diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9bc32bb..c749beb 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -36,6 +36,10 @@ prompt. Write them for users.
   read-only, and when the feed changes one, Run and Paste show you the new commands first.
 - Two devices refreshing the same cloud source at once no longer make duplicate hosts or
   "(conflict)" copies.
+- About links to the documentation (morphgate.com/docs) and the source code on GitHub.
+- Copy buttons (a public key, the recovery key, an invite code, host key details) fall back to
+  another way of copying when the system refuses the first, and say "Couldn't copy" instead of
+  doing nothing when neither works.
 
 ## 0.2.0
 
diff --git a/apps/desktop/e2e/README.md b/apps/desktop/e2e/README.md
index c9827f1..4a569ee 100644
--- a/apps/desktop/e2e/README.md
+++ b/apps/desktop/e2e/README.md
@@ -8,6 +8,7 @@ These run the real AppImage, deb and rpm binaries, not a dev build, and drive th
 | `package.mjs` (deb, rpm) | The binary knows how it was installed, finds the update, and warns that installing asks for an administrator password (installing needs root, so it stops there) |
 | `teams.mjs` | Two apps side by side (Alice and Bob) with a local reference sync server: both turn on sync; Alice creates an organization and a vault and invites Bob; Bob joins only after the owner's fingerprint matches, and Alice confirms him only after his matches; a host saved in the shared vault reaches Bob, his edit reaches Alice; Bob publishes his SSH key; Alice revokes him (the vault leaves his device) and rotates the vault key; members may create vaults; the activity log tells the story. Then Alice offboards Bob against the local sshd: removal and key rotation, his key found and removed from `authorized_keys`, and the host's shared key replaced (she still logs in) |
 | `layout.mjs` | Turns sync on from the offer a new vault gets, fills every page (hosts in a group, a key, a snippet, a tunnel, a team with an invite to a long address), and at 860, 1024, 1280 and 1600 px wide checks that nothing on a page overlaps or runs out of its column. Closing an editor returns to the page it was opened from, and closing a page to the session under it; with no session open, a page takes the tab bar's place |
+| `monkey.mjs` | Only with `E2E_ONLY=monkey`: each package (AppImage, deb, rpm) takes `MONKEY_STEPS` seeded random clicks, typing, keys, selects and resizes over a vault with hosts where nothing listens; any page error, blank page, unanswered call or Rust panic fails it, with the seed and the last steps in `monkey-<package>/failure.txt` (`MONKEY_SEED` repeats it) |
 | `demo.mjs` | Only with `E2E_ONLY=demo`: the README's demo. The AppImage's Hosts page, a click on a host and its recorded session (in a demo shell), drawn by `tools/readme-demo/demo-svg.mjs` as `demo/morphgate.svg` (copy it to `assets/demo/morphgate.svg`) |
 | `mobile.mjs` | The phone layout in a 390 × 844 window: imports a key and saves a host on the phone screens, connects from the host's sheet, interrupts a command with Ctrl from the extra-key row and repeats one with ↑, keeps the session open behind the host list, browses into a folder over SFTP and downloads a file to Downloads, then locks and unlocks on the phone unlock screen |
 
diff --git a/apps/desktop/e2e/appimage.mjs b/apps/desktop/e2e/appimage.mjs
index 0f59487..66771d3 100644
--- a/apps/desktop/e2e/appimage.mjs
+++ b/apps/desktop/e2e/appimage.mjs
@@ -980,6 +980,13 @@ try {
   assert.match(await openAbout(s), new RegExp(`Version ${version} · AppImage`));
   ok(`About: ${version}, AppImage`);
 
