diff --git a/Dockerfile b/Dockerfile
index acafa03..8deaa78 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -13,6 +13,7 @@ RUN pipenv install --system --deploy
 
 COPY src ./src
 COPY lib ./lib
+RUN mkdir -p src/static/bundled-lib && cp -f lib/*.py src/static/bundled-lib/
 COPY workspace ./workspace
 
 EXPOSE 8080
diff --git a/Pipfile b/Pipfile
index 1ceb9d0..6da80b7 100644
--- a/Pipfile
+++ b/Pipfile
@@ -20,7 +20,7 @@ bcrypt = "*"
 python_version = "3.12"
 
 [scripts]
-dev = "uvicorn app:app --app-dir src --reload --port 8080"
+dev = "uvicorn app:app --app-dir src --reload --host 0.0.0.0 --port 8080"
 test = "bash -lc 'cd src && PYTHONPATH=. pytest ../tests'"
 test-integration = "bash -lc 'cd src && PYTHONPATH=. pytest ../tests -m integration'"
 test-selenium = "bash -lc 'cd src && PYTHONPATH=. pytest ../tests -m selenium -v'"
diff --git a/README.md b/README.md
index abfd6d7..8aeceba 100644
--- a/README.md
+++ b/README.md
@@ -90,17 +90,22 @@ Admins can open another user's workspace from the home page user management pane
 
 The home page can store the API key in `sessionStorage` when you are not using cookie login, or use `?api_key=` on `/editor`.
 
+**Local mode (no login)** — Click *Use locally* on the home page (or open `/editor?local=1`) to run the editor without any FastAPI auth. The boot-time auth probe is skipped when local mode is active, so this works even on a host that has `AUTH_ENABLED=true`. Files default to the browser's **IndexedDB**; inside the editor the workspace badge has a **Folder…** button that opens `window.showDirectoryPicker()` so you can save straight to any folder on disk (Chromium-only — Firefox/Safari stay on IndexedDB). The picked directory handle is persisted across reloads in IndexedDB; if browser permission lapses a *Reconnect* button reappears in the badge. Nothing is sent to the server for file reads/writes. The MicroPython stubs are loaded from **`/static/bundled-lib/*.py`** (files under `src/static/bundled-lib/` in the repo) so a plain static file server is enough; if those requests fail, the app falls back to `GET /api/public/lib-bundle` when FastAPI is available. For static-only hosting, run `python scripts/serve_static_editor.py` from the repo root — it serves `src/static/` with the same `/static/…` URLs the HTML expects (it strips the `/static` prefix when resolving files), rewrites `/editor` → `index.html`, and sends the same COOP/COEP headers as the full app so **ADC sliders, pin toggles, and serial I/O** keep using `SharedArrayBuffer` on mobile Safari and Chrome where supported. An *Exit* button in the editor's workspace badge clears the local-mode flag (your IndexedDB files stay until you wipe browser storage).
+
 ## Layout
 
 - `src/` — FastAPI app and static UI (`src/static/`)
-- `lib/` — bundled MicroPython stubs (copied into `WORKSPACE_ROOT/lib` when missing; read-only via API)
-- `workspace/` — default `WORKSPACE_ROOT`: `code/` samples (editable); runtime `lib/` is filled from `lib/` above
+- `lib/` — bundled MicroPython stubs, served read-only as `lib/` in the editor and merged into Pyodide at run time (single source of truth)
+- `workspace/` — default `WORKSPACE_ROOT`: `code/` samples and per-user folders (editable); the editor surfaces the repo `lib/` alongside it without copying anything to disk
 
 ## ESP32 / NeoPixel mock
 
 The browser runtime ships MicroPython-style stubs in repo `lib/` (they appear as `lib/` in the editor and are read-only via the APIs):
 
-- `machine.Pin`, `machine.freq()`, `machine.unique_id()`, `machine.reset()` (no-op here)
+- `machine.Pin` — `value/on/off/toggle/high/low/init/__call__/irq` plus a live "Pins" panel: OUT pins show an indicator, IN pins expose a clickable toggle button (its value is what `Pin.value()` returns), `irq()` fires on rising / falling edges as you click
+- `machine.PWM` — `freq()` / `duty()` / `duty_u16()` / `duty_ns()` with a duty-cycle bar in the Pins panel
+- `machine.ADC` — backed by a live slider in the editor UI (one slider per pin, `read_u16()` returns 0..65535)
+- `machine.UART` — opens a Serial Monitor pane; `write()` text appears there, what you type is delivered via `read()` / `readline()`
 - `neopixel.NeoPixel`
 - `utime` — `ticks_ms`, `ticks_diff`, `ticks_add`, `sleep_ms`, `sleep_us`, `sleep`
 - `micropython.const` — no-op helper for ported constant declarations
diff --git a/lib/machine.py b/lib/machine.py
index eb0a242..09b28f6 100644
--- a/lib/machine.py
+++ b/lib/machine.py
@@ -1,19 +1,445 @@
 """Minimal MicroPython-style machine module mock for browser simulation."""
 
+import json
+
+
+_PIN_MODE_OUT = 1
+_PIN_MODE_IN = 2
+_PIN_MODE_PWM = 4
+
+
+def _pin_view_get(name):
+    try:
+        import js
+
+        return getattr(js, name, None)
+    except Exception:
+        return None
+
+
+def _sab_isolated():
+    """True when the worker has a real SharedArrayBuffer for pin/ADC views.
+
+    Set by `pyodide-worker.js` at init time. When false, output updates
+    must travel through `print("[pin-out]…")` markers because the main
+    thread can't read worker-local arrays."""
+    try:
+        import js
+
+        return bool(getattr(js, "__sab_isolated", False))
+    except Exception:
+        return False
+
+
+def _pin_out_publish(pin_id, ui_mode, value):
+    """Pack [ui_mode (high byte) | value (low 24 bits)] for the UI panel."""
+    view = _pin_view_get("__pin_out_view")
+    if view is not None:
+        packed = ((int(ui_mode) & 0xFF) << 24) | (int(value) & 0x00FFFFFF)
+        try:
+            import js
+
+            js.Atomics.store(view, int(pin_id), packed)
+        except Exception:
+            try:
+                view[int(pin_id)] = packed
+            except Exception:
+                pass
+    if not _sab_isolated():
+        # Fallback for non-isolated contexts (e.g. mobile over LAN IP):
+        # the main thread reads `[pin-out]` lines from stdout and updates
+        # the Pins panel from there. Slower than SAB but works everywhere.
+        try:
+            print(
+                "[pin-out]"
+                + json.dumps(
+                    {"pin": int(pin_id), "mode": int(ui_mode), "value": int(value)}
+                )
+            )
+        except Exception:
+            pass
+
+
+def _pin_in_read(pin_id):
+    view = _pin_view_get("__pin_in_view")
+    if view is None:
+        return 0
+    try:
+        import js
+
+        return int(js.Atomics.load(view, int(pin_id))) & 1
+    except Exception:
+        try:
+            return int(view[int(pin_id)]) & 1
+        except Exception:
+            return 0
+
+
+def _pin_register(pin_id, ui_mode, **extra):
+    payload = {"pin": int(pin_id), "mode": int(ui_mode)}
+    payload.update({k: v for k, v in extra.items() if v is not None})
+    try:
+        print("[pin-register]" + json.dumps(payload))
+    except Exception:
+        pass
+
 
 class Pin:
+    """Browser-simulated `machine.Pin`.
+
+    A control row appears in the editor UI when a pin is constructed:
+      * `Pin.OUT` pins show a live indicator that mirrors `value()`.
+      * `Pin.IN` pins show a toggle button you can click — the next call
+        to `value()` returns 0 or 1 accordingly.
+    """
+
     IN = 0
     OUT = 1
     PULL_UP = 2
     PULL_DOWN = 3
+    OPEN_DRAIN = 7
 
-    def __init__(self, pin_id: int, mode: int = OUT, value: int = 0):
+    IRQ_FALLING = 1
+    IRQ_RISING = 2
+
+    def __init__(self, pin_id, mode=OUT, pull=-1, value=None, **_kwargs):
         self.id = int(pin_id)
         self.mode = int(mode)
+        self.pull = int(pull) if pull != -1 else -1
         self._value = 1 if value else 0
+        self._irq_handler = None
+        self._irq_trigger = 0
+        self._last_input = 0
+        self._publish()
+
+    def _ui_mode(self):
+        if self.mode == self.IN:
+            return _PIN_MODE_IN
+        return _PIN_MODE_OUT
+
+    def _publish(self):
+        ui_mode = self._ui_mode()
+        _pin_register(self.id, ui_mode, pull=self.pull if self.pull != -1 else None)
+        if ui_mode == _PIN_MODE_OUT:
+            _pin_out_publish(self.id, ui_mode, self._value)
+
+    def init(self, mode=-1, pull=-1, value=None):
+        if mode != -1:
+            self.mode = int(mode)
+        if pull != -1:
+            self.pull = int(pull)
+        if value is not None:
+            self._value = 1 if int(value) else 0
+        self._publish()
 
     def value(self, new_value=None):
         if new_value is None:
+            if self.mode == self.IN:
+                v = _pin_in_read(self.id)
+                if self._irq_handler is not None:
+                    if v and not self._last_input and (self._irq_trigger & self.IRQ_RISING):
+                        self._fire_irq()
+                    elif not v and self._last_input and (self._irq_trigger & self.IRQ_FALLING):
+                        self._fire_irq()
+                self._last_input = v
+                return v
             return self._value
-        self._value = 1 if int(new_value) else 0
-        return self._value
+        v = 1 if int(new_value) else 0
+        self._value = v
+        if self._ui_mode() == _PIN_MODE_OUT:
+            _pin_out_publish(self.id, _PIN_MODE_OUT, v)
+        return v
+
+    def on(self):
+        return self.value(1)
+
+    def off(self):
+        return self.value(0)
+
+    def high(self):
+        return self.value(1)
+
+    def low(self):
+        return self.value(0)
+
+    def toggle(self):
+        return self.value(0 if (self._value if self.mode == self.OUT else _pin_in_read(self.id)) else 1)
+
+    def irq(self, handler=None, trigger=IRQ_RISING | IRQ_FALLING, **_kwargs):
+        self._irq_handler = handler
+        self._irq_trigger = int(trigger)
+        return self
+
+    def _fire_irq(self):
+        if self._irq_handler is None:
+            return
+        try:
+            self._irq_handler(self)
+        except Exception as exc:
+            try:
+                print(f"[pin] irq handler raised: {exc!r}")
+            except Exception:
+                pass
+
+    def __call__(self, *args):
+        return self.value(*args) if args else self.value()
+
+
+class PWM:
+    """Browser-simulated `machine.PWM`.
+
+    Visualises the configured duty cycle as a bar in the Pins panel.
+    `freq()` and `duty()`/`duty_u16()`/`duty_ns()` mirror MicroPython's API.
+    """
+
+    def __init__(self, pin, freq=1000, duty=None, duty_u16=None, duty_ns=None):
+        self._pin_id = _adc_pin_id(pin)
+        self._freq = int(freq) if freq else 1000
+        self._duty_u16 = 0
+        if duty_u16 is not None:
+            self._duty_u16 = max(0, min(65535, int(duty_u16)))
+        elif duty is not None:
+            self._duty_u16 = max(0, min(65535, int(duty) * 64))
+        elif duty_ns is not None:
+            self._set_duty_ns(int(duty_ns))
+        _pin_register(self._pin_id, _PIN_MODE_PWM, freq=self._freq)
+        _pin_out_publish(self._pin_id, _PIN_MODE_PWM, self._duty_u16)
+
+    def _set_duty_ns(self, ns):
+        period_ns = 1_000_000_000 // max(1, self._freq)
+        if period_ns <= 0:
+            self._duty_u16 = 0
+            return
+        self._duty_u16 = max(0, min(65535, int(ns) * 65535 // period_ns))
+
+    def freq(self, value=None):
+        if value is None:
+            return self._freq
+        self._freq = max(1, int(value))
+        _pin_register(self._pin_id, _PIN_MODE_PWM, freq=self._freq)
+
+    def duty(self, value=None):
+        if value is None:
+            return self._duty_u16 // 64
+        self._duty_u16 = max(0, min(65535, int(value) * 64))
+        _pin_out_publish(self._pin_id, _PIN_MODE_PWM, self._duty_u16)
+
+    def duty_u16(self, value=None):
+        if value is None:
+            return self._duty_u16
+        self._duty_u16 = max(0, min(65535, int(value)))
+        _pin_out_publish(self._pin_id, _PIN_MODE_PWM, self._duty_u16)
+
+    def duty_ns(self, value=None):
+        period_ns = 1_000_000_000 // max(1, self._freq)
+        if value is None:
+            return (self._duty_u16 * period_ns) // 65535
+        self._set_duty_ns(int(value))
+        _pin_out_publish(self._pin_id, _PIN_MODE_PWM, self._duty_u16)
+
+    def deinit(self):
+        _pin_out_publish(self._pin_id, 0, 0)
+
+
+def _adc_pin_id(pin):
+    if isinstance(pin, int):
+        return pin
+    return int(getattr(pin, "id", 0))
+
+
+def _adc_read_raw(pin_id: int) -> int:
+    """Read the live slider value (0..65535) shared from the editor UI.
+
+    Backed by a SharedArrayBuffer so updates from the browser slider propagate
+    instantly without the script having to yield. Falls back to 0 when the
+    runtime is not cross-origin isolated (e.g. older browsers).
+    """
+    try:
+        import js  # only available inside Pyodide
+
+        view = getattr(js, "__adc_view", None)
+        if view is None:
+            return 0
+        try:
+            return int(js.Atomics.load(view, pin_id)) & 0xFFFF
+        except Exception:
+            return int(view[pin_id]) & 0xFFFF
+    except Exception:
+        return 0
+
+
+class ADC:
+    """Browser-simulated `machine.ADC`.
+
+    Exposes a slider in the editor UI for the given pin. `read_u16()` returns
+    the slider value in the 0..65535 range (matching MicroPython's API);
+    `read()` scales to the configured `width` (defaults to 12-bit, 0..4095).
+    """
+
+    WIDTH_9BIT = 9
+    WIDTH_10BIT = 10
+    WIDTH_11BIT = 11
+    WIDTH_12BIT = 12
+    ATTN_0DB = 0
+    ATTN_2_5DB = 1
+    ATTN_6DB = 2
+    ATTN_11DB = 3
+
+    def __init__(self, pin):
+        self._pin = _adc_pin_id(pin)
+        self._atten = self.ATTN_11DB
+        self._width = self.WIDTH_12BIT
+        try:
+            print("[adc-register]" + json.dumps({"pin": self._pin}))
+        except Exception:
+            pass
+
+    def atten(self, attn):
+        self._atten = int(attn)
+
+    def width(self, width):
+        self._width = int(width)
+
+    def read_u16(self):
+        return _adc_read_raw(self._pin)
+
+    def read(self):
+        bits = self._width if self._width in (9, 10, 11, 12) else 12
+        max_val = (1 << bits) - 1
+        return (_adc_read_raw(self._pin) * max_val) // 65535
+
+    def read_uv(self):
+        """Return microvolts assuming a 0..3.3V range (rough simulation)."""
+        return (_adc_read_raw(self._pin) * 3_300_000) // 65535
+
+
+def _serial_drain_pending(buf):
+    """Pull any bytes the editor's serial-monitor has pushed into the SAB ring."""
+    try:
+        import js
+        import base64  # noqa: F401  (kept for symmetry with write path)
+
+        indices = getattr(js, "__serial_in_indices", None)
+        data = getattr(js, "__serial_in_data", None)
+        if indices is None or data is None:
+            return
+        cap = int(getattr(js, "__serial_in_capacity", 0))
+        if cap <= 0:
+            return
+        r = int(js.Atomics.load(indices, 0))
+        w = int(js.Atomics.load(indices, 1))
+        while r != w:
+            buf.append(int(data[r]) & 0xFF)
+            r = (r + 1) % cap
+        js.Atomics.store(indices, 0, r)
+    except Exception:
+        pass
+
+
+class UART:
+    """Browser-simulated `machine.UART`.
+
+    A serial monitor pane appears in the editor when this is constructed.
+    `write()` text shows up there; characters typed into the input box arrive
+    via `read()` / `readline()` / `any()`.
+    """
+
+    INV_TX = 1
+    INV_RX = 2
+    INV_RTS = 4
+    INV_CTS = 8
+
+    def __init__(self, id=0, baudrate=115200, bits=8, parity=None, stop=1,
+                 tx=None, rx=None, timeout=0, **_kwargs):
+        self.id = int(id) if id is not None else 0
+        self.baudrate = int(baudrate)
+        self.bits = int(bits)
+        self.parity = parity
+        self.stop = int(stop)
+        self.tx = tx
+        self.rx = rx
+        self.timeout = int(timeout) if timeout is not None else 0
+        self._buf = bytearray()
+        try:
+            print("[serial-register]" + json.dumps({
+                "id": self.id,
+                "baudrate": self.baudrate,
+            }))
+        except Exception:
+            pass
+
+    def init(self, *args, **kwargs):
+        if args:
+            try:
+                self.baudrate = int(args[0])
+            except Exception:
+                pass
+        if "baudrate" in kwargs:
+            self.baudrate = int(kwargs["baudrate"])
+
+    def deinit(self):
+        self._buf = bytearray()
+
+    def any(self):
+        _serial_drain_pending(self._buf)
+        return len(self._buf)
+
+    def read(self, nbytes=None):
+        _serial_drain_pending(self._buf)
+        if not self._buf:
+            return None
+        if nbytes is None:
+            out = bytes(self._buf)
+            self._buf = bytearray()
+            return out
+        n = min(int(nbytes), len(self._buf))
+        if n <= 0:
+            return None
+        out = bytes(self._buf[:n])
+        del self._buf[:n]
+        return out
+
+    def readinto(self, buf, nbytes=None):
+        n = int(nbytes) if nbytes is not None else len(buf)
+        data = self.read(n)
+        if not data:
+            return None
+        for i, b in enumerate(data):
+            buf[i] = b
+        return len(data)
+
+    def readline(self):
+        _serial_drain_pending(self._buf)
+        if not self._buf:
+            return None
+        nl = self._buf.find(b"\n")
+        if nl == -1:
+            return None
+        out = bytes(self._buf[: nl + 1])
+        del self._buf[: nl + 1]
+        return out
+
+    def write(self, data):
+        if isinstance(data, str):
+            buf = data.encode("utf-8")
+        elif isinstance(data, (bytes, bytearray, memoryview)):
+            buf = bytes(data)
+        else:
+            buf = bytes([int(data) & 0xFF])
+        try:
+            import base64
+
+            encoded = base64.b64encode(buf).decode("ascii")
+            print(f"[serial-out]{encoded}")
+        except Exception:
+            pass
+        return len(buf)
+
+    def sendbreak(self):
+        pass
+
+    def flush(self):
+        pass
+
+    def txdone(self):
+        return True
diff --git a/lib/neopixel.py b/lib/neopixel.py
index 9446b38..0f25f85 100644
--- a/lib/neopixel.py
+++ b/lib/neopixel.py
@@ -29,6 +29,17 @@ class NeoPixel:
         self.bpp = int(bpp)
         self.timing = int(timing)
         self._buf = [tuple([0] * self.bpp) for _ in range(self.n)]
+        # Tell the editor UI that this pin is the NeoPixel data line so its
+        # row in the Pins panel goes away (it would just look noisy — every
+        # `pixels.write()` flips it).
+        try:
+            pin_id = getattr(self.pin, "id", self.pin)
+            print(
+                "[pin-claim]"
+                + json.dumps({"pin": int(pin_id), "by": "neopixel"})
+            )
+        except Exception:
+            pass
 
     def __len__(self):
         return self.n
diff --git a/scripts/serve_static_editor.py b/scripts/serve_static_editor.py
new file mode 100644
index 0000000..9a6faf7
--- /dev/null
+++ b/scripts/serve_static_editor.py
@@ -0,0 +1,74 @@
+#!/usr/bin/env python3
+"""Serve only the contents of `src/static/` (HTML, CSS, JS, bundled stubs).
+
+Use this with **local mode** in the editor (`?local=1`): files live in IndexedDB,
+so no FastAPI file API is required. Maps `/` and `/editor` to `home.html` /
+`index.html` so links from the home page keep working.
+
+Sends ``Cross-Origin-Opener-Policy: same-origin`` and
+``Cross-Origin-Embedder-Policy: credentialless`` on every response so the page
+can become cross-origin isolated (SharedArrayBuffer for live ADC / pins /
+serial), matching the full FastAPI app.
+
+Example:
+
+    python scripts/serve_static_editor.py
+    # open http://127.0.0.1:8765/  then "Use locally" → /editor?local=1
+
+Note: Pyodide and CodeMirror still load from CDNs; you need network access.
+"""
+
+from __future__ import annotations
+
+import argparse
+from functools import partial
+from http.server import SimpleHTTPRequestHandler, ThreadingHTTPServer
+from pathlib import Path
+
+
+def main() -> None:
+    parser = argparse.ArgumentParser(description=__doc__.split("\n\n")[0])
+    parser.add_argument("--host", default="127.0.0.1", help="Bind address (default 127.0.0.1)")
+    parser.add_argument("--port", type=int, default=8765, help="Port (default 8765)")
+    args = parser.parse_args()
+
+    static_root = (Path(__file__).resolve().parent.parent / "src" / "static").resolve()
+    if not static_root.is_dir():
+        raise SystemExit(f"Static directory not found: {static_root}")
+
+    class Handler(SimpleHTTPRequestHandler):
+        def __init__(self, *a, **kw):
+            super().__init__(*a, directory=str(static_root), **kw)
+
+        def end_headers(self):
+            self.send_header("Cross-Origin-Opener-Policy", "same-origin")
+            self.send_header("Cross-Origin-Embedder-Policy", "credentialless")
+            super().end_headers()
+
+        def translate_path(self, path: str) -> str:
+            clean = path.split("?", 1)[0].split("#", 1)[0]
+            if clean.startswith("/static/"):
+                clean = clean[len("/static") :]  # e.g. /styles.css, /bundled-lib/machine.py
+            if clean in ("/", ""):
+                clean = "/home.html"
+            elif clean == "/editor" or clean.startswith("/editor/"):
+                clean = "/index.html"
+            elif clean == "/tutorial" or clean.startswith("/tutorial/"):
+                clean = "/tutorial.html"
+            elif clean == "/login" or clean.startswith("/login/"):
+                clean = "/login.html"
+            elif clean == "/register" or clean.startswith("/register/"):
+                clean = "/register.html"
+            return super().translate_path(clean)
+
+    httpd = ThreadingHTTPServer((args.host, args.port), Handler)
+    print(f"Serving {static_root} at http://{args.host}:{args.port}/")
+    print("Open / then use “Use locally” for IndexedDB workspace.")
+    try:
+        httpd.serve_forever()
+    except KeyboardInterrupt:
+        print("\nStopped.")
+
+
+if __name__ == "__main__":
+    main()
diff --git a/src/editor_app/main.py b/src/editor_app/main.py
index 8d00246..9705541 100644
--- a/src/editor_app/main.py
+++ b/src/editor_app/main.py
@@ -1,12 +1,12 @@
 import os
 from contextlib import asynccontextmanager
 
-from fastapi import Depends, FastAPI
+from fastapi import Depends, FastAPI, Request
 from fastapi.staticfiles import StaticFiles
 from sqlalchemy import text
 from sqlalchemy.orm import sessionmaker
 
-from editor_app.config import STATIC_DIR, WORKSPACE_ROOT
+from editor_app.config import STATIC_DIR
 from editor_app.db.models import Base
 from editor_app.db.session import get_engine
 from editor_app.deps import require_api_access
@@ -14,13 +14,11 @@ from editor_app.routers.auth_routes import router as auth_router
 from editor_app.routers.files import router as files_router
 from editor_app.routers.frontend import router as frontend_router
 from editor_app.routers.users_admin import router as users_admin_router
-from editor_app.services import accounts, user_workspace
+from editor_app.services import accounts
 
 
 @asynccontextmanager
 async def lifespan(_app: FastAPI):
-    (WORKSPACE_ROOT / "lib").mkdir(parents=True, exist_ok=True)
-    user_workspace.ensure_workspace_lib()
     engine = get_engine()
     Base.metadata.create_all(bind=engine)
     with engine.begin() as conn:
@@ -47,6 +45,18 @@ async def lifespan(_app: FastAPI):
 
 def create_app() -> FastAPI:
     app = FastAPI(lifespan=lifespan)
+
+    @app.middleware("http")
+    async def cross_origin_isolation(request: Request, call_next):
+        """Turn on `crossOriginIsolated` so the editor worker can use SharedArrayBuffer
+        (powers the live ADC slider). `credentialless` keeps no-credential cross-origin
+        imports (esm.sh, jsdelivr) loading without requiring CORP everywhere.
+        """
+        response = await call_next(request)
+        response.headers.setdefault("Cross-Origin-Opener-Policy", "same-origin")
+        response.headers.setdefault("Cross-Origin-Embedder-Policy", "credentialless")
+        return response
+
     app.mount("/static", StaticFiles(directory=str(STATIC_DIR)), name="static")
     app.include_router(frontend_router)
     app.include_router(auth_router)
diff --git a/src/editor_app/routers/frontend.py b/src/editor_app/routers/frontend.py
index af13e26..cd42f90 100644
--- a/src/editor_app/routers/frontend.py
+++ b/src/editor_app/routers/frontend.py
@@ -1,11 +1,38 @@
 from fastapi import APIRouter
 from fastapi.responses import FileResponse
 
-from editor_app.config import STATIC_DIR
+from editor_app.config import PROJECT_ROOT, STATIC_DIR
 
 router = APIRouter()
 
 
+@router.get("/api/public/lib-bundle")
+async def serve_lib_bundle():
+    """Public, unauthenticated dump of the read-only `lib/` stubs.
+
+    Local-mode browsers (no login, files in IndexedDB) need access to the
+    MicroPython mocks so completion, diagnostics, and `runpy` can resolve
+    `from machine import …`. Reading these is read-only and contains no
+    user data, so it is safe to expose without auth."""
+    bundle_root = (PROJECT_ROOT / "lib").resolve()
+    files: dict[str, str] = {}
+    if bundle_root.is_dir():
+        for path in sorted(bundle_root.rglob("*.py")):
+            if not path.is_file():
+                continue
+            try:
+                rel = path.relative_to(bundle_root)
+            except ValueError:
+                continue
+            if any(part.startswith(".") for part in rel.parts):
+                continue
+            try:
+                files[str(rel).replace("\\", "/")] = path.read_text(encoding="utf-8")
+            except (UnicodeDecodeError, OSError):
+                continue
+    return {"files": files}
+
+
 @router.get("/")
 async def serve_home():
     return FileResponse(STATIC_DIR / "home.html")
@@ -29,3 +56,10 @@ async def serve_login():
 @router.get("/register")
 async def serve_register():
     return FileResponse(STATIC_DIR / "register.html")
+
+
+@router.get("/users")
+async def serve_users():
+    """Admin panel for managing accounts and invites. Auth is enforced by
+    the underlying `/api/users*` endpoints, not the static page itself."""
+    return FileResponse(STATIC_DIR / "users.html")
diff --git a/src/editor_app/services/filesystem.py b/src/editor_app/services/filesystem.py
index 183f7cb..d7bd40c 100644
--- a/src/editor_app/services/filesystem.py
+++ b/src/editor_app/services/filesystem.py
@@ -15,12 +15,13 @@ def _workspace_root(workspace_root: Path | None = None) -> Path:
 
 
 def _shared_lib_root() -> Path:
-    """Shared MicroPython stubs live under WORKSPACE_ROOT/lib; seed from bundle if missing (e.g. volume wiped)."""
-    lib = (config.WORKSPACE_ROOT.resolve() / LIB_DIR_NAME).resolve()
-    from editor_app.services.user_workspace import ensure_workspace_lib
+    """Shared MicroPython stubs ship in the repo `lib/` directory and are read directly.
 
