apps/mobile/src/features/cloud/linkEnvironment.test.ts | 81 ++++++++++++++++++++++++++++++-- apps/mobile/src/features/cloud/linkEnvironment.ts | 80 ++++++++++++------------------- apps/server/src/auth/EnvironmentAuth.ts | 10 ++++ apps/server/src/auth/dpop.test.ts | 23 ++++++++- apps/server/src/auth/dpop.ts | 40 +++++++++++++++- apps/server/src/auth/http.ts | 40 ++++++++++++---- apps/server/src/http.ts | 5 +- apps/server/src/server.test.ts | 36 ++++++++++++++ apps/server/src/ws.ts | 5 +- apps/web/src/cloud/linkEnvironment.ts | 47 +----------------- docs/internals/environment-auth.md | 4 +- docs/operations/observability.md | 6 +++ docs/operations/relay-observability.md | 6 +++ docs/user/remote-access.md | 2 + infra/relay/src/auth/DpopProofs.ts | 31 ++++++++++-- infra/relay/src/auth/DpopProofs.verifyAndConsume.test.ts | 39 +++++++++++++-- infra/relay/src/http/Api.test.ts | 22 +++++++++ infra/relay/src/http/Api.ts | 52 +++++++++++++++++++- packages/client-runtime/src/authorization/layer.test.ts | 24 ++++++++++ packages/client-runtime/src/authorization/service.ts | 10 ++-- packages/client-runtime/src/connection/errors.test.ts | 75 +++++++++++++++++++++++++++++ packages/client-runtime/src/connection/errors.ts | 31 ++++++++++-- packages/client-runtime/src/relay/errorPresentation.test.ts | 57 ++++++++++++++++++++++ packages/client-runtime/src/relay/errorPresentation.ts | 66 ++++++++++++++++++++++++++ packages/client-runtime/src/relay/index.ts | 1 + packages/client-runtime/src/relay/managedRelay.test.ts | 37 +++++++++++++++ packages/client-runtime/src/relay/managedRelayState.test.ts | 37 +++++++++++++-- packages/client-runtime/src/relay/managedRelayState.ts | 10 +++- packages/contracts/src/baseSchemas.ts | 14 ++++++ packages/contracts/src/environmentHttp.ts | 9 +++- packages/contracts/src/relay.ts | 12 ++++- packages/shared/src/dpop.test.ts | 37 +++++++++++++++ packages/shared/src/dpop.ts | 74 +++++++++++++++++++---------- 33 files changed, 859 insertions(+), 164 deletions(-)