From 029323fe97401960752ccd54bb6b05a42c2b87fc Mon Sep 17 00:00:00 2001
From: claude <claude@teahub.xyz>
Date: Sat, 10 Oct 2026 10:36:31 -0700
Subject: [PATCH] Build standalone preview-sidecar tool and receipt-styled
 landing page

Localhost port watcher: detects a newly bound dev-server port via
bounded TCP probing, opens an iframe preview pane, and captures a
one-click timestamped screenshot receipt via headless Chrome. No
Claude Code changes, stdlib-only, 16 passing tests plus a real
end-to-end dogfood (demo.py) with a genuine recorded screenshot.

Landing page at ventures/preview-sidecar/site/index.html uses a
receipt/ticket visual identity (narrow thermal-paper column, dotted
rules, wax stamp, monospace totals) distinct from the finishline
venture, with one above-the-fold signup CTA and an honest free/paid
pricing section.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
---
 ventures/preview-sidecar/.gitignore           |   1 +
 ventures/preview-sidecar/README.md            | 109 +++++++
 ventures/preview-sidecar/demo-receipt.json    |  10 +
 ventures/preview-sidecar/demo-receipt.png     | Bin 0 -> 16208 bytes
 ventures/preview-sidecar/demo.py              |  93 ++++++
 ventures/preview-sidecar/demo.txt             |  27 ++
 ventures/preview-sidecar/sidecar.py           | 276 ++++++++++++++++
 ventures/preview-sidecar/site/README.md       | 109 +++++++
 .../preview-sidecar/site/demo-receipt.json    |  10 +
 .../preview-sidecar/site/demo-receipt.png     | Bin 0 -> 16208 bytes
 ventures/preview-sidecar/site/demo.txt        |  27 ++
 ventures/preview-sidecar/site/index.html      | 305 ++++++++++++++++++
 ventures/preview-sidecar/site/sidecar.py      | 276 ++++++++++++++++
 ventures/preview-sidecar/test_sidecar.py      | 113 +++++++
 14 files changed, 1356 insertions(+)
 create mode 100644 ventures/preview-sidecar/.gitignore
 create mode 100644 ventures/preview-sidecar/README.md
 create mode 100644 ventures/preview-sidecar/demo-receipt.json
 create mode 100644 ventures/preview-sidecar/demo-receipt.png
 create mode 100644 ventures/preview-sidecar/demo.py
 create mode 100644 ventures/preview-sidecar/demo.txt
 create mode 100644 ventures/preview-sidecar/sidecar.py
 create mode 100644 ventures/preview-sidecar/site/README.md
 create mode 100644 ventures/preview-sidecar/site/demo-receipt.json
 create mode 100644 ventures/preview-sidecar/site/demo-receipt.png
 create mode 100644 ventures/preview-sidecar/site/demo.txt
 create mode 100644 ventures/preview-sidecar/site/index.html
 create mode 100644 ventures/preview-sidecar/site/sidecar.py
 create mode 100644 ventures/preview-sidecar/test_sidecar.py

diff --git a/ventures/preview-sidecar/.gitignore b/ventures/preview-sidecar/.gitignore
new file mode 100644
index 0000000..c18dd8d
--- /dev/null
+++ b/ventures/preview-sidecar/.gitignore
@@ -0,0 +1 @@
+__pycache__/
diff --git a/ventures/preview-sidecar/README.md b/ventures/preview-sidecar/README.md
new file mode 100644
index 0000000..85eb567
--- /dev/null
+++ b/ventures/preview-sidecar/README.md
@@ -0,0 +1,109 @@
+# preview-sidecar
+
+A dependency-free localhost port watcher: it notices when you start a dev
+server, opens a preview pane pointed at it, and can stamp a timestamped
+screenshot receipt of what was actually on screen.
+
+Inspired by [anthropics/claude-code#53997](https://github.com/anthropics/claude-code/issues/53997)
+("Bring back local preview for agent-built apps"), closed as not planned.
+This does not modify Claude Code or any agent CLI. It is a standalone
+sidecar: a Python script you run next to whatever started the dev server.
+
+## Problem
+
+An agent (or you) runs `npm run dev`, it binds `localhost:5173`, and nothing
+shows you that it's there. You tab-hunt for the port, open it by hand, and if
+you want proof of what rendered, you take a screenshot yourself. This watches
+a bounded list of common dev ports, opens a preview the moment one answers,
+and gives you a one-command way to capture dated evidence of what it showed.
+
+## Install
+
+Requires Python 3.9+. No dependencies, no install step — copy `sidecar.py`
+anywhere. The `screenshot` command additionally needs a Chromium-family
+browser (Chrome, Chromium, or Edge) already installed on the machine; it is
+not bundled.
+
+```sh
+# From the notplanned checkout:
+python3 ventures/preview-sidecar/demo.py
+python3 -m unittest discover -s ventures/preview-sidecar -p 'test_*.py' -v
+```
+
+For your own project, copy `sidecar.py` to a trusted location and run it
+from there, e.g. alongside `npm run dev`.
+
+## Usage
+
+```sh
+# Watch the default common dev ports (3000, 5173, 8080, ...) and auto-open a
+# preview pane the moment one starts answering.
+python3 sidecar.py watch
+
+# Watch specific ports or a range instead.
+python3 sidecar.py watch --ports 3000,5173
+python3 sidecar.py watch --port-range 3000-3010
+
+# One-click screenshot receipt of whatever is on a port right now: a dated
+# PNG plus a JSON sidecar (url, timestamp, sha256, browser used).
+python3 sidecar.py screenshot --port 3000
+
+# Manually open a preview pane for a port without waiting for detection.
+python3 sidecar.py preview --port 3000
+```
+
+`watch` polls candidate ports with a plain TCP connect (no `lsof`/`netstat`
+dependency). The first time a port starts answering, it writes a small local
+HTML file with an iframe pointed at `http://127.0.0.1:<port>` and opens it in
+your default browser (`--no-open` to just log the event instead), plus
+appends a JSON line to `events.jsonl` in `--out` so detections are
+inspectable after the fact.
+
+`screenshot` launches the browser headless, saves `receipt-<port>-<time>.png`
+and a matching `.json` receipt, and prints the receipt. See
+[`demo-receipt.png`](demo-receipt.png) / [`demo-receipt.json`](demo-receipt.json)
+for a real example produced by `demo.py`.
+
+## Recorded dogfood
+
+`demo.py` starts a throwaway one-page site, runs `sidecar.py watch` against
+it (no browser opened, so it's safe to run unattended), confirms the
+detection event and preview file, then runs `sidecar.py screenshot` with a
+real headless Chrome and verifies the PNG and its sha256. No mocks.
+[Recorded output](demo.txt).
+
+The demo's throwaway server runs as an in-process thread rather than a
+`python -m http.server` subprocess. This repo is itself built and tested
+inside Claude Code's own sandboxed Bash tool, which puts a freshly spawned
+subprocess's listening socket in a network namespace its own parent can't
+reach back into — a property of *this* build environment, not of normal
+terminals. A thread-based listener sidesteps that quirk so the demo can still
+exercise the real detect → preview → screenshot path end to end, including a
+real TCP probe from a separate process and a real headless-Chrome screenshot.
+On an ordinary dev machine, `npm run dev` / `vite` / etc. are plain reachable
+subprocesses and this workaround doesn't apply.
+
+## Limits and trust
+
+- Detection is TCP-connect probing of a bounded candidate port list (default
+  15 common dev ports, or an explicit `--ports`/`--port-range` up to 200
+  ports), not a system-wide socket enumeration. It cannot see which process
+  owns a port — "something answered a connect" is the whole signal. A
+  non-HTTP service on a watched port will still trigger a preview attempt.
+- Polling has a detection delay (`--interval`, default 2s) and will miss a
+  port that opens and closes between polls.
+- The preview iframe can be blocked by a dev server's own
+  `X-Frame-Options`/CSP; the generated preview page always includes a plain
+  "open in new tab" link as a fallback.
+- `screenshot` requires a Chromium-family browser found via `--chrome`,
+  `CHROME_PATH`, or a short list of common install paths. No browser means a
+  clear error, not a silent skip.
+- Loopback (`127.0.0.1`) only by default. No remote tunneling, no ngrok-style
+  exposure, no orchestration of multiple dev servers — one detected port
+  gets one preview and, on request, one screenshot.
+- `watch` is a foreground poll loop; background it yourself (`&`, tmux,
+  `nohup`, a launchd/systemd unit) if you want it to persist. There is no
+  daemon manager here.
+- Nothing is uploaded anywhere. Screenshots and events stay in `--out`
+  (default a `preview-sidecar` directory under the OS temp dir) until you
+  move or delete them.
diff --git a/ventures/preview-sidecar/demo-receipt.json b/ventures/preview-sidecar/demo-receipt.json
new file mode 100644
index 0000000..80429ff
--- /dev/null
+++ b/ventures/preview-sidecar/demo-receipt.json
@@ -0,0 +1,10 @@
+{
+  "url": "http://127.0.0.1:61125",
+  "host": "127.0.0.1",
+  "port": 61125,
+  "captured_at": "2026-10-10T17:29:17Z",
+  "chrome": "/Applications/Google Chrome.app/Contents/MacOS/Google Chrome",
+  "png": "demo-receipt.png",
+  "sha256": "6e13265f215eb1e39245011165192d703d99501ffd9c08499b513b06682fb3d5",
+  "bytes": 16208
+}
diff --git a/ventures/preview-sidecar/demo-receipt.png b/ventures/preview-sidecar/demo-receipt.png
new file mode 100644
index 0000000000000000000000000000000000000000..d3411dd3164632a64122593a9e19ece5dba5b00e
GIT binary patch
literal 16208
zcmeHuc~p{X*S9^M@|-;8)9Iw8si!>UF;gq29BDXZrD)|mAeE^p3Yv-oB9)aVP0h@l
zrE<WT98pmzOU)4z6-P)-aRL-jlJUEJ-u15at@Zx<t?&J(e?V>*>*l_$eeL}l_I`TJ
z&RSu&%5E7M8HFpC|Gpt3vlIAJ_R-J(0^UL*<Q-*X{w;Im?{kikxvSH1k#~Hi*JiFD
zYr8jTI^n5DE++82emZyYy7rC2<A1dL1JOR7aCPf0{-4*b|K91f*Z*G+@Bek9@aKPC
z>ISk~|IDeO8)O+BGe{fnhfkdllGrf)s&97|`b_=o8aX+Pmjjw90+(IDZH<xh2Z6Vr
z&&tRGcYi1YT>Imv9ly%Roc;M<2V`XK|NEztz`qawd=q#*|L^y}>!UyJ?*P7V?#CDY
z$0~&lgq6UZd^9F-F0@ZX4X9)5ZJ(!p=sR>Tr*xlwoW;gaO?Pd80TUO&=X~U^j>q(T
z%c{3;Z3*nx7`%Sz*RnG)Df#T_mgBm&s6Cwh;X2T0*cKmiO6!6uvmQ-ovotrtat7(I
z3Yl5J4$$(<&fHg|)id}5>Mu+}SnYy%tlQ9pLvxrOapB>csD13nu$jlyfzNeVMdswn
zq~9L6mCwwJC(L9FtY71uWMkDimJx9&sP&2ujhEMn-2WanlacZ41S0Cur>qQn^xD!<
zATqvAm&VCvBE#tE-o^)=Q-S-wKCq)DbqpqiFDnBdegZz6Sy_~92a&theUsnfgvjH$
zXT0IllMc?dxot<b!zy2fcA3XampV(f=6$-LhNi&9vjt~&v~<5qXpLC(a=X4cz?(2R
zMlF>3j^b--`mD^6^nkGWcRTV>;cP?1burJhUcc2zEL!O`SgEM7aihJ|f_i5ACjzT&
z9{44^Z!iG|g&5y*Ur#b<gfe6!SXO~IFACniIc$K2Ghe#ZD~f}<XMGg1>eFede7KiU
z36w$5qP7_MT)c2$y(`ePtT*!wL}L2JcWQW3W6%!Klk8o7j9h^ZkJ)(G0VC<5QOK)^
z^|c3i6yGboTY^v7PwKJb7@G+(jo?JBF3`!)LmV*i=^)Wcvn<MyKB{cia5Bu@D}NkG
zDdRsY%{_zeFu>P;WS@u8l6rrYIV+s_EPKX?!6zTQ_kO@qz+ZkDVUsg&q$3sd)FdLZ
zP5l=zt&a%fb)1CI_+n57_tjy)i_<;B?-@`_bmvsFtttd98T@jghT66~qKg^DVM^$4
zh#QxoC){YkvqcU=%2@GTk^yK4zvZph>_2L0uXoicc%Jd3u(%)GvLV^>kLJb~^?%=R
z*o79or?sMf_jtfPUAsV~2UDl8G!u|RUy}wKGb<-B#NHcWhQcwCGo{v>meR2utwchm
zU(XBu>63FsCgq`Y^@z*t(By+BZx3RS!@uiN7KR~Vls=FZ!7k#@tLzRZhQhQr5gsQ%
z!X<6Cxn3yA2*oS1AiCc#d}uFvKol%JCpHUTnws_gr>;aANfh)<GA!25Cn{<-92lRk
zVkh_HbYr3J$btQo-G2F2ja$=vYX(?EBl}60XC7xYjKOPrR`d_$TYdejS6cFC+Oi3{
zW-V^g7qlq~url;t$zCWFOI_%P#$&Du2EQdz$p=hJW(E4cPKNZBO?@KZDh`0cJM=sv
z`cVS80c<91y?vbaz33JZL9N_+X)3?0XyMl$?X@5~kpFy#%vZ>5?>%36%2Iv3gX4G?
z+*=US-R;#b13ulK;s^&dGD(p+Q#?Px42pMR{XQ=us^^^_e0)`4KH2i8|A7C+1j*fN
zbh|i#ug6>eVEv@f;&bm7QpRKc&Tzy*&%~ZB4mS^U3m2MLBiZg=v!|Bo^(@iXcCRYN
zO7gO}91kC%ZdvxSnO0K%G{%X}+qHk-INEk?ve%j&B4{+kI{txbBY4ncZ&VbkOS-A?
