diff --git a/CHANGELOG.md b/CHANGELOG.md
index 282eca1..2d32f9a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,45 @@ All notable changes to Checkgate are documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/).
 
+## [0.1.19] - 2026-07-05
+
+### Changed
+
+- **Dashboard layout overhaul** — the sidebar can now be collapsed to an icon-only rail (persisted
+  across sessions via `localStorage`), reclaiming space on smaller screens. Every list/table page
+  (Dashboard, Feature Flags, Environments, Compare, Change Requests, Projects, Users, Audit Log,
+  Impressions, SDK Health, Scheduled, Webhooks) is now genuinely full width instead of capped at an
+  arbitrary max-width with dead space on either side.
+- **Flag Editor and Settings restructured into two columns** — behavior/configuration (flag type,
+  rollout, targeting rules; SDK snippets, personal access tokens) in a wider main column, with
+  identity/metadata (key, tags, ownership, prerequisites; auth info, API endpoint, account) in a
+  narrower sidebar. Previously everything was stacked in a single column, requiring far more
+  scrolling and leaving most of the screen empty on anything wider than a laptop.
+- **Setup and Login pages** now fill the browser window edge to edge (previously framed/centered
+  with growing dead space in the middle on wide monitors, then over-corrected to a narrow centered
+  card — this settles on genuinely full-width panels with wider inner content blocks). The Setup
+  welcome screen's headline now wraps to two lines instead of three, and gained an "Already set up?
+  Sign in" link for anyone who lands there after setup is already complete.
+- `ProjectSettings` now supports deep-linking to a specific tab via `?tab=keys` (etc.), so other
+  pages can link straight to e.g. SDK Keys instead of dropping the user on the default tab.
+
+### Fixed
+
+- **Setup/login redirect loop** — `/api/auth/me` 401s for anyone without a valid session cookie,
+  which the frontend was also using to determine "has setup been completed?" A fresh browser, a
+  different device, or a session that expired after a server restart would incorrectly conclude
+  setup had never been done and permanently redirect to `/setup` instead of `/login`, with no way
+  back. Fixed by checking the public `/api/auth/workspace` endpoint (now also returns
+  `is_setup_complete`) instead, and by fixing a related race where the redirect decision fired on a
+  stale guess before that check even resolved.
+- **Dead "SDK Keys" link on the Settings page** — pointed to `/settings` (itself) instead of the
+  actual key-management page. Now links to `/projects/{id}?tab=keys` and lands directly on the SDK
+  Keys tab.
+- **React Native SDK packaging** — `sdks/react-native/android/.gradle/` (a local Gradle build cache,
+  accidentally committed) was being swept into the published npm tarball via the `files` field
+  covering the whole `android/` directory. Untracked and gitignored; harmless to existing consumers,
+  just junk that shouldn't have shipped.
+
 ## [0.1.18] - 2026-07-04
 
 ### Added
diff --git a/Cargo.lock b/Cargo.lock
index c00f53d..39a02fa 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -246,7 +246,7 @@ dependencies = [
 
 [[package]]
 name = "browser"
-version = "0.1.18"
+version = "0.1.19"
 dependencies = [
  "checkgate-core",
  "console_error_panic_hook",
@@ -310,7 +310,7 @@ dependencies = [
 
 [[package]]
 name = "checkgate-core"
-version = "0.1.18"
+version = "0.1.19"
 dependencies = [
  "dashmap",
  "murmur3",
@@ -638,7 +638,7 @@ dependencies = [
 
 [[package]]
 name = "flutter"
-version = "0.1.18"
+version = "0.1.19"
 dependencies = [
  "checkgate-core",
  "serde_json",
@@ -1414,7 +1414,7 @@ dependencies = [
 
 [[package]]
 name = "nodejs"
-version = "0.1.18"
+version = "0.1.19"
 dependencies = [
  "checkgate-core",
  "napi",
@@ -1850,7 +1850,7 @@ dependencies = [
 
 [[package]]
 name = "react-native"
-version = "0.1.18"
+version = "0.1.19"
 dependencies = [
  "checkgate-core",
  "serde_json",
@@ -2132,7 +2132,7 @@ dependencies = [
 
 [[package]]
 name = "server"
-version = "0.1.18"
+version = "0.1.19"
 dependencies = [
  "argon2",
  "async-stream",
diff --git a/Cargo.toml b/Cargo.toml
index a791d57..5a00c83 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -10,4 +10,4 @@ members = [
 resolver = "2"
 
 [workspace.package]
-version = "0.1.18"
+version = "0.1.19"
diff --git a/README.md b/README.md
index 65e9d2c..49bf46d 100644
--- a/README.md
+++ b/README.md
@@ -61,6 +61,10 @@ It is proudly built in Rust and ships with native SDKs for Node.js (NAPI), brows
 
 ![Environments](assets/screenshots/07-environments.png)
 
+**Collapsible sidebar** — reclaim screen space on data-dense pages; the whole dashboard is full-width by default.
+
+![Collapsed sidebar](assets/screenshots/08-sidebar-collapsed.png)
+
 ---
 
 ## Documentation
diff --git a/assets/screenshots/01-dashboard.png b/assets/screenshots/01-dashboard.png
index 60e7481..70aa505 100644
Binary files a/assets/screenshots/01-dashboard.png and b/assets/screenshots/01-dashboard.png differ
diff --git a/assets/screenshots/02-feature-flags.png b/assets/screenshots/02-feature-flags.png
index 5a0b174..9d0893c 100644
Binary files a/assets/screenshots/02-feature-flags.png and b/assets/screenshots/02-feature-flags.png differ
diff --git a/assets/screenshots/03-flag-editor.png b/assets/screenshots/03-flag-editor.png
index ac990b6..f6bcb32 100644
Binary files a/assets/screenshots/03-flag-editor.png and b/assets/screenshots/03-flag-editor.png differ
diff --git a/assets/screenshots/04-change-requests.png b/assets/screenshots/04-change-requests.png
index 23248b3..5051d6d 100644
Binary files a/assets/screenshots/04-change-requests.png and b/assets/screenshots/04-change-requests.png differ
diff --git a/assets/screenshots/05-environment-diff.png b/assets/screenshots/05-environment-diff.png
index c2768d1..b188a7d 100644
Binary files a/assets/screenshots/05-environment-diff.png and b/assets/screenshots/05-environment-diff.png differ
diff --git a/assets/screenshots/06-settings-tokens.png b/assets/screenshots/06-settings-tokens.png
index f14c060..6ff64de 100644
Binary files a/assets/screenshots/06-settings-tokens.png and b/assets/screenshots/06-settings-tokens.png differ
diff --git a/assets/screenshots/07-environments.png b/assets/screenshots/07-environments.png
index f7140bc..996baac 100644
Binary files a/assets/screenshots/07-environments.png and b/assets/screenshots/07-environments.png differ
diff --git a/assets/screenshots/08-sidebar-collapsed.png b/assets/screenshots/08-sidebar-collapsed.png
new file mode 100644
index 0000000..5ff8550
Binary files /dev/null and b/assets/screenshots/08-sidebar-collapsed.png differ
diff --git a/dashboard/package.json b/dashboard/package.json
index 1c4b39b..7e50fed 100644
--- a/dashboard/package.json
+++ b/dashboard/package.json
@@ -1,6 +1,6 @@
 {
   "name": "checkgate-dashboard",
-  "version": "0.1.18",
+  "version": "0.1.19",
   "private": true,
   "type": "module",
   "scripts": {
diff --git a/dashboard/src/App.tsx b/dashboard/src/App.tsx
index c6ddee3..53ec112 100644
--- a/dashboard/src/App.tsx
+++ b/dashboard/src/App.tsx
@@ -23,7 +23,12 @@ import ProjectSettings from './pages/ProjectSettings'
 import Webhooks from './pages/Webhooks'
 
 function RequireAuth({ children }: { readonly children: React.ReactNode }) {
-  const { session, sessionLoading, isSetupComplete } = useAuth()
+  const { session, sessionLoading, isSetupComplete, setupLoading } = useAuth()
+  // Must not act on isSetupComplete until the authoritative check resolves —
+  // its pre-check value is only a localStorage guess, and routing to /setup
+  // on a wrong guess is a one-way trip (nothing there re-checks and bounces
+  // back once the real value arrives).
+  if (setupLoading) return null
   if (!isSetupComplete) return <Navigate to="/setup" replace />
   if (sessionLoading) return null
   if (!session) return <Navigate to="/login" replace />
@@ -31,18 +36,33 @@ function RequireAuth({ children }: { readonly children: React.ReactNode }) {
 }
 
 function PublicOnly({ children }: { readonly children: React.ReactNode }) {
-  const { session, sessionLoading, isSetupComplete } = useAuth()
+  const { session, sessionLoading, isSetupComplete, setupLoading } = useAuth()
+  if (setupLoading) return null
   if (!isSetupComplete) return <Navigate to="/setup" replace />
   if (sessionLoading) return null
   if (session) return <Navigate to="/" replace />
   return <>{children}</>
 }
 