-    ensure_workspace_lib()
-    return lib
+    Treating the bundle as the single source of truth means there is no on-disk
+    `workspace/lib/` cache to keep in sync — updates to e.g. `machine.py` flow
+    straight through to Pyodide and the file tree.
+    """
+    return (config.PROJECT_ROOT / LIB_DIR_NAME).resolve()
 
 
 def normalize_relative_path(relative_path: str) -> str:
@@ -55,16 +56,8 @@ def resolve_workspace_path(relative_path: str, workspace_root: Path | None = Non
 
 
 def _is_path_in_lib(target_path: Path, workspace_root: Path | None = None) -> bool:
-    workspace = _workspace_root(workspace_root)
-    lib_root = (workspace / LIB_DIR_NAME).resolve()
-    shared_lib_root = _shared_lib_root()
     try:
-        target_path.resolve().relative_to(lib_root)
-        return True
-    except ValueError:
-        pass
-    try:
-        target_path.resolve().relative_to(shared_lib_root)
+        target_path.resolve().relative_to(_shared_lib_root())
         return True
     except ValueError:
         return False
diff --git a/src/editor_app/services/user_workspace.py b/src/editor_app/services/user_workspace.py
index fe83c8f..3f3b6f7 100644
--- a/src/editor_app/services/user_workspace.py
+++ b/src/editor_app/services/user_workspace.py
@@ -16,22 +16,6 @@ _CANONICAL_DEMO_FILENAMES = (
 )
 
 
-def ensure_workspace_lib(workspace_root: Path | None = None) -> None:
-    """Copy shipped MicroPython stubs from the repo into WORKSPACE_ROOT/lib when each file is absent."""
-    dst_root = (workspace_root or config.WORKSPACE_ROOT).resolve() / "lib"
-    dst_root.mkdir(parents=True, exist_ok=True)
-    src_root = config.PROJECT_ROOT.resolve() / "lib"
-    if not src_root.is_dir():
-        return
-    for src in sorted(src_root.glob("*.py")):
-        if not src.is_file():
-            continue
-        dst = dst_root / src.name
-        if dst.exists():
-            continue
-        shutil.copy2(src, dst)
-
-
 def safe_workspace_leaf(username: str, user_id: int) -> str:
     base = re.sub(r"[^a-zA-Z0-9._-]+", "-", username.strip()).strip("-").lower() or "user"
     return f"{base}-{user_id}"
diff --git a/src/static/bundled-lib/machine.py b/src/static/bundled-lib/machine.py
new file mode 100644
index 0000000..e95ef95
--- /dev/null
+++ b/src/static/bundled-lib/machine.py
@@ -0,0 +1,419 @@
+"""Minimal MicroPython-style machine module mock for browser simulation."""
+
+import json
+
+
+_PIN_MODE_OUT = 1
+_PIN_MODE_IN = 2
+_PIN_MODE_PWM = 4
+
+
+def _pin_view_get(name):
+    try:
+        import js
+
+        return getattr(js, name, None)
+    except Exception:
+        return None
+
+
+def _pin_out_publish(pin_id, ui_mode, value):
+    """Pack [ui_mode (high byte) | value (low 24 bits)] for the UI panel."""
+    view = _pin_view_get("__pin_out_view")
+    if view is None:
+        return
+    packed = ((int(ui_mode) & 0xFF) << 24) | (int(value) & 0x00FFFFFF)
+    try:
+        import js
+
+        js.Atomics.store(view, int(pin_id), packed)
+    except Exception:
+        try:
+            view[int(pin_id)] = packed
+        except Exception:
+            pass
+
+
+def _pin_in_read(pin_id):
+    view = _pin_view_get("__pin_in_view")
+    if view is None:
+        return 0
+    try:
+        import js
+
+        return int(js.Atomics.load(view, int(pin_id))) & 1
+    except Exception:
+        try:
+            return int(view[int(pin_id)]) & 1
+        except Exception:
+            return 0
+
+
+def _pin_register(pin_id, ui_mode, **extra):
+    payload = {"pin": int(pin_id), "mode": int(ui_mode)}
+    payload.update({k: v for k, v in extra.items() if v is not None})
+    try:
+        print("[pin-register]" + json.dumps(payload))
+    except Exception:
+        pass
+
+
+class Pin:
+    """Browser-simulated `machine.Pin`.
+
+    A control row appears in the editor UI when a pin is constructed:
+      * `Pin.OUT` pins show a live indicator that mirrors `value()`.
+      * `Pin.IN` pins show a toggle button you can click — the next call
+        to `value()` returns 0 or 1 accordingly.
+    """
+
+    IN = 0
+    OUT = 1
+    PULL_UP = 2
+    PULL_DOWN = 3
+    OPEN_DRAIN = 7
+
+    IRQ_FALLING = 1
+    IRQ_RISING = 2
+
+    def __init__(self, pin_id, mode=OUT, pull=-1, value=None, **_kwargs):
+        self.id = int(pin_id)
+        self.mode = int(mode)
+        self.pull = int(pull) if pull != -1 else -1
+        self._value = 1 if value else 0
+        self._irq_handler = None
+        self._irq_trigger = 0
+        self._last_input = 0
+        self._publish()
+
+    def _ui_mode(self):
+        if self.mode == self.IN:
+            return _PIN_MODE_IN
+        return _PIN_MODE_OUT
+
+    def _publish(self):
+        ui_mode = self._ui_mode()
+        _pin_register(self.id, ui_mode, pull=self.pull if self.pull != -1 else None)
+        if ui_mode == _PIN_MODE_OUT:
+            _pin_out_publish(self.id, ui_mode, self._value)
+
+    def init(self, mode=-1, pull=-1, value=None):
+        if mode != -1:
+            self.mode = int(mode)
+        if pull != -1:
+            self.pull = int(pull)
+        if value is not None:
+            self._value = 1 if int(value) else 0
+        self._publish()
+
+    def value(self, new_value=None):
+        if new_value is None:
+            if self.mode == self.IN:
+                v = _pin_in_read(self.id)
+                if self._irq_handler is not None:
+                    if v and not self._last_input and (self._irq_trigger & self.IRQ_RISING):
+                        self._fire_irq()
+                    elif not v and self._last_input and (self._irq_trigger & self.IRQ_FALLING):
+                        self._fire_irq()
+                self._last_input = v
+                return v
+            return self._value
+        v = 1 if int(new_value) else 0
+        self._value = v
+        if self._ui_mode() == _PIN_MODE_OUT:
+            _pin_out_publish(self.id, _PIN_MODE_OUT, v)
+        return v
+
+    def on(self):
+        return self.value(1)
+
+    def off(self):
+        return self.value(0)
+
+    def high(self):
+        return self.value(1)
+
+    def low(self):
+        return self.value(0)
+
+    def toggle(self):
+        return self.value(0 if (self._value if self.mode == self.OUT else _pin_in_read(self.id)) else 1)
+
+    def irq(self, handler=None, trigger=IRQ_RISING | IRQ_FALLING, **_kwargs):
+        self._irq_handler = handler
+        self._irq_trigger = int(trigger)
+        return self
+
+    def _fire_irq(self):
+        if self._irq_handler is None:
+            return
+        try:
+            self._irq_handler(self)
+        except Exception as exc:
+            try:
+                print(f"[pin] irq handler raised: {exc!r}")
+            except Exception:
+                pass
+
+    def __call__(self, *args):
+        return self.value(*args) if args else self.value()
+
+
+class PWM:
+    """Browser-simulated `machine.PWM`.
+
+    Visualises the configured duty cycle as a bar in the Pins panel.
+    `freq()` and `duty()`/`duty_u16()`/`duty_ns()` mirror MicroPython's API.
+    """
+
+    def __init__(self, pin, freq=1000, duty=None, duty_u16=None, duty_ns=None):
+        self._pin_id = _adc_pin_id(pin)
+        self._freq = int(freq) if freq else 1000
+        self._duty_u16 = 0
+        if duty_u16 is not None:
+            self._duty_u16 = max(0, min(65535, int(duty_u16)))
+        elif duty is not None:
+            self._duty_u16 = max(0, min(65535, int(duty) * 64))
+        elif duty_ns is not None:
+            self._set_duty_ns(int(duty_ns))
+        _pin_register(self._pin_id, _PIN_MODE_PWM, freq=self._freq)
+        _pin_out_publish(self._pin_id, _PIN_MODE_PWM, self._duty_u16)
+
+    def _set_duty_ns(self, ns):
+        period_ns = 1_000_000_000 // max(1, self._freq)
+        if period_ns <= 0:
+            self._duty_u16 = 0
+            return
+        self._duty_u16 = max(0, min(65535, int(ns) * 65535 // period_ns))
+
+    def freq(self, value=None):
+        if value is None:
+            return self._freq
+        self._freq = max(1, int(value))
+        _pin_register(self._pin_id, _PIN_MODE_PWM, freq=self._freq)
+
+    def duty(self, value=None):
+        if value is None:
+            return self._duty_u16 // 64
+        self._duty_u16 = max(0, min(65535, int(value) * 64))
+        _pin_out_publish(self._pin_id, _PIN_MODE_PWM, self._duty_u16)
+
+    def duty_u16(self, value=None):
+        if value is None:
+            return self._duty_u16
+        self._duty_u16 = max(0, min(65535, int(value)))
+        _pin_out_publish(self._pin_id, _PIN_MODE_PWM, self._duty_u16)
+
+    def duty_ns(self, value=None):
+        period_ns = 1_000_000_000 // max(1, self._freq)
+        if value is None:
+            return (self._duty_u16 * period_ns) // 65535
+        self._set_duty_ns(int(value))
+        _pin_out_publish(self._pin_id, _PIN_MODE_PWM, self._duty_u16)
+
+    def deinit(self):
+        _pin_out_publish(self._pin_id, 0, 0)
+
+
+def _adc_pin_id(pin):
+    if isinstance(pin, int):
+        return pin
+    return int(getattr(pin, "id", 0))
+
+
+def _adc_read_raw(pin_id: int) -> int:
+    """Read the live slider value (0..65535) shared from the editor UI.
+
+    Backed by a SharedArrayBuffer so updates from the browser slider propagate
+    instantly without the script having to yield. Falls back to 0 when the
+    runtime is not cross-origin isolated (e.g. older browsers).
+    """
+    try:
+        import js  # only available inside Pyodide
+
+        view = getattr(js, "__adc_view", None)
+        if view is None:
+            return 0
+        try:
+            return int(js.Atomics.load(view, pin_id)) & 0xFFFF
+        except Exception:
+            return int(view[pin_id]) & 0xFFFF
+    except Exception:
+        return 0
+
+
+class ADC:
+    """Browser-simulated `machine.ADC`.
+
+    Exposes a slider in the editor UI for the given pin. `read_u16()` returns
+    the slider value in the 0..65535 range (matching MicroPython's API);
+    `read()` scales to the configured `width` (defaults to 12-bit, 0..4095).
+    """
+
+    WIDTH_9BIT = 9
+    WIDTH_10BIT = 10
+    WIDTH_11BIT = 11
+    WIDTH_12BIT = 12
+    ATTN_0DB = 0
+    ATTN_2_5DB = 1
+    ATTN_6DB = 2
+    ATTN_11DB = 3
+
+    def __init__(self, pin):
+        self._pin = _adc_pin_id(pin)
+        self._atten = self.ATTN_11DB
+        self._width = self.WIDTH_12BIT
+        try:
+            print("[adc-register]" + json.dumps({"pin": self._pin}))
+        except Exception:
+            pass
+
+    def atten(self, attn):
+        self._atten = int(attn)
+
+    def width(self, width):
+        self._width = int(width)
+
+    def read_u16(self):
+        return _adc_read_raw(self._pin)
+
+    def read(self):
+        bits = self._width if self._width in (9, 10, 11, 12) else 12
+        max_val = (1 << bits) - 1
+        return (_adc_read_raw(self._pin) * max_val) // 65535
+
+    def read_uv(self):
+        """Return microvolts assuming a 0..3.3V range (rough simulation)."""
+        return (_adc_read_raw(self._pin) * 3_300_000) // 65535
+
+
+def _serial_drain_pending(buf):
+    """Pull any bytes the editor's serial-monitor has pushed into the SAB ring."""
+    try:
+        import js
+        import base64  # noqa: F401  (kept for symmetry with write path)
+
+        indices = getattr(js, "__serial_in_indices", None)
+        data = getattr(js, "__serial_in_data", None)
+        if indices is None or data is None:
+            return
+        cap = int(getattr(js, "__serial_in_capacity", 0))
+        if cap <= 0:
+            return
+        r = int(js.Atomics.load(indices, 0))
+        w = int(js.Atomics.load(indices, 1))
+        while r != w:
+            buf.append(int(data[r]) & 0xFF)
+            r = (r + 1) % cap
+        js.Atomics.store(indices, 0, r)
+    except Exception:
+        pass
+
+
+class UART:
+    """Browser-simulated `machine.UART`.
+
+    A serial monitor pane appears in the editor when this is constructed.
+    `write()` text shows up there; characters typed into the input box arrive
+    via `read()` / `readline()` / `any()`.
+    """
+
+    INV_TX = 1
+    INV_RX = 2
+    INV_RTS = 4
+    INV_CTS = 8
+
+    def __init__(self, id=0, baudrate=115200, bits=8, parity=None, stop=1,
+                 tx=None, rx=None, timeout=0, **_kwargs):
+        self.id = int(id) if id is not None else 0
+        self.baudrate = int(baudrate)
+        self.bits = int(bits)
+        self.parity = parity
+        self.stop = int(stop)
+        self.tx = tx
+        self.rx = rx
+        self.timeout = int(timeout) if timeout is not None else 0
+        self._buf = bytearray()
+        try:
+            print("[serial-register]" + json.dumps({
+                "id": self.id,
+                "baudrate": self.baudrate,
+            }))
+        except Exception:
+            pass
+
+    def init(self, *args, **kwargs):
+        if args:
+            try:
+                self.baudrate = int(args[0])
+            except Exception:
+                pass
+        if "baudrate" in kwargs:
+            self.baudrate = int(kwargs["baudrate"])
+
+    def deinit(self):
+        self._buf = bytearray()
+
+    def any(self):
+        _serial_drain_pending(self._buf)
+        return len(self._buf)
+
+    def read(self, nbytes=None):
+        _serial_drain_pending(self._buf)
+        if not self._buf:
+            return None
+        if nbytes is None:
+            out = bytes(self._buf)
+            self._buf = bytearray()
+            return out
+        n = min(int(nbytes), len(self._buf))
+        if n <= 0:
+            return None
+        out = bytes(self._buf[:n])
+        del self._buf[:n]
+        return out
+
+    def readinto(self, buf, nbytes=None):
+        n = int(nbytes) if nbytes is not None else len(buf)
+        data = self.read(n)
+        if not data:
+            return None
+        for i, b in enumerate(data):
+            buf[i] = b
+        return len(data)
+
+    def readline(self):
+        _serial_drain_pending(self._buf)
+        if not self._buf:
+            return None
+        nl = self._buf.find(b"\n")
+        if nl == -1:
+            return None
+        out = bytes(self._buf[: nl + 1])
+        del self._buf[: nl + 1]
+        return out
+
+    def write(self, data):
+        if isinstance(data, str):
+            buf = data.encode("utf-8")
+        elif isinstance(data, (bytes, bytearray, memoryview)):
+            buf = bytes(data)
+        else:
+            buf = bytes([int(data) & 0xFF])
+        try:
+            import base64
+
+            encoded = base64.b64encode(buf).decode("ascii")
+            print(f"[serial-out]{encoded}")
+        except Exception:
+            pass
+        return len(buf)
+
+    def sendbreak(self):
+        pass
+
+    def flush(self):
+        pass
+
+    def txdone(self):
+        return True
diff --git a/workspace/lib/neopixel.py b/src/static/bundled-lib/neopixel.py
similarity index 100%
rename from workspace/lib/neopixel.py
rename to src/static/bundled-lib/neopixel.py
diff --git a/src/static/home.html b/src/static/home.html
index bba1ebe..aa17f2c 100644
--- a/src/static/home.html
+++ b/src/static/home.html
@@ -15,570 +15,152 @@
       font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif;
       background: linear-gradient(135deg, #0f172a, #1e293b);
       color: #e2e8f0;
+      padding: 1rem;
     }
     .home-card {
-      width: min(560px, 92vw);
+      width: min(420px, 100%);
       background: rgba(15, 23, 42, 0.78);
       border: 1px solid rgba(148, 163, 184, 0.25);
       border-radius: 14px;
       padding: 2rem;
       box-shadow: 0 20px 45px rgba(0, 0, 0, 0.35);
+      text-align: center;
+    }
+    h1 {
+      margin: 0 0 0.5rem 0;
+      font-size: 1.9rem;
+      color: #f8fafc;
+      letter-spacing: 0.02em;
+    }
+    p.tagline {
+      margin: 0 0 1.75rem 0;
+      color: #94a3b8;
+      font-size: 0.95rem;
+    }
+    .actions {
+      display: grid;
+      gap: 0.65rem;
     }
-    h1 { margin: 0 0 0.75rem 0; font-size: 1.8rem; color: #f8fafc; }
-    p { margin: 0 0 1rem 0; color: #cbd5e1; line-height: 1.5; }
     .btn {
-      display: inline-block;
+      display: block;
+      width: 100%;
       text-decoration: none;
-      border-radius: 8px;
-      padding: 0.65rem 1rem;
+      border-radius: 10px;
+      padding: 0.85rem 1rem;
       font-weight: 600;
       border: 1px solid transparent;
       cursor: pointer;
       font-size: 1rem;
+      text-align: center;
     }
     .btn-primary { background: #3b82f6; color: #ffffff; }
-    .btn-ghost { background: transparent; border-color: #64748b; color: #e2e8f0; }
-    label { display: block; font-size: 0.85rem; color: #94a3b8; margin-bottom: 0.35rem; }
-    input[type="password"] {
-      width: 100%;
-      padding: 0.5rem 0.65rem;
-      border-radius: 8px;
-      border: 1px solid #64748b;
-      background: #0f172a;
-      color: #e2e8f0;
-      margin-bottom: 0.75rem;
-    }
-    .note { font-size: 0.8rem; color: #94a3b8; margin-top: 1rem; }
-    .nav { display: flex; flex-wrap: wrap; gap: 0.5rem; margin-bottom: 1rem; align-items: center; }
-    .nav span { color: #94a3b8; font-size: 0.9rem; }
-    .hidden { display: none !important; }
-    .invite-panel {
-      margin: 1rem 0;
-      padding: 0.9rem;
-      border: 1px solid rgba(148, 163, 184, 0.35);
-      border-radius: 10px;
-      background: rgba(30, 41, 59, 0.45);
-    }
-    .invite-row {
-      display: flex;
-      gap: 0.5rem;
-      flex-wrap: wrap;
-      margin-top: 0.4rem;
-    }
-    .invite-row input[type="email"] {
-      flex: 1 1 260px;
-      width: auto;
-      margin: 0;
-    }
-    .invite-row button {
-      margin: 0;
-    }
-    .invite-result {
-      margin-top: 0.55rem;
-      font-size: 0.85rem;
-      color: #cbd5e1;
-      word-break: break-all;
-    }
-    .users-panel {
-      margin: 1rem 0;
-      padding: 0.9rem;
-      border: 1px solid rgba(148, 163, 184, 0.35);
-      border-radius: 10px;
-      background: rgba(30, 41, 59, 0.45);
-    }
-    .users-list {
-      margin-top: 0.5rem;
-      display: grid;
-      gap: 0.45rem;
-    }
-    .user-row {
-      display: flex;
-      justify-content: space-between;
-      align-items: center;
-      gap: 0.5rem;
-      font-size: 0.9rem;
-    }
-    .user-row a {
-      color: #93c5fd;
-      text-decoration: none;
-      border: 1px solid rgba(147, 197, 253, 0.35);
-      border-radius: 6px;
-      padding: 0.25rem 0.5rem;
-    }
-    .user-actions {
-      display: flex;
-      flex-wrap: wrap;
-      gap: 0.35rem;
-      align-items: center;
-      justify-content: flex-end;
-    }
-    .btn-danger {
+    .btn-primary:hover { background: #2563eb; }
+    .btn-ghost {
       background: transparent;
-      border-color: #f87171;
-      color: #fecaca;
-    }
-    .btn-danger:hover:not(:disabled) {
-      background: rgba(248, 113, 113, 0.15);
-    }
-    .btn:disabled {
-      opacity: 0.45;
-      cursor: not-allowed;
-    }
-    #admin-users-feedback:not(:empty) {
-      padding: 0.5rem 0.65rem;
-      border-radius: 8px;
-      font-size: 0.85rem;
-      margin: 0.5rem 0;
-    }
-    #admin-users-feedback.ok {
-      background: rgba(34, 197, 94, 0.12);
-      border: 1px solid rgba(74, 222, 128, 0.35);
-      color: #bbf7d0;
-    }
-    #admin-users-feedback.err {
-      background: rgba(248, 113, 113, 0.1);
-      border: 1px solid rgba(248, 113, 113, 0.35);
-      color: #fecaca;
-    }
-    .user-edit-form {
-      margin-top: 1rem;
-      padding-top: 1rem;
-      border-top: 1px solid rgba(148, 163, 184, 0.25);
-    }
-    .user-edit-form label {
-      display: block;
-      margin-bottom: 0.65rem;
-    }
-    .user-edit-form input[type='text'],
-    .user-edit-form input[type='password'] {
-      width: 100%;
-      max-width: 320px;
-      padding: 0.45rem 0.55rem;
-      border-radius: 8px;
-      border: 1px solid #64748b;
-      background: #0f172a;
+      border-color: #475569;
       color: #e2e8f0;
-      margin-top: 0.25rem;
-      box-sizing: border-box;
     }
-    .user-edit-form .edit-actions {
-      display: flex;
-      flex-wrap: wrap;
-      gap: 0.5rem;
-      margin-top: 0.65rem;
-    }
-    .user-edit-form .super-line {
-      display: flex;
-      align-items: center;
-      gap: 0.5rem;
+    .btn-ghost:hover { background: rgba(71, 85, 105, 0.25); }
+    .btn-link {
+      background: transparent;
+      border: none;
+      color: #93c5fd;
       font-size: 0.85rem;
-      color: #cbd5e1;
-      margin-bottom: 0.65rem;
+      cursor: pointer;
+      padding: 0.4rem;
+      text-decoration: underline;
     }
-    .user-edit-form .super-line input {
-      accent-color: #3b82f6;
+    .signed-in {
+      font-size: 0.85rem;
+      color: #94a3b8;
+      margin-bottom: 0.6rem;
     }
+    .hidden { display: none !important; }
+    .footnote {
+      margin-top: 1.25rem;
+      font-size: 0.78rem;
+      color: #64748b;
+      line-height: 1.4;
+    }
+    .footnote a { color: #93c5fd; text-decoration: none; }
+    .footnote a:hover { text-decoration: underline; }
   </style>
 </head>
 <body>
   <main class="home-card">
     <h1>LED Editor</h1>
-    <div id="auth-nav" class="nav">
-      <span id="auth-greeting" class="hidden"></span>
-      <a class="btn btn-ghost hidden" id="link-login" href="/login">Sign in</a>
-      <a class="btn btn-ghost hidden" id="link-register" href="/register">Register</a>
-      <button type="button" class="btn btn-ghost hidden" id="btn-logout">Sign out</button>
-    </div>
-    <p>Edit and store files on the server. Python runs in your browser with <a href="https://pyodide.org/" style="color:#93c5fd">Pyodide</a>. Choose Editor or the interactive Tutorial below.</p>
-    <div id="optional-api-key">
-      <p>If you use <code style="color:#fcd34d">EDITOR_API_KEY</code> (without user login), store it here for API calls from this browser tab:</p>
-      <label for="api-key">API key (optional)</label>
-      <input id="api-key" type="password" autocomplete="off" placeholder="Leave blank if not used" />
-      <p class="note">The key is kept in <code>sessionStorage</code>. You can also use <code>?api_key=…</code> on the editor URL.</p>
-    </div>
-    <section id="users-panel" class="users-panel hidden">
-      <strong>User management</strong>
-      <p class="note" style="margin-top:0.35rem">
-        New accounts sign up via an <strong>invite link</strong> below. Remove accounts here or open their workspace.
-      </p>
-      <div id="admin-users-feedback" role="status" aria-live="polite"></div>
-      <p style="margin: 1rem 0 0.35rem 0; font-size: 0.9rem; color: #94a3b8">Accounts</p>
-      <div id="users-list" class="users-list"></div>
-      <div id="user-edit-form" class="user-edit-form hidden">
-        <strong id="user-edit-heading">Edit account</strong>
-        <p class="note" style="margin: 0.35rem 0 0.5rem">Change login name or admin role; set a password only when you mean to reset it.</p>
-        <input type="hidden" id="edit-user-id" autocomplete="off" />
-        <label for="edit-user-username">
-          Username
-          <input type="text" id="edit-user-username" name="username" autocomplete="username" minlength="3" maxlength="64" />
-        </label>
-        <label for="edit-user-password">
-          New password
-          <input type="password" id="edit-user-password" name="password" autocomplete="new-password" minlength="8" maxlength="128" placeholder="Leave blank to keep current" />
-        </label>
-        <label class="super-line">
-          <input type="checkbox" id="edit-user-super" />
-          Superuser (can manage accounts and invites)
-        </label>
-        <div class="edit-actions">
-          <button type="button" class="btn btn-primary" id="edit-user-save">Save changes</button>
-          <button type="button" class="btn btn-ghost" id="edit-user-cancel">Cancel</button>
-        </div>
-      </div>
-    </section>
-    <section id="invite-panel" class="invite-panel hidden">
-      <strong>Add users via invite link</strong>
-      <p class="note" style="margin-top:0.4rem">
-        Each link lets <strong>one</strong> person create their own account at <code>/register?invite=…</code> with a password they choose. After it is used, create a new link for the next person.
-      </p>
-      <div class="invite-row">
-        <input id="invite-email" type="email" placeholder="new.user@example.com" autocomplete="email" />
-        <button type="button" class="btn btn-primary" id="invite-create-btn">Email invite</button>
-        <button type="button" class="btn btn-ghost" id="invite-link-btn">Invite link only</button>
-      </div>
-      <div id="invite-result" class="invite-result"></div>
-      <button type="button" class="btn btn-ghost hidden" id="invite-copy-btn" aria-label="Copy invite link">Copy invite link</button>
-    </section>
-    <div class="nav">
-      <a class="btn btn-primary" href="/editor" id="open-editor">Open Editor</a>
-      <a class="btn btn-ghost" href="/tutorial" id="open-tutorial">Open Tutorial</a>
+    <p class="tagline">Run MicroPython in your browser. Drive simulated NeoPixels, pins, ADC, and serial.</p>
+
+    <div id="signed-in-row" class="signed-in hidden"></div>
+
+    <div class="actions">
+      <a class="btn btn-primary hidden" id="btn-signin" href="/login">Sign in</a>
+      <a class="btn btn-primary hidden" id="btn-open-editor" href="/editor">Open editor</a>
+      <a class="btn btn-ghost" id="btn-use-locally" href="/editor?local=1">Use locally (no login)</a>
+      <a class="btn-link hidden" id="btn-manage-users" href="/users">Manage users</a>
+      <button type="button" class="btn-link hidden" id="btn-signout">Sign out</button>
     </div>
+
+    <p class="footnote">
+      Local mode keeps files in this browser's <code>IndexedDB</code>; from the editor you can also pick a folder on disk
+      (<a href="https://developer.mozilla.org/en-US/docs/Web/API/File_System_Access_API" target="_blank" rel="noopener">File System Access API</a>, Chromium-only).
+    </p>
   </main>
   <script>
-    const storageKey = 'python-editor.api_key';
-    const input = document.getElementById('api-key');
-    const openLink = document.getElementById('open-editor');
-    let currentAdminUserId = null;
+    async function init() {
+      const signedInRow = document.getElementById('signed-in-row');
+      const btnSignIn = document.getElementById('btn-signin');
+      const btnOpenEditor = document.getElementById('btn-open-editor');
+      const btnSignOut = document.getElementById('btn-signout');
+      const btnManageUsers = document.getElementById('btn-manage-users');
 
-    function formatApiDetail(body) {
-      if (!body || body.detail === undefined || body.detail === null) return '';
-      const d = body.detail;
-      if (typeof d === 'string') return d;
-      if (Array.isArray(d))
-        return d
-          .map((item) =>
-            typeof item === 'object' && item && item.msg ? String(item.msg) : JSON.stringify(item)
-          )
-          .join(' ');
-      return String(d);
-    }
+      let authEnabled = false;
+      try {
+        const st = await fetch('/api/auth/status');
+        if (st.ok) {
+          const status = await st.json();
+          authEnabled = Boolean(status.auth_enabled);
+        }
+      } catch (_e) {
+        // No backend (static-only host) → behave like auth disabled.
+      }
 
-    function setAdminUsersFeedback(kind, msg) {
-      const el = document.getElementById('admin-users-feedback');
-      if (!el) return;
-      el.textContent = msg || '';
-      el.classList.remove('ok', 'err');
-      if (kind === 'ok') el.classList.add('ok');
-      if (kind === 'err') el.classList.add('err');
-    }
-
-    async function refreshAuthNav() {
-      const st = await fetch('/api/auth/status');
-      const status = await st.json();
-      const loginEl = document.getElementById('link-login');
-      const regEl = document.getElementById('link-register');
-      const outEl = document.getElementById('btn-logout');
-      const greet = document.getElementById('auth-greeting');
-      const optionalKey = document.getElementById('optional-api-key');
-      const invitePanel = document.getElementById('invite-panel');
-      const usersPanel = document.getElementById('users-panel');
-      if (!status.auth_enabled) {
-        currentAdminUserId = null;
-        loginEl.classList.add('hidden');
-        regEl.classList.add('hidden');
-        outEl.classList.add('hidden');
-        greet.classList.add('hidden');
-        if (invitePanel) invitePanel.classList.add('hidden');
-        if (usersPanel) usersPanel.classList.add('hidden');
+      if (!authEnabled) {
+        // No login wall, so "Sign in" makes no sense — go straight to editor.
+        btnOpenEditor.classList.remove('hidden');
         return;
       }
-      loginEl.classList.remove('hidden');
-      if (status.register_open) {
-        regEl.classList.remove('hidden');
-      }
-      const me = await fetch('/api/auth/me', { credentials: 'include' });
-      if (me.ok) {
-        const j = await me.json();
-        greet.textContent = `Signed in as ${j.user.username}`;
-        greet.classList.remove('hidden');
-        loginEl.classList.add('hidden');
-        regEl.classList.add('hidden');
-        outEl.classList.remove('hidden');
-        if (optionalKey) optionalKey.classList.add('hidden');
-        if (invitePanel) {
-          if (j.user && j.user.is_superuser) {
-            currentAdminUserId = j.user.id;
-            invitePanel.classList.remove('hidden');
-            if (usersPanel) usersPanel.classList.remove('hidden');
-            await refreshUsersList(j.user.id);
-          } else {
-            currentAdminUserId = null;
-            invitePanel.classList.add('hidden');
-            if (usersPanel) usersPanel.classList.add('hidden');
-          }
-        }
-      } else {
-        currentAdminUserId = null;
-        outEl.classList.add('hidden');
-        greet.classList.add('hidden');
-        if (invitePanel) invitePanel.classList.add('hidden');
-        if (usersPanel) usersPanel.classList.add('hidden');
-      }
-    }
 
