shed-remote-agent¶

A mobile-first web UI that browses sheds across configured hosts and bootstraps claude remote-control sessions inside them. Pair it with the Claude mobile, web, or desktop app to pick up a coding session from anywhere on your Tailscale network.

Features¶

List sheds across all hosts discovered from ~/.shed/config.yaml
Create a new shed with a git repo (gh-backed picker) or a host-side local directory
Bootstrap claude remote-control in /workspace of any running shed over SSH + tmux
Actionable state surface: starting, ready, reconnecting, needs-trust, needs-auth, dead — no more guessing why a session isn't connected
One-tap open of the generated https://claude.ai/code?environment=env_... URL in the Claude app

Architecture¶

flowchart LR
    subgraph client["Phone / Laptop"]
        APP["Claude app / browser"]
    end

    subgraph host["Tailscale host"]
        API["shed-remote-agent API (Bun/Hono)"]
        WEB["Vite web UI"]
    end

    subgraph shedhost["Shed host"]
        SS["shed-server"]
        subgraph VM["Shed VM"]
            TMUX["tmux rc-&lt;slug&gt;"]
            CLAUDE["claude remote-control"]
            TMUX --> CLAUDE
        end
        SS --> VM
    end

    subgraph anthropic["claude.ai"]
        SESSION["session env_..."]
    end

    APP -->|HTTPS| WEB
    WEB -->|/api| API
    API -->|HTTP| SS
    API -->|SSH| VM
    CLAUDE -->|outbound HTTPS| SESSION
    APP -.joins.-> SESSION

The backend fans out to every shed-server listed in ~/.shed/config.yaml, streams create-shed SSE progress through to the browser, and uses SSH + tmux + claude remote-control to produce a joinable session URL.

Requirements¶

Component	Requirements
Backend host	Bun ≥ 1.0 (this is where the API + web run)
Shed hosts	A running `shed-server` reachable from the backend host
Auth	None in-app. Deploy the backend behind Tailscale (or an equivalent private network)
Optional	`gh` (for the repo picker) and a GitHub account for Claude subscription

Quick Links¶

Installation — Get the backend + UI running
Configuration — The two config files
Quick Start — First shed, first remote-control session
HTTP API — Every endpoint the backend exposes
Remote Control — The six states and what to do about each
Development Setup — Hack on the code
Roadmap — What's intentionally deferred

Security Model¶

No auth in the app by design. It is meant to live on a Tailscale-gated host where network access already implies trust. Do not expose it to the public internet.