This is a small Node agent on a Windows PC (zero dependencies, binds to 127.0.0.1 only) exposed through tailscale serve, plus a PWA. Tap a folder on the phone and it starts a Claude Code session there with --remote-control, which you then drive from the Claude app. It's a start button, not a terminal.
The trade is spelled out in the README: a session runs with your account's full permissions and anything on your tailnet can reach the agent, behind a six-digit passcode with a lockout. Fine for a single-user tailnet, not for a shared one.
Windows only for now. Happy to answer questions about the design.