@fastybird/smart-panel-backend 1.1.0-alpha.2 → 1.1.0-alpha.21

package/dist/plugins/remote-access-tailscale/controllers/status.controller.js

@@ -17,6 +17,7 @@ const common_1 = require("@nestjs/common");
 const swagger_1 = require("@nestjs/swagger");
 const logger_1 = require("../../../common/logger");
 const transform_utils_1 = require("../../../common/utils/transform.utils");
+const platform_service_1 = require("../../../modules/platform/services/platform.service");
 const provider_model_1 = require("../../../modules/remote-access/models/provider.model");
 const api_documentation_decorator_1 = require("../../../modules/swagger/decorators/api-documentation.decorator");
 const roles_guard_1 = require("../../../modules/users/guards/roles.guard");
@@ -26,18 +27,22 @@ const remote_access_tailscale_constants_1 = require("../remote-access-tailscale.
 const tailscale_login_service_1 = require("../services/tailscale-login.service");
 const tailscale_node_managed_service_1 = require("../services/tailscale-node-managed.service");
 const tailscale_provider_service_1 = require("../services/tailscale-provider.service");
+const tailscale_setup_service_1 = require("../services/tailscale-setup.service");
 let StatusController = class StatusController {
-    constructor(providerService, nodeManagedService, loginService) {
+    constructor(providerService, nodeManagedService, loginService, setupService, platformService) {
         this.providerService = providerService;
         this.nodeManagedService = nodeManagedService;
         this.loginService = loginService;
+        this.setupService = setupService;
+        this.platformService = platformService;
         this.logger = (0, logger_1.createExtensionLogger)(remote_access_tailscale_constants_1.REMOTE_ACCESS_TAILSCALE_PLUGIN_NAME, 'StatusController');
     }
     async getStatus(res) {
         this.logger.debug('Fetching Tailscale node status');
-        const [status, requirements] = await Promise.all([
+        const [status, requirements, privilegedWorkerSupport] = await Promise.all([
             this.providerService.getStatus(),
             this.nodeManagedService.evaluateRequirements(),
+            this.platformService.getPrivilegedWorkerSupport(),
         ]);
         const data = new status_model_1.RemoteAccessTailscalePluginStatusModel();
         data.type = status.type;
@@ -49,6 +54,11 @@ let StatusController = class StatusController {
         data.advisories = (0, transform_utils_1.toInstance)(provider_model_1.RemoteAccessAdvisoryModel, status.advisories);
         data.updatedAt = status.updatedAt;
         data.requirements = (0, transform_utils_1.toInstance)(status_model_1.RemoteAccessTailscalePluginRequirementModel, requirements);
+        data.setup = this.buildSetupJobModel();
+        const privilegedSetup = new status_model_1.RemoteAccessTailscalePluginPrivilegedSetupModel();
+        privilegedSetup.available = privilegedWorkerSupport.supported;
+        privilegedSetup.reason = privilegedWorkerSupport.reason;
+        data.privilegedSetup = privilegedSetup;
         if (data.state === 'pending-auth') {
             const pending = this.loginService.getPendingInteractiveAuth();
             if (pending) {
@@ -61,6 +71,19 @@ let StatusController = class StatusController {
         response.data = data;
         return response;
     }
+    buildSetupJobModel() {
+        const lastJob = this.setupService.getLastJob();
+        if (!lastJob) {
+            return null;
+        }
+        const model = new status_model_1.RemoteAccessTailscalePluginSetupJobModel();
+        model.jobId = lastJob.id;
+        model.state = lastJob.status.state;
+        model.step = lastJob.status.step ?? null;
+        model.message = lastJob.status.message ?? null;
+        model.updatedAt = lastJob.status.updatedAt;
+        return model;
+    }
 };
 exports.StatusController = StatusController;
 __decorate([
@@ -83,6 +106,8 @@ exports.StatusController = StatusController = __decorate([
     (0, roles_guard_1.Roles)(users_constants_1.UserRole.ADMIN, users_constants_1.UserRole.OWNER),
     __metadata("design:paramtypes", [tailscale_provider_service_1.TailscaleProviderService,
         tailscale_node_managed_service_1.TailscaleNodeManagedService,
-        tailscale_login_service_1.TailscaleLoginService])
+        tailscale_login_service_1.TailscaleLoginService,
+        tailscale_setup_service_1.TailscaleSetupService,
+        platform_service_1.PlatformService])
 ], StatusController);
 //# sourceMappingURL=status.controller.js.map

package/dist/plugins/remote-access-tailscale/controllers/status.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"status.controller.js","sourceRoot":"","sources":["../../../../src/plugins/remote-access-tailscale/controllers/status.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAEA,2CAAsD;AACtD,6CAAwD;AAExD,mDAA+D;AAC/D,2EAAmE;AACnE,yFAG8D;AAC9D,iHAAqG;AACrG,2EAAkE;AAClE,4EAAkE;AAClE,yDAIgC;AAChC,4FAG8C;AAC9C,iFAA4E;AAC5E,+FAAyF;AACzF,uFAAkF;AAK3E,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IAG5B,YACkB,eAAyC,EACzC,kBAA+C,EAC/C,YAAmC;QAFnC,oBAAe,GAAf,eAAe,CAA0B;QACzC,uBAAkB,GAAlB,kBAAkB,CAA6B;QAC/C,iBAAY,GAAZ,YAAY,CAAuB;QALpC,WAAM,GAAG,IAAA,8BAAqB,EAAC,uEAAmC,EAAE,kBAAkB,CAAC,CAAC;IAMtG,CAAC;IAWE,AAAN,KAAK,CAAC,SAAS,CAA6B,GAAa;QACxD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAEpD,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAChD,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE;YAChC,IAAI,CAAC,kBAAkB,CAAC,oBAAoB,EAAE;SAC9C,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,IAAI,qDAAsC,EAAE,CAAC;QAC1D,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACxB,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC1B,IAAI,CAAC,SAAS,GAAG,IAAA,4BAAU,EAAC,0CAAyB,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QACzE,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC;QACtC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC;QAC5C,IAAI,CAAC,UAAU,GAAG,IAAA,4BAAU,EAAC,0CAAyB,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;QAC3E,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,YAAY,GAAG,IAAA,4BAAU,EAAC,0DAA2C,EAAE,YAAY,CAAC,CAAC;QAE1F,IAAI,IAAI,CAAC,KAAK,KAAK,cAAc,EAAE,CAAC;YAOnC,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,yBAAyB,EAAE,CAAC;YAE9D,IAAI,OAAO,EAAE,CAAC;gBACb,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;gBAC/B,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC;YACtB,CAAC;YAED,GAAG,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QACzC,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,6DAA8C,EAAE,CAAC;QACtE,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC;QAErB,OAAO,QAAQ,CAAC;IACjB,CAAC;CACD,CAAA;AA3DY,4CAAgB;AAkBtB;IATL,IAAA,sBAAY,EAAC;QACb,IAAI,EAAE,CAAC,+EAA2C,CAAC;QACnD,OAAO,EAAE,2BAA2B;QACpC,WAAW,EACV,iJAAiJ;QAClJ,WAAW,EAAE,2CAA2C;KACxD,CAAC;IACD,IAAA,gDAAkB,EAAC,6DAA8C,EAAE,8CAA8C,CAAC;IAClH,IAAA,YAAG,EAAC,QAAQ,CAAC;IACG,WAAA,IAAA,YAAG,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;;;;iDAwC1C;2BA1DW,gBAAgB;IAH5B,IAAA,iBAAO,EAAC,+EAA2C,CAAC;IACpD,IAAA,mBAAU,GAAE;IACZ,IAAA,mBAAK,EAAC,0BAAQ,CAAC,KAAK,EAAE,0BAAQ,CAAC,KAAK,CAAC;qCAKF,qDAAwB;QACrB,4DAA2B;QACjC,+CAAqB;GANzC,gBAAgB,CA2D5B"}
+{"version":3,"file":"status.controller.js","sourceRoot":"","sources":["../../../../src/plugins/remote-access-tailscale/controllers/status.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAEA,2CAAsD;AACtD,6CAAwD;AAExD,mDAA+D;AAC/D,2EAAmE;AACnE,0FAAsF;AACtF,yFAG8D;AAC9D,iHAAqG;AACrG,2EAAkE;AAClE,4EAAkE;AAClE,yDAMgC;AAChC,4FAG8C;AAC9C,iFAA4E;AAC5E,+FAAyF;AACzF,uFAAkF;AAClF,iFAA4E;AAKrE,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IAG5B,YACkB,eAAyC,EACzC,kBAA+C,EAC/C,YAAmC,EACnC,YAAmC,EACnC,eAAgC;QAJhC,oBAAe,GAAf,eAAe,CAA0B;QACzC,uBAAkB,GAAlB,kBAAkB,CAA6B;QAC/C,iBAAY,GAAZ,YAAY,CAAuB;QACnC,iBAAY,GAAZ,YAAY,CAAuB;QACnC,oBAAe,GAAf,eAAe,CAAiB;QAPjC,WAAM,GAAG,IAAA,8BAAqB,EAAC,uEAAmC,EAAE,kBAAkB,CAAC,CAAC;IAQtG,CAAC;IAWE,AAAN,KAAK,CAAC,SAAS,CAA6B,GAAa;QACxD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAEpD,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE,uBAAuB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACzE,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE;YAChC,IAAI,CAAC,kBAAkB,CAAC,oBAAoB,EAAE;YAC9C,IAAI,CAAC,eAAe,CAAC,0BAA0B,EAAE;SACjD,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,IAAI,qDAAsC,EAAE,CAAC;QAC1D,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACxB,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC1B,IAAI,CAAC,SAAS,GAAG,IAAA,4BAAU,EAAC,0CAAyB,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QACzE,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC;QACtC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC;QAC5C,IAAI,CAAC,UAAU,GAAG,IAAA,4BAAU,EAAC,0CAAyB,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;QAC3E,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,YAAY,GAAG,IAAA,4BAAU,EAAC,0DAA2C,EAAE,YAAY,CAAC,CAAC;QAC1F,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAEvC,MAAM,eAAe,GAAG,IAAI,8DAA+C,EAAE,CAAC;QAC9E,eAAe,CAAC,SAAS,GAAG,uBAAuB,CAAC,SAAS,CAAC;QAC9D,eAAe,CAAC,MAAM,GAAG,uBAAuB,CAAC,MAAM,CAAC;QACxD,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;QAEvC,IAAI,IAAI,CAAC,KAAK,KAAK,cAAc,EAAE,CAAC;YAOnC,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,yBAAyB,EAAE,CAAC;YAE9D,IAAI,OAAO,EAAE,CAAC;gBACb,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;gBAC/B,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC;YACtB,CAAC;YAED,GAAG,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QACzC,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,6DAA8C,EAAE,CAAC;QACtE,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC;QAErB,OAAO,QAAQ,CAAC;IACjB,CAAC;IAGO,kBAAkB;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC;QAE/C,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,uDAAwC,EAAE,CAAC;QAC7D,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;QACnC,KAAK,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC;QACzC,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC;QAC/C,KAAK,CAAC,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;QAE3C,OAAO,KAAK,CAAC;IACd,CAAC;CACD,CAAA;AAtFY,4CAAgB;AAoBtB;IATL,IAAA,sBAAY,EAAC;QACb,IAAI,EAAE,CAAC,+EAA2C,CAAC;QACnD,OAAO,EAAE,2BAA2B;QACpC,WAAW,EACV,iJAAiJ;QAClJ,WAAW,EAAE,2CAA2C;KACxD,CAAC;IACD,IAAA,gDAAkB,EAAC,6DAA8C,EAAE,8CAA8C,CAAC;IAClH,IAAA,YAAG,EAAC,QAAQ,CAAC;IACG,WAAA,IAAA,YAAG,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;;;;iDA+C1C;2BAnEW,gBAAgB;IAH5B,IAAA,iBAAO,EAAC,+EAA2C,CAAC;IACpD,IAAA,mBAAU,GAAE;IACZ,IAAA,mBAAK,EAAC,0BAAQ,CAAC,KAAK,EAAE,0BAAQ,CAAC,KAAK,CAAC;qCAKF,qDAAwB;QACrB,4DAA2B;QACjC,+CAAqB;QACrB,+CAAqB;QAClB,kCAAe;GARtC,gBAAgB,CAsF5B"}

