Under the hood
Security
Who can reach the daemon, and how each of its three doors is kept.
A daemon that can type into an agent with push rights is worth guarding. It has three doors, and each is kept differently.
The socket
The terminal UI and the commands reach the daemon over a unix socket, readable and writable by you alone, in a folder only you can enter. That folder’s permissions are the whole of the local boundary, as they are for tmux. A web page can’t reach a unix socket at all.
The hook receiver
A loopback port the system picks, new on every start, with a bearer token that is new on every start and compared in constant time. Only a session the daemon started is handed either.
The phone link
Only paired phones can reach the daemon over its encrypted link. Pairing codes expire and can be used once. Removing a phone revokes its access.