diff --git a/.lane/memory/apps/app/src/settings.tsx/01M5AYX7F0E4JW72ECJTK6SNZK-every-provider-link-opens-se.md b/.lane/memory/apps/app/src/settings.tsx/01M5AYX7F0E4JW72ECJTK6SNZK-every-provider-link-opens-se.md
index e71d4787..4923947d 100644
--- a/.lane/memory/apps/app/src/settings.tsx/01M5AYX7F0E4JW72ECJTK6SNZK-every-provider-link-opens-se.md
+++ b/.lane/memory/apps/app/src/settings.tsx/01M5AYX7F0E4JW72ECJTK6SNZK-every-provider-link-opens-se.md
@@ -4,9 +4,9 @@ anchor: function Settings
 created: 2026-10-19T20:51:03Z
 norm: '1'
 sig: 8d6f8142ef1a23f2
-body_hash: ab1332a896bdd893
-raw_hash: b048e59ec08c6130
-vouched: 2026-10-19T21:09:57Z
+body_hash: 96040bd24f7ca57e
+raw_hash: 8e414b5bdc84fe31
+vouched: 2026-10-22T15:02:42Z
 lines: 325-537
 ---
 
diff --git a/.lane/memory/apps/app/src/settings.tsx/01M5AZ0WJH0JC0ANYXJZEBSZFF-section-buttons-focus-themse.md b/.lane/memory/apps/app/src/settings.tsx/01M5AZ0WJH0JC0ANYXJZEBSZFF-section-buttons-focus-themse.md
index 24a2e498..7fe01c43 100644
--- a/.lane/memory/apps/app/src/settings.tsx/01M5AZ0WJH0JC0ANYXJZEBSZFF-section-buttons-focus-themse.md
+++ b/.lane/memory/apps/app/src/settings.tsx/01M5AZ0WJH0JC0ANYXJZEBSZFF-section-buttons-focus-themse.md
@@ -4,9 +4,9 @@ anchor: function Settings
 created: 2026-10-19T20:53:03Z
 norm: '1'
 sig: 8d6f8142ef1a23f2
-body_hash: ab1332a896bdd893
-raw_hash: b048e59ec08c6130
-vouched: 2026-10-19T21:09:57Z
+body_hash: 96040bd24f7ca57e
+raw_hash: 8e414b5bdc84fe31
+vouched: 2026-10-22T15:02:42Z
 lines: 325-545
 ---
 
diff --git a/.lane/memory/apps/host/src/gateway.ts/01M4YT9Z8YJ2ZWZCVB752WDCFF-workers-and-agent-shells-fin.md b/.lane/memory/apps/host/src/gateway.ts/01M4YT9Z8YJ2ZWZCVB752WDCFF-workers-and-agent-shells-fin.md
index 179d65da..e6435e12 100644
--- a/.lane/memory/apps/host/src/gateway.ts/01M4YT9Z8YJ2ZWZCVB752WDCFF-workers-and-agent-shells-fin.md
+++ b/.lane/memory/apps/host/src/gateway.ts/01M4YT9Z8YJ2ZWZCVB752WDCFF-workers-and-agent-shells-fin.md
@@ -4,9 +4,9 @@ anchor: function serve
 created: 2026-10-15T03:39:45Z
 norm: '1'
 sig: 171797818ef4d836
-body_hash: 50b83460ae5ee675
-raw_hash: f38372c6ca8389a3
-vouched: 2026-10-22T14:33:27Z
+body_hash: 1332a8dc2a8a58e7
+raw_hash: 99138b0aa8226285
+vouched: 2026-10-22T15:02:43Z
 lines: 668-751
 ---
 
