@twinsearth/w2m-dsh-plugin 2.1.2 → 2.1.3

package/.claude-plugin/marketplace.json

@@ -5,14 +5,14 @@
   },
   "metadata": {
     "description": "The w2m fleet plugins: one account, many machines, any of Windows, macOS or Linux.",
-    "version": "2.1.2"
+    "version": "2.1.3"
   },
   "plugins": [
     {
       "name": "w2m-fleet",
       "source": "./",
       "description": "Read fleet state and dispatch commands across the machines registered to one account. Read-only MCP surface: the five exposed tools cannot change anything.",
-      "version": "2.1.2",
+      "version": "2.1.3",
       "author": {
         "name": "TwinsEarth"
       },
@@ -26,5 +26,5 @@
       ]
     }
   ],
-  "version": "2.1.2"
+  "version": "2.1.3"
 }

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "w2m-fleet",
   "description": "Drive the same project on online Windows, macOS and Linux machines from one account: read fleet state, dispatch commands and read results. The MCP surface is deliberately read-only.",
-  "version": "2.1.2",
+  "version": "2.1.3",
   "author": {
     "name": "TwinsEarth"
   },

package/CHANGELOG.md

@@ -7,6 +7,11 @@ All notable changes to this project are documented here.
 - `w2m_intent`: structured intents mapped onto allow-listed commands; unknown actions, parameters and types
   are refused by name (the fleet does not invent commands).
 
+## [2.1.3] - 2026-10-31
+
+- Remote-view candidate: target selector, view.hello/VK (X25519+HKDF, AES-256-GCM), host decrypt, relay remote.frame broker/route, '加密中继' UI label.
+- Still missing: P1.5 auto-fallback, target consent UI, deployed relay endpoint, real P2P verification. Test candidate.
+
 ## [2.1.2] - 2026-10-31
 
 - Remote-view preview: settings toggle, iMac sidebar entry, local 1fps JPEG viewer, target capture module, P2P view frame protocol, host /remote/start|frame|stop routes, encrypted-relay media broker (safety core).

package/README.md

@@ -83,7 +83,7 @@ w2m-mcp --help
 # 复制进你自己的 codex/mcp-servers.toml
 [mcp_servers.w2m]
 command = "npx"
-args = ["-y", "@twinsearth/w2m-dsh-plugin@2.0.3", "w2m-mcp"]
+args = ["-y", "@twinsearth/w2m-dsh-plugin@2.1.3", "w2m-mcp"]
 ```
 
 ### 5. 验证过的 release tarball（离线）

package/codex/mcp-servers.toml

@@ -12,6 +12,6 @@
 
 [mcp_servers.w2m-fleet]
 command = "npx"
-args = ["-y", "-p", "@twinsearth/w2m-dsh-plugin@2.1.0", "w2m-mcp"]
+args = ["-y", "-p", "@twinsearth/w2m-dsh-plugin@2.1.3", "w2m-mcp"]
 startup_timeout_sec = 20
 tool_timeout_sec = 60

package/docs/P2P-PORT.md

@@ -0,0 +1,13 @@
+# P2P UDP port
+
+Set `p2pPort` in the plugin config (or `--p2p-port` on the agent CLI) to bind a stable UDP port. This is required for a router port-forward: the public candidate, router mapping and local bind must be the same port.
+
+```yaml
+- id: w2m
+  config:
+    p2pPort: 31559
+```
+
+- Valid range: 1..65535; omitted/null keeps an ephemeral port.
+- Invalid values are reported as `P2P_PORT_INVALID` in `w2m_status` and do not start a P2P node.
+- Forward the same UDP port on the router to this machine, and allow it in the host firewall.

package/docs/acceptance/2.1.3/RELEASE-2130.json

@@ -0,0 +1,21 @@
+{
+  "version": "2.1.3",
+  "case": "RELEASE-2130",
+  "kind": "positive",
+  "machines": [
+    "b53a37f4-1464-4512-9259-33a7df091e3e"
+  ],
+  "executed_at": "2026-10-31T00:27:14.997Z",
+  "executor": "lead",
+  "task_id": "pre-release-2130-1793406434998",
+  "requirement": "v2.1.3 remote-view candidate: p2pPort config, VK/hello frame channel, relay media broker",
+  "result": {
+    "outcome": "ok",
+    "assertions": {
+      "p2p_port": "readConfig normalizes p2pPort and createP2PRuntime passes bindPort",
+      "vk": "view.hello/VK + AES-GCM frame 3/3",
+      "relay": "remote.frame ciphertext broker/route; relay suite 189/189",
+      "preflight": "candidate only; full release gates later"
+    }
+  }
+}

package/lib/client.js

@@ -2254,7 +2254,7 @@ function TargetSelect({ sessionId, locked: _locked, t }) {
           : h('span', { style: { opacity: 0.6, fontSize: '13px' } }, !enabled ? '尚未开启' : (error ? ('查看失败：' + error) : (session ? '等待远端帧…' : '本机回环预览（选择目标后点连接）')))),
         h('div', { key: 'statusline', style: { fontSize: '12px', opacity: 0.7, display: 'flex', gap: '14px', flexWrap: 'wrap' } }, [
           h('span', { key: 'fps' }, '1 fps 上限'),
-          h('span', { key: 'channel' }, '通道：' + (session ? 'P2P' : '本机回环')),
+          h('span', { key: 'channel' }, '通道：' + (session ? (session.channel === 'relay' ? '加密中继' : 'P2P') : '本机回环')),
           h('span', { key: 'cap' }, '采集：' + (stats?.capture_ms ?? '—') + 'ms'),
           h('span', { key: 'bytes' }, '帧：' + (stats?.bytes ?? '—') + 'B'),
           h('span', { key: 'age' }, '最近帧：' + (stats?.at ?? '—')),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@twinsearth/w2m-dsh-plugin",
-  "version": "2.1.2",
+  "version": "2.1.3",
   "description": "Run one project across your own Windows and macOS machines from a single DeepSeek account, through 11 w2m_* tools. Four coordination modes (replicate, split, broadcast, pipeline) and six aggregate verdicts (consistent, divergent, divergent-platform, failed, partial, unverifiable). P2P hole punching by default, with a bundled relay, STUN responder and ledger fallback, so the fleet needs no third-party service. Joining needs a pairing code plus autoStartAgent: true; installing alone does not join.",
   "type": "module",
   "exports": {
@@ -66,7 +66,7 @@
     "pack": "node scripts/pack.mjs",
