port, path: route, method, headers: requestHeaders }, response => {
+        const chunks = []; response.on("data", chunk => chunks.push(chunk)); response.on("end", () => {
+          const text = Buffer.concat(chunks).toString();
+          let json; try { json = JSON.parse(text); } catch {}
+          resolve({ status: response.statusCode, headers: response.headers, text, json });
+        });
+      });
+      req.on("error", reject); req.end(data);
+    });
+  }
+  const login = (credential = password, headers = {}) => request("/api/login", { method: "POST", authorized: false, body: { password: credential }, headers });
+  const initial = await login(); assert.equal(initial.status, 200); token = initial.json.token;
+  return { dir, configDir, token, calls, request, login, advance: ms => { time += ms; }, read: () => fs.readFileSync(path.join(configDir, ".env"), "utf8"), restart: async (replacement = password) => { await new Promise(resolve => server.close(resolve)); password = replacement; await start(); } };
+}
+
+test("all sensitive routes require authorization before reads, writes or network probes", async t => {
+  const f = await fixture(t); const original = f.read();
+  for (const [route, method] of [["/api/config", "GET"], ["/api/config", "POST"], ["/api/health", "GET"], ["/api/ollama/probe", "GET"], ["/api/models/openrouter", "GET"], ["/api/restart", "POST"], ["/api/logout", "POST"]]) {
+    const r = await f.request(route, { method, authorized: false, body: method === "POST" ? { env: { LLM_MODEL: "attacker" } } : undefined });
+    assert.equal(r.status, 401); assert.ok(!r.text.includes(INITIAL)); assert.ok(!r.text.includes(f.token));
+  }
+  assert.equal(f.read(), original); assert.equal(f.calls.length, 0);
+});
+
+test("invalid credentials are rejected without leaking tokens", async t => {
+  const f = await fixture(t);
+  for (const authorization of ["Bearer " + "0".repeat(64), "Bearer short", "Basic abc", "Bearer " + f.token.toUpperCase()]) {
+    const r = await f.request("/api/config", { headers: { Authorization: authorization } });
+    assert.equal(r.status, 401); assert.ok(!r.text.includes(f.token));
+  }
+});
+
+test("password login issues independent expiring sessions without exposing credentials elsewhere", async t => {
+  const f = await fixture(t, { configured: false });
+  assert.match(f.token, /^[a-f0-9]{64}$/);
+  const second = await f.login(); assert.equal(second.status, 200); assert.notEqual(second.json.token, f.token); assert.equal(second.json.expiresIn, 8 * 60 * 60);
+  assert.equal(second.headers["cache-control"], "no-store"); assert.equal(second.headers["set-cookie"], undefined);
+  for (const route of ["/", "/auth/admin-token", "/admin-token", "/api/config"]) {
+    const r = await f.request(route, { authorized: false }); assert.ok(!r.text.includes(f.token)); assert.ok(!r.text.includes(PASSWORD));
+  }
+  assert.equal(fs.existsSync(path.join(f.configDir, ".env")), false);
+});
+
+test("missing, short, oversized or control-containing setup passwords fail closed", () => {
+  for (const password of ["", "too-short", "x".repeat(129), PASSWORD + "\n", PASSWORD + "\0", "password-with-\u00e9"]) {
+    assert.throws(() => createWizard({ password }), /Set HONCHO_WIZARD_PASSWORD/);
+  }
+});
+
+test("password punctuation and leading or trailing spaces are preserved", async t => {
+  const password = "  synthetic:password!'$  "; const f = await fixture(t, { password });
+  assert.equal((await f.login(password.trim())).status, 401);
+  assert.equal((await f.login(password)).status, 200);
+});
+
+test("logout and session expiry reject previously authorized credentials", async t => {
+  const f = await fixture(t);
+  assert.equal((await f.request("/api/logout", { method: "POST" })).status, 200);
+  assert.equal((await f.request()).status, 401);
+  const session = (await f.login()).json.token;
+  assert.equal((await f.request("/api/config", { headers: { Authorization: `Bearer ${session}` } })).status, 200);
+  f.advance(8 * 60 * 60 * 1000);
+  assert.equal((await f.request("/api/config", { headers: { Authorization: `Bearer ${session}` } })).status, 401);
