@pmelab/gtd 10.8.0 → 10.9.0

package/dist/gtd.bundle.mjs

@@ -53693,7 +53693,7 @@ const uiJsonSchema = {
 	properties: {
 		port: {
 			type: "integer",
-			description: "TCP port `gtd ui` listens on."
+			description: "For ui, the tailscale serve port (default: the first free of 8443, 10000, 443), or the bind port when --host opts out of serve (default: a free port)."
 		},
 		host: {
 			type: "string",
@@ -210495,7 +210495,19 @@ var UiListener = class UiListener extends Tag("UiListener")() {
 		});
 	}) });
 };
-const DEFAULT_PORT = 8443;
+/**
+* The tailscale serve front door's fixed candidate list, walked in order:
+* a default tailnet permits HTTPS serve only on 443, 8443 and 10000 unless
+* its policy file says otherwise — an arbitrary high port simply fails to
+* publish, so nothing outside this list is worth trying.
+*/
+const SERVE_PORT_CANDIDATES = [
+	8443,
+	1e4,
+	443
+];
+/** `0` means "auto-pick" for both `--port`/`ui.port` — identical to giving no port at all, and kept out of `publishServe --https=0`, which cannot publish. */
+const normalizePort = (port) => port === 0 ? void 0 : port;
 /**
 * `--dev` needs the gtd SOURCE checkout (its `src/web/`, its `tsdown.config.ts`,
 * its devDependencies) to rebuild against — never the invoking directory,
@@ -210648,20 +210660,25 @@ const probeLiveServeMapping = (servePort) => gen(function* () {
 * check, our own) is stale — cleared via `unpublishServe` before a fresh
 * publish; a record naming another LIVE gtd ui is left alone too, since two
 * instances racing the same port is exactly the case ownership exists to
-* prevent. Returns `true` when it's safe to proceed to `publishServe`,
-* `false` when the caller should fall back without ever calling it.
+* prevent. Returns `"clear"` when it's safe to proceed to `publishServe`;
+* `"occupied"` (a foreign live mapping) and `"unknowable"` (a probe that
+* failed to answer) are both "don't publish", but the caller's candidate
+* walk (Task 2) treats them differently — `"occupied"` is per-port and
+* walkable, `"unknowable"` says nothing about any port and would only
+* re-run the same failing subprocess against every remaining candidate, so
+* it aborts the walk instead of advancing it.
 */
 const clearOrphanForPublish = (servePort) => gen(function* () {
 	const record = readServeRecord(servePort);
 	if (record === void 0) {
 		const probe = yield* probeLiveServeMapping(servePort);
-		if (!probe.ok) return false;
-		return probe.mapping === void 0;
+		if (!probe.ok) return "unknowable";
+		return probe.mapping === void 0 ? "clear" : "occupied";
 	}
-	if (isPidAlive(record.pid) && record.pid !== process.pid) return false;
+	if (isPidAlive(record.pid) && record.pid !== process.pid) return "occupied";
 	yield* unpublishServe(servePort).pipe(catchAll(() => succeed$3(void 0)));
 	deleteServeRecord(servePort);
-	return true;
+	return "clear";
 });
 /**
 * Task 3's serve-first path: probe for a tailnet hostname, run the Task 4
@@ -210679,12 +210696,20 @@ const attemptServe = (servePort, worktree, uiListener, handler) => gen(function*
 	const tailscaleStatus = yield* probeTailscaleStatus();
 	if (tailscaleStatus === void 0) return {
 		ok: false,
+		retry: false,
 		reason: "no Tailscale backend detected"
 	};
-	if (!(yield* clearOrphanForPublish(servePort))) return {
+	const orphanStatus = yield* clearOrphanForPublish(servePort);
+	if (orphanStatus === "occupied") return {
 		ok: false,
+		retry: true,
 		reason: `port ${servePort} already carries a tailscale serve mapping this instance does not own`
 	};
+	if (orphanStatus === "unknowable") return {
+		ok: false,
+		retry: false,
+		reason: `could not confirm port ${servePort} is free — tailscale serve status --json failed`
+	};
 	const boundAttempt = yield* uiListener.listen({
 		host: "127.0.0.1",
 		port: 0,
@@ -210698,6 +210723,7 @@ const attemptServe = (servePort, worktree, uiListener, handler) => gen(function*
 	})));
 	if (!boundAttempt.ok) return {
 		ok: false,
+		retry: false,
 		reason: `could not bind the loopback listener: ${boundAttempt.reason}`
 	};
 	const bound = boundAttempt.bound;
@@ -210713,6 +210739,7 @@ const attemptServe = (servePort, worktree, uiListener, handler) => gen(function*
 		yield* sync$1(() => bound.close());
 		return {
 			ok: false,
+			retry: true,
 			reason: `tailscale serve failed: ${publishResult.reason}`
 		};
 	}
@@ -210726,7 +210753,8 @@ const attemptServe = (servePort, worktree, uiListener, handler) => gen(function*
 	return {
 		ok: true,
 		bound,
-		url: servePort === 443 ? `https://${tailscaleStatus.hostname}/` : `https://${tailscaleStatus.hostname}:${servePort}/`
+		url: servePort === 443 ? `https://${tailscaleStatus.hostname}/` : `https://${tailscaleStatus.hostname}:${servePort}/`,
+		servePort
 	};
 });
 /**
@@ -210756,17 +210784,20 @@ const teardownServe = (servePort) => gen(function* () {
 * so that function's own cyclomatic/cognitive complexity stays flat (mirrors
 * why `resolveHostsAndCert` was pulled out for Package 02): an explicit
 * `--host`/`ui.host` or `--self-signed` skips serve entirely (step 1);
-* otherwise `attemptServe` is tried first, its own failure reason printed