+function SetupOnly({ children }: { readonly children: React.ReactNode }) {
+  const { isSetupComplete, setupLoading } = useAuth()
+  if (setupLoading) return null
+  if (isSetupComplete) return <Navigate to="/login" replace />
+  return <>{children}</>
+}
+
 export default function App() {
   return (
     <Routes>
       {/* Auth routes (no sidebar) */}
-      <Route path="/setup" element={<Setup />} />
+      <Route
+        path="/setup"
+        element={
+          <SetupOnly>
+            <Setup />
+          </SetupOnly>
+        }
+      />
       <Route
         path="/login"
         element={
diff --git a/dashboard/src/components/Sidebar.tsx b/dashboard/src/components/Sidebar.tsx
index 25d513f..115418e 100644
--- a/dashboard/src/components/Sidebar.tsx
+++ b/dashboard/src/components/Sidebar.tsx
@@ -16,6 +16,8 @@ import {
   Wifi,
   CalendarClock,
   GitPullRequest,
+  PanelLeftClose,
+  PanelLeftOpen,
 } from 'lucide-react'
 import { useState, useRef, useEffect } from 'react'
 import { useAuth } from '../context/AuthContext'
@@ -168,11 +170,21 @@ function EnvSwitcher() {
 // Sidebar
 // ---------------------------------------------------------------------------
 
+const KEY_SIDEBAR_COLLAPSED = 'lg_sidebar_collapsed'
+
 export default function Sidebar() {
   const { session, logout } = useAuth()
   const navigate = useNavigate()
   const isAdmin = session?.user.role === 'admin'
   const NAV = NAV_ALL.filter(item => !item.adminOnly || isAdmin)
+  const [collapsed, setCollapsed] = useState(() => localStorage.getItem(KEY_SIDEBAR_COLLAPSED) === 'true')
+
+  function toggleCollapsed() {
+    setCollapsed(c => {
+      localStorage.setItem(KEY_SIDEBAR_COLLAPSED, String(!c))
+      return !c
+    })
+  }
 
   function handleLogout() {
     logout()
@@ -180,35 +192,44 @@ export default function Sidebar() {
   }
 
   return (
-    <aside className="w-64 shrink-0 flex flex-col h-screen bg-white border-r border-gray-100 shadow-premium">
+    <aside className={`${collapsed ? 'w-[76px]' : 'w-64'} shrink-0 flex flex-col h-screen bg-white border-r border-gray-100 shadow-premium transition-[width] duration-200`}>
       {/* Logo + workspace name */}
-      <div className="flex items-center gap-3 px-6 h-16 mb-2">
-        <div className="bg-white p-1 rounded-xl shadow-sm border border-gray-50 overflow-hidden">
+      <div className={`flex items-center h-16 mb-2 ${collapsed ? 'justify-center px-2' : 'gap-3 px-6'}`}>
+        <div className="bg-white p-1 rounded-xl shadow-sm border border-gray-50 overflow-hidden shrink-0">
           <img src="/checkgate_logo.png" alt="" className="h-8 w-8 object-contain" />
         </div>
-        <div className="min-w-0">
-          <span className="text-gray-900 font-display font-bold text-xl tracking-tight">Checkgate</span>
-          {session?.workspaceName && (
-            <p className="text-gray-400 text-[10px] font-medium truncate leading-none mt-0.5">{session.workspaceName}</p>
-          )}
-        </div>
+        {!collapsed && (
+          <div className="min-w-0">
+            <span className="text-gray-900 font-display font-bold text-xl tracking-tight">Checkgate</span>
+            {session?.workspaceName && (
+              <p className="text-gray-400 text-[10px] font-medium truncate leading-none mt-0.5">{session.workspaceName}</p>
+            )}
+          </div>
+        )}
       </div>
 
-      {/* Project switcher */}
-      <ProjectSwitcher />
+      {!collapsed && (
+        <>
+          {/* Project switcher */}
+          <ProjectSwitcher />
 
-      {/* Environment switcher */}
-      <EnvSwitcher />
+          {/* Environment switcher */}
+          <EnvSwitcher />
+        </>
+      )}
 
       {/* Nav */}
-      <nav className="flex-1 px-4 py-2 space-y-1 overflow-y-auto">
+      <nav className={`flex-1 py-2 space-y-1 overflow-y-auto ${collapsed ? 'px-3' : 'px-4'}`}>
         {NAV.map(({ to, icon: Icon, label, end }) => (
           <NavLink
             key={to}
             to={to}
             end={end}
+            title={collapsed ? label : undefined}
             className={({ isActive }) =>
-              `group flex items-center gap-3 px-3 py-2.5 rounded-xl text-sm font-medium transition-all duration-200 ${
+              `group flex items-center rounded-xl text-sm font-medium transition-all duration-200 ${
+                collapsed ? 'justify-center px-0 py-2.5' : 'gap-3 px-3 py-2.5'
+              } ${
                 isActive
                   ? 'bg-emerald-50 text-emerald-700 shadow-sm shadow-emerald-100/50'
                   : 'text-gray-500 hover:text-gray-900 hover:bg-gray-50'
@@ -220,32 +241,51 @@ export default function Sidebar() {
                 <div className={`p-1 rounded-lg transition-colors ${isActive ? 'bg-white shadow-sm' : 'group-hover:bg-white/50'}`}>
                   <Icon className={`w-4 h-4 shrink-0 ${isActive ? 'text-emerald-600' : 'text-gray-400 group-hover:text-gray-600'}`} />
                 </div>
-                <span className="flex-1">{label}</span>
+                {!collapsed && <span className="flex-1">{label}</span>}
               </>
             )}
           </NavLink>
         ))}
       </nav>
 
+      {/* Collapse toggle */}
+      <div className={`px-4 pb-2 ${collapsed ? 'flex justify-center px-3' : ''}`}>
+        <button
+          onClick={toggleCollapsed}
+          title={collapsed ? 'Expand sidebar' : 'Collapse sidebar'}
+          className={`flex items-center gap-3 py-2 rounded-xl text-xs font-semibold text-gray-400 hover:text-gray-700 hover:bg-gray-50 transition-all duration-200 ${
+            collapsed ? 'justify-center w-10' : 'w-full px-3'
+          }`}
+        >
+          {collapsed ? <PanelLeftOpen className="w-4 h-4 shrink-0" /> : <PanelLeftClose className="w-4 h-4 shrink-0" />}
+          {!collapsed && <span>Collapse</span>}
+        </button>
+      </div>
+
       {/* User section */}
-      <div className="px-4 py-4 border-t border-gray-100 bg-gray-50/50">
-        <div className="flex items-center gap-3 px-2 py-2 mb-2">
-          <div className="w-9 h-9 rounded-xl bg-gradient-to-br from-emerald-500 to-emerald-600 shadow-md shadow-emerald-200 flex items-center justify-center shrink-0">
+      <div className={`py-4 border-t border-gray-100 bg-gray-50/50 ${collapsed ? 'px-3' : 'px-4'}`}>
+        <div className={`flex items-center mb-2 ${collapsed ? 'justify-center' : 'gap-3 px-2 py-2'}`}>
+          <div className="w-9 h-9 rounded-xl bg-gradient-to-br from-emerald-500 to-emerald-600 shadow-md shadow-emerald-200 flex items-center justify-center shrink-0" title={collapsed ? session?.user.name : undefined}>
             <span className="text-white text-sm font-bold">
               {session?.user.name.charAt(0).toUpperCase() ?? '?'}
             </span>
           </div>
-          <div className="flex-1 min-w-0">
-            <p className="text-gray-900 text-xs font-bold truncate">{session?.user.name}</p>
-            <p className="text-gray-500 text-[10px] tracking-wider uppercase font-semibold">{session?.user.role}</p>
-          </div>
+          {!collapsed && (
+            <div className="flex-1 min-w-0">
+              <p className="text-gray-900 text-xs font-bold truncate">{session?.user.name}</p>
+              <p className="text-gray-500 text-[10px] tracking-wider uppercase font-semibold">{session?.user.role}</p>
+            </div>
+          )}
         </div>
         <button
           onClick={handleLogout}
-          className="w-full flex items-center gap-3 px-3 py-2.5 rounded-xl text-sm text-gray-500 hover:text-rose-600 hover:bg-rose-50 transition-all duration-200 group"
+          title={collapsed ? 'Sign out' : undefined}
+          className={`flex items-center rounded-xl text-sm text-gray-500 hover:text-rose-600 hover:bg-rose-50 transition-all duration-200 group ${
+            collapsed ? 'justify-center w-10 h-10 mx-auto' : 'w-full gap-3 px-3 py-2.5'
+          }`}
         >
-          <LogOut className="w-4 h-4 transition-transform group-hover:translate-x-0.5" />
-          <span className="font-semibold">Sign out</span>
+          <LogOut className="w-4 h-4 transition-transform group-hover:translate-x-0.5 shrink-0" />
+          {!collapsed && <span className="font-semibold">Sign out</span>}
         </button>
       </div>
     </aside>
diff --git a/dashboard/src/context/AuthContext.tsx b/dashboard/src/context/AuthContext.tsx
index 71b2a1c..d2f773c 100644
--- a/dashboard/src/context/AuthContext.tsx
+++ b/dashboard/src/context/AuthContext.tsx
@@ -32,6 +32,7 @@ interface AuthContextValue {
   session: Session | null
   sessionLoading: boolean
   isSetupComplete: boolean
+  setupLoading: boolean
   login: (email: string, password: string) => Promise<LoginResult>
   logout: () => Promise<void>
   completeSetup: (
@@ -77,9 +78,36 @@ export function AuthProvider({ children }: { children: ReactNode }) {
   const [isSetupComplete, setIsSetupComplete] = useState(
     () => localStorage.getItem(KEY_SETUP) === 'true',
   )
+  // True until the authoritative /api/auth/workspace check resolves. Routing
+  // must not act on `isSetupComplete` while this is true — its initial value
+  // above is only a localStorage guess (wrong for a fresh browser, a
+  // different device, or a session that expired after a server restart), and
+  // routing to /setup on a wrong guess is a one-way trip: nothing on the
+  // /setup route itself re-checks and bounces back once the real value
+  // arrives.
+  const [setupLoading, setSetupLoading] = useState(true)
 
