- Detect resume (boottime-monotonic jump) and tear down the tunnel: on wake
NetworkManager drops Mudfish's relay route and all traffic black-holes.
- Turn the tunnel off on plugin unload (Deck shutdown/restart).
- One verified teardown path for disconnect, connect failure/timeout and
node-change failure; keep the route snapshot if tap0 stays up.
- Toggle can always turn off a stuck tunnel; status failure with tap0 up
is reported as an error, not off.
- Re-sign in once when the cloud rejects an expired jwt.
- Expire cached pings after 10 minutes.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Prepare signs in on load (never connects), system CA bundle for HTTPS,
root-owned deploy extraction.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
ysj7705andClaude Opus 5.5