pr #24943 real-dev verification, 2026-10-28
main: c3858bf1f7 (github/main fetched this turn)
pr: 36a1d193d4818754d114550c905a9edb56d12440

main: git worktree add ../main github/main; vp i
T3CODE_TAILSCALE_SERVE=true vp run dev --no-seed (background)
[dev-runner] serverPort=16733 webPort=8693 baseDir=/home/user/main/.t3
real Tailscale 1.90.9, userspace daemon, isolated state
tailscale status --json: BackendState=NeedsLogin; TailscaleIPs=null; CurrentTailnet=null
tailscale serve status --json: {}
tailscale serve --bg --https=443 http://127.0.0.1:16733: Logged out. (exit 1)
Failed to configure Tailscale Serve
  {
    cause: {
      _tag: 'TailscaleCommandExitError',
      executable: 'tailscale',
      subcommand: 'serve',
      argumentCount: 4,
      exitCode: 1,
      stderrLength: 12,
      stderrDiagnostic: 'not-logged-in'
    },
    localPort: 16733,
    servePort: 443
  }
main web client paired and loaded. original hijack NOT reproduced: tailnet authentication unavailable. main stopped before pr server.

pr: exact head checked out; vp i
T3CODE_TAILSCALE_SERVE=true vp run dev (background)
[dev-runner] serverPort=13773 webPort=5733
Failed to configure Tailscale Serve
  {
    cause: {
      _tag: 'TailscaleCommandExitError',
      executable: 'tailscale',
      subcommand: 'serve',
      argumentCount: 4,
      exitCode: 1,
      stderrLength: 12,
      stderrDiagnostic: 'not-logged-in'
    },
    localPort: 13773,
    servePort: 443
  }
web app paired using real startup link. project /home/user/serve-verification added through Add project > Local folder. new thread with Codex GPT-6.1-Sol selected.
turn 1 reply: local provider path verified.
turn 2 reply: follow-up verified.
no mocks, replay, fixture or demo turns.

then stopped task-owned tailscaled and restarted the pr dev server.
Failed to configure Tailscale Serve
  {
    cause: {
      _tag: 'TailscaleCommandTimeoutError',
      executable: 'tailscale',
      subcommand: 'serve',
      argumentCount: 3,
      timeoutMs: 3500,
      cause: {
        message: "Operation timed out after '3s 500ms'",
        _tag: 'TimeoutError',
        '~effect/Cause/TimeoutError': '~effect/Cause/TimeoutError'
      }
    },
    localPort: 13773,
    servePort: 443
  }
this is the three-argument serve status read timing out, before the mapping write. local app still works.
opened the existing thread and reloaded the page: both replies persisted.
GET /.well-known/t3/environment -> HTTP 200, same environmentId before/after restart.
Connections settings loads; this web surface has no desktop Tailscale HTTPS toggle.

supplementary checks on Blacksmith: vp i && vp test run packages/tailscale/src/tailscale.test.ts apps/server/src/environment/DirectEndpoints.test.ts apps/desktop/src/backend/tailscaleEndpointProvider.test.ts
3 files passed; 27 tests passed. existing head CI: 27 successful, 0 failing, 0 pending. no source changes.

NOT VERIFIED: occupied live mapping preservation, dead-target recovery, root-only release preserving other handlers, Funnel/foreground preservation, foreign environment rejection over a real tailnet URL, Electron toggle, macOS/Windows/mobile. no logged-in tailnet on this VM, so this pass cannot certify the fix.