     "reachability": "node scripts/reachability-check.mjs",
     "reachability:classify": "node scripts/reachability-classify.mjs",
-    "test": "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/blake2s.test.mjs test/agent.test.mjs test/plan-sec-cmd.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/fleet-merge.test.mjs test/fleet-memory-e2e.test.mjs test/fleet-concurrency.test.mjs test/fleet-merge-race.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/council-session.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/crypto-blake2s.test.mjs test/installed-version.test.mjs test/permission.test.mjs test/machine-test-packet.test.mjs test/field-authority.test.mjs test/approval-gate.test.mjs test/authority-choice.test.mjs test/reachability-check.test.mjs test/reachability-classify.test.mjs test/accepted-orphans.test.mjs test/acceptance-doc.test.mjs test/layer-model.test.mjs test/cwd-containment.test.mjs test/cwd-outside-project.test.mjs test/memory.test.mjs test/tools.test.mjs test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-crypto.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/agent-plugins.test.mjs test/memory-layer.test.mjs test/mcp-server.test.mjs test/portable-plugins.test.mjs test/mcp-http.test.mjs test/mcp-http-live.test.mjs test/vision.test.mjs test/ilink-shape.test.mjs test/chatops-fleet-join.test.mjs test/admission.test.mjs test/admission-routes.test.mjs test/join-degradation.test.mjs test/account-identity.test.mjs test/join-challenge.test.mjs test/exec-env-injection.test.mjs test/account-join.test.mjs test/fleet-messages.test.mjs test/message-shards.test.mjs test/fleet-messages-http.test.mjs test/message-notify.test.mjs test/update-channels.test.mjs test/update-prerelease.test.mjs test/session-watch.test.mjs test/session-readonly.test.mjs test/session-sync.test.mjs test/fleet-chat-identity.test.mjs test/identity-reader.test.mjs test/intents.test.mjs test/dataflow.test.mjs test/council-fleet.test.mjs test/fleet-memory.test.mjs test/memory-view.test.mjs test/schema-spec.test.mjs test/fleet-weight-parity.test.mjs test/task-deps.test.mjs test/dataflow-wiring.test.mjs test/task-graph.test.mjs test/ask-store.test.mjs test/turn.test.mjs test/fleet-members.test.mjs test/redact.test.mjs test/policy-matrix.test.mjs test/envelope-signature.test.mjs test/chat-crypto.test.mjs test/reduce-suggestion.test.mjs test/merge-hint.test.mjs test/fleet-chat-route.test.mjs test/maintenance.test.mjs test/maintenance-ferry.test.mjs test/grant.test.mjs test/grant-gate.test.mjs test/worktree.test.mjs test/patch-artifact.test.mjs test/merge-queue.test.mjs test/m3-workflow.test.mjs test/project-room.test.mjs test/project-attribution.test.mjs test/project-locks.test.mjs test/project-reviews.test.mjs test/project-notifications.test.mjs test/blob-sessions.test.mjs test/outbox.test.mjs test/reliability-metrics.test.mjs test/evidence.test.mjs test/grant-issue.test.mjs test/project-refs.test.mjs test/exec-capability.test.mjs test/secondary-link.test.mjs test/bootstrap-cli.test.mjs test/bootstrap.test.mjs test/windows-hidden-task.test.mjs test/relay-failover.test.mjs test/npm-update.test.mjs test/agent-start-nonblocking.test.mjs test/fleet-chat-capture.test.mjs test/capture-route.test.mjs test/update-resolver.test.mjs test/agent-identity-safe.test.mjs test/re-pair-stale-token.test.mjs test/gpw-folder-policy.test.mjs test/gpw-activation.test.mjs test/gpw-hardening.test.mjs test/gpw-tamper-gate.test.mjs test/gpw-persistence.test.mjs test/gpw-colors.test.mjs test/gpw-recent-fold.test.mjs test/gpw-auto-approve.test.mjs test/joint-dev-dispatch.test.mjs test/joint-dev-loop.test.mjs test/joint-dev-audit.test.mjs test/joint-dev-redline.test.mjs test/relay-redline-guard.test.mjs test/relay-p0-projection.test.mjs test/guarded-dispatch.test.mjs test/p0-single-matcher.test.mjs test/path-policy.test.mjs test/path-policy-fs.test.mjs test/gpw-inheritance-table.test.mjs test/gpw-policy-adapter.test.mjs test/target-policy.test.mjs test/relay-redline-audit.test.mjs test/relay-repair-ledger.test.mjs test/relay-purge-blobs.test.mjs test/relay-scrub.test.mjs test/joint-dev-plan-store.test.mjs test/relay-basepath-blobs.test.mjs test/operator-token.test.mjs test/relay-health-capabilities.test.mjs test/joint-relay-dispatch.test.mjs test/operator-token-route.test.mjs test/relay-scrub-task-projection.test.mjs test/operator-key-approval.test.mjs test/relay-offer-journal.test.mjs test/joint-r5-wiring.test.mjs test/p1-hardening.test.mjs test/joint-merge-engine.test.mjs test/artifact-ref-dir-sink.test.mjs test/chat-sticker-guard.test.mjs test/relay-task-progress.test.mjs test/gpw-modes.test.mjs test/joint-cli.test.mjs test/joint-command-hash.test.mjs test/joint-dispatch-audit.test.mjs test/tools-cancel-auth.test.mjs test/fleet-mirror.test.mjs test/sink-git-ssh.test.mjs test/agent-sse-watchdog.test.mjs test/version-gate.test.mjs test/joint-merge-cli.test.mjs test/joint-progress.test.mjs test/project-room-truncation.test.mjs test/chat-crypto-aad.test.mjs test/agent-artifact-delivery.test.mjs test/dataplane-sink-route.test.mjs test/artifact-sink-e2e.test.mjs test/project-room-persistence.test.mjs test/project-room-disk-persistence.test.mjs test/project-stream-route.test.mjs test/chat-v2-gate.test.mjs test/xiangqi.test.mjs test/xfer-foundation.test.mjs test/xfer-ferry.test.mjs test/xfer-publish.test.mjs test/xfer-want-block.test.mjs test/p2p-cipher-diag.test.mjs test/chacha-fallback.test.mjs test/fleet-binding.test.mjs test/xfer-channel.test.mjs test/p2p-race.test.mjs test/path-scheduler.test.mjs test/transport.test.mjs test/iroh-sidecar.test.mjs test/discovery.test.mjs test/p2p-rtt.test.mjs test/artifact-ref-v3.test.mjs test/xfer-recovery.test.mjs test/xfer-router.test.mjs test/remote-s2-capture.test.mjs test/view-capture.test.mjs test/view-frame-channel.test.mjs test/remote-view-route.test.mjs test/remote-media.test.mjs",