zI9l8HuG-TupUct#KE%}bTJ=7h!;#{hXW;$G>h>FwUK{J;{U-#Jx)T2t@$Bqg?P@#W
zz;O126Z=!)!TMGr19K#FQHc6Iuls2{zaK??K{!UZb-;po6SUR&4;r~RIw5=GHyn+)
zp{jYqkA)ijUOXQNXO0^BeZQa3;xrbW)&rqYHU`+wdM1CiDOcU?viV4nryZ@i5*NXA
z`@+H8<SLKgr9QiWRlQRncF+rl9M2tHCR`DC7+aoB`pr*b&T0&FToMGmIP#}%H-UU8
z*DYn}tn-p!I(((7be9bkk>=QxB4r=b+*K)o+xnkux+`7?W4*j0TS!I6y515SNA$=E
zV}azG)nKFjeHfghR7uaRb1B^P3Stzd=t?Bqevg&%h0W<wp(ZtG$dH%qzLFlYrP<eX
z;e$LDHK@0Bt0mIyV`z|RphP+2Wf^_piNd02(8zmt{6Exaum`2SMzo1g9&e{geBm>3
ziqn;!5!c)c6CS3pW7oev?2Cr_0$KW^@h8%PRihty*tk+`z7>adF^|6<r=w>9e;*)y
z8^r03Lt!H$v9>5--xo2B6ht+)JgVCXpR8kQuiVC}5i`E~PuvF)@BYmgiFq=3{_6Zo
zk8-r@%)#EMA@j&#TDkP=S9z^p`|7T{m*%vcKEl2`b{;ll3KDSEMh0+KR9x*;YnLW-
zFwk$o>vM|z^j|0<O7Z8M?_Vj22C&t-0>OfsmghwAN1`Vebb))UsyADyzT>mrMZYuf
z<%DthW$rP!af{6in-j8gvh2-aZmrzHe{b3ai=PA^g`0vk_oP*$t#y}p<x2WQXI!XG
zLM87aZjWH(g8cHb0rP11+|Di~4NpkZ=`^pBx9LHc{+%CbnB~U4>?~6}{H}EM+3vK{
z8)t(cn<WGDMnNs_zmU*N4zeDq!hVQl$=##Ho~C!G>WUzuoz`O2o4s*n>~}s+lwUr=
zW<xdD^vW`|(+lNV3MZm3g&}LHc-xOnk3ka%9LqeZvL_D`LrzPqvOrw+x>oe&a|`ZJ
zy*;_zvT5<8KTOXe_U6oQR#N;tyRSrTkVrAkao(T&h%IeX@*Y@eEDj3i&&iX&2PYbg
zP~ga~1C|`SEn30X#rqkwGPpntAp?2*J+b3bqy_yJksnFU6n%s-^s7LtqNh1%UJ{S}
zS)Q(a$mgmyr`}<g&ji_oe8BTSQR#a!F+gz4+E3ZL*PGVDN^W}WLRT|>&F$LbN|DeR
z73&^{xV{1tSgb?^&G4%Y1x2%eK~&C64Ye1Z&ot6EFL!(jWP9k0cfOdxf!G~1S<plj
zV&Y@qw`UHLy60iRm!qO9C)M49hfHuWf=P!&ug8D+0VPA9e$pFn(1~GoX6Y;^ycC_1
z;|)|)|DFaE3TgY2%_|epH`<mK2G+yCXH_4=Q8$;|V%<M<UO}*SQf=*Xd=gVyo5a5$
zl)<HJtPuNQ1ShRN!Nx7sK5H=+E=smw8OGnUp$(OO1Wx+|Xnm+#L)cSDh8kD~iSq1Y
zg&7#v=luIGlfjHVb-meDPlv0xO1=>-s;q36?-ct(!?(=~J8U-c`I#EimV|;=2W9R@
zBqpsLafM18CC^=U<1Fnput&7`%wB{OJ4(=)foZx(n=eS7DyJ5i;O8%<a|&~<SkJ8<
zCss@Sj@jndmwA=BRERzVh32EtTl#tfpiRzOd&Rbu>Wf($M}xA;5m@ebd7B&pbocl6
zQ_FO#wnb4n&IB#QM+6|v!>0<Uh!>a8IiM3A-68QjJ#^M=C_Z;n2*R7aG*MuQ>GK81
zD0@jYJu$=RQ1IrXDOG-=oN|kCTk~4<=QttZmWI`erg%60pfLblVzFxUFn)o#hDW6M
z@yDwg_r;Ir<doD8N=j{xNjK7+z&TdITWiYnsISYXCgBsawVAq??kE=Yr;EZP2KrSw
zV6^0m7-d9<o5Qn6VAgkURXs_}`++TnB2Mv)ml~83(?i7=a?|Aa-5z<0>`5K;k>~z6
zqad(*rUu=BJ>&PPaPLyF{llSOyX+y={=Jp~gdq24d?j@qF9#y$1I|TZ?|+@>>D!uz
zb_@`|2H)daa&wkVv^p401P0Uvc@t~L3{R#5kZ8A}VjELYJ{w5WDx#Q5pXYZ};@?e#
zEijv18w+n?4Z5V?^S7cju|#+t<{$svaq{@Qe3MffXTRj|57oieVJeIh5Za(4$rRK~
z{M<-qD(c^rbQWDFwx20o9(sa~qy{DADxjt=rg2$fVN-druBZF5Qnj}=L*w=u`4=NF
zdgR+T!~*oH*-_RlB7Wku{|QS3!PcsdjM*jaN?v|p5}T8-(s^68%xGHv35EjSTD3PJ
zF7<v?9BV?czAp3jsEg+#?1+H@Tug*j^YPkAA8_JTd`{<EePZ}#D4vmVXXbU7AnC5v
zH`J&6Ee(5%FRN8lwVFN|nHHVEN1E@a%Q%U5{lhQJoa@-1$C>;?yd{(b5v{g{YWmD{
zD!O<KP6Rv;!uyahZKlIcF39S9Lo$XeMO3O`*1wr{?3p_>Y=WUje$`J*%-78OSL{&V
zL<`I)$gIMqIGn4@h^MQj1?<+?%y=00h@o4dF?8=U0gV0q*@?#2!*!<NrOBLQ#RFRl
z{k2sV_z~GAd3;!&)eY_FuhG$TuHEdkUpx!EF5Tt_hv^HT={Mug*-zscP&TttTW6>w
z(l^PH>z)ev3*D1;T3>9_YmA0Z+aUDp6W57a%KLSjH{B`c2{aI?o?edyz5BX?`?W{-
z^U~M_p=U%_SzIpRP&&4;pPa~g{-2V4>%y;JVeCxdx5Uc)-zSRRR-9DMDg0HZ<?gj5
zb8%gy;Q7lS=9(M}nKMt1@%d8o<SoGkEZGc5b(!*6+1UHuNXJ<+$2_8Sp*YAjlC?;u
z-wlr%S`6`$QCxy9`(EyaadhA_FOCF>V?HSTbz;p};ZxB$NsG2U>4u0Y;r3Rt9$b+=
zoP;qA8v=0Eu&`bJ-1|}tDJxC+Jw&G$K#oUERIm}J%D(yW$>h3@#!{W3%qUowQDH>X
z*!_WzyLc7=({jl-F$`krz;p6Ci*i84t)q2=_8!oTx;}jpq;>9<ZtT<Ku>wE6`~2xr
z6b+{?pJ8Z7Pcpv)aIZ+0v41N*u*38gliEGReD~55F?8pZFvT}s)02L2fyPHLqEN|O
zXZ=@cZ>t)<UcK@77cqTs;z8R*sJQ=1rI%X3&@+)nQLG-UcjlW;qV8q%$K{m<@Q$eh
zSgcAC);Y#lqlEw8T0oI+UnT6WPl-{IZPli+-BCl(`I)?>`o}JNg~M_+T8+-mFBLS#
zj&u&i-kZE2e>#X)uQA}67GG2tBW-}N1*{T{*br9-uZFp7rK>Amvp5ra8m5r1r0J3*
zP)7wz9)Dn=mqA*65noTs%DkJI92?l7Zgw-Tv(7x7KsJ5fQ6=@{^qB2DNSzSJPf&;E
zJ2df&ayu$5&$u~5?l8?NGxEy8ez%ppM$12`(kA{vlk!)>Vv$k386pyB9?CosF<)kQ
zI+y>;d6hRocR$XM%S8(*@_1cj_4??cYCkd^dg>TITv+8FS`JA?Vcl~h+9IOan-f+j
z-w*1O^YjzT6XudoQK+1rfsBl5Taxa5hLU-nk$ArOiL{s;gx#Be#el=05L`-0z48cK
z0sg5`mb9%|Fni09H_+^n9I#PGyMBSA7-_e0gD^AwNAbH`(cy><w01OM><(@Ah|Viw
z+^`DMJJfwu)r6J@#c9ep6`mR^;P+}UL^FuVU?F{>sxfFlXcujMbY6wFH+mAR147@~
z<jrkDC=1KfKaNQ~gBzGyimYwoX=Ujlg2H+#nhibayr8cC{OHCc<`Gwegy~mEZc1x)
zzV|A2Us-5@6Zq;OPs@APQYk*r$WXNBj&dWQ2LGOKZr1R%=K}cBeoxPU)@hA;aQs<)
zuhBuGb)v};Hqsn?!zZ1<NiMQI-V!;)sLGBdr@=xQWjhm9JMBHbh^%h-4_Gs&VM1N^
zLyz+(HtaFbY&VZkrBSRnZndMC5(o-+#qtr<pil1;IHMqm+15X8pr(jeU;{iL5nZ{m
z5%5!E#4Z#uFW6P0@I02=r4;`-Vs$$-9!!p1x=%ljJT(I__Ix*zSF8@^C!>x#T=OYI
z{^NZKo&_seF6O828+6#YTSZH07d6HUU{N!sAJcrR@U=%LZ@ho3DOw6mc*{7BDg6o`
z>fgVoh((}Gu)Rr<C#8L~P!J8o{!3tug}(47enhfU6RNjJ-3BoI7I>$Z-!uBRMH4&0
z!b>?xbK_zv6O8+<j-B1mEst<yKseE7*>)N<LWlnKXs$fs^~i&5XtoRPt-2%M7^f%R
znyjz6Xi=D{eaKSy>0GORU{v_xL~~!h-!oXoBuc5ZVU231?t13ek;<~wIMjT6i2IAJ
zMDy=5vk}GAh3V^2K>gDgYwe1&XJm|Z;1rG@vWW?bNsTKppZZ>^(-07qHrA6+V_-F<
zum5%^=U(4~R+~OX{}m(ix|U1pa!7VmcZ%Nv#4(UJm|(82nyx&?@I0l<X8jGq+>~6z
z!mAZbbPi;+El{@zm0tTyJkMCL>lnOzudVXcilNy2SnYcxW&7zmf7*dq%2&+xPFa4Z
zc4&Y~I#f?J&wtpI=3aAXJt8$}@Xi2WlfrnX@xOBYEktJ!J)=2}ULo*ARCDqB?<~Lg
z!UK0DcnsT)d4rVIsc9$A)-x}}FyirQ4kLkg^u@nO`gC)YY2BM`q%hG;HeIk((f$-9
znq4d4!%|l=a*Y@F$;}gPL(mIl&`R*T%E!j7J|uL@=O^OjE3%==UIPaK6ibKGTIxOI
z<}F0F5}ZtF7MmDg%gw%u;6dmI(`mex>A;CqQ2~##5MBLkFPp10Li!>&+Gvw$1d`S#
zo7dUT;P&$^Qb}$BQuMvZ|3oD>XC!x1l!i*2$|(82p3w6iw*rMfkY{o#Ns~zmO|iy$
z)Z7daBXeAs)sR$Ks8lpGf%SG<T-C4@Ql#(~CZ`lYZP7xdeZ^IoRs?w8pq~F&<-1GH
z!<C|;4TIBa%y~i?7KPr@WBZ4Al-AWr*_bD>8{f_$>`SkB<8o3;`pk=r87_*tcbU6v
zm{nj6w?f0KaqpuT;$q90n%Z5M`N9WjexsW!BmURu1Lds`C`l1yOLm%=TlFG+mlnOn
zyVpA3<HasA#acCfb+q8!TR;60tVQ|f4>KUabW2W~MN7I%Z^gz|IUZc1ZuPFC{}JV+
zWQ9cIET9&|;-q;4#t2aDR)hp5@{_tHH-9Wlp#ce{7+(p^JVmIgM{!3-eOLlYd;5|a
z5x^^fpN-pP?B+LTb4CE%h;a@OP^4*cglNwdPIfw=B3V*mJHe2300hh1TiIfeDQXZ?
zWLUZK%jR_gcX!J2>c2~8uuVR-?J59fak@<y%};Omb`j)NfFdLR0l+X)>g2r}$6s`p
z<ey5<GD_<V#FIi<jFetb6tTu;T#mo$Hv1I2MH_xgk*@JxWKX15LLvms=A#?|*<{+1
z{Tzb&23~b{L$bPr8L_hnN#pSolW6ed@_@B+Lqi<~73B71UAkwRLL0lP&Kw@>J_XG(
zgvF{30CnVZZphZ~(ca0ZK~AU(*yE!r+3?C7#AT`>e~-FXW!*^=X>6<qcB5X^uYzn|
z+^|uy;nF!GT5qavdhM7Gi#6b<`b`>R0jj|s$23HjaMSdaKr**xc@w5E)D<T09${*7
zA!2RgsZl?^cZ3C-IA%h##McwfIKg4$<uL&N+>EOa*|nC?oGwKB#;Dwfq{-nNY0}ko
z`<B7{E)e5{>(o1`Ul#+?-SFs&0gP`I8smF`Q;F?!=RUmphVyvEcWPrS+VVlu8)n=*
zR<bz^@U?4#Q~olTdgU6cjha%a5W^k)w#UOi-h#_11<)k%lXq2+Pi91YqWeUV2{~G_
zVH`Hy7Zq*|`EE!11e7A<D<ms~z4ko`cW7SWqP`KeQ1(CRz*$aijgx&O#1-ODc0e^D
zNp9r#Lk77|LhW0^diE;Yo<QHA=cVXQ%)caP+4f@kILo4g#t@~u3L4K1g6yV~vC%?m
z%83(}f4Ku(p$FPOzVd8+DY4JJR3~y{dB4JA{0l(!RB7=%UgF(mrd@e?DZbUX&6h+@
zMwo>)bgWdlidROJC#^PiZrt#oTFJ#@<}rTxsCnM#@*+S?wz*UDL#n&;$$ZQf*^k67
zBuL$BJ`LSp9?&8|A~#ko^hr*w!B-^Cmx=xMlU9#%7>oM$W<oiNv+!JBdyxXY(SJb?
z_e`gGA0S-l>3mOu-|c-bCaeF2EGjoT@Rj*~d#^q^8goi8KE_CI>+o@ykY%3CY#zz%
zsY>_Jj)2B^M+s`bH(~V3J)kD4$MwlE!Q^~Ez^DFmZhvcYMA_<%SF@m<WFXPABExRM
z;z{spmlP|{%nVu)1E(wPQ#kq4=0=7UwqPT~E%82mJ#fKGu2T3KI%o8}o0~7SlBnK*
zA_M9=bExS=<-p3mazrBxo|B9vADqH-t<1ydTb2+4t?=GW`T)h3+IG51u;h{<o}c%D
z#s2&r<Kf-_sAbhc<n$B8ijs=UsGHGpE4cnDRZvhzFG3d@^p?@0GipdCh5)GaJL2cP
z+Xl_MkbGIdnvjY5-?nbfGi<GO^z|nJiMG<Dw4$8cV)bTWWPKz{;S#@$!{PJ+iu_~H
z@^ov=MTl<{_`;KL=iBBHuN6W|0pqED^urF(8+0^!{m~A{@t*AB!on8TKomgRPV$+9
zJNApC!=poQfP<!cY$q${C>o8?VT7`6K_tTj4J@Xjr%^PZdT8p$XmRz{r|eD2%b`s|
z|2YG-H@tE}L!SBQlP17#d+)yT`NC^{41$2io<2Fk&Pj6?Nyv%nsMsaobOBt#;Wv%?
z2>g_HRqM^gO8SAel~ITR%tsAN%dY7o+Aov$*TcBl?=P(_0}Gy&thU37kttas*|)so
zwXgUZf?Jkb4x`wE;^6{8;hzJ8v1S3Q5f>uEf#<XB+O_sPcH9LMbRNuo>N0H=fvapD
zrTUR1%=rSq3%U&T+|2r*-&QTcNT3aA_Lep5bHvR926aa)eP?<5F){F^N`Ty0@}+tj
z^%c!CujphDd!Ja2$1+5nL(fnE^I&<1vP(fV6TKASJ4_3vw&1+HCV0zQYBYYPENTO&
zRDfrM%J)P+!0lZH!t6_BSxk4$6C&0%jHwn%`7}u~I^92GLnTKpRXQ;Y5JdlxbcRA!
z>uc7dM4TZenhc*O2^K!Pbh(fWS~p8tQF|6CQQe#;lNw%YbEpLT7n&dVuj<`=(M?CE
z3=U8;BnyR3IbqyX2)r?PEO+Nd7t~@4Q25KL{Ljq1aFQRKupRn1bVCjE<(sK|E&IcM
ztZL1)uM_6`<O@KrNo!NHdN->D)sT#S+rN#V999*?tnoO43S_*=!OeYDndT}1GHY=)
zeJU`A6urds6j+*VJ_nfF2p;g;(sc|%m4+e6l~t0++l^%nYeRf%xRYP+RR+L_)?j}z
zUc)VHITih6&!R=B*R(wgvc~b~#h-~-TsxOXX>U2*CIGMm;;yUFE=j65I&UL2cH0z!