   // On mount: restore session and authoritative setup state from the server.
+  //
+  // Setup status is fetched from the *public* /api/auth/workspace endpoint,
+  // not just inferred from /api/auth/me — the latter 401s for anyone without
+  // a valid session cookie (a fresh browser, a different device, a session
+  // that expired after a server restart), which previously meant those users
+  // got permanently bounced to /setup instead of /login even though setup
+  // had already been completed by someone else.
   useEffect(() => {
+    fetch('/api/auth/workspace', { credentials: 'same-origin' })
+      .then(res => (res.ok ? res.json() as Promise<{ workspace_name: string; is_setup_complete: boolean }> : null))
+      .then(body => {
+        if (body) {
+          setIsSetupComplete(body.is_setup_complete)
+          if (body.is_setup_complete) localStorage.setItem(KEY_SETUP, 'true')
+          else localStorage.removeItem(KEY_SETUP)
+        }
+      })
+      .catch(() => {/* network error — fall back to the localStorage-seeded initial state */})
+      .finally(() => setSetupLoading(false))
+
     fetch('/api/auth/me', { credentials: 'same-origin' })
       .then(res => {
         if (res.ok) return res.json() as Promise<AuthResponse>
@@ -182,6 +210,7 @@ export function AuthProvider({ children }: { children: ReactNode }) {
         session,
         sessionLoading,
         isSetupComplete,
+        setupLoading,
         login,
         logout,
         completeSetup,
diff --git a/dashboard/src/pages/ChangeRequests.tsx b/dashboard/src/pages/ChangeRequests.tsx
index ed4aee5..f41d637 100644
--- a/dashboard/src/pages/ChangeRequests.tsx
+++ b/dashboard/src/pages/ChangeRequests.tsx
@@ -107,7 +107,7 @@ export default function ChangeRequests() {
   }
 
   return (
-    <div className="w-full max-w-3xl space-y-5">
+    <div className="w-full space-y-5">
       <div className="premium-card shadow-premium-lg border-none">
         <div className="flex items-start gap-5 px-6 py-5 border-b border-gray-50 bg-white">
           <div className="w-10 h-10 rounded-xl bg-emerald-50 flex items-center justify-center shrink-0">
diff --git a/dashboard/src/pages/EnvironmentDiff.tsx b/dashboard/src/pages/EnvironmentDiff.tsx
index bd85f02..59eac02 100644
--- a/dashboard/src/pages/EnvironmentDiff.tsx
+++ b/dashboard/src/pages/EnvironmentDiff.tsx
@@ -191,7 +191,7 @@ export default function EnvironmentDiff() {
   const diff = envAId && envBId && envAId !== envBId ? computeDiff(flagsA, flagsB) : null
 
   return (
-    <div className="w-full max-w-3xl space-y-5">
+    <div className="w-full space-y-5">
       <div className="premium-card shadow-premium-lg border-none">
         <div className="flex items-start gap-5 px-6 py-5 border-b border-gray-50 bg-white">
           <div className="w-10 h-10 rounded-xl bg-emerald-50 flex items-center justify-center shrink-0">
diff --git a/dashboard/src/pages/Environments.tsx b/dashboard/src/pages/Environments.tsx
index c535183..a15c1d7 100644
--- a/dashboard/src/pages/Environments.tsx
+++ b/dashboard/src/pages/Environments.tsx
@@ -271,7 +271,7 @@ export default function Environments() {
   }
 
   return (
-    <div className="max-w-xl space-y-5">
+    <div className="w-full space-y-5">
       <div className="premium-card shadow-premium-lg border-none">
         {/* Header */}
         <div className="flex items-start gap-5 px-6 py-5 border-b border-gray-50 bg-white">
diff --git a/dashboard/src/pages/FlagEditor.tsx b/dashboard/src/pages/FlagEditor.tsx
index 0f8b731..8f24cbd 100644
--- a/dashboard/src/pages/FlagEditor.tsx
+++ b/dashboard/src/pages/FlagEditor.tsx
@@ -544,7 +544,7 @@ export default function FlagEditor() {
   }
 
   return (
-    <div className="w-full max-w-2xl space-y-5">
+    <div className="w-full space-y-5">
       <div className="flex items-center justify-between">
         <Link
           to="/flags"
@@ -573,247 +573,255 @@ export default function FlagEditor() {
       )}
 
       <form onSubmit={e => void handleSubmit(e)} className="space-y-5">
-        <SectionCard title="Basic info">
-          <div className="space-y-4">
-            <div>
-              <label className="block text-sm font-medium text-gray-700 mb-1.5">
-                Key <span className="text-rose-400">*</span>
-              </label>
-              <input
-                type="text"
-                required
-                disabled={isEdit}
-                value={flag.key}
-                onChange={e => setField('key', e.target.value)}
-                placeholder="e.g. dark_mode"
-                className={`${inputClass} font-mono`}
-              />
-              {!isEdit && (
-                <p className="mt-1.5 text-xs text-gray-400">
-                  Immutable after creation. Use <code className="text-gray-600">snake_case</code>.
-                </p>
-              )}
-            </div>
+        <div className="grid grid-cols-1 lg:grid-cols-3 gap-5 items-start">
+          {/* Main column — evaluation behavior */}
+          <div className="lg:col-span-2 space-y-5">
+            <SectionCard title="Flag type">
+              <div className="space-y-4">
+                <div>
+                  <label className="block text-sm font-medium text-gray-700 mb-1.5">Type</label>
+                  <select
+                    value={flagType}
+                    onChange={e => handleTypeChange(e.target.value as FlagType)}
+                    disabled={isEdit}
+                    className={selectClass}
+                  >
+                    {FLAG_TYPES.map(t => (
+                      <option key={t.value} value={t.value}>{t.label} — {t.description}</option>
+                    ))}
+                  </select>
+                  {isEdit && (
+                    <p className="mt-1.5 text-xs text-gray-400">
+                      Flag type cannot be changed after creation.
+                    </p>
+                  )}
+                </div>
 
