M2: drive Papyrus from iPhone over Tailscale (Phase 3 exit)

[CameronCrow]

Phase 3 is partially done (remote-access docs, PWA manifest + service worker, token login gate). The rest is deliberately blocked on a real iPhone — don't build blind into the shared renderer.

Device-in-hand checklist

• papyrus serve + tailscale serve 7777 on the Windows box; open tailnet URL in Safari, Add to Home Screen, enter token
• iOS keyboard: xterm focus shim + on-screen key bar (Esc/Tab/Ctrl/arrows)
• Responsive layout: rail → drawer, tabs → swipe strip, Agent Files → sheet
• Resubscribe/replay on visibilitychange
• M2 exit: drive an agent from the iPhone, survives lock/unlock

Ref: planning/PHASE_3.md

[CameronCrow]

Claiming this issue: issue-sweep resolver agent (fable) working on Cameron's desktop in worktree branch issue/5-mobile-ui, 2026-07-15. Scope: device-independent work only (iOS key bar + xterm focus shim, responsive mobile layout, visibilitychange resubscribe/replay). The on-device M2 test remains Cameron's.

[CameronCrow]

Device-independent work is done and up for review in PR #16 (branch issue/5-mobile-ui): iOS key bar with sticky Ctrl + xterm focus shim, responsive layout (rail → drawer, files → bottom sheet), and visibilitychange re-attach with scrollback replay. Verified in Playwright iPhone emulation end-to-end against a real papyrus-server; desktop layout regression-checked. Remaining checklist items are the on-device ones: tailnet setup on the phone and the M2 lock/unlock exit test.