zl06)yV(38Z>Q>R?UWaIY<F~qVfP28K>QXXh>iYO(q1r%YH8xvXZN~l|e#7a>%A9RW
zw)iP}LDbBnQ$WM~HOuH%8F;gb$exM`v6aCLkm0UEBPx&U!*V^plvcoekk?7~hThjE
zvj|)N=o!`Ptf)9At3jeRy97nAK3hh7d!6721)Yhwyi6O&>)nmbzr8Vv_*KKQ?#O<3
zw7AC*TTa&4R+$<3u`}zk1E$6Fud$`B&U;oTm-<q8Ha;G=x8iy1?W5)trf0J;S>UmS
zvl?Uon8r`V-rH_(dRtKR9f28GyCwIAdzoQc9C9gS`8ry-x$M~b_OKE8pazRSk|w7F
zDHtlh=8<s)f3N+PG-^6ck)2a~!u=I^{L6*o#;RYAnzVkhHB0yNySK=)3{9Ehwocd3
zS)-bKW-5xmN^Q)2?4cR7JlSS?x+wO-1z*6ZtXtZgXcLn4R8ochTo?V;JR6cV^vtdI
zJG=H=-XIo+cmt2Hwakr&pRRaYDZDhp!S~)MG6`8N=}EL#%k-s{wgisdPvCW5799H1
z(n?$hz>)!v@K#P}T&SXzbf0Wn^w9gdgMefUZEkr3;9|Nt>N2<0M<F8R_Zk0VU55sV
zOY2Li7vvlZGaN`VGS?ifcda>*diESIzTd**og+`xETLVJ+eE8}0o!JTcV96V6aruf
zUWYOs8#2nTxsbeMFXGYVtFls$n2L!7>+Wt%Pr(7s6}H~Dg}FwD*-NE^ZR<;crc=_4
z4pg40Rnm@yU4i5vi{FSqU9ms(GUzE=6!=M@6!78yt1kd4_~PYf8;R;k7^yn1B0Dw5
zTNh$24<}tHMktO~T3@Y!N^YGKG;claV$+R<8)O!Aa3aP_&7~Dce3aAB@kX#!4FY+n
zCOGLTzFiH|2Tyug0k)rl#jjEcBGjXkIG$~Ow5fS^Gj(%Zt9Zw^VboIM@BaIfzGUVA
zL^Dy|<yMz&d33lw)P4FL<KUd4Swwp(7K3Ym&%Y{Y4nu4mJ`bF_=<)1m_K=4!E-2sY
zZhPGX@1;XZpEEpXGpXe<G@~fsh0?;BJk4}5_ZR<bCTZfo-mJF6{0a$1{RU{_^ujp$
zwLO_Lx2L~tFaw?$vKY0G;_k`KS*^HH&af)bE?Z=!K6yx?YCj9LzVW99=%hIVWJ&rH
z@RNV1r0x){f-<m?OD{9%Wdo46rV4FpjiG!EjL-Lv)MruT%$~RQO)J%p38GjDU@3;T
zEIw-*KlRP<+lc6ti!^!wOv-VI9A^xlFFm!q?BWFwjH#Vj+fI(*@yVjMCpwm|So6RR
zwA{K`R#$CTTX8&^RkoD%V#wPH!|a=)l2Es=CzRWIW2`nsL%e0D^!dra?4+&APRHWv
zPdo~#wYj3+EibgAj4IgBl=mCxts178hv|C)$0nGHRT?p=u-$JK5RCkKD(K_y*xoYL
zd?}S<MBmf2f<PD@CyEsjhvWtnJlO;XWR$Tg&1b&Hc0%I6$NP!1q1cAZ9M|<&UD}^A
zW+1FM$Xy<2iJ35oH8engZ4iv1-d8F{^^1Uq&bLfQ!zccrH-$S-cy1)cE8%<Fs`YF}
zc<;!unB~>2aQO`577lWAkWV62i=HZHENmw6=w8z`Bv_aFlvZW?)Z-0smjy1xX6P=m
zZ2q^50G(!(Bi=Pj=?og(PO?rROrH=|P2WS5V`~A6KUghBwUDYcn!A}-3PjTN_*Rl%
z0Pe8Z9Cxnr<p=+g%C&Wnh}j~hQ^gq>$p@@nzlAxu;W$USYG~q5vv2YB{l~@+f$gIf
zvrmEdp~CuoyFY)}@A0g!^8(k|_EcJ#5&m_yjpALia)YSQd;Q29ryyG7YqkMicM^bk
zT8ActI-m-P<J_rkFr!rID*nYTyPP&~!RS)$ecek)?d_F+Zgnkko|$d<D0X%R-6p1t
zH<h5ijUNq~*yDe!7gl2(hSLU)k~vK{hgyIHuilr9SUPn}kYM;nuBwWq_yRgdqaFny
zSKO_c;n-GU2K3&<YXC?DbNZUC^C2-SVtGzLEf1;J8rT$9(ghZi$5w3+PM9@rIqUCw
zJz;0_38#tMONpz$bSL?N{c1E0-XUe0l^gS!J)H{A%~e1IRN>y~1-z9HlIdJfOK2b1
z8Jhnau?t{JCl$cBlq5i!vJ*Ty(rT_<i4zIKcgWngPy^_Hf{B<JyLz~M;HE8Rlpe`%
z0bmegRpX9gxZO<Z?bB>+?ZYhMJs!|~a2o086BXqPC|0Dl7tnP7lkcKl8k@W(m&GMG
zXaR9G7n%6V_ypc<9A}Mm2s_@3^(YSa@zGU>P|g@<mgiv&liQiJNJEbLWH>DMG^u_I
zXh4{K*6(R$6z<J6I^Mc_+@(ohcwA_htj?~6Apc%3ruQQ#$jcPzI&xFRU5@>#HQO;e
zQ}y@h*u*kTeh)2Y*&ai_G{I{MU$O>E7fzJe%NA<1+?>_r4`6Fw>-7hx-P-RL(@6KG
zrYunmr2k&DU72j+)odUvPQ)y<2y7pOPnnGRl->jNKvv3|nvW!AS>84ko1k9~#@wzN
zacQW*r;k~(&;i$@r+1*u_$wpY5kK?e?3MLnfW{}v1I_oqxdjw79r0GI@S}W=z5Sej
zZ&_`|H5EYI(3x|$nE%HTr2w~>UY~>J7~XP6X6hu>EO73DpJ88BCO0K6gMuZWil2HU
zm)UY-BpdU>)iLzyVozR!fPAZ@wDfB3t1N$uqxD+^Z&gLr*n;(vVV6!P+;t+$X+9n(
zhDpW6H=@07fMMLF>4J{(XMq;?x3&SZan*SNKnz|vQ4I@w%p$3)*NH%*#XvyIkZX?b
zJt<U)*#M@durgZPT(WPp-kxu{xFH)I0ob3SNstd6Z>|B!G<R+81~^U5uPgV27v$l<
zu`AQ_(Xf2YH`Q3lpv})IGDAN?xY_E)K1j&Z?JSO@H%vC<_|S+^PFxN2eBloLRyRv{
z0JC{jb*08Js{sg9II;h<|J~Lt<8HMY$-=i;)a9qsnns~2vh=9(Dy>7KS`i!(nT5py
zT|@3)ZfU-kX1k_IV(c~j{V)|!?vl1<s0%&F>R|@)5-;=3czc!=&e-KlR%f{mz8f~5
zFA1Cb)#397t1X}sh18L5b$rB|AujXFYW%!<C5A~J$Wm9MJ&^!p>+QMP5A+N~w82h?
zoxMozOtZj7`;Q#%N-;@(>2*)=+O~S`d5(?h;f(;+%3-k?<Gi55B;lvvC8y8eC{EF;
zcU#n@&2V;1*cbP{Z>fH@Hu(=viuu)@^_L%K`M10XMZSx;Rh`;zy8yW5#ik;1wd@eJ
zGz%g8_;Bj-J=WCMV?~6}C7<4D<X@JAS$al@1kl48rt1REvIk(Thzj8ipNZM5PM}*x
zqk4Jyc2?)}Du7hRD(6QT2@C3E0|{>K1=7H}Az~L<<Fh&}c=d2A<>Rsbig2-?jLcte
zG|4+8TX9@_vle!@HP7-ULmi)lzamT8CbJFepBaW;*~HBuAaw(UAZGs4jwKSgt--?5
zs%T-mFRYkd>rLQ=7l-`0DGQj?YfDE`$3;t|$lwpKx$<p_kgs!zF8==3vBR1@S?drr
z4x&}rUC$`a6@QWV*D)WIcTVw#XFrI|)aqa<BUSAkxIJdKQ}RQVM>XDsZkEhB-UaWx
z$7M5c76ah}{ro;1ODrPK^sl7-WDig5!mBnh*TyE)<+lMY&@%N~`5K#=7x5WxIkZw-
zyj=vTw~zU|#sau^O82Ek)G?xyMl3P}zSHK{NC~U^qCc8KdXla~AvRIQs?3x6+tM+2
zqprdK12NR2eY>{+92gQwPcM-2_(lGiW`yUUCIs!hRo-MXqK>+~>TNhBG%GXK{~w8@
z{1RO_{8k-eu2vthsV1EZwYjGyh~=+-&|bnuhAaVna(APhf#~gsqBQkHd2@j3m7m<Q
zo3{}$ARPH9zoP1#tm2t^e7-=)zq*m5wi^|+^)$n--*REoT4~gW-8-?hPi`Z26WhD3
zcJc22?u|Xu$bT-`PZjyH>P+kXhgl+fUpaNv-F5|m5}xhcNSJiP4h+!XeS20yrw+H4
zAMd4Dg!-vz0T%q#&C_<4Jt?4yh-Iu{zOmmq$d{w!);@rc_QF(<<IO8Tzrp2RfS!zi
zl^+in(gq{p-fG}nFAuY{GMLJZkE=une#+{kPQM?gZ$f|iU4YeNm}B(*(@7?C-L3GR
z+V*`8)Zk-HIfsiXQ_E|#yj+b`q(YE>K#=axU+Yq_wveL9U*4GCC#OCXx$<>V@@}n&
zz=^N<50cm{P1M5m=hpz-rZkqaJ64FRr5wk1w0%joN!Q|E?T5bGqT*su0nu?o#|v-U
z!%{ERVk2)YQQ^7cv#I^+(A)ga-4Lj5P=dL7(8e^77+%z*T8nikZ<?K7;oh_Zy>cgX
zdh-LfsF*wW^SS&?9>u>F=77DUlJYb7<Fhoss>m6-^@Cy@+3gxOp{PFN?)GA8XQ1Hp
z$~G&HJq~_^NN4va{GgHW@-OL_t*)WsIDebTdyboeR{J*BJAIo#L()}EvhuWHZT;TQ
z=g{W3)c3qk7sxq{fFz_ws1S5bj(_OvTYl;K*odlU&}~o%Wk3i^#(_5(+O^A)&7Psr
z9!&jq$x%?fR?S5<+hsS+j)WNXYhrXalaQWe##e;jsyrfcO!1otydI3%IBzs%*%sV>
zKSg8A95D!B`M-wOceGSrUCQ~_83j5MJ^E-=ozfC~dT=OvRUHt1fR?6Ap7ziwXr5t6
zv+5r^WX@`<#b|s@x<T^FW3}E6W1R<sU@e#SicF>=<`*Tc=0zcFfP<GqWn^4+cT7oC
zRGh0kv)sHWYgCt4(<0#wLQ$#Pmv_Pbaba&tMp)|M8#*g126M%uBC<3mAJ_rsuET?X
zdhuv5)#U-u{(FDp(vQ~O|Iym}qXGIy*Z2Q=Z@k6rD5i|eo|)|#f$bCfqZ9wfyuyzm
z4d5jFm`wRGj`RO=XbG5RIr3xJ=?4t_0Rw^L`eXR-2hRF|vwq;LA2{pB*z^C7;qXUN
qMHv~XG<R>77znvt+hkW(=GS%Q1746X>%bM6D;Mqlt~!77;r{{P<Ofjz

literal 0
HcmV?d00001

diff --git a/ventures/preview-sidecar/demo.py b/ventures/preview-sidecar/demo.py
new file mode 100644
index 0000000..ed9ec6e
--- /dev/null
+++ b/ventures/preview-sidecar/demo.py
@@ -0,0 +1,93 @@
+#!/usr/bin/env python3
+"""Real end-to-end dogfood: start a throwaway dev server, detect it with
+sidecar.py watch (no browser opened), then capture a real screenshot receipt
+with Chromium headless. No mocks. Cleans up only its own temp resources.
+
+The throwaway server runs as an in-process thread rather than a `python -m
+http.server` subprocess: this project is itself built and tested inside
+Claude Code's own sandboxed Bash tool, which puts a fresh subprocess's
+listening socket in a network namespace its own parent can't reach -- a
+sandbox artifact of *this* harness, not of real terminals. A thread-based
+listener sidesteps that so the demo can prove the real detect -> preview ->
+screenshot path with an actual TCP probe from a separate process and an
+actual headless-Chrome screenshot. On a normal dev machine, `npm run dev` /
+`vite` / etc. are plain reachable subprocesses and this workaround is moot.
+"""
+import http.server
+import json
+import shutil
+import subprocess
+import sys
+import tempfile
+import threading
+from pathlib import Path
+
+ROOT = Path(__file__).parent.resolve()
+SIDECAR = ROOT / "sidecar.py"
+
+
+class _QuietHandler(http.server.SimpleHTTPRequestHandler):
+    def log_message(self, *args):
+        pass
+
+
+def start_demo_server(site_dir):
+    handler = lambda *a, **kw: _QuietHandler(*a, directory=site_dir, **kw)
+    httpd = http.server.HTTPServer(("127.0.0.1", 0), handler)
+    thread = threading.Thread(target=httpd.serve_forever, daemon=True)
+    thread.start()
+    return httpd
+
+
+def main():
+    with tempfile.TemporaryDirectory(prefix="preview-sidecar-demo-") as site_dir, \
+         tempfile.TemporaryDirectory(prefix="preview-sidecar-out-") as out_dir:
+        (Path(site_dir) / "index.html").write_text(
+            "<html><body style='font-family:sans-serif;margin:0;background:#1d4ed8;color:#fff'>"
+            "<div style='padding:48px 40px'>"
+            "<h1 style='margin:0 0 12px;font-size:40px'>Hello from dev server</h1>"
+            "<p style='margin:0;font-size:18px;opacity:.9'>Started by preview-sidecar demo.py</p>"
+            "</div></body></html>")
+
+        httpd = start_demo_server(site_dir)
+        port = httpd.server_port
+        print(f"$ (throwaway dev server listening on 127.0.0.1:{port}, serving a one-page site)")
+        try:
+            print(f"$ python3 sidecar.py watch --ports {port} --interval 0.3 --max-cycles 3 --no-open --out {out_dir}")
+            watch = subprocess.run(
+                [sys.executable, str(SIDECAR), "watch", "--ports", str(port),
+                 "--interval", "0.3", "--max-cycles", "3", "--no-open", "--out", out_dir],
+                capture_output=True, text=True, timeout=30)
+            print(watch.stdout.strip())
+            assert f"detected 127.0.0.1:{port}" in watch.stdout, watch.stdout
+            events = (Path(out_dir) / "events.jsonl").read_text().strip().splitlines()
+            assert len(events) == 1, events
+            event = json.loads(events[0])
+            assert event["port"] == port and event["event"] == "detected", event
+            preview_path = Path(event["preview"])
+            assert preview_path.exists()
+            assert f"http://127.0.0.1:{port}" in preview_path.read_text()
+            print(f"  preview pane written: {preview_path.name} (iframe -> http://127.0.0.1:{port})")
+
+            chrome = shutil.which("google-chrome") or shutil.which("chromium") or \
+                "/Applications/Google Chrome.app/Contents/MacOS/Google Chrome"
+            print(f"$ python3 sidecar.py screenshot --port {port} --out {out_dir} --chrome '{chrome}'")
+            shot = subprocess.run(
+                [sys.executable, str(SIDECAR), "screenshot", "--port", str(port),
+                 "--out", out_dir, "--chrome", chrome],
+                capture_output=True, text=True, timeout=30)
+            print(shot.stdout.strip() or shot.stderr.strip())
+            if shot.returncode == 0:
+                receipt = json.loads(shot.stdout)
+                assert Path(receipt["png"]).stat().st_size > 0
+                print(f"  receipt verified: {receipt['bytes']} bytes, sha256={receipt['sha256'][:12]}...")
+            else:
+                print("  (no Chromium-family browser on this host; screenshot step skipped honestly)")
+        finally:
+            httpd.shutdown()
+            httpd.server_close()
+            print(f"$ (dev server on {port} stopped)")
+
+
+if __name__ == "__main__":
+    main()
diff --git a/ventures/preview-sidecar/demo.txt b/ventures/preview-sidecar/demo.txt
new file mode 100644
index 0000000..53df4b3
--- /dev/null
+++ b/ventures/preview-sidecar/demo.txt
@@ -0,0 +1,27 @@
+$ python3 demo.py
+$ (throwaway dev server listening on 127.0.0.1:61125, serving a one-page site)
+$ python3 sidecar.py watch --ports 61125 --interval 0.3 --max-cycles 3 --no-open --out /tmp/preview-sidecar-out
+[preview-sidecar] watching 1 candidate ports on 127.0.0.1 every 0.3s: [61125]
+[preview-sidecar] detected 127.0.0.1:61125 at 2026-10-10T17:29:17Z -> /tmp/preview-sidecar-out/preview-61125-20261010T172917Z.html
+  preview pane written: preview-61125-20261010T172917Z.html (iframe -> http://127.0.0.1:61125)
+$ python3 sidecar.py screenshot --port 61125 --out /tmp/preview-sidecar-out --chrome '/Applications/Google Chrome.app/Contents/MacOS/Google Chrome'
+{
+  "url": "http://127.0.0.1:61125",
+  "host": "127.0.0.1",
+  "port": 61125,
+  "captured_at": "2026-10-10T17:29:17Z",
+  "chrome": "/Applications/Google Chrome.app/Contents/MacOS/Google Chrome",
+  "png": "/tmp/preview-sidecar-out/receipt-61125-20261010T172915Z.png",
+  "sha256": "6e13265f215eb1e39245011165192d703d99501ffd9c08499b513b06682fb3d5",
+  "bytes": 16208,
+  "json": "/tmp/preview-sidecar-out/receipt-61125-20261010T172915Z.json"
+}
+  receipt verified: 16208 bytes, sha256=6e13265f215e...
+$ (dev server on 61125 stopped)
+
+$ python3 -m unittest discover -s ventures/preview-sidecar -p 'test_*.py' -v
+...
+----------------------------------------------------------------------
+Ran 16 tests in 0.003s
+
+OK
diff --git a/ventures/preview-sidecar/sidecar.py b/ventures/preview-sidecar/sidecar.py
new file mode 100644
index 0000000..ce5654c
--- /dev/null
+++ b/ventures/preview-sidecar/sidecar.py
@@ -0,0 +1,276 @@
+#!/usr/bin/env python3
+"""preview-sidecar: detect a newly bound local dev-server port, open a preview
+pane for it, and capture a timestamped screenshot receipt on demand.
+
+Standalone, stdlib-only. No agent/Claude Code modification, no network calls
+beyond probing 127.0.0.1, no remote tunneling.