-            <div>
-              <label className="block text-sm font-medium text-gray-700 mb-1.5">Description</label>
-              <input
-                type="text"
-                value={flag.description ?? ''}
-                onChange={e => setField('description', e.target.value || null)}
-                placeholder="What does this flag control?"
-                className={inputClass}
-              />
-            </div>
-          </div>
-        </SectionCard>
+                {isVariant && (
+                  <>
+                    <ValueInput
+                      label="Default value"
+                      hint="Returned when the flag is enabled and no targeting rule overrides it."
+                      value={flag.default_value ?? null}
+                      flagType={flagType}
+                      onChange={v => setField('default_value', v)}
+                    />
+                    <ValueInput
+                      label="Disabled value"
+                      hint="Returned when the flag is disabled or the user is outside the rollout."
+                      value={flag.disabled_value ?? null}
+                      flagType={flagType}
+                      onChange={v => setField('disabled_value', v)}
+                    />
+                  </>
+                )}
+              </div>
+            </SectionCard>
+
+            <SectionCard title="Rollout">
+              <div className="space-y-4">
+                <div className="flex items-center justify-between">
+                  <div>
+                    <p className="text-sm font-medium text-gray-700">Enabled</p>
+                    <p className="text-xs text-gray-400 mt-0.5">
+                      {isVariant
+                        ? 'When disabled, returns the disabled value.'
+                        : <>When disabled, always evaluates to <code className="text-gray-600">false</code>.</>}
+                    </p>
+                  </div>
+                  <Toggle enabled={flag.is_enabled} onToggle={() => setField('is_enabled', !flag.is_enabled)} />
+                </div>
 
-        <SectionCard title="Tags & ownership">
-          <div className="space-y-4">
-            <TagsInput tags={flag.tags ?? []} onChange={tags => setField('tags', tags)} />
-            <div>
-              <label className="block text-sm font-medium text-gray-700 mb-1.5">Owner</label>
-              <input
-                type="email"
-                value={flag.owner_email ?? ''}
-                onChange={e => setField('owner_email', e.target.value || null)}
-                placeholder="owner@example.com"
-                className={inputClass}
-              />
-              <p className="mt-1.5 text-xs text-gray-400">
-                Who's responsible for this flag — useful when deciding what's safe to clean up.
-              </p>
-            </div>
-          </div>
-        </SectionCard>
-
-        <SectionCard title="Prerequisites">
-          <p className="text-xs text-gray-400 mb-4">
-            Require other flags to be enabled (or resolve to a specific value) before this flag's
-            own rules and rollout are even considered. Checked first — if any prerequisite fails,
-            this flag evaluates as disabled.
-          </p>
-          <PrerequisitesEditor
-            prerequisites={flag.prerequisites ?? []}
-            candidates={otherFlags}
-            onChange={prerequisites => setField('prerequisites', prerequisites)}
-          />
-        </SectionCard>
-
-        <SectionCard title="Flag type">
-          <div className="space-y-4">
-            <div>
-              <label className="block text-sm font-medium text-gray-700 mb-1.5">Type</label>
-              <select
-                value={flagType}
-                onChange={e => handleTypeChange(e.target.value as FlagType)}
-                disabled={isEdit}
-                className={selectClass}
-              >
-                {FLAG_TYPES.map(t => (
-                  <option key={t.value} value={t.value}>{t.label} — {t.description}</option>
-                ))}
-              </select>
-              {isEdit && (
-                <p className="mt-1.5 text-xs text-gray-400">
-                  Flag type cannot be changed after creation.
-                </p>
-              )}
-            </div>
+                <div className="border-t border-gray-100 pt-4">
+                  <label className="block text-sm font-medium text-gray-700 mb-1.5">Rollout percentage</label>
+                  <div className="flex items-center gap-2">
+                    <input
+                      type="number"
+                      min={0}
+                      max={100}
+                      value={rolloutInput}
+                      onChange={e => setRolloutInput(e.target.value)}
+                      placeholder="100"
+                      className="w-28 bg-white border border-gray-100 rounded-xl px-4 py-2.5 text-gray-900 text-sm focus:outline-none focus:ring-4 focus:ring-emerald-500/10 focus:border-emerald-500/30 transition-all shadow-premium"
+                    />
+                    <span className="text-gray-400 text-sm">%</span>
+                  </div>
+                  <p className="mt-1.5 text-xs text-gray-400">
+                    Leave empty for 100%. Users are bucketed deterministically by their key.
+                  </p>
+                </div>
+              </div>
+            </SectionCard>
 
             {isVariant && (
-              <>
-                <ValueInput
-                  label="Default value"
-                  hint="Returned when the flag is enabled and no targeting rule overrides it."
-                  value={flag.default_value ?? null}
-                  flagType={flagType}
-                  onChange={v => setField('default_value', v)}
-                />
-                <ValueInput
-                  label="Disabled value"
-                  hint="Returned when the flag is disabled or the user is outside the rollout."
-                  value={flag.disabled_value ?? null}
+              <SectionCard title="Weighted variants (A/B testing)">
+                <p className="text-xs text-gray-400 mb-4">
+                  Split traffic across multiple values by weight (e.g. 60/30/10). Applies to users who
+                  are enabled, inside the rollout percentage above, and don't match a targeting rule.
+                  Weights don't need to sum to 100 — only their proportions matter. Leave empty to
+                  always return the default value above.
+                </p>
+                <WeightedVariantsEditor
+                  variants={flag.variants ?? []}
                   flagType={flagType}
-                  onChange={v => setField('disabled_value', v)}
+                  onChange={variants => setField('variants', variants)}
                 />
-              </>
+              </SectionCard>
             )}
-          </div>
-        </SectionCard>
-
-        <SectionCard title="Rollout">
-          <div className="space-y-4">
-            <div className="flex items-center justify-between">
-              <div>
-                <p className="text-sm font-medium text-gray-700">Enabled</p>
-                <p className="text-xs text-gray-400 mt-0.5">
-                  {isVariant
-                    ? 'When disabled, returns the disabled value.'
-                    : <>When disabled, always evaluates to <code className="text-gray-600">false</code>.</>}
-                </p>
-              </div>
-              <Toggle enabled={flag.is_enabled} onToggle={() => setField('is_enabled', !flag.is_enabled)} />
-            </div>
 
-            <div className="border-t border-gray-100 pt-4">
-              <label className="block text-sm font-medium text-gray-700 mb-1.5">Rollout percentage</label>
-              <div className="flex items-center gap-2">
-                <input
-                  type="number"
-                  min={0}
-                  max={100}
-                  value={rolloutInput}
-                  onChange={e => setRolloutInput(e.target.value)}
-                  placeholder="100"
-                  className="w-28 bg-white border border-gray-100 rounded-xl px-4 py-2.5 text-gray-900 text-sm focus:outline-none focus:ring-4 focus:ring-emerald-500/10 focus:border-emerald-500/30 transition-all shadow-premium"
-                />
-                <span className="text-gray-400 text-sm">%</span>
-              </div>
-              <p className="mt-1.5 text-xs text-gray-400">
-                Leave empty for 100%. Users are bucketed deterministically by their key.
+            <SectionCard title="Targeting rules">
+              <p className="text-xs text-gray-400 mb-4">
+                {isVariant
+                  ? 'Users matching a rule return that rule\'s value (or the default value if no per-rule value is set), bypassing the rollout cap.'
+                  : 'Users matching any rule always see the flag as enabled, bypassing the rollout cap.'}
               </p>
-            </div>
+              <RuleEditor
+                rules={flag.rules as TargetingRule[]}
+                onChange={rules => setField('rules', rules)}
+                flagType={flagType}
+                segments={segments}
+              />
+            </SectionCard>
           </div>
-        </SectionCard>
-
-        {isVariant && (
-          <SectionCard title="Weighted variants (A/B testing)">
-            <p className="text-xs text-gray-400 mb-4">
-              Split traffic across multiple values by weight (e.g. 60/30/10). Applies to users who
-              are enabled, inside the rollout percentage above, and don't match a targeting rule.
-              Weights don't need to sum to 100 — only their proportions matter. Leave empty to
-              always return the default value above.
-            </p>
-            <WeightedVariantsEditor
-              variants={flag.variants ?? []}
-              flagType={flagType}
-              onChange={variants => setField('variants', variants)}
-            />
-          </SectionCard>
-        )}
 