package/dist/plugins/remote-access-tailscale/models/status.model.d.ts

@@ -1,11 +1,28 @@
 import { BaseSuccessResponseModel } from '../../../modules/api/models/api-response.model';
 import { RemoteAccessAdvisoryModel, RemoteAccessEndpointModel } from '../../../modules/remote-access/models/provider.model';
 import { RemoteAccessProviderState } from '../../../modules/remote-access/platforms/remote-access-provider.platform';
+import { PrivilegedJobStatus } from '../../../modules/system/services/privileged-worker.service';
 import { TailscaleRequirementCode } from '../services/tailscale-node-managed.service';
+export declare class RemoteAccessTailscalePluginRequirementRemedyModel {
+    commands: string[];
+    note: string | null;
+}
 export declare class RemoteAccessTailscalePluginRequirementModel {
     code: TailscaleRequirementCode;
     satisfied: boolean;
     message: string;
+    remedy: RemoteAccessTailscalePluginRequirementRemedyModel | null;
+}
+export declare class RemoteAccessTailscalePluginSetupJobModel {
+    jobId: string;
+    state: PrivilegedJobStatus['state'];
+    step: string | null;
+    message: string | null;
+    updatedAt: string;
+}
+export declare class RemoteAccessTailscalePluginPrivilegedSetupModel {
+    available: boolean;
+    reason: string | null;
 }
 export declare class RemoteAccessTailscalePluginStatusModel {
     type: string;
@@ -19,6 +36,8 @@ export declare class RemoteAccessTailscalePluginStatusModel {
     requirements: RemoteAccessTailscalePluginRequirementModel[];
     authUrl?: string;
     qr?: string;
+    setup: RemoteAccessTailscalePluginSetupJobModel | null;
+    privilegedSetup: RemoteAccessTailscalePluginPrivilegedSetupModel;
 }
 export declare class RemoteAccessTailscalePluginStatusResponseModel extends BaseSuccessResponseModel<RemoteAccessTailscalePluginStatusModel> {
     data: RemoteAccessTailscalePluginStatusModel;