+"""
+import argparse
+import hashlib
+import json
+import os
+import shutil
+import socket
+import subprocess
+import sys
+import tempfile
+import time
+import webbrowser
+from datetime import datetime, timezone
+from pathlib import Path
+
+DEFAULT_PORTS = [3000, 3001, 3333, 4000, 4200, 5000, 5173, 5174, 5500,
+                 6006, 8000, 8080, 8081, 8888, 9000]
+MAX_PORTS = 200
+CHROME_CANDIDATES = [
+    "/Applications/Google Chrome.app/Contents/MacOS/Google Chrome",
+    "/Applications/Chromium.app/Contents/MacOS/Chromium",
+    "/Applications/Microsoft Edge.app/Contents/MacOS/Microsoft Edge",
+    "google-chrome", "google-chrome-stable", "chromium", "chromium-browser",
+    "microsoft-edge",
+]
+
+
+def now_iso():
+    return datetime.now(timezone.utc).strftime("%Y-%m-%dT%H:%M:%SZ")
+
+
+def now_stamp():
+    return datetime.now(timezone.utc).strftime("%Y%m%dT%H%M%SZ")
+
+
+def parse_ports(ports_arg, range_arg):
+    """Build a bounded, deduped, sorted candidate port list from CLI args."""
+    ports = set()
+    if ports_arg:
+        for chunk in ports_arg.split(","):
+            chunk = chunk.strip()
+            if not chunk:
+                continue
+            port = int(chunk)
+            if not (1 <= port <= 65535):
+                raise ValueError(f"port out of range: {port}")
+            ports.add(port)
+    if range_arg:
+        lo, _, hi = range_arg.partition("-")
+        lo, hi = int(lo), int(hi)
+        if not (1 <= lo <= hi <= 65535):
+            raise ValueError(f"bad port range: {range_arg}")
+        if hi - lo + 1 > MAX_PORTS:
+            raise ValueError(f"port range too wide (max {MAX_PORTS} ports)")
+        ports.update(range(lo, hi + 1))
+    if not ports_arg and not range_arg:
+        ports.update(DEFAULT_PORTS)
+    if len(ports) > MAX_PORTS:
+        raise ValueError(f"too many candidate ports (max {MAX_PORTS})")
+    return sorted(ports)
+
+
+def probe_port(host, port, timeout=0.3):
+    """True if a TCP connect to host:port succeeds right now."""
+    sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
+    sock.settimeout(timeout)
+    try:
+        return sock.connect_ex((host, port)) == 0
+    except OSError:
+        return False
+    finally:
+        sock.close()
+
+
+def scan_open_ports(host, ports, timeout=0.3):
+    return {port for port in ports if probe_port(host, port, timeout)}
+
+
+def diff_new(previous, current):
+    return current - previous
+
+
+def render_preview_html(host, port, detected_at):
+    url = f"http://{host}:{port}"
+    return f"""<!doctype html>
+<html><head><meta charset="utf-8">
+<title>preview-sidecar: {host}:{port}</title>
+<style>
+html,body{{margin:0;height:100%;font-family:ui-monospace,Menlo,monospace}}
+.bar{{display:flex;gap:12px;align-items:center;padding:8px 12px;background:#111;color:#eee;font-size:13px}}
+.bar a{{color:#9fd;text-decoration:none}}
+iframe{{display:block;width:100%;height:calc(100% - 37px);border:0}}
+</style></head>
+<body>
+<div class="bar">
+  <strong>preview-sidecar</strong>
+  <span>detected {host}:{port} at {detected_at}</span>
+  <a href="{url}" target="_blank" rel="noopener">open in new tab</a>
+  <span>(if the frame below is blank, the dev server set X-Frame-Options/CSP — use the link)</span>
+</div>
+<iframe src="{url}" sandbox="allow-scripts allow-same-origin allow-forms"></iframe>
+</body></html>
+"""
+
+
+def write_preview(out_dir, host, port):
+    out_dir = Path(out_dir)
+    out_dir.mkdir(parents=True, exist_ok=True)
+    detected_at = now_iso()
+    path = out_dir / f"preview-{port}-{now_stamp()}.html"
+    path.write_text(render_preview_html(host, port, detected_at))
+    return path, detected_at
+
+
+def append_event(out_dir, event):
+    out_dir = Path(out_dir)
+    out_dir.mkdir(parents=True, exist_ok=True)
+    with (out_dir / "events.jsonl").open("a") as f:
+        f.write(json.dumps(event) + "\n")
+
+
+def find_chrome(explicit=None):
+    if explicit:
+        return explicit if shutil.which(explicit) or os.path.exists(explicit) else None
+    env = os.environ.get("CHROME_PATH")
+    if env and (os.path.exists(env) or shutil.which(env)):
+        return env
+    for candidate in CHROME_CANDIDATES:
+        if os.path.exists(candidate):
+            return candidate
+        found = shutil.which(candidate)
+        if found:
+            return found
+    return None
+
+
+def cmd_watch(args):
+    host = args.host
+    ports = parse_ports(args.ports, args.port_range)
+    out_dir = Path(args.out)
+    print(f"[preview-sidecar] watching {len(ports)} candidate ports on {host} "
+          f"every {args.interval}s: {ports}")
+    seen = set()
+    cycles = 0
+    try:
+        while args.max_cycles is None or cycles < args.max_cycles:
+            current = scan_open_ports(host, ports, args.timeout)
+            for port in sorted(diff_new(seen, current)):
+                path, detected_at = write_preview(out_dir, host, port)
+                append_event(out_dir, {"event": "detected", "host": host,
+                                        "port": port, "at": detected_at,
+                                        "preview": str(path)})
+                print(f"[preview-sidecar] detected {host}:{port} at {detected_at} "
+                      f"-> {path}")
+                if not args.no_open:
+                    webbrowser.open(f"file://{path.resolve()}")
+            for port in sorted(seen - current):
+                print(f"[preview-sidecar] {host}:{port} no longer responding")
+            seen = current
+            cycles += 1
+            if args.max_cycles is None or cycles < args.max_cycles:
+                time.sleep(args.interval)
+    except KeyboardInterrupt:
+        print("[preview-sidecar] stopped")
+    return 0
+
+
+def cmd_preview(args):
+    if not probe_port(args.host, args.port, args.timeout):
+        print(f"[preview-sidecar] nothing answered {args.host}:{args.port}", file=sys.stderr)
+        return 1
+    path, detected_at = write_preview(args.out, args.host, args.port)
+    print(f"[preview-sidecar] preview for {args.host}:{args.port} -> {path}")
+    if not args.no_open:
+        webbrowser.open(f"file://{path.resolve()}")
+    return 0
+
+
+def make_receipt(host, port, out_dir, chrome_path, timeout):
+    if not probe_port(host, port, 0.5):
+        raise RuntimeError(f"nothing answered {host}:{port}")
+    chrome = find_chrome(chrome_path)
+    if not chrome:
+        raise RuntimeError(
+            "no Chromium-family browser found; pass --chrome or set CHROME_PATH")
+    out_dir = Path(out_dir)
+    out_dir.mkdir(parents=True, exist_ok=True)
+    stamp = now_stamp()
+    png_path = out_dir / f"receipt-{port}-{stamp}.png"
+    url = f"http://{host}:{port}"
+    argv = [chrome, "--headless=new", "--disable-gpu", "--hide-scrollbars",
+            "--window-size=1280,900", f"--screenshot={png_path}", url]
+    result = subprocess.run(argv, capture_output=True, text=True, timeout=timeout)
+    if result.returncode != 0 or not png_path.exists():
+        raise RuntimeError(
+            f"screenshot failed (exit {result.returncode}): {result.stderr.strip()[:400]}")
+    data = png_path.read_bytes()
+    if len(data) == 0:
+        raise RuntimeError("screenshot produced an empty file")
+    receipt = {
+        "url": url,
+        "host": host,
+        "port": port,
+        "captured_at": now_iso(),
+        "chrome": chrome,
+        "png": str(png_path),
+        "sha256": hashlib.sha256(data).hexdigest(),
+        "bytes": len(data),
+    }
+    json_path = out_dir / f"receipt-{port}-{stamp}.json"
+    json_path.write_text(json.dumps(receipt, indent=2) + "\n")
+    receipt["json"] = str(json_path)
+    return receipt
+
+
+def cmd_screenshot(args):
+    try:
+        receipt = make_receipt(args.host, args.port, args.out, args.chrome, args.timeout)
+    except RuntimeError as exc:
+        print(f"[preview-sidecar] {exc}", file=sys.stderr)
+        return 1
+    print(json.dumps(receipt, indent=2))
+    return 0
+
+
+def build_parser():
+    p = argparse.ArgumentParser(prog="sidecar.py", description=__doc__)
+    sub = p.add_subparsers(dest="command", required=True)
+
+    watch = sub.add_parser("watch", help="poll for newly bound local ports and auto-preview them")
+    watch.add_argument("--host", default="127.0.0.1")
+    watch.add_argument("--ports", default=None, help="comma-separated port list")
+    watch.add_argument("--port-range", default=None, help="e.g. 3000-3010")
+    watch.add_argument("--interval", type=float, default=2.0)
+    watch.add_argument("--timeout", type=float, default=0.3)
+    watch.add_argument("--max-cycles", type=int, default=None, help="stop after N poll cycles (default: run until Ctrl+C)")
+    watch.add_argument("--out", default=str(Path(tempfile.gettempdir()) / "preview-sidecar"))
+    watch.add_argument("--no-open", action="store_true", help="don't launch a browser tab")
+    watch.set_defaults(func=cmd_watch)
+
+    preview = sub.add_parser("preview", help="manually open a preview pane for one port right now")
+    preview.add_argument("--host", default="127.0.0.1")
+    preview.add_argument("--port", type=int, required=True)
+    preview.add_argument("--timeout", type=float, default=0.3)
+    preview.add_argument("--out", default=str(Path(tempfile.gettempdir()) / "preview-sidecar"))
+    preview.add_argument("--no-open", action="store_true")
+    preview.set_defaults(func=cmd_preview)
+
+    screenshot = sub.add_parser("screenshot", help="capture a timestamped screenshot receipt of one port")
+    screenshot.add_argument("--host", default="127.0.0.1")
+    screenshot.add_argument("--port", type=int, required=True)
+    screenshot.add_argument("--out", default=str(Path(tempfile.gettempdir()) / "preview-sidecar"))
+    screenshot.add_argument("--chrome", default=None, help="path to a Chromium-family browser binary")
+    screenshot.add_argument("--timeout", type=float, default=20.0)
+    screenshot.set_defaults(func=cmd_screenshot)
+
+    return p
+
+
+def main(argv=None):
+    args = build_parser().parse_args(argv)
+    try:
+        return args.func(args)
+    except ValueError as exc:
+        print(f"[preview-sidecar] {exc}", file=sys.stderr)
+        return 2
+
+
+if __name__ == "__main__":
+    sys.exit(main())
diff --git a/ventures/preview-sidecar/site/README.md b/ventures/preview-sidecar/site/README.md
new file mode 100644
index 0000000..85eb567
--- /dev/null
+++ b/ventures/preview-sidecar/site/README.md
@@ -0,0 +1,109 @@
+# preview-sidecar
+
+A dependency-free localhost port watcher: it notices when you start a dev
+server, opens a preview pane pointed at it, and can stamp a timestamped
+screenshot receipt of what was actually on screen.
+
+Inspired by [anthropics/claude-code#53997](https://github.com/anthropics/claude-code/issues/53997)
+("Bring back local preview for agent-built apps"), closed as not planned.
+This does not modify Claude Code or any agent CLI. It is a standalone
+sidecar: a Python script you run next to whatever started the dev server.
+
+## Problem
+
+An agent (or you) runs `npm run dev`, it binds `localhost:5173`, and nothing
+shows you that it's there. You tab-hunt for the port, open it by hand, and if
+you want proof of what rendered, you take a screenshot yourself. This watches
+a bounded list of common dev ports, opens a preview the moment one answers,
+and gives you a one-command way to capture dated evidence of what it showed.
+
+## Install
+
+Requires Python 3.9+. No dependencies, no install step — copy `sidecar.py`
+anywhere. The `screenshot` command additionally needs a Chromium-family
+browser (Chrome, Chromium, or Edge) already installed on the machine; it is
+not bundled.
+
+```sh
+# From the notplanned checkout:
+python3 ventures/preview-sidecar/demo.py
+python3 -m unittest discover -s ventures/preview-sidecar -p 'test_*.py' -v
+```
+
+For your own project, copy `sidecar.py` to a trusted location and run it
+from there, e.g. alongside `npm run dev`.
+
+## Usage
+
+```sh
+# Watch the default common dev ports (3000, 5173, 8080, ...) and auto-open a
+# preview pane the moment one starts answering.
+python3 sidecar.py watch
+
+# Watch specific ports or a range instead.
+python3 sidecar.py watch --ports 3000,5173
+python3 sidecar.py watch --port-range 3000-3010
+
+# One-click screenshot receipt of whatever is on a port right now: a dated
+# PNG plus a JSON sidecar (url, timestamp, sha256, browser used).
+python3 sidecar.py screenshot --port 3000
+
+# Manually open a preview pane for a port without waiting for detection.
+python3 sidecar.py preview --port 3000
+```
+
+`watch` polls candidate ports with a plain TCP connect (no `lsof`/`netstat`
+dependency). The first time a port starts answering, it writes a small local
+HTML file with an iframe pointed at `http://127.0.0.1:<port>` and opens it in
+your default browser (`--no-open` to just log the event instead), plus
+appends a JSON line to `events.jsonl` in `--out` so detections are
+inspectable after the fact.
+
+`screenshot` launches the browser headless, saves `receipt-<port>-<time>.png`
+and a matching `.json` receipt, and prints the receipt. See
+[`demo-receipt.png`](demo-receipt.png) / [`demo-receipt.json`](demo-receipt.json)
+for a real example produced by `demo.py`.
+
+## Recorded dogfood
+
+`demo.py` starts a throwaway one-page site, runs `sidecar.py watch` against
+it (no browser opened, so it's safe to run unattended), confirms the
+detection event and preview file, then runs `sidecar.py screenshot` with a
+real headless Chrome and verifies the PNG and its sha256. No mocks.
+[Recorded output](demo.txt).
+
+The demo's throwaway server runs as an in-process thread rather than a
+`python -m http.server` subprocess. This repo is itself built and tested
+inside Claude Code's own sandboxed Bash tool, which puts a freshly spawned
+subprocess's listening socket in a network namespace its own parent can't
+reach back into — a property of *this* build environment, not of normal
+terminals. A thread-based listener sidesteps that quirk so the demo can still
+exercise the real detect → preview → screenshot path end to end, including a
+real TCP probe from a separate process and a real headless-Chrome screenshot.
+On an ordinary dev machine, `npm run dev` / `vite` / etc. are plain reachable
+subprocesses and this workaround doesn't apply.
+
+## Limits and trust
+
+- Detection is TCP-connect probing of a bounded candidate port list (default
+  15 common dev ports, or an explicit `--ports`/`--port-range` up to 200
+  ports), not a system-wide socket enumeration. It cannot see which process
+  owns a port — "something answered a connect" is the whole signal. A
+  non-HTTP service on a watched port will still trigger a preview attempt.
+- Polling has a detection delay (`--interval`, default 2s) and will miss a
+  port that opens and closes between polls.
+- The preview iframe can be blocked by a dev server's own
+  `X-Frame-Options`/CSP; the generated preview page always includes a plain
+  "open in new tab" link as a fallback.
+- `screenshot` requires a Chromium-family browser found via `--chrome`,
+  `CHROME_PATH`, or a short list of common install paths. No browser means a
+  clear error, not a silent skip.
+- Loopback (`127.0.0.1`) only by default. No remote tunneling, no ngrok-style
+  exposure, no orchestration of multiple dev servers — one detected port
+  gets one preview and, on request, one screenshot.
+- `watch` is a foreground poll loop; background it yourself (`&`, tmux,
+  `nohup`, a launchd/systemd unit) if you want it to persist. There is no
+  daemon manager here.
