46 Remote Control

46 Remote Control

Source: docs/design/46-remote-control.md

Status: designed, not implemented (D96)

Phone PWA = pure remote control (renderer web build). Desktop core is the only service layer. Cloudflare Worker + Durable Object = dumb multi-tenant relay (zero persistence, untrusted, E2E encrypted).

Core abstract hub: local UI and remote endpoints are peers on the same RPC catalog — no read-only gate. Desktop anchor 1:1 outbound; events broadcast; RPC directed; frame type is the signal.

Pairing: QR one-time code + X25519/HKDF; paired device ≡ local user; multi-device + revoke. No sync layer; reconnect uses existing renderer bootstrap. remote.kepcup.com. Push / mobile attachment uplink (reuse D94 intake) = P1. Explicitly abandoned: multi-device sync + phone lite runtime.