diff --git a/.gitignore b/.gitignore
index 5beee0c9..ecd95f9c 100755
--- a/.gitignore
+++ b/.gitignore
@@ -39,8 +39,5 @@ CLAUDE.md
 
 !.trunk/configs
 
-# minified files
-**/*.min.*
-
 # generated CLI commands
-cmd/cli/generated_commands.go
\ No newline at end of file
+cmd/cli/generated_commands.go
diff --git a/goutils b/goutils
index a0d979d1..586f5c38 160000
--- a/goutils
+++ b/goutils
@@ -1 +1 @@
-Subproject commit a0d979d1386cdec85baa8e47c192da21babdabaa
+Subproject commit 586f5c382e67ec362d2eae05d14abdd445ad2a54
diff --git a/internal/auth/block_page.min.html b/internal/auth/block_page.min.html
new file mode 100644
index 00000000..fa3b4ced
--- /dev/null
+++ b/internal/auth/block_page.min.html
@@ -0,0 +1,225 @@
+<!doctype html>
+<html lang="en">
+  <meta charset="UTF-8" /><meta
+    name="viewport"
+    content="width=device-width,initial-scale=1.0"
+  /><title>Access Denied</title
+  ><meta name="color-scheme" content="dark" /><style>
+    :root {
+      color-scheme: dark;
+      --bg0: #070a12;
+      --bg1: #0b1020;
+      --card: #ffffff0e;
+      --card2: #ffffff0d;
+      --text: #ffffffeb;
+      --muted: #ffffffad;
+      --border: #ffffff1f;
+      --borderSoft: #ffffff14;
+      --borderStrong: #ffffff24;
+      --borderHover: #ffffff38;
+      --shadow: 0 22px 60px #0000008c;
+      --shadowCard: 0 22px 60px #00000094;
+      --shadowButton: 0 12px 28px #00000059;
+      --insetHighlight: inset 0 1px 0 #ffffff0a;
+      --ring: #78a0d26b;
+      --accent0: #7aa3c8;
+      --accent1: #9a8bc7;
+      --btn: #ffffff0f;
+      --btnHover: #ffffff14;
+    }
+    * {
+      box-sizing: border-box;
+    }
+    html,
+    body {
+      height: 100%;
+    }
+    body {
+      color: var(--text);
+      background-color: var(--bg1);
+      background-image: none;
+      margin: 0;
+      font-family:
+        ui-sans-serif,
+        system-ui,
+        -apple-system,
+        Segoe UI,
+        Roboto,
+        Helvetica,
+        Arial,
+        Apple Color Emoji,
+        Segoe UI Emoji;
+    }
+    .wrap {
+      place-items: center;
+      min-height: 100%;
+      padding: 28px 16px;
+      display: grid;
+    }
+    .card {
+      background: var(--card);
+      border: 1px solid var(--border);
+      width: min(720px, 100%);
+      box-shadow: var(--shadowCard), var(--insetHighlight);
+      border-radius: 16px;
+      overflow: hidden;
+    }
+    .topbar {
+      border-bottom: 1px solid var(--borderSoft);
+      background: var(--card2);
+      align-items: center;
+      gap: 12px;
+      padding: 18px 18px 12px;
+      display: flex;
+    }
+    .badge {
+      border: 1px solid var(--borderStrong);
+      background: var(--card2);
+      border-radius: 12px;
+      place-items: center;
+      width: 38px;
+      height: 38px;
+      display: grid;
+    }
+    .badge svg {
+      opacity: 0.95;
+    }
+    .badge .bang {
+      color: #ffffffe6;
+      font-size: 22px;
+      font-weight: 700;
+      line-height: 1;
+      transform: translateY(-1px);
+    }
+    h1 {
+      letter-spacing: 0.2px;
+      margin: 0;
+      font-size: 18px;
+      line-height: 1.25;
+    }
+    .sub {
+      color: var(--muted);
+      margin: 2px 0 0;
+      font-size: 13px;
+    }
+    .content {
+      padding: 18px;
+    }
+    .error {
+      color: #fffc;
+      white-space: pre-wrap;
+      word-break: break-word;
+      text-transform: capitalize;
+      background: #00000040;
+      border: 1px solid #ffffff1a;
+      border-radius: 12px;
+      margin: 0;
+      padding: 14px;
+      font-family:
+        ui-monospace,
+        SFMono-Regular,
+        Menlo,
+        Monaco,
+        Consolas,
