Brennan Benson 056c2d9496 fix(runtime): bind mobile WS listener to loopback until pairing (STA-2370) (#11956) ...

The runtime RPC WebSocket listener bound to 0.0.0.0:6769 at startup, so a
desktop with no paired device was reachable from the whole LAN before the
user opted in. Default the bind to 127.0.0.1 and widen to all interfaces
only on an explicit opt-in:

- createMobilePairingOffer / getRuntimePairingUrl widen (ensureNetworkExposure)
  before advertising a LAN endpoint; the rebind reuses the resolved port so an
  already-issued offer stays valid, and concurrent offers share one rebind.
- orca serve and E2E set exposeNetworkByDefault to bind wide at startup.
- A previously-connected device (lastSeenAt > 0) rebinds wide at startup so
  reconnect after restart keeps working; a pending/never-connected offer does
  not persist exposure across a restart.

The advertised pairing endpoint still resolves to a concrete interface address,
never the 0.0.0.0 bind host.

2026-08-03 13:06:11 -07:00

..

cli

fix(runtime): coalesce concurrent host terminal focus (#11841)

2026-08-03 02:18:05 -07:00

main

fix(runtime): bind mobile WS listener to loopback until pairing (STA-2370) (#11956)

2026-08-03 13:06:11 -07:00

preload

fix(runtime): bind mobile WS listener to loopback until pairing (STA-2370) (#11956)

2026-08-03 13:06:11 -07:00

relay

fix(terminal): expand environment variables in Windows PATH (#11987)

2026-08-03 01:00:58 -07:00

renderer

fix(runtime): bind mobile WS listener to loopback until pairing (STA-2370) (#11956)

2026-08-03 13:06:11 -07:00

shared

fix: preserve live agent PTYs through graph hydration (#11789)

2026-08-03 11:11:14 -07:00

types

…