Issues

• gateway: a device row whose profile is no longer declared falls into the single-tenant fallback

  denoland/clawpatrol#871 · Filter by author piscisaureus opened on Oct 3, 2026

• tsnet register: a daemon whose node changed IP is ignored forever, so its row never binds

  denoland/clawpatrol#869 · Filter by author piscisaureus opened on Oct 3, 2026

• Peer alias bindings are scoped to a control plane but the control URL is not recorded

  denoland/clawpatrol#868 · Filter by author piscisaureus opened on Oct 3, 2026

• relay_destinations: unknown_host = "inspect" dials the agent's SNI without classification

  denoland/clawpatrol#867 · Filter by author piscisaureus opened on Oct 3, 2026

• relay_destinations: the tailnet (CGNAT/ULA) allowance is keyed on a tailscale {} block, not on the dial actually traversing the tailnet

  denoland/clawpatrol#866 · Filter by author piscisaureus opened on Oct 3, 2026

• Per-process daemon fails twice with 'invalid key' when the tsnet auth key is used seconds after minting

  denoland/clawpatrol#865 · Filter by author piscisaureus opened on Oct 3, 2026

• Read Host allowlist depends on the tsnet name a status goroutine may never fill in

  denoland/clawpatrol#864 · Filter by author piscisaureus opened on Oct 3, 2026

• gateway: concurrent device approvals can give two devices the same WireGuard address, leaving one with no traffic

  denoland/clawpatrol#858 · Filter by author tkfor21 opened on Oct 2, 2026

• CertCache: bound the minted-leaf cache and re-mint expired leaves

  denoland/clawpatrol#850 · Filter by author piscisaureus opened on Sep 14, 2026

• http.host facet: rules on https.unknown (and the Block button) cannot match the host

  denoland/clawpatrol#849 · Filter by author piscisaureus opened on Sep 14, 2026

• macOS clawpatrol run: extension UDP pump swallows the UDP/443 refusal

  denoland/clawpatrol#848 · Filter by author piscisaureus opened on Sep 12, 2026

• Dashboard-approved sync HITL request is rendered in Slack as "waiting for matching client retry"

  denoland/clawpatrol#843 · Filter by author piscisaureus opened on Sep 11, 2026

• Plugin parity: every built-in capability expressible as an external plugin

  roadmap
  denoland/clawpatrol#833 · Filter by author piscisaureus opened on Sep 10, 2026
  1

• Roadmap

  roadmap
  denoland/clawpatrol#818 · Filter by author piscisaureus opened on Sep 10, 2026
  1

• Roadmap: llm facet for reporting model, tokens and cost

  roadmap
  denoland/clawpatrol#817 · Filter by author piscisaureus opened on Sep 10, 2026

• Roadmap: a plugin registry

  roadmap
  denoland/clawpatrol#816 · Filter by author piscisaureus opened on Sep 10, 2026

• Roadmap: generalize env pushdown beyond the built-in credential types

  roadmap
  denoland/clawpatrol#815 · Filter by author piscisaureus opened on Sep 10, 2026

• CLI for configuring a remote gateway (credentials, device approval, profiles)

  enhancementroadmap
  denoland/clawpatrol#811 · Filter by author piscisaureus opened on Sep 9, 2026
  1

• Hey Claw Patrol team nice work.

  denoland/clawpatrol#797 · Filter by author alwayshuman opened on Aug 5, 2026
  1

• clawpatrol run: define IPv6 routing parity and PMTU/ICMPv6 behavior

  denoland/clawpatrol#787 · Filter by author magurotuna opened on Jul 19, 2026

• macOS: remove the previously managed Claw Patrol CA after successful rotation

  denoland/clawpatrol#777 · Filter by author magurotuna opened on Jul 18, 2026

• Device-flow onboarding installs the poll-delivered CA over an unauthenticated (InsecureSkipVerify) connection

  denoland/clawpatrol#774 · Filter by author magurotuna opened on Jul 17, 2026

• run (Linux): rewrite child UDP/53 to <gateway>:53 in the daemon as belt-and-suspenders

  denoland/clawpatrol#773 · Filter by author magurotuna opened on Jul 17, 2026

• macOS: system-resolver (mDNSResponder) lookups bypass NE — per-process DNS leak for tunnel-backed endpoints

  denoland/clawpatrol#772 · Filter by author magurotuna opened on Jul 17, 2026

• Support SSL_CERT_FILE-only corporate roots under clawpatrol run (follow-up to #764/#766)

  denoland/clawpatrol#768 · Filter by author magurotuna opened on Jul 16, 2026