-        <SectionCard title="Targeting rules">
-          <p className="text-xs text-gray-400 mb-4">
-            {isVariant
-              ? 'Users matching a rule return that rule\'s value (or the default value if no per-rule value is set), bypassing the rollout cap.'
-              : 'Users matching any rule always see the flag as enabled, bypassing the rollout cap.'}
-          </p>
-          <RuleEditor
-            rules={flag.rules as TargetingRule[]}
-            onChange={rules => setField('rules', rules)}
-            flagType={flagType}
-            segments={segments}
-          />
-        </SectionCard>
-
-        {isEdit && key && (
-          <SectionCard title="Scheduled changes">
-            <div className="space-y-4">
-              {scheduledChanges.filter(c => !c.executed_at).length > 0 && (
-                <div className="space-y-2">
-                  <p className="text-xs font-medium text-gray-500 uppercase tracking-wide">
-                    Pending
-                  </p>
-                  {scheduledChanges
-                    .filter(c => !c.executed_at)
-                    .map(sc => (
-                      <div
-                        key={sc.id}
-                        className="flex items-center justify-between gap-3 bg-indigo-50 rounded-lg px-3 py-2 text-sm"
-                      >
-                        <span className="text-indigo-700">
-                          <strong>{sc.patch.is_enabled ? 'Enable' : 'Disable'}</strong>
-                          {' at '}
-                          {new Date(sc.scheduled_at).toLocaleString()}
-                        </span>
-                        <button
-                          type="button"
-                          onClick={() => void cancelScheduledChange(sc.id)}
-                          className="text-red-400 hover:text-red-600"
-                        >
-                          <Trash2 className="w-3.5 h-3.5" />
-                        </button>
-                      </div>
-                    ))}
+          {/* Sidebar — identity, ownership, dependencies */}
+          <div className="space-y-5">
+            <SectionCard title="Basic info">
+              <div className="space-y-4">
+                <div>
+                  <label className="block text-sm font-medium text-gray-700 mb-1.5">
+                    Key <span className="text-rose-400">*</span>
+                  </label>
+                  <input
+                    type="text"
+                    required
+                    disabled={isEdit}
+                    value={flag.key}
+                    onChange={e => setField('key', e.target.value)}
+                    placeholder="e.g. dark_mode"
+                    className={`${inputClass} font-mono`}
+                  />
+                  {!isEdit && (
+                    <p className="mt-1.5 text-xs text-gray-400">
+                      Immutable after creation. Use <code className="text-gray-600">snake_case</code>.
+                    </p>
+                  )}
                 </div>
-              )}
 
-              <form onSubmit={e => void handleSchedule(e)} className="flex items-end gap-3 flex-wrap">
                 <div>
-                  <label className="block text-sm font-medium text-gray-700 mb-1.5">Action</label>
-                  <select
-                    value={scheduleAction}
-                    onChange={e => setScheduleAction(e.target.value as 'enable' | 'disable')}
-                    className={selectClass + ' w-auto'}
-                  >
-                    <option value="enable">Enable flag</option>
-                    <option value="disable">Disable flag</option>
-                  </select>
+                  <label className="block text-sm font-medium text-gray-700 mb-1.5">Description</label>
+                  <input
+                    type="text"
+                    value={flag.description ?? ''}
+                    onChange={e => setField('description', e.target.value || null)}
+                    placeholder="What does this flag control?"
+                    className={inputClass}
+                  />
                 </div>
+              </div>
+            </SectionCard>
+
+            <SectionCard title="Tags & ownership">
+              <div className="space-y-4">
+                <TagsInput tags={flag.tags ?? []} onChange={tags => setField('tags', tags)} />
                 <div>
-                  <label className="block text-sm font-medium text-gray-700 mb-1.5">
-                    At (local time)
-                  </label>
+                  <label className="block text-sm font-medium text-gray-700 mb-1.5">Owner</label>
                   <input
-                    type="datetime-local"
-                    required
-                    value={scheduleAt}
-                    onChange={e => setScheduleAt(e.target.value)}
-                    className={inputClass + ' w-auto'}
+                    type="email"
+                    value={flag.owner_email ?? ''}
+                    onChange={e => setField('owner_email', e.target.value || null)}
+                    placeholder="owner@example.com"
+                    className={inputClass}
                   />
+                  <p className="mt-1.5 text-xs text-gray-400">
+                    Who's responsible for this flag — useful when deciding what's safe to clean up.
+                  </p>
                 </div>
-                <button
-                  type="submit"
-                  disabled={scheduleSaving || !scheduleAt}
-                  className="px-4 py-2.5 bg-indigo-600 hover:bg-indigo-700 disabled:opacity-50 text-white text-sm font-semibold rounded-xl transition-all"
-                >
-                  {scheduleSaving ? 'Scheduling…' : 'Schedule'}
-                </button>
-              </form>
-            </div>
-          </SectionCard>
-        )}
+              </div>
+            </SectionCard>
+
+            <SectionCard title="Prerequisites">
+              <p className="text-xs text-gray-400 mb-4">
+                Require other flags to be enabled (or resolve to a specific value) before this flag's
+                own rules and rollout are even considered. Checked first — if any prerequisite fails,
+                this flag evaluates as disabled.
+              </p>
+              <PrerequisitesEditor
+                prerequisites={flag.prerequisites ?? []}
+                candidates={otherFlags}
+                onChange={prerequisites => setField('prerequisites', prerequisites)}
+              />
+            </SectionCard>
+
+            {isEdit && key && (
+              <SectionCard title="Scheduled changes">
+                <div className="space-y-4">
+                  {scheduledChanges.filter(c => !c.executed_at).length > 0 && (
+                    <div className="space-y-2">
+                      <p className="text-xs font-medium text-gray-500 uppercase tracking-wide">
+                        Pending
+                      </p>
+                      {scheduledChanges
+                        .filter(c => !c.executed_at)
+                        .map(sc => (
+                          <div
+                            key={sc.id}
+                            className="flex items-center justify-between gap-3 bg-indigo-50 rounded-lg px-3 py-2 text-sm"
+                          >
+                            <span className="text-indigo-700">
+                              <strong>{sc.patch.is_enabled ? 'Enable' : 'Disable'}</strong>
+                              {' at '}
+                              {new Date(sc.scheduled_at).toLocaleString()}
+                            </span>
+                            <button
+                              type="button"
+                              onClick={() => void cancelScheduledChange(sc.id)}
+                              className="text-red-400 hover:text-red-600"
+                            >
+                              <Trash2 className="w-3.5 h-3.5" />
+                            </button>
+                          </div>
+                        ))}
+                    </div>
+                  )}
+
+                  <form onSubmit={e => void handleSchedule(e)} className="flex items-end gap-3 flex-wrap">
+                    <div>
+                      <label className="block text-sm font-medium text-gray-700 mb-1.5">Action</label>
+                      <select
+                        value={scheduleAction}
+                        onChange={e => setScheduleAction(e.target.value as 'enable' | 'disable')}
+                        className={selectClass + ' w-auto'}
+                      >
+                        <option value="enable">Enable flag</option>
+                        <option value="disable">Disable flag</option>
+                      </select>
+                    </div>
+                    <div>
+                      <label className="block text-sm font-medium text-gray-700 mb-1.5">
+                        At (local time)
+                      </label>
+                      <input
+                        type="datetime-local"
+                        required
+                        value={scheduleAt}
+                        onChange={e => setScheduleAt(e.target.value)}
+                        className={inputClass + ' w-auto'}
+                      />
+                    </div>
+                    <button
+                      type="submit"
+                      disabled={scheduleSaving || !scheduleAt}
+                      className="px-4 py-2.5 bg-indigo-600 hover:bg-indigo-700 disabled:opacity-50 text-white text-sm font-semibold rounded-xl transition-all"
+                    >
+                      {scheduleSaving ? 'Scheduling…' : 'Schedule'}
+                    </button>
+                  </form>
+                </div>
+              </SectionCard>
+            )}
+          </div>
+        </div>
 
         <div className="flex items-center gap-3">
           <button
diff --git a/dashboard/src/pages/Login.tsx b/dashboard/src/pages/Login.tsx
index 203cd88..f6ebe5e 100644
--- a/dashboard/src/pages/Login.tsx
+++ b/dashboard/src/pages/Login.tsx
@@ -80,7 +80,7 @@ export default function Login() {
   return (
     <div className="min-h-screen bg-gray-50 flex">
       {/* Left branding panel */}
-      <div className="hidden lg:flex lg:w-5/12 flex-col justify-between p-12 bg-white border-r border-gray-200">
+      <div className="hidden lg:flex lg:w-5/12 flex-col justify-between p-12 xl:p-20 bg-white border-r border-gray-200">
         <div className="flex items-center gap-3">
           <div className="bg-white p-1 rounded-xl shadow-sm border border-gray-50 overflow-hidden">
             <img src="/checkgate_logo.png" alt="" className="h-7 w-7 object-contain" />
@@ -88,7 +88,7 @@ export default function Login() {
           <span className="text-gray-900 font-display font-bold text-2xl tracking-tight">Checkgate</span>
         </div>
 
