Peter Steinberger dc5954b0f8 fix(gateway): reject no-auth tailscale exposure ...

Fixes #50630.
Replaces stale PR #50631.

Behavior: reject gateway auth mode none when Tailscale Serve or Funnel exposes the gateway, across config validation, install-token preflight, and runtime startup.

Proof:
- node scripts/run-vitest.mjs src/config/config.gateway-tailscale-bind.test.ts src/gateway/server-runtime-config.test.ts src/commands/doctor-gateway-auth-token.test.ts
- .agents/skills/autoreview/scripts/autoreview --mode local
- node scripts/crabbox-wrapper.mjs run --shell -- "pnpm check:changed" (run_5a999c1e11c0, exit 0)
- GitHub PR checks clean on 0b306e8e00ebfe2856e672fbd1964a51a69bfe58; prior checkout/diff failures were GitHub infrastructure and cleared after rebase.

2026-05-27 14:11:17 +01:00

..

net

fix(agents): scope custom provider baseUrl SSRF trust by origin (#80751)

2026-05-15 11:00:29 +01:00

text

refactor: reuse shared coercion helpers (#86419)

2026-05-25 21:20:41 +01:00

agent-liveness.ts

fix(agents): surface blocked subagent completions (#80886)

2026-05-21 22:34:21 +00:00

agent-run-status.test.ts

refactor: centralize agent run pending status

2026-05-05 18:21:58 +01:00

agent-run-status.ts

refactor: centralize agent run pending status

2026-05-05 18:21:58 +01:00

assistant-error-format.ts

Handle generic provider internal errors (#49401)

2026-05-12 23:58:27 +03:00

assistant-identity-values.test.ts

…

assistant-identity-values.ts

…

avatar-policy.test.ts

…

avatar-policy.ts

[codex] Extract filesystem safety primitives (#77918)

2026-05-06 02:15:17 +01:00

balanced-json.ts

…

chat-content.test.ts

…

chat-content.ts

…

chat-envelope.test.ts

…

chat-envelope.ts

chore(channels): remove bluebubbles bundled surface

2026-05-07 12:52:48 -07:00

chat-message-content.test.ts

…

chat-message-content.ts

…

config-eval.test.ts

test: share process platform spy helper

2026-05-17 16:52:46 +08:00

config-eval.ts

…

config-ui-hints-types.ts

…

custom-command-config.ts

…

device-auth-store.test.ts

fix(auth): sanitize persisted device auth tokens

2026-05-16 13:18:22 +08:00

device-auth-store.ts

refactor: reuse shared coercion helpers (#86419)

2026-05-25 21:20:41 +01:00

device-auth.test.ts

test: tighten shared empty array assertions

2026-05-09 05:37:51 +01:00

device-auth.ts

fix(auth): sanitize persisted device auth tokens

2026-05-16 13:18:22 +08:00

device-bootstrap-profile.test.ts

fix(gateway): gate talk secret bootstrap handoff (#85690)

2026-05-25 11:34:12 +03:00

device-bootstrap-profile.ts

fix(gateway): gate talk secret bootstrap handoff (#85690)

2026-05-25 11:34:12 +03:00

device-pairing-access.test.ts

…

device-pairing-access.ts

…

entry-metadata.test.ts

test: tighten shared empty object assertions

2026-05-09 04:13:56 +01:00

entry-metadata.ts

…

entry-status.test.ts

test: share process platform spy helper

2026-05-17 16:52:46 +08:00

entry-status.ts

…

frontmatter.test.ts

test: tighten shared empty array assertions

2026-05-09 05:37:51 +01:00

frontmatter.ts

…

gateway-bind-url.test.ts

…

gateway-bind-url.ts

…

gateway-method-policy.ts

refactor: hide core helper internals

2026-05-02 08:47:11 +01:00

gateway-tailscale-auth-policy.ts

fix(gateway): reject no-auth tailscale exposure

2026-05-27 14:11:17 +01:00

global-singleton.test.ts

…

global-singleton.ts

…

google-models.ts

…

google-turn-ordering.ts

Revert "refactor: move runtime state to SQLite"