package/dist/plugins/remote-access-tailscale/models/status.model.js

@@ -9,7 +9,7 @@ var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.RemoteAccessTailscalePluginStatusResponseModel = exports.RemoteAccessTailscalePluginStatusModel = exports.RemoteAccessTailscalePluginRequirementModel = void 0;
+exports.RemoteAccessTailscalePluginStatusResponseModel = exports.RemoteAccessTailscalePluginStatusModel = exports.RemoteAccessTailscalePluginPrivilegedSetupModel = exports.RemoteAccessTailscalePluginSetupJobModel = exports.RemoteAccessTailscalePluginRequirementModel = exports.RemoteAccessTailscalePluginRequirementRemedyModel = void 0;
 const class_transformer_1 = require("class-transformer");
 const class_validator_1 = require("class-validator");
 const swagger_1 = require("@nestjs/swagger");
@@ -34,6 +34,37 @@ const TAILSCALE_REQUIREMENT_CODES = [
     'operator-granted',
     'version-supported',
 ];
+const TAILSCALE_SETUP_JOB_STATES = ['running', 'complete', 'failed', 'timeout'];
+let RemoteAccessTailscalePluginRequirementRemedyModel = class RemoteAccessTailscalePluginRequirementRemedyModel {
+};
+exports.RemoteAccessTailscalePluginRequirementRemedyModel = RemoteAccessTailscalePluginRequirementRemedyModel;
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Exact console commands that satisfy this requirement on the detected system',
+        type: 'array',
+        items: { type: 'string' },
+        example: ['sudo systemctl enable --now tailscaled'],
+    }),
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.IsString)({ each: true }),
+    __metadata("design:type", Array)
+], RemoteAccessTailscalePluginRequirementRemedyModel.prototype, "commands", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        description: 'Vendor or documentation link, present instead of commands when no exact command applies',
+        type: 'string',
+        nullable: true,
+        example: null,
+    }),
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], RemoteAccessTailscalePluginRequirementRemedyModel.prototype, "note", void 0);
+exports.RemoteAccessTailscalePluginRequirementRemedyModel = RemoteAccessTailscalePluginRequirementRemedyModel = __decorate([
+    (0, swagger_1.ApiSchema)({ name: 'RemoteAccessTailscalePluginDataRequirementRemedy' })
+], RemoteAccessTailscalePluginRequirementRemedyModel);
 let RemoteAccessTailscalePluginRequirementModel = class RemoteAccessTailscalePluginRequirementModel {
 };
 exports.RemoteAccessTailscalePluginRequirementModel = RemoteAccessTailscalePluginRequirementModel;
@@ -67,9 +98,112 @@ __decorate([
     (0, class_validator_1.IsString)(),
     __metadata("design:type", String)
 ], RemoteAccessTailscalePluginRequirementModel.prototype, "message", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        description: 'Exact console commands that satisfy this requirement; null once it is satisfied',
+        type: () => RemoteAccessTailscalePluginRequirementRemedyModel,
+        nullable: true,
+    }),
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.ValidateNested)(),
+    (0, class_transformer_1.Type)(() => RemoteAccessTailscalePluginRequirementRemedyModel),
+    __metadata("design:type", RemoteAccessTailscalePluginRequirementRemedyModel)
+], RemoteAccessTailscalePluginRequirementModel.prototype, "remedy", void 0);
 exports.RemoteAccessTailscalePluginRequirementModel = RemoteAccessTailscalePluginRequirementModel = __decorate([
     (0, swagger_1.ApiSchema)({ name: 'RemoteAccessTailscalePluginDataRequirement' })
 ], RemoteAccessTailscalePluginRequirementModel);
+let RemoteAccessTailscalePluginSetupJobModel = class RemoteAccessTailscalePluginSetupJobModel {
+};
+exports.RemoteAccessTailscalePluginSetupJobModel = RemoteAccessTailscalePluginSetupJobModel;
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        name: 'job_id',
+        description: 'Identifier of the privileged setup job this status reflects',
+        type: 'string',
+        example: '3fa1c2f0-9c3e-4c3b-8f0a-8f0a8f0a8f0a',
+    }),
+    (0, class_transformer_1.Expose)({ name: 'job_id' }),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], RemoteAccessTailscalePluginSetupJobModel.prototype, "jobId", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Current lifecycle state of the setup job',
+        enum: TAILSCALE_SETUP_JOB_STATES,
+        example: 'running',
+    }),
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsEnum)(TAILSCALE_SETUP_JOB_STATES),
+    __metadata("design:type", Object)
+], RemoteAccessTailscalePluginSetupJobModel.prototype, "state", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Free-form step label reported by the setup script, null when none was reported yet',
+        type: 'string',
+        nullable: true,
+        example: 'install-package',
+    }),
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], RemoteAccessTailscalePluginSetupJobModel.prototype, "step", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Free-form human-readable message reported by the setup script or the worker itself',
+        type: 'string',
+        nullable: true,
+        example: null,
+    }),
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], RemoteAccessTailscalePluginSetupJobModel.prototype, "message", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        name: 'updated_at',
+        description: 'ISO 8601 timestamp of the last status tick for this job',
+        type: 'string',
+        format: 'date-time',
+        example: '2026-09-07T12:00:00Z',
+    }),
+    (0, class_transformer_1.Expose)({ name: 'updated_at' }),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], RemoteAccessTailscalePluginSetupJobModel.prototype, "updatedAt", void 0);
+exports.RemoteAccessTailscalePluginSetupJobModel = RemoteAccessTailscalePluginSetupJobModel = __decorate([
+    (0, swagger_1.ApiSchema)({ name: 'RemoteAccessTailscalePluginDataSetupJob' })
+], RemoteAccessTailscalePluginSetupJobModel);
+let RemoteAccessTailscalePluginPrivilegedSetupModel = class RemoteAccessTailscalePluginPrivilegedSetupModel {
+};
+exports.RemoteAccessTailscalePluginPrivilegedSetupModel = RemoteAccessTailscalePluginPrivilegedSetupModel;
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Whether a privileged setup job can run on this installation right now',
+        type: 'boolean',
+        example: true,
+    }),
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], RemoteAccessTailscalePluginPrivilegedSetupModel.prototype, "available", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Why privileged setup is unavailable, null when it is available',
+        type: 'string',
+        nullable: true,
+        example: null,
+    }),
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], RemoteAccessTailscalePluginPrivilegedSetupModel.prototype, "reason", void 0);
+exports.RemoteAccessTailscalePluginPrivilegedSetupModel = RemoteAccessTailscalePluginPrivilegedSetupModel = __decorate([
+    (0, swagger_1.ApiSchema)({ name: 'RemoteAccessTailscalePluginDataPrivilegedSetup' })
+], RemoteAccessTailscalePluginPrivilegedSetupModel);
 let RemoteAccessTailscalePluginStatusModel = class RemoteAccessTailscalePluginStatusModel {
 };
 exports.RemoteAccessTailscalePluginStatusModel = RemoteAccessTailscalePluginStatusModel;
@@ -199,6 +333,29 @@ __decorate([
     (0, class_validator_1.IsString)(),
     __metadata("design:type", String)
 ], RemoteAccessTailscalePluginStatusModel.prototype, "qr", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        description: 'Last known privileged setup job, null when none has run since this process started',
+        nullable: true,
+        type: () => RemoteAccessTailscalePluginSetupJobModel,
+    }),
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.ValidateNested)(),
+    (0, class_transformer_1.Type)(() => RemoteAccessTailscalePluginSetupJobModel),
+    __metadata("design:type", RemoteAccessTailscalePluginSetupJobModel)
+], RemoteAccessTailscalePluginStatusModel.prototype, "setup", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        name: 'privileged_setup',
+        description: 'Whether a privileged setup job can run on this installation right now',
+        type: () => RemoteAccessTailscalePluginPrivilegedSetupModel,
+    }),
+    (0, class_transformer_1.Expose)({ name: 'privileged_setup' }),
+    (0, class_validator_1.ValidateNested)(),
+    (0, class_transformer_1.Type)(() => RemoteAccessTailscalePluginPrivilegedSetupModel),
+    __metadata("design:type", RemoteAccessTailscalePluginPrivilegedSetupModel)
+], RemoteAccessTailscalePluginStatusModel.prototype, "privilegedSetup", void 0);
 exports.RemoteAccessTailscalePluginStatusModel = RemoteAccessTailscalePluginStatusModel = __decorate([
     (0, swagger_1.ApiSchema)({ name: 'RemoteAccessTailscalePluginDataStatus' })
 ], RemoteAccessTailscalePluginStatusModel);