-        <div className="max-w-sm">
+        <div className="max-w-lg">
           <blockquote className="text-4xl font-display font-bold text-gray-900 leading-[1.1] mb-6 tracking-tight">
             Ship with confidence. <span className="text-emerald-600">Roll back in seconds.</span>
           </blockquote>
@@ -114,7 +114,7 @@ export default function Login() {
           <span className="text-gray-900 font-display font-bold text-xl tracking-tight">Checkgate</span>
         </div>
 
-        <div className="w-full max-w-md bg-white p-10 rounded-3xl shadow-premium-xl border border-gray-50">
+        <div className="w-full max-w-lg bg-white p-10 rounded-3xl shadow-premium-xl border border-gray-50">
           <h2 className="text-3xl font-display font-bold text-gray-900 tracking-tight mb-1 text-center sm:text-left">
             Welcome back
           </h2>
diff --git a/dashboard/src/pages/ProjectSettings.tsx b/dashboard/src/pages/ProjectSettings.tsx
index c1ed50b..944e048 100644
--- a/dashboard/src/pages/ProjectSettings.tsx
+++ b/dashboard/src/pages/ProjectSettings.tsx
@@ -1,5 +1,5 @@
 import { useState, useEffect, useCallback } from 'react'
-import { useParams, useNavigate } from 'react-router-dom'
+import { useParams, useNavigate, useSearchParams } from 'react-router-dom'
 import { Key, Users, Settings, Plus, Trash2, Copy, Check, AlertCircle, X, ChevronDown } from 'lucide-react'
 import { projectsApi, keysApi, userApi, type ProjectSummary, type ProjectMemberInfo, type SdkKeyInfo, type NewKeyResponse } from '../api'
 import { useProject } from '../context/ProjectContext'
@@ -438,13 +438,20 @@ const TABS: { id: Tab; label: string; icon: React.ElementType }[] = [
   { id: 'settings', label: 'Settings', icon: Settings },
 ]
 
+const VALID_TABS: Tab[] = ['members', 'keys', 'settings']
+
 export default function ProjectSettings() {
   const { projectId } = useParams<{ projectId: string }>()
   const navigate = useNavigate()
   const { reload: reloadContext } = useProject()
+  const [searchParams] = useSearchParams()
   const [project, setProject] = useState<ProjectSummary | null>(null)
   const [loading, setLoading] = useState(true)
-  const [tab, setTab] = useState<Tab>('members')
+  // Deep-linkable via ?tab=keys (e.g. from Settings' "get an SDK key" pointer).
+  const requestedTab = searchParams.get('tab')
+  const [tab, setTab] = useState<Tab>(
+    VALID_TABS.includes(requestedTab as Tab) ? (requestedTab as Tab) : 'members',
+  )
 
   useEffect(() => {
     if (!projectId) return
@@ -472,7 +479,7 @@ export default function ProjectSettings() {
   }
 
   return (
-    <div className="max-w-2xl">
+    <div className="w-full max-w-4xl">
       <div className="mb-6">
         <button
           onClick={() => navigate('/projects')}
diff --git a/dashboard/src/pages/Projects.tsx b/dashboard/src/pages/Projects.tsx
index 20d0da5..5985601 100644
--- a/dashboard/src/pages/Projects.tsx
+++ b/dashboard/src/pages/Projects.tsx
@@ -111,7 +111,7 @@ export default function Projects() {
   }
 
   return (
-    <div className="max-w-3xl">
+    <div className="w-full">
       <div className="flex items-center justify-between mb-6">
         <div>
           <h1 className="text-xl font-bold text-gray-900">Projects</h1>
diff --git a/dashboard/src/pages/Scheduled.tsx b/dashboard/src/pages/Scheduled.tsx
index 8260c8c..61d3368 100644
--- a/dashboard/src/pages/Scheduled.tsx
+++ b/dashboard/src/pages/Scheduled.tsx
@@ -81,7 +81,7 @@ export default function Scheduled() {
   const done = changes.filter((c) => c.executed_at)
 
   return (
-    <div className="p-6 max-w-5xl mx-auto space-y-6">
+    <div className="w-full space-y-6">
       <div>
         <h1 className="text-2xl font-bold text-gray-900">Scheduled Changes</h1>
         <p className="text-gray-500 text-sm mt-1">
diff --git a/dashboard/src/pages/SdkHealth.tsx b/dashboard/src/pages/SdkHealth.tsx
index f66a68d..608b7b3 100644
--- a/dashboard/src/pages/SdkHealth.tsx
+++ b/dashboard/src/pages/SdkHealth.tsx
@@ -40,7 +40,7 @@ export default function SdkHealth() {
   }, [])
 
   return (
-    <div className="p-6 max-w-5xl mx-auto space-y-6">
+    <div className="w-full space-y-6">
       <div className="flex items-center justify-between">
         <div>
           <h1 className="text-2xl font-bold text-gray-900">SDK Health</h1>
diff --git a/dashboard/src/pages/Settings.tsx b/dashboard/src/pages/Settings.tsx
index 42aa4f7..4c38071 100644
--- a/dashboard/src/pages/Settings.tsx
+++ b/dashboard/src/pages/Settings.tsx
@@ -1,7 +1,8 @@
 import { useState, useEffect, useCallback } from 'react'
 import { Globe, LogOut, Shield, Info, Code2, Copy, Check, KeyRound, Plus, Trash2, AlertCircle, X } from 'lucide-react'
-import { useNavigate } from 'react-router-dom'
+import { useNavigate, Link } from 'react-router-dom'
 import { useAuth } from '../context/AuthContext'
+import { useProject } from '../context/ProjectContext'
 import { tokensApi, type TokenInfo, type NewTokenResponse, type TokenScope } from '../api'
 
 function SectionCard({ icon: Icon, title, description, children }: {
@@ -233,6 +234,7 @@ function PersonalAccessTokensSection() {
 
 export default function Settings() {
   const { logout, session } = useAuth()
+  const { activeProject } = useProject()
   const navigate = useNavigate()
 
   async function handleLogout() {
@@ -268,92 +270,105 @@ await client.connect()
 const enabled = client.getBool('feature_x', false, { userId: req.user.id })`
 
   return (
-    <div className="max-w-2xl space-y-5">
+    <div className="w-full space-y-5">
+      <div className="grid grid-cols-1 lg:grid-cols-3 gap-5 items-start">
+        {/* Main column — things you actively use/copy */}
+        <div className="lg:col-span-2 space-y-5">
+          {/* SDK quick-start */}
+          <SectionCard
+            icon={Code2}
+            title="SDK quick-start"
+            description="Copy a snippet to connect your app to this Checkgate instance."
+          >
+            <div className="space-y-4">
+              <div>
+                <p className="text-xs font-semibold text-gray-500 uppercase tracking-wide mb-2">
+                  Browser / Node (ESM)
+                </p>
+                <CodeBlock code={jsSnippet} />
+              </div>
+              <div>
+                <p className="text-xs font-semibold text-gray-500 uppercase tracking-wide mb-2">
+                  Node.js (server-side evaluation)
+                </p>
+                <CodeBlock code={nodeSnippet} />
+              </div>
+              <p className="text-xs text-gray-400">
+                Replace <code className="text-gray-600">sk_live_…</code> with an SDK key from the{' '}
+                {activeProject ? (
+                  <Link to={`/projects/${activeProject.id}?tab=keys`} className="text-emerald-600 hover:underline">
+                    Project Settings → SDK Keys
+                  </Link>
+                ) : (
+                  <span className="text-gray-500">Project Settings → SDK Keys</span>
+                )}{' '}
+                page (or the key shown during initial setup).
+              </p>
+            </div>
+          </SectionCard>
 
-      {/* SDK quick-start */}
-      <SectionCard
-        icon={Code2}
-        title="SDK quick-start"
-        description="Copy a snippet to connect your app to this Checkgate instance."
-      >
-        <div className="space-y-4">
-          <div>
-            <p className="text-xs font-semibold text-gray-500 uppercase tracking-wide mb-2">
-              Browser / Node (ESM)
-            </p>
-            <CodeBlock code={jsSnippet} />
-          </div>
-          <div>
-            <p className="text-xs font-semibold text-gray-500 uppercase tracking-wide mb-2">
-              Node.js (server-side evaluation)
-            </p>
-            <CodeBlock code={nodeSnippet} />
-          </div>
-          <p className="text-xs text-gray-400">
-            Replace <code className="text-gray-600">sk_live_…</code> with an SDK key from the{' '}
-            <a href="/settings" className="text-emerald-600 hover:underline">Settings → SDK Keys</a> page
-            (or the key shown during initial setup).
-          </p>
+          {/* Personal access tokens */}
+          <PersonalAccessTokensSection />
         </div>
-      </SectionCard>
 