+        Liberation Mono,
+        Courier New,
+        monospace;
+      font-size: 13px;
+      line-height: 1.55;
+    }
+    .actions {
+      flex-wrap: wrap;
+      align-items: center;
+      gap: 10px;
+      margin-top: 14px;
+      display: flex;
+    }
+    a.button {
+      color: #ffffffeb;
+      border: 1px solid var(--borderStrong);
+      background: var(--btn);
+      box-shadow: var(--shadowButton);
+      border-radius: 10px;
+      justify-content: center;
+      align-items: center;
+      gap: 8px;
+      padding: 8px 12px;
+      font-size: 14px;
+      text-decoration: none;
+      transition:
+        transform 0.12s,
+        border-color 0.12s,
+        background 0.12s,
+        box-shadow 0.12s;
+      display: inline-flex;
+    }
+    a.button:hover {
+      border-color: var(--borderHover);
+      background: var(--btnHover);
+      transform: translateY(-1px);
+    }
+    a.button:focus-visible {
+      box-shadow:
+        0 0 0 3px var(--ring),
+        var(--shadowButton);
+      outline: 0;
+    }
+    .hint {
+      color: var(--muted);
+      font-size: 12px;
+      line-height: 1.4;
+    }
+    .hint kbd {
+      border: 1px solid var(--borderStrong);
+      background: var(--btn);
+      color: #ffffffdb;
+      border-radius: 6px;
+      padding: 2px 4px;
+      font-family:
+        ui-monospace,
+        SFMono-Regular,
+        Menlo,
+        Monaco,
+        Consolas,
+        Liberation Mono,
+        Courier New,
+        monospace;
+      font-size: 11px;
+    }
+    kbd {
+      font-weight: 500;
+    }
+    .kbd-container {
+      align-items: center;
+      gap: 2px;
+      display: inline-flex;
+    }
+  </style>
+  <div class="wrap">
+    <main class="card" role="main" aria-labelledby="title">
+      <header class="topbar">
+        <div class="badge" aria-hidden="true"><span class="bang">!</span></div>
+        <div>
+          <h1 id="title">{{.StatusText}}</h1>
+          <p class="sub">You don’t have permission to access this resource.</p>
+        </div>
+      </header>
+      <section class="content">
+        <pre class="error">{{.Error}}</pre>
+        <div class="actions">
+          <a class="button" href="{{.ActionURL}}"
+            ><span>{{.ActionText}}</span><span aria-hidden="true">→</span></a
+          >
+          <div class="hint">
+            If you just signed in, try refreshing the page.<span
+              aria-hidden="true"
+            ></span>
+            <div class="kbd-container">
+              <kbd>Ctrl</kbd><span>+</span><kbd>R</kbd>
+            </div>
+          </div>
+        </div>
+      </section>
+    </main>
+  </div>
+</html>
diff --git a/internal/idlewatcher/html/loading.min.js b/internal/idlewatcher/html/loading.min.js
new file mode 100644
index 00000000..4a624ff8
--- /dev/null
+++ b/internal/idlewatcher/html/loading.min.js
@@ -0,0 +1,249 @@
+function asyncGeneratorStep(gen, resolve, reject, _next, _throw, key, arg) {
+  try {
+    var info = gen[key](arg);
+    var value = info.value;
+  } catch (error) {
+    reject(error);
+    return;
+  }
+  if (info.done) {
+    resolve(value);
+  } else {
+    Promise.resolve(value).then(_next, _throw);
+  }
+}
+function _async_to_generator(fn) {
+  return function () {
+    var self = this,
+      args = arguments;
+    return new Promise(function (resolve, reject) {
+      var gen = fn.apply(self, args);
+      function _next(value) {
+        asyncGeneratorStep(gen, resolve, reject, _next, _throw, "next", value);
+      }
+      function _throw(err) {
+        asyncGeneratorStep(gen, resolve, reject, _next, _throw, "throw", err);
+      }
+      _next(undefined);
+    });
