Garry Tan 3126363c2c feat(ios): Mac-side daemon (bun/TS) for Tailscale identity gating + USB proxy ...

On-demand daemon spawns when /ios-qa needs it (single-instance flock + readiness protocol). Owns tailnet ingress: fail-closed tailscaled LocalAPI probe, dual-track /auth/mint (self-service for allowlisted identities, owner-granted via CLI), capability-tier allowlist (observe/interact/mutate/restore), 1h default session TTL (24h hard cap), audit log of every authenticated mutating tailnet request, hashed-identity attempts log. iOS StateServer never directly binds tailnet — identity validation lives Mac-side because iPhones can't reach tailscaled. 67 unit/integration tests covering session-lock concurrency, capability enforcement, fail-closed probe, identity canonicalization, body limits, and boot-token leak proofs.

2026-05-17 19:06:01 -07:00

..

src

feat(ios): Mac-side daemon (bun/TS) for Tailscale identity gating + USB proxy

2026-05-17 19:06:01 -07:00

test

feat(ios): Mac-side daemon (bun/TS) for Tailscale identity gating + USB proxy

2026-05-17 19:06:01 -07:00