From 8988768e625094f84fd4b221e0db37e6bec92997 Mon Sep 17 00:00:00 2001
From: administrator <administrator@administrators-Mac-mini.local>
Date: Tue, 17 Mar 2026 04:10:01 -0700
Subject: [PATCH] fix(gateway): preserve device identity for empty but present
 auth objects ({})

---
 src/gateway/probe.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/gateway/probe.ts b/src/gateway/probe.ts
index bbd36639b78..adfe3b2d66b 100644
--- a/src/gateway/probe.ts
+++ b/src/gateway/probe.ts
@@ -47,7 +47,7 @@ export async function probeGateway(opts: {
       const hostname = new URL(opts.url).hostname;
       // Local authenticated probes should stay device-bound so read/detail RPCs
       // are not scope-limited by the shared-auth scope stripping hardening.
-      return isLoopbackHost(hostname) && !(opts.auth?.token || opts.auth?.password);
+      return isLoopbackHost(hostname) && opts.auth === undefined // Preserves device identity for empty but present auth objects (e.g. {});
     } catch {
       return false;
     }