+  // Its documentation and its source code, in the browser (browser.sh notes what it's given).
+  await s.clickButton("Documentation ↗");
+  await s.clickButton("Source code on GitHub ↗");
+  const opened = () => (existsSync(process.env.E2E_BROWSER_LOG) ? readFileSync(process.env.E2E_BROWSER_LOG, "utf8") : "");
+  await s.wait(() => (/^https:\/\/morphgate\.com\/docs$/m.test(opened()) && /^https:\/\/github\.com\/Vallic\/MorphGate$/m.test(opened())) || null, "the documentation and the source code opened");
+  ok("About opens the documentation and the source code");
+
   // The third-party notices that come with the app: a crate's, from the generated list.
   await s.clickButton("Open-source licenses");
   await s.wait(() => s.exec(`return document.querySelector(".licenses-list li") ? true : null`), "the license list");
diff --git a/apps/desktop/e2e/browser.sh b/apps/desktop/e2e/browser.sh
index 12f752e..f1bb59a 100755
--- a/apps/desktop/e2e/browser.sh
+++ b/apps/desktop/e2e/browser.sh
@@ -1,4 +1,8 @@
 #!/bin/sh
-# What the app opens sign-in pages with during e2e (MORPHGATE_BROWSER): follows the redirects
-# like a browser, from the identity provider back to the sync server.
-exec curl -sSL --max-time 30 -o /dev/null "$1"
+# What the app opens web pages with during e2e (MORPHGATE_BROWSER): follows the redirects like a
+# browser, from the identity provider back to the sync server. Pages off this computer (the docs,
+# GitHub) aren't fetched; every address is noted in E2E_BROWSER_LOG when it's set.
+[ -n "${E2E_BROWSER_LOG:-}" ] && echo "$1" >>"$E2E_BROWSER_LOG"
+case "$1" in
+  http://127.0.0.1[:/]* | http://localhost[:/]*) exec curl -sSL --max-time 30 -o /dev/null "$1" ;;
+esac
diff --git a/apps/desktop/e2e/monkey.mjs b/apps/desktop/e2e/monkey.mjs
new file mode 100644
index 0000000..b006eea
--- /dev/null
+++ b/apps/desktop/e2e/monkey.mjs
@@ -0,0 +1,231 @@
+// A monkey test of a packaged build: a vault with hosts, groups, keys and snippets, then a seeded
+// random walk through the app (clicks on whatever is there, typing, keys, selects, the window
+// resized), checking after every step that the page threw nothing, still renders and still
+// answers. A failure names the seed, the step and the last steps taken, with a screenshot.
+//
+//   node monkey.mjs <binary> <out dir> <label>
+//
+// MONKEY_STEPS (500) and MONKEY_SEED (random, printed) repeat a run. Its hosts point where
+// nothing listens (no server a random walk could change files on), and what would end the walk
+// or leave the window (locking, installing an update, native file dialogs, erasing the device)
+// isn't clicked.
+
+import { mkdirSync, writeFileSync } from "node:fs";
+import { createVault, session } from "./webdriver.mjs";
+
+const [app, out, label] = process.argv.slice(2);
+const STEPS = Number(process.env.MONKEY_STEPS || 500);
+const SEED = Number(process.env.MONKEY_SEED || Math.floor(Math.random() * 2 ** 31));
+const PASSWORD = "correct horse battery staple";
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+mkdirSync(out, { recursive: true });
+
+// mulberry32: the same seed, the same walk.
+let state = SEED >>> 0;
+const random = () => {
+  state = (state + 0x6d2b79f5) >>> 0;
+  let t = state;
+  t = Math.imul(t ^ (t >>> 15), t | 1);
+  t ^= t + Math.imul(t ^ (t >>> 7), t | 61);
+  return ((t ^ (t >>> 14)) >>> 0) / 4294967296;
+};
+const pick = (list) => list[Math.floor(random() * list.length)];
+const between = (lo, hi) => lo + Math.floor(random() * (hi - lo + 1));
+
+/** Something a person might type, or a cat walking over the keyboard. */
+function gibberish() {
+  return pick([
+    () => Array.from({ length: between(1, 12) }, () => pick("abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789")).join(""),
+    () => String(between(-99999, 99999)),
+    () => pick(["web-1", "db.example.com", "10.0.0.1", "::1", "user@host", "~/.ssh/id_ed25519", "https://x.example/feed", "*.example.com", "0", "-1", "65536"]),
+    () => Array.from({ length: between(1, 20) }, () => String.fromCharCode(between(32, 126))).join(""),
+    () => pick(["čćžšđ", "日本語のホスト", "émoji 🚀🔑", "‮RTL", "a\u0000b", "<b>bold</b>", "' OR 1=1 --", "${HOME}", "%s%n", "\\\\server\\share"]),
+    () => "x".repeat(between(200, 2000)),
+    () => "",
+  ])();
+}
+
+// Clicked: anything that takes a click, unless it ends the walk or leaves the window.
+const CLICKABLE = "button, a[href], [role=tab], [role=menuitem], [role=radio], input[type=checkbox], summary, .lrow, .row-main, label.check";
+const AVOID =
+  /^(Lock|Install and restart|Quit)\b|lock (now|the vault)|erase|reset (this|the) (device|app)|delete (my|this|your) account|delete account|sign out everywhere|export|save \.cast|save .*csv|example csv|choose (a )?file|choose…|browse…|upload|download|open file|pick a file/i;
+
+const PAGE_HOOKS = `
+  if (!window.__monkey) {
+    window.__monkey = [];
+    window.addEventListener("error", (e) => window.__monkey.push("error: " + (e.message || e.error)));
+    window.addEventListener("unhandledrejection", (e) => window.__monkey.push("unhandled rejection: " + (e.reason?.message ?? e.reason)));
+  }
+  return true;`;
+
+const s = await session(app);
+const trail = [];
+const counts = {};
+let step = 0;
+
+/** What the walk does next, and what it did. */
+async function act() {
+  const roll = random();
+  if (roll < 0.56) {
+    // Something visible and enabled to click, by its index among them.
+    const n = await s.exec(
+      `const avoid = new RegExp(arguments[1], "i");
+       window.__targets = [...document.querySelectorAll(arguments[0])].filter((e) => {
+         const r = e.getBoundingClientRect();
+         if (!r.width || !r.height || e.disabled || e.closest("[inert], [aria-hidden=true]")) return false;
+         if (e.matches("input[type=file]") || e.closest("label")?.querySelector("input[type=file]")) return false;
+         const text = (e.getAttribute("aria-label") || e.innerText || e.title || "").trim();
+         return !avoid.test(text);
+       });
+       return window.__targets.length`,
+      CLICKABLE,
+      AVOID.source,
+    );
+    if (!n) return "click: nothing to click";
+    const i = Math.floor(random() * n);
+    return s.exec(
+      `const e = window.__targets[arguments[0]];
+       const what = (e.getAttribute("aria-label") || e.innerText || e.title || e.tagName).trim().replace(/\\s+/g, " ").slice(0, 60);
+       e.scrollIntoView({ block: "nearest" }); e.click(); return "click: " + what`,
+      i,
+    );
+  }
+  if (roll < 0.76) {
+    const text = gibberish();
+    const typed = await s.exec(
+      `const fields = [...document.querySelectorAll("input:not([type=checkbox]):not([type=radio]):not([type=file]), textarea")]
+         .filter((e) => { const r = e.getBoundingClientRect(); return r.width && r.height && !e.disabled && !e.readOnly; });
+       if (!fields.length) return null;