+    "test": "node --test --test-force-exit test/relay.test.mjs test/broadcast.test.mjs test/blake2s.test.mjs test/agent.test.mjs test/plan-sec-cmd.test.mjs test/authority.test.mjs test/blocks.test.mjs test/approval-index.test.mjs test/fleet-sync.test.mjs test/fleet-merge.test.mjs test/fleet-memory-e2e.test.mjs test/fleet-concurrency.test.mjs test/fleet-merge-race.test.mjs test/health.test.mjs test/storage.test.mjs test/exit-channel.test.mjs test/council.test.mjs test/council-session.test.mjs test/log-bounds.test.mjs test/test-report.test.mjs test/fleet-scale.test.mjs test/fleet-state.test.mjs test/crypto-blake2s.test.mjs test/installed-version.test.mjs test/permission.test.mjs test/machine-test-packet.test.mjs test/field-authority.test.mjs test/approval-gate.test.mjs test/authority-choice.test.mjs test/reachability-check.test.mjs test/reachability-classify.test.mjs test/accepted-orphans.test.mjs test/acceptance-doc.test.mjs test/layer-model.test.mjs test/cwd-containment.test.mjs test/cwd-outside-project.test.mjs test/memory.test.mjs test/tools.test.mjs test/claims.test.mjs test/fleet-target.test.mjs test/client-bundle.test.mjs test/schedule.test.mjs test/auto-update.test.mjs test/update-source.test.mjs test/update-install.test.mjs test/update-wiring.test.mjs test/signing.test.mjs test/stress.test.mjs test/shared-config.test.mjs test/metrics.test.mjs test/metrics-route.test.mjs test/tool-cards.test.mjs test/p2p-stun.test.mjs test/p2p-transport.test.mjs test/p2p-signaling.test.mjs test/p2p-node.test.mjs test/p2p-transport-fields.test.mjs test/p2p-plugin.test.mjs test/p2p-crypto.test.mjs test/stun-server.test.mjs test/loader-entry.test.mjs test/mdns-wire.test.mjs test/mdns-discover.test.mjs test/chatops-approval.test.mjs test/chatops-policy.test.mjs test/chatops-file-safety.test.mjs test/chatops-outbound-queue.test.mjs test/chatops-commands.test.mjs test/chatops-bridge.test.mjs test/chatops-config-route.test.mjs test/chatops-apply.test.mjs test/chatops-ilink-contract.test.mjs test/chatops-fleet.test.mjs test/chatops-account.test.mjs test/chatops-auth.test.mjs test/chatops-fleet-scope.test.mjs test/chatops-handoff.test.mjs test/chatops-fleet-wiring.test.mjs test/chatops-fleet-live.test.mjs test/chatops-takeover.test.mjs test/chatops-device-signing.test.mjs test/chatops-relay-verify.test.mjs test/chatops-durability.test.mjs test/chatops-run-command.test.mjs test/secrets-guard.test.mjs test/chatops-ilink-fleet-bridge.test.mjs test/agent-plugins.test.mjs test/memory-layer.test.mjs test/mcp-server.test.mjs test/portable-plugins.test.mjs test/mcp-http.test.mjs test/mcp-http-live.test.mjs test/vision.test.mjs test/ilink-shape.test.mjs test/chatops-fleet-join.test.mjs test/admission.test.mjs test/admission-routes.test.mjs test/join-degradation.test.mjs test/account-identity.test.mjs test/join-challenge.test.mjs test/exec-env-injection.test.mjs test/account-join.test.mjs test/fleet-messages.test.mjs test/message-shards.test.mjs test/fleet-messages-http.test.mjs test/message-notify.test.mjs test/update-channels.test.mjs test/update-prerelease.test.mjs test/session-watch.test.mjs test/session-readonly.test.mjs test/session-sync.test.mjs test/fleet-chat-identity.test.mjs test/identity-reader.test.mjs test/intents.test.mjs test/dataflow.test.mjs test/council-fleet.test.mjs test/fleet-memory.test.mjs test/memory-view.test.mjs test/schema-spec.test.mjs test/fleet-weight-parity.test.mjs test/task-deps.test.mjs test/dataflow-wiring.test.mjs test/task-graph.test.mjs test/ask-store.test.mjs test/turn.test.mjs test/fleet-members.test.mjs test/redact.test.mjs test/policy-matrix.test.mjs test/envelope-signature.test.mjs test/chat-crypto.test.mjs test/reduce-suggestion.test.mjs test/merge-hint.test.mjs test/fleet-chat-route.test.mjs test/maintenance.test.mjs test/maintenance-ferry.test.mjs test/grant.test.mjs test/grant-gate.test.mjs test/worktree.test.mjs test/patch-artifact.test.mjs test/merge-queue.test.mjs test/m3-workflow.test.mjs test/project-room.test.mjs test/project-attribution.test.mjs test/project-locks.test.mjs test/project-reviews.test.mjs test/project-notifications.test.mjs test/blob-sessions.test.mjs test/outbox.test.mjs test/reliability-metrics.test.mjs test/evidence.test.mjs test/grant-issue.test.mjs test/project-refs.test.mjs test/exec-capability.test.mjs test/secondary-link.test.mjs test/bootstrap-cli.test.mjs test/bootstrap.test.mjs test/windows-hidden-task.test.mjs test/relay-failover.test.mjs test/npm-update.test.mjs test/agent-start-nonblocking.test.mjs test/fleet-chat-capture.test.mjs test/capture-route.test.mjs test/update-resolver.test.mjs test/agent-identity-safe.test.mjs test/re-pair-stale-token.test.mjs test/gpw-folder-policy.test.mjs test/gpw-activation.test.mjs test/gpw-hardening.test.mjs test/gpw-tamper-gate.test.mjs test/gpw-persistence.test.mjs test/gpw-colors.test.mjs test/gpw-recent-fold.test.mjs test/gpw-auto-approve.test.mjs test/joint-dev-dispatch.test.mjs test/joint-dev-loop.test.mjs test/joint-dev-audit.test.mjs test/joint-dev-redline.test.mjs