package/dist/plugins/remote-access-tailscale/models/status.model.js.map

@@ -1 +1 @@
-{"version":3,"file":"status.model.js","sourceRoot":"","sources":["../../../../src/plugins/remote-access-tailscale/models/status.model.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,yDAAiD;AACjD,qDAAmG;AAEnG,6CAA6F;AAE7F,uFAA0F;AAC1F,yFAG8D;AAE9D,4FAA2F;AAG3F,MAAM,6BAA6B,GAAgC;IAClE,aAAa;IACb,eAAe;IACf,gBAAgB;IAChB,cAAc;IACd,kBAAkB;IAClB,YAAY;IACZ,WAAW;IACX,cAAc;IACd,OAAO;CACP,CAAC;AAEF,MAAM,2BAA2B,GAA+B;IAC/D,oBAAoB;IACpB,kBAAkB;IAClB,eAAe;IACf,kBAAkB;IAClB,mBAAmB;CACnB,CAAC;AAQK,IAAM,2CAA2C,GAAjD,MAAM,2CAA2C;CA2BvD,CAAA;AA3BY,kGAA2C;AAQvD;IAPC,IAAA,qBAAW,EAAC;QACZ,WAAW,EAAE,0CAA0C;QACvD,IAAI,EAAE,2BAA2B;QACjC,OAAO,EAAE,kBAAkB;KAC3B,CAAC;IACD,IAAA,0BAAM,GAAE;IACR,IAAA,wBAAM,EAAC,2BAA2B,CAAC;;yEACL;AAS/B;IAPC,IAAA,qBAAW,EAAC;QACZ,WAAW,EAAE,iDAAiD;QAC9D,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,IAAI;KACb,CAAC;IACD,IAAA,0BAAM,GAAE;IACR,IAAA,2BAAS,GAAE;;8EACO;AASnB;IAPC,IAAA,qBAAW,EAAC;QACZ,WAAW,EAAE,4BAA4B;QACzC,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,gCAAgC;KACzC,CAAC;IACD,IAAA,0BAAM,GAAE;IACR,IAAA,0BAAQ,GAAE;;4EACK;sDA1BJ,2CAA2C;IADvD,IAAA,mBAAS,EAAC,EAAE,IAAI,EAAE,4CAA4C,EAAE,CAAC;GACrD,2CAA2C,CA2BvD;AAUM,IAAM,sCAAsC,GAA5C,MAAM,sCAAsC;CAqHlD,CAAA;AArHY,wFAAsC;AAQlD;IAPC,IAAA,qBAAW,EAAC;QACZ,WAAW,EAAE,iCAAiC;QAC9C,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,uEAAmC;KAC5C,CAAC;IACD,IAAA,0BAAM,GAAE;IACR,IAAA,0BAAQ,GAAE;;oEACE;AASb;IAPC,IAAA,qBAAW,EAAC;QACZ,WAAW,EAAE,wBAAwB;QACrC,IAAI,EAAE,6BAA6B;QACnC,OAAO,EAAE,WAAW;KACpB,CAAC;IACD,IAAA,0BAAM,GAAE;IACR,IAAA,wBAAM,EAAC,6BAA6B,CAAC;;qEACL;AAWjC;IATC,IAAA,qBAAW,EAAC;QACZ,WAAW,EAAE,yCAAyC;QACtD,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,EAAE,IAAI,EAAE,IAAA,uBAAa,EAAC,0CAAyB,CAAC,EAAE;KACzD,CAAC;IACD,IAAA,0BAAM,GAAE;IACR,IAAA,yBAAO,GAAE;IACT,IAAA,gCAAc,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9B,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,0CAAyB,CAAC;;yEACC;AAWvC;IATC,IAAA,6BAAmB,EAAC;QACpB,WAAW,EAAE,yDAAyD;QACtE,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,IAAI;KACb,CAAC;IACD,IAAA,0BAAM,GAAE;IACR,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;uEACa;AASxB;IAPC,IAAA,qBAAW,EAAC;QACZ,WAAW,EAAE,oDAAoD;QACjE,IAAI,EAAE,QAAQ;QACd,oBAAoB,EAAE,IAAI;QAC1B,OAAO,EAAE,EAAE;KACX,CAAC;IACD,IAAA,0BAAM,GAAE;;uEACiD;AAY1D;IAVC,IAAA,qBAAW,EAAC;QACZ,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,4DAA4D;QACzE,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACzB,OAAO,EAAE,EAAE;KACX,CAAC;IACD,IAAA,0BAAM,EAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;IACnC,IAAA,yBAAO,GAAE;IACT,IAAA,0BAAQ,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;;8EACA;AAWzB;IATC,IAAA,qBAAW,EAAC;QACZ,WAAW,EAAE,kCAAkC;QAC/C,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,EAAE,IAAI,EAAE,IAAA,uBAAa,EAAC,0CAAyB,CAAC,EAAE;KACzD,CAAC;IACD,IAAA,0BAAM,GAAE;IACR,IAAA,yBAAO,GAAE;IACT,IAAA,gCAAc,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9B,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,0CAAyB,CAAC;;0EACE;AAWxC;IATC,IAAA,qBAAW,EAAC;QACZ,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,qDAAqD;QAClE,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,WAAW;QACnB,OAAO,EAAE,sBAAsB;KAC/B,CAAC;IACD,IAAA,0BAAM,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IAC9B,IAAA,0BAAQ,GAAE;;yEACO;AAWlB;IATC,IAAA,qBAAW,EAAC;QACZ,WAAW,EAAE,gEAAgE;QAC7E,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,EAAE,IAAI,EAAE,IAAA,uBAAa,EAAC,2CAA2C,CAAC,EAAE;KAC3E,CAAC;IACD,IAAA,0BAAM,GAAE;IACR,IAAA,yBAAO,GAAE;IACT,IAAA,gCAAc,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9B,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,2CAA2C,CAAC;;4EACI;AAY5D;IAVC,IAAA,6BAAmB,EAAC;QACpB,IAAI,EAAE,UAAU;QAChB,WAAW,EACV,uIAAuI;QACxI,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,gDAAgD;KACzD,CAAC;IACD,IAAA,0BAAM,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC5B,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;uEACM;AAWjB;IATC,IAAA,6BAAmB,EAAC;QACpB,WAAW,EACV,gHAAgH;QACjH,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,mDAAmD;KAC5D,CAAC;IACD,IAAA,0BAAM,GAAE;IACR,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;kEACC;iDApHA,sCAAsC;IADlD,IAAA,mBAAS,EAAC,EAAE,IAAI,EAAE,uCAAuC,EAAE,CAAC;GAChD,sCAAsC,CAqHlD;AAMM,IAAM,8CAA8C,GAApD,MAAM,8CAA+C,SAAQ,6CAAgE;CAOnI,CAAA;AAPY,wGAA8C;AAMlD;IALP,IAAA,qBAAW,EAAC;QACZ,WAAW,EAAE,6CAA6C;QAC1D,IAAI,EAAE,GAAG,EAAE,CAAC,sCAAsC;KAClD,CAAC;IACD,IAAA,0BAAM,GAAE;8BACK,sCAAsC;4EAAC;yDANzC,8CAA8C;IAD1D,IAAA,mBAAS,EAAC,EAAE,IAAI,EAAE,sCAAsC,EAAE,CAAC;GAC/C,8CAA8C,CAO1D"}
+{"version":3,"file":"status.model.js","sourceRoot":"","sources":["../../../../src/plugins/remote-access-tailscale/models/status.model.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,yDAAiD;AACjD,qDAAmG;AAEnG,6CAA6F;AAE7F,uFAA0F;AAC1F,yFAG8D;AAG9D,4FAA2F;AAG3F,MAAM,6BAA6B,GAAgC;IAClE,aAAa;IACb,eAAe;IACf,gBAAgB;IAChB,cAAc;IACd,kBAAkB;IAClB,YAAY;IACZ,WAAW;IACX,cAAc;IACd,OAAO;CACP,CAAC;AAEF,MAAM,2BAA2B,GAA+B;IAC/D,oBAAoB;IACpB,kBAAkB;IAClB,eAAe;IACf,kBAAkB;IAClB,mBAAmB;CACnB,CAAC;AAEF,MAAM,0BAA0B,GAAmC,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;AAUzG,IAAM,iDAAiD,GAAvD,MAAM,iDAAiD;CAsB7D,CAAA;AAtBY,8GAAiD;AAU7D;IATC,IAAA,qBAAW,EAAC;QACZ,WAAW,EAAE,6EAA6E;QAC1F,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACzB,OAAO,EAAE,CAAC,wCAAwC,CAAC;KACnD,CAAC;IACD,IAAA,0BAAM,GAAE;IACR,IAAA,yBAAO,GAAE;IACT,IAAA,0BAAQ,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;;mFACN;AAWnB;IATC,IAAA,6BAAmB,EAAC;QACpB,WAAW,EAAE,yFAAyF;QACtG,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,IAAI;KACb,CAAC;IACD,IAAA,0BAAM,GAAE;IACR,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;+EACS;4DArBR,iDAAiD;IAD7D,IAAA,mBAAS,EAAC,EAAE,IAAI,EAAE,kDAAkD,EAAE,CAAC;GAC3D,iDAAiD,CAsB7D;AAQM,IAAM,2CAA2C,GAAjD,MAAM,2CAA2C;CAsCvD,CAAA;AAtCY,kGAA2C;AAQvD;IAPC,IAAA,qBAAW,EAAC;QACZ,WAAW,EAAE,0CAA0C;QACvD,IAAI,EAAE,2BAA2B;QACjC,OAAO,EAAE,kBAAkB;KAC3B,CAAC;IACD,IAAA,0BAAM,GAAE;IACR,IAAA,wBAAM,EAAC,2BAA2B,CAAC;;yEACL;AAS/B;IAPC,IAAA,qBAAW,EAAC;QACZ,WAAW,EAAE,iDAAiD;QAC9D,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,IAAI;KACb,CAAC;IACD,IAAA,0BAAM,GAAE;IACR,IAAA,2BAAS,GAAE;;8EACO;AASnB;IAPC,IAAA,qBAAW,EAAC;QACZ,WAAW,EAAE,4BAA4B;QACzC,