/create-workspace
Provision a private workspace
Access is gated by a private creation code. Passwords are hashed on the server, and a signed `httpOnly` session cookie is created automatically after the workspace is saved.
Security
Private-first flow
This setup avoids public signup, keeps credentials server-side, and prepares the exact workspace session model we will reuse for login and protected pages.
Existing workspace?
Continue to login
If the workspace already exists, use the private login flow instead.
Go to login