test/relay-redline-guard.test.mjs test/relay-p0-projection.test.mjs test/guarded-dispatch.test.mjs test/p0-single-matcher.test.mjs test/path-policy.test.mjs test/path-policy-fs.test.mjs test/gpw-inheritance-table.test.mjs test/gpw-policy-adapter.test.mjs test/target-policy.test.mjs test/relay-redline-audit.test.mjs test/relay-repair-ledger.test.mjs test/relay-purge-blobs.test.mjs test/relay-scrub.test.mjs test/joint-dev-plan-store.test.mjs test/relay-basepath-blobs.test.mjs test/operator-token.test.mjs test/relay-health-capabilities.test.mjs test/joint-relay-dispatch.test.mjs test/operator-token-route.test.mjs test/relay-scrub-task-projection.test.mjs test/operator-key-approval.test.mjs test/relay-offer-journal.test.mjs test/joint-r5-wiring.test.mjs test/p1-hardening.test.mjs test/joint-merge-engine.test.mjs test/artifact-ref-dir-sink.test.mjs test/chat-sticker-guard.test.mjs test/relay-task-progress.test.mjs test/gpw-modes.test.mjs test/joint-cli.test.mjs test/joint-command-hash.test.mjs test/joint-dispatch-audit.test.mjs test/tools-cancel-auth.test.mjs test/fleet-mirror.test.mjs test/sink-git-ssh.test.mjs test/agent-sse-watchdog.test.mjs test/version-gate.test.mjs test/joint-merge-cli.test.mjs test/joint-progress.test.mjs test/project-room-truncation.test.mjs test/chat-crypto-aad.test.mjs test/agent-artifact-delivery.test.mjs test/dataplane-sink-route.test.mjs test/artifact-sink-e2e.test.mjs test/project-room-persistence.test.mjs test/project-room-disk-persistence.test.mjs test/project-stream-route.test.mjs test/chat-v2-gate.test.mjs test/xiangqi.test.mjs test/xfer-foundation.test.mjs test/xfer-ferry.test.mjs test/xfer-publish.test.mjs test/xfer-want-block.test.mjs test/p2p-cipher-diag.test.mjs test/chacha-fallback.test.mjs test/fleet-binding.test.mjs test/xfer-channel.test.mjs test/p2p-race.test.mjs test/path-scheduler.test.mjs test/transport.test.mjs test/iroh-sidecar.test.mjs test/discovery.test.mjs test/p2p-rtt.test.mjs test/artifact-ref-v3.test.mjs test/xfer-recovery.test.mjs test/xfer-router.test.mjs test/remote-s2-capture.test.mjs test/view-capture.test.mjs test/view-frame-channel.test.mjs test/remote-view-route.test.mjs test/remote-media.test.mjs test/view-session-key.test.mjs",
     "test:acceptance-doc": "node --test --test-force-exit test/acceptance-doc.test.mjs",
     "test:account-identity": "node --test --test-force-exit test/account-identity.test.mjs",
     "test:account-join": "node --test --test-force-exit test/account-join.test.mjs",

package/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "twinsearth-w2m-dsh",
-  "version": "2.1.2",
+  "version": "2.1.3",
   "description": "Run one project across your own Windows and macOS machines from a single DeepSeek account, through 12 w2m_* tools. Four coordination modes (replicate, split, broadcast, pipeline) and six aggregate verdicts (consistent, divergent, divergent-platform, failed, partial, unverifiable). P2P hole punching by default, with a bundled relay, STUN responder and ledger fallback, so the fleet needs no third-party service. Joining needs a pairing code plus autoStartAgent: true; installing alone does not join.",
   "license": "MIT",
   "keywords": [

package/src/agent/agent.mjs

@@ -1147,6 +1147,7 @@ export function createAgent(options) {
   const peerKeys = new PeerKeyStore();
   /** P0-a: xfer.* frames arriving on a P2P channel are routed here, not to task dispatch. */
   const xferRouter = createXferFrameRouter();
+  let viewTargets = null;
   /**
    * What each task's direct channel actually was, for the result envelope.
    *
@@ -3969,11 +3970,19 @@ let attemptAttached = false;
       return;
     }
     if (payload !== null && typeof payload.type === 'string' && payload.type.startsWith('view.')) {
-      const target = createViewTarget({
-        capture: () => captureScreen({}),
-        allow: process.env.W2M_VIEW_ALLOW === '1',
-        send: (frame) => { try { event.channel.send(frame); } catch { /* peer gone */ } },
-      });
+      // A target owns the VK handshake state, so it must outlive one message:
+      // hello, request and stop for the same session share one instance.
+      viewTargets ??= new Map();
+      const key = String(payload.session_id ?? 'default');
+      let target = viewTargets.get(key);
+      if (target === undefined || payload.type === 'view.hello') {
+        target = createViewTarget({
+          capture: () => captureScreen({}),
+          allow: process.env.W2M_VIEW_ALLOW === '1',
+          send: (frame) => { try { event.channel.send(frame); } catch { /* peer gone */ } },
+        });
+        viewTargets.set(key, target);
+      }
       target.handle(payload);
       return;
     }

package/src/agent/view/frame-channel.mjs

@@ -1,11 +1,21 @@
 /**
- * P2P view frame channel (P1, view-only).
+ * P2P/P1.5 view frame channel (view-only).
  *
- * Frames are JSON on the existing P2PChannel (one JPEG per frame, ≤96 KiB).
- * The target defaults to DENY; consent is a separate decision supplied by the
- * caller (`allow: true`). Nothing here accepts input events.
+ * Handshake:
+ *   viewer → view.hello      { session_id, public_key }
+ *   target → view.hello_ack  { session_id, public_key }
+ *   both derive VK (X25519 + HKDF), then:
+ *   viewer → view.request    { fps, max_bytes }
+ *   target → view.frame      { ct (AES-256-GCM), bytes, seq }
+ *
+ * A frame without a prior hello is refused; the target defaults to DENY and
+ * never accepts input frames.
