Remote access tools often leak their implementation into the user interface. A user is asked to copy a host, paste a port, keep a token nearby, and remember which machine is which.
PocketWorkers removes that ritual from the client.
The client sees gateways
After sign-in, the client asks the backend for the team's available gateways. It receives names, status, and the information needed to open an authorized route.
It does not ask the user to type network details.
The backend keeps leases
FRP port assignments are backend-owned records. They can be created, rotated, expired, and audited without changing the client workflow.
That is important because a gateway is not a static URL. It is a machine with a current access lease.
The gateway keeps worker truth
The gateway is still the only source of runtime truth. If Codex is unavailable, busy, or disconnected, that state comes from AgentGateway, not from an optimistic database row.
PocketWorkers is designed so the database helps clients find the lane, while the gateway tells the truth about what is alive in that lane.