+       const e = fields[Math.floor(arguments[1] * fields.length)];
+       const proto = e instanceof HTMLTextAreaElement ? HTMLTextAreaElement.prototype : HTMLInputElement.prototype;
+       const value = arguments[2] ? e.value + arguments[0] : arguments[0];
+       e.focus();
+       Object.getOwnPropertyDescriptor(proto, "value").set.call(e, value);
+       e.dispatchEvent(new Event("input", { bubbles: true }));
+       return (e.getAttribute("aria-label") || e.placeholder || e.name || e.type).slice(0, 40)`,
+      text,
+      random(),
+      random() < 0.3,
+    );
+    return typed === null ? "type: no field" : `type into ${typed}: ${JSON.stringify(text.slice(0, 40))}`;
+  }
+  if (roll < 0.84) {
+    const key = pick(["Escape", "Enter", "Tab", "ArrowDown", "ArrowUp", "Backspace", " "]);
+    return s.exec(
+      `const e = document.activeElement || document.body;
+       const init = { key: arguments[0], bubbles: true, cancelable: true };
+       e.dispatchEvent(new KeyboardEvent("keydown", init));
+       e.dispatchEvent(new KeyboardEvent("keyup", init));
+       // Enter in a form submits it, as a browser would.
+       if (arguments[0] === "Enter" && e.form && e.tagName !== "TEXTAREA") e.form.requestSubmit();
+       return "key: " + arguments[0] + " on " + (e.getAttribute?.("aria-label") || e.tagName)`,
+      key,
+    );
+  }
+  if (roll < 0.9) {
+    return s.exec(
+      `const all = [...document.querySelectorAll("select")].filter((e) => e.getBoundingClientRect().width && !e.disabled && e.options.length);
+       if (!all.length) return "select: none";
+       const e = all[Math.floor(arguments[0] * all.length)];
+       const o = e.options[Math.floor(arguments[1] * e.options.length)];
+       Object.getOwnPropertyDescriptor(HTMLSelectElement.prototype, "value").set.call(e, o.value);
+       e.dispatchEvent(new Event("change", { bubbles: true }));
+       return "select: " + o.text.slice(0, 40)`,
+      random(),
+      random(),
+    );
+  }
+  if (roll < 0.95) {
+    // Typing into a session (never Enter: no command runs).
+    const text = gibberish().replace(/[\r\n]/g, "").slice(0, 80) || "\u0003";
+    const sent = await s.exec(
+      `const t = document.querySelector(".terminal:not([hidden]) .xterm-helper-textarea");
+       if (!t) return false;
+       t.focus(); t.dispatchEvent(new InputEvent("input", { data: arguments[0], inputType: "insertText", bubbles: true })); return true`,
+      text,
+    );
+    return sent ? `terminal: ${JSON.stringify(text.slice(0, 30))}` : "terminal: none open";
+  }
+  if (roll < 0.98) {
+    return s.exec(
+      `const items = [...document.querySelectorAll(".sidebar-nav button, .m-tabbar button, nav button")].filter((b) => b.getBoundingClientRect().width);
+       if (!items.length) return "nav: none";
+       const b = items[Math.floor(arguments[0] * items.length)]; b.click(); return "nav: " + b.innerText.trim().split("\\n")[0]`,
+      random(),
+    );
+  }
+  const [w, h] = pick([
+    [390, 844],
+    [640, 800],
+    [860, 700],
+    [1024, 700],
+    [1280, 800],
+    [1600, 900],
+  ]);
+  await s.resize(w, h);
+  return `resize: ${w}×${h}`;
+}
+
+async function fail(why) {
+  const report = [
+    `${label}: ${why}`,
+    `seed ${SEED}, step ${step} of ${STEPS} (MONKEY_SEED=${SEED} repeats it)`,
+    "last steps:",
+    ...trail.slice(-25).map((t) => `  ${t}`),
+  ].join("\n");
+  writeFileSync(`${out}/failure.txt`, `${report}\n`);
+  await s.screenshot(`${out}/failure.png`).catch(() => {});
+  throw new Error(report);
+}
+
+try {
+  await createVault(s, PASSWORD);
+  await s.resize(1280, 800);
+  const invoke = (cmd, args) => s.exec(`return window.__TAURI_INTERNALS__.invoke(arguments[0], arguments[1])`, cmd, args);
+  // Something on every page: a key, groups, hosts (where nothing listens), a snippet, a tunnel.
+  const key = await invoke("key_generate", { label: "monkey", vaultId: null });
+  const prod = (await invoke("group_save", { input: { name: "Production" } })).id;
+  await invoke("group_save", { input: { name: "Staging" } });
+  const auth = { kind: "key", keyId: key.id };
+  for (const [name, addr, groupId] of [
+    ["web-1", "127.0.0.9", prod],
+    ["web-2", "127.0.0.10", prod],
+    ["db-1", "127.0.0.11", null],
+  ]) {
+    await invoke("host_save", { input: { label: name, hostname: addr, port: 1, user: "deploy", auth, groupId, tags: ["monkey"] } });
+  }
+  await invoke("snippet_save", { input: { name: "Disk", body: "df -h", tags: ["ops"] } });
+  await invoke("plugin:event|emit", { event: "vault-changed", payload: null });
+  await sleep(500);
+  console.log(`  ${label}: seed ${SEED}, ${STEPS} steps`);
+
+  for (step = 1; step <= STEPS; step++) {
+    await s.exec(PAGE_HOOKS);
+    let did;
+    try {
+      did = await act();
+    } catch (e) {
+      // The page went away under a script (a click that closed what it was in): note it, go on.
+      did = `(${String(e.message).slice(0, 80)})`;
+    }
+    trail.push(`${step}. ${did}`);
+    const kind = did.split(/[: ]/)[0];
+    counts[kind] = (counts[kind] ?? 0) + 1;
+    await sleep(between(40, 220));
+    let health;
+    try {
+      health = await s.exec(
+        `const errors = (window.__monkey || []).splice(0);
+         const root = document.getElementById("root");
+         return { errors, rendered: !!root && root.childElementCount > 0 }`,
+      );
+    } catch (e) {
+      await fail(`the app stopped answering: ${e.message}`);
+    }
+    if (health.errors.length) await fail(`the page threw: ${health.errors.join(" | ")}`);
+    if (!health.rendered) await fail("the page went blank (a render crashed)");
+  }
+  console.log(`  ✓ ${label}: ${STEPS} random steps, nothing thrown (${Object.entries(counts).map(([k, v]) => `${k} ${v}`).join(", ")}), seed ${SEED}`);
+} finally {
+  await s.close();
+}
diff --git a/apps/desktop/e2e/run.sh b/apps/desktop/e2e/run.sh
index d530b0e..1ed0f01 100755
--- a/apps/desktop/e2e/run.sh
+++ b/apps/desktop/e2e/run.sh
@@ -200,7 +200,7 @@ if want appimage; then
   # launch (binfmt), the app's own relaunch after an update included. TMPDIR: where an AppImage
   # unpacks to run, in the run's folder rather than /tmp, removed when the run ends.
   mkdir -p "$run/appimage/tmp"
-  APPIMAGE_EXTRACT_AND_RUN=1 APPIMAGELAUNCHER_DISABLE=1 TMPDIR="$run/appimage/tmp" MORPHGATE_BROWSER="$here/browser.sh" \
+  APPIMAGE_EXTRACT_AND_RUN=1 APPIMAGELAUNCHER_DISABLE=1 TMPDIR="$run/appimage/tmp" MORPHGATE_BROWSER="$here/browser.sh" E2E_BROWSER_LOG="$run/appimage/browser.log" \
     dbus-run-session -- "$here/session.sh" "$run/appimage" \
     node "$here/appimage.mjs" "$run/appimage/$appimage" "$run/appimage/shots" "$run/feed" \
     "$run/sshd/client_key" "$ssh_port" "$(id -un)" "$version" "$next" 2>"$run/appimage/stderr.log"
@@ -254,6 +254,25 @@ if want mobile; then
     "$run/mobile/key" "$ssh_port" "$(id -un)" 2>"$run/mobile/stderr.log"
 fi
 
