# Terminal, audio & events

Interactive transports for complete desktop workflows.

Status: Roadmap · Streaming services not deployed

## Terminal
An authenticated terminal is full command execution in the customer environment. The planned broker needs a separate execution permission, process timeout, output limits and explicit tenant context. Screen-view permission must not silently grant a shell.

## Audio
Microphone input and desktop audio output need independent access controls, visible recording state and retention choices. Access to the computer does not automatically authorize recording other people. Driver and codec support must be verified per operating system.

## Events
Computer readiness, suspension, reset completion and controller failure should produce ordered events with durable IDs. Reconnecting clients need a cursor and reconciliation path. A lost event must not change the authoritative rental or billing state.

## Transport boundaries
The target is authenticated WebSocket or equivalent streaming through the gateway. Customer clients should never receive the host's Tailscale address, host SSH credentials or a reusable administrator password. An expired lease must terminate active transports as well as block new ones.