+});
+
+test("restart and configured password changes revoke sessions without changing provider keys", async t => {
+  const f = await fixture(t); const original = f.read();
+  await f.restart(); assert.equal((await f.request()).status, 401); assert.equal((await f.login()).status, 200);
+  const replacement = "synthetic-new-wizard-password";
+  await f.restart(replacement);
+  assert.equal((await f.login(PASSWORD)).status, 401);
+  assert.equal((await f.login(replacement)).status, 200);
+  assert.equal(f.read(), original);
+});
+
+test("login attempts are bounded per wizard while established sessions remain usable", async t => {
+  const f = await fixture(t);
+  for (let i = 0; i < 9; i++) assert.equal((await f.login("wrong-password")).status, 401);
+  const limited = await f.login(); assert.equal(limited.status, 429); assert.equal(limited.headers["retry-after"], "60");
+  assert.equal((await f.request()).status, 200);
+  f.advance(60001); assert.equal((await f.login()).status, 200);
+});
+
+test("login validates bounded JSON and enforces host and origin checks", async t => {
+  const f = await fixture(t);
+  for (const headers of [{ Origin: "https://attacker.invalid" }, { Origin: "null" }, { "Sec-Fetch-Site": "cross-site" }, { Host: "attacker.invalid" }]) assert.equal((await f.login(PASSWORD, headers)).status, 403);
+  const cases = [[{ body: [] }, 400], [{ body: { password: [] } }, 400], [{ body: { password: "x".repeat(129) } }, 400], [{ body: { password: PASSWORD, extra: true } }, 400], [{ raw: "{" }, 400], [{ raw: "x".repeat(17000) }, 413], [{ raw: "x".repeat(17000), headers: { "Transfer-Encoding": "chunked" } }, 413], [{ body: {}, headers: { "Content-Type": "text/plain" } }, 415]];
+  for (const [options, status] of cases) assert.equal((await f.request("/api/login", { method: "POST", authorized: false, ...options })).status, status);
+});
+
+test("session storage stays bounded by revoking the oldest session", async t => {
+  const f = await fixture(t); let latest;
+  for (let i = 0; i < 32; i++) { f.advance(60001); latest = (await f.login()).json.token; }
+  assert.equal((await f.request()).status, 401);
+  assert.equal((await f.request("/api/config", { headers: { Authorization: `Bearer ${latest}` } })).status, 200);
+});
+
+test("authenticated config is an allowlisted redacted representation", async t => {
+  const f = await fixture(t); const r = await f.request();
+  assert.equal(r.status, 200); assert.deepEqual(r.json.env, { LLM_VLLM_BASE_URL: BASE, LLM_EMBEDDING_BASE_URL: BASE, LLM_MODEL: MODEL });
+  assert.deepEqual(r.json.configuredSecrets, Object.fromEntries(SECRET_KEYS.map(key => [key, true])));
+  for (const secret of [INITIAL, "synthetic-other-secret", f.token, PASSWORD]) assert.ok(!r.text.includes(secret));
+  assert.equal(r.json.configToml, undefined); assert.equal(r.headers["cache-control"], "no-store"); assert.equal(r.headers["access-control-allow-origin"], undefined);
+});
+
+test("model edits and blank/masked secrets preserve existing keys and comments", async t => {
+  const f = await fixture(t);
+  const r = await f.request("/api/config", { method: "POST", body: { env: { LLM_MODEL: "new/model", LLM_VLLM_API_KEY: "", LLM_OPENAI_API_KEY: "********", LLM_OPENAI_COMPATIBLE_API_KEY: "<redacted>", LLM_EMBEDDING_API_KEY: "••••" } } });
+  assert.equal(r.status, 200); assert.ok(!r.text.includes(INITIAL));
+  const env = parseEnvFile(f.read()); for (const key of SECRET_KEYS) assert.equal(env[key], INITIAL);
+  assert.equal(env.LLM_MODEL, "new/model"); assert.match(f.read(), /# retain this comment/); assert.equal(env.UNRELATED_PRIVATE_KEY, "synthetic-other-secret");
+  assert.equal(fs.statSync(path.join(f.configDir, ".env")).mode & 0o777, 0o600);
+  assert.match(fs.readFileSync(path.join(f.configDir, "config.toml"), "utf8"), /INDUCTION_MODEL = "new\/model"/);
+});
+
+test("explicit replacement and clearing work; omitted fields remain unchanged", async t => {
+  const f = await fixture(t);
+  let r = await f.request("/api/config", { method: "POST", body: { env: { LLM_VLLM_API_KEY: "synthetic-replacement" }, clearSecrets: ["LLM_EMBEDDING_API_KEY"] } });
