A persistent, password-protected OpenCode 2.x server on macOS (built-in service or launchd), a private Tailscale path, and two phone clients: the built-in web UI paired with opencode pair, and the KKCode iOS app. Includes auth smoke tests, troubleshooting, and rollback steps.