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,gCAAgC;KACzC,CAAC;IACD,IAAA,0BAAM,GAAE;IACR,IAAA,0BAAQ,GAAE;;4EACK;AAWhB;IATC,IAAA,6BAAmB,EAAC;QACpB,WAAW,EAAE,iFAAiF;QAC9F,IAAI,EAAE,GAAG,EAAE,CAAC,iDAAiD;QAC7D,QAAQ,EAAE,IAAI;KACd,CAAC;IACD,IAAA,0BAAM,GAAE;IACR,IAAA,4BAAU,GAAE;IACZ,IAAA,gCAAc,GAAE;IAChB,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,iDAAiD,CAAC;8BACtD,iDAAiD;2EAAQ;sDArCrD,2CAA2C;IADvD,IAAA,mBAAS,EAAC,EAAE,IAAI,EAAE,4CAA4C,EAAE,CAAC;GACrD,2CAA2C,CAsCvD;AAUM,IAAM,wCAAwC,GAA9C,MAAM,wCAAwC;CAoDpD,CAAA;AApDY,4FAAwC;AASpD;IARC,IAAA,qBAAW,EAAC;QACZ,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,6DAA6D;QAC1E,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,sCAAsC;KAC/C,CAAC;IACD,IAAA,0BAAM,EAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC1B,IAAA,0BAAQ,GAAE;;uEACG;AASd;IAPC,IAAA,qBAAW,EAAC;QACZ,WAAW,EAAE,0CAA0C;QACvD,IAAI,EAAE,0BAA0B;QAChC,OAAO,EAAE,SAAS;KAClB,CAAC;IACD,IAAA,0BAAM,GAAE;IACR,IAAA,wBAAM,EAAC,0BAA0B,CAAC;;uEACC;AAWpC;IATC,IAAA,qBAAW,EAAC;QACZ,WAAW,EAAE,oFAAoF;QACjG,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,iBAAiB;KAC1B,CAAC;IACD,IAAA,0BAAM,GAAE;IACR,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;sEACS;AAWpB;IATC,IAAA,qBAAW,EAAC;QACZ,WAAW,EAAE,oFAAoF;QACjG,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,IAAI;KACb,CAAC;IACD,IAAA,0BAAM,GAAE;IACR,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;yEACY;AAWvB;IATC,IAAA,qBAAW,EAAC;QACZ,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,yDAAyD;QACtE,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,WAAW;QACnB,OAAO,EAAE,sBAAsB;KAC/B,CAAC;IACD,IAAA,0BAAM,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IAC9B,IAAA,0BAAQ,GAAE;;2EACO;mDAnDN,wCAAwC;IADpD,IAAA,mBAAS,EAAC,EAAE,IAAI,EAAE,yCAAyC,EAAE,CAAC;GAClD,wCAAwC,CAoDpD;AAWM,IAAM,+CAA+C,GAArD,MAAM,+CAA+C;CAoB3D,CAAA;AApBY,0GAA+C;AAQ3D;IAPC,IAAA,qBAAW,EAAC;QACZ,WAAW,EAAE,uEAAuE;QACpF,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,IAAI;KACb,CAAC;IACD,IAAA,0BAAM,GAAE;IACR,IAAA,2BAAS,GAAE;;kFACO;AAWnB;IATC,IAAA,qBAAW,EAAC;QACZ,WAAW,EAAE,gEAAgE;QAC7E,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,IAAI;KACb,CAAC;IACD,IAAA,0BAAM,GAAE;IACR,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;+EACW;0DAnBV,+CAA+C;IAD3D,IAAA,mBAAS,EAAC,EAAE,IAAI,EAAE,gDAAgD,EAAE,CAAC;GACzD,+CAA+C,CAoB3D;AAUM,IAAM,sCAAsC,GAA5C,MAAM,sCAAsC;CA0IlD,CAAA;AA1IY,wFAAsC;AAQlD;IAPC,IAAA,qBAAW,EAAC;QACZ,WAAW,EAAE,iCAAiC;QAC9C,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,uEAAmC;KAC5C,CAAC;IACD,IAAA,0BAAM,GAAE;IACR,IAAA,0BAAQ,GAAE;;oEACE;AASb;IAPC,IAAA,qBAAW,EAAC;QACZ,WAAW,EAAE,wBAAwB;QACrC,IAAI,EAAE,6BAA6B;QACnC,OAAO,EAAE,WAAW;KACpB,CAAC;IACD,IAAA,0BAAM,GAAE;IACR,IAAA,wBAAM,EAAC,6BAA6B,CAAC;;qEACL;AAWjC;IATC,IAAA,qBAAW,EAAC;QACZ,WAAW,EAAE,yCAAyC;QACtD,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,EAAE,IAAI,EAAE,IAAA,uBAAa,EAAC,0CAAyB,CAAC,EAAE;KACzD,CAAC;IACD,IAAA,0BAAM,GAAE;IACR,IAAA,yBAAO,GAAE;IACT,IAAA,gCAAc,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9B,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,0CAAyB,CAAC;;yEACC;AAWvC;IATC,IAAA,6BAAmB,EAAC;QACpB,WAAW,EAAE,yDAAyD;QACtE,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,IAAI;KACb,CAAC;IACD,IAAA,0BAAM,GAAE;IACR,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;uEACa;AASxB;IAPC,IAAA,qBAAW,EAAC;QACZ,WAAW,EAAE,oDAAoD;QACjE,IAAI,EAAE,QAAQ;QACd,oBAAoB,EAAE,IAAI;QAC1B,OAAO,EAAE,EAAE;KACX,CAAC;IACD,IAAA,0BAAM,GAAE;;uEACiD;AAY1D;IAVC,IAAA,qBAAW,EAAC;QACZ,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,4DAA4D;QACzE,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACzB,OAAO,EAAE,EAAE;KACX,CAAC;IACD,IAAA,0BAAM,EAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;IACnC,IAAA,yBAAO,GAAE;IACT,IAAA,0BAAQ,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;;8EACA;AAWzB;IATC,IAAA,qBAAW,EAAC;QACZ,WAAW,EAAE,kCAAkC;QAC/C,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,EAAE,IAAI,EAAE,IAAA,uBAAa,EAAC,0CAAyB,CAAC,EAAE;KACzD,CAAC;IACD,IAAA,0BAAM,GAAE;IACR,IAAA,yBAAO,GAAE;IACT,IAAA,gCAAc,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9B,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,0CAAyB,CAAC;;0EACE;AAWxC;IATC,IAAA,qBAAW,EAAC;QACZ,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,qDAAqD;QAClE,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,WAAW;QACnB,OAAO,EAAE,sBAAsB;KAC/B,CAAC;IACD,IAAA,0BAAM,EAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IAC9B,IAAA,0BAAQ,GAAE;;yEACO;AAWlB;IATC,IAAA,qBAAW,EAAC;QACZ,WAAW,EAAE,gEAAgE;QAC7E,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,EAAE,IAAI,EAAE,IAAA,uBAAa,EAAC,2CAA2C,CAAC,EAAE;KAC3E,CAAC;IACD,IAAA,0BAAM,GAAE;IACR,IAAA,yBAAO,GAAE;IACT,IAAA,gCAAc,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9B,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,2CAA2C,CAAC;;4EACI;AAY5D;IAVC,IAAA,6BAAmB,EAAC;QACpB,IAAI,EAAE,UAAU;QAChB,WAAW,EACV,uIAAuI;QACxI,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,gDAAgD;KACzD,CAAC;IACD,IAAA,0BAAM,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC5B,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;uEACM;AAWjB;IATC,IAAA,6BAAmB,EAAC;QACpB,WAAW,EACV,gHAAgH;QACjH,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,mDAAmD;KAC5D,CAAC;IACD,IAAA,0BAAM,GAAE;IACR,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;kEACC;AAWZ;IATC,IAAA,6BAAmB,EAAC;QACpB,WAAW,EAAE,oFAAoF;QACjG,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,GAAG,EAAE,CAAC,wCAAwC;KACpD,CAAC;IACD,IAAA,0BAAM,GAAE;IACR,IAAA,4BAAU,GAAE;IACZ,IAAA,gCAAc,GAAE;IAChB,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,wCAAwC,CAAC;8BAC9C,wCAAwC;qEAAQ;AAUvD;IARC,IAAA,qBAAW,EAAC;QACZ,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,uEAAuE;QACpF,IAAI,EAAE,GAAG,EAAE,CAAC,+CAA+C;KAC3D,CAAC;IACD,IAAA,0BAAM,EAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;IACpC,IAAA,gCAAc,GAAE;IAChB,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,+CAA+C,CAAC;8BAC3C,+CAA+C;+EAAC;iDAzIrD,sCAAsC;IADlD,IAAA,mBAAS,EAAC,EAAE,IAAI,EAAE,uCAAuC,EAAE,CAAC;GAChD,sCAAsC,CA0IlD;AAMM,IAAM,8CAA8C,GAApD,MAAM,8CAA+C,SAAQ,6CAAgE;CAOnI,CAAA;AAPY,wGAA8C;AAMlD;IALP,IAAA,qBAAW,EAAC;QACZ,WAAW,EAAE,6CAA6C;QAC1D,IAAI,EAAE,GAAG,EAAE,CAAC,sCAAsC;KAClD,CAAC;IACD,IAAA,0BAAM,GAAE;8BACK,sCAAsC;4EAAC;yDANzC,8CAA8C;IAD1D,IAAA,mBAAS,EAAC,EAAE,IAAI,EAAE,sCAAsC,EAAE,CAAC;GAC/C,8CAA8C,CAO1D"}

