From a403ddb1c436286447eb8a153cf35e7aae3b85fd Mon Sep 17 00:00:00 2001
From: Shamal Karunarathne <shamalk@gmail.com>
Date: Thu, 29 Jan 2026 21:15:34 +0000
Subject: [PATCH] gateway: auto-approve device pairing for
 Tailscale-authenticated connections

---
 src/gateway/server/ws-connection/message-handler.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/gateway/server/ws-connection/message-handler.ts b/src/gateway/server/ws-connection/message-handler.ts
index d1f6ae511..c67dd5ab0 100644
--- a/src/gateway/server/ws-connection/message-handler.ts
+++ b/src/gateway/server/ws-connection/message-handler.ts
@@ -634,7 +634,7 @@ export function attachGatewayWsMessageHandler(params: {
               role,
               scopes,
               remoteIp: reportedClientIp,
-              silent: isLocalClient,
+              silent: isLocalClient || authMethod === "tailscale",
             });
             const context = buildRequestContext();
             if (pairing.request.silent === true) {