+- Nothing is uploaded anywhere. Screenshots and events stay in `--out`
+  (default a `preview-sidecar` directory under the OS temp dir) until you
+  move or delete them.
diff --git a/ventures/preview-sidecar/site/demo-receipt.json b/ventures/preview-sidecar/site/demo-receipt.json
new file mode 100644
index 0000000..80429ff
--- /dev/null
+++ b/ventures/preview-sidecar/site/demo-receipt.json
@@ -0,0 +1,10 @@
+{
+  "url": "http://127.0.0.1:61125",
+  "host": "127.0.0.1",
+  "port": 61125,
+  "captured_at": "2026-10-10T17:29:17Z",
+  "chrome": "/Applications/Google Chrome.app/Contents/MacOS/Google Chrome",
+  "png": "demo-receipt.png",
+  "sha256": "6e13265f215eb1e39245011165192d703d99501ffd9c08499b513b06682fb3d5",
+  "bytes": 16208
+}
diff --git a/ventures/preview-sidecar/site/demo-receipt.png b/ventures/preview-sidecar/site/demo-receipt.png
new file mode 100644
index 0000000000000000000000000000000000000000..d3411dd3164632a64122593a9e19ece5dba5b00e
GIT binary patch
literal 16208
zcmeHuc~p{X*S9^M@|-;8)9Iw8si!>UF;gq29BDXZrD)|mAeE^p3Yv-oB9)aVP0h@l
zrE<WT98pmzOU)4z6-P)-aRL-jlJUEJ-u15at@Zx<t?&J(e?V>*>*l_$eeL}l_I`TJ
z&RSu&%5E7M8HFpC|Gpt3vlIAJ_R-J(0^UL*<Q-*X{w;Im?{kikxvSH1k#~Hi*JiFD
zYr8jTI^n5DE++82emZyYy7rC2<A1dL1JOR7aCPf0{-4*b|K91f*Z*G+@Bek9@aKPC
z>ISk~|IDeO8)O+BGe{fnhfkdllGrf)s&97|`b_=o8aX+Pmjjw90+(IDZH<xh2Z6Vr
z&&tRGcYi1YT>Imv9ly%Roc;M<2V`XK|NEztz`qawd=q#*|L^y}>!UyJ?*P7V?#CDY
z$0~&lgq6UZd^9F-F0@ZX4X9)5ZJ(!p=sR>Tr*xlwoW;gaO?Pd80TUO&=X~U^j>q(T
z%c{3;Z3*nx7`%Sz*RnG)Df#T_mgBm&s6Cwh;X2T0*cKmiO6!6uvmQ-ovotrtat7(I
z3Yl5J4$$(<&fHg|)id}5>Mu+}SnYy%tlQ9pLvxrOapB>csD13nu$jlyfzNeVMdswn
zq~9L6mCwwJC(L9FtY71uWMkDimJx9&sP&2ujhEMn-2WanlacZ41S0Cur>qQn^xD!<
zATqvAm&VCvBE#tE-o^)=Q-S-wKCq)DbqpqiFDnBdegZz6Sy_~92a&theUsnfgvjH$
zXT0IllMc?dxot<b!zy2fcA3XampV(f=6$-LhNi&9vjt~&v~<5qXpLC(a=X4cz?(2R
zMlF>3j^b--`mD^6^nkGWcRTV>;cP?1burJhUcc2zEL!O`SgEM7aihJ|f_i5ACjzT&
z9{44^Z!iG|g&5y*Ur#b<gfe6!SXO~IFACniIc$K2Ghe#ZD~f}<XMGg1>eFede7KiU
z36w$5qP7_MT)c2$y(`ePtT*!wL}L2JcWQW3W6%!Klk8o7j9h^ZkJ)(G0VC<5QOK)^
z^|c3i6yGboTY^v7PwKJb7@G+(jo?JBF3`!)LmV*i=^)Wcvn<MyKB{cia5Bu@D}NkG
zDdRsY%{_zeFu>P;WS@u8l6rrYIV+s_EPKX?!6zTQ_kO@qz+ZkDVUsg&q$3sd)FdLZ
zP5l=zt&a%fb)1CI_+n57_tjy)i_<;B?-@`_bmvsFtttd98T@jghT66~qKg^DVM^$4
zh#QxoC){YkvqcU=%2@GTk^yK4zvZph>_2L0uXoicc%Jd3u(%)GvLV^>kLJb~^?%=R
z*o79or?sMf_jtfPUAsV~2UDl8G!u|RUy}wKGb<-B#NHcWhQcwCGo{v>meR2utwchm
zU(XBu>63FsCgq`Y^@z*t(By+BZx3RS!@uiN7KR~Vls=FZ!7k#@tLzRZhQhQr5gsQ%
z!X<6Cxn3yA2*oS1AiCc#d}uFvKol%JCpHUTnws_gr>;aANfh)<GA!25Cn{<-92lRk
zVkh_HbYr3J$btQo-G2F2ja$=vYX(?EBl}60XC7xYjKOPrR`d_$TYdejS6cFC+Oi3{
zW-V^g7qlq~url;t$zCWFOI_%P#$&Du2EQdz$p=hJW(E4cPKNZBO?@KZDh`0cJM=sv
z`cVS80c<91y?vbaz33JZL9N_+X)3?0XyMl$?X@5~kpFy#%vZ>5?>%36%2Iv3gX4G?
z+*=US-R;#b13ulK;s^&dGD(p+Q#?Px42pMR{XQ=us^^^_e0)`4KH2i8|A7C+1j*fN
zbh|i#ug6>eVEv@f;&bm7QpRKc&Tzy*&%~ZB4mS^U3m2MLBiZg=v!|Bo^(@iXcCRYN
zO7gO}91kC%ZdvxSnO0K%G{%X}+qHk-INEk?ve%j&B4{+kI{txbBY4ncZ&VbkOS-A?
zI9l8HuG-TupUct#KE%}bTJ=7h!;#{hXW;$G>h>FwUK{J;{U-#Jx)T2t@$Bqg?P@#W
zz;O126Z=!)!TMGr19K#FQHc6Iuls2{zaK??K{!UZb-;po6SUR&4;r~RIw5=GHyn+)
zp{jYqkA)ijUOXQNXO0^BeZQa3;xrbW)&rqYHU`+wdM1CiDOcU?viV4nryZ@i5*NXA
z`@+H8<SLKgr9QiWRlQRncF+rl9M2tHCR`DC7+aoB`pr*b&T0&FToMGmIP#}%H-UU8
z*DYn}tn-p!I(((7be9bkk>=QxB4r=b+*K)o+xnkux+`7?W4*j0TS!I6y515SNA$=E
zV}azG)nKFjeHfghR7uaRb1B^P3Stzd=t?Bqevg&%h0W<wp(ZtG$dH%qzLFlYrP<eX
z;e$LDHK@0Bt0mIyV`z|RphP+2Wf^_piNd02(8zmt{6Exaum`2SMzo1g9&e{geBm>3
ziqn;!5!c)c6CS3pW7oev?2Cr_0$KW^@h8%PRihty*tk+`z7>adF^|6<r=w>9e;*)y
z8^r03Lt!H$v9>5--xo2B6ht+)JgVCXpR8kQuiVC}5i`E~PuvF)@BYmgiFq=3{_6Zo
zk8-r@%)#EMA@j&#TDkP=S9z^p`|7T{m*%vcKEl2`b{;ll3KDSEMh0+KR9x*;YnLW-
zFwk$o>vM|z^j|0<O7Z8M?_Vj22C&t-0>OfsmghwAN1`Vebb))UsyADyzT>mrMZYuf
z<%DthW$rP!af{6in-j8gvh2-aZmrzHe{b3ai=PA^g`0vk_oP*$t#y}p<x2WQXI!XG
zLM87aZjWH(g8cHb0rP11+|Di~4NpkZ=`^pBx9LHc{+%CbnB~U4>?~6}{H}EM+3vK{
z8)t(cn<WGDMnNs_zmU*N4zeDq!hVQl$=##Ho~C!G>WUzuoz`O2o4s*n>~}s+lwUr=
zW<xdD^vW`|(+lNV3MZm3g&}LHc-xOnk3ka%9LqeZvL_D`LrzPqvOrw+x>oe&a|`ZJ
zy*;_zvT5<8KTOXe_U6oQR#N;tyRSrTkVrAkao(T&h%IeX@*Y@eEDj3i&&iX&2PYbg
zP~ga~1C|`SEn30X#rqkwGPpntAp?2*J+b3bqy_yJksnFU6n%s-^s7LtqNh1%UJ{S}
zS)Q(a$mgmyr`}<g&ji_oe8BTSQR#a!F+gz4+E3ZL*PGVDN^W}WLRT|>&F$LbN|DeR
z73&^{xV{1tSgb?^&G4%Y1x2%eK~&C64Ye1Z&ot6EFL!(jWP9k0cfOdxf!G~1S<plj
zV&Y@qw`UHLy60iRm!qO9C)M49hfHuWf=P!&ug8D+0VPA9e$pFn(1~GoX6Y;^ycC_1
z;|)|)|DFaE3TgY2%_|epH`<mK2G+yCXH_4=Q8$;|V%<M<UO}*SQf=*Xd=gVyo5a5$
zl)<HJtPuNQ1ShRN!Nx7sK5H=+E=smw8OGnUp$(OO1Wx+|Xnm+#L)cSDh8kD~iSq1Y
zg&7#v=luIGlfjHVb-meDPlv0xO1=>-s;q36?-ct(!?(=~J8U-c`I#EimV|;=2W9R@
zBqpsLafM18CC^=U<1Fnput&7`%wB{OJ4(=)foZx(n=eS7DyJ5i;O8%<a|&~<SkJ8<
zCss@Sj@jndmwA=BRERzVh32EtTl#tfpiRzOd&Rbu>Wf($M}xA;5m@ebd7B&pbocl6
zQ_FO#wnb4n&IB#QM+6|v!>0<Uh!>a8IiM3A-68QjJ#^M=C_Z;n2*R7aG*MuQ>GK81
zD0@jYJu$=RQ1IrXDOG-=oN|kCTk~4<=QttZmWI`erg%60pfLblVzFxUFn)o#hDW6M
z@yDwg_r;Ir<doD8N=j{xNjK7+z&TdITWiYnsISYXCgBsawVAq??kE=Yr;EZP2KrSw
zV6^0m7-d9<o5Qn6VAgkURXs_}`++TnB2Mv)ml~83(?i7=a?|Aa-5z<0>`5K;k>~z6
zqad(*rUu=BJ>&PPaPLyF{llSOyX+y={=Jp~gdq24d?j@qF9#y$1I|TZ?|+@>>D!uz
zb_@`|2H)daa&wkVv^p401P0Uvc@t~L3{R#5kZ8A}VjELYJ{w5WDx#Q5pXYZ};@?e#
zEijv18w+n?4Z5V?^S7cju|#+t<{$svaq{@Qe3MffXTRj|57oieVJeIh5Za(4$rRK~
z{M<-qD(c^rbQWDFwx20o9(sa~qy{DADxjt=rg2$fVN-druBZF5Qnj}=L*w=u`4=NF
zdgR+T!~*oH*-_RlB7Wku{|QS3!PcsdjM*jaN?v|p5}T8-(s^68%xGHv35EjSTD3PJ
zF7<v?9BV?czAp3jsEg+#?1+H@Tug*j^YPkAA8_JTd`{<EePZ}#D4vmVXXbU7AnC5v
zH`J&6Ee(5%FRN8lwVFN|nHHVEN1E@a%Q%U5{lhQJoa@-1$C>;?yd{(b5v{g{YWmD{
zD!O<KP6Rv;!uyahZKlIcF39S9Lo$XeMO3O`*1wr{?3p_>Y=WUje$`J*%-78OSL{&V
zL<`I)$gIMqIGn4@h^MQj1?<+?%y=00h@o4dF?8=U0gV0q*@?#2!*!<NrOBLQ#RFRl
z{k2sV_z~GAd3;!&)eY_FuhG$TuHEdkUpx!EF5Tt_hv^HT={Mug*-zscP&TttTW6>w
z(l^PH>z)ev3*D1;T3>9_YmA0Z+aUDp6W57a%KLSjH{B`c2{aI?o?edyz5BX?`?W{-
z^U~M_p=U%_SzIpRP&&4;pPa~g{-2V4>%y;JVeCxdx5Uc)-zSRRR-9DMDg0HZ<?gj5
zb8%gy;Q7lS=9(M}nKMt1@%d8o<SoGkEZGc5b(!*6+1UHuNXJ<+$2_8Sp*YAjlC?;u
z-wlr%S`6`$QCxy9`(EyaadhA_FOCF>V?HSTbz;p};ZxB$NsG2U>4u0Y;r3Rt9$b+=
zoP;qA8v=0Eu&`bJ-1|}tDJxC+Jw&G$K#oUERIm}J%D(yW$>h3@#!{W3%qUowQDH>X
z*!_WzyLc7=({jl-F$`krz;p6Ci*i84t)q2=_8!oTx;}jpq;>9<ZtT<Ku>wE6`~2xr
z6b+{?pJ8Z7Pcpv)aIZ+0v41N*u*38gliEGReD~55F?8pZFvT}s)02L2fyPHLqEN|O
zXZ=@cZ>t)<UcK@77cqTs;z8R*sJQ=1rI%X3&@+)nQLG-UcjlW;qV8q%$K{m<@Q$eh
zSgcAC);Y#lqlEw8T0oI+UnT6WPl-{IZPli+-BCl(`I)?>`o}JNg~M_+T8+-mFBLS#
zj&u&i-kZE2e>#X)uQA}67GG2tBW-}N1*{T{*br9-uZFp7rK>Amvp5ra8m5r1r0J3*
zP)7wz9)Dn=mqA*65noTs%DkJI92?l7Zgw-Tv(7x7KsJ5fQ6=@{^qB2DNSzSJPf&;E
zJ2df&ayu$5&$u~5?l8?NGxEy8ez%ppM$12`(kA{vlk!)>Vv$k386pyB9?CosF<)kQ
zI+y>;d6hRocR$XM%S8(*@_1cj_4??cYCkd^dg>TITv+8FS`JA?Vcl~h+9IOan-f+j
z-w*1O^YjzT6XudoQK+1rfsBl5Taxa5hLU-nk$ArOiL{s;gx#Be#el=05L`-0z48cK
z0sg5`mb9%|Fni09H_+^n9I#PGyMBSA7-_e0gD^AwNAbH`(cy><w01OM><(@Ah|Viw
z+^`DMJJfwu)r6J@#c9ep6`mR^;P+}UL^FuVU?F{>sxfFlXcujMbY6wFH+mAR147@~
z<jrkDC=1KfKaNQ~gBzGyimYwoX=Ujlg2H+#nhibayr8cC{OHCc<`Gwegy~mEZc1x)
zzV|A2Us-5@6Zq;OPs@APQYk*r$WXNBj&dWQ2LGOKZr1R%=K}cBeoxPU)@hA;aQs<)
zuhBuGb)v};Hqsn?!zZ1<NiMQI-V!;)sLGBdr@=xQWjhm9JMBHbh^%h-4_Gs&VM1N^
zLyz+(HtaFbY&VZkrBSRnZndMC5(o-+#qtr<pil1;IHMqm+15X8pr(jeU;{iL5nZ{m
z5%5!E#4Z#uFW6P0@I02=r4;`-Vs$$-9!!p1x=%ljJT(I__Ix*zSF8@^C!>x#T=OYI
z{^NZKo&_seF6O828+6#YTSZH07d6HUU{N!sAJcrR@U=%LZ@ho3DOw6mc*{7BDg6o`
z>fgVoh((}Gu)Rr<C#8L~P!J8o{!3tug}(47enhfU6RNjJ-3BoI7I>$Z-!uBRMH4&0
z!b>?xbK_zv6O8+<j-B1mEst<yKseE7*>)N<LWlnKXs$fs^~i&5XtoRPt-2%M7^f%R
znyjz6Xi=D{eaKSy>0GORU{v_xL~~!h-!oXoBuc5ZVU231?t13ek;<~wIMjT6i2IAJ
zMDy=5vk}GAh3V^2K>gDgYwe1&XJm|Z;1rG@vWW?bNsTKppZZ>^(-07qHrA6+V_-F<
zum5%^=U(4~R+~OX{}m(ix|U1pa!7VmcZ%Nv#4(UJm|(82nyx&?@I0l<X8jGq+>~6z
z!mAZbbPi;+El{@zm0tTyJkMCL>lnOzudVXcilNy2SnYcxW&7zmf7*dq%2&+xPFa4Z
zc4&Y~I#f?J&wtpI=3aAXJt8$}@Xi2WlfrnX@xOBYEktJ!J)=2}ULo*ARCDqB?<~Lg
z!UK0DcnsT)d4rVIsc9$A)-x}}FyirQ4kLkg^u@nO`gC)YY2BM`q%hG;HeIk((f$-9
znq4d4!%|l=a*Y@F$;}gPL(mIl&`R*T%E!j7J|uL@=O^OjE3%==UIPaK6ibKGTIxOI
z<}F0F5}ZtF7MmDg%gw%u;6dmI(`mex>A;CqQ2~##5MBLkFPp10Li!>&+Gvw$1d`S#
zo7dUT;P&$^Qb}$BQuMvZ|3oD>XC!x1l!i*2$|(82p3w6iw*rMfkY{o#Ns~zmO|iy$
z)Z7daBXeAs)sR$Ks8lpGf%SG<T-C4@Ql#(~CZ`lYZP7xdeZ^IoRs?w8pq~F&<-1GH
z!<C|;4TIBa%y~i?7KPr@WBZ4Al-AWr*_bD>8{f_$>`SkB<8o3;`pk=r87_*tcbU6v
zm{nj6w?f0KaqpuT;$q90n%Z5M`N9WjexsW!BmURu1Lds`C`l1yOLm%=TlFG+mlnOn
zyVpA3<HasA#acCfb+q8!TR;60tVQ|f4>KUabW2W~MN7I%Z^gz|IUZc1ZuPFC{}JV+
zWQ9cIET9&|;-q;4#t2aDR)hp5@{_tHH-9Wlp#ce{7+(p^JVmIgM{!3-eOLlYd;5|a
z5x^^fpN-pP?B+LTb4CE%h;a@OP^4*cglNwdPIfw=B3V*mJHe2300hh1TiIfeDQXZ?