-    async function refreshUsersList(viewerId) {
-      const usersList = document.getElementById('users-list');
-      if (!usersList) return;
-      usersList.textContent = 'Loading users...';
+      let me = null;
       try {
-        const res = await fetch('/api/users', { credentials: 'include' });
-        const users = await res.json().catch(() => []);
-        if (!res.ok) {
-          usersList.textContent = 'Unable to load users.';
-          return;
-        }
-        usersList.innerHTML = '';
-        for (const user of users) {
-          const row = document.createElement('div');
-          row.className = 'user-row';
-          const name = document.createElement('span');
-          name.textContent = `${user.username}${user.is_superuser ? ' (admin)' : ''}`;
-          const actions = document.createElement('div');
-          actions.className = 'user-actions';
-          const link = document.createElement('a');
-          link.href = `/editor?workspace_user_id=${encodeURIComponent(String(user.id))}`;
-          link.textContent = 'Open workspace';
-          const editBtn = document.createElement('button');
-          editBtn.type = 'button';
-          editBtn.className = 'btn btn-ghost';
-          editBtn.textContent = 'Edit';
-          editBtn.title = `Edit ${user.username}`;
-          editBtn.addEventListener('click', () => openUserEdit(user.id, user.username, user.is_superuser));
-          const delBtn = document.createElement('button');
-          delBtn.type = 'button';
-          delBtn.className = 'btn btn-ghost btn-danger';
-          delBtn.textContent = 'Remove';
-          const isSelf = Number(user.id) === Number(viewerId);
-          delBtn.disabled = isSelf;
-          delBtn.title = isSelf ? 'You cannot delete your own account here' : 'Permanently remove this user';
-          delBtn.addEventListener('click', async () => {
-            const ok = confirm(
-              `Remove user “${user.username}”? Their workspace folder stays on disk until you delete it manually.`
-            );
-            if (!ok) return;
-            delBtn.disabled = true;
-            setAdminUsersFeedback('', '');
-            try {
-              const dres = await fetch(`/api/users/${encodeURIComponent(String(user.id))}`, {
-                method: 'DELETE',
-                credentials: 'include'
-              });
-              const body = await dres.json().catch(() => ({}));
-              if (!dres.ok) {
-                setAdminUsersFeedback('err', formatApiDetail(body) || dres.statusText || 'Could not remove user');
-                delBtn.disabled = false;
-                return;
-              }
-              setAdminUsersFeedback('ok', `Removed ${user.username}.`);
-              await refreshUsersList(viewerId);
-            } catch (err) {
-              setAdminUsersFeedback('err', String(err.message || err));
-              delBtn.disabled = false;
-            }
-          });
-          actions.appendChild(editBtn);
-          actions.appendChild(link);
-          actions.appendChild(delBtn);
-          row.appendChild(name);
-          row.appendChild(actions);
-          usersList.appendChild(row);
-        }
-      } catch (_err) {
-        usersList.textContent = 'Unable to load users.';
+        const meRes = await fetch('/api/auth/me', { credentials: 'include' });
+        if (meRes.ok) me = (await meRes.json()).user;
+      } catch (_e) {
+        // ignore
       }
-    }
 
-    function closeUserEdit() {
-      const sheet = document.getElementById('user-edit-form');
-      if (sheet) sheet.classList.add('hidden');
-    }
-
-    function openUserEdit(userId, username, isSuperuser) {
-      document.getElementById('edit-user-id').value = String(userId);
-      document.getElementById('edit-user-username').value = username;
-      document.getElementById('edit-user-password').value = '';
-      document.getElementById('edit-user-super').checked = Boolean(isSuperuser);
-      document.getElementById('user-edit-heading').textContent = `Edit @${username}`;
-      document.getElementById('user-edit-form').classList.remove('hidden');
-    }
-
-    document.getElementById('edit-user-cancel').addEventListener('click', () => closeUserEdit());
-
-    document.getElementById('edit-user-save').addEventListener('click', async () => {
-      const id = document.getElementById('edit-user-id').value;
-      const u = document.getElementById('edit-user-username').value.trim();
-      const pw = document.getElementById('edit-user-password').value;
-      const superU = document.getElementById('edit-user-super').checked;
-      const saveBtn = document.getElementById('edit-user-save');
-      setAdminUsersFeedback('', '');
-      if (!u || u.length < 3) {
-        setAdminUsersFeedback('err', 'Username must be at least 3 characters.');
+      if (!me) {
+        btnSignIn.classList.remove('hidden');
         return;
       }
-      const payload = { username: u, is_superuser: superU };
-      const tpw = pw.trim();
-      if (tpw.length > 0) {
-        if (tpw.length < 8) {
-          setAdminUsersFeedback('err', 'New password must be at least 8 characters (or leave blank).');
-          return;
-        }
-        payload.password = tpw;
-      }
-      saveBtn.disabled = true;
-      try {
-        const res = await fetch(`/api/users/${encodeURIComponent(String(id))}`, {
-          method: 'PATCH',
-          credentials: 'include',
-          headers: { 'Content-Type': 'application/json' },
-          body: JSON.stringify(payload)
-        });
-        const body = await res.json().catch(() => ({}));
-        if (!res.ok) {
-          setAdminUsersFeedback('err', formatApiDetail(body) || res.statusText || 'Update failed');
-          saveBtn.disabled = false;
-          return;
-        }
-        setAdminUsersFeedback('ok', `Updated @${body.username}.`);
-        closeUserEdit();
-        await refreshUsersList(currentAdminUserId);
-      } catch (err) {
-        setAdminUsersFeedback('err', String(err.message || err));
-      }
-      saveBtn.disabled = false;
-    });
 
-    document.getElementById('btn-logout').addEventListener('click', async () => {
-      await fetch('/api/auth/logout', { method: 'POST', credentials: 'include' });
+      signedInRow.textContent = `Signed in as ${me.username}${me.is_superuser ? ' (admin)' : ''}`;
+      signedInRow.classList.remove('hidden');
+      btnOpenEditor.classList.remove('hidden');
+      btnSignOut.classList.remove('hidden');
+      if (me.is_superuser) btnManageUsers.classList.remove('hidden');
+    }
+
+    document.getElementById('btn-signout').addEventListener('click', async () => {
+      try {
+        await fetch('/api/auth/logout', { method: 'POST', credentials: 'include' });
+      } catch (_e) {
+        // ignore
+      }
       window.location.reload();
     });
 
-    try {
-      const params = new URLSearchParams(window.location.search);
-      const fromQuery = params.get('api_key');
-      if (fromQuery) {
-        sessionStorage.setItem(storageKey, fromQuery);
-      }
-      const existing = sessionStorage.getItem(storageKey);
-      if (existing) {
-        input.value = existing;
-      }
-    } catch (_e) {}
-    openLink.addEventListener('click', () => {
-      try {
-        const v = input.value.trim();
-        if (v) {
-          sessionStorage.setItem(storageKey, v);
-        } else {
-          sessionStorage.removeItem(storageKey);
-        }
-      } catch (_e) {}
-    });
-
-    function showInviteOutcome(inviteUrl, headline) {
-      const result = document.getElementById('invite-result');
-      const copyBtn = document.getElementById('invite-copy-btn');
-      result.textContent = '';
-      const line = document.createElement('p');
-      line.style.margin = '0 0 0.35rem 0';
-      line.textContent = headline;
-      const a = document.createElement('a');
-      a.href = inviteUrl;
-      a.textContent = inviteUrl;
-      a.style.color = '#93c5fd';
-      a.style.wordBreak = 'break-all';
-      result.appendChild(line);
-      result.appendChild(a);
-      copyBtn.classList.remove('hidden');
-      copyBtn.dataset.inviteUrl = inviteUrl;
-    }
-
-    function clearInviteOutcome() {
-      const result = document.getElementById('invite-result');
-      const copyBtn = document.getElementById('invite-copy-btn');
-      result.textContent = '';
-      copyBtn.classList.add('hidden');
-      copyBtn.textContent = 'Copy invite link';
-      delete copyBtn.dataset.inviteUrl;
-    }
-
-    document.getElementById('invite-copy-btn').addEventListener('click', async () => {
-      const copyBtn = document.getElementById('invite-copy-btn');
-      const url = copyBtn.dataset.inviteUrl;
-      if (!url) return;
-      try {
-        await navigator.clipboard.writeText(url);
-        copyBtn.textContent = 'Copied!';
-        setTimeout(() => {
-          copyBtn.textContent = 'Copy invite link';
-        }, 2000);
-      } catch (_e) {
-        copyBtn.textContent = 'Copy failed — select the link above';
-        setTimeout(() => {
-          copyBtn.textContent = 'Copy invite link';
-        }, 2500);
-      }
-    });
-
-    document.getElementById('invite-create-btn').addEventListener('click', async () => {
-      const emailInput = document.getElementById('invite-email');
-      const result = document.getElementById('invite-result');
-      const email = (emailInput.value || '').trim();
-      clearInviteOutcome();
-      if (!email) {
-        result.textContent = 'Enter an email address first.';
-        return;
-      }
-      try {
-        const res = await fetch('/api/users/invites', {
-          method: 'POST',
-          credentials: 'include',
-          headers: { 'Content-Type': 'application/json' },
-          body: JSON.stringify({ email, expires_days: 7 })
-        });
-        const body = await res.json().catch(() => ({}));
-        if (!res.ok) {
-          result.textContent = formatApiDetail(body) || res.statusText || 'Failed to create invite';
-          return;
-        }
-        const headline = body.delivered
-          ? 'Email sent. They can also use this link to register:'
-          : 'Email not sent (SMTP not configured). Share this registration link:';
-        showInviteOutcome(body.invite_url, headline);
-      } catch (err) {
-        result.textContent = String(err.message || err);
-      }
-    });
-    document.getElementById('invite-link-btn').addEventListener('click', async () => {
-      const result = document.getElementById('invite-result');
-      clearInviteOutcome();
-      try {
-        const res = await fetch('/api/users/invites', {
-          method: 'POST',
-          credentials: 'include',
-          headers: { 'Content-Type': 'application/json' },
-          body: JSON.stringify({ email: null, expires_days: 7 })
-        });
-        const body = await res.json().catch(() => ({}));
-        if (!res.ok) {
-          result.textContent = formatApiDetail(body) || res.statusText || 'Failed to create invite link';
-          return;
-        }
-        showInviteOutcome(body.invite_url, 'Share this link so they can create an account:');
-      } catch (err) {
-        result.textContent = String(err.message || err);
-      }
-    });
-    refreshAuthNav();
+    init();
   </script>
 </body>
 </html>
diff --git a/src/static/index.html b/src/static/index.html
index fd99601..afa9c9f 100644
--- a/src/static/index.html
+++ b/src/static/index.html
@@ -6,7 +6,7 @@
   <meta name="theme-color" content="#2d3748">
   <title>LED Editor</title>
   <link rel="icon" href="data:,">
-  <link rel="stylesheet" href="/static/styles.css?v=13">
+  <link rel="stylesheet" href="/static/styles.css?v=32">
 </head>
 <body>
   <div class="container">
@@ -28,27 +28,28 @@
 
     <div class="main-content">
       <div class="editor-header">
-        <button id="sidebar-toggle" class="sidebar-toggle" type="button" aria-label="Toggle file tree" aria-controls="sidebar" aria-expanded="false">☰</button>
+        <button id="sidebar-toggle" class="sidebar-toggle" type="button" aria-label="Toggle file tree" aria-controls="sidebar" aria-expanded="true" title="Toggle file browser"><span class="sidebar-toggle-icon" aria-hidden="true">‹</span></button>
         <div class="file-info">
           <span id="save-status" class="save-status"></span>
-          <span class="runtime-hint" title="Python runs locally in your browser via Pyodide; completions use Jedi in the same runtime.">Browser · Pyodide</span>
-          <span id="lsp-status" class="runtime-hint" title="Jedi in-browser diagnostics">LSP: n/a</span>
           <span id="workspace-badge" class="runtime-hint hidden"></span>
         </div>
-        <div class="mode-toggle">
-          <a id="home-btn" class="mode-btn active" href="/">Home</a>
-        </div>
         <div class="editor-actions">
-          <button id="run-btn" disabled>Run Python</button>
-          <button id="stop-btn" disabled>Stop</button>
-          <label for="run-main-checkbox" class="run-main-toggle">
-            <input type="checkbox" id="run-main-checkbox" />
-            Run `main.py`
-          </label>
-          <label for="panel-16x16-checkbox" class="run-main-toggle">
-            <input type="checkbox" id="panel-16x16-checkbox" />
-            16x16 panel
-          </label>
+          <button id="run-btn" class="icon-btn" disabled aria-label="Run" title="Run">▶</button>
+          <button id="stop-btn" class="icon-btn" disabled aria-label="Stop" title="Stop">■</button>
+          <details class="header-menu" id="header-menu">
+            <summary class="menu-toggle" aria-label="Editor options" title="Options">⋮</summary>
+            <div class="menu-content" role="menu">
+              <a href="/" class="menu-item" id="home-btn" role="menuitem">🏠 Home</a>
+              <label class="menu-item menu-checkbox">
+                <input type="checkbox" id="run-main-checkbox" />
+                Run main.py
+              </label>
+              <label class="menu-item menu-checkbox">
+                <input type="checkbox" id="panel-16x16-checkbox" />
+                16×16 panel
+              </label>
+            </div>
+          </details>
         </div>
       </div>
 
@@ -60,20 +61,47 @@
       </div>
 
       <section id="led-sim-panel" class="led-sim-panel hidden" aria-label="NeoPixel Simulator">
-        <div class="led-sim-header">
-          <h3>NeoPixel Simulator</h3>
-          <div class="led-sim-actions">
-            <button id="led-run-btn" type="button">Run</button>
-            <button id="led-stop-btn" type="button">Stop</button>
-            <button id="led-close-btn" type="button" aria-label="Close simulator">Close</button>
-          </div>
-        </div>
-        <div id="led-meta" class="led-meta">Waiting for neopixel.write()...</div>
         <div id="led-grid" class="led-grid"></div>
       </section>
 
-      <div class="console-container">
-        <div class="console-header">Console Output</div>
+      <section id="pin-panel" class="pin-panel hidden" aria-label="Pins">
+        <div class="pin-panel-header">
+          <span class="pin-panel-title">Pins</span>
+          <span class="pin-panel-hint">OUT shows live state · IN is clickable · PWM shows duty</span>
+        </div>
+        <div id="pin-rows" class="pin-rows"></div>
+      </section>
+
+      <section id="adc-panel" class="adc-panel hidden" aria-label="ADC inputs">
+        <div class="adc-panel-header">
+          <span class="adc-panel-title">ADC inputs</span>
+          <span class="adc-panel-hint">drag to set value (0–65535)</span>
+        </div>
+        <div id="adc-sliders" class="adc-sliders"></div>
+      </section>
+
+      <section id="serial-panel" class="serial-panel hidden" aria-label="Serial monitor">
+        <div class="serial-header">
+          <span class="serial-title">Serial monitor</span>
+          <span id="serial-meta" class="serial-meta"></span>
+          <button type="button" id="serial-clear" class="serial-clear" title="Clear">Clear</button>
+        </div>
+        <div id="serial-output" class="serial-output" aria-live="polite"></div>
+        <form id="serial-form" class="serial-form" autocomplete="off">
+          <input id="serial-input" type="text" class="serial-input" placeholder="Type and press Enter to send" />
+          <label class="serial-newline" title="Append \n on send">
+            <input type="checkbox" id="serial-newline-checkbox" checked />
+            <span>\n</span>
+          </label>
+          <button type="submit" class="serial-send">Send</button>
+        </form>
+      </section>
+
+      <div class="console-container" id="console-container">
+        <button type="button" class="console-header" id="console-toggle" aria-expanded="true" aria-controls="console-output">
+          <span class="chevron" aria-hidden="true">▾</span>
+          <span>Console Output</span>
+        </button>
         <pre id="console-output" class="console-output"></pre>
       </div>
     </div>
@@ -90,6 +118,6 @@
     </div>
   </div>
 
