@dylanpiercey/work 0.2.39 → 0.2.40

package/lib/setup/firewall.d.mts

@@ -29,7 +29,21 @@ export interface FirewallProbe {
   /** Whose node that was, as the CLI found it: the running service's
    * own reading, its definition's, or this shell's for want of either. */
   nodeFrom?: "service" | "unit" | "shell";
+  /** The fix is worth offering: a page's direct path never connected and
+   * nothing has shown the port open (`bornOut`). */
+  advise?: boolean;
 }
+/** What the running server has seen of direct connections: when a page's
+ * side last came in unasked on this port, and how many pages' direct paths
+ * never connected since it started. */
+export interface DirectSeen {
+  inbound: string | null;
+  turnedAway: number;
+}
+export function bornOut(
+  f: FirewallProbe | null,
+  seen: DirectSeen | null,
+): FirewallProbe | null;
 export function firewallProbe(opts?: {
   rtcPort?: string | number;
   appPort?: string | number;

package/lib/setup/firewall.mjs

@@ -1,7 +1,8 @@
 // The host firewall in front of direct connections' UDP port
 // (src/server/rtc): what `work doctor` says about it, the rule `work setup`
 // offers to add, and what a page whose direct path never connected is
-// told. Read without root: firewalld's daemon says which zones are active
+// told — each only once a device has failed to connect directly and
+// nothing has shown the port open (`bornOut`). Read without root: firewalld's daemon says which zones are active
 // and which services it knows, and a zone's own definition is world-readable
 // where it was never changed (its shipped copy); ufw's switch and default
 // policy are in world-readable files; macOS's socketfilterfw and codesign
@@ -438,6 +439,34 @@ export function applyPlan(plan, log) {
  * readiness: work runs either way, and only devices on the network lose
  * the direct path. macOS's answer is for one node, so the line says when
  * it had to be this shell's (`nodeFrom`, set by the CLI). */
+/**
+ * The reading `f` as direct connections bear it out (`seen`, the running
+ * server's record). A connection whose page side came in unasked — a
+ * peer-reflexive address, which this end never sent to first — got through
+ * whatever the reading guessed, so the port admits. Otherwise the fix is
+ * advised (`advise`) only once a page's direct path never connected
+ * (`turnedAway`): ICE punches through a stateful firewall from most
+ * networks, so a firewall that may drop the port is no reason to change it
+ * until a device could not get in. Without a record (no server to ask),
+ * nothing is advised.
+ */
+export function bornOut(f, seen) {
+  if (!f) return f;
+  if (f.admits) return { ...f, advise: false };
+  if (seen?.inbound)
+    return {
+      ...f,
+      admits: true,
+      likely: false,
+      why: "a device's connection came in through it unasked",
+      check: null,
+      plan: [],
+      fix: null,
+      advise: false,
+    };
+  return { ...f, advise: (seen?.turnedAway ?? 0) > 0 };
+}
+
 /** What a firewall that does not admit the port does to it: "drops" where
  * its rules could be read, "may drop" where only root can read them — then
  * why, and the command that shows them as they are. */
@@ -447,8 +476,10 @@ export function dropText(f) {
   return `${f.what} ${f.exact ? "drops" : "may drop"} UDP ${f.port}${why}`;
 }
 
+/** `work doctor`'s line: what admits the port, or the fix where it is
+ * advised (`bornOut`); nothing for a firewall no failure points at. */
 export function firewallLine(f) {
-  if (!f) return null;
+  if (!f || (!f.admits && !f.advise)) return null;
   const head = "firewall".padEnd(11);
   const why = f.ruled
     ? ` (work's rule, \`${RULE}\`)`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dylanpiercey/work",
-  "version": "0.2.39",
+  "version": "0.2.40",
   "type": "module",
   "description": "Web GUI for agentic dev workspaces",
   "license": "MIT",

package/dist/_B2zjDgtj.js

@@ -1,2 +0,0 @@
-import { f as teamsOf } from "./_Ca_OVNVt.js";
-export { teamsOf };

package/dist/_o6JmtS1w.js

@@ -1,2 +0,0 @@
-import { J as notifySessionsChanged } from "./_C65JTOIi.js";
-export { notifySessionsChanged };

package/dist/public/assets/_-wwiJPLW.js

@@ -1 +0,0 @@
-import{$input_setupChange as e}from"./_DQXY-9GM.js";export{e as _};