  */
+import { createViewSide, openViewFrame, sealViewFrame } from './session-key.mjs';
+
 export const VIEW_FRAME = Object.freeze({
+  HELLO: 'view.hello',
+  HELLO_ACK: 'view.hello_ack',
   REQUEST: 'view.request',
   FRAME: 'view.frame',
   STOP: 'view.stop',
@@ -14,7 +24,8 @@ export const VIEW_FRAME = Object.freeze({
 
 export const VIEW_CODE = Object.freeze({
   CONSENT_REQUIRED: 'VIEW_CONSENT_REQUIRED',
-  DISABLED: 'VIEW_DISABLED',
+  VK_REQUIRED: 'VIEW_VK_REQUIRED',
+  VK_BAD: 'VIEW_VK_BAD',
   FRAME_TOO_LARGE: 'VIEW_FRAME_TOO_LARGE',
   BAD_FRAME: 'VIEW_BAD_FRAME',
   CAPTURE_FAILED: 'VIEW_CAPTURE_FAILED',
@@ -24,29 +35,30 @@ export const VIEW_CODE = Object.freeze({
 const isObject = (value) => value !== null && typeof value === 'object' && !Array.isArray(value);
 const isInputFrame = (type) => /^(mouse|key|pointer|input)\./.test(type);
 
-export function parseViewFrame(payload) {
+function parseAny(payload) {
   try {
-    const frame = Buffer.isBuffer(payload) || typeof payload === 'string' ? JSON.parse(Buffer.from(payload).toString('utf8')) : payload;
-    if (!isObject(frame) || typeof frame.type !== 'string' || !frame.type.startsWith('view.')) return null;
-    return frame;
+    if (Buffer.isBuffer(payload) || typeof payload === 'string') return JSON.parse(Buffer.from(payload).toString('utf8'));
+    return payload;
   } catch { return null; }
 }
 
-/**
- * Target side: answer view.request with one JPEG frame; refuse by default.
- *
- * @param {{capture: Function, allow?: boolean, send: Function, maxBytes?: number, fps?: number}} deps
- */
+export function parseViewFrame(payload) {
+  const frame = parseAny(payload);
+  if (!isObject(frame) || typeof frame.type !== 'string' || !frame.type.startsWith('view.')) return null;
+  return frame;
+}
+
+/** @param {{capture:Function, allow?:boolean, send:Function, maxBytes?:number, fps?:number}} deps */
 export function createViewTarget({ capture, allow = false, send, maxBytes = 96 * 1024, fps = 1 } = {}) {
   if (typeof capture !== 'function' || typeof send !== 'function') return { ok: false, code: VIEW_CODE.BAD_FRAME };
   let seq = 0;
   let stopped = false;
+  let vk = null;
   const reply = (frame) => { try { send(JSON.stringify(frame)); } catch { /* channel gone */ } };
   return {
     ok: true,
     handle(payload) {
-      let raw = null;
-      try { raw = Buffer.isBuffer(payload) || typeof payload === 'string' ? JSON.parse(Buffer.from(payload).toString('utf8')) : payload; } catch { raw = null; }
+      const raw = parseAny(payload);
       if (isObject(raw) && typeof raw.type === 'string' && isInputFrame(raw.type)) {
         reply({ type: VIEW_FRAME.ERROR, code: VIEW_CODE.INPUT_FORBIDDEN, session_id: raw.session_id ?? null });
         return true;
@@ -54,61 +66,71 @@ export function createViewTarget({ capture, allow = false, send, maxBytes = 96 *
       const frame = parseViewFrame(payload);
       if (frame === null) return false;
       if (frame.type === VIEW_FRAME.STOP) { stopped = true; return true; }
+      if (frame.type === VIEW_FRAME.HELLO) {
+        if (typeof frame.public_key !== 'string' || frame.public_key === '') { reply({ type: VIEW_FRAME.ERROR, code: VIEW_CODE.VK_BAD, session_id: frame.session_id ?? null }); return true; }
+        try {
+          const side = createViewSide();
+          vk = side.finish(frame.public_key).key;
+          reply({ type: VIEW_FRAME.HELLO_ACK, session_id: frame.session_id ?? null, public_key: side.public_key });
+        } catch { reply({ type: VIEW_FRAME.ERROR, code: VIEW_CODE.VK_BAD, session_id: frame.session_id ?? null }); }
+        return true;
+      }
       if (frame.type !== VIEW_FRAME.REQUEST) return true;
       if (allow !== true) { reply({ type: VIEW_FRAME.ERROR, code: VIEW_CODE.CONSENT_REQUIRED, session_id: frame.session_id ?? null }); return true; }
       if (stopped) { reply({ type: VIEW_FRAME.ERROR, code: VIEW_CODE.DISABLED, session_id: frame.session_id ?? null }); return true; }
+      if (vk === null) { reply({ type: VIEW_FRAME.ERROR, code: VIEW_CODE.VK_REQUIRED, session_id: frame.session_id ?? null }); return true; }
       const result = capture({ maxBytes });
-      if (result?.ok !== true) {
-        reply({ type: VIEW_FRAME.ERROR, code: result?.code ?? VIEW_CODE.CAPTURE_FAILED, session_id: frame.session_id ?? null });
-        return true;
-      }
+      if (result?.ok !== true) { reply({ type: VIEW_FRAME.ERROR, code: result?.code ?? VIEW_CODE.CAPTURE_FAILED, session_id: frame.session_id ?? null }); return true; }
+      let ct;
+      try { ct = sealViewFrame(vk, result.data ?? Buffer.from(result.base64 ?? '', 'base64')); }
+      catch { reply({ type: VIEW_FRAME.ERROR, code: VIEW_CODE.VK_BAD, session_id: frame.session_id ?? null }); return true; }
       seq += 1;
-      reply({
-        type: VIEW_FRAME.FRAME,
-        session_id: frame.session_id ?? null,
-        seq,
-        ts_ms: Date.now(),
-        mime: result.mime ?? 'image/jpeg',
-        bytes: result.bytes,
-        data_b64: result.base64,
-      });
+      reply({ type: VIEW_FRAME.FRAME, session_id: frame.session_id ?? null, seq, ts_ms: Date.now(), mime: result.mime ?? 'image/jpeg', bytes: result.bytes, enc: 'aes-256-gcm', ct });
       return true;
     },
-    stats() { return { seq, stopped, allow: allow === true, fps, max_bytes: maxBytes }; },
+    stats() { return { seq, stopped, allow: allow === true, fps, max_bytes: maxBytes, encrypted: vk !== null }; },
   };
 }
 
-/**
- * Viewer side: request a frame and accept/validate the response.
