tunnel: fix panic on send to closed writeCh during disconnect

When the server disconnects, Close() was closing both stopCh and
writeCh. The TAP→Server goroutine could race and send to the closed
writeCh, causing a panic. Fix: don't close writeCh in Close(), let
writeLoop exit via stopCh instead.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

pkg/client/tunnel.go

@@ -50,20 +50,23 @@ func NewTunnel(sess *Session) *Tunnel {
 // writeLoop is the single goroutine that writes to the connection.
 // All writes are serialized through writeCh — no mutex needed.
 func (t *Tunnel) writeLoop() {
-	for buf := range t.writeCh {
-		if _, err := t.sess.Conn.Write(buf); err != nil {
-			t.writeErr = err
+	for {
+		select {
+		case buf := <-t.writeCh:
+			if _, err := t.sess.Conn.Write(buf); err != nil {
+				t.writeErr = err
+				return
+			}
+		case <-t.stopCh:
 			return
 		}
 	}
 }
 
 // Close stops the keepalive goroutine and closes the underlying connection.
+// The writeCh is not closed here — writeLoop exits when the connection write fails.
 func (t *Tunnel) Close() error {
-	t.stopped.Do(func() {
-		close(t.stopCh)
-		close(t.writeCh)
-	})
+	t.stopped.Do(func() { close(t.stopCh) })
 	return t.sess.Conn.Close()
 }