package/dist/plugins/remote-access-tailscale/remote-access-tailscale.constants.d.ts

@@ -7,6 +7,7 @@ export declare const TAILSCALE_BINARY = "tailscale";
 export declare const TAILSCALE_CLI_DEFAULT_TIMEOUT_MS = 15000;
 export declare const TAILSCALE_CLI_MAX_BUFFER_BYTES: number;
 export declare const TAILSCALE_SYSTEMCTL_PROBE_TIMEOUT_MS = 2000;
+export declare const TAILSCALE_STOP_STATUS_TIMEOUT_MS = 2000;
 export declare const TAILSCALE_DEFAULT_LOGIN_SERVER = "https://controlplane.tailscale.com";
 export declare const TAILSCALE_POLL_INTERVAL_TRANSITIONING_MS = 5000;
 export declare const TAILSCALE_POLL_INTERVAL_STABLE_MS = 30000;
@@ -18,3 +19,5 @@ export declare const TAILSCALE_LOGIN_AUTH_KEY_TIMEOUT_MS = 120000;
 export declare const TAILSCALE_LOGIN_INTERACTIVE_TIMEOUT_MS: number;
 export declare const TAILSCALE_LOGIN_FIRST_BLOCK_TIMEOUT_MS = 30000;
 export declare const TAILSCALE_KEY_EXPIRY_ADVISORY_WINDOW_MS: number;
+export declare const TAILSCALE_RECONNECT_BASE_DELAY_MS = 30000;
+export declare const TAILSCALE_RECONNECT_MAX_DELAY_MS: number;

package/dist/plugins/remote-access-tailscale/remote-access-tailscale.constants.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.TAILSCALE_KEY_EXPIRY_ADVISORY_WINDOW_MS = exports.TAILSCALE_LOGIN_FIRST_BLOCK_TIMEOUT_MS = exports.TAILSCALE_LOGIN_INTERACTIVE_TIMEOUT_MS = exports.TAILSCALE_LOGIN_AUTH_KEY_TIMEOUT_MS = exports.TAILSCALE_DATA_SUBDIR = exports.TAILSCALE_SETUP_STATUS_FILENAME = exports.TAILSCALE_SETUP_WORKER_UNIT = exports.REMOTE_ACCESS_TAILSCALE_ALLOW_DEV_ENV = exports.TAILSCALE_POLL_INTERVAL_STABLE_MS = exports.TAILSCALE_POLL_INTERVAL_TRANSITIONING_MS = exports.TAILSCALE_DEFAULT_LOGIN_SERVER = exports.TAILSCALE_SYSTEMCTL_PROBE_TIMEOUT_MS = exports.TAILSCALE_CLI_MAX_BUFFER_BYTES = exports.TAILSCALE_CLI_DEFAULT_TIMEOUT_MS = exports.TAILSCALE_BINARY = exports.TAILSCALE_MIN_VERSION = exports.REMOTE_ACCESS_TAILSCALE_PLUGIN_API_TAG_DESCRIPTION = exports.REMOTE_ACCESS_TAILSCALE_PLUGIN_API_TAG_NAME = exports.REMOTE_ACCESS_TAILSCALE_PLUGIN_NAME = exports.REMOTE_ACCESS_TAILSCALE_PLUGIN_PREFIX = void 0;
+exports.TAILSCALE_RECONNECT_MAX_DELAY_MS = exports.TAILSCALE_RECONNECT_BASE_DELAY_MS = exports.TAILSCALE_KEY_EXPIRY_ADVISORY_WINDOW_MS = exports.TAILSCALE_LOGIN_FIRST_BLOCK_TIMEOUT_MS = exports.TAILSCALE_LOGIN_INTERACTIVE_TIMEOUT_MS = exports.TAILSCALE_LOGIN_AUTH_KEY_TIMEOUT_MS = exports.TAILSCALE_DATA_SUBDIR = exports.TAILSCALE_SETUP_STATUS_FILENAME = exports.TAILSCALE_SETUP_WORKER_UNIT = exports.REMOTE_ACCESS_TAILSCALE_ALLOW_DEV_ENV = exports.TAILSCALE_POLL_INTERVAL_STABLE_MS = exports.TAILSCALE_POLL_INTERVAL_TRANSITIONING_MS = exports.TAILSCALE_DEFAULT_LOGIN_SERVER = exports.TAILSCALE_STOP_STATUS_TIMEOUT_MS = exports.TAILSCALE_SYSTEMCTL_PROBE_TIMEOUT_MS = exports.TAILSCALE_CLI_MAX_BUFFER_BYTES = exports.TAILSCALE_CLI_DEFAULT_TIMEOUT_MS = exports.TAILSCALE_BINARY = exports.TAILSCALE_MIN_VERSION = exports.REMOTE_ACCESS_TAILSCALE_PLUGIN_API_TAG_DESCRIPTION = exports.REMOTE_ACCESS_TAILSCALE_PLUGIN_API_TAG_NAME = exports.REMOTE_ACCESS_TAILSCALE_PLUGIN_NAME = exports.REMOTE_ACCESS_TAILSCALE_PLUGIN_PREFIX = void 0;
 exports.REMOTE_ACCESS_TAILSCALE_PLUGIN_PREFIX = 'remote-access-tailscale';
 exports.REMOTE_ACCESS_TAILSCALE_PLUGIN_NAME = 'remote-access-tailscale-plugin';
 exports.REMOTE_ACCESS_TAILSCALE_PLUGIN_API_TAG_NAME = 'Remote access Tailscale plugin';
@@ -10,6 +10,7 @@ exports.TAILSCALE_BINARY = 'tailscale';
 exports.TAILSCALE_CLI_DEFAULT_TIMEOUT_MS = 15_000;
 exports.TAILSCALE_CLI_MAX_BUFFER_BYTES = 16 * 1024 * 1024;
 exports.TAILSCALE_SYSTEMCTL_PROBE_TIMEOUT_MS = 2_000;
+exports.TAILSCALE_STOP_STATUS_TIMEOUT_MS = 2_000;
 exports.TAILSCALE_DEFAULT_LOGIN_SERVER = 'https://controlplane.tailscale.com';
 exports.TAILSCALE_POLL_INTERVAL_TRANSITIONING_MS = 5_000;
 exports.TAILSCALE_POLL_INTERVAL_STABLE_MS = 30_000;
@@ -21,4 +22,6 @@ exports.TAILSCALE_LOGIN_AUTH_KEY_TIMEOUT_MS = 120_000;
 exports.TAILSCALE_LOGIN_INTERACTIVE_TIMEOUT_MS = 10 * 60 * 1000;
 exports.TAILSCALE_LOGIN_FIRST_BLOCK_TIMEOUT_MS = 30_000;
 exports.TAILSCALE_KEY_EXPIRY_ADVISORY_WINDOW_MS = 14 * 24 * 60 * 60 * 1000;
+exports.TAILSCALE_RECONNECT_BASE_DELAY_MS = 30_000;
+exports.TAILSCALE_RECONNECT_MAX_DELAY_MS = 5 * 60 * 1000;
 //# sourceMappingURL=remote-access-tailscale.constants.js.map