-  <script type="module" src="/static/script.js?v=27"></script>
+  <script type="module" src="/static/script.js?v=56"></script>
 </body>
 </html>
diff --git a/src/static/local-workspace.js b/src/static/local-workspace.js
new file mode 100644
index 0000000..2daa288
--- /dev/null
+++ b/src/static/local-workspace.js
@@ -0,0 +1,1032 @@
+/**
+ * Browser-local workspace, backed by IndexedDB or a user-picked folder
+ * (File System Access API, Chromium browsers).
+ *
+ * Used when the editor is opened in "no-login" mode (`?local=1` or the
+ * `python-editor.local-mode` localStorage flag). Mirrors the shape of the
+ * server file API so `apiFetch()` can dispatch through this client without
+ * the rest of the editor caring whether the workspace is remote or local.
+ *
+ * Backends:
+ *   - IndexedDBBackend (default, supported everywhere): stores files in
+ *     `led-editor-local-v1.files`, keyed by path.
+ *   - FileSystemBackend: stores files inside a `FileSystemDirectoryHandle`
+ *     the user picked via `window.showDirectoryPicker()`. The handle is
+ *     persisted in `led-editor-local-v1.meta` so it survives reloads;
+ *     permission is re-verified on each session.
+ *
+ * The bundled MicroPython stubs (`lib/`) are loaded once from
+ * `/static/bundled-lib/*.py` (or `/api/public/lib-bundle` as fallback) and
+ * served entirely from memory — they never touch the user's storage backend.
+ */
+
+import { createZip } from '/static/zip-utils.js?v=1';
+
+const DB_NAME = 'led-editor-local-v1';
+const DB_VERSION = 1;
+const META_FOLDER_HANDLE = 'folder-handle';
+const META_STORAGE_MODE = 'storage-mode';
+
+const DEFAULT_MAIN_PY = 'print("Hello, World!")\n';
+
+function openDb() {
+  return new Promise((resolve, reject) => {
+    const req = indexedDB.open(DB_NAME, DB_VERSION);
+    req.onupgradeneeded = () => {
+      const db = req.result;
+      if (!db.objectStoreNames.contains('files')) {
+        db.createObjectStore('files', { keyPath: 'path' });
+      }
+      if (!db.objectStoreNames.contains('meta')) {
+        db.createObjectStore('meta', { keyPath: 'key' });
+      }
+    };
+    req.onsuccess = () => resolve(req.result);
+    req.onerror = () => reject(req.error);
+  });
+}
+
+function txPromise(tx) {
+  return new Promise((resolve, reject) => {
+    tx.oncomplete = () => resolve();
+    tx.onabort = () => reject(tx.error);
+    tx.onerror = () => reject(tx.error);
+  });
+}
+
+function reqPromise(req) {
+  return new Promise((resolve, reject) => {
+    req.onsuccess = () => resolve(req.result);
+    req.onerror = () => reject(req.error);
+  });
+}
+
+function jsonResponse(status, body) {
+  return new Response(JSON.stringify(body), {
+    status,
+    headers: { 'Content-Type': 'application/json' },
+  });
+}
+
+function normalizePath(input) {
+  let cleaned = String(input || '').trim().replace(/^\/+/, '');
+  if (!cleaned) return '';
+  const parts = cleaned.split('/').filter(Boolean);
+  while (parts.length >= 2 && parts[0] === 'code' && parts[1] === 'code') {
+    parts.splice(1, 1);
+  }
+  return parts.join('/');
+}
+
+function basename(path) {
+  if (!path) return '';
+  const idx = path.lastIndexOf('/');
+  return idx === -1 ? path : path.slice(idx + 1);
+}
+
+function isLibPath(path) {
+  return path === 'lib' || path === 'lib/' || path.startsWith('lib/');
+}
+
+function isWritablePath(path) {
+  if (!path) return false;
+  const root = path.split('/')[0];
+  return root === 'code';
+}
+
+function splitParts(path) {
+  return path.split('/').filter(Boolean);
+}
+
+/* ------------------------------------------------------------------ */
+/*  Storage backends                                                  */
+/* ------------------------------------------------------------------ */
+
+/**
+ * IndexedDB backend — schema:
+ *   { path: "code/foo/bar.py", is_directory: false, content: "...", updated_at: 0 }
+ * Folders get their own rows so empty directories survive.
+ */
+class IndexedDbBackend {
+  constructor(dbPromise) {
+    this.dbPromise = dbPromise;
+  }
+
+  static get id() {
+    return 'indexeddb';
+  }
+
+  describe() {
+    return 'Browser storage (IndexedDB)';
+  }
+
+  async _all() {
+    const db = await this.dbPromise;
+    const tx = db.transaction('files', 'readonly');
+    const req = tx.objectStore('files').getAll();
+    return reqPromise(req);
+  }
+
+  async _get(path) {
+    const db = await this.dbPromise;
+    const tx = db.transaction('files', 'readonly');
+    const req = tx.objectStore('files').get(path);
+    return reqPromise(req);
+  }
+
+  async _put(entry) {
+    const db = await this.dbPromise;
+    const tx = db.transaction('files', 'readwrite');
+    tx.objectStore('files').put(entry);
+    return txPromise(tx);
+  }
+
+  async _ensureAncestorDirs(path) {
+    const segs = splitParts(path).slice(0, -1);
+    if (!segs.length) return;
+    const db = await this.dbPromise;
+    const tx = db.transaction('files', 'readwrite');
+    const store = tx.objectStore('files');
+    let acc = '';
+    for (const seg of segs) {
+      acc = acc ? `${acc}/${seg}` : seg;
+      store.put({ path: acc, is_directory: true, content: null, updated_at: Date.now() });
+    }
+    return txPromise(tx);
+  }
+
+  async ensureSeed() {
+    const existing = await this._get('code/main.py');
+    if (existing) return;
+    await this._ensureAncestorDirs('code/main.py');
+    await this._put({
+      path: 'code/main.py',
+      is_directory: false,
+      content: DEFAULT_MAIN_PY,
+      updated_at: Date.now(),
+    });
+  }
+
+  async listDir(path) {
+    const all = await this._all();
+    const byPath = new Map(all.map((row) => [row.path, row]));
+    if (!path) {
+      const seen = new Set();
+      const result = [];
+      for (const row of all) {
+        if (!row.path || row.path.startsWith('users/') || row.path === 'users') continue;
+        if (row.path.startsWith('lib/') || row.path === 'lib') continue;
+        const top = row.path.split('/')[0];
+        if (seen.has(top)) continue;
+        seen.add(top);
+        const entry = byPath.get(top);
+        const isDir = entry ? Boolean(entry.is_directory) : true;
+        result.push({
+          name: top,
+          is_directory: isDir,
+          size: isDir ? null : (entry && entry.content ? entry.content.length : 0),
+        });
+      }
+      return result;
+    }
+    const target = byPath.get(path);
+    if (!target || !target.is_directory) return null;
+    const prefix = `${path}/`;
+    const seen = new Set();
+    const result = [];
+    for (const row of all) {
+      if (!row.path.startsWith(prefix)) continue;
+      const rest = row.path.slice(prefix.length);
+      if (!rest) continue;
+      const nextSeg = rest.split('/')[0];
+      if (seen.has(nextSeg)) continue;
+      seen.add(nextSeg);
+      const childPath = `${prefix}${nextSeg}`;
+      const child = byPath.get(childPath);
+      const isDir = child ? Boolean(child.is_directory) : true;
+      result.push({
+        name: nextSeg,
+        is_directory: isDir,
+        size: isDir ? null : (child && child.content ? child.content.length : 0),
+      });
+    }
+    return result;
+  }
+
+  async readFile(path) {
+    const entry = await this._get(path);
+    if (!entry) return { kind: 'missing' };
+    if (entry.is_directory) return { kind: 'directory' };
+    return { kind: 'file', content: entry.content == null ? '' : String(entry.content) };
+  }
+
+  async writeFile(path, content) {
+    await this._ensureAncestorDirs(path);
+    await this._put({
+      path,
+      is_directory: false,
+      content,
+      updated_at: Date.now(),
+    });
+  }
+
+  async deleteFile(path) {
+    const entry = await this._get(path);
+    if (!entry) return { ok: false, reason: 'missing' };
+    if (entry.is_directory) return { ok: false, reason: 'is_directory' };
+    const db = await this.dbPromise;
+    const tx = db.transaction('files', 'readwrite');
+    tx.objectStore('files').delete(path);
+    await txPromise(tx);
+    return { ok: true };
+  }
+
+  async createFolder(path) {
+    const existing = await this._get(path);
+    if (existing) return { ok: false, reason: 'exists' };
+    await this._ensureAncestorDirs(path);
+    await this._put({ path, is_directory: true, content: null, updated_at: Date.now() });
+    return { ok: true };
+  }
+
+  async deleteFolder(path) {
+    const entry = await this._get(path);
+    if (!entry) return { ok: false, reason: 'missing' };
+    if (!entry.is_directory) return { ok: false, reason: 'not_directory' };
+    const all = await this._all();
+    const prefix = `${path}/`;
+    const targets = [path];
+    for (const row of all) if (row.path.startsWith(prefix)) targets.push(row.path);
+    const db = await this.dbPromise;
+    const tx = db.transaction('files', 'readwrite');
+    const store = tx.objectStore('files');
+    for (const p of targets) store.delete(p);
+    await txPromise(tx);
+    return { ok: true };
+  }
+
+  async movePath(source, dest) {
+    const entry = await this._get(source);
+    if (!entry) return { ok: false, reason: 'missing' };
+    const newPath = dest ? `${dest}/${basename(source)}` : basename(source);
+    if (newPath === source) return { ok: false, reason: 'same' };
+    if (entry.is_directory && newPath.startsWith(`${source}/`)) {
+      return { ok: false, reason: 'into_self' };
+    }
+    const conflict = await this._get(newPath);
+    if (conflict) return { ok: false, reason: 'conflict' };
+    if (dest) {
+      const destEntry = await this._get(dest);
+      if (!destEntry || !destEntry.is_directory) return { ok: false, reason: 'dest_missing' };
+    }
+    await this._ensureAncestorDirs(newPath);
+    const db = await this.dbPromise;
+    const all = await this._all();
+    const tx = db.transaction('files', 'readwrite');
+    const store = tx.objectStore('files');
+    if (entry.is_directory) {
+      const prefix = `${source}/`;
+      store.delete(source);
+      store.put({ ...entry, path: newPath, updated_at: Date.now() });
+      for (const row of all) {
+        if (!row.path.startsWith(prefix)) continue;
+        const remapped = `${newPath}/${row.path.slice(prefix.length)}`;
+        store.delete(row.path);
+        store.put({ ...row, path: remapped, updated_at: Date.now() });
+      }
+    } else {
+      store.delete(source);
+      store.put({ ...entry, path: newPath, updated_at: Date.now() });
+    }
+    await txPromise(tx);
+    return { ok: true, newPath, type: entry.is_directory ? 'folder' : 'file' };
+  }
+
+  async listAllPyFiles() {
+    const all = await this._all();
+    const out = {};
+    for (const row of all) {
+      if (row.is_directory) continue;
+      if (!row.path.toLowerCase().endsWith('.py')) continue;
+      if (row.path.startsWith('users/')) continue;
+      if (row.path.startsWith('lib/')) continue;
+      out[row.path] = row.content == null ? '' : String(row.content);
+    }
+    return out;
+  }
+
+  async listAllUserFiles() {
+    const all = await this._all();
+    const out = {};
+    for (const row of all) {
+      if (row.is_directory) continue;
+      if (row.path.startsWith('users/')) continue;
+      if (row.path.startsWith('lib/')) continue;
+      out[row.path] = row.content == null ? '' : String(row.content);
+    }
+    return out;
+  }
+}
+
+/**
+ * File System Access API backend — files live inside a single
+ * `FileSystemDirectoryHandle` chosen by the user. The picked folder is
+ * treated as the root **of the editable workspace**: a `code/` subfolder
+ * is created lazily so paths like `code/main.py` map to
+ * `<picked>/code/main.py` on disk. Drag a folder of demos in there once,
+ * and the editor reads/writes them straight from disk.
+ */
+class FileSystemBackend {
+  constructor(rootHandle) {
+    this.root = rootHandle;
+  }
+
+  static get id() {
+    return 'filesystem';
+  }
+
+  describe() {
+    return `Folder · ${this.root.name}`;
+  }
+
+  async _resolveDir(parts, create = false) {
+    let dir = this.root;
+    for (const part of parts) {
+      if (!part) continue;
+      dir = await dir.getDirectoryHandle(part, { create });
+    }
+    return dir;
+  }
+
+  async _maybeResolveDir(parts) {
+    try {
+      return await this._resolveDir(parts);
+    } catch (_e) {
+      return null;
+    }
+  }
+
+  async ensureSeed() {
+    const codeDir = await this._resolveDir(['code'], true);
+    let mainExists = false;
+    for await (const [name] of codeDir.entries()) {
+      if (name === 'main.py') {
+        mainExists = true;
+        break;
+      }
+    }
+    if (mainExists) return;
+    const handle = await codeDir.getFileHandle('main.py', { create: true });
+    const writable = await handle.createWritable();
+    await writable.write(DEFAULT_MAIN_PY);
+    await writable.close();
+  }
+
+  async listDir(path) {
+    const parts = splitParts(path);
+    const dir = await this._maybeResolveDir(parts);
+    if (!dir) return null;
+    const result = [];
+    for await (const [name, handle] of dir.entries()) {
+      if (name.startsWith('.')) continue;
+      const isDir = handle.kind === 'directory';
+      let size = null;
+      if (!isDir) {
+        try {
+          const file = await handle.getFile();
+          size = file.size;
+        } catch (_e) {
+          // Some browsers throw on getFile() for permission-pending handles.
+        }
+      }
+      result.push({ name, is_directory: isDir, size });
+    }
+    return result;
+  }
+
+  async readFile(path) {
+    const parts = splitParts(path);
+    if (!parts.length) return { kind: 'missing' };
+    const fileName = parts.pop();
+    const dir = await this._maybeResolveDir(parts);
+    if (!dir) return { kind: 'missing' };
+    let handle;
+    try {
+      handle = await dir.getFileHandle(fileName);
+    } catch (_e) {
+      return { kind: 'missing' };
+    }
+    if (handle.kind !== 'file') return { kind: 'directory' };
+    const file = await handle.getFile();
+    return { kind: 'file', content: await file.text() };
+  }
+
+  async writeFile(path, content) {
+    const parts = splitParts(path);
+    if (!parts.length) throw new Error('empty path');
+    const fileName = parts.pop();
+    const dir = await this._resolveDir(parts, true);
+    const handle = await dir.getFileHandle(fileName, { create: true });
+    const writable = await handle.createWritable();
+    await writable.write(content);
+    await writable.close();
+  }
+
+  async deleteFile(path) {
+    const parts = splitParts(path);
+    if (!parts.length) return { ok: false, reason: 'missing' };
+    const fileName = parts.pop();
+    const dir = await this._maybeResolveDir(parts);
+    if (!dir) return { ok: false, reason: 'missing' };
+    try {
+      const handle = await dir.getFileHandle(fileName);
+      if (handle.kind !== 'file') return { ok: false, reason: 'is_directory' };
+      await dir.removeEntry(fileName);
+      return { ok: true };
+    } catch (_e) {
+      return { ok: false, reason: 'missing' };
+    }
+  }
+
+  async createFolder(path) {
+    const parts = splitParts(path);
+    if (!parts.length) return { ok: false, reason: 'empty' };
+    const exists = await this._maybeResolveDir(parts);
+    if (exists) return { ok: false, reason: 'exists' };
+    await this._resolveDir(parts, true);
+    return { ok: true };
+  }
+
+  async deleteFolder(path) {
+    const parts = splitParts(path);
+    if (!parts.length) return { ok: false, reason: 'empty' };
+    const folderName = parts.pop();
+    const parent = await this._maybeResolveDir(parts);
+    if (!parent) return { ok: false, reason: 'missing' };
+    try {
+      await parent.getDirectoryHandle(folderName);
+    } catch (_e) {
+      return { ok: false, reason: 'missing' };
+    }
+    await parent.removeEntry(folderName, { recursive: true });
+    return { ok: true };
+  }
+
+  async _readAllRecursive(parts, dir, acc) {
+    for await (const [name, handle] of dir.entries()) {
+      if (name.startsWith('.')) continue;
+      const childParts = parts.concat([name]);
+      if (handle.kind === 'directory') {
+        await this._readAllRecursive(childParts, handle, acc);
+      } else {
+        acc.push({ path: childParts.join('/'), handle });
+      }
+    }
+  }
+
+  async movePath(source, dest) {
+    /* The File System Access API has no atomic rename, so we copy + delete. */
+    const srcParts = splitParts(source);
+    if (!srcParts.length) return { ok: false, reason: 'missing' };
+    const srcLeaf = srcParts.pop();
+    const srcParent = await this._maybeResolveDir(srcParts);
+    if (!srcParent) return { ok: false, reason: 'missing' };
+    let srcHandle;
+    try {
+      srcHandle = await srcParent.getDirectoryHandle(srcLeaf);
+    } catch (_e) {
+      try {
+        srcHandle = await srcParent.getFileHandle(srcLeaf);
+      } catch (_e2) {
+        return { ok: false, reason: 'missing' };
+      }
+    }
+    const newPath = dest ? `${dest}/${srcLeaf}` : srcLeaf;
+    if (newPath === source) return { ok: false, reason: 'same' };
+    if (srcHandle.kind === 'directory' && newPath.startsWith(`${source}/`)) {
+      return { ok: false, reason: 'into_self' };
+    }
+
+    const conflictParts = splitParts(newPath);
+    const conflictLeaf = conflictParts.pop();
+    const conflictParent = await this._maybeResolveDir(conflictParts);
+    if (conflictParent) {
+      let conflict = null;
+      try {
+        conflict = await conflictParent.getFileHandle(conflictLeaf);
+      } catch (_e) {
+        try {
+          conflict = await conflictParent.getDirectoryHandle(conflictLeaf);
+        } catch (_e2) {
+          conflict = null;
+        }
+      }
+      if (conflict) return { ok: false, reason: 'conflict' };
+    }
+
+    if (srcHandle.kind === 'file') {
+      const text = await (await srcHandle.getFile()).text();
+      await this.writeFile(newPath, text);
+      await srcParent.removeEntry(srcLeaf);
+    } else {
+      await this._resolveDir(splitParts(newPath), true);
+      const collected = [];
+      await this._readAllRecursive([], srcHandle, collected);
+      for (const { path, handle } of collected) {
+        const text = await (await handle.getFile()).text();
+        await this.writeFile(`${newPath}/${path}`, text);
+      }
+      await srcParent.removeEntry(srcLeaf, { recursive: true });
+    }
+    return { ok: true, newPath, type: srcHandle.kind === 'directory' ? 'folder' : 'file' };
+  }
+
+  async listAllPyFiles() {
+    const out = {};
+    let codeDir;
+    try {
+      codeDir = await this._resolveDir(['code']);
+    } catch (_e) {
+      return out;
+    }
+    const collected = [];
+    await this._readAllRecursive(['code'], codeDir, collected);
+    for (const { path, handle } of collected) {
+      if (!path.toLowerCase().endsWith('.py')) continue;
+      try {
+        out[path] = await (await handle.getFile()).text();
+      } catch (_e) {
+        // Skip unreadable files.
+      }
+    }
+    return out;
+  }
+
+  async listAllUserFiles() {
+    const out = {};
+    let codeDir;
+    try {
+      codeDir = await this._resolveDir(['code']);
+    } catch (_e) {
+      return out;
+    }
+    const collected = [];
+    await this._readAllRecursive(['code'], codeDir, collected);
+    for (const { path, handle } of collected) {
+      try {
+        out[path] = await (await handle.getFile()).text();
+      } catch (_e) {
+        // Skip unreadable files (e.g. binaries the editor can't open).
+      }
+    }
+    return out;
+  }
+}
+
+/* ------------------------------------------------------------------ */
+/*  LocalWorkspaceClient                                              */
+/* ------------------------------------------------------------------ */
+
+export class LocalWorkspaceClient {
+  constructor() {
+    this.dbPromise = null;
+    this.libBundlePromise = null;
+    this.libFiles = null;
+    this.backend = null;
+    this.backendReady = null;
+  }
+
+  db() {
+    if (!this.dbPromise) this.dbPromise = openDb();
+    return this.dbPromise;
+  }
+
+  async ready() {
+    await this._loadLibBundle();
+    if (!this.backendReady) this.backendReady = this._initBackend();
+    await this.backendReady;
+  }
+
+  async getMeta(key) {
+    const db = await this.db();
+    const tx = db.transaction('meta', 'readonly');
+    const req = tx.objectStore('meta').get(key);
+    const row = await reqPromise(req);
+    return row ? row.value : null;
+  }
+
+  async putMeta(key, value) {
+    const db = await this.db();
+    const tx = db.transaction('meta', 'readwrite');
+    tx.objectStore('meta').put({ key, value });
+    return txPromise(tx);
+  }
+
+  async _initBackend() {
+    const desiredMode = (await this.getMeta(META_STORAGE_MODE)) || IndexedDbBackend.id;
+    if (desiredMode === FileSystemBackend.id && this._supportsFileSystem()) {
+      const handle = await this.getMeta(META_FOLDER_HANDLE);
+      if (handle) {
+        // Silent permission probe only — `requestPermission()` must be called
+        // from a user gesture (button click). If the permission has lapsed,
+        // we surface the saved handle so the UI can offer a "Reconnect" button.
+        const granted = await queryHandlePermission(handle);
+        if (granted) {
+          this.backend = new FileSystemBackend(handle);
+          await this.backend.ensureSeed();
+          return;
+        }
+        this.savedFolderHandle = handle;
+      }
+    }
+    this.backend = new IndexedDbBackend(this.db());
+    await this.backend.ensureSeed();
+  }
+
+  async reconnectSavedFolder() {
+    if (!this.savedFolderHandle || !this._supportsFileSystem()) return false;
+    const ok = await verifyHandlePermission(this.savedFolderHandle, true);
+    if (!ok) return false;
+    this.backend = new FileSystemBackend(this.savedFolderHandle);
+    this.backendReady = Promise.resolve();
+    await this.backend.ensureSeed();
+    await this.putMeta(META_STORAGE_MODE, FileSystemBackend.id);
+    this.savedFolderHandle = null;
+    return true;
+  }
+
+  _supportsFileSystem() {
+    return typeof window !== 'undefined' && typeof window.showDirectoryPicker === 'function';
+  }
+
+  async pickDirectory() {
+    if (!this._supportsFileSystem()) {
+      throw new Error('Folder picker not supported in this browser');
+    }
+    const handle = await window.showDirectoryPicker({
+      id: 'led-editor-workspace',
+      mode: 'readwrite',
+      startIn: 'documents',
+    });
+    const ok = await verifyHandlePermission(handle, true);
+    if (!ok) throw new Error('Read/write permission was denied');
+    await this.putMeta(META_FOLDER_HANDLE, handle);
+    await this.putMeta(META_STORAGE_MODE, FileSystemBackend.id);
+    this.backend = new FileSystemBackend(handle);
+    this.backendReady = Promise.resolve();
+    await this.backend.ensureSeed();
+    return handle;
+  }
+
+  async useIndexedDb() {
+    await this.putMeta(META_STORAGE_MODE, IndexedDbBackend.id);
+    this.backend = new IndexedDbBackend(this.db());
+    this.backendReady = Promise.resolve();
+    await this.backend.ensureSeed();
+  }
+
+  async describeStorage() {
+    await this.ready();
+    const isFs = this.backend instanceof FileSystemBackend;
+    return {
+      mode: isFs ? FileSystemBackend.id : IndexedDbBackend.id,
+      label: this.backend.describe(),
+      supportsFolder: this._supportsFileSystem(),
+      pendingReconnect: !isFs && Boolean(this.savedFolderHandle),
+      pendingFolderName: this.savedFolderHandle ? this.savedFolderHandle.name : null,
+    };
+  }
+
+  /* --- Lib bundle ------------------------------------------------- */
+
+  async _tryLoadStaticBundledLib() {
+    const names = ['machine.py', 'neopixel.py'];
+    const map = {};
+    for (const name of names) {
+      const r = await fetch(`/static/bundled-lib/${encodeURIComponent(name)}`, {
+        cache: 'force-cache',
+      });
+      if (!r.ok) return null;
+      map[name] = await r.text();
+    }
+    return map;
+  }
+
+  async _loadLibBundle() {
+    if (this.libBundlePromise) return this.libBundlePromise;
+    this.libBundlePromise = (async () => {
+      let map = null;
+      try {
+        map = await this._tryLoadStaticBundledLib();
+      } catch (_e) {
+        map = null;
+      }
+      if (!map) {
+        try {
+          const resp = await fetch('/api/public/lib-bundle');
+          if (resp.ok) {
+            const body = await resp.json();
+            map = body && body.files ? body.files : null;
+          }
+        } catch (_e) {
+          map = null;
+        }
+      }
+      this.libFiles = map || {};
+    })();
+    return this.libBundlePromise;
+  }
+
+  _libListing(path) {
+    if (!this.libFiles || !Object.keys(this.libFiles).length) return null;
+    if (path === '' || path === 'lib') {
+      if (path === '') {
+        return { __root: true };
+      }
+      return Object.entries(this.libFiles).map(([name, content]) => ({
+        name,
+        is_directory: false,
+        size: content.length,
+      }));
+    }
+    if (path.startsWith('lib/')) {
+      const rel = path.slice(4);
+      // Flat lib for now (machine.py, neopixel.py at top level).
+      const child = this.libFiles[rel];
+      return child ? [] : null;
+    }
+    return null;
+  }
+
+  /* --- Endpoint dispatchers --------------------------------------- */
+
+  async listFiles(rawPath) {
+    await this.ready();
+    const path = normalizePath(rawPath);
+    if (!path) {
+      const result = (await this.backend.listDir('')) || [];
+      const filtered = result.filter((row) => row.name !== 'lib' && row.name !== 'users');
+      // Always advertise a top-level `code` directory even if empty.
+      if (!filtered.some((row) => row.name === 'code')) {
+        filtered.push({ name: 'code', is_directory: true, size: null });
+      }
+      if (this.libFiles && Object.keys(this.libFiles).length) {
+        filtered.push({ name: 'lib', is_directory: true, size: null });
+      }
+      filtered.sort((a, b) => a.name.localeCompare(b.name));
+      return jsonResponse(200, { files: filtered });
+    }
+    if (path === 'lib' || path.startsWith('lib/')) {
+      const lib = this._libListing(path);
+      if (!lib) return jsonResponse(404, { detail: 'Directory not found' });
+      const arr = Array.isArray(lib) ? lib : [];
+      arr.sort((a, b) => a.name.localeCompare(b.name));
+      return jsonResponse(200, { files: arr });
+    }
+    const list = await this.backend.listDir(path);
+    if (list === null) return jsonResponse(404, { detail: 'Directory not found' });
+    list.sort((a, b) => a.name.localeCompare(b.name));
+    return jsonResponse(200, { files: list });
+  }
+
+  async readFile(rawPath) {
+    await this.ready();
+    const path = normalizePath(rawPath);
+    if (!path) return jsonResponse(400, { detail: 'Empty path' });
+    if (isLibPath(path)) {
+      const rel = path.slice(4);
+      const content = this.libFiles && this.libFiles[rel];
+      if (typeof content !== 'string') return jsonResponse(404, { detail: 'File not found' });
+      return jsonResponse(200, { content, filename: basename(path) });
+    }
+    const result = await this.backend.readFile(path);
+    if (result.kind === 'missing') return jsonResponse(404, { detail: 'File not found' });
+    if (result.kind === 'directory') return jsonResponse(400, { detail: 'Path is a directory' });
+    return jsonResponse(200, { content: result.content, filename: basename(path) });
+  }
+
+  async writeFile(rawPath, body) {
+    await this.ready();
+    const path = normalizePath(rawPath);
+    if (!path) return jsonResponse(400, { detail: 'Empty path' });
+    if (isLibPath(path)) return jsonResponse(403, { detail: 'lib is read-only' });
+    if (!isWritablePath(path)) return jsonResponse(403, { detail: 'Only code/ is writable (lib is read-only)' });
+    const content = body && typeof body.content === 'string' ? body.content : '';
+    await this.backend.writeFile(path, content);
+    return jsonResponse(200, { filename: basename(path) });
+  }
+
+  async deleteFile(rawPath) {
+    await this.ready();
+    const path = normalizePath(rawPath);
+    if (!path) return jsonResponse(400, { detail: 'Empty path' });
+    if (isLibPath(path)) return jsonResponse(403, { detail: 'lib is read-only' });
+    if (!isWritablePath(path)) return jsonResponse(403, { detail: 'Only code/ is writable' });
+    const r = await this.backend.deleteFile(path);
+    if (!r.ok) {
+      if (r.reason === 'missing') return jsonResponse(404, { detail: 'File not found' });
+      if (r.reason === 'is_directory') return jsonResponse(400, { detail: 'Cannot delete directories' });
+      return jsonResponse(500, { detail: 'Delete failed' });
+    }
+    return jsonResponse(200, { ok: true });
+  }
+
+  async createFolder(rawPath) {
+    await this.ready();
+    const path = normalizePath(rawPath);
+    if (!path) return jsonResponse(400, { detail: 'Empty path' });
+    if (isLibPath(path)) return jsonResponse(403, { detail: 'lib is read-only' });
+    if (!isWritablePath(path)) return jsonResponse(403, { detail: 'Only code/ is writable' });
+    const r = await this.backend.createFolder(path);
+    if (!r.ok) {
+      if (r.reason === 'exists') return jsonResponse(400, { detail: 'Folder already exists' });
+      return jsonResponse(500, { detail: 'Create failed' });
+    }
+    return jsonResponse(200, { name: basename(path) });
+  }
+
+  async deleteFolder(rawPath) {
+    await this.ready();
+    const path = normalizePath(rawPath);
+    if (!path) return jsonResponse(400, { detail: 'Empty path' });
+    if (isLibPath(path)) return jsonResponse(403, { detail: 'lib is read-only' });
+    if (!isWritablePath(path)) return jsonResponse(403, { detail: 'Only code/ is writable' });
+    const r = await this.backend.deleteFolder(path);
+    if (!r.ok) {
+      if (r.reason === 'missing') return jsonResponse(404, { detail: 'Folder not found' });
+      if (r.reason === 'not_directory') return jsonResponse(400, { detail: 'Path is not a directory' });
+      return jsonResponse(500, { detail: 'Delete failed' });
+    }
+    return jsonResponse(200, { ok: true });
+  }
+
+  async movePath(body) {
+    await this.ready();
+    const source = normalizePath(body && body.source_path);
+    const dest = normalizePath(body && body.destination_folder);
+    if (!source) return jsonResponse(400, { detail: 'Missing source_path' });
+    if (isLibPath(source) || isLibPath(dest)) return jsonResponse(403, { detail: 'lib is read-only' });
+    if (!isWritablePath(source) || (dest && !isWritablePath(dest))) {
+      return jsonResponse(403, { detail: 'Only code/ is writable' });
+    }
+    const r = await this.backend.movePath(source, dest);
+    if (!r.ok) {
+      if (r.reason === 'missing') return jsonResponse(404, { detail: 'Source path not found' });
+      if (r.reason === 'dest_missing') return jsonResponse(404, { detail: 'Destination folder not found' });
+      if (r.reason === 'same') return jsonResponse(400, { detail: 'Path is already in that folder' });
+      if (r.reason === 'into_self') return jsonResponse(400, { detail: 'Cannot move a folder into itself or its child' });
+      if (r.reason === 'conflict') return jsonResponse(409, { detail: 'A path with that name already exists in destination' });
+      return jsonResponse(500, { detail: 'Move failed' });
+    }
+    return jsonResponse(200, { new_path: r.newPath, moved: r.type });
+  }
+
+  async pySources() {
+    await this.ready();
+    const codeFiles = await this.backend.listAllPyFiles();
+    const out = { ...codeFiles };
+    if (this.libFiles) {
+      for (const [name, content] of Object.entries(this.libFiles)) {
+        out[`lib/${name}`] = content;
+      }
+    }
+    return jsonResponse(200, { files: out });
+  }
+
+  /**
+   * Build a ZIP of the entire user workspace (every file, not just `.py`).
+   * `lib/` stubs are not included — they're bundled with the app, so users
+   * always have a fresh copy.
+   *
+   * Returns `{ blob, fileCount, byteCount }`. UI is responsible for
+   * triggering the download.
+   */
+  async exportWorkspace() {
+    await this.ready();
+    const files = await this.backend.listAllUserFiles();
+    const entries = [];
+    let byteCount = 0;
+    for (const [path, content] of Object.entries(files)) {
+      entries.push({ name: path, content });
+      byteCount += content.length;
+    }
+    if (!entries.length) {
+      // ZIP spec allows empty archives but some tools choke; ship a README.
+      entries.push({
+        name: 'README.txt',
+        content: 'Your LED Editor workspace was empty when this archive was created.\n',
+      });
+    }
+    return {
+      blob: createZip(entries),
+      fileCount: Object.keys(files).length,
+      byteCount,
+    };
+  }
+
+  /* --- URL router ------------------------------------------------- */
+
+  async dispatch(url, init) {
+    let pathname = url;
+    let search = '';
+    try {
+      const parsed = new URL(url, window.location.origin);
+      pathname = parsed.pathname;
+      search = parsed.search;
+    } catch (_e) {
+      // URL is already a path.
+    }
+    const method = (init && init.method ? init.method : 'GET').toUpperCase();
+    const params = new URLSearchParams(search);
+
+    if (pathname === '/api/files') {
+      return this.listFiles(params.get('path') || '');
+    }
+    if (pathname === '/api/workspace/py-sources') {
+      return this.pySources();
+    }
+    if (pathname === '/api/file-move' && method === 'POST') {
+      const body = init && init.body ? safeJson(init.body) : {};
+      return this.movePath(body || {});
+    }
+    if (pathname.startsWith('/api/folder/new/') && method === 'POST') {
+      const path = decodeURIComponent(pathname.slice('/api/folder/new/'.length));
+      return this.createFolder(path);
+    }
+    if (pathname.startsWith('/api/folder/') && method === 'DELETE') {
+      const path = decodeURIComponent(pathname.slice('/api/folder/'.length));
+      return this.deleteFolder(path);
+    }
+    if (pathname.startsWith('/api/file/')) {
+      const path = decodeURIComponent(pathname.slice('/api/file/'.length));
+      if (method === 'GET') return this.readFile(path);
+      if (method === 'POST') {
+        const body = init && init.body ? safeJson(init.body) : {};
+        return this.writeFile(path, body || {});
+      }
+      if (method === 'DELETE') return this.deleteFile(path);
+    }
+    return null;
+  }
+}
+
+/* ------------------------------------------------------------------ */
+/*  Helpers                                                           */
+/* ------------------------------------------------------------------ */
+
+async function queryHandlePermission(handle) {
+  if (!handle || typeof handle.queryPermission !== 'function') return false;
+  try {
+    const state = await handle.queryPermission({ mode: 'readwrite' });
+    return state === 'granted';
+  } catch (_e) {
+    return false;
+  }
+}
+
+async function verifyHandlePermission(handle, requestIfNeeded) {
+  if (!handle || typeof handle.queryPermission !== 'function') return false;
+  const opts = { mode: 'readwrite' };
+  let state = await handle.queryPermission(opts);
+  if (state === 'granted') return true;
+  if (state === 'denied') return false;
+  if (!requestIfNeeded) return false;
+  state = await handle.requestPermission(opts);
+  return state === 'granted';
+}
+
+function safeJson(body) {
+  if (typeof body !== 'string') return null;
+  try {
+    return JSON.parse(body);
+  } catch (_e) {
+    return null;
+  }
+}
+
+export function isLocalModeEnabled() {
+  try {
+    const params = new URLSearchParams(window.location.search);
+    if (params.get('local') === '1') {
+      window.localStorage.setItem('python-editor.local-mode', '1');
+    }
+    if (params.get('local') === '0') {
+      window.localStorage.removeItem('python-editor.local-mode');
+    }
+    return window.localStorage.getItem('python-editor.local-mode') === '1';
+  } catch (_e) {
+    return false;
+  }
+}
+
+export function exitLocalMode() {
+  try {
+    window.localStorage.removeItem('python-editor.local-mode');
+  } catch (_e) {
+    // ignore
+  }
+}
+
+export function supportsFolderPicker() {
+  return typeof window !== 'undefined' && typeof window.showDirectoryPicker === 'function';
+}
diff --git a/src/static/pyodide-worker.js b/src/static/pyodide-worker.js
index 325c95d..72962e6 100644
--- a/src/static/pyodide-worker.js
+++ b/src/static/pyodide-worker.js
@@ -34,7 +34,109 @@ await micropip.install("jedi")
 self.onmessage = async (event) => {
   const { id, type, payload } = event.data || {};
   try {
+    /* Fast-path: fire-and-forget messages used by the SAB-less fallback
+       for pin input + ADC slider values. We update the worker-local
+       Int32Array so Python's next read sees the new value, with no
+       Pyodide round-trip and no reply expected. */
+    if (type === 'pinIn') {
+      const view = self.__pin_in_view;
+      const pin = payload && Number(payload.pin);
+      if (view && Number.isFinite(pin) && pin >= 0 && pin < view.length) {
+        try {
+          view[pin] = (payload.value | 0) ? 1 : 0;
+        } catch (_e) {
+          // ignore
+        }
+      }
+      return;
+    }
+    if (type === 'adcSet') {
+      const view = self.__adc_view;
+      const pin = payload && Number(payload.pin);
+      if (view && Number.isFinite(pin) && pin >= 0 && pin < view.length) {
+        const value = Math.max(0, Math.min(65535, payload.value | 0));
+        try {
+          view[pin] = value;
+        } catch (_e) {
+          // ignore
+        }
+      }
+      return;
+    }
+
     if (type === 'init') {
+      /* The main thread shares an Int32Array-backed SAB so Python ADC.read*()
+         can pick up live slider values without yielding. */
+      const adcSab = payload && payload.adcSab;
+      if (adcSab && typeof adcSab !== 'string') {
+        try {
+          self.__adc_view = new Int32Array(adcSab);
+        } catch (_e) {
+          self.__adc_view = null;
+        }
+      }
+      /* No SAB? Fall back to a worker-local Int32Array; the main thread
+         then delivers slider drags via `postMessage({type:'adcSet'})`. */
+      if (!self.__adc_view) {
+        try {
+          self.__adc_view = new Int32Array(64);
+        } catch (_e) {
+          self.__adc_view = null;
+        }
+      }
+      /* Pin output state: Int32Array[64] — Python writes packed
+         [ui_mode << 24 | value (low 24 bits)] entries, the editor UI reads
+         them every frame to drive the Pins panel indicators. */
+      const pinOutSab = payload && payload.pinOutSab;
+      if (pinOutSab && typeof pinOutSab !== 'string') {
+        try {
+          self.__pin_out_view = new Int32Array(pinOutSab);
+        } catch (_e) {
+          self.__pin_out_view = null;
+        }
+      }
+      if (!self.__pin_out_view) {
+        try {
+          self.__pin_out_view = new Int32Array(64);
+        } catch (_e) {
+          self.__pin_out_view = null;
+        }
+      }
+      /* Pin input state: Int32Array[64] — UI buttons write 0/1 per pin,
+         Python's `Pin.value()` for IN mode reads the matching slot. */
+      const pinInSab = payload && payload.pinInSab;
+      if (pinInSab && typeof pinInSab !== 'string') {
+        try {
+          self.__pin_in_view = new Int32Array(pinInSab);
+        } catch (_e) {
+          self.__pin_in_view = null;
+        }
+      }
+      if (!self.__pin_in_view) {
+        try {
+          self.__pin_in_view = new Int32Array(64);
+        } catch (_e) {
+          self.__pin_in_view = null;
+        }
+      }
+      /* Tell Python whether SAB was actually wired up so machine.py can
+         emit `[pin-out]` print markers as a fallback for the live UI. */
+      self.__sab_isolated = Boolean(pinOutSab && typeof pinOutSab !== 'string');
+      /* Serial-in ring buffer: first 8 bytes are [readIdx, writeIdx] (Int32),
+         followed by `capacity` bytes of payload data. */
+      const serialSab = payload && payload.serialSab;
+      if (serialSab && typeof serialSab !== 'string') {
+        try {
+          self.__serial_in_indices = new Int32Array(serialSab, 0, 2);
+          const capacity = serialSab.byteLength - 8;
+          self.__serial_in_capacity = capacity;
+          self.__serial_in_data = new Uint8Array(serialSab, 8, capacity);
+        } catch (_e) {
+          self.__serial_in_indices = null;
+          self.__serial_in_data = null;
+          self.__serial_in_capacity = 0;
+        }
+      }
       await ensurePyodide();
       self.postMessage({ id, type: 'init', ok: true });
       return;
diff --git a/src/static/script.js b/src/static/script.js
index 94c6487..72784d9 100644
--- a/src/static/script.js
+++ b/src/static/script.js
@@ -1,6 +1,8 @@
 import { EditorView, basicSetup } from "https://esm.sh/codemirror";
 import { Compartment } from "https://esm.sh/@codemirror/state";
 import { python } from "https://esm.sh/@codemirror/lang-python";
+import { LocalWorkspaceClient, isLocalModeEnabled, exitLocalMode, supportsFolderPicker } from "/static/local-workspace.js?v=4";
+import { createZip, readZip } from "/static/zip-utils.js?v=2";
 
 class TextEditor {
   constructor() {
@@ -46,6 +48,35 @@ class TextEditor {
     this.ledPanelWindow = null;
     this.workspaceUserId = null;
     this.isSuperuser = false;
+    this.adcPinCount = 64;
+    this.adcSab = null;
+    this.adcView = null;
+    this.adcSliders = new Map();
+    this.adcDefaultValue = 32768;
+    this.serialCapacity = 4096;
+    this.serialSab = null;
+    this.serialIndices = null;
+    this.serialData = null;
+    this.serialPanelOpen = false;
+    this.serialDecoder = null;
+    this.pinCount = 64;
+    this.pinOutSab = null;
+    this.pinOutView = null;
+    this.pinInSab = null;
+    this.pinInView = null;
+    this.pinRows = new Map();
+    this.pinRafId = null;
+    /* Mirrors the latest UI state per pin so the toggle works even when
+       SharedArrayBuffer is unavailable (mobile over LAN IP, no COOP/COEP
+       cross-origin isolation, etc.). The actual delivery to Python then
+       goes through `worker.postMessage({type:'pinIn'})`. */
+    this._pinInLocal = new Array(64).fill(0);
+    /* Pins claimed by another simulator (NeoPixel data line, etc.) — they
+       skip the Pins panel entirely so the row doesn't flicker on every
+       neopixel.write(). Cleared between runs. */
+    this._claimedPins = new Set();
+    this.localMode = isLocalModeEnabled();
+    this.localWorkspace = this.localMode ? new LocalWorkspaceClient() : null;
 
     this.init();
   }
@@ -97,6 +128,10 @@ class TextEditor {
   }
 
   async fetchViewerRole() {
+    if (this.localMode) {
+      this.isSuperuser = false;
+      return;
+    }
     try {
       const me = await fetch('/api/auth/me', { credentials: 'include' });
       if (!me.ok) {
@@ -110,15 +145,341 @@ class TextEditor {
     }
   }
 