+# A monkey test of each package, only when asked for: E2E_ONLY=monkey (MONKEY_STEPS, MONKEY_SEED).
+if [ -n "${E2E_ONLY:-}" ] && want monkey; then
+  for pkg in appimage deb rpm; do
+    echo "e2e: monkey ($pkg)"
+    dir="$run/monkey-$pkg"
+    mkdir -p "$dir/root" "$dir/tmp"
+    case $pkg in
+      appimage) cp "$artifacts/$appimage" "$dir/" && bin="$dir/$appimage" ;;
+      deb) (cd "$dir/root" && ar x "$artifacts/$deb" && tar -xzf data.tar.gz) && bin="$dir/root/usr/bin/morphgate" ;;
+      rpm) (cd "$dir/root" && rpm2cpio "$artifacts/$rpm" | cpio -idm --quiet) && bin="$dir/root/usr/bin/morphgate" ;;
+    esac
+    APPIMAGE_EXTRACT_AND_RUN=1 APPIMAGELAUNCHER_DISABLE=1 TMPDIR="$dir/tmp" MORPHGATE_BROWSER="$here/browser.sh" \
+      dbus-run-session -- "$here/session.sh" "$dir" node "$here/monkey.mjs" "$bin" "$dir" "$pkg" 2>"$dir/stderr.log"
+    # A panic in the app's Rust side counts too.
+    if grep -h "panicked at" "$dir"/*.log; then echo "e2e: monkey ($pkg): the app panicked" >&2; exit 1; fi
+    rm -rf "$dir/tmp"
+  done
+fi
+
 # The README's demo (assets/demo/morphgate.svg), only when asked for: E2E_ONLY=demo.
 if [ -n "${E2E_ONLY:-}" ] && want demo; then
   echo "e2e: demo (the AppImage's Hosts page and a session, drawn for the README)"
diff --git a/apps/desktop/src/AboutPanel.tsx b/apps/desktop/src/AboutPanel.tsx
index 4cae962..b51dcb4 100644
--- a/apps/desktop/src/AboutPanel.tsx
+++ b/apps/desktop/src/AboutPanel.tsx
@@ -1,5 +1,5 @@
 import { useEffect, useState } from "react";
-import { dateText, device, errorText, updates, type About, type UpdateInfo, type UpdateProgress } from "./api";
+import { dateText, device, errorText, openLink, updates, type About, type UpdateInfo, type UpdateProgress } from "./api";
 import { Licenses } from "./Licenses";
 import { Logo } from "./Logo";
 import { mobileOs, onIos } from "./mobile/useMobile";
@@ -25,6 +25,10 @@ const PACKAGE_NAMES: Record<NonNullable<About["package"]>, string> = {
 