- *
- * @param {{send: Function, onFrame: Function, maxBytes?: number}} deps
- */
+/** @param {{send:Function, onFrame:Function, maxBytes?:number}} deps */
 export function createViewClient({ send, onFrame, maxBytes = 96 * 1024 } = {}) {
   if (typeof send !== 'function' || typeof onFrame !== 'function') return { ok: false, code: VIEW_CODE.BAD_FRAME };
   let sessionId = null;
+  let machineId = null;
+  let side = null;
+  let vk = null;
   let lastSeq = 0;
+  const sendRequest = () => send(JSON.stringify({ type: VIEW_FRAME.REQUEST, session_id: sessionId, machine_id: machineId, fps: 1, max_bytes: maxBytes }));
   return {
     ok: true,
-    request({ machineId, session }) {
+    request({ machineId: machine = null, session } = {}) {
+      machineId = machine;
       sessionId = session ?? ('view-' + Date.now());
-      send(JSON.stringify({ type: VIEW_FRAME.REQUEST, session_id: sessionId, machine_id: machineId ?? null, fps: 1, max_bytes: maxBytes }));
+      side = createViewSide();
+      send(JSON.stringify({ type: VIEW_FRAME.HELLO, session_id: sessionId, public_key: side.public_key }));
       return sessionId;
     },
     accept(payload) {
       const frame = parseViewFrame(payload);
       if (frame === null) return false;
       if (frame.type === VIEW_FRAME.ERROR) { onFrame({ ok: false, code: frame.code ?? VIEW_CODE.CAPTURE_FAILED }); return true; }
+      if (frame.type === VIEW_FRAME.HELLO_ACK) {
+        try { vk = side.finish(frame.public_key).key; sendRequest(); }
+        catch { onFrame({ ok: false, code: VIEW_CODE.VK_BAD }); }
+        return true;
+      }
       if (frame.type !== VIEW_FRAME.FRAME) return true;
       if (sessionId !== null && frame.session_id !== sessionId) return true;
       if (!Number.isInteger(frame.seq) || frame.seq <= lastSeq) return true;
-      if (typeof frame.data_b64 !== 'string' || frame.data_b64 === '') { onFrame({ ok: false, code: VIEW_CODE.BAD_FRAME }); return true; }
-      const bytes = Buffer.from(frame.data_b64, 'base64').length;
-      if (bytes > maxBytes) { onFrame({ ok: false, code: VIEW_CODE.FRAME_TOO_LARGE }); return true; }
+      if (vk === null || typeof frame.ct !== 'string' || frame.ct === '') { onFrame({ ok: false, code: VIEW_CODE.VK_REQUIRED }); return true; }
+      let plaintext;
+      try { plaintext = openViewFrame(vk, frame.ct); } catch { onFrame({ ok: false, code: VIEW_CODE.VK_BAD }); return true; }
+      if (plaintext.length > maxBytes) { onFrame({ ok: false, code: VIEW_CODE.FRAME_TOO_LARGE }); return true; }
       lastSeq = frame.seq;
-      onFrame({ ok: true, seq: frame.seq, ts_ms: frame.ts_ms, mime: frame.mime ?? 'image/jpeg', bytes, data_b64: frame.data_b64 });
+      onFrame({ ok: true, seq: frame.seq, ts_ms: frame.ts_ms, mime: frame.mime ?? 'image/jpeg', bytes: plaintext.length, data_base64: plaintext.toString('base64'), encrypted: true });
       return true;
     },
     stop() { if (sessionId !== null) send(JSON.stringify({ type: VIEW_FRAME.STOP, session_id: sessionId })); },
-    stats() { return { sessionId, lastSeq }; },
+    stats() { return { sessionId, lastSeq, encrypted: vk !== null }; },
   };
 }

package/src/agent/view/session-key.mjs

@@ -0,0 +1,68 @@
+/**
+ * P1.5 view-session keys (VK).
+ *
+ * Ephemeral X25519 per session; both sides mix the shared secret with the two
+ * sorted public keys, so viewer and target derive the same 32-byte key without
+ * a static device key being reused for media. Frames are AES-256-GCM sealed;
+ * the relay only ever sees the base64 ciphertext.
+ */
+import { createCipheriv, createDecipheriv, createPublicKey, diffieHellman, generateKeyPairSync, hkdfSync, randomBytes } from 'node:crypto';
+
+export const VIEW_VK_LABEL = 'w2m-remote-view v1 session';
+export const VIEW_VK_SALT = 'w2m-remote-view v1 salt';
+
+const X25519_SPKI_PREFIX = Buffer.from('302a300506032b656e032100', 'hex');
+
+function ephemeral() {
+  const { privateKey, publicKey } = generateKeyPairSync('x25519');
+  const raw = publicKey.export({ type: 'spki', format: 'der' }).subarray(X25519_SPKI_PREFIX.length);
+  return { privateKey, publicKeyB64: raw.toString('base64') };
+}
+
+function peerPublic(raw) {
+  return createPublicKey({ key: Buffer.concat([X25519_SPKI_PREFIX, raw]), format: 'der', type: 'spki' });
+}
+
+function deriveKey(shared, publicA, publicB) {
+  const [first, second] = [publicA, publicB].sort();
+  return Buffer.from(hkdfSync('sha256', Buffer.from(shared), Buffer.from(VIEW_VK_SALT), Buffer.from(VIEW_VK_LABEL + '|' + first + '|' + second), 32));
+}
+
+/** One side's ephemeral keypair plus the public key to put in the signal. */
+export function createViewSide() {
+  const eph = ephemeral();
+  const publicKey = eph.publicKeyB64;
+  return {
+    public_key: publicKey,
+    /** @param {string} peerPublicKey base64 X25519 public key from the peer */
+    finish(peerPublicKey) {
+      if (typeof peerPublicKey !== 'string' || peerPublicKey === '') throw new Error('VIEW_VK_BAD_PEER_KEY');
+      const peer = Buffer.from(peerPublicKey, 'base64');
+      if (peer.length !== 32) throw new Error('VIEW_VK_BAD_PEER_KEY');
+      const shared = diffieHellman({ privateKey: eph.privateKey, publicKey: peerPublic(peer) });
+      return { key: deriveKey(shared, publicKey, peerPublicKey), public_key: publicKey };
+    },
+  };
+}
+
+export function sealViewFrame(key, plaintext) {
+  if (!Buffer.isBuffer(key) || key.length !== 32) throw new Error('VIEW_VK_BAD_KEY');
+  const iv = randomBytes(12);
+  const cipher = createCipheriv('aes-256-gcm', key, iv);
