Open your shelf.

This static prototype keeps the same login shape as the standalone ToyBin build. The real version will post to a server-backed auth flow with sessions, CSRF protection, rate limits, and optional hCaptcha.