apps/mobile/src/App.tsx | 2 + apps/mobile/src/components/PermissionUpdateNotice.tsx | 84 +++++++++++++++++++ apps/mobile/src/features/settings/environment-maintenance.test.ts | 27 ++++++ apps/mobile/src/features/settings/environment-maintenance.ts | 6 +- apps/mobile/src/features/terminal/ThreadTerminalRouteScreen.tsx | 9 +- apps/mobile/src/state/mediaActions.ts | 10 +-- apps/mobile/src/state/session.test.ts | 15 ++++ apps/mobile/src/state/session.ts | 13 +-- apps/server/src/auth/EnvironmentAuth.test.ts | 26 +++++- apps/server/src/auth/EnvironmentAuth.ts | 20 +++-- apps/server/src/auth/PairingGrantStore.ts | 10 ++- apps/server/src/auth/RpcAuthorization.test.ts | 13 +-- apps/server/src/auth/RpcAuthorization.ts | 3 +- apps/server/src/auth/SessionStore.test.ts | 29 +++++++ apps/server/src/auth/SessionStore.ts | 3 +- apps/server/src/auth/http.test.ts | 19 +++++ apps/server/src/auth/http.ts | 14 ++-- apps/server/src/cliAuthFormat.ts | 4 +- apps/server/src/persistence/AuthPairingLinks.ts | 6 +- apps/server/src/ws.ts | 4 +- apps/web/src/components/PermissionUpdateNotice.test.tsx | 111 ++++++++++++++++++++++++ apps/web/src/components/PermissionUpdateNotice.tsx | 78 +++++++++++++++++ apps/web/src/components/ServerUpdateAction.tsx | 14 ++-- apps/web/src/components/media/MediaActions.tsx | 9 +- apps/web/src/components/settings/ConnectionsSettings.tsx | 4 +- apps/web/src/components/settings/ProviderSettingsPanel.logic.test.ts | 16 +++- apps/web/src/components/settings/ProviderSettingsPanel.logic.ts | 12 +-- apps/web/src/components/usage/UsagePriceOverrides.tsx | 4 +- apps/web/src/hooks/useSettings.ts | 3 +- apps/web/src/hooks/useThreadActions.permissions.test.ts | 1 + apps/web/src/hooks/useThreadActions.ts | 4 +- apps/web/src/routes/__root.tsx | 2 + apps/web/src/state/session.ts | 36 ++++---- docs/internals/environment-auth.md | 16 +++- docs/user/remote-access.md | 7 +- packages/client-runtime/src/rpc/client.ts | 3 +- packages/client-runtime/src/state/commandPermissions.test.ts | 72 +++++++++++++++- packages/client-runtime/src/state/commandPermissions.ts | 12 ++- packages/client-runtime/src/state/filesystem.test.ts | 18 +++- packages/client-runtime/src/state/filesystem.ts | 8 +- packages/client-runtime/src/state/usageAccess.test.ts | 6 +- packages/client-runtime/src/state/usageAccess.ts | 13 +-- packages/contracts/src/auth.test.ts | 144 +++++++++++++++++++++++++++++++- packages/contracts/src/auth.ts | 84 ++++++++++++++++++- packages/contracts/src/environmentHttp.ts | 3 +- 45 files changed, 870 insertions(+), 127 deletions(-)