apps/mobile/src/connection/platform.ts | 2 - apps/server/src/auth/EnvironmentAuth.test.ts | 55 ++++++++++- apps/server/src/auth/EnvironmentAuth.ts | 105 ++++++++++++--------- apps/server/src/auth/PairingGrantStore.test.ts | 16 +++- apps/server/src/auth/PairingGrantStore.ts | 34 ++++++- apps/server/src/auth/SessionStore.test.ts | 41 ++++++++ apps/server/src/auth/SessionStore.ts | 12 ++- apps/server/src/auth/http.ts | 9 ++ apps/server/src/cli/auth.ts | 7 +- apps/server/src/cli/authScopes.ts | 11 +++ apps/server/src/cli/pair.test.ts | 116 ++++++++++++++++++++++- apps/server/src/cli/pair.ts | 13 ++- apps/server/src/persistence/AuthPairingLinks.ts | 10 +- apps/server/src/persistence/AuthSessions.ts | 9 +- apps/web/src/authBootstrap.test.ts | 159 ++++++++++++++++++++++++++++++-- apps/web/src/connection/platform.ts | 3 +- apps/web/src/environments/primary/auth.ts | 16 ++++ apps/web/src/routes/pair.tsx | 10 +- docs/user/remote-access.md | 19 ++++ packages/client-runtime/src/authorization/layer.test.ts | 95 +++++++++++++++++-- packages/client-runtime/src/authorization/service.ts | 1 - packages/client-runtime/src/connection/onboarding.test.ts | 67 +++++++++++++- packages/client-runtime/src/connection/onboarding.ts | 1 - packages/client-runtime/src/connection/registry.test.ts | 83 ++++++++++++++++- packages/client-runtime/src/connection/registry.ts | 5 +- packages/client-runtime/src/connection/resolver.test.ts | 1 - packages/client-runtime/src/connection/supervisor.test.ts | 1 - packages/client-runtime/src/platform/capabilities.ts | 2 - 28 files changed, 812 insertions(+), 91 deletions(-)