+  cipher.setAAD(Buffer.from('w2m-remote-view/frame'));
+  const body = Buffer.concat([cipher.update(plaintext), cipher.final()]);
+  const tag = cipher.getAuthTag();
+  return Buffer.concat([iv, tag, body]).toString('base64');
+}
+
+export function openViewFrame(key, encoded) {
+  if (!Buffer.isBuffer(key) || key.length !== 32) throw new Error('VIEW_VK_BAD_KEY');
+  const raw = Buffer.from(encoded, 'base64');
+  if (raw.length < 28) throw new Error('VIEW_VK_BAD_FRAME');
+  const iv = raw.subarray(0, 12);
+  const tag = raw.subarray(12, 28);
+  const decipher = createDecipheriv('aes-256-gcm', key, iv);
+  decipher.setAAD(Buffer.from('w2m-remote-view/frame'));
+  decipher.setAuthTag(tag);
+  return Buffer.concat([decipher.update(raw.subarray(28)), decipher.final()]);
+}

package/src/plugin/remote-view-route.mjs

@@ -11,6 +11,7 @@
 import { mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
 import { dirname, join } from 'node:path';
 import { captureHostScreen } from './capture-route.mjs';
+import { createViewSide, openViewFrame } from '../agent/view/session-key.mjs';
 
 export const REMOTE_CONFIG_PATH = '/api/w2m/remote/config';
 export const REMOTE_FRAME_PATH = '/api/w2m/remote/frame';
@@ -96,20 +97,30 @@ export function registerRemoteViewRoutes(ctx, deps = {}) {
         const dialled = await p2p.node.dial(machineId, {});
         if (dialled?.ok !== true) return Response.json({ ok: false, code: 'P2P_UNAVAILABLE', error: dialled?.error ?? 'P2P_DIAL_FAILED' }, { status: 502, headers: NO_STORE });
         const sessionId = 'view-' + Date.now().toString(36);
-        active = { machineId, sessionId, channel: dialled.channel, encrypted: dialled.channel?.encryption?.encrypted === true, latest: null, error: null, startedAt: Date.now() };
+        active = { machineId, sessionId, channel: dialled.channel, side: createViewSide(), vk: null, encrypted: dialled.channel?.encryption?.encrypted === true, latest: null, error: null, startedAt: Date.now() };
         listener = (event) => {
           const frame = payloadJson(event?.payload);
           if (frame === null || frame?.session_id !== sessionId) return;
+          if (frame.type === 'view.hello_ack') {
+            try {
+              active.vk = active.side.finish(frame.public_key).key;
+              active.encrypted = true;
+              void active.channel.send(JSON.stringify({ type: 'view.request', session_id: sessionId, machine_id: machineId, fps: 1, max_bytes: maxBytes }));
+            } catch { active.error = 'VIEW_VK_BAD'; }
+            return;
+          }
           if (frame.type === 'view.frame') {
-            const bytes = typeof frame.data_b64 === 'string' ? Buffer.from(frame.data_b64, 'base64').length : 0;
-            if (bytes > maxBytes) { active.error = 'VIEW_FRAME_TOO_LARGE'; return; }
-            active.latest = { seq: frame.seq ?? null, mime: frame.mime ?? 'image/jpeg', bytes, data_base64: frame.data_b64, at: new Date().toISOString(), encrypted: active.encrypted };
+            if (active.vk === null) { active.error = 'VIEW_VK_REQUIRED'; return; }
+            let plaintext;
+            try { plaintext = openViewFrame(active.vk, frame.ct); } catch { active.error = 'VIEW_VK_BAD'; return; }
+            if (plaintext.length > maxBytes) { active.error = 'VIEW_FRAME_TOO_LARGE'; return; }
+            active.latest = { seq: frame.seq ?? null, mime: frame.mime ?? 'image/jpeg', bytes: plaintext.length, data_base64: plaintext.toString('base64'), at: new Date().toISOString(), encrypted: true };
           } else if (frame.type === 'view.error') {
             active.error = frame.code ?? 'VIEW_ERROR';
           }
         };
         p2p.node.on('message', listener);
-        await dialled.channel.send(JSON.stringify({ type: 'view.request', session_id: sessionId, machine_id: machineId, fps: 1, max_bytes: maxBytes }));
+        await dialled.channel.send(JSON.stringify({ type: 'view.hello', session_id: sessionId, public_key: active.side.public_key }));
         return Response.json({ ok: true, machine_id: machineId, session_id: sessionId, encrypted: active.encrypted, channel: 'p2p' }, { headers: NO_STORE });
       },
     });

package/src/plugin/tools.mjs

@@ -137,6 +137,7 @@ import {
   P2PNode,
   SHARED_SERVER,
   normalizeP2PMode,
+  normalizeP2PPort,
   stunServersWithShared,
 } from '../agent/p2p-node.mjs';
 // The punch identity both ends have to agree on (v0.4.x). Imported from the transport that will use
@@ -198,7 +199,7 @@ import { registerProjectStreamRoute } from './project-stream-route.mjs';
 import { planProgress } from './joint-dev/progress.mjs';
 import { registerJointTools } from './tools-joint.mjs';
 import { fingerprintOf, readOperatorToken } from './operator-token.mjs';
-import { registerCaptureRoutes } from './capture-route.mjs';
+import { registerCaptureRoutes } from './capture-route.mjs';
 import { registerRemoteViewRoutes } from './remote-view-route.mjs';
 import { defaultExecCapabilityFile } from '../util/exec-capability.mjs';
 import { createFleetCouncil, fleetCouncilThread } from './council-fleet.mjs';
@@ -292,7 +293,7 @@ const MAX_STAGES = 16;
  * `package.json` during `scripts/pack.mjs` rather than hand-maintained, and `W2M_PLUGIN_VERSION`
  * overrides it at runtime for tests and packagers.
  */
-const PLUGIN_VERSION = '2.1.2';
+const PLUGIN_VERSION = '2.1.3';
 
 /** How long any single HTTP call may take before it is aborted, in milliseconds. */
 const DEFAULT_REQUEST_TIMEOUT_MS = 15_000;
@@ -743,6 +744,7 @@ function readConfig(config = {}) {
   // silent default when a value *is* supplied.