-      {/* Auth info */}
-      <SectionCard
-        icon={Shield}
-        title="Authentication"
-        description="Sessions use HttpOnly encrypted cookies — the SDK key is never exposed to JavaScript."
-      >
-        <div className="space-y-3">
-          <div className="flex items-start gap-3 p-3 rounded-lg bg-emerald-50 border border-emerald-200">
-            <Info className="w-4 h-4 text-emerald-600 mt-0.5 shrink-0" />
-            <p className="text-xs text-gray-600 leading-relaxed">
-              Your SDK key is validated server-side at login. After that, a short-lived
-              encrypted cookie keeps you authenticated. The key is never stored in your browser.
-            </p>
-          </div>
-          <div className="grid grid-cols-2 gap-3 text-xs">
-            <div className="p-3 rounded-lg bg-gray-50 border border-gray-200">
-              <p className="text-gray-500 mb-0.5">Cookie flags</p>
-              <p className="text-gray-800 font-mono">HttpOnly · SameSite=Strict</p>
+        {/* Sidebar — informational, rarely touched */}
+        <div className="space-y-5">
+          {/* Auth info */}
+          <SectionCard
+            icon={Shield}
+            title="Authentication"
+            description="Sessions use HttpOnly encrypted cookies — the SDK key is never exposed to JavaScript."
+          >
+            <div className="space-y-3">
+              <div className="flex items-start gap-3 p-3 rounded-lg bg-emerald-50 border border-emerald-200">
+                <Info className="w-4 h-4 text-emerald-600 mt-0.5 shrink-0" />
+                <p className="text-xs text-gray-600 leading-relaxed">
+                  Your SDK key is validated server-side at login. After that, a short-lived
+                  encrypted cookie keeps you authenticated. The key is never stored in your browser.
+                </p>
+              </div>
+              <div className="grid grid-cols-2 gap-3 text-xs">
+                <div className="p-3 rounded-lg bg-gray-50 border border-gray-200">
+                  <p className="text-gray-500 mb-0.5">Cookie flags</p>
+                  <p className="text-gray-800 font-mono">HttpOnly · SameSite=Strict</p>
+                </div>
+                <div className="p-3 rounded-lg bg-gray-50 border border-gray-200">
+                  <p className="text-gray-500 mb-0.5">Session TTL</p>
+                  <p className="text-gray-800 font-mono">7 days</p>
+                </div>
+              </div>
             </div>
-            <div className="p-3 rounded-lg bg-gray-50 border border-gray-200">
-              <p className="text-gray-500 mb-0.5">Session TTL</p>
-              <p className="text-gray-800 font-mono">7 days</p>
+          </SectionCard>
+
+          {/* API endpoint */}
+          <SectionCard
+            icon={Globe}
+            title="API endpoint"
+            description="The dashboard communicates with the Checkgate server at this origin."
+          >
+            <div className="flex items-center gap-2 p-3 rounded-lg bg-gray-50 border border-gray-200">
+              <code className="text-emerald-600 text-sm flex-1 truncate">{apiOrigin}</code>
             </div>
-          </div>
-        </div>
-      </SectionCard>
-
-      {/* Personal access tokens */}
-      <PersonalAccessTokensSection />
-
-      {/* API endpoint */}
-      <SectionCard
-        icon={Globe}
-        title="API endpoint"
-        description="The dashboard communicates with the Checkgate server at this origin."
-      >
-        <div className="flex items-center gap-2 p-3 rounded-lg bg-gray-50 border border-gray-200">
-          <code className="text-emerald-600 text-sm flex-1 truncate">{apiOrigin}</code>
+            <p className="mt-2 text-xs text-gray-400">
+              Set <code className="text-gray-600">VITE_API_URL</code> at build time to point at a different server.
+            </p>
+          </SectionCard>
+
+          {/* Account */}
+          <SectionCard
+            icon={LogOut}
+            title="Account"
+            description={`Signed in as ${session?.user.email ?? '—'} · ${session?.user.role ?? ''}`}
+          >
+            <button
+              onClick={() => void handleLogout()}
+              className="flex items-center gap-2 px-4 py-2 bg-gray-100 hover:bg-gray-200 text-gray-700 text-sm font-medium rounded-lg transition-colors border border-gray-200"
+            >
+              <LogOut className="w-3.5 h-3.5" /> Sign out
+            </button>
+          </SectionCard>
         </div>
-        <p className="mt-2 text-xs text-gray-400">
-          Set <code className="text-gray-600">VITE_API_URL</code> at build time to point at a different server.
-        </p>
-      </SectionCard>
-
-      {/* Account */}
-      <SectionCard
-        icon={LogOut}
-        title="Account"
-        description={`Signed in as ${session?.user.email ?? '—'} · ${session?.user.role ?? ''}`}
-      >
-        <button
-          onClick={() => void handleLogout()}
-          className="flex items-center gap-2 px-4 py-2 bg-gray-100 hover:bg-gray-200 text-gray-700 text-sm font-medium rounded-lg transition-colors border border-gray-200"
-        >
-          <LogOut className="w-3.5 h-3.5" /> Sign out
-        </button>
-      </SectionCard>
+      </div>
     </div>
   )
 }
diff --git a/dashboard/src/pages/Setup.tsx b/dashboard/src/pages/Setup.tsx
index 8f54825..84f595b 100644
--- a/dashboard/src/pages/Setup.tsx
+++ b/dashboard/src/pages/Setup.tsx
@@ -1,5 +1,5 @@
 import { useState, useEffect } from 'react'
-import { useNavigate } from 'react-router-dom'
+import { useNavigate, Link } from 'react-router-dom'
 import { Flag, ArrowRight, CheckCircle2, Shield, Zap, Globe, Copy, Check, AlertCircle, Eye, EyeOff, Building2 } from 'lucide-react'
 import { useAuth } from '../context/AuthContext'
 
@@ -81,7 +81,7 @@ export default function Setup() {
   return (
     <div className="min-h-screen bg-gray-50 flex">
       {/* Left panel */}
-      <div className="hidden lg:flex lg:w-1/2 flex-col justify-between p-12 bg-white border-r border-gray-200">
+      <div className="hidden lg:flex lg:w-1/2 flex-col justify-between p-12 xl:p-20 bg-white border-r border-gray-200">
         <div className="flex items-center gap-3">
           <div className="bg-white p-1 rounded-xl shadow-sm border border-gray-50 overflow-hidden">
             <img src="/checkgate_logo.png" alt="" className="h-7 w-7 object-contain" />
@@ -89,11 +89,9 @@ export default function Setup() {
           <span className="text-gray-900 font-display font-bold text-2xl tracking-tight">Checkgate</span>
         </div>
 
-        <div className="max-w-sm">
-          <h1 className="text-4xl font-display font-bold text-gray-900 leading-[1.1] mb-6 tracking-tight">
-            Feature flags <br />
-            built for the <br />
-            <span className="text-emerald-600">modern web.</span>
+        <div className="max-w-lg">
+          <h1 className="text-4xl font-display font-bold text-gray-900 leading-[1.15] mb-6 tracking-tight">
+            Feature flags built for the <span className="text-emerald-600">modern web.</span>
           </h1>
           <p className="text-gray-500 text-lg font-medium leading-relaxed mb-10">
             Self-hosted, open-source, and built in Rust. Ship faster — without the vendor tax.
@@ -136,7 +134,7 @@ export default function Setup() {
           ))}
         </div>
 
