diff --git a/hephaestus.x/docs/index.html b/hephaestus.x/docs/index.html
index 2195e98..64fc6a0 100644
--- a/hephaestus.x/docs/index.html
+++ b/hephaestus.x/docs/index.html
@@ -163,7 +163,7 @@
       <li><a href="#storage">Where files live</a></li>
       <li><a href="#selfhost">Self-hosting</a></li>
       <li><a href="#gotchas">Known gotchas</a></li>
-      <li><a href="#sessions">Working with other sessions</a></li>
+      <li><a href="#sessions">CLI + GUI access</a></li>
       <li><a href="#help">Help + source</a></li>
     </ol>
   </aside>
@@ -359,8 +359,8 @@ open https://your-domain.example/user/oauth2/hephaestus-wallet</pre>
       <li><b>Docker Hub rate limits</b> can bite <code>docker compose build</code> if you're unauthenticated. Log in once with <code>docker login</code> against Docker Hub before running the stack build.</li>
     </ul>
 
-    <h2 id="sessions">12. Working with other sessions</h2>
-    <p>Any tool, colleague, or parallel Claude session that needs to push to Hephaestus goes through the same short workflow. Once you internalize the wallet-vs-PAT split, everything else is one API call at a time.</p>
+    <h2 id="sessions">12. CLI &mdash; Command Line Interface and GUI &mdash; Graphical User Interface</h2>
+    <p>Every task in this section works two ways: through the <b>GUI</b> (the Forgejo web pages at <code>code.silentmode.st</code>) or through the <b>CLI</b> (curl + git + docker against the same API). Humans usually reach for the GUI first; parallel sessions, CI, and scripts live in the CLI. Once you internalize the wallet-vs-PAT split, both paths are one call at a time.</p>
 
     <h3>Wallet vs Personal Access Token — when to use each</h3>
     <p>The wallet is for <b>bootstrapping the account</b> once, and for <b>recovering</b> if a PAT ever leaks. Nothing else. Every git operation, every API call, every docker push, from every session, from every day after the first — runs on a PAT.</p>