Nightly: remote daemon, Tailscale setup, and PWA client

[parsakhaz]

Nightly integration: remote daemon, Tailscale setup, and PWA client

This PR is the integrated nightly validation branch for Pane's daemon/client split and self-hosted remote runtime work. It now covers the full desktop remote-host flow plus the first install-free browser/PWA client surface.

Latest Product Scope

• Adds one-command remote setup from Settings with Open in Pane Terminal and Run Setup for interactive Tailscale auth and install-if-needed flows.
• Makes Tailscale setup more defensive: automatic listen-port selection, elevated tailscale serve recovery where needed, cached Serve access reuse, and clearer retry guidance while Serve provisions.
• Adds host-side controls and status: live/offline state, connected client labels, create/copy connection code, revoke paired clients, and stop remote host.
• Adds remote-client lifecycle hardening: reconnect with exponential backoff, per-client terminal visibility tracking, local UI resync when switching back from remote, and normalized remote session timestamps.
• Adds a Remote Desktop sidebar entry for remote profiles so GUI/Electron/browser testing has an obvious escape hatch.
• Adds the first Remote Pane PWA/browser client: saved profiles, connection-code import, remote session list, terminal tabs, terminal creation presets, remote desktop link, SSE status, and mobile-first terminal controls.
• Adds mobile terminal QoL: paste/send managed input, Stop/Esc/Tab/Enter/Up/Down controls, Reset scrollback parity with desktop Ctrl/Cmd+K, and host-provided terminal shortcuts/custom commands.
• Adds Tailscale-specific failure guidance when a browser/PWA client cannot connect, so users know the client device must have Tailscale running and signed into the same tailnet.

Website/PWA Notes

The PWA is intentionally static and remote-token based, so it can be hosted as a future runpane.com/remote surface without a Pane desktop install. It still requires a valid pane-remote:// code and network reachability to the host, usually Tailscale on the same tailnet. No Pane backend needs to proxy user terminals.

Validation

• pnpm --filter frontend typecheck
• pnpm --filter main typecheck
• pnpm --filter main exec vitest run src/daemon/pwaStaticAssets.test.ts src/daemon/remotePwaBrowserRuntime.test.ts src/daemon/httpApiServer.test.ts src/ipc/daemonRegistryBindings.test.ts src/core/importBoundary.test.ts
• git diff --check and git diff --cached --check
• Mobile Playwright smoke against http://localhost:5757/remote.html with a mocked remote daemon: verified no mobile horizontal overflow, terminal-only tabs, shortcut insertion, send-to-terminal, Reset scrollback invoke, and tab visual depth.
• Commit hook ran root pnpm typecheck and root pnpm lint; lint passed with the existing warning-only baseline.

Manual Validation Notes

• WSL remote host to macOS desktop client works through Tailscale Serve.
• Windows remote host to macOS desktop client works once Tailscale Serve has finished provisioning.
• Browser/PWA client now gives explicit Tailscale guidance on connection failure and is designed to be hosted publicly as a static client once the release is ready.

[parsakhaz]

Update pushed in 224f548 (refactor: audit remote lifecycle transitions).

What changed:

• Centralized remote client runtime transitions so import/connect/delete/local switch share controller action + config persistence + renderer resync rules.
• Kept failed import-connect defensive: saves/dedupes the profile, stays on current runtime, and does not resync stale remote state.
• Extracted renderer remote resync into a named helper that refreshes config, sessions, panels, clears stale active session/panels, and emits project refresh events.
• Shared Settings/Sidebar remote status + connected-client copy via remoteRuntimePresentation.
• Added docs/remote-daemon-lifecycle.md with the lifecycle matrix.
• Added regression coverage for failed import-connect, active/inactive profile delete, local switch, host stop persistence, and stale renderer sessions after resync.

Validation run locally:

• pnpm --filter main exec vitest run src/ipc/remoteDaemon.test.ts
• pnpm --filter main exec vitest run src/daemon/client/remotePaneClient.test.ts src/daemon/remoteTransportController.test.ts
• pnpm test -- tests/smoke.spec.ts --grep "Remote daemon resync"
• pnpm typecheck
• pnpm lint (passes, existing warnings remain)
• pnpm run build:main && pnpm run build:frontend

Note: local Node is v20.19.3, so pnpm prints the existing engine warning for >=22.14.0, but the checks completed successfully.

[parsakhaz]

@codex review

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. Keep them coming!

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".