When autologin is rejected the panel offers '휴대폰으로 로그인 (QR)'. It opens
a 5-minute LAN relay to the launcher UI guarded by a one-time token (first
phone to open the QR URL is the only client allowed) and shows the URL as a
QR code. The relay closes as soon as a new session appears, on cancel, on
expiry, and on unload.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
- Detect resume (boottime-monotonic jump) and tear down the tunnel: on wake
NetworkManager drops Mudfish's relay route and all traffic black-holes.
- Turn the tunnel off on plugin unload (Deck shutdown/restart).
- One verified teardown path for disconnect, connect failure/timeout and
node-change failure; keep the route snapshot if tap0 stays up.
- Toggle can always turn off a stuck tunnel; status failure with tap0 up
is reported as an error, not off.
- Re-sign in once when the cloud rejects an expired jwt.
- Expire cached pings after 10 minutes.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Prepare signs in on load (never connects), system CA bundle for HTTPS,
root-owned deploy extraction.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
ysj7705andClaude Opus 5.5