@dylanpiercey/work 0.2.16 → 0.2.17

package/README.md

@@ -107,8 +107,9 @@ must. On the LAN the direct path needs nothing more; from another network
 Settings → Terminal can allow work to open it on the router when needed
 (UPnP, off by default): only after a device failed to connect without it,
 leased, and given back once unused. A host firewall has to let the port
-in too: `work doctor` says when one likely drops it (firewalld's
-FedoraServer zone does, for one), with the command that admits it, and
+in too: `work doctor` says when one drops it, or may (where only root can
+read its rules, it judges from the defaults and gives the command that
+shows them), with the command that admits it, and
 `work setup` offers to add that rule, named `work` so it is removed as one
 (`--firewall` adds it without asking, `--no-firewall` skips the question).
 macOS's firewall admits programs rather than ports, so there it is the

package/bin/work.mjs

@@ -5,7 +5,7 @@
 //                 (--tailscale serves work on the tailnet with `tailscale serve`, which
 //                 it otherwise offers when Tailscale is logged in; --no-tailscale skips that;
 //                 --firewall adds a `work` rule for direct connections' UDP port to a host
-//                 firewall that likely drops it, or on macOS lets the service's node in,
+//                 firewall that may drop it, or on macOS lets the service's node in,
 //                 which it otherwise offers; --no-firewall skips that)
 //   work doctor   report machine readiness (--json, --fix to install what's missing)
 //   work start    run the server in the foreground
@@ -45,6 +45,7 @@ import {
 import { allowHost, stateText } from "../lib/setup/tailscale.mjs";
 import {
   applyPlan,
+  dropText,
   firewallProbe,
   serviceNode,
 } from "../lib/setup/firewall.mjs";
@@ -1641,7 +1642,7 @@ async function firewall() {
     if (asked) log(`${f.what} already admits UDP ${f.port}`);
     return;
   }
-  const drops = `${f.what} ${f.exact ? "drops" : "likely drops"} UDP ${f.port}${f.why ? ` (${f.why})` : ""}, which direct connections from your other devices use`;
+  const drops = `${dropText(f)}, which direct connections from your other devices use`;
   if (!f.plan.length) {
     if (asked || !yes) warn(`${drops}: ${f.fix}`);
     return;

package/dist/{_cZI5p-2V.js → _Bj-WwfnW.js}

@@ -1137,7 +1137,8 @@ async function firewalld(port, tcp, at) {
 		likely,
 		exact,
 		ruled,
-		why: admits || exact ? null : "by the zone's definition as shipped",
+		why: admits || exact ? null : "its changes are root's to read, so this is the zone as shipped",
+		check: admits || exact ? null : shell(sudo("firewall-cmd", `--zone=${zone}`, "--list-all")),
 		plan: admits ? [] : plan
 	});
 }
@@ -1168,7 +1169,8 @@ function ufw(port, tcp, at) {
 		likely: !admits,
 		exact: rules !== null,
 		ruled,
-		why: admits || rules !== null ? null : `by its default input policy, ${policy}`,
+		why: admits || rules !== null ? null : `its rules are root's to read, so this is its default input policy, ${policy}`,
+		check: admits || rules !== null ? null : shell(sudo("ufw", "status", "verbose")),
 		plan: admits ? [] : plan
 	});
 }
@@ -8381,7 +8383,7 @@ function publishChange(sessionId) {
 	const row = get("SELECT workspace_id FROM sessions WHERE id = ?", sessionId);
 	if (row?.workspace_id) {
 		const workspaceId = row.workspace_id;
-		import("./_Bhsm2MDa.js").then((m) => m.notifySessionsChanged(workspaceId));
+		import("./_CLoLdV87.js").then((m) => m.notifySessionsChanged(workspaceId));
 		return;
 	}
 	publish("sessions.changed");

package/dist/_CLoLdV87.js

@@ -0,0 +1,2 @@
+import { _ as notifySessionsChanged } from "./_Bj-WwfnW.js";
+export { notifySessionsChanged };

