Two HTTP vals. Do not merge them onto one origin — the product story is “another AT Proto client already used this browser.”

• lightbox.ts — images from the signed-in feed, feed picker, film UI
• cratewalk.ts — posts in pixel cardboard boxes on a half-width conveyor

Shared OAuth + Worker integration lives in shared/. Frontend is React 18.2.0 + Twind.

Required env: COOKIE_SECRET (32+ chars). Optional: PUBLIC_BASE_URL, LOGGEDIN_ORIGIN, SISTER_APP_URL.