initial web rssh stage 1

docs/20260602_REVERSE_SSH_proposals_summary.md

@@ -4,6 +4,8 @@ _Date: 2026-06-02 — **merged document**: initial proposal (rev. 1) + infra rev
 
 ---
 
+---
+
 ## Table of contents
 
 <!-- toc -->

docs/ALPHA.md

@@ -8,6 +8,8 @@ Last updated: 2026-05-23. Use this document for **feature freeze**, **alpha buil
 
 ---
 
+---
+
 ## Table of contents
 
 <!-- toc -->

docs/ALPHA_SOAK.md

@@ -4,6 +4,8 @@ Manual QA on **two devices** on the same Wi‑Fi. Goal: stable show path without
 
 ---
 
+---
+
 ## Table of contents
 
 <!-- toc -->

docs/AV_QUALITY_QA_SESSION.md

@@ -9,6 +9,8 @@ Research and recommendations for **movie cast** vs **video cast** quality enhanc
 
 ---
 
+---
+
 ## Table of contents
 
 <!-- toc -->

docs/BUILD_DEPLOY.md

@@ -2,6 +2,8 @@
 
 ---
 
+---
+
 ## Table of contents
 
 <!-- toc -->

docs/COMMERCIAL.md

@@ -4,6 +4,8 @@ Ads, in-app purchases, and Play Store helpers are **disabled for normal users**.
 
 ---
 
+---
+
 ## Table of contents
 
 <!-- toc -->

docs/CRASH_REPORTER.md

@@ -2,6 +2,8 @@
 
 ---
 
+---
+
 ## Table of contents
 
 <!-- toc -->

docs/GIT_FLOW.md

@@ -15,6 +15,8 @@ This document defines how we develop, integrate, release, and hotfix. **Cursor a
 
 ---
 
+---
+
 ## Table of contents
 
 <!-- toc -->

docs/GRAFANA_vs_others_graphvis_pivot.md

@@ -4,6 +4,8 @@ _Date: 2026-06-02_
 
 ---
 
+---
+
 ## Table of contents
 
 <!-- toc -->

docs/INFRA.md

@@ -15,6 +15,8 @@
 
 ---
 
+---
+
 ## Table of contents
 
 <!-- toc -->

docs/OPEN_API.md

@@ -4,6 +4,8 @@ Triage **real device crashes** vs **synthetic / bulk test traffic** when exposin
 
 ---
 
+---
+
 ## Table of contents
 
 <!-- toc -->

docs/OTA.md

@@ -8,6 +8,8 @@ MQTT is fully supported for OTA sources using retained topic payloads (`mqtt://.
 
 ---
 
+---
+
 ## Table of contents
 
 <!-- toc -->

docs/PRO_AAR.md

@@ -4,6 +4,8 @@ Design notes for a commercial build without forking the cast protocol. **Not imp
 
 ---
 
+---
+
 ## Table of contents
 
 <!-- toc -->

docs/README.md

@@ -37,6 +37,7 @@ Click a link to open a guide. Section links jump within the document (GitHub, Cu
 | [OPEN_API.md](OPEN_API.md) | Crash ingest API design, triage tags, heuristics. |
 | [OTA.md](OTA.md) | OTA channel layout v0, manifests, MQTT, publish flow. |
 | [PRO_AAR.md](PRO_AAR.md) | cast-core / cast-pro AAR split and Play Billing. |
+| [REMOTE_ACCESS_IMPL.md](REMOTE_ACCESS_IMPL.md) |  |
 | [ROADMAP.md](ROADMAP.md) | Implementation roadmap, alpha definition, deferred work. |
 | [TICKETS_ROADMAP.md](TICKETS_ROADMAP.md) | Tickets console, Gitea, attachments, agent queue. |
 | [USB_HDMI_CAST.md](USB_HDMI_CAST.md) | Roadmap D/E: HDMI awareness, USB-tether transport. |

docs/REMOTE_ACCESS_IMPL.md

@@ -0,0 +1,47 @@
+# Remote access — implementation notes (v1 WireGuard)
+
+See the full proposal: [20260602_REVERSE_SSH_proposals_summary.md](20260602_REVERSE_SSH_proposals_summary.md).
+
+## Table of contents
+
+<!-- toc -->
+- [App (developer settings)](#app-developer-settings)
+- [BE](#be)
+- [WireGuard third-party](#wireguard-third-party)
+- [Tests](#tests)
+<!-- /toc -->
+
+**Documentation index:** [README.md](README.md)
+
+---
+
+## App (developer settings)
+
+- Dropdown: **Disabled** | **WireGuard** | **RSSH (greyed — not selectable)**
+- Pref key: `dev_remote_access_mode` (`AppPreferences`)
+- **Disabled:** stops `RemoteAccessService`, tears down VPN, POST `type:ra` + `status:disable`
+- **WireGuard:** foreground poll 1–7 min → `RemoteAccessService` → BE `heartbeat.php`
+
+## BE
+
+- Migration: `sql/migrations/007_remote_access.sql`
+- Repository: `src/RemoteAccessRepository.php`
+- Device API: `public/api/heartbeat.php` (`type: ra`)
+- Admin API: `public/api/remote_access.php`
+- UI: `?view=remote_access` (nav + hub card)
+- RBAC: `remote_access_view`, `remote_access_operate`, `remote_access_admin`
+
+## WireGuard third-party
+
+```bash
+bash scripts/init-wireguard-submodule.sh
+```
+
+Optional `:tunnel` module from `third-party/wireguard-android`. Without it, `WireGuardTunnelBridge` uses `RemoteAccessVpnService` (TUN fallback).
+
+## Tests
+
+```bash
+./gradlew :app:testDebugUnitTest
+bash examples/crash_reporter/backend/scripts/test_remote_access_api.sh
+```

docs/ROADMAP.md

@@ -6,6 +6,8 @@ Last updated: 2026-05-23. Living document — refine as alpha and commercial tra
 
 ---
 
+---
+
 ## Table of contents
 
 <!-- toc -->

docs/TICKETS_ROADMAP.md

@@ -2,6 +2,8 @@
 
 ---
 
+---
+
 ## Table of contents
 
 <!-- toc -->

docs/USB_HDMI_CAST.md

@@ -4,6 +4,8 @@ Android Cast streams over **Wi‑Fi** (UDP/TCP/QUIC). USB-C→HDMI adapters use
 
 ---
 
+---
+
 ## Table of contents
 
 <!-- toc -->