-* above the URL before falling back (step 3) — never a refusal either way.
+* otherwise Task 2's candidate walk is tried first — a one-element list when
+* `explicitPort` was given, `SERVE_PORT_CANDIDATES` otherwise — printing the
+* LAST candidate's failure reason (prefixed with every port tried, when more
+* than one was) above the URL before falling back — never a refusal either
+* way.
 */
 const resolveListener = (args) => gen(function* () {
-	const { options, config, port, explicitHost, worktree, uiListener, handler, out } = args;
+	const { options, config, explicitPort, explicitHost, worktree, uiListener, handler, out } = args;
 	const directBind = () => gen(function* () {
 		const { bindHost, displayHost, certPair } = yield* resolveHostsAndCert(options, config);
 		const bound = yield* uiListener.listen({
 			tls: certPair,
 			host: bindHost,
-			port,
+			port: explicitPort ?? 0,
 			handler
 		});
 		return {
@@ -210782,13 +210813,24 @@ const resolveListener = (args) => gen(function* () {
 			teardown: _void
 		};
 	}
-	const attempt = yield* attemptServe(port, worktree, uiListener, handler);
-	if (attempt.ok) return {
-		bound: attempt.bound,
-		url: attempt.url,
-		teardown: teardownServe(port)
-	};
-	out.write(`gtd ui: not using tailscale serve — ${attempt.reason}\n`);
+	const candidates = explicitPort !== void 0 ? [explicitPort] : SERVE_PORT_CANDIDATES;
+	const tried = [];
+	for (const candidate of candidates) {
+		const attempt = yield* attemptServe(candidate, worktree, uiListener, handler);
+		if (attempt.ok) return {
+			bound: attempt.bound,
+			url: attempt.url,
+			teardown: teardownServe(attempt.servePort)
+		};
+		tried.push({
+			port: candidate,
+			reason: attempt.reason
+		});
+		if (!attempt.retry) break;
+	}
+	const last = tried[tried.length - 1];
+	const reason = tried.length > 1 ? `tried ${tried.map((t) => t.port).join(", ")} — ${last.reason}` : last.reason;
+	out.write(`gtd ui: not using tailscale serve — ${reason}\n`);
 	const { bound, url } = yield* directBind();
 	return {
 		bound,
@@ -210815,7 +210857,7 @@ const runUiCommand = (options, config, out) => gen(function* () {
 	const fs = yield* FileSystem;
 	const uiListener = yield* UiListener;
 	const runtime$5 = yield* runtime();
-	const port = options.port ?? config?.port ?? DEFAULT_PORT;
+	const explicitPort = normalizePort(options.port ?? config?.port);
 	const explicitHost = options.host ?? config?.host;
 	const clientHtml = yield* resolveClientHtml(options.dev, runner, fs);
 	const writeDeps = {
@@ -210894,7 +210936,7 @@ const runUiCommand = (options, config, out) => gen(function* () {
 	const { bound, url, teardown } = yield* resolveListener({
 		options,
 		config,
-		port,
+		explicitPort,
 		explicitHost,
 		worktree: cwd.root,
 		uiListener,
@@ -225915,7 +225957,8 @@ const FLAGS = [
 		help: [
 			"(gtd visualize/gtd ui only) port to serve on: a free port",
 			"for visualize; for ui, the tailscale serve port (default:",
-			"8443), or the bind port when --host opts out of serve"
+			"the first free of 8443, 10000, 443), or the bind port when",
+			"--host opts out of serve (default: a free port)"
 		]
 	},
 	{
@@ -226196,12 +226239,14 @@ const COMMAND_ROWS = [
 			"refuses outside a repository like every other state command.",
 			"By default, publishes through `tailscale serve` (reachable",
 			"from anywhere on the tailnet, including over a DERP relay)",
-			"with tailscaled terminating TLS; falls back to binding a",
-			"local HTTPS server directly, never refusing, when serve",
-			"isn't available. --host <addr> opts out of serve and binds",
-			"that address directly instead; --port <n> overrides the",
-			"serve port (default: 8443), or the bind port when --host is",
-			"given; --self-signed also opts out of serve, generating a",
+			"with tailscaled terminating TLS, walking 8443, then 10000,",
+			"then 443 until one publishes; falls back to binding a local",
+			"HTTPS server directly, never refusing, when none of the",
+			"three works. --host <addr> opts out of serve and binds that",
+			"address directly instead; --port <n> overrides the serve",
+			"port (default: the first free of 8443, 10000, 443), or the",
+			"bind port when --host is given (default: a free port);",
+			"--self-signed also opts out of serve, generating a",
 			"throwaway TLS certificate instead of the configured",
 			"ui.cert/ui.key; --dev runs against local development sources",
 			"instead of the packaged build"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pmelab/gtd",
-  "version": "10.8.0",
+  "version": "10.9.0",
   "private": false,
   "description": "Git-aware CLI that emits the next prompt for an autonomous coding agent based on the current repository state",
   "bin": {

package/schema.json

@@ -278,7 +278,7 @@
       "properties": {
         "port": {
           "type": "integer",
-          "description": "TCP port `gtd ui` listens on."
+          "description": "For ui, the tailscale serve port (default: the first free of 8443, 10000, 443), or the bind port when --host opts out of serve (default: a free port)."
         },
         "host": {
           "type": "string",