TSLink v0.3.1: people grants and open GuestGate

TSLink v0.3.1 fixes a conflict between adding a person for another app and an open GuestGate (a guest-gated app with no people scope and an empty allow list), including when re-adding a revoked person. The home gateway itself was introduced in v0.3.0.

What changes

On an open GuestGate's private entry, a non-revoked person without a grant for that GuestGate keeps the unknown-human access baseline even if all their other grants have expired or latched. Explicit GuestGate grants and denials retain their existing rules. Re-adding a revoked person restores the unknown-user baseline on open GuestGate services.

Upgrade

No registry migration is required. For Homebrew:

brew upgrade --cask anydoor7/tap/tslink
# If TSLink runs as a background service:
tslink install

Scoop users run scoop update, then scoop update tslink. Other users can download the v0.3.1 release archives and packages. After upgrading a background service, rerun tslink install so it uses the new binary.

See the installation and verification guide and the frozen TSLink v0.3.1 changelog. TSLink is an independent project, not made or endorsed by Tailscale.

Markdown version.