package/dist/public/assets/_1ocptEOo.js

@@ -1 +0,0 @@
-import{$input_treeOpen as e}from"./_Cl__s9AV.js";export{e as _};

package/dist/public/assets/_B9RNQdDm.js

@@ -1 +0,0 @@
-import{$input_findable as e}from"./__fnIgJhv.js";export{e as _};

package/dist/public/assets/_BBEos7UL.js

@@ -1 +0,0 @@
-import{$input_section as e}from"./_DQXY-9GM.js";export{e as _};

package/dist/public/assets/_BINxEVqo.js

@@ -1 +0,0 @@
-import{$input_focusFile as e}from"./_Cl__s9AV.js";export{e as _};

package/dist/public/assets/_BIUcD6tx.js

@@ -1 +0,0 @@
-import{$input_fileChange as e}from"./__fnIgJhv.js";export{e as _};

package/dist/public/assets/_BNACk2-o.js

@@ -1 +0,0 @@
-import{$input_pageActive as e}from"./_Cl__s9AV.js";export{e as _};

package/dist/public/assets/_BNj2QmF6.js

@@ -1 +0,0 @@
-import{$input_onShownChange as e}from"./_Cl__s9AV.js";export{e as _};

package/dist/public/assets/_BP0ubsa-.js

@@ -1 +0,0 @@
-import{$input_onJump as e}from"./__fnIgJhv.js";export{e as _};

package/dist/public/assets/_BYyn4zzU.js

@@ -1 +0,0 @@
-import{$input_all as e}from"./_Cl__s9AV.js";export{e as _};

package/dist/public/assets/_Bbl3b6ny.js

@@ -1 +0,0 @@
-import{$input_focusPr as e}from"./_Cl__s9AV.js";export{e as _};

package/dist/public/assets/_Br3d_KH6.js

@@ -1 +0,0 @@
-import{$setup as e,$template as t,$walks as n}from"./_Cl__s9AV.js";var r=[t,n,e];export{r as _};

package/dist/public/assets/_BxL4__1r.js

@@ -1 +0,0 @@
-import{$input_preferred as e}from"./_DQXY-9GM.js";export{e as _};

package/dist/public/assets/_BxUfXKzp.js

@@ -1 +0,0 @@
-import{$input_workspaceId as e}from"./__fnIgJhv.js";export{e as _};

package/dist/public/assets/_C8j9l84J.js

@@ -1 +0,0 @@
-import{$input_onLoaded as e}from"./_Cl__s9AV.js";export{e as _};

package/dist/public/assets/_C9N-IDg0.js

@@ -1 +0,0 @@
-import{A as e,D as t,O as n,X as r,j as i,k as a}from"./_C664BAIO.js";var o=e,s=(e=>`/${e}&`)(i);function c(e){n(e.a,r)}var l=(e,t)=>a(e.a,t),u=(e,n)=>t(e.a,n);export{s as a,o as i,l as n,c as r,u as t};

package/dist/public/assets/_CB47AKvU.js

@@ -1 +0,0 @@
-import{$input_revealNonce as e}from"./__fnIgJhv.js";export{e as _};

package/dist/public/assets/_CBXi9nMO.js

@@ -1 +0,0 @@
-import{$input_focusNonce as e}from"./_Cl__s9AV.js";export{e as _};

package/dist/public/assets/_CDh_JJiq.js

@@ -1 +0,0 @@
-import{$input_active as e}from"./_CofBwph1.js";export{e as _};

package/dist/public/assets/_CFqsbg7k.js

@@ -1 +0,0 @@
-import{$input_workspaceBranch as e}from"./__fnIgJhv.js";export{e as _};

package/dist/public/assets/_CL639YVF.js

@@ -1 +0,0 @@
-import{$input_workspaceChange as e}from"./_CofBwph1.js";export{e as _};

package/dist/public/assets/_CMqAVjpq.js

@@ -1 +0,0 @@
-import{$input_findOpen as e}from"./__fnIgJhv.js";export{e as _};

package/dist/public/assets/_CNAyvnMv.js

@@ -1 +0,0 @@
-import{$input_goNonce as e}from"./__fnIgJhv.js";export{e as _};

package/dist/public/assets/_CRbrZe0h.js

@@ -1 +0,0 @@
-import{$input_focusLine as e}from"./_Cl__s9AV.js";export{e as _};