package/dist/{_Bktr58J-.js → _DPpY3UqO.js}

@@ -38,7 +38,7 @@ var iconBtnXs = "_bo _m";
 var iconBtnRow = "_bp _m";
 var iconBtnLg = "_bq _m";
 var chipBtn = "_br _m";
-var tocDot = "_bJ _U";
+var tocDot = "_cK _U";
 //#endregion
 //#region src/styles/tokens.css.ts
 var color = {
@@ -73,95 +73,95 @@ var iconSize = {
 	xl: 18
 };
 var toastKind = {
-	error: "_cI",
-	warn: "_cJ",
-	info: "_cK"
+	error: "_bJ",
+	warn: "_bK",
+	info: "_bL"
 };
 var toastTitle = {
-	error: "_cL",
-	warn: "_cM",
-	info: "_cN"
+	error: "_bM",
+	warn: "_bN",
+	info: "_bO"
 };
 //#endregion
 //#region src/tags/settings-agents.css.ts
-var agentRow = "_gp _dR";
-var list$3 = "_dV _cc _dQ _dT";
-var metaChip = "_d9 _bi _bh";
-var sectionCount = "_b_ _9 __";
-var usageNote = "_k7 _bh";
-var pop$2 = "_gh _bw";
-var spinner = "_gk _bm _2";
-var toolLead = "_fM _d4";
-var name$4 = "_f7 _d4";
-var desc$1 = "_f8 _d5";
+var agentRow = "_hN _d5";
+var list$3 = "_d9 _dH _d4 _d7";
+var metaChip = "_em _bi _bh";
+var sectionCount = "_dE _9 __";
+var usageNote = "_j0 _bh";
+var pop$2 = "_gj _bw";
+var spinner = "_gm _bm _2";
+var toolLead = "_fA _eh";
+var name$4 = "_fK _eh";
+var desc$1 = "_fL _ei";
 //#endregion
 //#region src/tags/lsp-add-dialog.css.ts
-var addDlg = "_l4 _cz";
-var key$1 = "_ky _kw";
-var addTile = "_kA _kw";
-var field$2 = "_kL _bj";
-var keyField = "_kM _kL _bj";
-var labelField = "_kN _kL _bj";
-var detailsToggle = "_e3 _P";
-var themeSeg = "_fr _bA";
-var checkList = "_el _ca";
+var addDlg = "_ki _bV";
+var key$1 = "_lx _lv";
+var addTile = "_lz _lv";
+var field$2 = "_lK _bj";
+var keyField = "_lL _lK _bj";
+var labelField = "_lM _lK _bj";
+var detailsToggle = "_f2 _P";
+var themeSeg = "_eL _bA";
+var checkList = "_gC _dF";
 //#endregion
 //#region src/tags/prompt-dialog.css.ts
-var promptDlg = "_cD _cz";
-var item$1 = "_dN _m";
-var glance = "_iY _m";
+var promptDlg = "_bZ _bV";
+var item$1 = "_b4 _m";
+var glance = "_dR _m";
 //#endregion
 //#region src/tags/side-nav.css.ts
-var iconBtn = "_cT _m";
-var settingsDot = "_cU _bz";
-var notifyBtn = "_cZ _m";
+var iconBtn = "_b9 _m";
+var settingsDot = "_b_ _bz";
+var notifyBtn = "_ce _m";
 //#endregion
 //#region src/styles/session-pop.css.ts
-var sessionPop = "_do _bw";
-var sessionPopBtn = "_dp _4";
-var wsBtn = "_iD _4";
-var rowIcon = "_iF _bo _m";
-var prChip = "_m1 _v _mV";
+var sessionPop = "_b7 _bw";
+var sessionPopBtn = "_b8 _4";
+var wsBtn = "_fi _4";
+var rowIcon = "_fk _bo _m";
+var prChip = "_le _v _k9";
 //#endregion
 //#region src/tags/port-chip.css.ts
-var port = "_nN _v _mV";
-var open = "_mO _4";
-var action = "_mS _br _m";
-var toggle = "_h6 _P";
-var fold = "_h7 _dS";
-var item = "_mD _4";
-var menu = "_lV _do _bw";
-var menuItem = "_lX _4";
-var findBtn$1 = "_gO _gy _bp _m";
-var tool = "_gy _bp _m";
-var heldRefresh = "_gG _v";
-var pop$1 = "_lF _do _bw";
-var fileFilter = "_oa _o";
-var findInput = "_ip _o";