2026-05-13 13:33:38 +01:00

human-list.ts

…

import-specifier.ts

fix(agents): normalize Windows runtime imports (#72731)

2026-04-27 10:34:25 +01:00

json-schema-defaults.ts

refactor: migrate validators to TypeBox (#86639)

2026-05-26 08:45:28 +01:00

json-schema.types.ts

…

lazy-promise.test.ts

refactor: unify lazy module loaders

2026-05-02 10:15:25 +01:00

lazy-promise.ts

refactor: unify lazy module loaders

2026-05-02 10:15:25 +01:00

lazy-runtime.ts

…

listeners.ts

…

message-content-blocks.ts

…

model-param-b.test.ts

…

model-param-b.ts

…

node-list-parse.test.ts

test: tighten shared empty array assertions

2026-05-09 05:37:51 +01:00

node-list-parse.ts

…

node-list-types.ts

feat: add authenticated iOS background presence beacon (#73330)

2026-04-28 08:10:35 +01:00

node-match.test.ts

test: tighten registry empty array assertions

2026-05-09 05:40:02 +01:00

node-match.ts

…

node-presence.ts

refactor: hide shared constants

2026-05-02 08:29:21 +01:00

node-resolve.test.ts

…

node-resolve.ts

…

number-coercion.test.ts

refactor: reuse shared coercion helpers (#86419)

2026-05-25 21:20:41 +01:00

number-coercion.ts

refactor: reuse shared coercion helpers (#86419)

2026-05-25 21:20:41 +01:00

operator-scope-compat.test.ts

…

operator-scope-compat.ts

…

pid-alive.test.ts

test: share process platform spy helper

2026-05-17 16:52:46 +08:00

pid-alive.ts

fix(auth): reclaim zombie-owned stale locks

2026-05-14 08:49:00 +01:00

record-coerce.test.ts

…

record-coerce.ts

refactor: reuse shared coercion helpers (#86419)

2026-05-25 21:20:41 +01:00

regexp.ts

…

requirements.test.ts

fix(skills): accept macos os requirement on darwin (#85451)

2026-05-22 18:23:31 +01:00

requirements.ts

fix(skills): accept macos os requirement on darwin (#85451)

2026-05-22 18:23:31 +01:00

runtime-import.test.ts

fix(agents): normalize Windows runtime imports (#72731)

2026-04-27 10:34:25 +01:00

runtime-import.ts

fix(agents): normalize Windows runtime imports (#72731)

2026-04-27 10:34:25 +01:00

scoped-expiring-id-cache.ts

…

session-types.ts

Add chat picker search and pagination

2026-05-22 19:07:21 +10:00

session-usage-timeseries-types.ts

…

silent-reply-policy.test.ts

fix(auto-reply): restrict no-reply to automatic groups

2026-05-15 21:29:39 +01:00

silent-reply-policy.ts

fix(auto-reply): restrict no-reply to automatic groups

2026-05-15 21:29:39 +01:00

string-coerce.test.ts

refactor: reuse shared coercion helpers (#86419)

2026-05-25 21:20:41 +01:00

string-coerce.ts

refactor: reuse shared coercion helpers (#86419)

2026-05-25 21:20:41 +01:00

string-normalization.test.ts

refactor: reuse shared coercion helpers (#86419)

2026-05-25 21:20:41 +01:00

string-normalization.ts

refactor: reuse shared coercion helpers (#86419)

2026-05-25 21:20:41 +01:00

string-sample.test.ts

…

string-sample.ts

…

subagents-format.test.ts

…

subagents-format.ts

…

tailscale-status.test.ts

…

tailscale-status.ts

…

text-chunking.test.ts

test: tighten shared empty array assertions

2026-05-09 05:37:51 +01:00

text-chunking.ts

…

thread-binding-lifecycle.test.ts

…

thread-binding-lifecycle.ts

…

usage-aggregates.test.ts

test: tighten registry empty array assertions

2026-05-09 05:40:02 +01:00

usage-aggregates.ts

…

usage-types.ts

fix(usage): roll up session lineage history

2026-05-07 22:38:11 -05:00