   const p2p = resolveP2PMode(config);
   const p2pMode = p2p.mode;
+  const p2pPortResult = normalizeP2PPort(config.p2pPort);
   const stun = resolveStunServers(config);
   const stunList = stun.servers;
 
@@ -930,6 +932,8 @@ function readConfig(config = {}) {
       ? config.bootstrapOperatorKey
       : (typeof process.env.W2M_BOOTSTRAP_OPERATOR_KEY === 'string' && process.env.W2M_BOOTSTRAP_OPERATOR_KEY.trim() !== '' ? process.env.W2M_BOOTSTRAP_OPERATOR_KEY : DEFAULT_BOOTSTRAP_OPERATOR_KEY_PEM),
     p2pMode,
+    p2pPort: p2pPortResult.ok ? p2pPortResult.port : null,
+    p2pPortError: p2pPortResult.ok ? null : `P2P_PORT_INVALID: ${p2pPortResult.reason}`,
     stunServers: stunList,
   };
 }
@@ -2031,6 +2035,7 @@ async function initP2P(ctx, cfg, runtime, block) {
     getJson: transport.getJson,
     stunServers: cfg.stunServers,
     log: (line) => ctx?.logger?.info?.(`w2m ${line}`),
+    ...(Number.isInteger(cfg.p2pPort) ? { bindPort: cfg.p2pPort } : {}),
     ...(keyLoad.key === null ? {} : { deviceKey: keyLoad.key }),
     ...block,
   });
@@ -3610,10 +3615,10 @@ export async function apply(ctx, config = {}) {
   // v1.7.1: host-side screenshot + clipboard fallbacks. The DSH desktop shell does not grant the
   // renderer getDisplayMedia/navigator.clipboard, so the chat panel needs a host route that does not
   // depend on those permissions.
-  registerCaptureRoutes(ctx);
-  const remoteViewRoutes = registerRemoteViewRoutes(ctx, { stateDir: cfg.stateDir ?? '', p2p });
-  if (remoteViewRoutes.mounted !== true) {
-    ctx.logger?.info?.('w2m: remote-view routes inactive — ' + remoteViewRoutes.reason);
+  registerCaptureRoutes(ctx);
+  const remoteViewRoutes = registerRemoteViewRoutes(ctx, { stateDir: cfg.stateDir ?? '', p2p });
+  if (remoteViewRoutes.mounted !== true) {
+    ctx.logger?.info?.('w2m: remote-view routes inactive — ' + remoteViewRoutes.reason);
   }
   if (capabilityRoutes.mounted !== true) {
     ctx.logger?.warn?.('w2m: the execution-capability control is inactive — ' + capabilityRoutes.reason);

package/src/relay/server.mjs

@@ -60,6 +60,7 @@ export const BLOB_FRAME_BYTES = 16 * 1024 * 1024; // 16 MiB per blob frame -- th
 // BLOB_UPLOAD_FAILED even though the agent had accepted it. One number for "how large may one artifact be" is the honest shape;
 // the JSON frame limit stays 64 KiB for every other route.
 import { createFleetMessages } from './fleet-messages.mjs';
+import { createRemoteMediaBroker, parseRemoteFrame } from './remote-media.mjs';
 import { can as mayAct } from '../util/policy-matrix.mjs';
 import { createFleetMemory } from './fleet-memory.mjs';
 import { createJoinChallenges } from './join-challenge.mjs';
@@ -737,7 +738,10 @@ export class RelayServer {
     // received bytes, so no route may consume the stream first and re-serialise.
     /** v1.2.7: only the blob channel gets the larger frame cap; every JSON route keeps the 64 KiB frame limit. */
     const blobFrameLimit = method === 'PUT' && path.startsWith('/v1/fleet/blobs/') ? BLOB_FRAME_BYTES : this.frameLimitBytes;
-    const rawBody = methodHasBody(method) ? await readRawBody(req, blobFrameLimit) : null;
+    // P1.5: 47 KiB ciphertext is ~63 KiB once base64-encoded inside JSON; give this
+    // one opaque route the headroom it needs, and no other JSON route gets it.
+    const bodyFrameLimit = method === 'POST' && path === '/v1/remote/frame' ? 70 * 1024 : blobFrameLimit;
+    const rawBody = methodHasBody(method) ? await readRawBody(req, bodyFrameLimit) : null;
     const takeJson = () => parseJsonBody(rawBody);
 
     /* ---- public endpoints ---- */
@@ -1447,6 +1451,35 @@ export class RelayServer {
     this.fleetMessages ??= createFleetMessages({ now: () => this.state.nowMs() });
     this.fleetMemory ??= createFleetMemory({ now: () => this.state.nowMs() });
 
+    if (path === '/v1/remote/frame') {
+      // P1.5: opaque ciphertext only. The body is never logged, parsed as media
+      // or persisted; the broker keeps one newest frame per session with a TTL.
+      this.remoteMedia ??= createRemoteMediaBroker();
+      if (method === 'POST') {
+        const body = takeJson();
+        const parsed = parseRemoteFrame(body);
+        if (parsed.ok !== true) {
+          return sendJson(res, 400, { protocol_version: PROTOCOL_VERSION, ok: false, error: { code: parsed.code, message: 'remote.frame refused' } });
+        }
+        if (parsed.target !== device.machine_id) {
+          return sendJson(res, 403, { protocol_version: PROTOCOL_VERSION, ok: false, error: { code: 'REMOTE_MEDIA_BAD_SESSION', message: 'only the target machine may publish its frame' } });
+        }
+        const opened = this.remoteMedia.open(parsed.session_id, parsed.target);
+        if (opened.ok !== true) return sendJson(res, 400, { protocol_version: PROTOCOL_VERSION, ok: false, error: { code: opened.code, message: 'remote.frame refused' } });
+        const stored = this.remoteMedia.put(parsed.session_id, parsed.target, parsed.ciphertext);
+        if (stored.ok !== true) return sendJson(res, 413, { protocol_version: PROTOCOL_VERSION, ok: false, error: { code: stored.code, message: 'remote.frame refused' } });
+        return sendJson(res, 200, { protocol_version: PROTOCOL_VERSION, ok: true, bytes: stored.bytes });
+      }
+      if (method === 'GET') {
+        const sessionId = url.searchParams.get('session_id');
+        const target = url.searchParams.get('target');
+        const taken = this.remoteMedia.take(sessionId, target);
+        if (taken.ok !== true) return sendJson(res, 404, { protocol_version: PROTOCOL_VERSION, ok: false, error: { code: taken.code, message: 'remote.frame unavailable' } });
+        return sendJson(res, 200, { protocol_version: PROTOCOL_VERSION, ok: true, ct: taken.ciphertext.toString('base64'), bytes: taken.bytes, at_ms: taken.at });
+      }
+      return sendJson(res, 405, { protocol_version: PROTOCOL_VERSION, ok: false, error: { code: 'METHOD_NOT_ALLOWED', message: 'GET or POST only' } });
+    }
+
     if (method === 'POST' && path === '/v1/fleet/messages') {
       /**
        * v1.2.6: posting to the group is a dispatch-class action. An observer may read the flow and may not speak into it, and