-var keybarIconBtn = "_iy _br _m";
-var input = "_cn _o";
-var group = "_cq _P";
-var hint$1 = "_mK _9 _M";
-var sheetDir = "_lv _by";
-var upBtn = "_jh _bp _m";
-var findBtn = "_jl _gy _bp _m";
-var goBtn = "_jm _gy _bp _m";
-var note = "_mn _bh";
+var port = "_n9 _v _k9";
+var open = "_kb _4";
+var action = "_kf _br _m";
+var toggle = "_er _P";
+var fold = "_es _d6";
+var item = "_kq _4";
+var menu = "_ml _b7 _bw";
+var menuItem = "_mn _4";
+var findBtn$1 = "_jl _im _bp _m";
+var tool = "_im _bp _m";
+var heldRefresh = "_iu _v";
+var pop$1 = "_lU _b7 _bw";
+var fileFilter = "_nS _o";
+var findInput = "_hx _o";
+var keybarIconBtn = "_hG _br _m";
+var input = "_c2 _o";
+var group = "_c5 _P";
+var hint$1 = "_mG _9 _M";
+var sheetDir = "_m9 _by";
+var upBtn = "_iG _bp _m";
+var findBtn = "_iK _im _bp _m";
+var goBtn = "_iL _im _bp _m";
+var note = "_lX _bh";
 //#endregion
 //#region src/tags/manage-workspace.css.ts
-var procCmd = "_fU _d4";
-var factCopy = "_f1 _br _m";
-var resultRow = "_kf _4";
-var resultBranch = "_kg _d9 _bi _bh _bo _m";
-var urlAction = "_kh _d9 _bi _bh _d_";
-var curRow = "_i5 _dY";
+var procCmd = "_ia _eh";
+var factCopy = "_ih _br _m";
+var resultRow = "_kU _4";
+var resultBranch = "_kV _em _bi _bh _bo _m";
+var urlAction = "_kW _em _bi _bh _en";
+var curRow = "_hZ _eb";
 //#endregion
 //#region src/tags/join-dialog.css.ts
-var dlg = "_kS _cz";
-var hint = "_kT _bh";
-var kbtn = "_dB _bq _m";
-var repeat = "_dE _dD";
-var dpadUser = "_dH _dD";
-var dpadEsc = "_dI _dD";
+var dlg = "_lY _bV";
+var hint = "_lZ _bh";
+var kbtn = "_dn _bq _m";
+var repeat = "_dq _dp";
+var dpadUser = "_dt _dp";
+var dpadEsc = "_du _dp";
 //#endregion
 export { keyField as $, item as A, usageInk as At, sessionPopBtn as B, fileFilter as C, iconBtnRow as Ct, findBtn$1 as D, prTone as Dt, tool as E, phaseIcon as Et, port as F, item$1 as G, notifyBtn as H, prChip as I, themeSeg as J, promptDlg as K, rowIcon as L, toggle as M, action as N, menu as O, tone as Ot, open as P, key$1 as Q, wsBtn as R, keybarIconBtn as S, iconBtnLg as St, heldRefresh as T, inputLg as Tt, settingsDot as U, iconBtn as V, glance as W, addTile as X, detailsToggle as Y, field$2 as Z, sheetDir as _, tocDot as _t, dlg as a, pop$2 as at, input as b, chipBtn as bt, resultBranch as c, sectionCount as ct, factCopy as d, agentRow as dt, labelField as et, procCmd as f, toastKind as ft, upBtn as g, sans as gt, goBtn as h, iconSize as ht, repeat as i, toolLead as it, fold as j, menuItem as k, usageFill as kt, resultRow as l, list$3 as lt, findBtn as m, color as mt, dpadUser as n, desc$1 as nt, hint as o, spinner as ot, note as p, toastTitle as pt, checkList as q, kbtn as r, name$4 as rt, curRow as s, usageNote as st, dpadEsc as t, addDlg as tt, urlAction as u, metaChip as ut, hint$1 as v, btnLg as vt, pop$1 as w, iconBtnXs as wt, findInput as x, glyphBadgeNum as xt, group as y, btnSm as yt, sessionPop as z };