.github/workflows/deploy-relay.yml | 1 + apps/server/src/cloud/CliState.test.ts | 2 + apps/server/src/cloud/CliState.ts | 2 + apps/server/src/cloud/ManagedEndpointRuntime.test.ts | 217 ++++- apps/server/src/cloud/ManagedEndpointRuntime.ts | 130 ++- apps/server/src/cloud/config.ts | 19 +- apps/server/src/cloud/http.test.ts | 616 ++++++++++++- apps/server/src/cloud/http.ts | 667 ++++++++++++-- apps/server/src/cloud/managedTunnelStartup.test.ts | 132 +++ apps/server/src/cloud/managedTunnelStartup.ts | 77 ++ apps/server/src/server.test.ts | 277 +++++- apps/server/src/server.ts | 198 +++- docs/internals/t3-connect.md | 41 + docs/operations/release.md | 51 ++ docs/user/remote-access.md | 6 + infra/relay/.env.example | 4 + infra/relay/migrations/postgres/20260919015455_managed_endpoint_recovery/migration.sql | 4 + infra/relay/migrations/postgres/20260919015455_managed_endpoint_recovery/snapshot.json | 1568 ++++++++++++++++++++++++++++++++ infra/relay/src/Config.test.ts | 35 + infra/relay/src/Config.ts | 17 + infra/relay/src/deploymentConfig.test.ts | 4 + infra/relay/src/deploymentConfig.ts | 6 +- infra/relay/src/environments/EnvironmentConnector.test.ts | 7 + infra/relay/src/environments/EnvironmentLinker.test.ts | 4 +- infra/relay/src/environments/ManagedEndpointAllocations.test.ts | 296 +++++- infra/relay/src/environments/ManagedEndpointAllocations.ts | 304 ++++++- infra/relay/src/environments/ManagedEndpointProvider.test.ts | 556 ++++++++++- infra/relay/src/environments/ManagedEndpointProvider.ts | 664 +++++++++++--- infra/relay/src/environments/ManagedEndpointReaper.test.ts | 761 ++++++++++++++++ infra/relay/src/environments/ManagedEndpointReaper.ts | 295 ++++++ infra/relay/src/http/Api.test.ts | 576 +++++++++++- infra/relay/src/http/Api.ts | 284 +++++- infra/relay/src/persistence/schema.ts | 5 + infra/relay/src/worker.ts | 56 +- packages/contracts/src/relay.ts | 68 ++ packages/shared/src/relayJwt.ts | 1 + 36 files changed, 7563 insertions(+), 388 deletions(-)