omdsh-remctrl

DeepSeek Harness runs on a loopback address, and everything—sessions, tool approvals, settings—lives behind that single local window. The problem is one sentence long: close the laptop, walk out the door, and the window locks with you inside. omdsh-remctrl solves exactly that. One switch flipped and the same dsh interface appears at a public https:// URL. Type a passcode and what you see on your phone is the same app, same buttons, same sessions—not a read-only mirror, not a summary, but the forwarded thing itself.

Under the hood it holds a single door: a reverse proxy in front of the loopback port that passes HTTP and both WebSocket downlinks through verbatim, rewriting the Host header to 127.0.0.1 so the harness trust fence still holds. With no publicHost set, a Cloudflare quick tunnel gives you an https://….trycloudflare.com link with zero firewall, certificate, or proxy config. The passcode gate is the entire security model: a signed-out browser sees one form, six attempts per minute per address, Origin and HTTPS checks fire before any cookie is read. On a phone, two layout quirks—iOS keyboard pushing the composer out of the visual viewport, and the expanded sidebar squeezing the conversation column—are patched via the data-* attributes dsh already writes, leaving the build output untouched.

It is for the person whose daily work lives in dsh and who keeps reaching for a phone at 4 pm knowing the session is three rooms away. Install it, flip the switch, send the link to yourself. The input box is there.