Support Remote browser and media keys and connection history UI

Accept the eighteen browser, volume, media and launch identities in the input vocabulary and both SDKs. Exercise media-key capture on the private Xorg harness, and permit only the new remember-host checkbox in the connection form integration test.

Validated: affected-package race tests, Tentacles make check, private native_remote_input.py and native_remote_keys.py. Physical input, live peer interoperability, speech and Braille acceptance remain pending.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

internal/app/tentacle_remote_connection_test.go

@@ -116,7 +116,9 @@ func select_remote_relay(t *testing.T, forms *consentTestForms, address, role st
 		if element.ID == "channel-key" && (!element.Secret || element.Text != "") {
 			t.Fatal("key unmasked or prefilled")
 		}
-		if element.Kind == interaction.CheckBox {
+		// The only Tentacle checkbox is remembering the host and key;
+		// access is chosen solely in the reader-owned approval form.
+		if element.Kind == interaction.CheckBox && element.ID != "remember" {
 			t.Fatal("permissions duplicated")
 		}
 	}

internal/input/remote_capture_test.go

@@ -315,7 +315,7 @@ func TestBehaviorRemoteCaptureConsumesUnsupportedKeys(t *testing.T) {
 		{release(121), RemoteCaptureResult{}},
 		{release(codeShift), remote(up(codeShift))},
 	})
-	for keysym, want := range map[string]string{"Prior": "Page_Up", "KP_Next": "KP_Page_Down", "a": "a", "A": "", "XF86AudioMute": "", "ISO_Level3_Shift": ""} {
+	for keysym, want := range map[string]string{"Prior": "Page_Up", "KP_Next": "KP_Page_Down", "a": "a", "A": "", "XF86AudioMute": "XF86AudioMute", "XF86Eject": "", "ISO_Level3_Shift": ""} {
 		if got := RemoteCaptureKeyName(keysym); got != want {
 			t.Fatalf("%s = %q, want %q", keysym, got, want)
 		}

internal/input/remote_key_names.go

@@ -28,7 +28,12 @@ func ValidRemoteKeyName(name string) bool {
 		"KP_Left", "KP_Up", "KP_Right", "KP_Down", "KP_Insert", "KP_Delete",
 		"KP_Multiply", "KP_Add", "KP_Separator", "KP_Subtract", "KP_Decimal", "KP_Divide",
 		"semicolon", "equal", "comma", "minus", "period", "slash", "grave", "bracketleft",
-		"backslash", "bracketright", "apostrophe":
+		"backslash", "bracketright", "apostrophe",
+		// Browser, volume, media and launch keys (Windows VK 0xa6-0xb7).
+		"XF86Back", "XF86Forward", "XF86Reload", "XF86Stop", "XF86Search", "XF86Favorites",
+		"XF86HomePage", "XF86AudioMute", "XF86AudioLowerVolume", "XF86AudioRaiseVolume",
+		"XF86AudioNext", "XF86AudioPrev", "XF86AudioStop", "XF86AudioPlay", "XF86Mail",
+		"XF86AudioMedia", "XF86MyComputer", "XF86Calculator":
 		return true
 	}
 	return false

internal/platform/xorg/remote_capture_native_test.go

@@ -113,8 +113,13 @@ func TestNativeRemoteCaptureForwardsBypassesAndEscapes(t *testing.T) {
 	expect("t", true, true)
 	expect("", false, false)
 	expect("", false, false)
-	// Unsupported keys are consumed locally, not forwarded.
+	// Media keys are forwarded.
 	run("key", "XF86AudioMute")
+	if mute := expect("XF86AudioMute", true, true); expect("", false, false) != mute {
+		t.Fatal("media key release paired with another keycode")
+	}
+	// Unsupported keys are consumed locally, not forwarded.
+	run("key", "XF86Eject")
 	// Remote's own shortcut stays local: it withdraws the forwarded prefix and
 	// returns the keyboard here without running the command.
 	run("key", "Insert+ctrl+r")

internal/tentaclewire/remote_key_test.go

@@ -22,6 +22,10 @@ func TestRemoteKeySDKValidation(t *testing.T) {
 		{`{"name":"Control_R","pressed":false}`, true},
 		{`{"name":"KP_Enter","pressed":true}`, true},
 		{`{"name":"semicolon","pressed":false}`, true},
+		{`{"name":"XF86AudioRaiseVolume","pressed":true}`, true},
+		{`{"name":"XF86Calculator","pressed":false}`, true},
+		{`{"name":"XF86Eject","pressed":true}`, false},
+		{`{"name":"XF86PowerOff","pressed":true}`, false},
 		{`{"name":"Prior","pressed":true}`, false},
 		{`{"name":"A","pressed":true}`, false},
 		{`{"name":"F01","pressed":true}`, false},