[jaxxstorm]

Summary

Refreshes the pinned Tailscale OpenAPI snapshot from https://api.tailscale.com/api/v2?outputOpenapiSchema=true and covers the 13 properties added since 2026-10-02. Operation count stays at 93.

• Device.postureStatus (passing, impacting, failingAssertions) is preserved on tscli get device and tscli list devices.
• TailnetSettings.routeSelection is returned by tscli get settings and set with tscli set settings --route-selection.
• Allowed values are active-passive-failover, regional-routing, regional-routing-failover, and magicroute.
• --route-selection and --regional-routing cannot be sent together. regionalRoutingOn is now read-only in the schema, and a route-selection update omits that boolean.

make coverage-gaps-check reports 0 uncovered operations and 0 uncovered properties (250 covered, up from 237).

Test plan

• go test ./pkg/contract/openapi
• go test -C tools ./internal/coveragegaps
• go test ./test/cli -run 'TestListDevicesPropertyCoverage|TestGetDevicePropertyCoverage|TestGetSettingsPropertyCoverage|TestSetSettings|TestExampleCommand'
• make coverage-gaps-check
• make docs-check

  

[jaxxstorm]

Closing as superseded by 7b12baa, released in v0.11.0. Main already includes device postureStatus, tailnet routeSelection, CLI value validation and mutual exclusion, regression tests, and zero reported OpenAPI coverage gaps. PR #109 adds the subsequent admin-console session timeout support and has now been merged after local make test, make coverage-gaps-check, and make docs-check passed.