+  };
+}
+function _ts_generator(thisArg, body) {
+  var f,
+    y,
+    t,
+    _ = {
+      label: 0,
+      sent: function () {
+        if (t[0] & 1) throw t[1];
+        return t[1];
+      },
+      trys: [],
+      ops: [],
+    },
+    g = Object.create(
+      (typeof Iterator === "function" ? Iterator : Object).prototype,
+    ),
+    d = Object.defineProperty;
+  return (
+    d(g, "next", { value: verb(0) }),
+    d(g, "throw", { value: verb(1) }),
+    d(g, "return", { value: verb(2) }),
+    typeof Symbol === "function" &&
+      d(g, Symbol.iterator, {
+        value: function () {
+          return this;
+        },
+      }),
+    g
+  );
+  function verb(n) {
+    return function (v) {
+      return step([n, v]);
+    };
+  }
+  function step(op) {
+    if (f) throw new TypeError("Generator is already executing.");
+    while ((g && ((g = 0), op[0] && (_ = 0)), _))
+      try {
+        if (
+          ((f = 1),
+          y &&
+            (t =
+              op[0] & 2
+                ? y["return"]
+                : op[0]
+                  ? y["throw"] || ((t = y["return"]) && t.call(y), 0)
+                  : y.next) &&
+            !(t = t.call(y, op[1])).done)
+        )
+          return t;
+        if (((y = 0), t)) op = [op[0] & 2, t.value];
+        switch (op[0]) {
+          case 0:
+          case 1:
+            t = op;
+            break;
+          case 4:
+            _.label++;
+            return { value: op[1], done: false };
+          case 5:
+            _.label++;
+            y = op[1];
+            op = [0];
+            continue;
+          case 7:
+            op = _.ops.pop();
+            _.trys.pop();
+            continue;
+          default:
+            if (
+              !((t = _.trys), (t = t.length > 0 && t[t.length - 1])) &&
+              (op[0] === 6 || op[0] === 2)
+            ) {
+              _ = 0;
+              continue;
+            }
+            if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) {
+              _.label = op[1];
+              break;
+            }
+            if (op[0] === 6 && _.label < t[1]) {
+              _.label = t[1];
+              t = op;
+              break;
+            }
+            if (t && _.label < t[2]) {
+              _.label = t[2];
+              _.ops.push(op);
+              break;
+            }
+            if (t[2]) _.ops.pop();
+            _.trys.pop();
+            continue;
+        }
+        op = body.call(thisArg, _);
+      } catch (e) {
+        op = [6, e];
+        y = 0;
+      } finally {
+        f = t = 0;
+      }
+    if (op[0] & 5) throw op[1];
+    return { value: op[0] ? op[1] : void 0, done: true };
+  }
+}
+var ready = false;
+window.onload = function () {
+  return _async_to_generator(function () {
+    var consoleEl, loadingDotsEl, eventSource;
+    function formatTimestamp(timestamp) {
+      var date = new Date(timestamp);
+      return date.toLocaleTimeString("en-US", {
+        hour12: false,
+        hour: "2-digit",
+        minute: "2-digit",
+        second: "2-digit",
+        fractionalSecondDigits: 3,
+      });
+    }
+    function addConsoleLine(type, message, timestamp, level) {
+      var validLevels = ["debug", "info", "warn", "error"];
+      var lvl = validLevels.includes(level)
+        ? level
+        : type === "error"
+          ? "error"
+          : "info";
+      var line = document.createElement("div");
+      line.className = "console-line ".concat(type, " level-").concat(lvl);
+      var timestampEl = document.createElement("span");
+      timestampEl.className = "console-timestamp";
+      timestampEl.textContent = formatTimestamp(timestamp);