 const mib = (n: number) => `${(n / 1048576).toFixed(1)} MiB`;
 
+/** Where people read about MorphGate, and where its code is. */
+const DOCS = "https://morphgate.com/docs";
+const SOURCE = "https://github.com/Vallic/MorphGate";
+
 /** Version, and updates from MorphGate's releases. */
 export function AboutPanel({ update, onUpdate, onAutoCheckChanged, onClose }: Props) {
   const [about, setAbout] = useState<About | null>(null);
@@ -92,9 +96,17 @@ export function AboutPanel({ update, onUpdate, onAutoCheckChanged, onClose }: Pr
           </div>
         </div>
         <p className="hint">SSH client with an end-to-end encrypted vault. Free software under the Mozilla Public License 2.0 · morphgate.com</p>
-        <button type="button" className="link align-start" onClick={() => setLicenses(true)}>
-          Open-source licenses
-        </button>
+        <div className="row wrap about-links">
+          <button type="button" className="link" onClick={() => void openLink(DOCS).catch((e) => setError(errorText(e)))}>
+            Documentation ↗
+          </button>
+          <button type="button" className="link" onClick={() => void openLink(SOURCE).catch((e) => setError(errorText(e)))}>
+            Source code on GitHub ↗
+          </button>
+          <button type="button" className="link" onClick={() => setLicenses(true)}>
+            Open-source licenses
+          </button>
+        </div>
         <hr className="divider" />
         <h2 className="section-title">Updates</h2>
         {mobileOs ? (
diff --git a/apps/desktop/src/HostKeyDialog.tsx b/apps/desktop/src/HostKeyDialog.tsx
index 25f93b4..c6ecbff 100644
--- a/apps/desktop/src/HostKeyDialog.tsx
+++ b/apps/desktop/src/HostKeyDialog.tsx
@@ -1,5 +1,6 @@
 import { useEffect, useRef, useState } from "react";
 import { keyType, type ChangedHostKey, type HostKeyPrompt } from "./api";
+import { copyText } from "./clipboard";
 
 const where = (host: string, port: number) => (port === 22 ? host : `[${host}]:${port}`);
 
@@ -51,6 +52,7 @@ export function HostKeyDialog({ prompt, onAnswer }: { prompt: HostKeyPrompt; onA
 export function HostKeyChangedDialog({ changed, label, onClose }: { changed: ChangedHostKey; label?: string; onClose: () => void }) {
   const ref = useRef<HTMLDialogElement>(null);
   const [copied, setCopied] = useState(false);
+  const [copyFailed, setCopyFailed] = useState(false);
 
   useEffect(() => {
     ref.current?.showModal();
@@ -66,11 +68,7 @@ export function HostKeyChangedDialog({ changed, label, onClose }: { changed: Cha
     .filter(Boolean)
     .join("\n");
 