diff --git a/.lane/memory/apps/host/src/gateway.ts/01M4ZH1NMBK54TCB970R3AJ1X1-a-loopback-host-must-not-cal.md b/.lane/memory/apps/host/src/gateway.ts/01M4ZH1NMBK54TCB970R3AJ1X1-a-loopback-host-must-not-cal.md
index 0cb7805d..84f37fe3 100644
--- a/.lane/memory/apps/host/src/gateway.ts/01M4ZH1NMBK54TCB970R3AJ1X1-a-loopback-host-must-not-cal.md
+++ b/.lane/memory/apps/host/src/gateway.ts/01M4ZH1NMBK54TCB970R3AJ1X1-a-loopback-host-must-not-cal.md
@@ -4,9 +4,9 @@ anchor: function serve
 created: 2026-10-15T10:17:10Z
 norm: '1'
 sig: 171797818ef4d836
-body_hash: 50b83460ae5ee675
-raw_hash: f38372c6ca8389a3
-vouched: 2026-10-22T14:33:27Z
+body_hash: 1332a8dc2a8a58e7
+raw_hash: 99138b0aa8226285
+vouched: 2026-10-22T15:02:43Z
 lines: 830-948
 supersedes: 01M4Z2R1HEVDKEA8VEJ7XRJQ8F
 ---
diff --git a/.lane/memory/apps/host/src/gateway.ts/01M5D4BXMERGZ1EZ3EYAFM3YC4-worker-requests-worker-never.md b/.lane/memory/apps/host/src/gateway.ts/01M5D4BXMERGZ1EZ3EYAFM3YC4-worker-requests-worker-never.md
index 2a6cb428..4a22cb1b 100644
--- a/.lane/memory/apps/host/src/gateway.ts/01M5D4BXMERGZ1EZ3EYAFM3YC4-worker-requests-worker-never.md
+++ b/.lane/memory/apps/host/src/gateway.ts/01M5D4BXMERGZ1EZ3EYAFM3YC4-worker-requests-worker-never.md
@@ -4,9 +4,9 @@ anchor: '@file'
 created: 2026-10-20T17:04:56Z
 norm: '1'
 sig: 1acdc0f6a0895ac5
-body_hash: 0fab689dd7631f93
-raw_hash: b556858d2f701dda
-vouched: 2026-10-22T14:00:57Z
+body_hash: fa085b53cc7365ec
+raw_hash: 40117df15a7c5ea7
+vouched: 2026-10-22T15:02:43Z
 lines: 1-1153
 ---
 
diff --git a/.lane/memory/apps/host/src/gateway.ts/01M5HYM54QCSF4ESXJSWZK588G-every-project-op-that-change.md b/.lane/memory/apps/host/src/gateway.ts/01M5HYM54QCSF4ESXJSWZK588G-every-project-op-that-change.md
index 4a1e8756..377e6a87 100644
--- a/.lane/memory/apps/host/src/gateway.ts/01M5HYM54QCSF4ESXJSWZK588G-every-project-op-that-change.md
+++ b/.lane/memory/apps/host/src/gateway.ts/01M5HYM54QCSF4ESXJSWZK588G-every-project-op-that-change.md
@@ -4,8 +4,9 @@ anchor: '@file'
 created: 2026-10-22T14:00:47Z
 norm: '1'
 sig: 1acdc0f6a0895ac5
-body_hash: 0fab689dd7631f93
-raw_hash: b556858d2f701dda
+body_hash: fa085b53cc7365ec
+raw_hash: 40117df15a7c5ea7
+vouched: 2026-10-22T15:02:43Z
 lines: 1-1309
 ---
 
diff --git a/.lane/memory/packages/ui/src/components/composer/chat-composer.tsx/01M53E0S8M7RPD1RK65J9NG78E-dictation-writes-only-betwee.md b/.lane/memory/packages/ui/src/components/composer/chat-composer.tsx/01M53E0S8M7RPD1RK65J9NG78E-dictation-writes-only-betwee.md
index a04639dd..8b298260 100644
--- a/.lane/memory/packages/ui/src/components/composer/chat-composer.tsx/01M53E0S8M7RPD1RK65J9NG78E-dictation-writes-only-betwee.md
+++ b/.lane/memory/packages/ui/src/components/composer/chat-composer.tsx/01M53E0S8M7RPD1RK65J9NG78E-dictation-writes-only-betwee.md
@@ -4,9 +4,9 @@ anchor: function useComposer
 created: 2026-10-16T22:41:13Z
 norm: '1'
 sig: 381929b0cbaf2245
-body_hash: 4dcfff341604590f
-raw_hash: 03d5450461fb3892
-vouched: 2026-10-22T14:39:32Z
+body_hash: 17515b9210059870
+raw_hash: 30786624d9379566
+vouched: 2026-10-22T15:02:44Z
 lines: 597-1226
 ---
 
diff --git a/apps/app/src/channel-access.tsx b/apps/app/src/channel-access.tsx
index 29296116..85a9ed58 100644
--- a/apps/app/src/channel-access.tsx
+++ b/apps/app/src/channel-access.tsx
@@ -64,7 +64,8 @@ function Machine({ channel }: { channel: Listing }) {
 				}
 			>
 				<Icon className="size-3.5 shrink-0" aria-hidden />
-				<span className="max-w-40 truncate">{name}</span>
+				{/* A phone's tab strip needs the room; the icon's tooltip still names the machine. */}
+				<span className="max-w-40 truncate max-sm:sr-only">{name}</span>
 			</TooltipTrigger>
 			<TooltipContent>{detail}</TooltipContent>
 		</Tooltip>
diff --git a/apps/app/src/host-settings.tsx b/apps/app/src/host-settings.tsx
index 301580ac..7af81a1b 100644
--- a/apps/app/src/host-settings.tsx
+++ b/apps/app/src/host-settings.tsx
@@ -194,7 +194,7 @@ export function HostStatus({ active }: { active: boolean }) {
 			)}
 			{checked?.tailscale.state === "running" && !checked.tailscale.loopback && (
 				<Group title="Phone">
-					<Phone web={checked.web} />
+					<Phone web={checked.web} http={checked.http} />
 				</Group>
 			)}
 			<Group
@@ -250,9 +250,13 @@ export function HostStatus({ active }: { active: boolean }) {
 	);
 }
 