-  updateWorkspaceBanner() {
+  async updateWorkspaceBanner() {
     const badge = document.getElementById('workspace-badge');
     if (!badge) return;
-    if (this.workspaceUserId) {
-      badge.textContent = `Workspace: user ${this.workspaceUserId}`;
+    if (this.localMode) {
+      badge.innerHTML = '';
+      const label = document.createElement('span');
+      label.className = 'workspace-badge-label';
+      label.textContent = 'Local · IndexedDB';
+      badge.appendChild(label);
+
+      if (supportsFolderPicker()) {
+        const pick = document.createElement('button');
+        pick.type = 'button';
+        pick.className = 'workspace-badge-action';
+        pick.textContent = 'Folder…';
+        pick.title = 'Save files to a folder on this device';
+        pick.addEventListener('click', () => this.pickLocalFolder());
+        badge.appendChild(pick);
+      } else {
+        const why = document.createElement('span');
+        why.className = 'workspace-badge-note';
+        why.textContent = '(no folder picker)';
+        why.title =
+          'window.showDirectoryPicker is not exposed in this browser context.\n' +
+          '• Firefox / Safari: not implemented (use Chromium-based browser).\n' +
+          '• Brave: enable brave://flags/#file-system-access-api or relax Shields for this site.\n' +
+          '• HTTPS-only requirement: must be served from localhost or https://.\n' +
+          'Files keep saving to IndexedDB; use Export to download a ZIP.';
+        badge.appendChild(why);
+      }
+
+      const exportBtn = document.createElement('button');
+      exportBtn.type = 'button';
+      exportBtn.className = 'workspace-badge-action';
+      exportBtn.textContent = 'Export';
+      exportBtn.title = 'Download every workspace file as a .zip';
+      exportBtn.addEventListener('click', () => this.exportWorkspaceZip());
+      badge.appendChild(exportBtn);
+
+      const importBtn = document.createElement('button');
+      importBtn.type = 'button';
+      importBtn.className = 'workspace-badge-action';
+      importBtn.textContent = 'Import';
+      importBtn.title = 'Upload a .zip — its files land in code/ (overwrites on conflict)';
+      importBtn.addEventListener('click', () => this.importWorkspaceZip());
+      badge.appendChild(importBtn);
+
+      const exit = document.createElement('button');
+      exit.type = 'button';
+      exit.className = 'workspace-badge-exit';
+      exit.textContent = 'Exit';
+      exit.title = 'Leave local mode and return to the home page';
+      exit.addEventListener('click', () => {
+        if (!confirm('Leave local mode? Your files stay in this browser; you can come back later.')) return;
+        exitLocalMode();
+        window.location.href = '/';
+      });
+      badge.appendChild(exit);
       badge.classList.remove('hidden');
-    } else {
-      badge.classList.add('hidden');
+
+      try {
+        const info = await this.localWorkspace.describeStorage();
+        if (info) {
+          if (info.mode === 'filesystem') {
+            label.textContent = `Local · ${info.label}`;
+            const swap = document.createElement('button');
+            swap.type = 'button';
+            swap.className = 'workspace-badge-action';
+            swap.textContent = 'IndexedDB';
+            swap.title = 'Switch storage back to in-browser IndexedDB';
+            swap.addEventListener('click', () => this.useIndexedDbStorage());
+            badge.insertBefore(swap, exit);
+          } else if (info.pendingReconnect) {
+            label.textContent = `Local · IndexedDB (folder “${info.pendingFolderName}” needs reconnect)`;
+            const reconnect = document.createElement('button');
+            reconnect.type = 'button';
+            reconnect.className = 'workspace-badge-action';
+            reconnect.textContent = 'Reconnect';
+            reconnect.title = 'Re-grant read/write access to the previously picked folder';
+            reconnect.addEventListener('click', () => this.reconnectLocalFolder());
+            badge.insertBefore(reconnect, exit);
+          } else {
+            label.textContent = 'Local · IndexedDB';
+          }
+        }
+      } catch (_err) {
+        // Best-effort label refresh.
+      }
+      return;
     }
+    badge.innerHTML = '';
+    const label = document.createElement('span');
+    label.className = 'workspace-badge-label';
+    label.textContent = this.workspaceUserId
+      ? `Workspace: user ${this.workspaceUserId}`
+      : 'Server workspace';
+    badge.appendChild(label);
+
+    const exportBtn = document.createElement('button');
+    exportBtn.type = 'button';
+    exportBtn.className = 'workspace-badge-action';
+    exportBtn.textContent = 'Export';
+    exportBtn.title = 'Download every workspace file as a .zip';
+    exportBtn.addEventListener('click', () => this.exportWorkspaceZip());
+    badge.appendChild(exportBtn);
+
+    const importBtn = document.createElement('button');
+    importBtn.type = 'button';
+    importBtn.className = 'workspace-badge-action';
+    importBtn.textContent = 'Import';
+    importBtn.title = 'Upload a .zip — its files land in code/ (overwrites on conflict)';
+    importBtn.addEventListener('click', () => this.importWorkspaceZip());
+    badge.appendChild(importBtn);
+
+    badge.classList.remove('hidden');
+  }
+
+  async pickLocalFolder() {
+    if (!this.localWorkspace) return;
+    try {
+      await this.localWorkspace.pickDirectory();
+    } catch (err) {
+      const msg = err && err.message ? err.message : String(err);
+      if (!/aborted|cancel/i.test(msg)) {
+        this.showError(`Could not switch to folder: ${msg}`);
+      }
+      return;
+    }
+    this.workspaceSourcesCache = null;
+    this.directoryCache.clear();
+    this.expandedDirs = new Set(['', 'code']);
+    await this.loadInitialDirectoryState();
+    await this.updateWorkspaceBanner();
+    this.showSuccess('Now saving to the picked folder');
+  }
+
+  async useIndexedDbStorage() {
+    if (!this.localWorkspace) return;
+    if (!confirm('Switch back to in-browser storage? Your folder files stay on disk untouched.')) return;
+    try {
+      await this.localWorkspace.useIndexedDb();
+    } catch (err) {
+      this.showError(`Could not switch storage: ${err && err.message ? err.message : err}`);
+      return;
+    }
+    this.workspaceSourcesCache = null;
+    this.directoryCache.clear();
+    this.expandedDirs = new Set(['', 'code']);
+    await this.loadInitialDirectoryState();
+    await this.updateWorkspaceBanner();
+    this.showSuccess('Storage: IndexedDB');
+  }
+
+  /**
+   * Recursively read every file under `code/` via apiFetch — works for both
+   * local-mode (LocalWorkspaceClient dispatches it) and server-mode (FastAPI
+   * serves it). `lib/` is excluded since it ships with the app and is
+   * read-only anyway.
+   */
+  async _walkUserFiles() {
+    const out = {};
+    const queue = ['code'];
+    while (queue.length) {
+      const path = queue.shift();
+      let resp;
+      try {
+        resp = await this.apiFetch(`/api/files?path=${encodeURIComponent(path)}`);
+      } catch (_err) {
+        continue;
+      }
+      if (!resp || !resp.ok) continue;
+      let data;
+      try {
+        data = await resp.json();
+      } catch (_err) {
+        continue;
+      }
+      for (const entry of data.files || []) {
+        const child = path ? `${path}/${entry.name}` : entry.name;
+        if (entry.is_directory) {
+          queue.push(child);
+        } else {
+          try {
+            const fr = await this.apiFetch(`/api/file/${encodeURIComponent(child)}`);
+            if (fr && fr.ok) {
+              const fd = await fr.json();
+              out[child] = typeof fd.content === 'string' ? fd.content : '';
+            }
+          } catch (_err) {
+            // Skip unreadable files.
+          }
+        }
+      }
+    }
+    return out;
+  }
+
+  async exportWorkspaceZip() {
+    let files;
+    try {
+      files = await this._walkUserFiles();
+    } catch (err) {
+      this.showError(`Could not export: ${err && err.message ? err.message : err}`);
+      return;
+    }
+    const entries = Object.entries(files).map(([name, content]) => ({ name, content }));
+    if (!entries.length) {
+      entries.push({
+        name: 'README.txt',
+        content: 'Your LED Editor workspace was empty when this archive was created.\n',
+      });
+    }
+    const blob = createZip(entries);
+    const stamp = new Date().toISOString().slice(0, 10);
+    const filename = `led-editor-workspace-${stamp}.zip`;
+    const url = URL.createObjectURL(blob);
+    const a = document.createElement('a');
+    a.href = url;
+    a.download = filename;
+    document.body.appendChild(a);
+    a.click();
+    document.body.removeChild(a);
+    setTimeout(() => URL.revokeObjectURL(url), 30000);
+    let bytes = 0;
+    for (const e of entries) bytes += e.content.length;
+    const sizeKb = (bytes / 1024).toFixed(1);
+    const fileCount = Object.keys(files).length;
+    this.showSuccess(
+      `Exported ${fileCount} file${fileCount === 1 ? '' : 's'} (${sizeKb} KB)`
+    );
+  }
+
+  /**
+   * Open a hidden file input, read the chosen `.zip`, and write each entry
+   * back into the workspace through apiFetch. Same path-routing as export:
+   * local-mode keeps it in-browser, server-mode uploads it.
+   *
+   * Conflict policy = overwrite. The user gets a confirm prompt that lists
+   * the file count first, and a final summary toast.
+   */
+  async importWorkspaceZip() {
+    const input = document.createElement('input');
+    input.type = 'file';
+    input.accept = '.zip,application/zip';
+    input.style.display = 'none';
+    document.body.appendChild(input);
+    const file = await new Promise((resolve) => {
+      input.addEventListener('change', () => resolve(input.files && input.files[0]), { once: true });
+      input.click();
+    });
+    document.body.removeChild(input);
+    if (!file) return;
+
+    let entries;
+    try {
+      const buf = await file.arrayBuffer();
+      entries = await readZip(buf);
+    } catch (err) {
+      this.showError(`Could not read ZIP: ${err && err.message ? err.message : err}`);
+      return;
+    }
+
+    /* Sanitize paths and force every entry under `code/`. Anything that
+       points at `lib/`, an absolute path, or escapes via `..` gets remapped
+       so the import can never silently overwrite library stubs or wander
+       outside the workspace. */
+    const safeEntries = [];
+    for (const entry of entries) {
+      let raw = String(entry.name || '').replace(/\\/g, '/').replace(/^\/+/, '');
+      const parts = raw.split('/').filter((seg) => seg && seg !== '.' && seg !== '..');
+      if (!parts.length) continue;
+      if (parts[0] === 'lib') continue;
+      if (parts[0] !== 'code') parts.unshift('code');
+      const path = parts.join('/');
+      safeEntries.push({ path, content: entry.content });
+    }
+    if (!safeEntries.length) {
+      this.showError('ZIP contained no importable files');
+      return;
+    }
+    const fileCount = safeEntries.length;
+    if (!confirm(
+      `Import ${fileCount} file${fileCount === 1 ? '' : 's'} from "${file.name}"?\n\n` +
+        `Existing files with the same path will be overwritten. ` +
+        `Files in lib/ are skipped.`
+    )) return;
+
+    let written = 0;
+    let failed = 0;
+    for (const entry of safeEntries) {
+      try {
+        const r = await this.apiFetch(`/api/file/${encodeURIComponent(entry.path)}`, {
+          method: 'POST',
+          headers: { 'Content-Type': 'application/json' },
+          body: JSON.stringify({ content: entry.content }),
+        });
+        if (r && r.ok) {
+          written += 1;
+        } else {
+          failed += 1;
+        }
+      } catch (_err) {
+        failed += 1;
+      }
+    }
+    this.workspaceSourcesCache = null;
+    this.directoryCache.clear();
+    this.expandedDirs = new Set(['', 'code']);
+    await this.loadInitialDirectoryState();
+    if (failed) {
+      this.showError(`Imported ${written} file${written === 1 ? '' : 's'} (${failed} failed)`);
+    } else {
+      this.showSuccess(`Imported ${written} file${written === 1 ? '' : 's'}`);
+    }
+  }
+
+  async reconnectLocalFolder() {
+    if (!this.localWorkspace) return;
+    let ok = false;
+    try {
+      ok = await this.localWorkspace.reconnectSavedFolder();
+    } catch (err) {
+      this.showError(`Could not reconnect folder: ${err && err.message ? err.message : err}`);
+      return;
+    }
+    if (!ok) {
+      this.showError('Permission denied. Pick the folder again to continue.');
+      return;
+    }
+    this.workspaceSourcesCache = null;
+    this.directoryCache.clear();
+    this.expandedDirs = new Set(['', 'code']);
+    await this.loadInitialDirectoryState();
+    await this.updateWorkspaceBanner();
+    this.showSuccess('Folder reconnected');
   }
 
   setupDevAutoReload() {
@@ -152,7 +513,11 @@ class TextEditor {
     poll();
   }
 
-  apiFetch(url, init = {}) {
+  async apiFetch(url, init = {}) {
+    if (this.localWorkspace && typeof url === 'string') {
+      const local = await this.localWorkspace.dispatch(url, init);
+      if (local) return local;
+    }
     const next = { ...init };
     const headers = new Headers(init.headers || {});
     const key = sessionStorage.getItem('python-editor.api_key');
@@ -190,7 +555,7 @@ class TextEditor {
 
   ensurePyWorker() {
     if (!this.pyWorker) {
-      const worker = new Worker('/static/pyodide-worker.js?v=4');
+      const worker = new Worker('/static/pyodide-worker.js?v=8');
       this.pyWorker = worker;
       worker.onmessage = (event) => this.handlePyWorkerMessage(event);
     }
@@ -235,10 +600,95 @@ class TextEditor {
     if (this.pyodideInited) {
       return;
     }
-    await this.callPyWorker('init', {});
+    await this.callPyWorker('init', {
+      adcSab: this.getAdcSab(),
+      serialSab: this.getSerialSab(),
+      pinOutSab: this.getPinOutSab(),
+      pinInSab: this.getPinInSab(),
+    });
     this.pyodideInited = true;
   }
 
+  getAdcSab() {
+    if (this.adcSab) {
+      return this.adcSab;
+    }
+    if (typeof SharedArrayBuffer === 'undefined') {
+      return null;
+    }
+    try {
+      this.adcSab = new SharedArrayBuffer(this.adcPinCount * 4);
+      this.adcView = new Int32Array(this.adcSab);
+    } catch (_err) {
+      this.adcSab = null;
+      this.adcView = null;
+    }
+    return this.adcSab;
+  }
+
+  getSerialSab() {
+    if (this.serialSab) {
+      return this.serialSab;
+    }
+    if (typeof SharedArrayBuffer === 'undefined') {
+      return null;
+    }
+    try {
+      this.serialSab = new SharedArrayBuffer(8 + this.serialCapacity);
+      this.serialIndices = new Int32Array(this.serialSab, 0, 2);
+      this.serialData = new Uint8Array(this.serialSab, 8, this.serialCapacity);
+    } catch (_err) {
+      this.serialSab = null;
+      this.serialIndices = null;
+      this.serialData = null;
+    }
+    return this.serialSab;
+  }
+
+  getPinOutSab() {
+    if (this.pinOutSab) return this.pinOutSab;
+    if (typeof SharedArrayBuffer === 'undefined') return null;
+    try {
+      this.pinOutSab = new SharedArrayBuffer(this.pinCount * 4);
+      this.pinOutView = new Int32Array(this.pinOutSab);
+    } catch (_err) {
+      this.pinOutSab = null;
+      this.pinOutView = null;
+    }
+    return this.pinOutSab;
+  }
+
+  getPinInSab() {
+    if (this.pinInSab) return this.pinInSab;
+    if (typeof SharedArrayBuffer === 'undefined') return null;
+    try {
+      this.pinInSab = new SharedArrayBuffer(this.pinCount * 4);
+      this.pinInView = new Int32Array(this.pinInSab);
+    } catch (_err) {
+      this.pinInSab = null;
+      this.pinInView = null;
+    }
+    return this.pinInSab;
+  }
+
+  pushSerialBytes(bytes) {
+    if (!this.serialIndices || !this.serialData) return 0;
+    const cap = this.serialCapacity;
+    let written = 0;
+    for (const byte of bytes) {
+      const w = Atomics.load(this.serialIndices, 1);
+      const r = Atomics.load(this.serialIndices, 0);
+      const next = (w + 1) % cap;
+      if (next === r) {
+        break;
+      }
+      this.serialData[w] = byte & 0xff;
+      Atomics.store(this.serialIndices, 1, next);
+      written += 1;
+    }
+    return written;
+  }
+
   prewarmPyWorker() {
     if (this.pyodideInited || this.workerWarmupPromise) {
       return;
@@ -267,6 +717,8 @@ class TextEditor {
     try {
       const runMainCheckbox = document.getElementById('run-main-checkbox');
       const panelModeCheckbox = document.getElementById('panel-16x16-checkbox');
+      const sidebar = document.getElementById('sidebar');
+      const consoleContainer = document.getElementById('console-container');
       const session = {
         openTabPaths: this.openTabs.map((tab) => tab.path),
         activeTabPath: this.activeTabPath,
@@ -274,7 +726,9 @@ class TextEditor {
         panel16x16Checked: Boolean(panelModeCheckbox && panelModeCheckbox.checked),
         expandedDirs: Array.from(this.expandedDirs || []),
         selectedPath: this.selectedPath || '',
-        selectedIsDirectory: Boolean(this.selectedIsDirectory)
+        selectedIsDirectory: Boolean(this.selectedIsDirectory),
+        sidebarCollapsed: Boolean(sidebar && sidebar.classList.contains('is-collapsed')),
+        consoleCollapsed: Boolean(consoleContainer && consoleContainer.classList.contains('is-collapsed')),
       };
       localStorage.setItem(this.sessionStorageKey, JSON.stringify(session));
     } catch (_error) {
@@ -282,6 +736,17 @@ class TextEditor {
     }
   }
 
+  applyPersistedPanelState() {
+    const session = this.savedSession;
+    if (!session) return;
+    if (session.consoleCollapsed) {
+      this.setConsoleCollapsed(true);
+    }
+    if (session.sidebarCollapsed && !this.isMobileViewport()) {
+      this.setDesktopSidebarCollapsed(true);
+    }
+  }
+
   async restoreSessionTabs() {
     const session = this.savedSession;
     this.savedSession = null;
@@ -314,6 +779,9 @@ class TextEditor {
       return;
     }
     await this.openFile('code/main.py');
+    this.selectedPath = 'code/main.py';
+    this.selectedIsDirectory = false;
+    this.renderFileTree();
   }
 
   async restoreExplorerState(session) {
@@ -720,16 +1188,41 @@ class TextEditor {
     toggle.setAttribute('aria-expanded', String(open));
   }
 
-  setupMobileSidebar() {
+  setDesktopSidebarCollapsed(collapsed) {
+    const sidebar = document.getElementById('sidebar');
+    const toggle = document.getElementById('sidebar-toggle');
+    if (!sidebar || !toggle) return;
+    sidebar.classList.toggle('is-collapsed', collapsed);
+    toggle.setAttribute('aria-expanded', String(!collapsed));
+    this.saveSessionState();
+  }
+
+  setupSidebarToggle() {
     const toggle = document.getElementById('sidebar-toggle');
     const backdrop = document.getElementById('sidebar-backdrop');
-    if (!toggle || !backdrop) return;
+    if (!toggle) return;
+    /* Initial state: mobile drawer starts closed; desktop sidebar starts open. */
+    if (this.isMobileViewport()) {
+      toggle.setAttribute('aria-expanded', 'false');
+    } else {
+      const sidebar = document.getElementById('sidebar');
+      const collapsed = Boolean(sidebar && sidebar.classList.contains('is-collapsed'));
+      toggle.setAttribute('aria-expanded', String(!collapsed));
+    }
     toggle.addEventListener('click', () => {
       const sidebar = document.getElementById('sidebar');
-      const isOpen = sidebar?.classList.contains('is-open');
-      this.setMobileSidebarOpen(!isOpen);
+      if (!sidebar) return;
+      if (this.isMobileViewport()) {
+        const isOpen = sidebar.classList.contains('is-open');
+        this.setMobileSidebarOpen(!isOpen);
+      } else {
+        const collapsed = sidebar.classList.contains('is-collapsed');
+        this.setDesktopSidebarCollapsed(!collapsed);
+      }
     });
-    backdrop.addEventListener('click', () => this.setMobileSidebarOpen(false));
+    if (backdrop) {
+      backdrop.addEventListener('click', () => this.setMobileSidebarOpen(false));
+    }
     document.addEventListener('keydown', (event) => {
       if (event.key === 'Escape') {
         const sidebar = document.getElementById('sidebar');
@@ -740,14 +1233,60 @@ class TextEditor {
     });
   }
 
+  setConsoleCollapsed(collapsed) {
+    const container = document.getElementById('console-container');
+    const button = document.getElementById('console-toggle');
+    if (!container || !button) return;
+    container.classList.toggle('is-collapsed', collapsed);
+    button.setAttribute('aria-expanded', String(!collapsed));
+    this.saveSessionState();
+  }
+
+  setupConsoleToggle() {
+    const button = document.getElementById('console-toggle');
+    if (!button) return;
+    button.addEventListener('click', () => {
+      const container = document.getElementById('console-container');
+      const collapsed = container?.classList.contains('is-collapsed');
+      this.setConsoleCollapsed(!collapsed);
+    });
+  }
+
+  setupHeaderMenu() {
+    const menu = document.getElementById('header-menu');
+    if (!menu) return;
+    document.addEventListener('click', (event) => {
+      if (!menu.open) return;
+      if (!menu.contains(event.target)) {
+        menu.open = false;
+      }
+    });
+    document.addEventListener('keydown', (event) => {
+      if (event.key === 'Escape' && menu.open) {
+        menu.open = false;
+      }
+    });
+  }
+
   setupEventListeners() {
-    this.setupMobileSidebar();
+    this.setupSidebarToggle();
+    this.setupConsoleToggle();
+    this.applyPersistedPanelState();
     const persistSession = () => {
       this.saveSessionState();
     };
     window.addEventListener('beforeunload', persistSession);
     window.addEventListener('pagehide', persistSession);
 
+    /* Stop button inside the 16x16 popup posts back so mobile users (where the popup
+       takes over the screen) can halt without returning to the editor. */
+    window.addEventListener('message', (event) => {
+      const data = event && event.data;
+      if (data && data.type === 'neopixel-popup-stop' && this.isPythonRunning) {
+        this.stopPython();
+      }
+    });
+
     window.addEventListener('keydown', (event) => {
       if (!this.completionOpen) return;
       if (event.key === 'Enter' || event.key === 'Tab') {
@@ -869,9 +1408,7 @@ class TextEditor {
       }
     });
 
-    document.getElementById('home-btn').addEventListener('click', () => {
-      window.location.href = '/';
-    });
+    this.setupHeaderMenu();
 
     const runMainCheckbox = document.getElementById('run-main-checkbox');
     if (runMainCheckbox) {
@@ -991,6 +1528,9 @@ class TextEditor {
       this.markAsSaved();
     }
     this.renderTabs();
+    this.selectedPath = path;
+    this.selectedIsDirectory = false;
+    this.renderFileTree();
   }
 
   closeTab(path) {
@@ -1028,6 +1568,9 @@ class TextEditor {
         this.updateRunButtonState();
         this.setLspStatus('LSP: n/a', 'Open a Python file for diagnostics');
         this.markAsSaved();
+        this.selectedPath = null;
+        this.selectedIsDirectory = false;
+        this.renderFileTree();
       }
     }
 
@@ -1058,7 +1601,6 @@ class TextEditor {
   renderFileTree() {
     const fileTreeElement = document.getElementById('file-tree');
     const treeRootPath = this.getTreeRootPath();
-    const rootLabel = '/';
     let rootFiles = this.directoryCache.get(treeRootPath) || [];
     if (!treeRootPath) {
       const visibleNames = this.getVisibleTopLevelNames();
@@ -1068,22 +1610,10 @@ class TextEditor {
     }
 
     if (rootFiles.length === 0) {
-      fileTreeElement.innerHTML = `
-        <div class="file-item directory root-drop ${this.selectedPath === treeRootPath ? "selected" : ""}" data-path="${treeRootPath}" data-is-directory="true">
-          <span class="file-icon">🗂️</span>
-          <span class="file-name">${rootLabel}</span>
-        </div>
-        <div class="loading">No files found</div>
-      `;
+      fileTreeElement.innerHTML = `<div class="loading">No files found</div>`;
     } else {
       const initialDepth = treeRootPath ? 1 : 0;
-      fileTreeElement.innerHTML = `
-        <div class="file-item directory root-drop ${this.selectedPath === treeRootPath ? "selected" : ""}" data-path="${treeRootPath}" data-is-directory="true">
-          <span class="file-icon">🗂️</span>
-          <span class="file-name">${rootLabel}</span>
-        </div>
-        ${this.renderDirectoryHtml(treeRootPath, initialDepth, rootFiles)}
-      `;
+      fileTreeElement.innerHTML = this.renderDirectoryHtml(treeRootPath, initialDepth, rootFiles);
     }
 
     fileTreeElement.querySelectorAll('.file-item').forEach((item) => {
@@ -1096,7 +1626,8 @@ class TextEditor {
         if (isDirectory && path) {
           await this.toggleDirectory(path);
         } else if (!isDirectory) {
-          this.openFile(path);
+          await this.openFile(path);
+          this.renderFileTree();
           if (this.isMobileViewport()) {
             this.setMobileSidebarOpen(false);
           }
@@ -1203,13 +1734,17 @@ class TextEditor {
       const isDir = file.is_directory;
       const selectedClass = this.selectedPath === fullPath ? "selected" : "";
       const indent = depth * 16;
+      /* The top-level "code" folder is the user's editable root; show it as "/" while keeping the underlying path "code" for the API. */
+      const displayName = depth === 0 && !basePath && file.is_directory && file.name === 'code'
+        ? '/'
+        : file.name;
 
       if (isDir) {
         const expanded = this.expandedDirs.has(fullPath);
         html += `
           <div class="file-item directory ${selectedClass}" data-path="${fullPath}" data-is-directory="true" style="padding-left: ${8 + indent}px">
             <span class="file-icon">${expanded ? "📂" : "📁"}</span>
-            <span class="file-name">${file.name}</span>
+            <span class="file-name">${displayName}</span>
           </div>
         `;
         if (expanded) {
@@ -1220,7 +1755,7 @@ class TextEditor {
         html += `
           <div class="file-item ${selectedClass}" data-path="${fullPath}" data-is-directory="false" style="padding-left: ${8 + indent}px">
             <span class="file-icon">${this.getFileIcon(file.name)}</span>
-            <span class="file-name">${file.name}</span>
+            <span class="file-name">${displayName}</span>
             <span class="file-size">${size}</span>
           </div>
         `;
@@ -1481,16 +2016,80 @@ class TextEditor {
     const win = window.open('', 'neopixel-16x16', 'width=760,height=760');
     if (!win) return null;
     win.document.title = 'NeoPixel 16x16 Panel';
+    win.document.documentElement.style.height = '100%';
     win.document.body.innerHTML = `
       <style>
-        body { margin: 0; background: #111827; color: #e5e7eb; font-family: system-ui, sans-serif; padding: 12px; }
-        .meta { margin-bottom: 10px; color: #9ca3af; font-size: 13px; }
-        .grid { display: grid; grid-template-columns: repeat(16, 24px); grid-auto-rows: 24px; gap: 6px; }
-        .led { width: 24px; height: 24px; border-radius: 50%; border: 1px solid rgba(255,255,255,0.2); box-shadow: inset 0 0 8px rgba(0,0,0,0.45); }
+        html, body {
+          margin: 0;
+          height: 100%;
+          width: 100%;
+          background: #111827;
+          color: #e5e7eb;
+          font-family: system-ui, sans-serif;
+          overflow: hidden;
+        }
+        body {
+          display: grid;
+          place-items: center;
+        }
+        .grid {
+          display: grid;
+          grid-template-columns: repeat(16, 1fr);
+          grid-template-rows: repeat(16, 1fr);
+          gap: clamp(2px, 0.5vmin, 8px);
+          padding: clamp(4px, 1vmin, 14px);
+          box-sizing: border-box;
+          width: 100vmin;
+          height: 100vmin;
+        }
+        .led {
+          width: 100%;
+          height: 100%;
+          border-radius: 50%;
+          border: 1px solid rgba(255, 255, 255, 0.2);
+          box-shadow: inset 0 0 8px rgba(0, 0, 0, 0.45);
+        }
+        .stop-fab {
+          position: fixed;
+          top: max(20px, env(safe-area-inset-top));
+          right: max(20px, env(safe-area-inset-right));
+          width: clamp(120px, 18vmin, 200px);
+          height: clamp(120px, 18vmin, 200px);
+          border-radius: 999px;
+          border: 3px solid rgba(255, 255, 255, 0.35);
+          background: #c53030;
+          color: white;
+          font-size: clamp(2.5rem, 6vmin, 4rem);
+          line-height: 1;
+          cursor: pointer;
+          box-shadow: 0 12px 30px rgba(0, 0, 0, 0.55);
+          z-index: 10;
+        }
+        .stop-fab:hover {
+          background: #9b2c2c;
+        }
+        .stop-fab:active {
+          transform: scale(0.96);
+        }
+        body.led-panel-popup-desktop .stop-fab {
+          display: none;
+        }
       </style>
-      <div id="meta" class="meta">Waiting for frame...</div>
       <div id="grid" class="grid"></div>
+      <button id="stop-fab" class="stop-fab" type="button" aria-label="Stop" title="Stop">\u25A0</button>
     `;
+    if (!this.isMobileViewport()) {
+      win.document.body.classList.add('led-panel-popup-desktop');
+    }
+    win.document.getElementById('stop-fab')?.addEventListener('click', () => {
+      try {
+        if (win.opener && !win.opener.closed) {
+          win.opener.postMessage({ type: 'neopixel-popup-stop' }, '*');
+        }
+      } catch (_e) {
+        // ignore - parent will handle stop on next interaction
+      }
+    });
     this.ledPanelWindow = win;
     return win;
   }
@@ -1502,6 +2101,364 @@ class TextEditor {
     this.ledPanelWindow = null;
   }
 