-  const copy = () =>
-    void navigator.clipboard.writeText(details).then(
-      () => setCopied(true),
-      () => {},
-    );
+  const copy = () => void copyText(details).then((ok) => (ok ? setCopied(true) : setCopyFailed(true)));
 
   return (
     <dialog
@@ -133,7 +131,7 @@ export function HostKeyChangedDialog({ changed, label, onClose }: { changed: Cha
         </ol>
       </div>
       <div className="actions">
-        <button onClick={copy}>{copied ? "Copied" : "Copy details"}</button>
+        <button onClick={copy}>{copied ? "Copied" : copyFailed ? "Couldn't copy" : "Copy details"}</button>
         <button className="primary" autoFocus onClick={onClose}>
           Close
         </button>
diff --git a/apps/desktop/src/KeyPanel.tsx b/apps/desktop/src/KeyPanel.tsx
index f5165da..634a751 100644
--- a/apps/desktop/src/KeyPanel.tsx
+++ b/apps/desktop/src/KeyPanel.tsx
@@ -2,6 +2,7 @@ import { useState, type FormEvent } from "react";
 import { errorText, keys as keysApi, type CertInfo, type KeySource, type KeyView, type VaultEntry } from "./api";
 import { FilePick, type PickedFile } from "./FilePick";
 import { isReadOnly, personalVault, VaultField } from "./VaultField";
+import { copyText } from "./clipboard";
 
 /** A certificate's validity now, as a line and a tone. */
 export function certificateValidity(c: CertInfo, now = Date.now() / 1000): { text: string; tone: "ok" | "warn" | "error" } {
@@ -222,6 +223,7 @@ export function KeyDetail({
 }) {
   const readOnly = isReadOnly(vaults, k.vaultId);
   const [copied, setCopied] = useState(false);
+  const [copyFailed, setCopyFailed] = useState(false);
   const [error, setError] = useState("");
   const [confirmDelete, setConfirmDelete] = useState(false);
 
@@ -274,9 +276,9 @@ export function KeyDetail({
           <button
             type="button"
             className="primary"
-            onClick={() => void navigator.clipboard?.writeText(k.publicKey).then(() => setCopied(true))}
+            onClick={() => void copyText(k.publicKey).then((ok) => (ok ? setCopied(true) : setCopyFailed(true)))}
           >
-            {copied ? "Copied" : "Copy public key"}
+            {copied ? "Copied" : copyFailed ? "Couldn't copy" : "Copy public key"}
           </button>
         </div>
       </div>
diff --git a/apps/desktop/src/TeamsPanel.tsx b/apps/desktop/src/TeamsPanel.tsx
index 7131ca4..fb5927a 100644
--- a/apps/desktop/src/TeamsPanel.tsx
+++ b/apps/desktop/src/TeamsPanel.tsx
@@ -43,6 +43,7 @@ import { Icon } from "./Icon";
 import { Cell, Chip, NameCell, Table, TextAction, TRow } from "./ListParts";
 import { Page } from "./Page";
 import { mobileOs } from "./mobile/useMobile";
+import { copyText } from "./clipboard";
 
 interface Props {
   vaults: VaultEntry[];
@@ -1023,6 +1024,7 @@ function InviteDialog({
   const [grants, setGrants] = useState<Record<string, Access>>({});
   const [sent, setSent] = useState<InviteView[] | null>(null);
   const [copied, setCopied] = useState("");
+  const [copyFailed, setCopyFailed] = useState("");
   const [busy, setBusy] = useState(false);
   const [error, setError] = useState("");
 
@@ -1076,9 +1078,9 @@ function InviteDialog({
                     <button
                       type="button"
                       className="secondary small-button"
-                      onClick={() => void navigator.clipboard?.writeText(i.token ?? "").then(() => setCopied(i.id))}
+                      onClick={() => void copyText(i.token ?? "").then((ok) => (ok ? setCopied(i.id) : setCopyFailed(i.id)))}
                     >
-                      {copied === i.id ? "Copied" : "Copy code"}
+                      {copied === i.id ? "Copied" : copyFailed === i.id ? "Couldn't copy" : "Copy code"}
                     </button>
                   </div>
                 </div>
diff --git a/apps/desktop/src/VaultGate.tsx b/apps/desktop/src/VaultGate.tsx
index 39d822e..88b11ed 100644
--- a/apps/desktop/src/VaultGate.tsx
+++ b/apps/desktop/src/VaultGate.tsx
@@ -21,6 +21,7 @@ import { isTotpCode, TotpCode } from "./TotpCode";
 import appIcon from "./assets/brand/app-icon.svg";
 import { MobileUnlock } from "./mobile/MobileUnlock";
 import { onPhone, useMobile } from "./mobile/useMobile";
+import { copyText } from "./clipboard";
 
 const MIN_CHARS = 10;
 