-/** This host's HTTPS address, which the owner's phone opens over the tailnet. */
-function Phone({ web }: { web?: string }) {
+/**
+ * The address the owner's phone opens over the tailnet: HTTPS when the tailnet has certificates,
+ * else plain HTTP, which works except for the microphone.
+ */
+function Phone({ web: secure, http }: { web?: string; http?: string }) {
 	const [copied, setCopied] = useState(false);
+	const web = secure || http;
 	if (!web) {
 		return (
 			<Row
@@ -264,7 +268,9 @@ function Phone({ web }: { web?: string }) {
 	return (
 		<Row
 			label="Open on your phone"
-			description="Scan with a phone on your tailnet."
+			description={secure
+				? "Scan with a phone on your tailnet."
+				: "Scan with a phone on your tailnet. Browsers keep the microphone off over HTTP; for voice input, turn on HTTPS in the Tailscale admin console's DNS settings, then restart Ace Helper."}
 			footer={
 				<div className="flex flex-wrap items-center gap-4">
 					<Qr value={web} label={`QR code for ${web}`} className="size-36 rounded-md" />
diff --git a/apps/app/src/settings.tsx b/apps/app/src/settings.tsx
index 2db3b6d0..958657da 100644
--- a/apps/app/src/settings.tsx
+++ b/apps/app/src/settings.tsx
@@ -425,16 +425,19 @@ export function Settings(
 					<DialogTitle className="px-2 pt-1">Settings</DialogTitle>
 					<nav
 						aria-label="Settings sections"
-						className="flex gap-0.5 overflow-x-auto scrollbar-hidden sm:flex-col sm:gap-4"
+						className="flex flex-wrap gap-0.5 sm:flex-col sm:flex-nowrap sm:gap-4"
 					>
 						{groups.map((group) => (
-							<div key={group.label || "app"} className="flex shrink-0 gap-0.5 sm:flex-col">
+							<div
+								key={group.label || "app"}
+								className="contents sm:flex sm:shrink-0 sm:flex-col sm:gap-0.5"
+							>
 								{group.label && (
 									<h3 className="hidden px-2 pb-1 text-xs text-muted-foreground sm:block">
 										{group.label}
 									</h3>
 								)}
-								<ul className="flex gap-0.5 sm:flex-col">
+								<ul className="contents sm:flex sm:flex-col sm:gap-0.5">
 									{group.sections.map(({ id, label, icon: Icon }) => (
 										<li key={id} className="shrink-0">
 											<button
diff --git a/apps/host/src/diagnostics.ts b/apps/host/src/diagnostics.ts
index b3b4590d..1089770c 100644
--- a/apps/host/src/diagnostics.ts
+++ b/apps/host/src/diagnostics.ts
@@ -64,5 +64,6 @@ export async function diagnostics(sync?: boolean): Promise<Diagnostics> {
 		},
 		shell: { ...environment },
 		web: web.address,
+		http: web.plain,
 	};
 }
diff --git a/apps/host/src/gateway.ts b/apps/host/src/gateway.ts
index 7811c8c7..b993835f 100644
--- a/apps/host/src/gateway.ts
+++ b/apps/host/src/gateway.ts
@@ -1252,6 +1252,7 @@ export async function serve(port: number, loopback = false, script?: string): Pr
 	}
 	if (machine) {
 		servers.push(team(machine, { port, secure: false }));
+		web.served(machine, { port, secure: false });
 		const address = isIP(machine.address) === 6 ? `[${machine.address}]` : machine.address;
 		servedUrl = `http://${address}:${port}/directory`;
 		console.log(`Sharing with the tailnet on ${machine.address}:${port} as ${machine.login}`);
diff --git a/apps/host/src/protocol.ts b/apps/host/src/protocol.ts
index b9bc3135..c3a3d82e 100644
--- a/apps/host/src/protocol.ts
+++ b/apps/host/src/protocol.ts
@@ -71,6 +71,8 @@ export type Diagnostics = {
 	shell: { state: "adopted" | "pending" | "failed"; error?: string };
 	/** This host's HTTPS address on the tailnet; unset without a tailnet certificate. */
 	web?: string;
+	/** This host's plain HTTP address on the tailnet; unset off the tailnet. */
+	http?: string;
 };
 
