CharlesBinard / SecurBuntu / 23272748740

94%

push

github

feat: Tailscale VPN integration (#15)

* docs: add local mode design spec

Design for running SecurBuntu directly on the local machine without SSH.
Introduces SystemClient abstraction, LocalClient implementation, and
mode selection prompt.

* docs: update local mode spec after review

Address all review findings: complete rename scope, whoami-via-sudo
fix, remove unnecessary local/detect.ts, refactor executeAndReport
signature, rename decorator classes, and add integration test plan.

* docs: add local mode implementation plan

13-task plan covering: SshClient→SystemClient rename, LocalClient
implementation, mode selection, orchestrator decoupling, lockout
prevention, whoami fix, and prompt adjustments for local mode.

* docs: add cross-platform support & OS detection design spec

* docs: add cross-platform OS detection implementation plan

* feat: add Tailscale types to HardeningOptions

* feat: add Tailscale detection to audit scanner and orchestrator

Adds a Tailscale check to the audit scanner that detects whether Tailscale
is installed and extracts the hostname when active. Populates tailscaleActive
and tailscaleHostname on ServerAuditContext from audit results.

* feat: add Tailscale prompt and wire into hardening flow

* feat: implement Tailscale installation and configuration task

* feat: register Tailscale task, add to summary, add integration tests

* fix: check IP forwarding result and prevent sysctl conf naming conflict

* fix: resolve biome lint issues (formatting, complexity, optional chaining)

---------

Co-authored-by: Charles Binard <charles@notae.ai>

80 of 82 new or added lines in 2 files covered. (97.56%)

1319 of 1381 relevant lines covered (95.51%)

38.6 hits per line