+  hideInlineLedPanel() {
+    const panel = document.getElementById('led-sim-panel');
+    if (panel) panel.classList.add('hidden');
+    const grid = document.getElementById('led-grid');
+    if (grid) grid.innerHTML = '';
+    this.lastLedFrame = null;
+  }
+
+  closeLedSimulator() {
+    this.closeLedPanelWindow();
+    this.hideInlineLedPanel();
+  }
+
+  ensureAdcSlider(pin) {
+    if (!Number.isFinite(pin) || pin < 0 || pin >= this.adcPinCount) {
+      return;
+    }
+    const panel = document.getElementById('adc-panel');
+    const list = document.getElementById('adc-sliders');
+    if (!panel || !list) return;
+    panel.classList.remove('hidden');
+    if (this.adcSliders.has(pin)) {
+      return;
+    }
+    this.getAdcSab();
+    if (this.adcView) {
+      try {
+        Atomics.store(this.adcView, pin, this.adcDefaultValue);
+      } catch (_err) {
+        this.adcView[pin] = this.adcDefaultValue;
+      }
+    }
+
+    const row = document.createElement('div');
+    row.className = 'adc-row';
+    row.dataset.pin = String(pin);
+
+    const label = document.createElement('label');
+    label.className = 'adc-row-label';
+    const labelId = `adc-slider-${pin}`;
+    label.setAttribute('for', labelId);
+    label.textContent = `ADC pin ${pin}`;
+
+    const slider = document.createElement('input');
+    slider.type = 'range';
+    slider.id = labelId;
+    slider.className = 'adc-slider';
+    slider.min = '0';
+    slider.max = '65535';
+    slider.step = '1';
+    slider.value = String(this.adcDefaultValue);
+
+    const readout = document.createElement('span');
+    readout.className = 'adc-readout';
+    const updateReadout = (raw) => {
+      const u16 = Number(raw) | 0;
+      const volts = (u16 / 65535) * 3.3;
+      readout.textContent = `${u16}  (${volts.toFixed(2)} V)`;
+    };
+    updateReadout(this.adcDefaultValue);
+
+    slider.addEventListener('input', () => {
+      const value = Number(slider.value) | 0;
+      if (this.adcView) {
+        try {
+          Atomics.store(this.adcView, pin, value);
+        } catch (_err) {
+          this.adcView[pin] = value;
+        }
+      }
+      /* SAB-less fallback: deliver the new slider value directly to the
+         Pyodide worker, which keeps its own Int32Array when isolation is
+         off. Same idea as the Pin IN button. */
+      try {
+        if (this.pyWorker) {
+          this.pyWorker.postMessage({ type: 'adcSet', payload: { pin, value } });
+        }
+      } catch (_err) {
+        // ignore
+      }
+      updateReadout(value);
+    });
+
+    row.appendChild(label);
+    row.appendChild(slider);
+    row.appendChild(readout);
+    list.appendChild(row);
+    this.adcSliders.set(pin, { row, slider, readout });
+  }
+
+  closeAdcPanel() {
+    const panel = document.getElementById('adc-panel');
+    const list = document.getElementById('adc-sliders');
+    if (panel) panel.classList.add('hidden');
+    if (list) list.innerHTML = '';
+    this.adcSliders.clear();
+    if (this.adcView) {
+      for (let i = 0; i < this.adcPinCount; i += 1) {
+        try {
+          Atomics.store(this.adcView, i, 0);
+        } catch (_err) {
+          this.adcView[i] = 0;
+        }
+      }
+    }
+  }
+
+  openSerialMonitor(meta) {
+    const panel = document.getElementById('serial-panel');
+    if (!panel) return;
+    panel.classList.remove('hidden');
+    const metaEl = document.getElementById('serial-meta');
+    if (metaEl && meta && Number.isFinite(meta.baudrate)) {
+      metaEl.textContent = `UART ${meta.id ?? 0} @ ${meta.baudrate} baud`;
+    }
+    if (!this.serialPanelOpen) {
+      this.serialPanelOpen = true;
+      this.bindSerialPanel();
+    }
+  }
+
+  closeSerialPanel() {
+    const panel = document.getElementById('serial-panel');
+    if (panel) panel.classList.add('hidden');
+    const out = document.getElementById('serial-output');
+    if (out) out.textContent = '';
+    if (this.serialIndices) {
+      try {
+        Atomics.store(this.serialIndices, 0, 0);
+        Atomics.store(this.serialIndices, 1, 0);
+      } catch (_err) {
+        this.serialIndices[0] = 0;
+        this.serialIndices[1] = 0;
+      }
+    }
+    this.serialDecoder = null;
+  }
+
+  bindSerialPanel() {
+    const form = document.getElementById('serial-form');
+    const input = document.getElementById('serial-input');
+    const clearBtn = document.getElementById('serial-clear');
+    if (form && input && !form.dataset.bound) {
+      form.dataset.bound = '1';
+      form.addEventListener('submit', (event) => {
+        event.preventDefault();
+        if (!this.isPythonRunning) return;
+        const newlineCheckbox = document.getElementById('serial-newline-checkbox');
+        let text = input.value;
+        if (newlineCheckbox && newlineCheckbox.checked) text += '\n';
+        if (!text) return;
+        const bytes = new TextEncoder().encode(text);
+        this.pushSerialBytes(bytes);
+        this.appendSerialMonitorText(text, 'tx');
+        input.value = '';
+        input.focus();
+      });
+    }
+    if (clearBtn && !clearBtn.dataset.bound) {
+      clearBtn.dataset.bound = '1';
+      clearBtn.addEventListener('click', () => {
+        const out = document.getElementById('serial-output');
+        if (out) out.textContent = '';
+      });
+    }
+  }
+
+  appendSerialMonitorText(text, direction) {
+    const out = document.getElementById('serial-output');
+    if (!out) return;
+    const span = document.createElement('span');
+    span.className = direction === 'tx' ? 'serial-tx' : 'serial-rx';
+    span.textContent = text;
+    out.appendChild(span);
+    const maxChars = 50000;
+    if (out.textContent.length > maxChars) {
+      out.textContent = out.textContent.slice(-maxChars);
+    }
+    out.scrollTop = out.scrollHeight;
+  }
+
+  appendSerialOutputBase64(b64) {
+    if (typeof b64 !== 'string' || !b64) return;
+    let bytes;
+    try {
+      const bin = atob(b64);
+      bytes = new Uint8Array(bin.length);
+      for (let i = 0; i < bin.length; i += 1) {
+        bytes[i] = bin.charCodeAt(i);
+      }
+    } catch (_err) {
+      return;
+    }
+    if (!this.serialDecoder) {
+      this.serialDecoder = new TextDecoder('utf-8', { fatal: false });
+    }
+    const text = this.serialDecoder.decode(bytes, { stream: true });
+    if (text) this.appendSerialMonitorText(text, 'rx');
+  }
+
+  ensurePinRow(pin, mode, extra) {
+    if (!Number.isFinite(pin) || pin < 0 || pin >= this.pinCount) return;
+    if (this._claimedPins && this._claimedPins.has(pin)) return;
+    const panel = document.getElementById('pin-panel');
+    const list = document.getElementById('pin-rows');
+    if (!panel || !list) return;
+    panel.classList.remove('hidden');
+    this.getPinOutSab();
+    this.getPinInSab();
+
+    let entry = this.pinRows.get(pin);
+    if (!entry) {
+      const row = document.createElement('div');
+      row.className = 'pin-row';
+      row.dataset.pin = String(pin);
+
+      const label = document.createElement('span');
+      label.className = 'pin-row-label';
+
+      const indicator = document.createElement('span');
+      indicator.className = 'pin-led';
+
+      const button = document.createElement('button');
+      button.type = 'button';
+      button.className = 'pin-toggle';
+      button.textContent = '0';
+      button.addEventListener('click', () => {
+        const cur = this.pinInView ? (this.pinInView[pin] | 0) : (this._pinInLocal[pin] || 0);
+        const next = cur ? 0 : 1;
+        this._pinInLocal[pin] = next;
+        if (this.pinInView) {
+          try {
+            Atomics.store(this.pinInView, pin, next);
+          } catch (_err) {
+            try {
+              this.pinInView[pin] = next;
+            } catch (_e2) {
+              // ignore
+            }
+          }
+        }
+        /* postMessage the change too — when SAB is unavailable (e.g. mobile
+           hitting a LAN IP over plain HTTP) the worker keeps its own local
+           Int32Array and only learns about clicks through messages. */
+        try {
+          if (this.pyWorker) {
+            this.pyWorker.postMessage({ type: 'pinIn', payload: { pin, value: next } });
+          }
+        } catch (_err) {
+          // ignore
+        }
+        button.textContent = next ? '1' : '0';
+        button.classList.toggle('on', Boolean(next));
+      });
+
+      const bar = document.createElement('div');
+      bar.className = 'pin-pwm-bar';
+      const fill = document.createElement('div');
+      fill.className = 'pin-pwm-fill';
+      bar.appendChild(fill);
+
+      const detail = document.createElement('span');
+      detail.className = 'pin-row-detail';
+
+      row.appendChild(label);
+      row.appendChild(indicator);
+      row.appendChild(button);
+      row.appendChild(bar);
+      row.appendChild(detail);
+      list.appendChild(row);
+
+      entry = { row, label, indicator, button, bar, fill, detail, mode: 0 };
+      this.pinRows.set(pin, entry);
+    }
+
+    entry.mode = mode;
+    entry.label.textContent = `Pin ${pin}`;
+    const isOut = mode === 1;
+    const isIn = mode === 2;
+    const isPwm = mode === 4;
+    entry.indicator.style.display = isOut ? '' : 'none';
+    entry.button.style.display = isIn ? '' : 'none';
+    entry.bar.style.display = isPwm ? '' : 'none';
+    if (isPwm && extra && Number.isFinite(extra.freq)) {
+      entry.detail.textContent = `PWM ${extra.freq} Hz`;
+    } else if (isOut) {
+      entry.detail.textContent = 'OUT';
+    } else if (isIn) {
+      entry.detail.textContent = 'IN';
+    } else {
+      entry.detail.textContent = '';
+    }
+
+    this.startPinRafLoop();
+  }
+
+  startPinRafLoop() {
+    if (this.pinRafId != null) return;
+    const tick = () => {
+      this.pinRafId = null;
+      if (!this.pinRows.size) return;
+      this.refreshPinRows();
+      if (this.pinRows.size) {
+        this.pinRafId = requestAnimationFrame(tick);
+      }
+    };
+    this.pinRafId = requestAnimationFrame(tick);
+  }
+
+  refreshPinRows() {
+    const view = this.pinOutView;
+    if (!view) return;
+    for (const [pin, entry] of this.pinRows) {
+      if (entry.mode === 1) {
+        const packed = view[pin] | 0;
+        const value = packed & 0x00ffffff;
+        entry.indicator.classList.toggle('on', value !== 0);
+      } else if (entry.mode === 4) {
+        const packed = view[pin] | 0;
+        const duty = packed & 0x00ffffff;
+        const pct = Math.max(0, Math.min(100, (duty / 65535) * 100));
+        entry.fill.style.width = `${pct.toFixed(1)}%`;
+        entry.detail.textContent = `${(pct).toFixed(0)}% duty`;
+      }
+    }
+  }
+
+  closePinPanel() {
+    const panel = document.getElementById('pin-panel');
+    const list = document.getElementById('pin-rows');
+    if (panel) panel.classList.add('hidden');
+    if (list) list.innerHTML = '';
+    this.pinRows.clear();
+    if (this._claimedPins) this._claimedPins.clear();
+    if (this.pinRafId != null) {
+      cancelAnimationFrame(this.pinRafId);
+      this.pinRafId = null;
+    }
+    if (this.pinOutView) {
+      for (let i = 0; i < this.pinCount; i += 1) {
+        try {
+          Atomics.store(this.pinOutView, i, 0);
+        } catch (_err) {
+          this.pinOutView[i] = 0;
+        }
+      }
+    }
+    if (this.pinInView) {
+      for (let i = 0; i < this.pinCount; i += 1) {
+        try {
+          Atomics.store(this.pinInView, i, 0);
+        } catch (_err) {
+          this.pinInView[i] = 0;
+        }
+      }
+    }
+  }
+
   updateLedWindowControls() {
     const runBtn = document.getElementById('led-run-btn');
     const stopBtn = document.getElementById('led-stop-btn');
@@ -1523,10 +2480,8 @@ class TextEditor {
     if (panelMode) {
       const panelWindow = this.ensureLedPanelWindow();
       if (!panelWindow || panelWindow.closed) return;
-      const meta = panelWindow.document.getElementById('meta');
       const grid = panelWindow.document.getElementById('grid');
-      if (!meta || !grid) return;
-      meta.textContent = `pin=${frame.pin ?? '?'} | leds=${pixels.length} | bpp=${frame.bpp ?? 3} | mode=16x16`;
+      if (!grid) return;
       grid.innerHTML = '';
       const panelSize = 16 * 16;
       for (let panelIndex = 0; panelIndex < panelSize; panelIndex += 1) {
@@ -1549,8 +2504,10 @@ class TextEditor {
       if (!panel) return;
       const meta = document.getElementById('led-meta');
       const grid = document.getElementById('led-grid');
-      if (!meta || !grid) return;
-      meta.textContent = `pin=${frame.pin ?? '?'} | leds=${pixels.length} | bpp=${frame.bpp ?? 3}`;
+      if (!grid) return;
+      if (meta) {
+        meta.textContent = `pin=${frame.pin ?? '?'} | leds=${pixels.length} | bpp=${frame.bpp ?? 3}`;
+      }
       grid.innerHTML = '';
       grid.classList.remove('panel-mode');
       pixels.forEach((px, i) => {
@@ -1570,18 +2527,130 @@ class TextEditor {
   processSimulationLines(lines) {
     for (const line of lines || []) {
       if (typeof line !== 'string') continue;
-      const marker = '[neopixel-json]';
-      const idx = line.indexOf(marker);
-      if (idx === -1) continue;
-      const jsonPart = line.slice(idx + marker.length).trim();
-      if (!jsonPart) continue;
-      try {
-        const payload = JSON.parse(jsonPart);
-        if (payload && payload.type === 'neopixel') {
-          this.renderLedSimulation(payload);
+      const npxIdx = line.indexOf('[neopixel-json]');
+      if (npxIdx !== -1) {
+        const jsonPart = line.slice(npxIdx + '[neopixel-json]'.length).trim();
+        if (jsonPart) {
+          try {
+            const payload = JSON.parse(jsonPart);
+            if (payload && payload.type === 'neopixel') {
+              this.renderLedSimulation(payload);
+            }
+          } catch (_err) {
+            // Ignore malformed simulation payloads.
+          }
         }
-      } catch (_err) {
-        // Ignore malformed simulation payloads.
+      }
+      const adcIdx = line.indexOf('[adc-register]');
+      if (adcIdx !== -1) {
+        const jsonPart = line.slice(adcIdx + '[adc-register]'.length).trim();
+        if (jsonPart) {
+          try {
+            const payload = JSON.parse(jsonPart);
+            if (payload && Number.isFinite(payload.pin)) {
+              this.ensureAdcSlider(Number(payload.pin));
+            }
+          } catch (_err) {
+            // Ignore malformed ADC registrations.
+          }
+        }
+      }
+      const serialRegIdx = line.indexOf('[serial-register]');
+      if (serialRegIdx !== -1) {
+        const jsonPart = line.slice(serialRegIdx + '[serial-register]'.length).trim();
+        let payload = null;
+        try {
+          payload = jsonPart ? JSON.parse(jsonPart) : {};
+        } catch (_err) {
+          payload = {};
+        }
+        this.openSerialMonitor(payload || {});
+      }
+      const serialOutIdx = line.indexOf('[serial-out]');
+      if (serialOutIdx !== -1) {
+        const b64 = line.slice(serialOutIdx + '[serial-out]'.length).trim();
+        if (b64) this.appendSerialOutputBase64(b64);
+      }
+      const pinClaimIdx = line.indexOf('[pin-claim]');
+      if (pinClaimIdx !== -1) {
+        const jsonPart = line.slice(pinClaimIdx + '[pin-claim]'.length).trim();
+        if (jsonPart) {
+          try {
+            const payload = JSON.parse(jsonPart);
+            this.claimPin(payload);
+          } catch (_err) {
+            // Ignore malformed pin claims.
+          }
+        }
+      }
+      const pinRegIdx = line.indexOf('[pin-register]');
+      if (pinRegIdx !== -1) {
+        const jsonPart = line.slice(pinRegIdx + '[pin-register]'.length).trim();
+        if (jsonPart) {
+          try {
+            const payload = JSON.parse(jsonPart);
+            if (payload && Number.isFinite(payload.pin) && Number.isFinite(payload.mode)) {
+              this.ensurePinRow(Number(payload.pin), Number(payload.mode), payload);
+            }
+          } catch (_err) {
+            // Ignore malformed pin registrations.
+          }
+        }
+      }
+      /* SAB-less fallback: machine.py prints `[pin-out]<json>` whenever the
+         worker has no SharedArrayBuffer for pin output. The main thread
+         can't read the worker's local array, so we drive indicators/PWM
+         bars off these console lines instead. */
+      const pinOutIdx = line.indexOf('[pin-out]');
+      if (pinOutIdx !== -1) {
+        const jsonPart = line.slice(pinOutIdx + '[pin-out]'.length).trim();
+        if (jsonPart) {
+          try {
+            const payload = JSON.parse(jsonPart);
+            this.applyPinOutSnapshot(payload);
+          } catch (_err) {
+            // Ignore malformed pin-out lines.
+          }
+        }
+      }
+    }
+  }
+
+  claimPin(payload) {
+    if (!payload || !Number.isFinite(payload.pin)) return;
+    const pin = Number(payload.pin);
+    if (!this._claimedPins) this._claimedPins = new Set();
+    this._claimedPins.add(pin);
+    /* If a Pin(...) constructor already published a row for this pin
+       (NeoPixel internally uses Pin(...)), drop it now. The remaining rows
+       collapse and the panel hides itself when empty. */
+    const entry = this.pinRows.get(pin);
+    if (entry) {
+      entry.row.remove();
+      this.pinRows.delete(pin);
+    }
+    if (!this.pinRows.size) {
+      const panel = document.getElementById('pin-panel');
+      if (panel) panel.classList.add('hidden');
+    }
+  }
+
+  applyPinOutSnapshot(payload) {
+    if (!payload || !Number.isFinite(payload.pin)) return;
+    const pin = Number(payload.pin);
+    const mode = Number(payload.mode) | 0;
+    const entry = this.pinRows.get(pin);
+    if (!entry) return;
+    if (mode === 1) {
+      const on = Boolean(payload.value);
+      entry.indicator.classList.toggle('on', on);
+    } else if (mode === 4) {
+      const u16 = Math.max(0, Math.min(65535, Number(payload.value) | 0));
+      entry.fill.style.width = `${(u16 / 65535) * 100}%`;
+      if (Number.isFinite(payload.freq)) {
+        entry.detail.textContent = `${u16} / 65535 @ ${payload.freq} Hz`;
+      } else {
+        entry.detail.textContent = `${u16} / 65535`;
       }
     }
   }
@@ -1591,7 +2660,15 @@ class TextEditor {
     this.processSimulationLines(lines);
     const visibleLines = lines.filter((line) => {
       if (typeof line !== 'string') return false;
-      return !line.includes('[neopixel-json]');
+      return (
+        !line.includes('[neopixel-json]') &&
+        !line.includes('[adc-register]') &&
+        !line.includes('[serial-register]') &&
+        !line.includes('[serial-out]') &&
+        !line.includes('[pin-register]') &&
+        !line.includes('[pin-out]') &&
+        !line.includes('[pin-claim]')
+      );
     });
     if (visibleLines.length === 0) return;
     this.consolePendingText += visibleLines.join('');
@@ -1656,7 +2733,10 @@ class TextEditor {
       });
       if (generation === this.pyRunGeneration) {
         this.appendConsoleOutput(['\n[Finished]\n']);
-        this.closeLedPanelWindow();
+        this.closeLedSimulator();
+        this.closeAdcPanel();
+        this.closeSerialPanel();
+        this.closePinPanel();
       }
     } catch (error) {
       this.appendConsoleOutput([`\n${error.message}\n`]);
@@ -1673,7 +2753,10 @@ class TextEditor {
     this.pyRunGeneration += 1;
     this.disposePyWorker();
     this.isPythonRunning = false;
-    this.closeLedPanelWindow();
+    this.closeLedSimulator();
+    this.closeAdcPanel();
+    this.closeSerialPanel();
+    this.closePinPanel();
     this.appendConsoleOutput(['\n[Execution stopped — Pyodide worker was reset]\n']);
     this.updateRunButtonState();
     this.prewarmPyWorker();
@@ -1908,27 +2991,69 @@ class TextEditor {
 }
 
 async function bootEditorApp() {
+  /* Decide between local and server mode. Order of precedence:
+       1. `?local=1` in the URL  → local mode (always wins, even when signed in,
+          so a logged-in user can still test the local-mode workflow).
+       2. Signed-in session       → server mode (clear any stale local-mode
+          flag from a previous "Use locally" visit).
+       3. No session, local flag in localStorage → local mode.
+       4. Auth required, no session → redirect to /login.
+       5. Auth disabled            → server mode.
+  */
+  const params = new URLSearchParams(window.location.search);
+  const explicitLocal = params.get('local') === '1';
+
+  if (explicitLocal) {
+    new TextEditor();
+    return;
+  }
+
+  let authEnabled = false;
+  let signedIn = false;
   try {
     const st = await fetch('/api/auth/status');
-    if (!st.ok) {
-      new TextEditor();
-      return;
+    if (st.ok) {
+      const status = await st.json();
+      authEnabled = Boolean(status.auth_enabled);
     }
-    const status = await st.json();
-    if (!status.auth_enabled) {
-      new TextEditor();
-      return;
-    }
-    const me = await fetch('/api/auth/me', { credentials: 'include' });
-    if (!me.ok) {
-      const next = encodeURIComponent(`${window.location.pathname}${window.location.search}`);
-      window.location.replace(`/login?next=${next}`);
-      return;
-    }
-    new TextEditor();
-  } catch (_error) {
-    new TextEditor();
+  } catch (_e) {
+    // No backend reachable — fall through to local-flag handling.
   }
+
+  if (authEnabled) {
+    try {
+      const me = await fetch('/api/auth/me', { credentials: 'include' });
+      signedIn = me.ok;
+    } catch (_e) {
+      signedIn = false;
+    }
+  }
+
+  if (signedIn) {
+    /* Signed-in users always get the server workspace. Wipe the stale
+       local-mode flag so refreshing this tab doesn't bounce back to
+       IndexedDB without warning. */
+    try {
+      window.localStorage.removeItem('python-editor.local-mode');
+    } catch (_e) {
+      // ignore
+    }
+    new TextEditor();
+    return;
+  }
+
+  if (isLocalModeEnabled()) {
+    new TextEditor();
+    return;
+  }
+
+  if (authEnabled) {
+    const next = encodeURIComponent(`${window.location.pathname}${window.location.search}`);
+    window.location.replace(`/login?next=${next}`);
+    return;
+  }
+
+  new TextEditor();
 }
 
 document.addEventListener('DOMContentLoaded', () => {
diff --git a/src/static/styles.css b/src/static/styles.css
index aa07265..5d7a1a9 100644
--- a/src/static/styles.css
+++ b/src/static/styles.css
@@ -16,7 +16,8 @@ body {
 button,
 .tab,
 .file-item,
-.mode-btn {
+.menu-item,
+.menu-toggle {
   touch-action: manipulation;
 }
 
@@ -28,7 +29,7 @@ button,
 }
 
 .sidebar-toggle {
-  display: none;
+  display: inline-flex;
   align-items: center;
   justify-content: center;
   width: 40px;
@@ -37,7 +38,8 @@ button,
   background: white;
   color: #2d3748;
   border-radius: 8px;
-  font-size: 1.2rem;
+  font-size: 1.4rem;
+  line-height: 1;
   cursor: pointer;
   flex-shrink: 0;
 }
@@ -46,10 +48,99 @@ button,
   background: #f7fafc;
 }
 
+.sidebar-toggle .sidebar-toggle-icon {
+  display: inline-block;
+  transition: transform 0.15s ease;
+}
+
+/* Flip the chevron when the file browser is hidden. */
+.sidebar-toggle[aria-expanded="false"] .sidebar-toggle-icon {
+  transform: rotate(180deg);
+}
+
 .sidebar-backdrop {
   display: none;
 }
 
+/* Editor-header dropdown menu (Home + run options). */
+.header-menu {
+  position: relative;
+}
+
+.menu-toggle {
+  list-style: none;
+  cursor: pointer;
+  padding: 0.45rem 0.7rem;
+  border: 1px solid #e2e8f0;
+  border-radius: 6px;
+  background: white;
+  color: #4a5568;
+  font-size: 1.1rem;
+  line-height: 1;
+  user-select: none;
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  min-width: 40px;
+  min-height: 36px;
+}
+
+.menu-toggle::-webkit-details-marker {
+  display: none;
+}
+
+.menu-toggle::marker {
+  display: none;
+  content: '';
+}
+
+.menu-toggle:hover {
+  background: #f7fafc;
+  border-color: #cbd5e0;
+}
+
+.header-menu[open] > .menu-toggle {
+  background: #edf2f7;
+  border-color: #cbd5e0;
+}
+
+.menu-content {
+  position: absolute;
+  right: 0;
+  top: calc(100% + 6px);
+  background: white;
+  border: 1px solid #cbd5e0;
+  border-radius: 8px;
+  box-shadow: 0 8px 22px rgba(0, 0, 0, 0.18);
+  z-index: 60;
+  min-width: 220px;
+  padding: 0.35rem;
+  display: flex;
+  flex-direction: column;
+  gap: 0.1rem;
+}
+
+.menu-item {
+  display: flex;
+  align-items: center;
+  gap: 0.55rem;
+  padding: 0.55rem 0.7rem;
+  border-radius: 6px;
+  text-decoration: none;
+  color: #2d3748;
+  font-size: 0.9rem;
+  cursor: pointer;
+  white-space: nowrap;
+}
+
+.menu-item:hover {
+  background: #f7fafc;
+}
+
+.menu-checkbox input[type="checkbox"] {
+  margin: 0;
+}
+
 /* Sidebar */
 .sidebar {
   width: 300px;
@@ -108,6 +199,8 @@ button,
   align-items: center;
   gap: 0.5rem;
   transition: background-color 0.2s;
+  touch-action: manipulation;
+  -webkit-tap-highlight-color: transparent;
 }
 
 .file-item:hover {
@@ -116,6 +209,7 @@ button,
 
 .file-item.selected {
   background-color: #3182ce;
+  box-shadow: inset 0 0 0 2px rgba(255, 255, 255, 0.22);
 }
 
 .file-item.drag-target {
@@ -131,11 +225,6 @@ button,
   font-weight: 600;
 }
 
-.file-item.root-drop {
-  border: 1px dashed #4a5568;
-  margin-bottom: 0.5rem;
-}
-
 .file-icon {
   font-size: 1rem;
 }
@@ -179,6 +268,49 @@ button,
   border-radius: 6px;
   padding: 0.2rem 0.45rem;
   white-space: nowrap;
+  display: inline-flex;
+  align-items: center;
+  gap: 0.4rem;
+}
+
+.workspace-badge-label {
+  white-space: nowrap;
+  text-overflow: ellipsis;
+  overflow: hidden;
+  max-width: 220px;
+}
+
+.workspace-badge-exit,
+.workspace-badge-action {
+  appearance: none;
+  border: 1px solid #cbd5e1;
+  background: transparent;
+  color: #475569;
+  border-radius: 4px;
+  padding: 0.05rem 0.4rem;
+  font-size: 0.7rem;
+  cursor: pointer;
+  line-height: 1.4;
+}
+
+.workspace-badge-exit:hover,
+.workspace-badge-action:hover {
+  background: #e2e8f0;
+}
+
+.workspace-badge-action {
+  border-color: #93c5fd;
+  color: #1d4ed8;
+}
+
+.workspace-badge-action:hover {
+  background: #dbeafe;
+}
+
+.workspace-badge-note {
+  font-size: 0.7rem;
+  color: #94a3b8;
+  font-style: italic;
 }
 