 /** `offline`: the channel's host is unreachable. Hosted channels are never offline. */
diff --git a/apps/host/src/web.ts b/apps/host/src/web.ts
index b0fe6bd5..b50dc1e8 100644
--- a/apps/host/src/web.ts
+++ b/apps/host/src/web.ts
@@ -47,8 +47,12 @@ export type Listener = { port: number; secure: boolean };
 /** The HTTPS address the owner's phone opens, once that listener is up. */
 export let address: string | undefined;
 
+/** The tailnet's plain HTTP address, which WireGuard encrypts but browsers treat as insecure. */
+export let plain: string | undefined;
+
 export function served(machine: Machine, listener: Listener): void {
-	address = `https://${machine.dns}:${listener.port}`;
+	if (listener.secure) address = `https://${machine.dns}:${listener.port}`;
+	else plain = `http://${machine.dns}:${listener.port}`;
 }
 
 /** Names this host answers to on the tailnet; anything else is DNS rebinding. */
diff --git a/packages/ui/src/components/app-layout/nav-list-link.tsx b/packages/ui/src/components/app-layout/nav-list-link.tsx
index 40a649e6..22cc0f6d 100644
--- a/packages/ui/src/components/app-layout/nav-list-link.tsx
+++ b/packages/ui/src/components/app-layout/nav-list-link.tsx
@@ -87,6 +87,8 @@ function NavListLink(
 					<span
 						className={cn(
 							"relative z-1 text-xs font-medium pr-2 sm:opacity-0 sm:@min-[5rem]/nav:opacity-100 sm:text-sm",
+							// A phone's tab bar fits every icon and the account button by naming only the current page.
+							"max-[26rem]:sr-only max-[26rem]:group-data-[status=active]:not-sr-only",
 							"transition-opacity duration-200 ease-in-out",
 						)}
 					>
diff --git a/packages/ui/src/components/composer/chat-composer.tsx b/packages/ui/src/components/composer/chat-composer.tsx
index ca802025..cf9bc792 100644
--- a/packages/ui/src/components/composer/chat-composer.tsx
+++ b/packages/ui/src/components/composer/chat-composer.tsx
@@ -17,6 +17,7 @@ import * as fuzzysort from "fuzzysort";
 import type { MarkType, Node as ProseMirrorNode, NodeType } from "prosemirror-model";
 import { TextSelection } from "prosemirror-state";
 import type { EditorView } from "prosemirror-view";
+import { toast } from "sonner";
 
 import { canDictate, useDictation } from "../../hooks/use-dictation";
 import { useDraft } from "../../hooks/use-draft";
@@ -973,6 +974,14 @@ function useComposer({
 	}
 
 	function record() {
+		// Browsers expose the microphone only to secure pages, such as a host's tailnet HTTPS address.
+		if (!window.isSecureContext) {
+			toast("Voice input needs HTTPS", {
+				description:
+					"Browsers keep the microphone off over HTTP. Open Ace at this host's https:// address to dictate.",
+			});
+			return;
+		}
 		let { doc, selection: { from, to } } = view.current!.state;
 		// Like system dictation: replace the selection, and keep spaces between the words already
 		// there and the dictated ones.
@@ -1515,7 +1524,7 @@ function ComposerModel({ state }: { state: ComposerState }) {
 								<Button
 									variant="ghost"
 									size="sm"
-									className="-ml-0.5 h-6.5 px-2 text-muted-foreground"
+									className="-ml-0.5 h-6.5 min-w-0 shrink px-2 text-muted-foreground"
 								/>
 							}
 						/>
diff --git a/packages/ui/src/components/composer/composer.tsx b/packages/ui/src/components/composer/composer.tsx
index 721a49fb..5983c4cc 100644
--- a/packages/ui/src/components/composer/composer.tsx
+++ b/packages/ui/src/components/composer/composer.tsx
@@ -178,7 +178,7 @@ function Body({ className, ref, onFiles, children, ...props }: BodyProps) {
 			<div
 				ref={ref}
 				className={cn(
-					"composer:body relative z-10 overflow-clip rounded-xl squircle bg-background shadow-composer [grid-area:composer]",
+					"composer:body relative z-10 min-w-0 overflow-clip rounded-xl squircle bg-background shadow-composer [grid-area:composer]",
 					className,
 				)}
 				data-dragging={dragging || undefined}