package/dist/public/assets/_CU1RzWKz.js

@@ -1 +0,0 @@
-import{$setup as e,$template as t,$walks as n}from"./_CofBwph1.js";var r=[t,n,e];export{r as _};

package/dist/public/assets/_CY3eEs6_.js

@@ -1 +0,0 @@
-import{$input_active as e}from"./_Cl__s9AV.js";export{e as _};

package/dist/public/assets/_CZ3yjtBe.js

@@ -1 +0,0 @@
-import{$input_sessions as e}from"./__fnIgJhv.js";export{e as _};

package/dist/public/assets/_CZ84TPP7.js

@@ -1 +0,0 @@
-import{$input_findableChange as e}from"./__fnIgJhv.js";export{e as _};

package/dist/public/assets/_C_09UQ4w.js

@@ -1 +0,0 @@
-import{$input_workspace as e}from"./_CofBwph1.js";export{e as _};

package/dist/public/assets/_Calpuj5g.js

@@ -1 +0,0 @@
-import{$input_onSent as e}from"./_Cl__s9AV.js";export{e as _};

package/dist/public/assets/_Cavn0ptx.js

@@ -1 +0,0 @@
-import{$input_agents as e}from"./_DQXY-9GM.js";export{e as _};

package/dist/public/assets/_CbRxaUGV.js

@@ -1 +0,0 @@
-import{$input_onSent as e}from"./__fnIgJhv.js";export{e as _};

package/dist/public/assets/_Cd_aW7wV.js

@@ -1 +0,0 @@
-import{$input_agentsChange as e}from"./_DQXY-9GM.js";export{e as _};

package/dist/public/assets/_Chl_cS9w.js

@@ -1 +0,0 @@
-import{$input_workspaceName as e}from"./_Cl__s9AV.js";export{e as _};

package/dist/public/assets/_CmGaWAWV.js

@@ -1 +0,0 @@
-import{$input_allHref as e}from"./_Cl__s9AV.js";export{e as _};

package/dist/public/assets/_Cp5Hd0fZ.js

@@ -1 +0,0 @@
-import{$input_allHref as e}from"./__fnIgJhv.js";export{e as _};

package/dist/public/assets/_D-R_QR3a.js

@@ -1 +0,0 @@
-import{$input_onOpenDiff as e}from"./__fnIgJhv.js";export{e as _};

package/dist/public/assets/_D6sn16ZU.js

@@ -1 +0,0 @@
-import{$setup as e,$template as t,$walks as n}from"./_Bm8qrfnp.js";var r=[t,n,e];export{r as _};

package/dist/public/assets/_D7int8im.js

@@ -1 +0,0 @@
-import{$input_findOpenChange as e}from"./_Cl__s9AV.js";export{e as _};

package/dist/public/assets/_D8mkgRMn.js

@@ -1 +0,0 @@
-import{$input_active as e}from"./__fnIgJhv.js";export{e as _};

package/dist/public/assets/_D91QUBHM.js

@@ -1 +0,0 @@
-import{$input_findTickChange as e}from"./_Cl__s9AV.js";export{e as _};

package/dist/public/assets/_DEcYo7eQ.js

@@ -1 +0,0 @@
-import{$input_file as e}from"./_Cl__s9AV.js";export{e as _};

package/dist/public/assets/_DExwdfg0.js

@@ -1 +0,0 @@
-import{$input_onOpenFile as e}from"./_Cl__s9AV.js";export{e as _};

package/dist/public/assets/_DFvS9UpG.js

@@ -1 +0,0 @@
-import{$setup as e,$template as t,$walks as n}from"./_DQXY-9GM.js";var r=[t,n,e];export{r as _};

package/dist/public/assets/_DKpTHHiU.js

@@ -1 +0,0 @@
-import{$input_goNonce as e}from"./_Cl__s9AV.js";export{e as _};

package/dist/public/assets/_DQPHTCvv.js

@@ -1 +0,0 @@
-import{$input_filesAt as e}from"./_Cl__s9AV.js";export{e as _};

package/dist/public/assets/_DSaY05od.js

@@ -1 +0,0 @@
-import{A as e,D as t,O as n,ft as r,j as i,k as a}from"./_C664BAIO.js";var o=e,s=(e=>`/${e}&`)(i);function c(e){n(e.a,r)}var l=(e,t)=>a(e.a,t),u=(e,n)=>t(e.a,n);export{s as a,o as i,l as n,c as r,u as t};