+      var messageEl = document.createElement("span");
+      messageEl.className = "console-message";
+      messageEl.textContent = message;
+      line.appendChild(timestampEl);
+      line.appendChild(messageEl);
+      consoleEl.appendChild(line);
+      consoleEl.scrollTop = consoleEl.scrollHeight;
+    }
+    return _ts_generator(this, function (_state) {
+      consoleEl = document.getElementById("console");
+      loadingDotsEl = document.getElementById("loading-dots");
+      if (!consoleEl || !loadingDotsEl) {
+        console.error("Required DOM elements not found");
+        return [2];
+      }
+      if (typeof wakeEventsPath === "undefined" || !wakeEventsPath) {
+        addConsoleLine(
+          "error",
+          "Configuration error: wakeEventsPath not defined",
+          new Date().toISOString(),
+        );
+        loadingDotsEl.style.display = "none";
+        return [2];
+      }
+      if (typeof EventSource === "undefined") {
+        addConsoleLine(
+          "error",
+          "Browser does not support Server-Sent Events",
+          new Date().toISOString(),
+        );
+        loadingDotsEl.style.display = "none";
+        return [2];
+      }
+      eventSource = new EventSource(wakeEventsPath);
+      eventSource.onmessage = function (event) {
+        var evt;
+        try {
+          evt = JSON.parse(event.data);
+        } catch (unused) {
+          addConsoleLine(
+            "error",
+            "Invalid event data: ".concat(event.data),
+            new Date().toISOString(),
+          );
+          return;
+        }
+        var payload = evt.data || {};
+        var type = evt.action;
+        var timestamp = evt.timestamp;
+        if (type === "ready") {
+          ready = true;
+          loadingDotsEl.style.display = "none";
+          addConsoleLine(
+            type,
+            "Container is ready, refreshing...",
+            timestamp,
+            evt.level,
+          );
+          setTimeout(function () {
+            window.location.reload();
+          }, 200);
+        } else if (type === "error" || evt.level === "error") {
+          var errorMessage =
+            payload.error || payload.message || "Unknown error";
+          addConsoleLine(type, errorMessage, timestamp, evt.level);
+          loadingDotsEl.style.display = "none";
+          eventSource.close();
+        } else {
+          var message = payload.message || "";
+          addConsoleLine(type, message, timestamp, evt.level);
+        }
+      };
+      eventSource.onerror = function () {
+        if (ready) {
+          return;
+        }
+        addConsoleLine(
+          "error",
+          "Connection lost. Please refresh the page.",
+          new Date().toISOString(),
+        );
+        loadingDotsEl.style.display = "none";
+        eventSource.close();
+      };
+      return [2];
+    });
+  })();
+};
diff --git a/internal/idlewatcher/html/loading_page.min.html b/internal/idlewatcher/html/loading_page.min.html
new file mode 100644
index 00000000..78f5df93
--- /dev/null
+++ b/internal/idlewatcher/html/loading_page.min.html
@@ -0,0 +1,26 @@
+<!doctype html>
+<html lang="en">
+  <meta charset="UTF-8" /><meta
+    name="viewport"
+    content="width=device-width,initial-scale=1.0"
+  /><meta name="color-scheme" content="light dark" /><title>{{.Title}}</title
+  ><link rel="stylesheet" href="{{.LoadingPageCSSPath}}" /><link
+    rel="icon"
+    href="{{.FavIconPath}}"
+  />
+  <body>
+    <script>
+      const wakeEventsPath = "{{.WakeEventsPath}}";
+    </script>
+    <script src="{{.LoadingPageJSPath}}" defer></script>
+    <div class="container">
