Repository navigation
Support or disable the iOS Same Network setup path #2
Description
Setup path
iOS first launch > Gateway connection > Same Network, plus the default Mac gateway LaunchAgent.
Friction
The iOS app offers Same Network, but the default Mac gateway scripts start the server on 127.0.0.1:18790. A physical iPhone cannot reach the Mac loopback listener over Wi-Fi. Entering 127.0.0.1 points at the iPhone itself, and entering the Mac LAN IP will not work unless the gateway is explicitly rebound.
Reproduction
- Install the gateway with
scripts/install-phone-gateway-agent.sh. - Open the iOS app first-run connection screen.
- Choose Same Network.
- Try
http://127.0.0.1:18790or the Mac LAN IP with the current gateway token.
Expected
Either make Same Network a supported, explicit LAN-binding mode with security/firewall copy, or hide/disable it until the default setup can support it.
Audit note
The setup-audit PR updates copy/docs to warn that Cloudflare is the default iPhone path, but product behavior still needs a decision.
Activity
codepilotios commentedon Jul 1, 2026
Triage update (2026-07-01): marked
severity: medium. This remains a product/security decision: either make LAN binding an explicit supported setup path with firewall/security copy, or disable Same Network until the default gateway supports it safely. Added toops/agents/escalations/issue-triage.md.codepilotios commentedon Jul 3, 2026
Maintainer decision (2026-07-03): hide/disable the Same Network setup path for public beta until CodePilot provides an explicit, securely configured LAN-binding mode with clear firewall and trust guidance. Cloudflare remains the supported default remote connection path. Implementation is approved.
codepilotios commentedon Jul 17, 2026
Resolved on main by merged PR #14. The public-beta connection picker now exposes Cloudflare only; Same Network remains disabled until an explicit secure LAN-binding mode is available.