 #current-file {
@@ -199,31 +331,6 @@ button,
   color: #e53e3e;
 }
 
-.mode-toggle {
-  display: inline-flex;
-  border: 1px solid #cbd5e0;
-  border-radius: 8px;
-  overflow: hidden;
-}
-
-.mode-btn {
-  border: none;
-  background: #edf2f7;
-  color: #4a5568;
-  padding: 0.45rem 0.8rem;
-  font-size: 0.85rem;
-  cursor: pointer;
-}
-
-.mode-btn + .mode-btn {
-  border-left: 1px solid #cbd5e0;
-}
-
-.mode-btn.active {
-  background: #3182ce;
-  color: white;
-}
-
 .editor-actions {
   display: flex;
   gap: 0.5rem;
@@ -240,6 +347,21 @@ button,
   transition: all 0.2s;
 }
 
+.icon-btn {
+  font-size: 1rem;
+  line-height: 1;
+  padding: 0.5rem 0.75rem;
+  min-width: 40px;
+}
+
+#run-btn.icon-btn {
+  color: #2f855a;
+}
+
+#stop-btn.icon-btn {
+  color: #c53030;
+}
+
 .editor-actions button:hover:not(:disabled) {
   background-color: #f7fafc;
   border-color: #cbd5e0;
@@ -254,23 +376,6 @@ button,
   background-color: #edf2f7;
 }
 
-.run-main-toggle {
-  display: inline-flex;
-  align-items: center;
-  gap: 0.45rem;
-  border: 1px solid #e2e8f0;
-  border-radius: 6px;
-  padding: 0.4rem 0.6rem;
-  font-size: 0.85rem;
-  color: #374151;
-  background: white;
-  white-space: nowrap;
-}
-
-.run-main-toggle input[type="checkbox"] {
-  margin: 0;
-}
-
 .editor-container {
   flex: 1;
   position: relative;
@@ -375,7 +480,7 @@ button,
   font-family: 'Monaco', 'Menlo', 'Ubuntu Mono', monospace;
   font-size: 14px;
   line-height: 1.5;
-  padding: 1rem;
+  padding: 0;
   resize: none;
 }
 
@@ -386,6 +491,18 @@ button,
   line-height: 1.5;
 }
 
+/* Pin line-number gutter hard to the left edge of the editor pane. */
+.cm-editor .cm-gutters {
+  border-right: 1px solid #e2e8f0;
+  background: #f7fafc;
+  padding-left: 0;
+}
+
+.cm-editor .cm-content {
+  padding-top: 0.5rem;
+  padding-bottom: 0.5rem;
+}
+
 .cm-focused {
   outline: none;
 }
@@ -396,6 +513,15 @@ button,
   display: flex;
   flex-direction: column;
   background: #0f172a;
+  flex-shrink: 0;
+}
+
+.console-container.is-collapsed {
+  height: auto;
+}
+
+.console-container.is-collapsed .console-output {
+  display: none;
 }
 
 .led-sim-panel {
@@ -481,11 +607,415 @@ button,
   box-shadow: inset 0 0 8px rgba(0, 0, 0, 0.45);
 }
 
+.pin-panel {
+  border-top: 1px solid #e2e8f0;
+  background: #0b1220;
+  color: #e5e7eb;
+  padding: 0.55rem 0.75rem 0.7rem;
+}
+
+.pin-panel.hidden {
+  display: none;
+}
+
+.pin-panel-header {
+  display: flex;
+  align-items: baseline;
+  justify-content: space-between;
+  gap: 0.75rem;
+  margin-bottom: 0.45rem;
+}
+
+.pin-panel-title {
+  font-size: 0.85rem;
+  font-weight: 600;
+  color: #f3f4f6;
+}
+
+.pin-panel-hint {
+  font-size: 0.7rem;
+  color: #94a3b8;
+}
+
+.pin-rows {
+  display: flex;
+  flex-direction: column;
+  gap: 0.35rem;
+  max-height: 26vh;
+  overflow-y: auto;
+}
+
+.pin-row {
+  display: grid;
+  grid-template-columns: 70px 24px 56px 1fr 90px;
+  align-items: center;
+  gap: 0.55rem;
+  font-size: 0.8rem;
+}
+
+.pin-row-label {
+  color: #cbd5e1;
+  font-variant-numeric: tabular-nums;
+}
+
+.pin-led {
+  width: 14px;
+  height: 14px;
+  border-radius: 50%;
+  background: #1e293b;
+  border: 1px solid #334155;
+  box-shadow: inset 0 0 4px rgba(0, 0, 0, 0.6);
+  justify-self: center;
+}
+
+.pin-led.on {
+  background: #fde047;
+  border-color: #facc15;
+  box-shadow: 0 0 10px rgba(253, 224, 71, 0.7), inset 0 0 4px rgba(0, 0, 0, 0.25);
+}
+
+.pin-toggle {
+  appearance: none;
+  border: 1px solid #334155;
+  background: #1e293b;
+  color: #e5e7eb;
+  border-radius: 6px;
+  padding: 0.2rem 0;
+  font-family: 'SFMono-Regular', Menlo, monospace;
+  font-size: 0.85rem;
+  cursor: pointer;
+  text-align: center;
+}
+
+.pin-toggle.on {
+  background: #16a34a;
+  border-color: #15803d;
+  color: #f0fdf4;
+}
+
+.pin-pwm-bar {
+  position: relative;
+  height: 10px;
+  background: #1e293b;
+  border-radius: 999px;
+  border: 1px solid #334155;
+  overflow: hidden;
+}
+
+.pin-pwm-fill {
+  height: 100%;
+  width: 0%;
+  background: linear-gradient(90deg, #38bdf8, #818cf8);
+  transition: width 80ms linear;
+}
+
+.pin-row-detail {
+  text-align: right;
+  font-size: 0.72rem;
+  color: #94a3b8;
+  font-variant-numeric: tabular-nums;
+}
+
+@media (max-width: 600px) {
+  .pin-row {
+    grid-template-columns: 60px 22px 50px 1fr 70px;
+    gap: 0.4rem;
+    font-size: 0.75rem;
+  }
+  .pin-row-detail {
+    font-size: 0.68rem;
+  }
+}
+
+.adc-panel {
+  border-top: 1px solid #e2e8f0;
+  background: #0f172a;
+  color: #e5e7eb;
+  padding: 0.6rem 0.75rem 0.75rem;
+}
+
+.adc-panel.hidden {
+  display: none;
+}
+
+.adc-panel-header {
+  display: flex;
+  align-items: baseline;
+  justify-content: space-between;
+  gap: 0.75rem;
+  margin-bottom: 0.45rem;
+}
+
+.adc-panel-title {
+  font-size: 0.85rem;
+  font-weight: 600;
+  letter-spacing: 0.02em;
+  color: #f3f4f6;
+}
+
+.adc-panel-hint {
+  font-size: 0.72rem;
+  color: #9ca3af;
+}
+
+.adc-sliders {
+  display: flex;
+  flex-direction: column;
+  gap: 0.4rem;
+  max-height: 32vh;
+  overflow-y: auto;
+}
+
+.adc-row {
+  display: grid;
+  grid-template-columns: 90px 1fr 130px;
+  align-items: center;
+  gap: 0.6rem;
+}
+
+.adc-row-label {
+  font-size: 0.8rem;
+  color: #cbd5e1;
+}
+
+.adc-slider {
+  width: 100%;
+  appearance: none;
+  -webkit-appearance: none;
+  height: 6px;
+  background: #1e293b;
+  border-radius: 999px;
+  outline: none;
+  cursor: pointer;
+}
+
+.adc-slider::-webkit-slider-thumb {
+  -webkit-appearance: none;
+  appearance: none;
+  width: 18px;
+  height: 18px;
+  border-radius: 50%;
+  background: #38bdf8;
+  border: 2px solid #0f172a;
+  cursor: grab;
+  box-shadow: 0 0 0 1px rgba(56, 189, 248, 0.3);
+}
+
+.adc-slider::-webkit-slider-thumb:active {
+  cursor: grabbing;
+}
+
+.adc-slider::-moz-range-thumb {
+  width: 18px;
+  height: 18px;
+  border-radius: 50%;
+  background: #38bdf8;
+  border: 2px solid #0f172a;
+  cursor: grab;
+}
+
+.adc-readout {
+  font-family: 'SFMono-Regular', Menlo, monospace;
+  font-size: 0.78rem;
+  color: #94a3b8;
+  text-align: right;
+  font-variant-numeric: tabular-nums;
+}
+
+@media (max-width: 600px) {
+  .adc-row {
+    grid-template-columns: 1fr;
+    gap: 0.25rem;
+    padding-bottom: 0.25rem;
+    border-bottom: 1px solid rgba(148, 163, 184, 0.15);
+  }
+
+  .adc-row-label {
+    font-size: 0.78rem;
+  }
+
+  .adc-readout {
+    text-align: left;
+  }
+}
+
+.serial-panel {
+  border-top: 1px solid #e2e8f0;
+  background: #0b1220;
+  color: #e5e7eb;
+  padding: 0.55rem 0.75rem 0.7rem;
+  display: flex;
+  flex-direction: column;
+  gap: 0.45rem;
+}
+
+.serial-panel.hidden {
+  display: none;
+}
+
+.serial-header {
+  display: flex;
+  align-items: baseline;
+  gap: 0.6rem;
+}
+
+.serial-title {
+  font-size: 0.85rem;
+  font-weight: 600;
+  color: #f3f4f6;
+}
+
+.serial-meta {
+  font-size: 0.72rem;
+  color: #94a3b8;
+  flex: 1 1 auto;
+}
+
+.serial-clear {
+  appearance: none;
+  border: 1px solid #334155;
+  background: #1e293b;
+  color: #e5e7eb;
+  padding: 0.15rem 0.55rem;
+  border-radius: 6px;
+  font-size: 0.72rem;
+  cursor: pointer;
+}
+
+.serial-clear:hover {
+  background: #243244;
+}
+
+.serial-output {
+  background: #020617;
+  border: 1px solid #1e293b;
+  border-radius: 6px;
+  padding: 0.55rem 0.7rem;
+  font-family: 'SFMono-Regular', Menlo, Consolas, monospace;
+  font-size: 0.82rem;
+  line-height: 1.4;
+  height: 120px;
+  max-height: 28vh;
+  overflow-y: auto;
+  white-space: pre-wrap;
+  word-break: break-word;
+}
+
+.serial-rx {
+  color: #e2e8f0;
+}
+
+.serial-tx {
+  color: #34d399;
+}
+
+.serial-form {
+  display: flex;
+  gap: 0.5rem;
+  align-items: center;
+}
+
+.serial-input {
+  flex: 1 1 auto;
+  min-width: 0;
+  background: #0f172a;
+  border: 1px solid #334155;
+  color: #f8fafc;
+  padding: 0.4rem 0.6rem;
+  border-radius: 6px;
+  font-family: 'SFMono-Regular', Menlo, Consolas, monospace;
+  font-size: 0.85rem;
+}
+
+.serial-input:focus {
+  outline: none;
+  border-color: #38bdf8;
+  box-shadow: 0 0 0 2px rgba(56, 189, 248, 0.25);
+}
+
+.serial-newline {
+  display: inline-flex;
+  align-items: center;
+  gap: 0.25rem;
+  font-size: 0.75rem;
+  color: #cbd5e1;
+  user-select: none;
+}
+
+.serial-send {
+  appearance: none;
+  border: 1px solid #1d4ed8;
+  background: #2563eb;
+  color: #fff;
+  font-weight: 600;
+  padding: 0.4rem 0.85rem;
+  border-radius: 6px;
+  cursor: pointer;
+  font-size: 0.82rem;
+}
+
+.serial-send:hover {
+  background: #1d4ed8;
+}
+
+@media (max-width: 600px) {
+  .serial-output {
+    height: 110px;
+    font-size: 0.78rem;
+  }
+
+  .serial-form {
+    flex-wrap: wrap;
+  }
+
+  .serial-input {
+    flex: 1 1 100%;
+  }
+
+  .serial-newline {
+    flex: 0 0 auto;
+  }
+
+  .serial-send {
+    flex: 0 0 auto;
+    margin-left: auto;
+  }
+}
+
 .console-header {
   padding: 0.5rem 0.75rem;
   font-size: 0.85rem;
   color: #cbd5e1;
   border-bottom: 1px solid #1e293b;
+  background: transparent;
+  border-left: 0;
+  border-right: 0;
+  border-top: 0;
+  display: flex;
+  align-items: center;
+  gap: 0.5rem;
+  width: 100%;
+  text-align: left;
+  cursor: pointer;
+  font-family: inherit;
+}
+
+.console-header:hover {
+  background: rgba(255, 255, 255, 0.04);
+}
+
+.console-header .chevron {
+  display: inline-block;
+  transition: transform 0.15s ease;
+  color: #94a3b8;
+}
+
+.console-container.is-collapsed .console-header .chevron {
+  transform: rotate(-90deg);
+}
+
+.console-container.is-collapsed .console-header {
+  border-bottom: 0;
 }
 
 .console-output {
@@ -574,6 +1104,13 @@ button,
   border-color: #2c5aa0;
 }
 
+/* Desktop: hide the file browser when collapsed via the hamburger toggle. */
+@media (min-width: 769px) {
+  .sidebar.is-collapsed {
+    display: none;
+  }
+}
+
 /* Responsive design */
 @media (max-width: 768px) {
   .container {
@@ -638,51 +1175,53 @@ button,
   }
 
   .editor-header {
-    padding: 0.55rem 0.65rem;
-    flex-wrap: wrap;
-    gap: 0.45rem;
+    padding: 0.5rem 0.6rem;
+    flex-wrap: nowrap;
+    gap: 0.4rem;
     align-items: center;
-    padding-top: max(0.55rem, env(safe-area-inset-top));
+    padding-top: max(0.5rem, env(safe-area-inset-top));
   }
 
   .file-info {
     flex: 1 1 auto;
     min-width: 0;
-    gap: 0.5rem;
-    flex-wrap: wrap;
+    gap: 0.4rem;
+    flex-wrap: nowrap;
+    overflow: hidden;
   }
 
-  .file-info .runtime-hint {
+  .save-status {
+    overflow: hidden;
+    text-overflow: ellipsis;
+    white-space: nowrap;
+  }
+
+  #workspace-badge {
     font-size: 0.7rem;
     padding: 0.15rem 0.4rem;
-  }
-
-  .mode-toggle {
-    order: 3;
-  }
-
-  .mode-btn {
-    min-height: 36px;
-    padding: 0.5rem 0.85rem;
+    overflow: hidden;
+    text-overflow: ellipsis;
+    white-space: nowrap;
+    max-width: 8rem;
   }
 
   .editor-actions {
-    width: 100%;
-    order: 4;
-    flex-wrap: wrap;
-    gap: 0.4rem;
+    flex: 0 0 auto;
+    gap: 0.35rem;
   }
 
-  .editor-actions button {
-    flex: 1 1 110px;
+  .editor-actions .icon-btn {
+    flex: 0 0 auto;
+    font-size: 1.05rem;
+    padding: 0.45rem 0.7rem;
+    min-width: 40px;
     min-height: 40px;
-    font-size: 0.95rem;
   }
 
-  .run-main-toggle {
-    flex: 1 1 calc(50% - 0.4rem);
+  .menu-toggle {
     min-height: 40px;
-    font-size: 0.85rem;
+    flex: 0 0 auto;
+    padding: 0.45rem 0.55rem;
   }
 
