THRAUR

Plumichat

Name: Plumichat
Author: THRAUR

Data community

SOURCE https://github.com/THRAUR/plumichat

Description

Self-hosted web app for driving Claude Code from your phone. Streaming turns, permission prompts as taps, a real terminal, and two-layer agent sandboxing. Node 22, no build step, no framework, no database.

Installation

This entry records only its repository, not the path inside it, so there is no exact command to give. Open the source below and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

README

PlumiChat

**Drive [Claude Code](https://claude.com/claude-code) from your phone.**

A self-hosted web app that puts an agentic coding session — streaming output, tool approvals, a real terminal, file browsing — on any device you own, with the work still happening on your machine.

Runs on Linux, macOS and Windows. No build step, no framework, no database.

[Install](docs/INSTALL.md) · [Usage](docs/USAGE.md) · [Architecture](docs/ARCHITECTURE.md) · [Security](docs/SECURITY.md)

A conversation mid-turn: tool calls, rendered markdown with a copyable code block, and the next answer still streaming

A turn in flight — tool calls, rendered output, and the answer still streaming.

A permission prompt on a phone: Deny, Allow once, Allow always The same permission prompt on a desktop

Claude Code's permission prompts, as taps. The full command is shown before you approve it.

[!IMPORTANT] **PlumiChat gives a language model a shell on the machine it runs on.** That is the point of it, and it is why it binds to `127.0.0.1` by default and refuses to start on a public interface with no authentication configured. Read [SECURITY.md](docs/SECURITY.md) before exposing it to anything.

Why

Claude Code is a terminal program. Terminals are not usable on a phone: no arrow keys, no scrollback worth reading, no way to approve a permission prompt one-handed on a train.

PlumiChat is that session as a web app. Not a wrapper that shells out to the CLI and prints the output — it drives the Agent SDK directly, so tool calls, permission prompts, questions, background agents and session history are all first-class.

The design constraint throughout: **the primary client is an iPhone home-screen web app on a bad connection.** That single as