zWLUZK%jR_gcX!J2>c2~8uuVR-?J59fak@<y%};Omb`j)NfFdLR0l+X)>g2r}$6s`p
z<ey5<GD_<V#FIi<jFetb6tTu;T#mo$Hv1I2MH_xgk*@JxWKX15LLvms=A#?|*<{+1
z{Tzb&23~b{L$bPr8L_hnN#pSolW6ed@_@B+Lqi<~73B71UAkwRLL0lP&Kw@>J_XG(
zgvF{30CnVZZphZ~(ca0ZK~AU(*yE!r+3?C7#AT`>e~-FXW!*^=X>6<qcB5X^uYzn|
z+^|uy;nF!GT5qavdhM7Gi#6b<`b`>R0jj|s$23HjaMSdaKr**xc@w5E)D<T09${*7
zA!2RgsZl?^cZ3C-IA%h##McwfIKg4$<uL&N+>EOa*|nC?oGwKB#;Dwfq{-nNY0}ko
z`<B7{E)e5{>(o1`Ul#+?-SFs&0gP`I8smF`Q;F?!=RUmphVyvEcWPrS+VVlu8)n=*
zR<bz^@U?4#Q~olTdgU6cjha%a5W^k)w#UOi-h#_11<)k%lXq2+Pi91YqWeUV2{~G_
zVH`Hy7Zq*|`EE!11e7A<D<ms~z4ko`cW7SWqP`KeQ1(CRz*$aijgx&O#1-ODc0e^D
zNp9r#Lk77|LhW0^diE;Yo<QHA=cVXQ%)caP+4f@kILo4g#t@~u3L4K1g6yV~vC%?m
z%83(}f4Ku(p$FPOzVd8+DY4JJR3~y{dB4JA{0l(!RB7=%UgF(mrd@e?DZbUX&6h+@
zMwo>)bgWdlidROJC#^PiZrt#oTFJ#@<}rTxsCnM#@*+S?wz*UDL#n&;$$ZQf*^k67
zBuL$BJ`LSp9?&8|A~#ko^hr*w!B-^Cmx=xMlU9#%7>oM$W<oiNv+!JBdyxXY(SJb?
z_e`gGA0S-l>3mOu-|c-bCaeF2EGjoT@Rj*~d#^q^8goi8KE_CI>+o@ykY%3CY#zz%
zsY>_Jj)2B^M+s`bH(~V3J)kD4$MwlE!Q^~Ez^DFmZhvcYMA_<%SF@m<WFXPABExRM
z;z{spmlP|{%nVu)1E(wPQ#kq4=0=7UwqPT~E%82mJ#fKGu2T3KI%o8}o0~7SlBnK*
zA_M9=bExS=<-p3mazrBxo|B9vADqH-t<1ydTb2+4t?=GW`T)h3+IG51u;h{<o}c%D
z#s2&r<Kf-_sAbhc<n$B8ijs=UsGHGpE4cnDRZvhzFG3d@^p?@0GipdCh5)GaJL2cP
z+Xl_MkbGIdnvjY5-?nbfGi<GO^z|nJiMG<Dw4$8cV)bTWWPKz{;S#@$!{PJ+iu_~H
z@^ov=MTl<{_`;KL=iBBHuN6W|0pqED^urF(8+0^!{m~A{@t*AB!on8TKomgRPV$+9
zJNApC!=poQfP<!cY$q${C>o8?VT7`6K_tTj4J@Xjr%^PZdT8p$XmRz{r|eD2%b`s|
z|2YG-H@tE}L!SBQlP17#d+)yT`NC^{41$2io<2Fk&Pj6?Nyv%nsMsaobOBt#;Wv%?
z2>g_HRqM^gO8SAel~ITR%tsAN%dY7o+Aov$*TcBl?=P(_0}Gy&thU37kttas*|)so
zwXgUZf?Jkb4x`wE;^6{8;hzJ8v1S3Q5f>uEf#<XB+O_sPcH9LMbRNuo>N0H=fvapD
zrTUR1%=rSq3%U&T+|2r*-&QTcNT3aA_Lep5bHvR926aa)eP?<5F){F^N`Ty0@}+tj
z^%c!CujphDd!Ja2$1+5nL(fnE^I&<1vP(fV6TKASJ4_3vw&1+HCV0zQYBYYPENTO&
zRDfrM%J)P+!0lZH!t6_BSxk4$6C&0%jHwn%`7}u~I^92GLnTKpRXQ;Y5JdlxbcRA!
z>uc7dM4TZenhc*O2^K!Pbh(fWS~p8tQF|6CQQe#;lNw%YbEpLT7n&dVuj<`=(M?CE
z3=U8;BnyR3IbqyX2)r?PEO+Nd7t~@4Q25KL{Ljq1aFQRKupRn1bVCjE<(sK|E&IcM
ztZL1)uM_6`<O@KrNo!NHdN->D)sT#S+rN#V999*?tnoO43S_*=!OeYDndT}1GHY=)
zeJU`A6urds6j+*VJ_nfF2p;g;(sc|%m4+e6l~t0++l^%nYeRf%xRYP+RR+L_)?j}z
zUc)VHITih6&!R=B*R(wgvc~b~#h-~-TsxOXX>U2*CIGMm;;yUFE=j65I&UL2cH0z!
zl06)yV(38Z>Q>R?UWaIY<F~qVfP28K>QXXh>iYO(q1r%YH8xvXZN~l|e#7a>%A9RW
zw)iP}LDbBnQ$WM~HOuH%8F;gb$exM`v6aCLkm0UEBPx&U!*V^plvcoekk?7~hThjE
zvj|)N=o!`Ptf)9At3jeRy97nAK3hh7d!6721)Yhwyi6O&>)nmbzr8Vv_*KKQ?#O<3
zw7AC*TTa&4R+$<3u`}zk1E$6Fud$`B&U;oTm-<q8Ha;G=x8iy1?W5)trf0J;S>UmS
zvl?Uon8r`V-rH_(dRtKR9f28GyCwIAdzoQc9C9gS`8ry-x$M~b_OKE8pazRSk|w7F
zDHtlh=8<s)f3N+PG-^6ck)2a~!u=I^{L6*o#;RYAnzVkhHB0yNySK=)3{9Ehwocd3
zS)-bKW-5xmN^Q)2?4cR7JlSS?x+wO-1z*6ZtXtZgXcLn4R8ochTo?V;JR6cV^vtdI
zJG=H=-XIo+cmt2Hwakr&pRRaYDZDhp!S~)MG6`8N=}EL#%k-s{wgisdPvCW5799H1
z(n?$hz>)!v@K#P}T&SXzbf0Wn^w9gdgMefUZEkr3;9|Nt>N2<0M<F8R_Zk0VU55sV
zOY2Li7vvlZGaN`VGS?ifcda>*diESIzTd**og+`xETLVJ+eE8}0o!JTcV96V6aruf
zUWYOs8#2nTxsbeMFXGYVtFls$n2L!7>+Wt%Pr(7s6}H~Dg}FwD*-NE^ZR<;crc=_4
z4pg40Rnm@yU4i5vi{FSqU9ms(GUzE=6!=M@6!78yt1kd4_~PYf8;R;k7^yn1B0Dw5
zTNh$24<}tHMktO~T3@Y!N^YGKG;claV$+R<8)O!Aa3aP_&7~Dce3aAB@kX#!4FY+n
zCOGLTzFiH|2Tyug0k)rl#jjEcBGjXkIG$~Ow5fS^Gj(%Zt9Zw^VboIM@BaIfzGUVA
zL^Dy|<yMz&d33lw)P4FL<KUd4Swwp(7K3Ym&%Y{Y4nu4mJ`bF_=<)1m_K=4!E-2sY
zZhPGX@1;XZpEEpXGpXe<G@~fsh0?;BJk4}5_ZR<bCTZfo-mJF6{0a$1{RU{_^ujp$
zwLO_Lx2L~tFaw?$vKY0G;_k`KS*^HH&af)bE?Z=!K6yx?YCj9LzVW99=%hIVWJ&rH
z@RNV1r0x){f-<m?OD{9%Wdo46rV4FpjiG!EjL-Lv)MruT%$~RQO)J%p38GjDU@3;T
zEIw-*KlRP<+lc6ti!^!wOv-VI9A^xlFFm!q?BWFwjH#Vj+fI(*@yVjMCpwm|So6RR
zwA{K`R#$CTTX8&^RkoD%V#wPH!|a=)l2Es=CzRWIW2`nsL%e0D^!dra?4+&APRHWv
zPdo~#wYj3+EibgAj4IgBl=mCxts178hv|C)$0nGHRT?p=u-$JK5RCkKD(K_y*xoYL
zd?}S<MBmf2f<PD@CyEsjhvWtnJlO;XWR$Tg&1b&Hc0%I6$NP!1q1cAZ9M|<&UD}^A
zW+1FM$Xy<2iJ35oH8engZ4iv1-d8F{^^1Uq&bLfQ!zccrH-$S-cy1)cE8%<Fs`YF}
zc<;!unB~>2aQO`577lWAkWV62i=HZHENmw6=w8z`Bv_aFlvZW?)Z-0smjy1xX6P=m
zZ2q^50G(!(Bi=Pj=?og(PO?rROrH=|P2WS5V`~A6KUghBwUDYcn!A}-3PjTN_*Rl%
z0Pe8Z9Cxnr<p=+g%C&Wnh}j~hQ^gq>$p@@nzlAxu;W$USYG~q5vv2YB{l~@+f$gIf
zvrmEdp~CuoyFY)}@A0g!^8(k|_EcJ#5&m_yjpALia)YSQd;Q29ryyG7YqkMicM^bk
zT8ActI-m-P<J_rkFr!rID*nYTyPP&~!RS)$ecek)?d_F+Zgnkko|$d<D0X%R-6p1t
zH<h5ijUNq~*yDe!7gl2(hSLU)k~vK{hgyIHuilr9SUPn}kYM;nuBwWq_yRgdqaFny
zSKO_c;n-GU2K3&<YXC?DbNZUC^C2-SVtGzLEf1;J8rT$9(ghZi$5w3+PM9@rIqUCw
zJz;0_38#tMONpz$bSL?N{c1E0-XUe0l^gS!J)H{A%~e1IRN>y~1-z9HlIdJfOK2b1
z8Jhnau?t{JCl$cBlq5i!vJ*Ty(rT_<i4zIKcgWngPy^_Hf{B<JyLz~M;HE8Rlpe`%
z0bmegRpX9gxZO<Z?bB>+?ZYhMJs!|~a2o086BXqPC|0Dl7tnP7lkcKl8k@W(m&GMG
zXaR9G7n%6V_ypc<9A}Mm2s_@3^(YSa@zGU>P|g@<mgiv&liQiJNJEbLWH>DMG^u_I
zXh4{K*6(R$6z<J6I^Mc_+@(ohcwA_htj?~6Apc%3ruQQ#$jcPzI&xFRU5@>#HQO;e
zQ}y@h*u*kTeh)2Y*&ai_G{I{MU$O>E7fzJe%NA<1+?>_r4`6Fw>-7hx-P-RL(@6KG
zrYunmr2k&DU72j+)odUvPQ)y<2y7pOPnnGRl->jNKvv3|nvW!AS>84ko1k9~#@wzN
zacQW*r;k~(&;i$@r+1*u_$wpY5kK?e?3MLnfW{}v1I_oqxdjw79r0GI@S}W=z5Sej
zZ&_`|H5EYI(3x|$nE%HTr2w~>UY~>J7~XP6X6hu>EO73DpJ88BCO0K6gMuZWil2HU
zm)UY-BpdU>)iLzyVozR!fPAZ@wDfB3t1N$uqxD+^Z&gLr*n;(vVV6!P+;t+$X+9n(
zhDpW6H=@07fMMLF>4J{(XMq;?x3&SZan*SNKnz|vQ4I@w%p$3)*NH%*#XvyIkZX?b
zJt<U)*#M@durgZPT(WPp-kxu{xFH)I0ob3SNstd6Z>|B!G<R+81~^U5uPgV27v$l<
zu`AQ_(Xf2YH`Q3lpv})IGDAN?xY_E)K1j&Z?JSO@H%vC<_|S+^PFxN2eBloLRyRv{
z0JC{jb*08Js{sg9II;h<|J~Lt<8HMY$-=i;)a9qsnns~2vh=9(Dy>7KS`i!(nT5py
zT|@3)ZfU-kX1k_IV(c~j{V)|!?vl1<s0%&F>R|@)5-;=3czc!=&e-KlR%f{mz8f~5
zFA1Cb)#397t1X}sh18L5b$rB|AujXFYW%!<C5A~J$Wm9MJ&^!p>+QMP5A+N~w82h?
zoxMozOtZj7`;Q#%N-;@(>2*)=+O~S`d5(?h;f(;+%3-k?<Gi55B;lvvC8y8eC{EF;
zcU#n@&2V;1*cbP{Z>fH@Hu(=viuu)@^_L%K`M10XMZSx;Rh`;zy8yW5#ik;1wd@eJ
zGz%g8_;Bj-J=WCMV?~6}C7<4D<X@JAS$al@1kl48rt1REvIk(Thzj8ipNZM5PM}*x
zqk4Jyc2?)}Du7hRD(6QT2@C3E0|{>K1=7H}Az~L<<Fh&}c=d2A<>Rsbig2-?jLcte
zG|4+8TX9@_vle!@HP7-ULmi)lzamT8CbJFepBaW;*~HBuAaw(UAZGs4jwKSgt--?5
zs%T-mFRYkd>rLQ=7l-`0DGQj?YfDE`$3;t|$lwpKx$<p_kgs!zF8==3vBR1@S?drr
z4x&}rUC$`a6@QWV*D)WIcTVw#XFrI|)aqa<BUSAkxIJdKQ}RQVM>XDsZkEhB-UaWx
z$7M5c76ah}{ro;1ODrPK^sl7-WDig5!mBnh*TyE)<+lMY&@%N~`5K#=7x5WxIkZw-
zyj=vTw~zU|#sau^O82Ek)G?xyMl3P}zSHK{NC~U^qCc8KdXla~AvRIQs?3x6+tM+2
zqprdK12NR2eY>{+92gQwPcM-2_(lGiW`yUUCIs!hRo-MXqK>+~>TNhBG%GXK{~w8@
z{1RO_{8k-eu2vthsV1EZwYjGyh~=+-&|bnuhAaVna(APhf#~gsqBQkHd2@j3m7m<Q
zo3{}$ARPH9zoP1#tm2t^e7-=)zq*m5wi^|+^)$n--*REoT4~gW-8-?hPi`Z26WhD3
zcJc22?u|Xu$bT-`PZjyH>P+kXhgl+fUpaNv-F5|m5}xhcNSJiP4h+!XeS20yrw+H4
zAMd4Dg!-vz0T%q#&C_<4Jt?4yh-Iu{zOmmq$d{w!);@rc_QF(<<IO8Tzrp2RfS!zi
zl^+in(gq{p-fG}nFAuY{GMLJZkE=une#+{kPQM?gZ$f|iU4YeNm}B(*(@7?C-L3GR
z+V*`8)Zk-HIfsiXQ_E|#yj+b`q(YE>K#=axU+Yq_wveL9U*4GCC#OCXx$<>V@@}n&
zz=^N<50cm{P1M5m=hpz-rZkqaJ64FRr5wk1w0%joN!Q|E?T5bGqT*su0nu?o#|v-U
z!%{ERVk2)YQQ^7cv#I^+(A)ga-4Lj5P=dL7(8e^77+%z*T8nikZ<?K7;oh_Zy>cgX
zdh-LfsF*wW^SS&?9>u>F=77DUlJYb7<Fhoss>m6-^@Cy@+3gxOp{PFN?)GA8XQ1Hp
z$~G&HJq~_^NN4va{GgHW@-OL_t*)WsIDebTdyboeR{J*BJAIo#L()}EvhuWHZT;TQ
z=g{W3)c3qk7sxq{fFz_ws1S5bj(_OvTYl;K*odlU&}~o%Wk3i^#(_5(+O^A)&7Psr
z9!&jq$x%?fR?S5<+hsS+j)WNXYhrXalaQWe##e;jsyrfcO!1otydI3%IBzs%*%sV>
zKSg8A95D!B`M-wOceGSrUCQ~_83j5MJ^E-=ozfC~dT=OvRUHt1fR?6Ap7ziwXr5t6
zv+5r^WX@`<#b|s@x<T^FW3}E6W1R<sU@e#SicF>=<`*Tc=0zcFfP<GqWn^4+cT7oC
zRGh0kv)sHWYgCt4(<0#wLQ$#Pmv_Pbaba&tMp)|M8#*g126M%uBC<3mAJ_rsuET?X
zdhuv5)#U-u{(FDp(vQ~O|Iym}qXGIy*Z2Q=Z@k6rD5i|eo|)|#f$bCfqZ9wfyuyzm
z4d5jFm`wRGj`RO=XbG5RIr3xJ=?4t_0Rw^L`eXR-2hRF|vwq;LA2{pB*z^C7;qXUN
qMHv~XG<R>77znvt+hkW(=GS%Q1746X>%bM6D;Mqlt~!77;r{{P<Ofjz

literal 0
HcmV?d00001

diff --git a/ventures/preview-sidecar/site/demo.txt b/ventures/preview-sidecar/site/demo.txt
new file mode 100644
index 0000000..53df4b3
--- /dev/null
+++ b/ventures/preview-sidecar/site/demo.txt
@@ -0,0 +1,27 @@
+$ python3 demo.py
+$ (throwaway dev server listening on 127.0.0.1:61125, serving a one-page site)
+$ python3 sidecar.py watch --ports 61125 --interval 0.3 --max-cycles 3 --no-open --out /tmp/preview-sidecar-out
+[preview-sidecar] watching 1 candidate ports on 127.0.0.1 every 0.3s: [61125]
+[preview-sidecar] detected 127.0.0.1:61125 at 2026-10-10T17:29:17Z -> /tmp/preview-sidecar-out/preview-61125-20261010T172917Z.html
+  preview pane written: preview-61125-20261010T172917Z.html (iframe -> http://127.0.0.1:61125)
+$ python3 sidecar.py screenshot --port 61125 --out /tmp/preview-sidecar-out --chrome '/Applications/Google Chrome.app/Contents/MacOS/Google Chrome'
+{
+  "url": "http://127.0.0.1:61125",
+  "host": "127.0.0.1",
+  "port": 61125,
+  "captured_at": "2026-10-10T17:29:17Z",
+  "chrome": "/Applications/Google Chrome.app/Contents/MacOS/Google Chrome",
+  "png": "/tmp/preview-sidecar-out/receipt-61125-20261010T172915Z.png",
+  "sha256": "6e13265f215eb1e39245011165192d703d99501ffd9c08499b513b06682fb3d5",
+  "bytes": 16208,
+  "json": "/tmp/preview-sidecar-out/receipt-61125-20261010T172915Z.json"
+}
+  receipt verified: 16208 bytes, sha256=6e13265f215e...