   .tabs {
@@ -756,6 +1295,57 @@ button,
   }
 }
 
+/* ADC / Pins / Serial: touch-friendly on phones + safe-area padding */
+@media (max-width: 768px) {
+  .adc-panel,
+  .pin-panel,
+  .serial-panel {
+    padding-left: max(0.75rem, env(safe-area-inset-left));
+    padding-right: max(0.75rem, env(safe-area-inset-right));
+    padding-bottom: max(0.65rem, env(safe-area-inset-bottom));
+    -webkit-tap-highlight-color: transparent;
+  }
+
+  .adc-slider {
+    min-height: 2.75rem;
+    padding: 0.75rem 0;
+    box-sizing: border-box;
+  }
+
+  .adc-slider::-webkit-slider-thumb {
+    width: 28px;
+    height: 28px;
+  }
+
+  .adc-slider::-moz-range-thumb {
+    width: 28px;
+    height: 28px;
+  }
+
+  .pin-toggle {
+    min-height: 44px;
+    min-width: 44px;
+    padding: 0.35rem 0.45rem;
+  }
+
+  .pin-led {
+    width: 18px;
+    height: 18px;
+  }
+
+  .serial-send,
+  .serial-clear {
+    min-height: 44px;
+    padding: 0.4rem 0.85rem;
+    font-size: 0.9rem;
+  }
+
+  .serial-input {
+    min-height: 44px;
+    font-size: 16px;
+  }
+}
+
 /* Hide drawer affordances entirely on desktop, even with [hidden] flipped off. */
 @media (min-width: 769px) {
   .sidebar-backdrop {
diff --git a/src/static/users.html b/src/static/users.html
new file mode 100644
index 0000000..cefb65d
--- /dev/null
+++ b/src/static/users.html
@@ -0,0 +1,484 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>Manage users — LED Editor</title>
+  <link rel="icon" href="data:,">
+  <style>
+    * { box-sizing: border-box; }
+    body {
+      margin: 0;
+      min-height: 100vh;
+      display: grid;
+      place-items: center;
+      font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif;
+      background: linear-gradient(135deg, #0f172a, #1e293b);
+      color: #e2e8f0;
+    }
+    .home-card {
+      width: min(640px, 92vw);
+      background: rgba(15, 23, 42, 0.78);
+      border: 1px solid rgba(148, 163, 184, 0.25);
+      border-radius: 14px;
+      padding: 2rem;
+      box-shadow: 0 20px 45px rgba(0, 0, 0, 0.35);
+    }
+    h1 { margin: 0 0 0.5rem 0; font-size: 1.6rem; color: #f8fafc; }
+    p { margin: 0 0 1rem 0; color: #cbd5e1; line-height: 1.5; }
+    .btn {
+      display: inline-block;
+      text-decoration: none;
+      border-radius: 8px;
+      padding: 0.55rem 0.9rem;
+      font-weight: 600;
+      border: 1px solid transparent;
+      cursor: pointer;
+      font-size: 0.95rem;
+    }
+    .btn-primary { background: #3b82f6; color: #ffffff; }
+    .btn-ghost { background: transparent; border-color: #64748b; color: #e2e8f0; }
+    .btn-danger { background: transparent; border-color: #f87171; color: #fecaca; }
+    .btn-danger:hover:not(:disabled) { background: rgba(248, 113, 113, 0.15); }
+    .btn:disabled { opacity: 0.45; cursor: not-allowed; }
+    label { display: block; font-size: 0.85rem; color: #94a3b8; margin-bottom: 0.35rem; }
+    .note { font-size: 0.85rem; color: #94a3b8; }
+    .nav { display: flex; flex-wrap: wrap; gap: 0.5rem; margin-bottom: 1rem; align-items: center; }
+    .hidden { display: none !important; }
+    .invite-panel,
+    .users-panel {
+      margin: 1rem 0;
+      padding: 0.9rem;
+      border: 1px solid rgba(148, 163, 184, 0.35);
+      border-radius: 10px;
+      background: rgba(30, 41, 59, 0.45);
+    }
+    .invite-row {
+      display: flex;
+      gap: 0.5rem;
+      flex-wrap: wrap;
+      margin-top: 0.4rem;
+    }
+    .invite-row input[type="email"] {
+      flex: 1 1 260px;
+      padding: 0.5rem 0.65rem;
+      border-radius: 8px;
+      border: 1px solid #64748b;
+      background: #0f172a;
+      color: #e2e8f0;
+    }
+    .invite-result {
+      margin-top: 0.55rem;
+      font-size: 0.85rem;
+      color: #cbd5e1;
+      word-break: break-all;
+    }
+    .users-list { margin-top: 0.5rem; display: grid; gap: 0.45rem; }
+    .user-row {
+      display: flex;
+      justify-content: space-between;
+      align-items: center;
+      gap: 0.5rem;
+      font-size: 0.9rem;
+    }
+    .user-row a {
+      color: #93c5fd;
+      text-decoration: none;
+      border: 1px solid rgba(147, 197, 253, 0.35);
+      border-radius: 6px;
+      padding: 0.25rem 0.5rem;
+    }
+    .user-actions {
+      display: flex;
+      flex-wrap: wrap;
+      gap: 0.35rem;
+      align-items: center;
+      justify-content: flex-end;
+    }
+    #admin-users-feedback:not(:empty) {
+      padding: 0.5rem 0.65rem;
+      border-radius: 8px;
+      font-size: 0.85rem;
+      margin: 0.5rem 0;
+    }
+    #admin-users-feedback.ok {
+      background: rgba(34, 197, 94, 0.12);
+      border: 1px solid rgba(74, 222, 128, 0.35);
+      color: #bbf7d0;
+    }
+    #admin-users-feedback.err {
+      background: rgba(248, 113, 113, 0.1);
+      border: 1px solid rgba(248, 113, 113, 0.35);
+      color: #fecaca;
+    }
+    .user-edit-form {
+      margin-top: 1rem;
+      padding-top: 1rem;
+      border-top: 1px solid rgba(148, 163, 184, 0.25);
+    }
+    .user-edit-form label { display: block; margin-bottom: 0.65rem; }
+    .user-edit-form input[type='text'],
+    .user-edit-form input[type='password'] {
+      width: 100%;
+      max-width: 320px;
+      padding: 0.45rem 0.55rem;
+      border-radius: 8px;
+      border: 1px solid #64748b;
+      background: #0f172a;
+      color: #e2e8f0;
+      margin-top: 0.25rem;
+    }
+    .user-edit-form .edit-actions {
+      display: flex; flex-wrap: wrap; gap: 0.5rem; margin-top: 0.65rem;
+    }
+    .user-edit-form .super-line {
+      display: flex; align-items: center; gap: 0.5rem;
+      font-size: 0.85rem; color: #cbd5e1; margin-bottom: 0.65rem;
+    }
+    .user-edit-form .super-line input { accent-color: #3b82f6; }
+  </style>
+</head>
+<body>
+  <main class="home-card">
+    <h1>Manage users</h1>
+    <p class="note">Superuser-only. Add accounts via invite link, edit roles, or remove users.</p>
+    <div class="nav">
+      <a class="btn btn-ghost" href="/">← Home</a>
+      <a class="btn btn-ghost" href="/editor">Open editor</a>
+      <span id="auth-greeting"></span>
+      <button type="button" class="btn btn-ghost hidden" id="btn-logout">Sign out</button>
+    </div>
+
+    <div id="not-allowed" class="hidden">
+      <p style="color:#fca5a5">You need to be signed in as a superuser to manage users.
+        <a href="/login?next=/users" style="color:#93c5fd">Sign in</a></p>
+    </div>
+
+    <section id="users-panel" class="users-panel hidden">
+      <strong>Accounts</strong>
+      <div id="admin-users-feedback" role="status" aria-live="polite"></div>
+      <div id="users-list" class="users-list"></div>
+      <div id="user-edit-form" class="user-edit-form hidden">
+        <strong id="user-edit-heading">Edit account</strong>
+        <p class="note" style="margin: 0.35rem 0 0.5rem">Change login name or admin role; set a password only when you mean to reset it.</p>
+        <input type="hidden" id="edit-user-id" autocomplete="off" />
+        <label for="edit-user-username">Username
+          <input type="text" id="edit-user-username" name="username" autocomplete="username" minlength="3" maxlength="64" />
+        </label>
+        <label for="edit-user-password">New password
+          <input type="password" id="edit-user-password" name="password" autocomplete="new-password" minlength="8" maxlength="128" placeholder="Leave blank to keep current" />
+        </label>
+        <label class="super-line">
+          <input type="checkbox" id="edit-user-super" />
+          Superuser (can manage accounts and invites)
+        </label>
+        <div class="edit-actions">
+          <button type="button" class="btn btn-primary" id="edit-user-save">Save changes</button>
+          <button type="button" class="btn btn-ghost" id="edit-user-cancel">Cancel</button>
+        </div>
+      </div>
+    </section>
+
+    <section id="invite-panel" class="invite-panel hidden">
+      <strong>Add users via invite link</strong>
+      <p class="note" style="margin-top:0.4rem">
+        Each link lets <strong>one</strong> person create their own account at <code>/register?invite=…</code> with a password they choose. After it is used, create a new link for the next person.
+      </p>
+      <div class="invite-row">
+        <input id="invite-email" type="email" placeholder="new.user@example.com" autocomplete="email" />
+        <button type="button" class="btn btn-primary" id="invite-create-btn">Email invite</button>
+        <button type="button" class="btn btn-ghost" id="invite-link-btn">Invite link only</button>
+      </div>
+      <div id="invite-result" class="invite-result"></div>
+      <button type="button" class="btn btn-ghost hidden" id="invite-copy-btn" aria-label="Copy invite link">Copy invite link</button>
+    </section>
+  </main>
+  <script>
+    let currentAdminUserId = null;
+
+    function formatApiDetail(body) {
+      if (!body || body.detail === undefined || body.detail === null) return '';
+      const d = body.detail;
+      if (typeof d === 'string') return d;
+      if (Array.isArray(d))
+        return d.map((item) => (typeof item === 'object' && item && item.msg ? String(item.msg) : JSON.stringify(item))).join(' ');
+      return String(d);
+    }
+
+    function setAdminUsersFeedback(kind, msg) {
+      const el = document.getElementById('admin-users-feedback');
+      if (!el) return;
+      el.textContent = msg || '';
+      el.classList.remove('ok', 'err');
+      if (kind === 'ok') el.classList.add('ok');
+      if (kind === 'err') el.classList.add('err');
+    }
+
+    async function refreshUsersList(viewerId) {
+      const usersList = document.getElementById('users-list');
+      if (!usersList) return;
+      usersList.textContent = 'Loading users...';
+      try {
+        const res = await fetch('/api/users', { credentials: 'include' });
+        const users = await res.json().catch(() => []);
+        if (!res.ok) {
+          usersList.textContent = 'Unable to load users.';
+          return;
+        }
+        usersList.innerHTML = '';
+        for (const user of users) {
+          const row = document.createElement('div');
+          row.className = 'user-row';
+          const name = document.createElement('span');
+          name.textContent = `${user.username}${user.is_superuser ? ' (admin)' : ''}`;
+          const actions = document.createElement('div');
+          actions.className = 'user-actions';
+          const link = document.createElement('a');
+          link.href = `/editor?workspace_user_id=${encodeURIComponent(String(user.id))}`;
+          link.textContent = 'Open workspace';
+          const editBtn = document.createElement('button');
+          editBtn.type = 'button';
+          editBtn.className = 'btn btn-ghost';
+          editBtn.textContent = 'Edit';
+          editBtn.title = `Edit ${user.username}`;
+          editBtn.addEventListener('click', () => openUserEdit(user.id, user.username, user.is_superuser));
+          const delBtn = document.createElement('button');
+          delBtn.type = 'button';
+          delBtn.className = 'btn btn-ghost btn-danger';
+          delBtn.textContent = 'Remove';
+          const isSelf = Number(user.id) === Number(viewerId);
+          delBtn.disabled = isSelf;
+          delBtn.title = isSelf ? 'You cannot delete your own account here' : 'Permanently remove this user';
+          delBtn.addEventListener('click', async () => {
+            const ok = confirm(`Remove user “${user.username}”? Their workspace folder stays on disk until you delete it manually.`);
+            if (!ok) return;
+            delBtn.disabled = true;
+            setAdminUsersFeedback('', '');
+            try {
+              const dres = await fetch(`/api/users/${encodeURIComponent(String(user.id))}`, {
+                method: 'DELETE', credentials: 'include',
+              });
+              const body = await dres.json().catch(() => ({}));
+              if (!dres.ok) {
+                setAdminUsersFeedback('err', formatApiDetail(body) || dres.statusText || 'Could not remove user');
+                delBtn.disabled = false;
+                return;
+              }
+              setAdminUsersFeedback('ok', `Removed ${user.username}.`);
+              await refreshUsersList(viewerId);
+            } catch (err) {
+              setAdminUsersFeedback('err', String(err.message || err));
+              delBtn.disabled = false;
+            }
+          });
+          actions.appendChild(editBtn);
+          actions.appendChild(link);
+          actions.appendChild(delBtn);
+          row.appendChild(name);
+          row.appendChild(actions);
+          usersList.appendChild(row);
+        }
+      } catch (_err) {
+        usersList.textContent = 'Unable to load users.';
+      }
+    }
+
+    function closeUserEdit() {
+      const sheet = document.getElementById('user-edit-form');
+      if (sheet) sheet.classList.add('hidden');
+    }
+
+    function openUserEdit(userId, username, isSuperuser) {
+      document.getElementById('edit-user-id').value = String(userId);
+      document.getElementById('edit-user-username').value = username;
+      document.getElementById('edit-user-password').value = '';
+      document.getElementById('edit-user-super').checked = Boolean(isSuperuser);
+      document.getElementById('user-edit-heading').textContent = `Edit @${username}`;
+      document.getElementById('user-edit-form').classList.remove('hidden');
+    }
+
+    document.getElementById('edit-user-cancel').addEventListener('click', () => closeUserEdit());
+
+    document.getElementById('edit-user-save').addEventListener('click', async () => {
+      const id = document.getElementById('edit-user-id').value;
+      const u = document.getElementById('edit-user-username').value.trim();
+      const pw = document.getElementById('edit-user-password').value;
+      const superU = document.getElementById('edit-user-super').checked;
+      const saveBtn = document.getElementById('edit-user-save');
+      setAdminUsersFeedback('', '');
+      if (!u || u.length < 3) {
+        setAdminUsersFeedback('err', 'Username must be at least 3 characters.');
+        return;
+      }
+      const payload = { username: u, is_superuser: superU };
+      const tpw = pw.trim();
+      if (tpw.length > 0) {
+        if (tpw.length < 8) {
+          setAdminUsersFeedback('err', 'New password must be at least 8 characters (or leave blank).');
+          return;
+        }
+        payload.password = tpw;
+      }
+      saveBtn.disabled = true;
+      try {
+        const res = await fetch(`/api/users/${encodeURIComponent(String(id))}`, {
+          method: 'PATCH',
+          credentials: 'include',
+          headers: { 'Content-Type': 'application/json' },
+          body: JSON.stringify(payload),
+        });
+        const body = await res.json().catch(() => ({}));
+        if (!res.ok) {
+          setAdminUsersFeedback('err', formatApiDetail(body) || res.statusText || 'Update failed');
+          saveBtn.disabled = false;
+          return;
+        }
+        setAdminUsersFeedback('ok', `Updated @${body.username}.`);
+        closeUserEdit();
+        await refreshUsersList(currentAdminUserId);
+      } catch (err) {
+        setAdminUsersFeedback('err', String(err.message || err));
+      }
+      saveBtn.disabled = false;
+    });
+
+    document.getElementById('btn-logout').addEventListener('click', async () => {
+      await fetch('/api/auth/logout', { method: 'POST', credentials: 'include' });
+      window.location.href = '/';
+    });
+
+    function showInviteOutcome(inviteUrl, headline) {
+      const result = document.getElementById('invite-result');
+      const copyBtn = document.getElementById('invite-copy-btn');
+      result.textContent = '';
+      const line = document.createElement('p');
+      line.style.margin = '0 0 0.35rem 0';
+      line.textContent = headline;
+      const a = document.createElement('a');
+      a.href = inviteUrl;
+      a.textContent = inviteUrl;
+      a.style.color = '#93c5fd';
+      a.style.wordBreak = 'break-all';
+      result.appendChild(line);
+      result.appendChild(a);
+      copyBtn.classList.remove('hidden');
+      copyBtn.dataset.inviteUrl = inviteUrl;
+    }
+
+    function clearInviteOutcome() {
+      const result = document.getElementById('invite-result');
+      const copyBtn = document.getElementById('invite-copy-btn');
+      result.textContent = '';
+      copyBtn.classList.add('hidden');
+      copyBtn.textContent = 'Copy invite link';
+      delete copyBtn.dataset.inviteUrl;
+    }
+
+    document.getElementById('invite-copy-btn').addEventListener('click', async () => {
+      const copyBtn = document.getElementById('invite-copy-btn');
+      const url = copyBtn.dataset.inviteUrl;
+      if (!url) return;
+      try {
+        await navigator.clipboard.writeText(url);
+        copyBtn.textContent = 'Copied!';
+        setTimeout(() => { copyBtn.textContent = 'Copy invite link'; }, 2000);
+      } catch (_e) {
+        copyBtn.textContent = 'Copy failed — select the link above';
+        setTimeout(() => { copyBtn.textContent = 'Copy invite link'; }, 2500);
+      }
+    });
+
+    document.getElementById('invite-create-btn').addEventListener('click', async () => {
+      const emailInput = document.getElementById('invite-email');
+      const result = document.getElementById('invite-result');
+      const email = (emailInput.value || '').trim();
+      clearInviteOutcome();
+      if (!email) {
+        result.textContent = 'Enter an email address first.';
+        return;
+      }
+      try {
+        const res = await fetch('/api/users/invites', {
+          method: 'POST',
+          credentials: 'include',
+          headers: { 'Content-Type': 'application/json' },
+          body: JSON.stringify({ email, expires_days: 7 }),
+        });
+        const body = await res.json().catch(() => ({}));
+        if (!res.ok) {
+          result.textContent = formatApiDetail(body) || res.statusText || 'Failed to create invite';
+          return;
+        }
+        const headline = body.delivered
+          ? 'Email sent. They can also use this link to register:'
+          : 'Email not sent (SMTP not configured). Share this registration link:';
+        showInviteOutcome(body.invite_url, headline);
+      } catch (err) {
+        result.textContent = String(err.message || err);
+      }
+    });
+
+    document.getElementById('invite-link-btn').addEventListener('click', async () => {
+      const result = document.getElementById('invite-result');
+      clearInviteOutcome();
+      try {
+        const res = await fetch('/api/users/invites', {
+          method: 'POST',
+          credentials: 'include',
+          headers: { 'Content-Type': 'application/json' },
+          body: JSON.stringify({ email: null, expires_days: 7 }),
+        });
+        const body = await res.json().catch(() => ({}));
+        if (!res.ok) {
+          result.textContent = formatApiDetail(body) || res.statusText || 'Failed to create invite link';
+          return;
+        }
+        showInviteOutcome(body.invite_url, 'Share this link so they can create an account:');
+      } catch (err) {
+        result.textContent = String(err.message || err);
+      }
+    });
+
+    async function init() {
+      const greet = document.getElementById('auth-greeting');
+      const logout = document.getElementById('btn-logout');
+      const usersPanel = document.getElementById('users-panel');
+      const invitePanel = document.getElementById('invite-panel');
+      const blocked = document.getElementById('not-allowed');
+
+      const st = await fetch('/api/auth/status').catch(() => null);
+      if (!st || !st.ok) {
+        blocked.classList.remove('hidden');
+        return;
+      }
+      const status = await st.json();
+      if (!status.auth_enabled) {
+        // Auth disabled — anyone can poke /api/users; show panels regardless.
+        usersPanel.classList.remove('hidden');
+        invitePanel.classList.remove('hidden');
+        await refreshUsersList(null);
+        return;
+      }
+      const me = await fetch('/api/auth/me', { credentials: 'include' });
+      if (!me.ok) {
+        blocked.classList.remove('hidden');
+        return;
+      }
+      const j = await me.json();
+      if (!j.user || !j.user.is_superuser) {
+        blocked.classList.remove('hidden');
+        greet.textContent = `Signed in as ${j.user.username}`;
+        logout.classList.remove('hidden');
+        return;
+      }
+      currentAdminUserId = j.user.id;
+      greet.textContent = `Signed in as ${j.user.username} (admin)`;
+      logout.classList.remove('hidden');
+      usersPanel.classList.remove('hidden');
+      invitePanel.classList.remove('hidden');
+      await refreshUsersList(j.user.id);
+    }
+    init();
+  </script>
+</body>
+</html>
diff --git a/src/static/zip-utils.js b/src/static/zip-utils.js
new file mode 100644
index 0000000..0b66b45
--- /dev/null
+++ b/src/static/zip-utils.js
@@ -0,0 +1,204 @@
+/**
+ * Tiny zero-dependency ZIP encoder. STORE-only (no compression) — fine for
+ * Python source which is small, gzip would only save a few KB. Kept inline
+ * here so local-mode export works on every browser, including the ones
+ * (Firefox/Safari/Brave-without-flag) that have no folder picker.
+ *
+ * Format reference: APPNOTE.TXT 6.3.x
+ */
+
+let _crcTable = null;
+function crcTable() {
+  if (_crcTable) return _crcTable;
+  const t = new Uint32Array(256);
+  for (let i = 0; i < 256; i++) {
+    let c = i;
+    for (let j = 0; j < 8; j++) c = c & 1 ? 0xedb88320 ^ (c >>> 1) : c >>> 1;
+    t[i] = c;
+  }
+  _crcTable = t;
+  return t;
+}
+
+function crc32(bytes) {
+  const tbl = crcTable();
+  let c = 0xffffffff;
+  for (let i = 0; i < bytes.length; i++) c = tbl[(c ^ bytes[i]) & 0xff] ^ (c >>> 8);
+  return (c ^ 0xffffffff) >>> 0;
+}
+
+function dosTime(d) {
+  return ((d.getHours() << 11) | (d.getMinutes() << 5) | (d.getSeconds() >> 1)) & 0xffff;
+}
+function dosDate(d) {
+  return (((d.getFullYear() - 1980) << 9) | ((d.getMonth() + 1) << 5) | d.getDate()) & 0xffff;
+}
+
+/**
+ * Build an uncompressed ZIP from a list of `{ name, content }` entries.
+ * `content` may be a string or a Uint8Array.
+ *
+ * Returns a Blob (`application/zip`).
+ */
+export function createZip(entries) {
+  const enc = new TextEncoder();
+  const date = new Date();
+  const time = dosTime(date);
+  const ddate = dosDate(date);
+  const parts = [];
+  const central = [];
+  let offset = 0;
+
+  for (const entry of entries) {
+    const data = typeof entry.content === 'string' ? enc.encode(entry.content) : entry.content;
+    const nameBytes = enc.encode(entry.name);
+    const crc = crc32(data);
+
+    const local = new ArrayBuffer(30 + nameBytes.length);
+    const lv = new DataView(local);
+    lv.setUint32(0, 0x04034b50, true);
+    lv.setUint16(4, 20, true);
+    lv.setUint16(6, 0x0800, true); // bit 11 = UTF-8 filename
+    lv.setUint16(8, 0, true);
+    lv.setUint16(10, time, true);
+    lv.setUint16(12, ddate, true);
+    lv.setUint32(14, crc, true);
+    lv.setUint32(18, data.length, true);
+    lv.setUint32(22, data.length, true);
+    lv.setUint16(26, nameBytes.length, true);
+    lv.setUint16(28, 0, true);
+    new Uint8Array(local, 30).set(nameBytes);
+    parts.push(local);
+    parts.push(data);
+
+    const cd = new ArrayBuffer(46 + nameBytes.length);
+    const cv = new DataView(cd);
+    cv.setUint32(0, 0x02014b50, true);
+    cv.setUint16(4, 0x031e, true); // made by: unix + zip 3.0
+    cv.setUint16(6, 20, true);
+    cv.setUint16(8, 0x0800, true);
+    cv.setUint16(10, 0, true);
+    cv.setUint16(12, time, true);
+    cv.setUint16(14, ddate, true);
+    cv.setUint32(16, crc, true);
+    cv.setUint32(20, data.length, true);
+    cv.setUint32(24, data.length, true);
+    cv.setUint16(28, nameBytes.length, true);
+    cv.setUint16(30, 0, true);
+    cv.setUint16(32, 0, true);
+    cv.setUint16(34, 0, true);
+    cv.setUint16(36, 0, true);
+    cv.setUint32(38, 0, true);
+    cv.setUint32(42, offset, true);
+    new Uint8Array(cd, 46).set(nameBytes);
+    central.push(cd);
+
+    offset += local.byteLength + data.length;
+  }
+
+  const cdOffset = offset;
+  let cdSize = 0;
+  for (const cd of central) {
+    parts.push(cd);
+    cdSize += cd.byteLength;
+  }
+
+  const eocd = new ArrayBuffer(22);
+  const ev = new DataView(eocd);
+  ev.setUint32(0, 0x06054b50, true);
+  ev.setUint16(4, 0, true);
+  ev.setUint16(6, 0, true);
+  ev.setUint16(8, entries.length, true);
+  ev.setUint16(10, entries.length, true);
+  ev.setUint32(12, cdSize, true);
+  ev.setUint32(16, cdOffset, true);
+  ev.setUint16(20, 0, true);
+  parts.push(eocd);
+
+  return new Blob(parts, { type: 'application/zip' });
+}
+
+/**
+ * Parse an uncompressed-or-DEFLATEd ZIP buffer into an array of
+ * `{ name, content }` entries (text). Skips directory entries (those that
+ * end with '/'). Throws if the buffer is not a valid ZIP archive.
+ *
+ * Compression methods supported:
+ *   - 0 (STORE)
+ *   - 8 (DEFLATE) — decompressed via the browser's `DecompressionStream`
+ *     ('deflate-raw'), available in Chrome/Edge/Brave 113+, Firefox 113+,
+ *     Safari 16.4+. If the browser is too old we surface a clear error.
+ */
+export async function readZip(arrayBuffer) {
+  const buf = arrayBuffer instanceof ArrayBuffer ? arrayBuffer : arrayBuffer.buffer;
+  const view = new DataView(buf);
+  if (buf.byteLength < 22) throw new Error('Not a ZIP file (too small)');
+
+  // EOCD signature scan from the end (max 64 KiB comment).
+  let eocd = -1;
+  const minScan = Math.max(0, buf.byteLength - 22 - 65535);
+  for (let i = buf.byteLength - 22; i >= minScan; i--) {
+    if (view.getUint32(i, true) === 0x06054b50) {
+      eocd = i;
+      break;
+    }
+  }
+  if (eocd === -1) throw new Error('Not a ZIP file (no end-of-central-directory)');
+  const totalEntries = view.getUint16(eocd + 10, true);
+  const cdOffset = view.getUint32(eocd + 16, true);
+
+  const dec = new TextDecoder();
+  const out = [];
+  let p = cdOffset;
+  for (let i = 0; i < totalEntries; i++) {
+    if (view.getUint32(p, true) !== 0x02014b50) {
+      throw new Error('Bad central-directory entry');
+    }
+    const method = view.getUint16(p + 10, true);
+    const compSize = view.getUint32(p + 20, true);
+    const uncompSize = view.getUint32(p + 24, true);
+    const nameLen = view.getUint16(p + 28, true);
+    const extraLen = view.getUint16(p + 30, true);
+    const commentLen = view.getUint16(p + 32, true);
+    const localOff = view.getUint32(p + 42, true);
+    const name = dec.decode(new Uint8Array(buf, p + 46, nameLen));
+    p += 46 + nameLen + extraLen + commentLen;
+
+    // Directory entry — skip; createFolder happens implicitly when we
+    // write a child file under that path.
+    if (name.endsWith('/')) continue;
+
+    const lview = new DataView(buf, localOff, 30);
+    if (lview.getUint32(0, true) !== 0x04034b50) {
+      throw new Error(`Bad local header for "${name}"`);
+    }
+    const lNameLen = lview.getUint16(26, true);
+    const lExtraLen = lview.getUint16(28, true);
+    const dataOff = localOff + 30 + lNameLen + lExtraLen;
+
+    let bytes;
+    if (method === 0) {
+      bytes = new Uint8Array(buf, dataOff, uncompSize);
+    } else if (method === 8) {
+      if (typeof DecompressionStream === 'undefined') {
+        throw new Error(
+          `"${name}" is DEFLATE-compressed but this browser has no DecompressionStream`
+        );
+      }
+      const compressed = new Uint8Array(buf, dataOff, compSize);
+      const stream = new ReadableStream({
+        start(controller) {
+          controller.enqueue(compressed);
+          controller.close();
+        },
+      }).pipeThrough(new DecompressionStream('deflate-raw'));
+      bytes = new Uint8Array(await new Response(stream).arrayBuffer());
+    } else {
+      throw new Error(`Unsupported compression method ${method} on "${name}"`);
+    }
+
+    out.push({ name, content: dec.decode(bytes) });
+  }
+  return out;
+}
+
diff --git a/tests/test_api.py b/tests/test_api.py
index 030d6a6..95fb6f6 100644
--- a/tests/test_api.py
+++ b/tests/test_api.py
@@ -1,5 +1,4 @@
 import importlib
-import shutil
 from pathlib import Path
 
 import pytest
@@ -10,33 +9,24 @@ def test_root_serves_html(client):
     response = client.get("/")
     assert response.status_code == 200
     assert "text/html" in response.headers["content-type"]
-    assert "Python Editor" in response.text
+    assert "LED Editor" in response.text
 
 
 def test_editor_route_serves_editor_html(client):
     response = client.get("/editor")
     assert response.status_code == 200
     assert "text/html" in response.headers["content-type"]
-    assert "Python Editor" in response.text
+    assert "LED Editor" in response.text
 
 
-def test_workspace_lib_seeded_from_bundle_on_startup(client, tmp_path):
-    """Populate WORKSPACE_ROOT/lib with shipped stubs when absent (empty volume / fresh tmp)."""
-    lib_dir = tmp_path / "lib"
-    assert (lib_dir / "machine.py").is_file()
-    assert (lib_dir / "neopixel.py").is_file()
-    assert len((lib_dir / "machine.py").read_text(encoding="utf-8")) > 0
-
-
-def test_workspace_lib_repops_when_removed_after_startup(client, tmp_path):
-    """Touching lib via the API restores bundled stubs after the workspace lib dir is wiped."""
-    lib_dir = tmp_path / "lib"
-    assert (lib_dir / "machine.py").is_file()
-    shutil.rmtree(lib_dir)
-
+def test_lib_served_directly_from_repo_bundle(client, tmp_path):
+    """`lib/` reads come straight from repo `lib/`; no workspace cache is created."""
     resp = client.get("/api/file/lib/machine.py")
     assert resp.status_code == 200
-    assert (lib_dir / "machine.py").is_file()
+    body = resp.json().get("content", "")
+    assert "class Pin" in body and len(body) > 0
+    assert not (tmp_path / "lib").exists()
+
 
 def test_list_files_hides_dotfiles_and_reports_sizes(client, tmp_path):
     (tmp_path / ".hidden.txt").write_text("secret", encoding="utf-8")
@@ -76,9 +66,6 @@ def test_save_file_collapses_duplicate_scoped_prefix(client, tmp_path):
 
 
 def test_lib_folder_is_read_only_for_mutations(client, tmp_path):
-    lib_dir = tmp_path / "lib"
-    lib_dir.mkdir(exist_ok=True)
-    (lib_dir / "helper.py").write_text("x = 1\n", encoding="utf-8")
     code_dir = tmp_path / "code"
     code_dir.mkdir()
     (code_dir / "main.py").write_text("print('ok')\n", encoding="utf-8")
@@ -86,7 +73,7 @@ def test_lib_folder_is_read_only_for_mutations(client, tmp_path):
     save_blocked = client.post("/api/file/lib/new.txt", json={"content": "nope"})
     assert save_blocked.status_code == 403
 
-    delete_blocked = client.delete("/api/file/lib/helper.py")
+    delete_blocked = client.delete("/api/file/lib/machine.py")
     assert delete_blocked.status_code == 403
 
     move_blocked = client.post(
@@ -252,14 +239,14 @@ def test_folder_delete_errors(client, tmp_path):
 def test_workspace_py_sources_returns_python_files(client, tmp_path):
     (tmp_path / "code").mkdir()
     (tmp_path / "code" / "app.py").write_text("x = 1\n", encoding="utf-8")
-    (tmp_path / "lib").mkdir(exist_ok=True)
-    (tmp_path / "lib" / "util.py").write_text("def f():\n    pass\n", encoding="utf-8")
 
     response = client.get("/api/workspace/py-sources")
     assert response.status_code == 200
     files = response.json()["files"]
     assert files["code/app.py"] == "x = 1\n"
-    assert "lib/util.py" in files
+    # Bundled stubs from repo `lib/` are merged in automatically.
+    assert "lib/machine.py" in files
+    assert "lib/neopixel.py" in files
 
 
 def test_api_requires_bearer_when_editor_api_key_set(tmp_path, monkeypatch):
@@ -284,7 +271,9 @@ def test_api_requires_bearer_when_editor_api_key_set(tmp_path, monkeypatch):
         assert ok.status_code == 200
 
 
-def test_create_app_startup_creates_lib(tmp_path, monkeypatch):
+def test_create_app_startup_does_not_seed_workspace_lib(tmp_path, monkeypatch):
+    """Bundle stubs are read directly from repo `lib/`, so startup must not create
+    a `WORKSPACE_ROOT/lib` cache."""
     import editor_app.config as config
     import editor_app.db.session as db_sess
     import editor_app.main as main
@@ -302,4 +291,4 @@ def test_create_app_startup_creates_lib(tmp_path, monkeypatch):
     assert not (tmp_path / "lib").exists()
     with TestClient(main.app) as _client:
         _client.get("/api/auth/status")
-    assert (tmp_path / "lib").is_dir()
+    assert not (tmp_path / "lib").exists()
diff --git a/tests/test_auth.py b/tests/test_auth.py
index 223906a..2b10740 100644
--- a/tests/test_auth.py
+++ b/tests/test_auth.py
@@ -18,7 +18,7 @@ def _reload_app(tmp_path, monkeypatch, **env):
     monkeypatch.delenv("BOOTSTRAP_ADMIN_PASSWORD", raising=False)
     for k, v in env.items():
         monkeypatch.setenv(k, v)
-    config.WORKSPACE_ROOT = tmp_path
+    monkeypatch.setattr(config, "WORKSPACE_ROOT", tmp_path)
     db_sess.reset_engine()
     importlib.reload(main)
     return main.app
@@ -304,9 +304,23 @@ def test_users_have_isolated_workspaces(tmp_path, monkeypatch):
 
 
 def test_lib_is_shared_read_only_across_users(tmp_path, monkeypatch):
+    """`lib/` lives at the repo root (single source of truth), not under WORKSPACE_ROOT,
+    so we patch `config.PROJECT_ROOT` to give the test its own isolated lib bundle."""
+    import editor_app.config as config
+
     shared_lib = tmp_path / "lib"
     shared_lib.mkdir(parents=True, exist_ok=True)
     (shared_lib / "shared.py").write_text("VALUE = 42\n", encoding="utf-8")
+    # Mirror canonical demo files so `_seed_canonical_demos_into_code` still works.
+    real_demos = config.PROJECT_ROOT / "workspace" / "code"
+    fake_demos = tmp_path / "workspace" / "code"
+    fake_demos.mkdir(parents=True, exist_ok=True)
+    for fname in ("pattern_rainbow_demo.py", "pattern_twinkle_demo.py", "pattern_chase_demo.py"):
+        src = real_demos / fname
+        if src.is_file():
+            (fake_demos / fname).write_text(src.read_text(encoding="utf-8"), encoding="utf-8")
+
+    monkeypatch.setattr(config, "PROJECT_ROOT", tmp_path)
 
     with TestClient(
         _reload_app(tmp_path, monkeypatch, AUTH_ENABLED="true", AUTH_REGISTER_OPEN="true")
diff --git a/workspace/code/adc_slider_demo.py b/workspace/code/adc_slider_demo.py
new file mode 100644
index 0000000..79e232f
--- /dev/null
+++ b/workspace/code/adc_slider_demo.py
@@ -0,0 +1,55 @@
+"""ADC slider demo — drag the sliders that appear under the editor.
+
+Two simulated ADCs:
+  * pin 34 — sets the base hue of a rainbow
+  * pin 35 — sets overall brightness
+
+The strip lights up while the script runs; the values update live (no need to
+restart the script when you move the slider).
+"""
+
+import time
+
+from machine import ADC, Pin
+from neopixel import NeoPixel
+
+
+NUM_LEDS = 16
+strip = NeoPixel(Pin(5, Pin.OUT), NUM_LEDS)
+
+hue_pot = ADC(Pin(34))
+bri_pot = ADC(Pin(35))
+
+
+def hsv_to_rgb(h, s, v):
+    h = h - int(h)
+    i = int(h * 6)
+    f = h * 6 - i
+    p = v * (1 - s)
+    q = v * (1 - f * s)
+    t = v * (1 - (1 - f) * s)
+    if i == 0:
+        r, g, b = v, t, p
+    elif i == 1:
+        r, g, b = q, v, p
+    elif i == 2:
+        r, g, b = p, v, t
+    elif i == 3:
+        r, g, b = p, q, v
+    elif i == 4:
+        r, g, b = t, p, v
+    else:
+        r, g, b = v, p, q
+    return int(r * 255), int(g * 255), int(b * 255)
+
+
+print("Move the ADC sliders below the editor while this runs.")
+
+while True:
+    base_hue = hue_pot.read_u16() / 65535
+    brightness = bri_pot.read_u16() / 65535
+    for i in range(NUM_LEDS):
+        h = (base_hue + i / NUM_LEDS) % 1.0
+        strip[i] = hsv_to_rgb(h, 1.0, brightness)
+    strip.write()
+    time.sleep(0.04)
diff --git a/workspace/code/pin_demo.py b/workspace/code/pin_demo.py
new file mode 100644
index 0000000..d63aa68
--- /dev/null
+++ b/workspace/code/pin_demo.py
@@ -0,0 +1,54 @@
+"""Pin features demo.
+
+A "Pins" panel appears below the editor while this script runs:
+
+  * Pin 2 (OUT)  — blinks every 200 ms; the indicator follows along.
+  * Pin 4 (OUT)  — chases through .on() / .off() / .toggle().
+  * Pin 0 (IN)   — click the toggle button in the panel to flip its value.
+                   When it goes 0 -> 1 we register an IRQ that toggles pin 2.
+  * Pin 13 (PWM) — duty sweeps up and down; the bar shows the live duty cycle.
+"""
+
+import time
+
+from machine import Pin, PWM
+
+
+led_a = Pin(2, Pin.OUT)
+led_b = Pin(4, Pin.OUT)
+button = Pin(0, Pin.IN, Pin.PULL_UP)
+fader = PWM(Pin(13), freq=1000, duty_u16=0)
+
+
+def on_button(pin):
+    print("[irq] button rising edge -> toggling pin 2")
+    led_a.toggle()
+
+
+button.irq(handler=on_button, trigger=Pin.IRQ_RISING)
+
+
+tick = 0
+duty = 0
+direction = 1024
+
+while True:
+    led_a.value(tick % 2)
+    if tick % 4 == 0:
+        led_b.on()
+    elif tick % 4 == 2:
+        led_b.off()
+
+    duty += direction
+    if duty >= 65535:
+        duty = 65535
+        direction = -1024
+    elif duty <= 0:
+        duty = 0
+        direction = 1024
+    fader.duty_u16(duty)
+
+    button.value()
+
+    tick += 1
+    time.sleep(0.1)
diff --git a/workspace/code/serial_demo.py b/workspace/code/serial_demo.py
new file mode 100644
index 0000000..ce186b9
--- /dev/null
+++ b/workspace/code/serial_demo.py
@@ -0,0 +1,90 @@
+"""Serial in/out demo.
+
+When this script runs, a "Serial monitor" pane appears below the editor.
+
+Try this:
+  * type   hello       and press Enter            -> Python echoes "echo: hello"
+  * type   color red                              -> the strip turns red
+  * try    color 0,128,255                        -> any (r,g,b) tuple works
+  * type   off                                    -> strip blanks
+  * type   bye                                    -> script exits cleanly
+
+Anything Python `write()`s to the UART shows up in green; what you type back
+is shown in white.
+"""
+
+import time
+
+from machine import Pin, UART
+from neopixel import NeoPixel
+
+
+NUM_LEDS = 16
+strip = NeoPixel(Pin(5, Pin.OUT), NUM_LEDS)
+uart = UART(0, baudrate=115200)
+
+PALETTE = {
+    "red": (255, 0, 0),
+    "green": (0, 255, 0),
+    "blue": (0, 0, 255),
+    "white": (200, 200, 200),
+    "purple": (160, 0, 200),
+    "orange": (255, 110, 0),
+}
+
+
+def fill(color):
+    strip.fill(color)
+    strip.write()
+
+
+def parse_color(arg):
+    arg = arg.strip().lower()
+    if arg in PALETTE:
+        return PALETTE[arg]
+    parts = [p for p in arg.replace(",", " ").split() if p]
+    if len(parts) == 3:
+        try:
+            return tuple(max(0, min(255, int(p))) for p in parts)
+        except ValueError:
+            return None
+    return None
+
+
+uart.write("ready. commands: color <name|r,g,b> | off | bye\n")
+fill((0, 0, 0))
+
+running = True
+while running:
+    line = uart.readline()
+    if line is None:
+        time.sleep(0.05)
+        continue
+
+    text = line.decode("utf-8", errors="replace").strip()
+    if not text:
+        continue
+
+    if text == "bye":
+        uart.write("goodbye!\n")
+        running = False
+        break
+
+    if text == "off":
+        fill((0, 0, 0))
+        uart.write("strip off\n")
+        continue
+
+    if text.startswith("color"):
+        rest = text[len("color"):].strip()
+        color = parse_color(rest) if rest else None
+        if color is None:
+            uart.write("usage: color <name> | color r,g,b\n")
+        else:
+            fill(color)
+            uart.write(f"strip = {color}\n")
+        continue
+
+    uart.write(f"echo: {text}\n")
+
+fill((0, 0, 0))
diff --git a/workspace/lib/machine.py b/workspace/lib/machine.py
deleted file mode 100644
index eb0a242..0000000
--- a/workspace/lib/machine.py
+++ /dev/null
@@ -1,19 +0,0 @@
-"""Minimal MicroPython-style machine module mock for browser simulation."""
-
-
-class Pin:
-    IN = 0
-    OUT = 1
-    PULL_UP = 2
-    PULL_DOWN = 3
-
-    def __init__(self, pin_id: int, mode: int = OUT, value: int = 0):
-        self.id = int(pin_id)
-        self.mode = int(mode)
-        self._value = 1 if value else 0
-
-    def value(self, new_value=None):
-        if new_value is None:
-            return self._value
-        self._value = 1 if int(new_value) else 0
-        return self._value