package/dist/plugins/remote-access-tailscale/remote-access-tailscale.constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"remote-access-tailscale.constants.js","sourceRoot":"","sources":["../../../src/plugins/remote-access-tailscale/remote-access-tailscale.constants.ts"],"names":[],"mappings":";;;AAAa,QAAA,qCAAqC,GAAG,yBAAyB,CAAC;AAElE,QAAA,mCAAmC,GAAG,gCAAgC,CAAC;AAEvE,QAAA,2CAA2C,GAAG,gCAAgC,CAAC;AAE/E,QAAA,kDAAkD,GAC9D,mHAAmH,CAAC;AASxG,QAAA,qBAAqB,GAAG,QAAQ,CAAC;AAGjC,QAAA,gBAAgB,GAAG,WAAW,CAAC;AAG/B,QAAA,gCAAgC,GAAG,MAAM,CAAC;AAS1C,QAAA,8BAA8B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAGlD,QAAA,oCAAoC,GAAG,KAAK,CAAC;AAE7C,QAAA,8BAA8B,GAAG,oCAAoC,CAAC;AAGtE,QAAA,wCAAwC,GAAG,KAAK,CAAC;AAGjD,QAAA,iCAAiC,GAAG,MAAM,CAAC;AAQ3C,QAAA,qCAAqC,GAAG,4BAA4B,CAAC;AAGrE,QAAA,2BAA2B,GAAG,2BAA2B,CAAC;AAG1D,QAAA,+BAA+B,GAAG,6BAA6B,CAAC;AAOhE,QAAA,qBAAqB,GAAG,eAAe,CAAC;AAGxC,QAAA,mCAAmC,GAAG,OAAO,CAAC;AAG9C,QAAA,sCAAsC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAYxD,QAAA,sCAAsC,GAAG,MAAM,CAAC;AAGhD,QAAA,uCAAuC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC"}
+{"version":3,"file":"remote-access-tailscale.constants.js","sourceRoot":"","sources":["../../../src/plugins/remote-access-tailscale/remote-access-tailscale.constants.ts"],"names":[],"mappings":";;;AAAa,QAAA,qCAAqC,GAAG,yBAAyB,CAAC;AAElE,QAAA,mCAAmC,GAAG,gCAAgC,CAAC;AAEvE,QAAA,2CAA2C,GAAG,gCAAgC,CAAC;AAE/E,QAAA,kDAAkD,GAC9D,mHAAmH,CAAC;AASxG,QAAA,qBAAqB,GAAG,QAAQ,CAAC;AAGjC,QAAA,gBAAgB,GAAG,WAAW,CAAC;AAG/B,QAAA,gCAAgC,GAAG,MAAM,CAAC;AAS1C,QAAA,8BAA8B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAGlD,QAAA,oCAAoC,GAAG,KAAK,CAAC;AAQ7C,QAAA,gCAAgC,GAAG,KAAK,CAAC;AAEzC,QAAA,8BAA8B,GAAG,oCAAoC,CAAC;AAGtE,QAAA,wCAAwC,GAAG,KAAK,CAAC;AAGjD,QAAA,iCAAiC,GAAG,MAAM,CAAC;AAQ3C,QAAA,qCAAqC,GAAG,4BAA4B,CAAC;AAGrE,QAAA,2BAA2B,GAAG,2BAA2B,CAAC;AAG1D,QAAA,+BAA+B,GAAG,6BAA6B,CAAC;AAOhE,QAAA,qBAAqB,GAAG,eAAe,CAAC;AAGxC,QAAA,mCAAmC,GAAG,OAAO,CAAC;AAG9C,QAAA,sCAAsC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAYxD,QAAA,sCAAsC,GAAG,MAAM,CAAC;AAGhD,QAAA,uCAAuC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAUnE,QAAA,iCAAiC,GAAG,MAAM,CAAC;AAG3C,QAAA,gCAAgC,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC"}

package/dist/plugins/remote-access-tailscale/remote-access-tailscale.exceptions.d.ts

@@ -0,0 +1,13 @@
+import { TailscaleRequirement } from './services/tailscale-node-managed.service';
+export declare class TailscaleRequirementUnsatisfiedException extends Error {
+    readonly requirement: TailscaleRequirement;
+    constructor(requirement: TailscaleRequirement);
+}
+export type TailscaleSetupUnavailableCode = 'privileged-worker-unavailable' | 'platform-unsupported';
+export declare class TailscaleSetupUnavailableException extends Error {
+    readonly code: TailscaleSetupUnavailableCode;
+    constructor(message: string, code?: TailscaleSetupUnavailableCode);
+}
+export declare class TailscaleNodeStopFailedException extends Error {
+    constructor(message: string);
+}

package/dist/plugins/remote-access-tailscale/remote-access-tailscale.exceptions.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TailscaleNodeStopFailedException = exports.TailscaleSetupUnavailableException = exports.TailscaleRequirementUnsatisfiedException = void 0;
+class TailscaleRequirementUnsatisfiedException extends Error {
+    constructor(requirement) {
+        super(requirement.message);
+        this.requirement = requirement;
+        this.name = 'TailscaleRequirementUnsatisfiedException';
+    }
+}
+exports.TailscaleRequirementUnsatisfiedException = TailscaleRequirementUnsatisfiedException;
+class TailscaleSetupUnavailableException extends Error {
+    constructor(message, code = 'platform-unsupported') {
+        super(message);
+        this.code = code;
+        this.name = 'TailscaleSetupUnavailableException';
+    }
+}
+exports.TailscaleSetupUnavailableException = TailscaleSetupUnavailableException;
+class TailscaleNodeStopFailedException extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'TailscaleNodeStopFailedException';
+    }
+}
+exports.TailscaleNodeStopFailedException = TailscaleNodeStopFailedException;
+//# sourceMappingURL=remote-access-tailscale.exceptions.js.map

package/dist/plugins/remote-access-tailscale/remote-access-tailscale.exceptions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-access-tailscale.exceptions.js","sourceRoot":"","sources":["../../../src/plugins/remote-access-tailscale/remote-access-tailscale.exceptions.ts"],"names":[],"mappings":";;;AAWA,MAAa,wCAAyC,SAAQ,KAAK;IAClE,YAAqB,WAAiC;QACrD,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QADP,gBAAW,GAAX,WAAW,CAAsB;QAErD,IAAI,CAAC,IAAI,GAAG,0CAA0C,CAAC;IACxD,CAAC;CACD;AALD,4FAKC;AA4BD,MAAa,kCAAmC,SAAQ,KAAK;IAC5D,YACC,OAAe,EACC,OAAsC,sBAAsB;QAE5E,KAAK,CAAC,OAAO,CAAC,CAAC;QAFC,SAAI,GAAJ,IAAI,CAAwD;QAG5E,IAAI,CAAC,IAAI,GAAG,oCAAoC,CAAC;IAClD,CAAC;CACD;AARD,gFAQC;AAYD,MAAa,gCAAiC,SAAQ,KAAK;IAC1D,YAAY,OAAe;QAC1B,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kCAAkC,CAAC;IAChD,CAAC;CACD;AALD,4EAKC"}

package/dist/plugins/remote-access-tailscale/remote-access-tailscale.openapi.d.ts

@@ -2,5 +2,5 @@ import { RemoteAccessTailscalePluginLoginDto } from './dto/login.dto';
 import { UpdateRemoteAccessTailscalePluginConfigDto } from './dto/update-config.dto';
 import { RemoteAccessTailscalePluginConfigModel } from './models/config.model';
 import { RemoteAccessTailscalePluginInstallModel, RemoteAccessTailscalePluginInstallResponseModel, RemoteAccessTailscalePluginLoginModel, RemoteAccessTailscalePluginLoginResponseModel } from './models/login.model';
-import { RemoteAccessTailscalePluginRequirementModel } from './models/status.model';
-export declare const REMOTE_ACCESS_TAILSCALE_PLUGIN_SWAGGER_EXTRA_MODELS: (typeof RemoteAccessTailscalePluginLoginDto | typeof RemoteAccessTailscalePluginLoginModel | typeof RemoteAccessTailscalePluginLoginResponseModel | typeof RemoteAccessTailscalePluginInstallModel | typeof RemoteAccessTailscalePluginInstallResponseModel | typeof RemoteAccessTailscalePluginConfigModel | typeof RemoteAccessTailscalePluginRequirementModel | typeof UpdateRemoteAccessTailscalePluginConfigDto)[];
+import { RemoteAccessTailscalePluginPrivilegedSetupModel, RemoteAccessTailscalePluginRequirementModel, RemoteAccessTailscalePluginSetupJobModel } from './models/status.model';
+export declare const REMOTE_ACCESS_TAILSCALE_PLUGIN_SWAGGER_EXTRA_MODELS: (typeof RemoteAccessTailscalePluginLoginDto | typeof RemoteAccessTailscalePluginLoginModel | typeof RemoteAccessTailscalePluginLoginResponseModel | typeof RemoteAccessTailscalePluginInstallModel | typeof RemoteAccessTailscalePluginInstallResponseModel | typeof RemoteAccessTailscalePluginConfigModel | typeof RemoteAccessTailscalePluginRequirementModel | typeof RemoteAccessTailscalePluginSetupJobModel | typeof RemoteAccessTailscalePluginPrivilegedSetupModel | typeof UpdateRemoteAccessTailscalePluginConfigDto)[];

package/dist/plugins/remote-access-tailscale/remote-access-tailscale.openapi.js

@@ -17,5 +17,7 @@ exports.REMOTE_ACCESS_TAILSCALE_PLUGIN_SWAGGER_EXTRA_MODELS = [
     status_model_1.RemoteAccessTailscalePluginRequirementModel,
     login_model_1.RemoteAccessTailscalePluginInstallModel,
     login_model_1.RemoteAccessTailscalePluginLoginModel,
+    status_model_1.RemoteAccessTailscalePluginSetupJobModel,
+    status_model_1.RemoteAccessTailscalePluginPrivilegedSetupModel,
 ];
 //# sourceMappingURL=remote-access-tailscale.openapi.js.map

package/dist/plugins/remote-access-tailscale/remote-access-tailscale.openapi.js.map

