From 56d2f8390ee2641e077e365473edbcce94f87590 Mon Sep 17 00:00:00 2001
From: Bohdan Triapitsyn <artmore@protonmail.com>
Date: Sat, 28 Feb 2026 04:48:35 +0200
Subject: [PATCH] fix: prevent tunnel lock for non-tunnel web sessions

---
 packages/web/server/lib/opencode/tunnel-auth.js | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/packages/web/server/lib/opencode/tunnel-auth.js b/packages/web/server/lib/opencode/tunnel-auth.js
index 329bef19..aba0dc29 100644
--- a/packages/web/server/lib/opencode/tunnel-auth.js
+++ b/packages/web/server/lib/opencode/tunnel-auth.js
@@ -167,6 +167,10 @@ export const createTunnelAuth = () => {
       return 'local';
     }
 
+    if (!activeTunnelId) {
+      return 'local';
+    }
+
     return 'unknown-public';
   };