@@ -292,6 +293,7 @@ const CLIPBOARD_SECONDS = 60;
 export function RecoveryCode({ code, action, onDone }: { code: string; action: string; onDone: () => void }) {
   const [saved, setSaved] = useState(false);
   const [copied, setCopied] = useState(false);
+  const [copyFailed, setCopyFailed] = useState(false);
   // Copied: cleared on leaving this screen (a click, so it works everywhere), or after a minute.
   const clear = () => {
     if (copied) void navigator.clipboard?.writeText("").catch(() => {});
@@ -308,8 +310,8 @@ export function RecoveryCode({ code, action, onDone }: { code: string; action: s
           <span key={i}>{group}</span>
         ))}
       </div>
-      <button type="button" className="secondary" onClick={() => void navigator.clipboard?.writeText(code).then(() => setCopied(true))}>
-        {copied ? "Copied" : "Copy to clipboard"}
+      <button type="button" className="secondary" onClick={() => void copyText(code).then((ok) => (ok ? setCopied(true) : setCopyFailed(true)))}>
+        {copied ? "Copied" : copyFailed ? "Couldn't copy: write it down" : "Copy to clipboard"}
       </button>
       {copied && <p className="hint">MorphGate clears the clipboard when you continue, so the key doesn't stay there.</p>}
       <label className="check">
diff --git a/apps/desktop/src/VpnPanel.tsx b/apps/desktop/src/VpnPanel.tsx
index f4baf98..0351267 100644
--- a/apps/desktop/src/VpnPanel.tsx
+++ b/apps/desktop/src/VpnPanel.tsx
@@ -3,6 +3,7 @@ import { errorText, OC_PROTOCOLS, VPN_KINDS, vpnKindName, vpns, type HostView, t
 import { FilePick, type PickedFile } from "./FilePick";
 import { isReadOnly, personalVault, VaultField } from "./VaultField";
 import { mobileOs } from "./mobile/useMobile";
+import { copyText } from "./clipboard";
 
 interface Props {
   vpn?: VpnView;
@@ -48,6 +49,7 @@ export function VpnPanel({ vpn, hosts, vaults, onSaved, onChanged, onDeleted, on
   const [error, setError] = useState("");
   const [test, setTest] = useState<string | null>(null);
   const [copied, setCopied] = useState(false);
+  const [copyFailed, setCopyFailed] = useState(false);
   const [confirmDelete, setConfirmDelete] = useState(false);
 
   const users = vpn ? hosts.filter((h) => h.vpnId === vpn.id) : [];
@@ -149,8 +151,13 @@ export function VpnPanel({ vpn, hosts, vaults, onSaved, onChanged, onDeleted, on
                 <dt>Your key</dt>
                 <dd className="mono key-line">
                   {vpn.publicKey}
-                  <button type="button" className="icon small" title="Copy public key" onClick={() => void navigator.clipboard?.writeText(vpn.publicKey ?? "").then(() => setCopied(true))}>
-                    {copied ? "✓" : "⧉"}
+                  <button
+                    type="button"
+                    className="icon small"
+                    title={copyFailed ? "Couldn't copy: select the key" : "Copy public key"}
+                    onClick={() => void copyText(vpn.publicKey ?? "").then((ok) => (ok ? setCopied(true) : setCopyFailed(true)))}
+                  >
+                    {copied ? "✓" : copyFailed ? "!" : "⧉"}
                   </button>
                 </dd>
               </>
diff --git a/apps/desktop/src/clipboard.ts b/apps/desktop/src/clipboard.ts
new file mode 100644
index 0000000..e04e440
--- /dev/null
+++ b/apps/desktop/src/clipboard.ts
@@ -0,0 +1,25 @@
+/** Puts `text` on the clipboard: through the Clipboard API, else the older copy command (WebKit
+ * refuses the first where it doesn't count the click as the person's, or without a permission).
+ * False when neither worked, so the button can say so instead of nothing happening. */
+export async function copyText(text: string): Promise<boolean> {
+  try {
+    await navigator.clipboard.writeText(text);
+    return true;
+  } catch {
+    // The older way, below.
+  }
+  const area = document.createElement("textarea");
+  area.value = text;
+  area.setAttribute("readonly", "");
+  area.style.position = "fixed";
+  area.style.opacity = "0";
+  document.body.appendChild(area);
+  area.select();
+  try {
+    return document.execCommand("copy");
+  } catch {
+    return false;
+  } finally {
+    area.remove();
+  }
+}
diff --git a/apps/desktop/src/styles.css b/apps/desktop/src/styles.css
index ad0699b..4476b58 100644
--- a/apps/desktop/src/styles.css
+++ b/apps/desktop/src/styles.css
@@ -1774,6 +1774,12 @@ dialog.sheet .actions .hint {
   margin: 2px 0 0;
 }
 