-        <div className="w-full max-w-md bg-white p-12 rounded-3xl shadow-premium-xl border border-gray-50">
+        <div className="w-full max-w-lg bg-white p-12 rounded-3xl shadow-premium-xl border border-gray-50">
           {/* Step 0: Welcome */}
           {step === 0 && (
             <div className="text-center">
@@ -153,6 +151,12 @@ export default function Setup() {
               >
                 Get started <ArrowRight className="w-4 h-4" />
               </button>
+              <p className="mt-6 text-sm text-gray-500">
+                Already set up?{' '}
+                <Link to="/login" className="text-emerald-600 hover:text-emerald-700 font-medium transition-colors">
+                  Sign in
+                </Link>
+              </p>
             </div>
           )}
 
diff --git a/dashboard/src/pages/Users.tsx b/dashboard/src/pages/Users.tsx
index f6e9f35..a5e0a8c 100644
--- a/dashboard/src/pages/Users.tsx
+++ b/dashboard/src/pages/Users.tsx
@@ -233,7 +233,7 @@ export default function Users() {
   }
 
   return (
-    <div className="w-full max-w-3xl space-y-4">
+    <div className="w-full space-y-4">
       {showModal && (
         <AddUserModal
           onClose={() => setShowModal(false)}
diff --git a/dashboard/src/pages/Webhooks.tsx b/dashboard/src/pages/Webhooks.tsx
index bdc4289..efe3120 100644
--- a/dashboard/src/pages/Webhooks.tsx
+++ b/dashboard/src/pages/Webhooks.tsx
@@ -301,7 +301,7 @@ export default function Webhooks() {
   }
 
   return (
-    <div className="p-6 max-w-4xl mx-auto space-y-6">
+    <div className="w-full space-y-6">
       <div className="flex items-center justify-between">
         <div>
           <h1 className="text-2xl font-bold text-gray-900">Webhooks</h1>
diff --git a/sdks/flutter/dart/CHANGELOG.md b/sdks/flutter/dart/CHANGELOG.md
index bf2e136..52bfd92 100644
--- a/sdks/flutter/dart/CHANGELOG.md
+++ b/sdks/flutter/dart/CHANGELOG.md
@@ -1,3 +1,7 @@
+## 0.1.19 (2026-07-04)
+
+- Release 0.1.19.
+
 ## 0.1.18 (2026-07-04)
 
 - Release 0.1.18.
diff --git a/sdks/flutter/dart/pubspec.yaml b/sdks/flutter/dart/pubspec.yaml
index 89f4baf..a029ef2 100644
--- a/sdks/flutter/dart/pubspec.yaml
+++ b/sdks/flutter/dart/pubspec.yaml
@@ -1,6 +1,6 @@
 name: checkgate_flutter
 description: Checkgate feature-flag SDK for Flutter — local evaluation via Rust FFI.
-version: 0.1.18
+version: 0.1.19
 homepage: https://github.com/thinkgrid-labs/checkgate
 
 environment:
diff --git a/sdks/nodejs/package.json b/sdks/nodejs/package.json
index ced89e6..4d0ec9b 100644
--- a/sdks/nodejs/package.json
+++ b/sdks/nodejs/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@checkgate/node",
-  "version": "0.1.18",
+  "version": "0.1.19",
   "description": "Checkgate feature-flag SDK for Node.js — local evaluation via Rust NAPI.",
   "main": "index.js",
   "types": "index.d.ts",
diff --git a/sdks/react-native/.gitignore b/sdks/react-native/.gitignore
index 5c0ba5b..1acdbac 100644
--- a/sdks/react-native/.gitignore
+++ b/sdks/react-native/.gitignore
@@ -3,3 +3,9 @@
 # fresh by CI before every release — committing it risks it silently drifting
 # out of sync with core/ between releases (as it had, prior to this).
 /rust-core
+
+# Local Gradle build cache — machine-specific, never meant to be committed.
+# Got swept into git at some point and, because package.json's `files` field
+# includes the whole `android/` directory, shipped inside the published npm
+# tarball too (harmless but junk — see v0.1.18 postmortem).
+android/.gradle
diff --git a/sdks/react-native/android/.gradle/8.9/checksums/checksums.lock b/sdks/react-native/android/.gradle/8.9/checksums/checksums.lock
deleted file mode 100644
index d406f5e..0000000
Binary files a/sdks/react-native/android/.gradle/8.9/checksums/checksums.lock and /dev/null differ
diff --git a/sdks/react-native/android/.gradle/8.9/checksums/sha1-checksums.bin b/sdks/react-native/android/.gradle/8.9/checksums/sha1-checksums.bin
deleted file mode 100644
index ec537e9..0000000
Binary files a/sdks/react-native/android/.gradle/8.9/checksums/sha1-checksums.bin and /dev/null differ
diff --git a/sdks/react-native/android/.gradle/8.9/dependencies-accessors/gc.properties b/sdks/react-native/android/.gradle/8.9/dependencies-accessors/gc.properties
deleted file mode 100644
index e69de29..0000000
diff --git a/sdks/react-native/android/.gradle/8.9/executionHistory/executionHistory.lock b/sdks/react-native/android/.gradle/8.9/executionHistory/executionHistory.lock
deleted file mode 100644
index 2b271d5..0000000
Binary files a/sdks/react-native/android/.gradle/8.9/executionHistory/executionHistory.lock and /dev/null differ
diff --git a/sdks/react-native/android/.gradle/8.9/fileChanges/last-build.bin b/sdks/react-native/android/.gradle/8.9/fileChanges/last-build.bin
deleted file mode 100644
index f76dd23..0000000
Binary files a/sdks/react-native/android/.gradle/8.9/fileChanges/last-build.bin and /dev/null differ
diff --git a/sdks/react-native/android/.gradle/8.9/fileHashes/fileHashes.lock b/sdks/react-native/android/.gradle/8.9/fileHashes/fileHashes.lock
deleted file mode 100644
index c890a53..0000000
Binary files a/sdks/react-native/android/.gradle/8.9/fileHashes/fileHashes.lock and /dev/null differ
diff --git a/sdks/react-native/android/.gradle/8.9/gc.properties b/sdks/react-native/android/.gradle/8.9/gc.properties
deleted file mode 100644
index e69de29..0000000
diff --git a/sdks/react-native/android/.gradle/buildOutputCleanup/buildOutputCleanup.lock b/sdks/react-native/android/.gradle/buildOutputCleanup/buildOutputCleanup.lock
deleted file mode 100644
index fdc2cba..0000000
Binary files a/sdks/react-native/android/.gradle/buildOutputCleanup/buildOutputCleanup.lock and /dev/null differ
diff --git a/sdks/react-native/android/.gradle/buildOutputCleanup/cache.properties b/sdks/react-native/android/.gradle/buildOutputCleanup/cache.properties
deleted file mode 100644
index 31ef225..0000000
--- a/sdks/react-native/android/.gradle/buildOutputCleanup/cache.properties
+++ /dev/null
@@ -1,2 +0,0 @@
-#Fri Apr 10 23:03:17 PST 2026
-gradle.version=8.9
diff --git a/sdks/react-native/android/.gradle/vcs-1/gc.properties b/sdks/react-native/android/.gradle/vcs-1/gc.properties
deleted file mode 100644
index e69de29..0000000
diff --git a/sdks/react-native/package.json b/sdks/react-native/package.json
index a2463c1..30b0063 100644
--- a/sdks/react-native/package.json
+++ b/sdks/react-native/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@checkgate/react-native",
-  "version": "0.1.18",
+  "version": "0.1.19",
   "description": "Checkgate feature-flag SDK for React Native — local evaluation via Rust JSI.",
   "main": "index.js",
   "license": "MIT",
diff --git a/sdks/web/package.json b/sdks/web/package.json
index c62f80b..2203f02 100644
--- a/sdks/web/package.json
+++ b/sdks/web/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@checkgate/web",
-  "version": "0.1.18",
+  "version": "0.1.19",
   "description": "Checkgate feature-flag SDK for the web — local evaluation via WebAssembly.",
   "main": "index.js",
   "module": "index.js",
diff --git a/server/src/api/session.rs b/server/src/api/session.rs
index df4e2df..7f7ce0a 100644
--- a/server/src/api/session.rs
+++ b/server/src/api/session.rs
@@ -527,10 +527,17 @@ pub async fn setup_complete(
     ))
 }
 
-/// Returns workspace name — used by the login page to personalise the UI.
+/// Returns workspace name and setup status — public (no session required),
+/// so the frontend can tell "setup already done, go to /login" apart from
+/// "setup not done yet" *before* the user has any session cookie. `/api/auth/me`
+/// can't be used for this on its own: it 401s for anyone without a valid
+/// session, which is exactly the case of someone who needs to log in.
 pub async fn workspace_info(State(state): State<AppState>) -> Json<serde_json::Value> {
     let workspace_name = get_workspace_name(&state).await;
-    Json(serde_json::json!({ "workspace_name": workspace_name }))
+    let is_setup_complete = get_is_setup_complete(&state).await;
+    Json(
+        serde_json::json!({ "workspace_name": workspace_name, "is_setup_complete": is_setup_complete }),
+    )
 }
 
 // ---------------------------------------------------------------------------