RenzoMXD 60f1b1f8d9 fix(gateway): preserve external Tailscale Funnel routes in serve mode ...

Adds opt-in `gateway.tailscale.preserveFunnel`. When `tailscale.mode = "serve"`
and an externally configured Tailscale Funnel route already covers the gateway
port, OpenClaw checks `tailscale funnel status --json` before re-applying
`tailscale serve` and skips both Serve and the `resetOnExit` teardown for that
run, preserving operator-managed Funnel exposure across gateway restarts.

The Funnel-status parser handles every documented Tailscale target scheme
(http, https, https+insecure) via an RFC 3986 scheme strip, plus loopback
hostnames (127.0.0.1, localhost, ::1) and bare-port forms. AllowFunnel-disabled
hosts and other-port routes are ignored.

Closes #57241.

2026-05-08 09:28:51 -04:00

..

security

…

authentication.md

…

background-process.md

…

bonjour.md

…

bridge-protocol.md

…

cli-backends.md

…

config-agents.md

Keep OpenAI Codex migrations on automatic runtime routing (#79238)

2026-05-08 16:05:35 +09:00

config-channels.md

…

config-tools.md

…

configuration-examples.md

…

configuration-reference.md

fix(gateway): preserve external Tailscale Funnel routes in serve mode

2026-05-08 09:28:51 -04:00

configuration.md

…

diagnostics.md

…

discovery.md

…

doctor.md

Keep OpenAI Codex migrations on automatic runtime routing (#79238)

2026-05-08 16:05:35 +09:00

gateway-lock.md

…

health.md

…

heartbeat.md

…

index.md

…

local-models.md

…

logging.md

…

multiple-gateways.md

…

network-model.md

…

openai-http-api.md

…

openresponses-http-api.md

…

openshell.md

…

opentelemetry.md

…

operator-scopes.md

…

pairing.md

…

prometheus.md

…

protocol.md

…

remote-gateway-readme.md

…

remote.md

…

sandbox-vs-tool-policy-vs-elevated.md

…

sandboxing.md

…

secrets-plan-contract.md

…

secrets.md

…

tailscale.md

fix(gateway): preserve external Tailscale Funnel routes in serve mode

2026-05-08 09:28:51 -04:00

tools-invoke-http-api.md

…

troubleshooting.md

…

trusted-proxy-auth.md

…