Engineering notes, including what was wrong the first time.

One outbound WebSocket: driving terminals and dev servers on machines you can’t route to

A worker dials out once; yamux multiplexes terminals and proxied dev servers over that one connection; state stays on the worker so the control plane can deploy mid-day; a capability handshake survives version skew. Plus the SIGTTOU deadlock, the trust dialog that ate the prompt, and the port two tickets fought over.