+/* Documentation, source code, licenses: the links' text lines up with the text above. */
+.about-links {
+  gap: 2px 14px;
+  margin-left: -4px;
+}
+
 .update-notes {
   max-height: 180px;
   overflow: auto;
diff --git a/docs/development.md b/docs/development.md
index 53ec816..16f7870 100644
--- a/docs/development.md
+++ b/docs/development.md
@@ -99,6 +99,7 @@ apps/desktop/e2e/run.sh                                   # builds test packages
 E2E_SKIP_BUILD=1 apps/desktop/e2e/run.sh                  # reuses the last build
 E2E_SKIP_BUILD=1 E2E_ONLY="teams mobile" apps/desktop/e2e/run.sh   # appimage, rpm, deb, teams, layout, mobile
 E2E_SKIP_BUILD=1 E2E_ONLY=demo apps/desktop/e2e/run.sh    # only when asked: the README's demo
+E2E_SKIP_BUILD=1 E2E_ONLY=monkey MONKEY_STEPS=1500 apps/desktop/e2e/run.sh   # only when asked: a monkey test of each package
 ```
 
 | Scenario | Checks |
@@ -108,6 +109,7 @@ E2E_SKIP_BUILD=1 E2E_ONLY=demo apps/desktop/e2e/run.sh    # only when asked: the
 | `teams.mjs` | Three apps (`E2E_PEOPLE="alice bob carol"`; Carol's app is Bob's second device) and the reference server: sync, an organization, invites with fingerprint checks, shared edits, moving items, published member keys, revocation and rotation, policies, the activity log and its export, device approval, attachments, offboarding against the sshd, shared credentials and tmux sessions, single sign-on against `idp.mjs`, the data export, signing a device out, deleting accounts |
 | `layout.mjs` | Every page filled, at 860, 1024, 1280 and 1600 px: nothing overlaps or leaves its column; closing editors and pages returns where they came from |
 | `mobile.mjs` | The phone layout in a 390 × 844 window ([Platforms and mobile](features/platforms-and-mobile.md#tests)) |
+| `monkey.mjs` (`E2E_ONLY=monkey` only) | A monkey test of the AppImage, the deb and the rpm in turn: a vault with a key, groups, hosts (pointing where nothing listens, so no server's files are in reach) and a snippet, then `MONKEY_STEPS` (500) seeded random steps: clicks on whatever is enabled, typing anything from digits to emoji and 2,000-character strings, Escape, Enter (submitting forms), Tab and arrows, selects, typing into sessions (never Enter), the sidebar, window sizes from a phone's to 1600 px. After every step the page must have thrown nothing (errors and unhandled promise rejections), still render and still answer; afterwards no log may hold a Rust panic. It doesn't click what ends the walk or opens a native dialog (Lock, Install and restart, file pickers, exports, erasing). A failure writes `failure.txt` (the seed, the step and the last 25 steps) and `failure.png` in `monkey-<package>/`; `MONKEY_SEED` repeats a walk |
 | `demo.mjs` (`E2E_ONLY=demo` only) | The README's demo: the AppImage with a few hosts in groups. Its Hosts page is captured as shapes (`tools/readme-demo/snapshot.js`: boxes, text and icons where the layout put them), web-1 is clicked, and its session view is captured and recorded by the app's session recording (the login command runs a clean bash with a demo prompt in a demo home). `tools/readme-demo/demo-svg.mjs` draws both scenes, a pointer's click and the replayed session (xterm.js headless; each row's states are a strip a CSS animation steps through) as one animated SVG in the app's fonts. This machine's user and loopback address are swapped for demo ones, and nothing that still shows them or your home folder is saved. Copy `target/e2e/run-<time>/demo/morphgate.svg` to `assets/demo/morphgate.svg` |
 
 What `run.sh` sets up, all on loopback and on free ports (`E2E_SSH_PORT`, `E2E_FEED_PORT`, `E2E_SYNC_PORT`, `E2E_IDP_PORT`, `E2E_VALLIC_PORT`, `E2E_DRIVER_PORT` pin them):
diff --git a/docs/features/updates.md b/docs/features/updates.md
index badf138..2d16eaf 100644
--- a/docs/features/updates.md
+++ b/docs/features/updates.md
@@ -50,6 +50,7 @@ After installing, `app.restart()` quits. On the way out the shell stops tunnels,
 | Control | Does |
 | --- | --- |
 | Version line | "Version 0.2.0 · AppImage" (`PACKAGE_NAMES`: AppImage, Debian package, RPM package, macOS app, Windows installer (MSI), Windows installer), or "· development build". Phones show the version alone |
+| **Documentation ↗**, **Source code on GitHub ↗** | `https://morphgate.com/docs` and `https://github.com/Vallic/MorphGate`, in the browser (`open_link`) |
 | **Open-source licenses** | The third-party notices ([below](#open-source-licenses)) |
 | **Check for updates automatically** | `set_auto_update_check`. Hint: "At launch and twice a day MorphGate asks GitHub for the latest release. Nothing from your vault is sent. Updates are signed, and MorphGate installs only ones signed with its key." |
 | Update notice | "MorphGate X is available", "Released …", and the release notes |