sisyphuslabs/doriterm

Your devices. One terminal.
Every machine you own, linked through an end-to-end encrypted mesh.
doriterm.com ·
install ·
how the relay fits ·
mesh ·
security ·
contributing ·
architecture
0 keys at the relay that open your sessions  ·  8 characters to pair, behind CPace  · 
1 sidebar for every machine
Doriterm puts the shells and coding agents on your machines in a browser tab, a phone and a desktop app. A host runs
beside herdr-core (hc) where the work actually happens, your machines link into
one mesh, and every session is encrypted end to end with Noise: the relay in the middle forwards ciphertext and holds no key
that opens it.
Because that host pipes hc's own JSON-RPC and framed terminal protocol through byte for byte, every hc feature works
without Doriterm re-implementing it — and what crosses the network is a Noise session, not a remote-desktop stream.
## What you get
Your terminals, on every screen. The browser tab, the phone's home screen and the desktop app open the same workspace: the
same tabs, panes and layout.
Agents that say when they need you. The sidebar groups every session as _needs you_, _working_, _idle_, _done_ or
_offline_, so you read the list instead of cycling through panes looking for the one that stopped.
One window, many machines. Machines in your mesh show up in each other's sidebar, and a host
added over ssh or through the relay with hc machine add --via appears next to your local ones as b/t1, b/t2, … with its
own reconnect.
Machines that vouch for each other. Membership is a set of records every member signs with its Ed25519 key and syncs
over the same encrypted relay — no ssh, no open port, and one record revokes a machine everywhere.
An encrypted pipe, not a proxy. Each client holds its own Noise session with the host: IKpsk2 with the pairing code's
preshared key for the first one, IK from then on. The relay forwards records it cannot read.
A real terminal. libghostty-vt compiled to WebAssembly from Ghostty v1.4.0, with the wasm build's provenance checked in
CI, so cells, fonts and escape sequences behave like the terminal you already use.
A phone that can drive a terminal. A key bar for ctrl, shift, tab, esc and the arrows, a paste button, and IME composition
that reaches the terminal ahead of any key, chord or paste, so a syllable still being composed is not split by it.
Installs and stays installed. The desktop app starts the host and hc on the computer it runs on, starts the host again
if it stops, and installs herdr-core for this user when it is missing or too old.
| Needs you, day theme | A terminal on a phone |
## Install
Three pieces: a host, the machine whose terminals you want; a client, which is the browser, a phone or the desktop
app; and the relay between them, which is already deployed. The shortest path is three steps:
1. Start a host on the machine whose terminals you want. The desktop app does it for you when it opens, or run
doriface-host from this repository.
2. Open a client: the desktop app, or the web app at app.doriterm.com;
doriface.omo.dev keeps serving the same build while the move completes.
3. Pair it with the host — scan the QR code the host prints, or open the link it prints, and confirm the fingerprint it