+  assert.equal(r.status, 200); let env = parseEnvFile(f.read());
+  assert.equal(env.LLM_VLLM_API_KEY, "synthetic-replacement"); assert.equal(env.LLM_EMBEDDING_API_KEY, ""); assert.equal(env.LLM_OPENAI_API_KEY, INITIAL);
+  r = await f.request(); assert.equal(r.json.configuredSecrets.LLM_EMBEDDING_API_KEY, false); assert.ok(!r.text.includes("synthetic-replacement"));
+});
+
+test("provider changes cannot silently send existing keys to a new endpoint", async t => {
+  const f = await fixture(t); const original = f.read();
+  let r = await f.request("/api/config", { method: "POST", body: { env: { LLM_VLLM_BASE_URL: "https://new.invalid/v1" } } });
+  assert.equal(r.status, 400); assert.equal(f.read(), original);
+  r = await f.request("/api/config", { method: "POST", body: { env: { LLM_VLLM_BASE_URL: "https://new.invalid/v1", ...Object.fromEntries(SECRET_KEYS.slice(0, 3).map(key => [key, "synthetic-new-key"])) } } });
+  assert.equal(r.status, 200);
+});
+
+test("cross-origin requests, preflights, DNS rebinding and Origin:null are rejected", async t => {
+  const f = await fixture(t); const original = f.read();
+  for (const headers of [{ Origin: "https://attacker.invalid" }, { Origin: "null" }, { "Sec-Fetch-Site": "cross-site" }, { Host: "attacker.invalid" }]) {
+    const r = await f.request("/api/config", { method: "POST", body: { env: { LLM_MODEL: "bad" } }, headers }); assert.equal(r.status, 403);
+  }
+  assert.equal((await f.request("/api/config", { method: "OPTIONS", authorized: false, headers: { Origin: "https://attacker.invalid", "Access-Control-Request-Headers": "authorization" } })).status, 403);
+  assert.equal((await f.request("/api/config", { headers: { Origin: ORIGIN, "Sec-Fetch-Site": "same-origin" } })).status, 200);
+  assert.equal(f.read(), original);
+});
+
+test("malformed, oversized and non-JSON bodies are rejected without changes", async t => {
+  const f = await fixture(t); const original = f.read();
+  for (const [options, status] of [[{ raw: "{" }, 400], [{ raw: "x".repeat(17000) }, 413], [{ raw: "x".repeat(17000), headers: { "Transfer-Encoding": "chunked" } }, 413], [{ body: {}, headers: { "Content-Type": "text/plain" } }, 415]]) {
+    assert.equal((await f.request("/api/config", { method: "POST", ...options })).status, status);
+  }
+  assert.equal(f.read(), original);
+});
+
+test("unknown keys, prototype keys, invalid types and directive injection cannot mutate config", async t => {
+  const f = await fixture(t); const original = f.read();
+  const bodies = [null, [], { env: [] }, { env: { AUTH_USE_AUTH: "false" } }, { arbitrary: "bad" }, { env: { LLM_MODEL: 1 } }, { env: { LLM_MODEL: "valid\nINJECTED=true" } }, { env: { LLM_MODEL: 'model"\n[evil]' } }, { env: { LLM_VLLM_API_KEY: "key\nEVIL=true" } }, { env: { LLM_VLLM_API_KEY: "quote'break" } }, { env: { LLM_VLLM_BASE_URL: "file:///tmp/x" } }, { env: { LLM_VLLM_BASE_URL: "https://user:pass@example.invalid" } }, { env: { LLM_VLLM_BASE_URL: "https://example.invalid/?key=secret" } }, { clearSecrets: ["LLM_MODEL"] }, { env: { LLM_VLLM_API_KEY: "replacement" }, clearSecrets: ["LLM_VLLM_API_KEY"] }, { env: { LLM_MODEL: "a" }, model: "b" }];
+  bodies.push(JSON.parse('{"env":{"__proto__":{"polluted":true}}}'));
+  for (const body of bodies) assert.equal((await f.request("/api/config", { method: "POST", body })).status, 400);
+  assert.equal(f.read(), original); assert.equal({}.polluted, undefined);
+});
+
+test("shell syntax in a key stays literal when actual consumer shells source .env", async t => {
+  const f = await fixture(t); const marker = path.join(f.dir, "must-not-exist");
+  const synthetic = `key$(touch ${marker});$HOME\\backtick\`literal\``;
+  const r = await f.request("/api/config", { method: "POST", body: { env: { LLM_VLLM_API_KEY: synthetic } } });
+  assert.equal(r.status, 200);
+  const output = execFileSync("/bin/sh", ["-c", '. "$1"; printf "%s" "$LLM_VLLM_API_KEY"', "test", path.join(f.configDir, ".env")], { encoding: "utf8" });
+  assert.equal(output, synthetic); assert.equal(fs.existsSync(marker), false);
