zexadev/dsh-tether

## Core Features
- DSH Tether carries the DeepSeek Harness web interface from a development machine to a phone through a direct peer-to-peer connection.
- The phone presents conversations, tool calls, approvals, and settings from the original DSH interface rather than a separate reimplementation.
- Pairing uses a six-digit code, and paired devices can reconnect automatically across different networks without a user-deployed relay.
- The phone app can store several paired machines, allowing switching, renaming, removing, or adding computers without re-entering credentials.
- Approval waiting states can raise system notifications on the phone, while approval decisions remain inside the DSH interface.

## Use Cases
- Monitoring and approving a DeepSeek Harness session from a phone while away from the development machine's local network.
- Keeping the agent running on the machine where code lives while using a phone over cellular or another network for control.
- Managing multiple development machines from one phone when each machine runs the DSH web profile and the tether plugin.

## Technical Details
- The machine side installs as a DSH web plugin and includes a Rust sidecar that owns the iroh connection.
- Network traversal uses iroh hole-punching over QUIC/TLS, with a fallback relay carrying only ciphertext when direct traversal fails.
- Pairing access is tied to the phone's iroh public key, and unpaired peers cannot reach the interface before completing the control-stream handshake.
- The plugin's HTTP routes enforce loopback Host rules, reject explicit cross-site markers, and require attached Origin values to match the Host.

## Notes
- The iOS build is beta, unsigned, built only in CI, and has not been run on a real device, while Android is verified on real hardware.
- The app connects when opened and does not maintain a background connection.
- A local process on the development machine can mint a pairing code and pair itself, so the plugin should not be used on machines running untrusted code.