@@ -1 +1 @@
-{"version":3,"file":"remote-access-tailscale.openapi.js","sourceRoot":"","sources":["../../../src/plugins/remote-access-tailscale/remote-access-tailscale.openapi.ts"],"names":[],"mappings":";;;AAQA,+CAAsE;AACtE,+DAAqF;AACrF,wDAA+E;AAC/E,sDAK8B;AAC9B,wDAI+B;AAElB,QAAA,mDAAmD,GAAG;IAElE,qDAAsC;IACtC,8DAA0C;IAE1C,+CAAmC;IAEnC,6DAA8C;IAC9C,6DAA+C;IAC/C,2DAA6C;IAE7C,qDAAsC;IACtC,0DAA2C;IAC3C,qDAAuC;IACvC,mDAAqC;CACrC,CAAC"}
+{"version":3,"file":"remote-access-tailscale.openapi.js","sourceRoot":"","sources":["../../../src/plugins/remote-access-tailscale/remote-access-tailscale.openapi.ts"],"names":[],"mappings":";;;AAQA,+CAAsE;AACtE,+DAAqF;AACrF,wDAA+E;AAC/E,sDAK8B;AAC9B,wDAM+B;AAElB,QAAA,mDAAmD,GAAG;IAElE,qDAAsC;IACtC,8DAA0C;IAE1C,+CAAmC;IAEnC,6DAA8C;IAC9C,6DAA+C;IAC/C,2DAA6C;IAE7C,qDAAsC;IACtC,0DAA2C;IAC3C,qDAAuC;IACvC,mDAAqC;IACrC,uDAAwC;IACxC,8DAA+C;CAC/C,CAAC"}

package/dist/plugins/remote-access-tailscale/remote-access-tailscale.plugin.js

@@ -76,7 +76,7 @@ Connects this installation to a Tailscale tailnet, a private WireGuard-based mes
 ## Requirements
 
 - \`raspberry\` or \`generic\` platform with systemd and the existing sudoers allowlist (Docker and the Home Assistant add-on are not supported — see the docs for alternatives)
-- The \`tailscale\` package installed and \`tailscaled\` active, with the \`smart-panel\` service user granted as the Tailscale operator
+- The \`tailscale\` package installed and \`tailscaled\` active, with the Smart Panel service user (\`smart-panel\` unless changed during installation) granted as the Tailscale operator — without this grant, every action (sign-in, sign-out, Serve/Funnel) is refused. **Set up** applies it automatically; if it's ever lost (e.g. after reinstalling \`tailscaled\`, or the node was signed in by hand as root before **Set up** ever ran), recover it with a single command: \`sudo tailscale set --operator=<service-user>\` (substituting your installation's actual service user)
 
 ## Configuration
 

package/dist/plugins/remote-access-tailscale/scripts/tailscale-setup.sh

@@ -13,6 +13,17 @@
 # and always finishes at "complete" with exit 0, regardless of the host OS —
 # it previews the real branching logic without requiring root, apt, systemd
 # or a Debian-family host, so it can run from a Jest spec on any platform.
+#
+# --print-plan [--step=install|daemon|operator] is a separate, read-only mode
+# for TailscaleNodeManagedService's D12 remedy builder: it prints one command
+# per line for the detected ID/VERSION_CODENAME from /etc/os-release and
+# executes nothing at all — no status file, no trap, not even SMART_PANEL_USER
+# defaulted to root's own id (the caller always passes it explicitly). This is
+# what keeps the admin-facing "run this yourself" remedy list from ever
+# drifting out of sync with what the privileged install step above actually
+# runs. An unsupported (non-Debian-family) distribution prints nothing for
+# --step=install — the caller's own signal to fall back to a vendor link
+# instead of a command list.
 set -e
 # Without this, `curl ... | tee ...` reports tee's exit status, not curl's —
 # a failed download would be silently treated as success by the `|| { ... }`
@@ -23,12 +34,62 @@ STATUS_FILE="${STATUS_FILE:-/var/lib/smart-panel/remote-access/tailscale-setup-s
 SMART_PANEL_USER="${SMART_PANEL_USER:-$(id -un)}"
 
 DRY_RUN=0
+PRINT_PLAN=0
+PRINT_PLAN_STEP="install"
 for arg in "$@"; do
 	case "$arg" in
 	--dry-run) DRY_RUN=1 ;;
+	--print-plan) PRINT_PLAN=1 ;;
+	--step=*) PRINT_PLAN_STEP="${arg#--step=}" ;;
 	esac
 done
 
+# Read-only, side-effect-free: print the plan and exit before this script
+# ever touches STATUS_FILE or registers the cleanup trap below.
+if [ "$PRINT_PLAN" -eq 1 ]; then
+	OS_ID=""
+	VERSION_CODENAME=""
+
+	if [ -f /etc/os-release ]; then
+		# shellcheck source=/dev/null
+		. /etc/os-release
+		OS_ID="${ID:-}"
+		VERSION_CODENAME="${VERSION_CODENAME:-}"
+	fi
+
+	case "$PRINT_PLAN_STEP" in
+	daemon)
+		echo "systemctl enable --now tailscaled"
+		;;
+	operator)
+		echo "tailscale set --operator=${SMART_PANEL_USER}"
+		;;
+	install)
+		case "$OS_ID" in
+		raspbian | debian | ubuntu)
+			# `sudo` sits on the `tee` side, not the whole pipeline - prefixing the
+			# entire line would only elevate `curl` and leave `tee` unable to write
+			# these root-owned paths. The caller (TailscaleNodeManagedService) only
+			# blind-prefixes `sudo` onto lines that do not already contain a pipe.
+			echo "curl -fsSL https://pkgs.tailscale.com/stable/${OS_ID}/${VERSION_CODENAME}.noarmor.gpg | sudo tee /usr/share/keyrings/tailscale-archive-keyring.gpg >/dev/null"
+			echo "curl -fsSL https://pkgs.tailscale.com/stable/${OS_ID}/${VERSION_CODENAME}.tailscale-keyring.list | sudo tee /etc/apt/sources.list.d/tailscale.list >/dev/null"
+			echo "apt-get update -qq"
+			echo "apt-get install -y -qq --no-install-recommends tailscale"
+			;;
+		*)
+			# Unsupported distribution: intentionally prints nothing on
+			# stdout — the caller's signal to fall back to a vendor link
+			# instead of a command list. A note on stderr only, for a human
+			# running this script directly.
+			echo "unsupported distribution (ID=${OS_ID:-unknown}); install manually: https://tailscale.com/download/linux" >&2
+			;;
+		esac
+		;;
+	esac
+
+	exit 0
+fi
+
 # Writes the canonical `{ state, step, message }` status PrivilegedWorkerService
 # expects, via a temp file + rename so a concurrent read never sees a
 # half-written file. printf %s (never direct interpolation into the format

package/dist/plugins/remote-access-tailscale/services/tailscale-cli.service.d.ts

@@ -37,6 +37,14 @@ export interface TailscaleVersionInfo {
     version: string;
     raw: Record<string, unknown>;
 }
+export interface TailscalePrefs {
+    OperatorUser?: string;
+    ControlURL?: string;
+    Hostname?: string;
+    LoggedOut?: boolean;
+    WantRunning?: boolean;
+    [key: string]: unknown;
+}
 export interface TailscaleServeStatus {
     TCP?: Record<string, {
         HTTPS?: boolean;
@@ -58,6 +66,7 @@ export declare class TailscaleCliService {
     private readonly logger;
     getVersion(): Promise<TailscaleVersionInfo>;
     getStatus(): Promise<TailscaleStatus>;
+    getPrefs(): Promise<TailscalePrefs>;
     up(args: readonly string[]): Promise<void>;
     set(args: readonly string[]): Promise<void>;
     down(): Promise<void>;

package/dist/plugins/remote-access-tailscale/services/tailscale-cli.service.js

@@ -86,6 +86,18 @@ let TailscaleCliService = class TailscaleCliService {
         }
         return parsed;
     }
+    async getPrefs() {
+        const { stdout, stderr, exitCode } = await this.exec(['debug', 'prefs']);
+        if (exitCode !== 0) {
+            throw this.classify(stdout, stderr, `tailscale debug prefs exited with code ${exitCode}`);
+        }
+        try {
+            return JSON.parse(stdout);
+        }
+        catch (error) {
+            throw new TailscaleCliError('unknown', 'Failed to parse `tailscale debug prefs` output.', error);
+        }
+    }
     async up(args) {
         await this.runManagementCommand(['up', ...args]);
     }