+});
+
+test("authorized Ollama, model cache and health work without proxying internal secrets", async t => {
+  const f = await fixture(t);
+  const probe = await f.request("/api/ollama/probe"); assert.equal(probe.status, 200); assert.equal(probe.json.reachable, true); assert.equal(probe.json.models[1], "qwen:8b");
+  const models = await f.request("/api/models/openrouter"); assert.deepEqual(models.json.models, [{ id: "paid/model", name: "Paid", context_length: 0 }]);
+  await f.request("/api/models/openrouter"); assert.equal(f.calls.filter(url => url.includes("openrouter.ai")).length, 1);
+  const health = await f.request("/api/health"); assert.deepEqual(health.json, { apiServer: true }); assert.ok(!health.text.includes(INITIAL));
+  assert.equal((await f.request("/api/restart", { method: "POST" })).status, 404);
+});
+
+test("authorized upstream failures have safe empty results", async t => {
+  const f = await fixture(t, { failNetwork: true });
+  assert.deepEqual((await f.request("/api/health")).json, { apiServer: false });
+  assert.deepEqual((await f.request("/api/models/openrouter")).json, { models: [] });
+  assert.deepEqual((await f.request("/api/ollama/probe")).json, { reachable: false, url: null, models: [] });
+});
+
+
+test("legacy secrets without a saved URL require an explicit decision on endpoint selection", async t => {
+  const f = await fixture(t);
+  fs.writeFileSync(path.join(f.configDir, ".env"), SECRET_KEYS.map(key => `${key}=${INITIAL}`).join("\n"));
+  const original = f.read();
+  const r = await f.request("/api/config", { method: "POST", body: { env: { LLM_VLLM_BASE_URL: BASE } } });
+  assert.equal(r.status, 400); assert.equal(f.read(), original);
+});
+
+test("legacy URLs with userinfo or query credentials are never returned as public configuration", async t => {
+  const f = await fixture(t);
+  fs.writeFileSync(path.join(f.configDir, ".env"), `LLM_VLLM_BASE_URL=https://user:${INITIAL}@example.invalid/v1\nLLM_EMBEDDING_BASE_URL=https://example.invalid/v1?key=${INITIAL}\nLLM_MODEL=${MODEL}`);
+  const r = await f.request();
+  assert.equal(r.status, 200); assert.deepEqual(r.json.env, { LLM_MODEL: MODEL });
+  assert.deepEqual(r.json.invalidPublicFields, ["LLM_VLLM_BASE_URL", "LLM_EMBEDDING_BASE_URL"]); assert.ok(!r.text.includes(INITIAL));
+});
diff --git a/setup-wizard/ui.test.cjs b/setup-wizard/ui.test.cjs
new file mode 100644
index 0000000..88892a2
--- /dev/null
+++ b/setup-wizard/ui.test.cjs
@@ -0,0 +1,130 @@
+"use strict";
+const { test } = require("node:test");
+const assert = require("node:assert/strict");
+const fs = require("node:fs");
+const os = require("node:os");
+const path = require("node:path");
+const http = require("node:http");
+const { JSDOM, VirtualConsole } = require("jsdom");
+const { createWizard, parseEnvFile, SECRET_KEYS } = require("./server.cjs");
+const ORIGIN = "http://setup-wizard.honcho.dappnode:8080";
+const BASE = "https://custom.invalid/v1";
+const STORED_KEY = "synthetic-stored-provider-secret";
+const PASSWORD = "synthetic-wizard-password";
+async function waitFor(predicate) {
+  for (let i = 0; i < 200; i++) { if (predicate()) return; await new Promise(resolve => setTimeout(resolve, 5)); }
+  assert.fail("UI did not reach the expected state");
+}
+async function browserFixture(t) {
+  const dir = fs.mkdtempSync(path.join(os.tmpdir(), "honcho-ui-test-"));
+  const configDir = path.join(dir, "config"); fs.mkdirSync(configDir);
+  let token, time = Date.now();
+  fs.writeFileSync(path.join(configDir, ".env"), [...SECRET_KEYS.map(key => `${key}=${STORED_KEY}`), `LLM_VLLM_BASE_URL=${BASE}`, `LLM_EMBEDDING_BASE_URL=${BASE}`, "LLM_MODEL=original/model"].join("\n"));
+  const server = createWizard({ configDir, password: PASSWORD, now: () => time, fetch: async url => ({ ok: true, json: async () => url.endsWith("/api/tags") ? { models: [{ name: '<img src=x onerror="window.pwned=true">' }] } : { data: [{ id: '<img src=x onerror="window.pwned=true">', name: "Synthetic model" }] } }) });
+  await new Promise(resolve => server.listen(0, "127.0.0.1", resolve));