package/dist/public/assets/_DTu8hKtU.js

@@ -1 +0,0 @@
-import{$input_setup as e}from"./_DQXY-9GM.js";export{e as _};

package/dist/public/assets/_DXrjUTvT.js

@@ -1 +0,0 @@
-import{$input_instance as e}from"./_DQXY-9GM.js";export{e as _};

package/dist/public/assets/_D_ZpPCJp.js

@@ -1 +0,0 @@
-import{$input_sectionChange as e}from"./_DQXY-9GM.js";export{e as _};

package/dist/public/assets/_Dc8IKwjP.js

@@ -1 +0,0 @@
-import{$input_changesHref as e}from"./__fnIgJhv.js";export{e as _};

package/dist/public/assets/_DcNiMkCH.js

@@ -1 +0,0 @@
-import{$input_sessions as e}from"./_Cl__s9AV.js";export{e as _};

package/dist/public/assets/_DiJCTZr9.js

@@ -1 +0,0 @@
-import{$input_diffAt as e}from"./__fnIgJhv.js";export{e as _};

package/dist/public/assets/_DlNU-5lx.js

@@ -1 +0,0 @@
-import{$input_diffAtChange as e}from"./__fnIgJhv.js";export{e as _};

package/dist/public/assets/_DnCEdGjD.js

@@ -1 +0,0 @@
-import{$input_treeOpen as e}from"./__fnIgJhv.js";export{e as _};

package/dist/public/assets/_DpPMKDBh.js

@@ -1 +0,0 @@
-import{$input_back as e}from"./__fnIgJhv.js";export{e as _};

package/dist/public/assets/_DrJaX0SY.js

@@ -1 +0,0 @@
-import{$input_line as e}from"./__fnIgJhv.js";export{e as _};

package/dist/public/assets/_DtnhHe-N.js

@@ -1 +0,0 @@
-import{$input_findOpenChange as e}from"./__fnIgJhv.js";export{e as _};

package/dist/public/assets/_DuctaBH1.js

@@ -1 +0,0 @@
-import{$input_filesHref as e}from"./_Cl__s9AV.js";export{e as _};

package/dist/public/assets/_Dx7wPThN.js

@@ -1 +0,0 @@
-import{$input_onJump as e}from"./_Cl__s9AV.js";export{e as _};

package/dist/public/assets/_DzSlntrn.js

@@ -1 +0,0 @@
-import{$input_file as e}from"./__fnIgJhv.js";export{e as _};

package/dist/public/assets/_IXdPjq_0.js

@@ -1 +0,0 @@
-import{$input_workspaceBranch as e}from"./_Cl__s9AV.js";export{e as _};

package/dist/public/assets/_L4K52NBr.js

@@ -1 +0,0 @@
-import{$input_back as e}from"./_Cl__s9AV.js";export{e as _};

package/dist/public/assets/_TTCeqr7i.js

@@ -1 +0,0 @@
-import{$input_focusFileNonce as e}from"./_Cl__s9AV.js";export{e as _};

package/dist/public/assets/_W5O1RkyQ.js

@@ -1 +0,0 @@
-import{$input_instanceChange as e}from"./_DQXY-9GM.js";export{e as _};

package/dist/public/assets/_XJ3JIj7H.js

@@ -1 +0,0 @@
-import{$input_fileChange as e}from"./_Cl__s9AV.js";export{e as _};

package/dist/public/assets/_XNrqm5Az.js

@@ -1 +0,0 @@
-import{$setup as e,$template as t,$walks as n}from"./__fnIgJhv.js";var r=[t,n,e];export{r as _};

package/dist/public/assets/_b76PAgg0.js

@@ -1 +0,0 @@
-import{$input_workspaceId as e}from"./_Cl__s9AV.js";export{e as _};

package/dist/public/assets/_gWz2IpiT.js

@@ -1 +0,0 @@
-import{$input_changesHref as e}from"./_Cl__s9AV.js";export{e as _};

package/dist/public/assets/_iwEIhOmP.js

@@ -1 +0,0 @@
-import{$input_rev as e}from"./_Cl__s9AV.js";export{e as _};

package/dist/public/assets/_joTDbJc3.js

@@ -1 +0,0 @@
-import{$input_onCreate as e}from"./_Bm8qrfnp.js";export{e as _};

package/dist/public/assets/_kaD7ZM9j.js

@@ -1 +0,0 @@
-import{$input_workspaceName as e}from"./__fnIgJhv.js";export{e as _};