+      <img class="logo" src="{{.FavIconPath}}" alt="" />
+      <div id="loading-dots" class="loading-dots" aria-hidden="true">
+        <div class="dot"></div>
+        <div class="dot"></div>
+        <div class="dot"></div>
+      </div>
+      <div id="console" class="console"></div>
+    </div>
+  </body>
+</html>
diff --git a/internal/net/gphttp/middleware/captcha/captcha.min.html b/internal/net/gphttp/middleware/captcha/captcha.min.html
new file mode 100644
index 00000000..c99819a4
--- /dev/null
+++ b/internal/net/gphttp/middleware/captcha/captcha.min.html
@@ -0,0 +1,260 @@
+<!doctype html>
+<html lang="en">
+  <meta charset="UTF-8" /><meta
+    name="viewport"
+    content="width=device-width,initial-scale=1.0"
+  /><title>Verification Required</title
+  >{{.ScriptHTML}}
+  <script>
+    function updateTheme() {
+      let e = window.matchMedia("(prefers-color-scheme: dark)").matches
+        ? "dark"
+        : "light";
+      document
+        .querySelector("#verification-form > :first-child")
+        .setAttribute("data-theme", e);
+    }
+    window.addEventListener("load", updateTheme);
+  </script>
+  <style>
+    :root {
+      --background-light: #f8f9fa;
+      --text-light: #2d3748;
+      --container-bg-light: #fff;
+      --shadow-light: #00000014;
+      --heading-light: #3d4852;
+      --button-bg-light: #4f46e5;
+      --button-hover-light: #4338ca;
+      --button-disabled-bg-light: #e9ecef;
+      --button-disabled-text-light: #a0aec0;
+      --accent-light: #6366f1;
+      --background-dark: #111827;
+      --text-dark: #e5e7eb;
+      --container-bg-dark: #1f2937;
+      --shadow-dark: #0000004d;
+      --heading-dark: #f3f4f6;
+      --button-bg-dark: #6366f1;
+      --button-hover-dark: #4f46e5;
+      --button-disabled-bg-dark: #374151;
+      --button-disabled-text-dark: #9ca3af;
+      --accent-dark: #818cf8;
+    }
+    @media (prefers-color-scheme: light) {
+      body {
+        background: linear-gradient(135deg, var(--background-light), #f0f4f8);
+        color: var(--text-light);
+      }
+      .container {
+        background-color: var(--container-bg-light);
+        box-shadow: 0 10px 25px var(--shadow-light);
+        border: 1px solid #0000000a;
+      }
+      h1 {
+        color: var(--heading-light);
+      }
+      button {
+        background: linear-gradient(
+          to right,
+          var(--button-bg-light),
+          var(--accent-light)
+        );
+      }
+      button:hover:not(:disabled) {
+        background: linear-gradient(
+          to right,
+          var(--button-hover-light),
+          var(--button-bg-light)
+        );
+      }
+      button:disabled {
+        background: var(--button-disabled-bg-light);
+        color: var(--button-disabled-text-light);
+      }
+      .container:before {
+        background: linear-gradient(135deg, #6366f11a, #4f46e50d);
+      }
+    }
+    @media (prefers-color-scheme: dark) {
+      body {
+        background: linear-gradient(135deg, var(--background-dark), #0f172a);
+        color: var(--text-dark);
+      }
+      .container {
+        background-color: var(--container-bg-dark);
+        box-shadow: 0 10px 25px var(--shadow-dark);
+        border: 1px solid #ffffff0d;
+      }
+      h1 {
+        color: var(--heading-dark);
+      }
+      button {
+        background: linear-gradient(
+          to right,
+          var(--button-bg-dark),
+          var(--accent-dark)
+        );
+      }
+      button:hover:not(:disabled) {
+        background: linear-gradient(
+          to right,
+          var(--button-hover-dark),
+          var(--button-bg-dark)
+        );
+      }
+      button:disabled {