+  const calls = []; const alerts = []; const errors = [];
+  const console = new VirtualConsole(); console.on("jsdomError", error => errors.push(error.message));
+  const dom = new JSDOM(fs.readFileSync(path.join(__dirname, "index.html"), "utf8"), {
+    url: ORIGIN, runScripts: "dangerously", pretendToBeVisual: true, virtualConsole: console,
+    beforeParse(window) {
+      window.scrollTo = () => {}; window.alert = message => alerts.push(message);
+      window.fetch = (route, options = {}) => new Promise((resolve, reject) => {
+        const call = { route, options }; calls.push(call);
+        const req = http.request({ hostname: "127.0.0.1", port: server.address().port, path: route, method: options.method || "GET", headers: { Host: new URL(ORIGIN).host, Origin: ORIGIN, ...options.headers } }, res => {
+          const chunks = []; res.on("data", chunk => chunks.push(chunk)); res.on("end", () => {
+            const content = Buffer.concat(chunks); call.status = res.statusCode;
+            if (route === "/api/login" && res.statusCode === 200) token = JSON.parse(content.toString()).token;
+            resolve(new Response(content, { status: res.statusCode, headers: res.headers }));
+          });
+        });
+        req.on("error", reject); req.end(options.body);
+      });
+    },
+  });
+  t.after(async () => { dom.window.close(); await new Promise(resolve => server.close(resolve)); fs.rmSync(dir, { recursive: true, force: true }); });
+  const document = dom.window.document;
+  async function login(credential = PASSWORD) {
+    document.getElementById("wizard-password").value = credential;
+    document.getElementById("login-form").dispatchEvent(new dom.window.Event("submit", { bubbles: true, cancelable: true }));
+    await waitFor(() => !document.getElementById("wizard-app").hidden || !!document.getElementById("login-error").textContent);
+    if (!document.getElementById("wizard-app").hidden) await waitFor(() => document.getElementById("st-model").textContent === "original/model");
+  }
+  function custom() {
+    dom.window.switchTab("setup"); document.querySelector('[data-id="custom"]').click(); dom.window.goTo(1);
+  }
+  return { dom, document, calls, alerts, errors, get token() { return token; }, configDir, login, custom, advance: ms => { time += ms; } };
+}
+
+test("UI logs in with a password, keeps only a tab-memory session and revokes it on lock", async t => {
+  const f = await browserFixture(t);
+  assert.equal(f.document.getElementById("wizard-app").hidden, true); assert.equal(f.calls.length, 0);
+  await f.login("wrong-password"); assert.equal(f.document.getElementById("wizard-app").hidden, true); assert.match(f.document.getElementById("login-error").textContent, /password/);
+  await f.login(); assert.equal(f.document.getElementById("login-panel").hidden, true); assert.equal(f.document.getElementById("wizard-password").value, "");
+  assert.equal(f.dom.window.localStorage.length, 0); assert.equal(f.dom.window.sessionStorage.length, 0); assert.equal(f.document.cookie, "");
+  assert.ok(f.calls.filter(call => call.route !== "/api/login").every(call => call.options.headers.Authorization === "Bearer " + f.token));
+  assert.ok(f.calls.filter(call => call.route !== "/api/login").every(call => !JSON.stringify(call.options).includes(PASSWORD)));
+  f.document.getElementById("logout-button").click(); assert.equal(f.document.getElementById("wizard-app").hidden, true);
+  const count = f.calls.length; await assert.rejects(f.dom.window.apiFetch("/api/config"), /Unlock/); assert.equal(f.calls.length, count);
+  await waitFor(() => f.calls.some(call => call.route === "/api/logout" && call.status === 200));
+  const response = await f.dom.window.fetch("/api/config", { headers: { Authorization: `Bearer ${f.token}` } }); assert.equal(response.status, 401);
+  assert.deepEqual(f.errors, []);
+});
+
+test("expired sessions return the UI to its password prompt", async t => {
+  const f = await browserFixture(t); await f.login(); f.advance(8 * 60 * 60 * 1000);
+  await assert.rejects(f.dom.window.apiFetch("/api/config"), /expired/);