+$ (dev server on 61125 stopped)
+
+$ python3 -m unittest discover -s ventures/preview-sidecar -p 'test_*.py' -v
+...
+----------------------------------------------------------------------
+Ran 16 tests in 0.003s
+
+OK
diff --git a/ventures/preview-sidecar/site/index.html b/ventures/preview-sidecar/site/index.html
new file mode 100644
index 0000000..1fca88f
--- /dev/null
+++ b/ventures/preview-sidecar/site/index.html
@@ -0,0 +1,305 @@
+<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width,initial-scale=1">
+<meta name="description" content="preview-sidecar: a localhost port watcher that opens a preview the moment your dev server binds, and stamps a timestamped screenshot receipt on demand.">
+<title>preview-sidecar · notplanned</title>
+<style>
+:root{
+  --counter:#1d1915; --counter-2:#272019;
+  --paper:#faf6ec; --paper-2:#f2ecdd;
+  --ink:#231f19; --fade:#8d8371; --line:#c9bfa8;
+  --stamp:#a8392b; --ok:#3c6e4f;
+}
+*{box-sizing:border-box}
+html,body{margin:0;background:var(--counter);color:var(--ink);overflow-x:hidden}
+body{
+  font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,"Liberation Mono",monospace;
+  background:
+    radial-gradient(1200px 500px at 50% -10%, var(--counter-2), transparent),
+    var(--counter);
+  padding:48px 14px 80px;
+}
+a{color:inherit}
+a.plain{text-decoration-color:var(--fade)}
+.receipt{
+  position:relative;
+  max-width:420px;
+  margin:0 auto;
+  background:var(--paper);
+  background-image:repeating-linear-gradient(0deg, rgba(0,0,0,.015) 0 1px, transparent 1px 3px);
+  color:var(--ink);
+  padding:34px 26px 26px;
+  box-shadow:0 30px 60px -20px rgba(0,0,0,.65), 0 2px 0 rgba(0,0,0,.2);
+  -webkit-mask-image:
+    radial-gradient(circle 7px at 10px 0, transparent 7px, #000 7.5px),
+    radial-gradient(circle 7px at 30px 0, transparent 7px, #000 7.5px),
+    radial-gradient(circle 7px at 50px 0, transparent 7px, #000 7.5px),
+    radial-gradient(circle 7px at 70px 0, transparent 7px, #000 7.5px),
+    radial-gradient(circle 7px at 90px 0, transparent 7px, #000 7.5px);
+  mask-image:
+    radial-gradient(circle 7px at 10px 0, transparent 7px, #000 7.5px),
+    radial-gradient(circle 7px at 30px 0, transparent 7px, #000 7.5px),
+    radial-gradient(circle 7px at 50px 0, transparent 7px, #000 7.5px),
+    radial-gradient(circle 7px at 70px 0, transparent 7px, #000 7.5px),
+    radial-gradient(circle 7px at 90px 0, transparent 7px, #000 7.5px);
+}
+.torn{
+  position:relative; height:16px; margin:0 -26px 18px;
+  background:
+    linear-gradient(135deg, var(--paper) 25%, transparent 25.5%) 0 0,
+    linear-gradient(-135deg, var(--paper) 25%, transparent 25.5%) 0 0;
+  background-size:16px 16px; background-position:0 0, 0 0;
+  filter:drop-shadow(0 -2px 0 rgba(0,0,0,0));
+}
+.torn.bottom{margin:18px -26px 0;transform:scaleY(-1)}
+header.shop{text-align:center;margin-bottom:14px}
+header.shop .name{font-weight:800;letter-spacing:.14em;font-size:15px}
+header.shop .tag{color:var(--fade);font-size:11px;letter-spacing:.08em;margin-top:4px}
+.rule{border:0;border-top:1px dashed var(--line);margin:18px 0}
+.rule.bold{border-top-style:solid;border-top-width:2px;border-color:var(--ink)}
+.stamp{
+  position:absolute; top:20px; right:16px;
+  width:82px;height:82px;border-radius:50%;
+  border:2px dashed var(--stamp); color:var(--stamp);
+  display:flex;align-items:center;justify-content:center;text-align:center;
+  font-size:8.3px;font-weight:800;letter-spacing:.03em;line-height:1.4;
+  transform:rotate(-12deg);
+  opacity:.9; mix-blend-mode:multiply;
+  animation:thud .4s ease-out both;
+}
+@keyframes thud{0%{transform:rotate(-12deg) scale(1.5)}100%{transform:rotate(-12deg) scale(1)}}
+.title{text-align:center;margin:6px 0 2px}
+.title h1{
+  font-size:26px;letter-spacing:.02em;margin:0;
+  text-transform:uppercase;
+}
+.title p{color:var(--fade);font-size:12.5px;margin:8px 0 0;line-height:1.5}
+.meta{font-size:11px;color:var(--fade);line-height:1.9;overflow-wrap:break-word}
+.meta b{color:var(--ink);font-weight:700}
+.cta{margin:20px 0 6px}
+.cta .label{font-size:11px;letter-spacing:.14em;color:var(--fade);text-align:center;margin-bottom:10px}
+form.join{display:flex;flex-direction:column;gap:8px}
+.field{display:flex;flex-direction:column;gap:3px}
+.field label{font-size:10px;letter-spacing:.08em;color:var(--fade)}
+input[type=email],input[type=text],select,textarea{
+  font-family:inherit;font-size:13px;padding:10px 10px;
+  border:1px solid var(--ink);background:var(--paper-2);color:var(--ink);
+  border-radius:0;
+}
+textarea{resize:vertical;min-height:44px}
+.hp{position:absolute;left:-9999px;width:1px;height:1px;overflow:hidden}
+button.buy{
+  margin-top:4px;padding:13px 10px;border:2px solid var(--ink);background:var(--ink);
+  color:var(--paper);font-family:inherit;font-weight:800;letter-spacing:.1em;font-size:12.5px;
+  text-transform:uppercase;cursor:pointer;
+}
+button.buy:hover{background:var(--stamp);border-color:var(--stamp)}
+.snip{display:flex;align-items:center;gap:8px;color:var(--fade);font-size:11px;margin:16px 0 2px}
+.snip .dash{flex:1;border-top:1px dashed var(--fade)}
+.thanks{display:none;text-align:center;padding:16px 8px;border:1px dashed var(--ok);color:var(--ok);font-size:12.5px}
+.receipt.joined .thanks{display:block}
+.receipt.joined form.join{display:none}
+.receipt.joined .cta .label{display:none}
+.items{font-size:12.5px;line-height:2}
+.item{display:flex;gap:8px;align-items:baseline}
+.item>span:first-child{min-width:0}
+.item .dots{flex:1;border-bottom:1px dotted var(--line);transform:translateY(-3px)}
+.item .ok{color:var(--ok);font-weight:800}
+h2.sec{font-size:12px;letter-spacing:.14em;text-transform:uppercase;margin:0 0 10px;text-align:center;color:var(--fade)}
+.ba{display:grid;grid-template-columns:1fr;gap:10px;margin-bottom:4px}
+.ba pre{margin:0}
+.ba .cap{font-size:10px;letter-spacing:.1em;color:var(--fade);margin-bottom:4px}
+pre{
+  background:var(--paper-2);border:1px solid var(--line);padding:12px;
+  font-size:11.5px;line-height:1.55;overflow:auto;white-space:pre-wrap;word-break:break-word;
+  margin:0;
+}
+code{font-family:inherit}
+.exhibit{margin:14px 0 4px;text-align:center}
+.exhibit img{
+  max-width:88%;border:6px solid #fff;outline:1px solid var(--line);
+  box-shadow:0 10px 22px -10px rgba(0,0,0,.45);transform:rotate(-1.3deg);
+}
+.exhibit .cap{font-size:10.5px;color:var(--fade);margin-top:10px;letter-spacing:.03em}
+.exhibit .cap code{font-size:9.5px}
+.totals{font-size:12.5px;line-height:1.9}
+.trow{display:flex;gap:8px;align-items:baseline}
+.trow>span:first-child{min-width:0}
+.trow .dots{flex:1;border-bottom:1px dotted var(--line);transform:translateY(-3px)}
+.trow .price{font-weight:800}
+.tfoot{display:flex;justify-content:space-between;font-weight:800;border-top:2px solid var(--ink);margin-top:8px;padding-top:8px}
+.fineprint{font-size:10.5px;color:var(--fade);margin-top:8px;line-height:1.6}
+ul.limits{margin:0;padding-left:16px;font-size:11.5px;line-height:1.75;color:var(--ink)}
+ul.limits li{margin-bottom:6px}
+.barcode{height:36px;margin:18px 0 8px;background:repeating-linear-gradient(90deg,var(--ink) 0 2px, transparent 2px 3px, var(--ink) 3px 4px, transparent 4px 7px, var(--ink) 7px 8px, transparent 8px 11px)}
+.barnum{text-align:center;font-size:10px;letter-spacing:.3em;color:var(--fade)}
+footer.shop{text-align:center;margin-top:16px;font-size:10.5px;color:var(--fade);line-height:1.8}
+footer.shop a{text-decoration-color:var(--fade)}
+@media(max-width:480px){
+  body{padding:28px 8px 56px}
+  .receipt{padding:28px 16px 20px}
+  .torn,.torn.bottom{margin-left:-16px;margin-right:-16px}
+  .stamp{top:16px;right:10px;width:70px;height:70px;font-size:7px}
+}
+</style>
+</head>
+<body>
+<div class="receipt" id="join">
+  <div class="torn" aria-hidden="true"></div>
+  <div class="stamp">UPSTREAM<br>#53997<br>NOT&nbsp;PLANNED</div>
+
+  <header class="shop">
+    <div class="name">NOTPLANNED &amp; CO.</div>
+    <div class="tag">venture 002 · localhost tooling</div>
+  </header>
+
+  <hr class="rule bold">
+
+  <div class="title">
+    <h1>preview&#8209;sidecar</h1>
+    <p>Your dev server just bound a port. This notices, opens a preview, and<br>stamps a dated screenshot receipt — without touching your agent CLI.</p>
+  </div>
+
+  <div class="meta">
+    <div>REF &nbsp;<b>github.com/anthropics/claude-code#53997</b></div>
+    <div>ITEM &nbsp;<b>Bring back local preview for agent-built apps</b></div>
+    <div>STATUS &nbsp;<b>closed · not planned</b> &nbsp;→&nbsp; <b>built anyway</b></div>
+  </div>
+
+  <hr class="rule">
+
+  <div class="cta">
+    <div class="label">✂ – – – – – join early access – – – – – ✂</div>
+    <form class="join" action="/api/signup" method="post" enctype="application/x-www-form-urlencoded">
+      <input type="hidden" name="venture" value="preview-sidecar">
+      <input class="hp" type="text" name="website" value="" tabindex="-1" autocomplete="off" aria-hidden="true">
+      <div class="field">
+        <label for="email">email</label>
+        <input id="email" type="email" name="email" required placeholder="you@localhost">
+      </div>
+      <div class="field">
+        <label for="plan">plan</label>
+        <select id="plan" name="plan" required>
+          <option value="free">Free — just the CLI</option>
+          <option value="early_access">Early Access — $7/mo, founding price</option>
+          <option value="team">Team — $29/mo, founding price</option>
+        </select>
+      </div>
+      <div class="field">
+        <label for="note">note (optional)</label>
+        <textarea id="note" name="note" placeholder="what are you previewing? vite, next, rails..."></textarea>
+      </div>
+      <button class="buy" type="submit">Join early access →</button>
+    </form>
+    <div class="thanks">✓ RECEIVED — thanks, you're on the list.<br>We'll only email you about preview-sidecar. Never shared.</div>
+  </div>
+
+  <p class="fineprint" style="text-align:center">One line on your email: used only to reach you about preview-sidecar, never sold, never shared.</p>
+
+  <hr class="rule">
+
+  <h2 class="sec">itemized</h2>
+  <div class="items">
+    <div class="item"><span>detect newly bound localhost port</span><span class="dots"></span><span class="ok">✓</span></div>
+    <div class="item"><span>auto-open preview pane (iframe)</span><span class="dots"></span><span class="ok">✓</span></div>
+    <div class="item"><span>one-click screenshot receipt</span><span class="dots"></span><span class="ok">✓</span></div>
+    <div class="item"><span>standalone CLI, zero deps</span><span class="dots"></span><span class="ok">✓</span></div>
+    <div class="item"><span>no Claude Code changes</span><span class="dots"></span><span class="ok">✓</span></div>
+  </div>
+
+  <hr class="rule">
+
+  <h2 class="sec">before / after</h2>
+  <div class="ba">
+    <div>
+      <div class="cap">BEFORE</div>
+      <pre><code>$ npm run dev
+  ready on http://localhost:5173
+(you alt-tab, guess the port,
+ open it yourself, no record
+ of what it looked like)</code></pre>
+    </div>
+    <div>
+      <div class="cap">AFTER</div>
+      <pre><code>$ npm run dev
+  ready on http://localhost:5173
+[preview-sidecar] detected
+  127.0.0.1:5173 at 17:29:17Z
+  -> preview pane opened
+  -> receipt: receipt-5173-*.png</code></pre>
+    </div>
+  </div>
+
+  <h2 class="sec" style="margin-top:16px">real run, recorded</h2>
+  <pre><code>$ python3 demo.py
+$ (throwaway dev server on 127.0.0.1:61125)
+$ python3 sidecar.py watch --ports 61125 \
+    --interval 0.3 --max-cycles 3 --no-open
+[preview-sidecar] detected 127.0.0.1:61125
+  at 2026-10-10T17:29:17Z -> preview-61125...html
+$ python3 sidecar.py screenshot --port 61125
+{
+  "url": "http://127.0.0.1:61125",
+  "bytes": 16208,
+  "sha256": "6e13265f215eb1e3..."
+}</code></pre>
+  <p class="fineprint">Full transcript: <a class="plain" href="demo.txt">demo.txt</a> · full receipt: <a class="plain" href="demo-receipt.json">demo-receipt.json</a></p>
+
+  <div class="exhibit">
+    <img src="demo-receipt.png" alt="Actual headless-Chrome screenshot of the throwaway dev server page captured by sidecar.py screenshot, reading Hello from dev server / Started by preview-sidecar demo.py">
+    <div class="cap">EXHIBIT A — real capture of <code>127.0.0.1:61125</code><br>sha256 6e13265f215e… · 2026&#8209;10&#8209;10T17:29:17Z</div>
+  </div>
+
+  <hr class="rule">
+
+  <h2 class="sec">how to use it</h2>
+  <pre><code>python3 sidecar.py watch
+python3 sidecar.py watch --ports 3000,5173
+python3 sidecar.py screenshot --port 3000</code></pre>
+  <p class="fineprint">Python 3.9+, no installs. <code>watch</code> polls a bounded port list with a plain TCP connect and opens a preview the moment one answers. <code>screenshot</code> needs a Chromium‑family browser already on the machine.</p>
+
+  <hr class="rule">
+
+  <h2 class="sec">bill of goods</h2>
+  <div class="totals">
+    <div class="trow"><span>FREE · the CLI, forever</span><span class="dots"></span><span class="price">$0</span></div>
+    <div class="trow"><span>EARLY ACCESS · hosted receipt gallery</span><span class="dots"></span><span class="price">$7/mo*</span></div>
+    <div class="trow"><span>TEAM · PR auto-receipts, shared history</span><span class="dots"></span><span class="price">$29/mo*</span></div>
+    <div class="tfoot"><span>TOTAL DUE TODAY</span><span>$0.00</span></div>
+  </div>
+  <p class="fineprint">*founding price, early access — there is no checkout yet, joining only reserves the rate. The CLI stays free no matter what you pick above.</p>
+
+  <hr class="rule">
+
+  <h2 class="sec">honest limits</h2>
+  <ul class="limits">
+    <li>Watches a bounded candidate port list (≤200 ports), not every socket on the machine — it can't see which process owns a port.</li>
+    <li>Polling means a detection delay, and a port that opens and closes between polls is missed.</li>
+    <li>A dev server's own X‑Frame‑Options/CSP can block the preview iframe; every preview page also has a plain "open in new tab" link.</li>
+    <li>Screenshots need Chrome/Chromium/Edge already installed — not bundled, and a clear error if none is found.</li>
+    <li>Loopback only. No remote tunneling, no multi‑port orchestration — one detected port gets one preview.</li>
+  </ul>
+  <p class="fineprint"><a class="plain" href="README.md">Full README →</a></p>
+
+  <div class="barcode" aria-hidden="true"></div>
+  <div class="barnum">5 3 9 9 7 · N O T · P L A N N E D</div>
+
+  <footer class="shop">
+    THANK YOU FOR YOUR VISIT<br>
+    <a class="plain" href="sidecar.py" download>download the free CLI ↓</a> ·
+    <a class="plain" href="https://github.com/anthropics/claude-code/issues/53997">upstream issue</a> ·
+    <a class="plain" href="/">notplanned</a>
+  </footer>
+
+  <div class="torn bottom" aria-hidden="true"></div>
+</div>
+<script>
+if(new URLSearchParams(location.search).get("joined")==="1"){
+  var r=document.getElementById("join");
+  if(r){r.classList.add("joined");}
+}
+</script>
+</body>
+</html>
diff --git a/ventures/preview-sidecar/site/sidecar.py b/ventures/preview-sidecar/site/sidecar.py
new file mode 100644
index 0000000..ce5654c
--- /dev/null
+++ b/ventures/preview-sidecar/site/sidecar.py
@@ -0,0 +1,276 @@
+#!/usr/bin/env python3
+"""preview-sidecar: detect a newly bound local dev-server port, open a preview
+pane for it, and capture a timestamped screenshot receipt on demand.
