refactor: replace getTunnelStatus with GOOSE_DISABLE_NOSTR_SHARING config flag

crates/goose-server/Cargo.toml

@@ -35,7 +35,6 @@ system-keyring = ["goose/system-keyring"]
 portable-default = ["rustls-tls", "aws-providers", "telemetry", "otel"]
 rustls-tls = [
     "reqwest/rustls",
-    "tokio-tungstenite/rustls-tls-native-roots",
     "axum-server/tls-rustls",
     "dep:rustls",
     "dep:aws-lc-rs",
@@ -45,7 +44,6 @@ rustls-tls = [
 ]
 native-tls = [
     "reqwest/native-tls",
-    "tokio-tungstenite/native-tls",
     "axum-server/tls-openssl",
     "dep:openssl",
     "goose/native-tls",
@@ -80,11 +78,8 @@ utoipa = { workspace = true, features = ["axum_extras", "chrono"] }
 reqwest = { workspace = true, features = ["json", "blocking", "multipart", "system-proxy"] }
 tokio-util = { workspace = true }
 serde_path_to_error = { version = "0.1.8", default-features = false }
-tokio-tungstenite = { version = "0.29", default-features = false, features = ["connect"] }
-url = { workspace = true }
 rand = { workspace = true }
 hex = { version = "0.4.3", default-features = false, features = ["std"] }
-socket2 = { version = "0.6", default-features = false }
 rustls = { workspace = true, optional = true }
 uuid = { workspace = true }
 rcgen = { version = "0.14", default-features = false, features = ["aws_lc_rs", "crypto", "pem"] }

crates/goose-server/src/lib.rs

@@ -13,8 +13,6 @@ pub mod session_event_bus;
 pub mod state;
 #[cfg(any(feature = "rustls-tls", feature = "native-tls"))]
 pub mod tls;
-pub mod tunnel;
-
 // Re-export commonly used items
 pub use openapi::*;
 pub use state::*;

crates/goose-server/src/main.rs

@@ -6,8 +6,6 @@ mod openapi;
 mod routes;
 mod session_event_bus;
 mod state;
-mod tunnel;
-
 use std::path::PathBuf;
 use std::{backtrace::Backtrace, panic::PanicHookInfo};
 

crates/goose-server/src/openapi.rs

@@ -468,7 +468,6 @@ derive_utoipa!(IconTheme as IconThemeSchema);
         super::routes::setup::start_openrouter_setup,
         super::routes::setup::start_tetrate_setup,
         super::routes::setup::start_nanogpt_setup,
-        super::routes::tunnel::get_tunnel_status,
         super::routes::telemetry::send_telemetry_event,
         super::routes::dictation::transcribe_dictation,
         super::routes::dictation::get_dictation_config,
@@ -636,8 +635,6 @@ derive_utoipa!(IconTheme as IconThemeSchema);
         super::routes::agent::RestartAgentResponse,
         goose::agents::ExtensionLoadResult,
         super::routes::setup::SetupResponse,
-        super::tunnel::TunnelInfo,
-        super::tunnel::TunnelState,
         super::routes::telemetry::TelemetryEventRequest,
         goose::goose_apps::GooseApp,
         goose::goose_apps::WindowProps,

crates/goose-server/src/routes/dictation.rs

@@ -85,7 +85,7 @@ fn validate_audio(audio: &str, mime_type: &str) -> Result<(Vec<u8>, &'static str
             return Err(ErrorResponse {
                 message: format!("Unsupported audio format: {}", mime_type),
                 status: StatusCode::UNSUPPORTED_MEDIA_TYPE,
-            })
+            });
         }
     };
 

crates/goose-server/src/routes/mod.rs

@@ -18,7 +18,6 @@ pub mod session_events;
 pub mod setup;
 pub mod status;
 pub mod telemetry;
-pub mod tunnel;
 pub mod utils;
 
 use std::sync::Arc;
@@ -39,7 +38,6 @@ pub fn configure(state: Arc<crate::state::AppState>, secret_key: String) -> Rout
         .merge(schedule::routes(state.clone()))
         .merge(setup::routes(state.clone()))
         .merge(telemetry::routes(state.clone()))
-        .merge(tunnel::routes(state.clone()))
         .merge(mcp_ui_proxy::routes(secret_key.clone()))
         .merge(mcp_app_proxy::routes(secret_key))
         .merge(session_events::routes(state.clone()))

crates/goose-server/src/state.rs

@@ -12,7 +12,6 @@ use tokio::sync::Mutex;
 use tokio::task::JoinHandle;
 
 use crate::session_event_bus::SessionEventBus;
-use crate::tunnel::TunnelManager;
 use goose::agents::ExtensionLoadResult;
 #[cfg(feature = "local-inference")]
 use goose::providers::local_inference::InferenceRuntime;
@@ -25,25 +24,21 @@ pub struct AppState {
     pub(crate) agent_manager: Arc<AgentManager>,
     pub recipe_file_hash_map: Arc<Mutex<HashMap<String, PathBuf>>>,
     recipe_session_tracker: Arc<Mutex<HashSet<String>>>,
-    pub tunnel_manager: Arc<TunnelManager>,
     pub extension_loading_tasks: ExtensionLoadingTasks,
     #[cfg(feature = "local-inference")]
     inference_runtime: Arc<OnceLock<Arc<InferenceRuntime>>>,
     session_buses: Arc<Mutex<HashMap<String, Arc<SessionEventBus>>>>,
 }
 
 impl AppState {
-    pub async fn new(tls: bool) -> anyhow::Result<Arc<AppState>> {
+    pub async fn new(_tls: bool) -> anyhow::Result<Arc<AppState>> {
         register_builtin_extensions(goose_mcp::BUILTIN_EXTENSIONS.clone());
 
         let agent_manager = AgentManager::instance().await?;
-        let tunnel_manager = Arc::new(TunnelManager::new(tls));
-
         Ok(Arc::new(Self {
             agent_manager,
             recipe_file_hash_map: Arc::new(Mutex::new(HashMap::new())),
             recipe_session_tracker: Arc::new(Mutex::new(HashSet::new())),
-            tunnel_manager,
             extension_loading_tasks: Arc::new(Mutex::new(HashMap::new())),
             #[cfg(feature = "local-inference")]
             inference_runtime: Arc::new(OnceLock::new()),