Josh Avant beebeac11d fix(gateway): restore external Tailscale Serve and Funnel proxies (#125412) ...

* fix(gateway): allow trusted external Tailscale routes

* fix(gateway): require auth for external Funnel

* docs(gateway): clarify external Funnel probe behavior

2026-08-17 16:01:35 -07:00

..

security

fix(gateway): restore external Tailscale Serve and Funnel proxies (#125412)

2026-08-17 16:01:35 -07:00

1password.md

fix(onepassword): make SecretRef setup production-safe

2026-07-25 06:03:30 -05:00

audit.md

feat(audit): explain outbound message delivery (#123709)

2026-08-16 21:26:27 -07:00

authentication.md

feat(secrets): add SQLite-backed secret store (#121559)

2026-08-10 07:08:40 -07:00

background-process.md

fix(exec): make timeout unit explicit (#119874)

2026-08-10 20:02:53 -07:00

bonjour.md

docs: replace retired config keys with canonical schema keys (#121330)

2026-08-09 20:30:43 -07:00

bridge-protocol.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

cli-backends.md

fix: preserve Claude CLI prompt cache reuse across turns (#124300)

2026-08-15 18:17:17 -07:00

clients.md

feat(ui): session-reset dividers + boundary markers for DB-backed sessions (#122222)

2026-08-11 12:59:11 -07:00

cloud-workers.md

refactor(workers): make worker turns node-only (#125384)

2026-08-17 15:46:59 -07:00

config-agents.md

fix(agents): honor system owner for unscoped reads (#125318)

2026-08-17 14:07:56 -07:00

config-channels.md

fix(slack): drop the tool-call receipt from finished progress cards (#123851)

2026-08-16 14:58:23 -07:00

config-tools.md

feat(agents): configure per-agent GitHub identities (#125199)

2026-08-17 15:54:03 -07:00

configuration-examples.md

fix(gateway): reject unattributable loopback proxy traffic [AI] (#119950)

2026-08-16 21:01:20 -07:00

configuration-reference.md

fix(gateway): restore external Tailscale Serve and Funnel proxies (#125412)

2026-08-17 16:01:35 -07:00

configuration.md

feat(heartbeat): default delivery to the configured owner, never groups (#121988)

2026-08-11 13:18:22 +00:00

diagnostics.md

refactor(config): purge numeric tuning knobs behind built-in defaults (#111382)

2026-07-19 07:35:45 -07:00

discovery.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

doctor.md

fix(gateway): reject unattributable loopback proxy traffic [AI] (#119950)

2026-08-16 21:01:20 -07:00

embedding.md

docs(gateway): add client-building and embedding guides (#111726)

2026-07-20 02:12:52 -07:00

external-apps.md

fix(gateway): restart after prepared maintenance suspension (#124157)

2026-08-15 04:53:38 -07:00

gateway-lock.md

fix(gateway): derive lock and coordinator paths from the resolved state dir (#120110)

2026-08-06 19:16:13 -07:00

health.md

fix(health): surface blocked ingress lanes (#123234)

2026-08-13 12:44:59 -07:00

heartbeat.md

feat(heartbeat): default delivery to the configured owner, never groups (#121988)

2026-08-11 13:18:22 +00:00

index.md

docs: drop retired gateway.reload keys and modes from config docs (#116975)

2026-07-31 15:35:16 -07:00

local-model-services.md

refactor(plugins): replace node-llama-cpp with managed llama-server (#123105)

2026-08-13 16:58:20 -07:00

local-models.md

refactor(config): consolidate context budget to one per-model knob (#124665)

2026-08-16 10:05:01 -07:00

logging.md

refactor(channels): flatten channel-turn dispatch naming layers (#121308)

2026-08-09 22:22:46 -07:00

multi-tenant-hosting.md

docs(fleet): remove MVP framing

2026-07-13 17:56:18 -07:00

multiple-gateways.md

fix(sqlite): serialize offline maintenance with gateway (#106210)

2026-07-13 18:15:32 +08:00

network-model.md

…

openai-http-api.md

fix(gateway): validate chat completion token caps (#116563)

2026-07-30 14:37:04 -07:00

openresponses-http-api.md

refactor(config): purge numeric tuning knobs behind built-in defaults (#111382)

2026-07-19 07:35:45 -07:00

openshell.md

docs: replace retired config keys with canonical schema keys (#121330)

2026-08-09 20:30:43 -07:00

opentelemetry.md

fix(diagnostics-otel): keep telemetry exporting across in-process restarts (#120131)

2026-08-07 22:24:18 +08:00

operator-scopes.md

docs(gateway): correct node pairing storage (#124571)

2026-08-16 05:46:44 -07:00

pairing.md

docs(gateway): clarify dynamic operator scopes (#122931)

2026-08-12 19:23:54 -07:00

permission-modes.md

feat: session permission modes with worktree-scoped defaults (#124909)

2026-08-17 04:37:35 -07:00

portals.md

docs(gateway): document portal tool gating and tighten its description (#123091)

2026-08-13 02:38:24 -07:00

prometheus.md

feat: trace Claude Code CLI model calls (#108304)

2026-07-18 06:23:49 +10:00

protocol.md

docs: document three-layer session ownership (#125334)

2026-08-17 09:35:07 -07:00

remote-gateway-readme.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

remote.md

fix(wizard): honor remote password auth in probes (#118134)

2026-08-12 00:46:25 +07:00

restart-recovery.md

fix(delivery): keep failed queue rows payload-free (#123642)

2026-08-14 06:22:51 -07:00

sandbox-vs-tool-policy-vs-elevated.md

feat(agents): unify agent status into a durable progress_card (#125125)

2026-08-17 09:44:04 -07:00

sandboxing.md

docs(install): clarify lifecycle script trust (#124727)

2026-08-17 01:00:17 -07:00

secrets-plan-contract.md

fix(cli): oversized secrets plans consume unbounded memory (#109652)

2026-07-18 07:18:21 +01:00

secrets.md

fix(secrets): scope egress sentinels to Gateway and survive client tunnel resets (#123527)

2026-08-14 01:56:29 -07:00

stable-https-url.md

fix(gateway): reject unattributable loopback proxy traffic [AI] (#119950)

2026-08-16 21:01:20 -07:00

tailscale.md

fix(gateway): restore external Tailscale Serve and Funnel proxies (#125412)

2026-08-17 16:01:35 -07:00

tools-invoke-http-api.md

docs: rewrite published docs grounded in current source (#100142)

2026-07-05 00:32:47 -04:00

troubleshooting.md

refactor(heartbeat): delete unreachable prompt-null skip and dead lanes-busy surface (#124385)

2026-08-15 20:48:00 -07:00

trusted-proxy-auth.md

fix(gateway): reject unattributable loopback proxy traffic [AI] (#119950)

2026-08-16 21:01:20 -07:00