+        background: var(--button-disabled-bg-dark);
+        color: var(--button-disabled-text-dark);
+      }
+      .container:before {
+        background: linear-gradient(135deg, #6366f11a, #818cf80d);
+      }
+    }
+    body {
+      justify-content: center;
+      align-items: center;
+      min-height: 100vh;
+      margin: 0;
+      font-family:
+        Inter,
+        system-ui,
+        -apple-system,
+        BlinkMacSystemFont,
+        Segoe UI,
+        Roboto,
+        Oxygen,
+        Ubuntu,
+        Cantarell,
+        Open Sans,
+        Helvetica Neue,
+        sans-serif;
+      line-height: 1.6;
+      transition:
+        background-color 0.5s,
+        color 0.3s;
+      display: flex;
+    }
+    .container {
+      text-align: center;
+      border-radius: 16px;
+      width: 90%;
+      max-width: 420px;
+      padding: 48px 42px;
+      transition:
+        background-color 0.3s,
+        box-shadow 0.3s,
+        transform 0.3s;
+      animation: 0.5s ease-out fadeIn;
+      position: relative;
+      overflow: hidden;
+    }
+    .container:before {
+      content: "";
+      opacity: 0.5;
+      z-index: 0;
+      border-radius: 30%;
+      width: 120%;
+      height: 120%;
+      position: absolute;
+      top: -10%;
+      left: -10%;
+      transform: rotate(-8deg);
+    }
+    .content {
+      z-index: 1;
+      position: relative;
+    }
+    h1 {
+      letter-spacing: -0.02em;
+      margin-bottom: 28px;
+      font-size: 1.75em;
+      font-weight: 700;
+      transition: color 0.3s;
+    }
+    button {
+      color: #fff;
+      cursor: pointer;
+      letter-spacing: 0.01em;
+      border: none;
+      border-radius: 10px;
+      padding: 13px 30px;
+      font-size: 1rem;
+      font-weight: 600;
+      transition:
+        all 0.25s,
+        transform 0.15s;
+      position: relative;
+      overflow: hidden;
+      box-shadow: 0 4px 12px #00000026;
+    }
+    button:hover:not(:disabled) {
+      transform: translateY(-2px);
+      box-shadow: 0 6px 15px #0003;
+    }
+    button:active:not(:disabled) {
+      transform: translateY(0);
+      box-shadow: 0 2px 8px #00000026;
+    }
+    button:focus {
+      outline: none;
+      box-shadow:
+        0 0 0 2px #6366f180,
+        0 4px 12px #00000026;
+    }
+    button:disabled {
+      cursor: not-allowed;
+      box-shadow: none;
+    }
+    #verification-form {
+      z-index: 1;
+      flex-direction: column;
+      align-items: center;
+      gap: 22px;
+      margin-top: 30px;
+      display: flex;
+      position: relative;
+    }
+    #verification-form > :first-child {
+      margin-left: auto;
+      margin-right: auto;
+    }
+    @keyframes fadeIn {
+      0% {
+        opacity: 0;
+        transform: translateY(10px);
+      }
+      to {
+        opacity: 1;
+        transform: translateY(0);
+      }
+    }
+    .description {
+      color: var(--text-light);
+      opacity: 0.85;
+      max-width: 90%;
+      margin-bottom: 20px;
+      margin-left: auto;
+      margin-right: auto;
+      font-size: 0.95rem;
+    }
+    @media (prefers-color-scheme: dark) {
+      .description {
+        color: var(--text-dark);
+        opacity: 0.75;
+      }
+    }
+  </style>
+  <script>
+    function onDataCallback() {
+      document.getElementById("verification-form").submit();
+    }
+  </script>
+  <div class="container">
+    <div class="content">
+      <h1>Human Verification</h1>
+      <p class="description">
+        Please complete the verification below to continue.
+      </p>
+      <form id="verification-form" method="POST" action="">{{.FormHTML}}</form>
+    </div>
+  </div>
+</html>
