Comprehensive design for v9.5 remote access feature: - WinBox TCP tunnel through poller with localhost port allocation - Browser SSH terminal via xterm.js + WebSocket to poller SSH relay - RBAC enforcement (operator+), audit logging, session tokens - Infrastructure: nginx WebSocket proxy, Docker port range mapping Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>