+  assert.equal(f.document.getElementById("wizard-app").hidden, true);
+  assert.equal(f.document.getElementById("login-panel").hidden, false);
+  await f.login(); assert.equal(f.document.getElementById("wizard-app").hidden, false);
+});
+
+test("login rate limits are displayed and the user can retry after the window", async t => {
+  const f = await browserFixture(t);
+  for (let i = 0; i < 10; i++) await f.login("wrong-password");
+  await f.login(); assert.equal(f.document.getElementById("wizard-app").hidden, true);
+  assert.match(f.document.getElementById("login-error").textContent, /Too many login attempts/);
+  f.advance(60001); await f.login(); assert.equal(f.document.getElementById("wizard-app").hidden, false);
+});
+
+test("UI edits model without round-tripping or deleting saved keys", async t => {
+  const f = await browserFixture(t); await f.login(); f.custom();
+  assert.equal(f.document.getElementById("api-key").value, ""); assert.match(f.document.getElementById("api-key").placeholder, /keep/);
+  assert.equal(f.document.getElementById("custom-base-url").value, BASE);
+  f.document.getElementById("custom-model").value = "updated/model";
+  f.dom.window.showReview(); assert.ok(!f.document.getElementById("env-preview").textContent.includes(STORED_KEY));
+  await f.dom.window.saveConfig(); assert.equal(f.alerts.length, 0);
+  const body = JSON.parse(f.calls.filter(call => call.options.method === "POST").at(-1).options.body);
+  assert.equal(body.env.LLM_VLLM_API_KEY, undefined); assert.equal(body.clearSecrets.length, 0);
+  const env = parseEnvFile(fs.readFileSync(path.join(f.configDir, ".env"), "utf8"));
+  for (const key of SECRET_KEYS) assert.equal(env[key], STORED_KEY);
+  assert.equal(env.LLM_MODEL, "updated/model"); assert.equal(f.document.querySelector('[data-step="3"]').classList.contains("active"), true);
+  assert.deepEqual(f.errors, []);
+});
+
+test("UI replaces and explicitly clears keys without exposing them in the review", async t => {
+  const f = await browserFixture(t); await f.login(); f.custom();
+  const replacement = "synthetic-entered-new-secret";
+  f.document.getElementById("api-key").value = replacement; f.dom.window.showReview();
+  assert.ok(!f.document.getElementById("env-preview").textContent.includes(replacement));
+  await f.dom.window.saveConfig(); assert.equal(f.alerts.length, 0);
+  assert.equal(f.document.getElementById("api-key").value, "");
+  let env = parseEnvFile(fs.readFileSync(path.join(f.configDir, ".env"), "utf8"));
+  for (const key of SECRET_KEYS) assert.equal(env[key], replacement);
+  f.dom.window.goTo(1); const clear = f.document.getElementById("clear-api-keys"); clear.checked = true; clear.dispatchEvent(new f.dom.window.Event("change"));
+  assert.equal(f.document.getElementById("api-key").disabled, true); f.dom.window.showReview(); assert.match(f.document.getElementById("env-preview").textContent, /explicitly clear/);
+  await f.dom.window.saveConfig(); env = parseEnvFile(fs.readFileSync(path.join(f.configDir, ".env"), "utf8"));
+  for (const key of SECRET_KEYS) assert.equal(env[key], "");
+  assert.equal(f.alerts.length, 0); assert.deepEqual(f.errors, []);
+});
+
+test("provider model and Ollama responses are rendered as text rather than executable HTML", async t => {
+  const f = await browserFixture(t); await f.login();
+  f.dom.window.switchTab("setup"); f.document.querySelector('[data-id="openrouter"]').click(); f.dom.window.goTo(1);
+  await waitFor(() => f.document.getElementById("or-model-input"));
+  f.document.getElementById("or-model-input").dispatchEvent(new f.dom.window.Event("focus"));
+  assert.equal(f.document.querySelectorAll(".model-suggestions img").length, 0);
+  assert.match(f.document.querySelector(".sg-id").textContent, /<img/);
+  f.document.querySelector('[data-id="ollama"]').click(); f.dom.window.goTo(1); await f.dom.window.probeOllama();
+  assert.equal(f.document.querySelectorAll("#probe-result img").length, 0); assert.match(f.document.getElementById("probe-result").textContent, /<img/);
+  assert.equal(f.dom.window.pwned, undefined); assert.deepEqual(f.errors, []);
+});