+
+Standalone, stdlib-only. No agent/Claude Code modification, no network calls
+beyond probing 127.0.0.1, no remote tunneling.
+"""
+import argparse
+import hashlib
+import json
+import os
+import shutil
+import socket
+import subprocess
+import sys
+import tempfile
+import time
+import webbrowser
+from datetime import datetime, timezone
+from pathlib import Path
+
+DEFAULT_PORTS = [3000, 3001, 3333, 4000, 4200, 5000, 5173, 5174, 5500,
+                 6006, 8000, 8080, 8081, 8888, 9000]
+MAX_PORTS = 200
+CHROME_CANDIDATES = [
+    "/Applications/Google Chrome.app/Contents/MacOS/Google Chrome",
+    "/Applications/Chromium.app/Contents/MacOS/Chromium",
+    "/Applications/Microsoft Edge.app/Contents/MacOS/Microsoft Edge",
+    "google-chrome", "google-chrome-stable", "chromium", "chromium-browser",
+    "microsoft-edge",
+]
+
+
+def now_iso():
+    return datetime.now(timezone.utc).strftime("%Y-%m-%dT%H:%M:%SZ")
+
+
+def now_stamp():
+    return datetime.now(timezone.utc).strftime("%Y%m%dT%H%M%SZ")
+
+
+def parse_ports(ports_arg, range_arg):
+    """Build a bounded, deduped, sorted candidate port list from CLI args."""
+    ports = set()
+    if ports_arg:
+        for chunk in ports_arg.split(","):
+            chunk = chunk.strip()
+            if not chunk:
+                continue
+            port = int(chunk)
+            if not (1 <= port <= 65535):
+                raise ValueError(f"port out of range: {port}")
+            ports.add(port)
+    if range_arg:
+        lo, _, hi = range_arg.partition("-")
+        lo, hi = int(lo), int(hi)
+        if not (1 <= lo <= hi <= 65535):
+            raise ValueError(f"bad port range: {range_arg}")
+        if hi - lo + 1 > MAX_PORTS:
+            raise ValueError(f"port range too wide (max {MAX_PORTS} ports)")
+        ports.update(range(lo, hi + 1))
+    if not ports_arg and not range_arg:
+        ports.update(DEFAULT_PORTS)
+    if len(ports) > MAX_PORTS:
+        raise ValueError(f"too many candidate ports (max {MAX_PORTS})")
+    return sorted(ports)
+
+
+def probe_port(host, port, timeout=0.3):
+    """True if a TCP connect to host:port succeeds right now."""
+    sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
+    sock.settimeout(timeout)
+    try:
+        return sock.connect_ex((host, port)) == 0
+    except OSError:
+        return False
+    finally:
+        sock.close()
+
+
+def scan_open_ports(host, ports, timeout=0.3):
+    return {port for port in ports if probe_port(host, port, timeout)}
+
+
+def diff_new(previous, current):
+    return current - previous
+
+
+def render_preview_html(host, port, detected_at):
+    url = f"http://{host}:{port}"
+    return f"""<!doctype html>
+<html><head><meta charset="utf-8">
+<title>preview-sidecar: {host}:{port}</title>
+<style>
+html,body{{margin:0;height:100%;font-family:ui-monospace,Menlo,monospace}}
+.bar{{display:flex;gap:12px;align-items:center;padding:8px 12px;background:#111;color:#eee;font-size:13px}}
+.bar a{{color:#9fd;text-decoration:none}}
+iframe{{display:block;width:100%;height:calc(100% - 37px);border:0}}
+</style></head>
+<body>
+<div class="bar">
+  <strong>preview-sidecar</strong>
+  <span>detected {host}:{port} at {detected_at}</span>
+  <a href="{url}" target="_blank" rel="noopener">open in new tab</a>
+  <span>(if the frame below is blank, the dev server set X-Frame-Options/CSP — use the link)</span>
+</div>
+<iframe src="{url}" sandbox="allow-scripts allow-same-origin allow-forms"></iframe>
+</body></html>
+"""
+
+
+def write_preview(out_dir, host, port):
+    out_dir = Path(out_dir)
+    out_dir.mkdir(parents=True, exist_ok=True)
+    detected_at = now_iso()
+    path = out_dir / f"preview-{port}-{now_stamp()}.html"
+    path.write_text(render_preview_html(host, port, detected_at))
+    return path, detected_at
+
+
+def append_event(out_dir, event):
+    out_dir = Path(out_dir)
+    out_dir.mkdir(parents=True, exist_ok=True)
+    with (out_dir / "events.jsonl").open("a") as f:
+        f.write(json.dumps(event) + "\n")
+
+
+def find_chrome(explicit=None):
+    if explicit:
+        return explicit if shutil.which(explicit) or os.path.exists(explicit) else None
+    env = os.environ.get("CHROME_PATH")
+    if env and (os.path.exists(env) or shutil.which(env)):
+        return env
+    for candidate in CHROME_CANDIDATES:
+        if os.path.exists(candidate):
+            return candidate
+        found = shutil.which(candidate)
+        if found:
+            return found
+    return None
+
+
+def cmd_watch(args):
+    host = args.host
+    ports = parse_ports(args.ports, args.port_range)
+    out_dir = Path(args.out)
+    print(f"[preview-sidecar] watching {len(ports)} candidate ports on {host} "
+          f"every {args.interval}s: {ports}")
+    seen = set()
+    cycles = 0
+    try:
+        while args.max_cycles is None or cycles < args.max_cycles:
+            current = scan_open_ports(host, ports, args.timeout)
+            for port in sorted(diff_new(seen, current)):
+                path, detected_at = write_preview(out_dir, host, port)
+                append_event(out_dir, {"event": "detected", "host": host,
+                                        "port": port, "at": detected_at,
+                                        "preview": str(path)})
+                print(f"[preview-sidecar] detected {host}:{port} at {detected_at} "
+                      f"-> {path}")
+                if not args.no_open:
+                    webbrowser.open(f"file://{path.resolve()}")
+            for port in sorted(seen - current):
+                print(f"[preview-sidecar] {host}:{port} no longer responding")
+            seen = current
+            cycles += 1
+            if args.max_cycles is None or cycles < args.max_cycles:
+                time.sleep(args.interval)
+    except KeyboardInterrupt:
+        print("[preview-sidecar] stopped")
+    return 0
+
+
+def cmd_preview(args):
+    if not probe_port(args.host, args.port, args.timeout):
+        print(f"[preview-sidecar] nothing answered {args.host}:{args.port}", file=sys.stderr)
+        return 1
+    path, detected_at = write_preview(args.out, args.host, args.port)
+    print(f"[preview-sidecar] preview for {args.host}:{args.port} -> {path}")
+    if not args.no_open:
+        webbrowser.open(f"file://{path.resolve()}")
+    return 0
+
+
+def make_receipt(host, port, out_dir, chrome_path, timeout):
+    if not probe_port(host, port, 0.5):
+        raise RuntimeError(f"nothing answered {host}:{port}")
+    chrome = find_chrome(chrome_path)
+    if not chrome:
+        raise RuntimeError(
+            "no Chromium-family browser found; pass --chrome or set CHROME_PATH")
+    out_dir = Path(out_dir)
+    out_dir.mkdir(parents=True, exist_ok=True)
+    stamp = now_stamp()
+    png_path = out_dir / f"receipt-{port}-{stamp}.png"
+    url = f"http://{host}:{port}"
+    argv = [chrome, "--headless=new", "--disable-gpu", "--hide-scrollbars",
+            "--window-size=1280,900", f"--screenshot={png_path}", url]
+    result = subprocess.run(argv, capture_output=True, text=True, timeout=timeout)
+    if result.returncode != 0 or not png_path.exists():
+        raise RuntimeError(
+            f"screenshot failed (exit {result.returncode}): {result.stderr.strip()[:400]}")
+    data = png_path.read_bytes()
+    if len(data) == 0:
+        raise RuntimeError("screenshot produced an empty file")
+    receipt = {
+        "url": url,
+        "host": host,
+        "port": port,
+        "captured_at": now_iso(),
+        "chrome": chrome,
+        "png": str(png_path),
+        "sha256": hashlib.sha256(data).hexdigest(),
+        "bytes": len(data),
+    }
+    json_path = out_dir / f"receipt-{port}-{stamp}.json"
+    json_path.write_text(json.dumps(receipt, indent=2) + "\n")
+    receipt["json"] = str(json_path)
+    return receipt
+
+
+def cmd_screenshot(args):
+    try:
+        receipt = make_receipt(args.host, args.port, args.out, args.chrome, args.timeout)
+    except RuntimeError as exc:
+        print(f"[preview-sidecar] {exc}", file=sys.stderr)
+        return 1
+    print(json.dumps(receipt, indent=2))
+    return 0
+
+
+def build_parser():
+    p = argparse.ArgumentParser(prog="sidecar.py", description=__doc__)
+    sub = p.add_subparsers(dest="command", required=True)
+
+    watch = sub.add_parser("watch", help="poll for newly bound local ports and auto-preview them")
+    watch.add_argument("--host", default="127.0.0.1")
+    watch.add_argument("--ports", default=None, help="comma-separated port list")
+    watch.add_argument("--port-range", default=None, help="e.g. 3000-3010")
+    watch.add_argument("--interval", type=float, default=2.0)
+    watch.add_argument("--timeout", type=float, default=0.3)
+    watch.add_argument("--max-cycles", type=int, default=None, help="stop after N poll cycles (default: run until Ctrl+C)")
+    watch.add_argument("--out", default=str(Path(tempfile.gettempdir()) / "preview-sidecar"))
+    watch.add_argument("--no-open", action="store_true", help="don't launch a browser tab")
+    watch.set_defaults(func=cmd_watch)
+
+    preview = sub.add_parser("preview", help="manually open a preview pane for one port right now")
+    preview.add_argument("--host", default="127.0.0.1")
+    preview.add_argument("--port", type=int, required=True)
+    preview.add_argument("--timeout", type=float, default=0.3)
+    preview.add_argument("--out", default=str(Path(tempfile.gettempdir()) / "preview-sidecar"))
+    preview.add_argument("--no-open", action="store_true")
+    preview.set_defaults(func=cmd_preview)
+
+    screenshot = sub.add_parser("screenshot", help="capture a timestamped screenshot receipt of one port")
+    screenshot.add_argument("--host", default="127.0.0.1")
+    screenshot.add_argument("--port", type=int, required=True)
+    screenshot.add_argument("--out", default=str(Path(tempfile.gettempdir()) / "preview-sidecar"))
+    screenshot.add_argument("--chrome", default=None, help="path to a Chromium-family browser binary")
+    screenshot.add_argument("--timeout", type=float, default=20.0)
+    screenshot.set_defaults(func=cmd_screenshot)
+
+    return p
+
+
+def main(argv=None):
+    args = build_parser().parse_args(argv)
+    try:
+        return args.func(args)
+    except ValueError as exc:
+        print(f"[preview-sidecar] {exc}", file=sys.stderr)
+        return 2
+
+
+if __name__ == "__main__":
+    sys.exit(main())
diff --git a/ventures/preview-sidecar/test_sidecar.py b/ventures/preview-sidecar/test_sidecar.py
new file mode 100644
index 0000000..0b77b95
--- /dev/null
+++ b/ventures/preview-sidecar/test_sidecar.py
@@ -0,0 +1,113 @@
+#!/usr/bin/env python3
+import socket
+import tempfile
+import unittest
+from pathlib import Path
+from unittest import mock
+
+import sidecar
+
+
+class ParsePorts(unittest.TestCase):
+    def test_default_when_nothing_given(self):
+        self.assertEqual(sidecar.parse_ports(None, None), sorted(sidecar.DEFAULT_PORTS))
+
+    def test_explicit_list(self):
+        self.assertEqual(sidecar.parse_ports("3000,3000,5173", None), [3000, 5173])
+
+    def test_range(self):
+        self.assertEqual(sidecar.parse_ports(None, "3000-3003"), [3000, 3001, 3002, 3003])
+
+    def test_range_too_wide_rejected(self):
+        with self.assertRaises(ValueError):
+            sidecar.parse_ports(None, f"1-{sidecar.MAX_PORTS + 50}")
+
+    def test_bad_port_rejected(self):
+        with self.assertRaises(ValueError):
+            sidecar.parse_ports("70000", None)
+
+
+class ProbeAndDiff(unittest.TestCase):
+    def test_probe_detects_a_real_listener(self):
+        srv = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
+        srv.bind(("127.0.0.1", 0))
+        srv.listen(1)
+        port = srv.getsockname()[1]
+        try:
+            self.assertTrue(sidecar.probe_port("127.0.0.1", port))
+        finally:
+            srv.close()
+
+    def test_probe_false_for_closed_port(self):
+        srv = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
+        srv.bind(("127.0.0.1", 0))
+        port = srv.getsockname()[1]
+        srv.close()
+        self.assertFalse(sidecar.probe_port("127.0.0.1", port, timeout=0.2))
+
+    def test_diff_new_only_reports_additions(self):
+        self.assertEqual(sidecar.diff_new({3000}, {3000, 5173}), {5173})
+        self.assertEqual(sidecar.diff_new({3000, 5173}, {5173}), set())
+
+
+class PreviewHtml(unittest.TestCase):
+    def test_render_contains_iframe_and_url(self):
+        html = sidecar.render_preview_html("127.0.0.1", 5173, "2026-01-01T00:00:00Z")
+        self.assertIn("http://127.0.0.1:5173", html)
+        self.assertIn("<iframe", html)
+        self.assertIn("open in new tab", html)
+
+    def test_write_preview_creates_file(self):
+        with tempfile.TemporaryDirectory() as tmp:
+            path, detected_at = sidecar.write_preview(tmp, "127.0.0.1", 4200)
+            self.assertTrue(path.exists())
+            self.assertIn("4200", path.name)
+            self.assertIn("http://127.0.0.1:4200", path.read_text())
+            self.assertRegex(detected_at, r"^\d{4}-\d{2}-\d{2}T")
+
+
+class FindChrome(unittest.TestCase):
+    def test_explicit_path_wins_when_present(self):
+        with tempfile.TemporaryDirectory() as tmp:
+            fake = Path(tmp) / "chrome-bin"
+            fake.write_text("")
+            self.assertEqual(sidecar.find_chrome(str(fake)), str(fake))
+
+    def test_explicit_missing_path_returns_none(self):
+        self.assertIsNone(sidecar.find_chrome("/definitely/not/a/real/chrome/binary"))
+
+    def test_env_var_used_when_set(self):
+        with tempfile.TemporaryDirectory() as tmp:
+            fake = Path(tmp) / "chrome-env"
+            fake.write_text("")
+            with mock.patch.dict("os.environ", {"CHROME_PATH": str(fake)}):
+                self.assertEqual(sidecar.find_chrome(), str(fake))
+
+    def test_none_when_nothing_found(self):
+        with mock.patch.object(sidecar, "CHROME_CANDIDATES", ["/nope/not/here"]), \
+             mock.patch.dict("os.environ", {}, clear=True):
+            self.assertIsNone(sidecar.find_chrome())
+
+
+class MakeReceiptErrors(unittest.TestCase):
+    def test_raises_when_port_not_open(self):
+        with tempfile.TemporaryDirectory() as tmp:
+            with self.assertRaises(RuntimeError):
+                sidecar.make_receipt("127.0.0.1", 1, tmp, None, 5)
+
+    def test_raises_when_no_chrome_found(self):
+        srv = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
+        srv.bind(("127.0.0.1", 0))
+        srv.listen(1)
+        port = srv.getsockname()[1]
+        try:
+            with tempfile.TemporaryDirectory() as tmp:
+                with mock.patch.object(sidecar, "find_chrome", return_value=None):
+                    with self.assertRaises(RuntimeError):
+                        sidecar.make_receipt("127.0.0.1", port, tmp, None, 5)
+        finally:
+            srv.close()
+
+
+if __name__ == "__main__":
+    unittest.main()