Ensure tailscale can be disabled when not running

mac/VibeTunnel/Presentation/Views/Settings/RemoteAccessSettingsView.swift

@@ -311,7 +311,59 @@ private struct TailscaleIntegrationSection: View {
                         .buttonStyle(.link)
                         .controlSize(.small)
                     }
-                } else if tailscaleService.isRunning {
+                } else if !tailscaleService.isRunning {
+                    // Show Tailscale preferences even when not running
+                    VStack(alignment: .leading, spacing: 12) {
+                        // Tailscale Serve toggle - always available when installed
+                        HStack {
+                            Toggle("Enable Tailscale Serve Integration", isOn: $tailscaleServeEnabled)
+                                .onChange(of: tailscaleServeEnabled) { _, newValue in
+                                    logger.info("Tailscale Serve integration \(newValue ? "enabled" : "disabled")")
+                                    // Restart server to apply the new setting
+                                    Task {
+                                        await serverManager.restart()
+                                    }
+                                }
+
+                            Spacer()
+
+                            // Show status when enabled but not running
+                            if tailscaleServeEnabled {
+                                HStack(spacing: 4) {
+                                    Image(systemName: "exclamationmark.triangle.fill")
+                                        .foregroundColor(.orange)
+                                    Text("Tailscale not running")
+                                        .font(.caption)
+                                        .foregroundColor(.orange)
+                                }
+                                .frame(height: 16)
+                            }
+                        }
+
+                        // Show action button to start Tailscale
+                        if tailscaleService.isInstalled && !tailscaleService.isRunning {
+                            Button(action: {
+                                tailscaleService.openTailscaleApp()
+                            }, label: {
+                                HStack(spacing: 4) {
+                                    Image(systemName: "play.circle")
+                                    Text("Start Tailscale")
+                                }
+                            })
+                            .buttonStyle(.borderedProminent)
+                            .controlSize(.small)
+                        }
+
+                        // Show help text about what will happen when enabled
+                        if tailscaleServeEnabled {
+                            Text("Tailscale Serve will activate automatically when Tailscale is running.")
+                                .font(.caption)
+                                .foregroundColor(.secondary)
+                        }
+                    }
+                } else {
+                    // Tailscale is running - show full interface
+                    VStack(alignment: .leading, spacing: 12) {
                         // Tailscale Serve toggle
                         HStack {
                             Toggle("Enable Tailscale Serve Integration", isOn: $tailscaleServeEnabled)
@@ -410,6 +462,7 @@ private struct TailscaleIntegrationSection: View {
                         }
                     }
                 }
+            }
         } header: {
             Text("Tailscale Integration")
                 .font(.headline)

mac/VibeTunnel/Presentation/Views/Settings/ServerConfigurationComponents.swift

@@ -88,6 +88,11 @@ struct AccessModeView: View {
     @AppStorage(AppConstants.UserDefaultsKeys.tailscaleServeEnabled)
     private var tailscaleServeEnabled = false
     
+    @Environment(TailscaleService.self)
+    private var tailscaleService
+    @Environment(TailscaleServeStatusService.self)
+    private var tailscaleServeStatus
+
     var body: some View {
         VStack(alignment: .leading, spacing: 8) {
             HStack {
@@ -95,14 +100,14 @@ struct AccessModeView: View {
                     .font(.callout)
                 Spacer()
 
-                if tailscaleServeEnabled {
+                if shouldLockToLocalhost {
-                    // When Tailscale Serve is enabled, force localhost mode
+                    // Only lock when Tailscale Serve is actually working
                     Text("Localhost")
                         .foregroundColor(.secondary)
 
                     Image(systemName: "lock.shield.fill")
                         .foregroundColor(.blue)
-                        .help("Tailscale Serve requires localhost binding for security")
+                        .help("Tailscale Serve active - locked to localhost for security")
                 } else {
                     Picker("", selection: $accessModeString) {
                         ForEach(DashboardAccessMode.allCases, id: \.rawValue) { mode in
@@ -117,7 +122,20 @@ struct AccessModeView: View {
                 }
             }
 
-            if tailscaleServeEnabled && accessMode == .network {
+            // Show warning when Tailscale Serve is enabled but not working
+            if tailscaleServeEnabled && !shouldLockToLocalhost {
+                HStack(spacing: 4) {
+                    Image(systemName: "exclamationmark.triangle.fill")
+                        .foregroundColor(.orange)
+                        .font(.caption)
+                    Text("Tailscale Serve enabled but not active - using selected access mode")
+                        .font(.caption)
+                        .foregroundColor(.secondary)
+                }
+            }
+            
+            // Show info when Tailscale Serve is active and locked
+            if shouldLockToLocalhost && accessMode == .network {
                 HStack(spacing: 4) {
                     Image(systemName: "info.circle.fill")
                         .foregroundColor(.blue)
@@ -129,6 +147,13 @@ struct AccessModeView: View {
             }
         }
     }
+    
+    /// Only lock to localhost when Tailscale Serve is enabled AND actually working
+    private var shouldLockToLocalhost: Bool {
+        tailscaleServeEnabled && 
+        tailscaleService.isRunning && 
+        tailscaleServeStatus.isRunning
+    }
 }
 
 // MARK: - Port Configuration View