remote/

Package crypto is the remote-control cryptographic foundation (ADR-007 D2/D3/D4; implementation-plan R-CRY.1-.16, R-PAIR.4).

Package device is the daemon-side durable registry of paired remote-control devices (R-DEV.1).

Package enroll is the machine-side enrollment keystone: it turns an affirmatively-confirmed pairing outcome (internal/remote/pairing) into the two durable artifacts the runnable remote stack needs.

Package grant persists and transports the initial sealed EpochGrant that bootstraps a freshly paired device's E2EE session (ADR-007 amendment 2026-07-24, decision C5).

Package grantwire is the WIRE half of the epoch-grant bootstrap: the tagged plaintext frame the gateway appends to a device mailbox, and its parser.

Package machineid implements the machine's pairing identity bundle (A4-1a): the Noise-static/recipient X25519 keys, the grant-signing and relay-auth Ed25519 keypairs, epoch keys, epoch id, grant seq, hostname, and routing id that `swarm remote init` persists and internal/skeleton's pairingConfig consumes.

Package pairing orchestrates the swarm remote-control device<->machine pairing slice (R-PAIR.1-.9).

Package push implements the FCM v1 sender behind relay.PushSink (PB-PUSH-2): it turns a generic alert plus an opaque ciphertext envelope into an HTTP/2 request Google's messaging API accepts, and turns Google's answers back into the two verdicts the relay acts on — retry, or prune this token.

Package qrterm renders a payload string as a scannable QR symbol for a terminal (PB-PAIR-1).

Package relay is the untrusted rendezvous/mailbox/push relay (R-REL.*, ADR-007 D9/D11).

Package relaycfg owns <stateDir>/remote/relay.json: the relay a machine is provisioned against, and the optional certificate pin it verifies that relay with.

Package relaypurge is the durable half of ADR-007 D9's deferred relay purge: "an offline-at-revoke machine defers the purge to reconnect".

Package supervise generates the swarm-remote gateway's supervision unit and installs it through the owner-invoked CLI.

Package transport is what remains of slice S6's client-side relay session after ADR-007 B98: the two INBOUND-DRAIN PACING primitives the gateway uses, and nothing else.