caddyship 0.1.0 → 0.1.1

package/README.md

@@ -91,6 +91,10 @@ password) and add the public IP of the computer you run `caddyship` from to the
   The config file `~/.config/caddyship/config.json` is created with mode `0600`.
 - Existing records are never overwritten silently: a differing A/AAAA record stops the run
   unless you confirm or pass `--update-dns`; an existing CNAME is refused.
+- WEDOS checks the exact address your connection comes from. caddyship prefers IPv4, so only
+  your IPv4 address has to be on the allow-list (the panel takes addresses separated by spaces).
+  If WEDOS answers `2051 Access not allowed from this IP address (...)`, the address in that
+  message is the one to allow.
 - Apex records (no subdomain) are not supported yet.
 
 ## Security notes

package/dist/cli.js

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
 
 // src/cli.ts
+import dns from "dns";
 import { Command } from "commander";
 
 // src/util.ts
@@ -474,7 +475,7 @@ var DnsConflictError = class extends CaddyshipError {
   existing;
 };
 var asArray = (v) => v === void 0 || v === null ? [] : Array.isArray(v) ? v : [v];
-var AUTH_HINT = "Check that you use the WAPI password (not your account password), that WAPI is enabled, and that this machine's public IP is on the WAPI allow-list in the WEDOS customer panel.";
+var AUTH_HINT = "Check that you use the WAPI password (not your account password), that WAPI is enabled, and that this machine's public IP is on the WAPI allow-list in the WEDOS customer panel. If the message names an IP address you did not list (often an IPv6 address), add that address or run with NODE_OPTIONS=--dns-result-order=ipv4first. WEDOS applies WAPI setting changes within 30 minutes, and blocks an IP for a growing time after more than 10 failed requests, so wait instead of retrying repeatedly.";
 var WapiClient = class {
   constructor(o) {
     this.o = o;
@@ -521,7 +522,7 @@ var WapiClient = class {
       if (r.code === 1e3 || r.code === 1001) return r.data ?? {};
       if (attempt === 0 && pragueHour(sentAt) !== pragueHour(this.now())) continue;
       const text = r.result ?? "unknown error";
-      const authish = /auth|ip|denied|forbidden|password|login|permission/i.test(text);
+      const authish = r.code >= 2e3 && /auth|credential|\bip\b|denied|forbidden|password|login|permission|block|limit/i.test(text);
       throw new WapiError(`WAPI ${command} failed (${r.code}): ${text}`, r.code, authish ? AUTH_HINT : void 0);
     }
     throw new WapiError("WAPI request failed");
@@ -1393,9 +1394,10 @@ async function remove(nickname, o) {
 }
 
 // src/version.ts
-var VERSION = true ? "0.1.0" : "0.0.0-dev";
+var VERSION = true ? "0.1.1" : "0.0.0-dev";
 
 // src/cli.ts
+dns.setDefaultResultOrder("ipv4first");
 function report(e) {
   const err = e;
   p.log.error(err.message || String(e));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "caddyship",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Interactive CLI that publishes Docker apps behind Caddy over SSH, with optional WEDOS DNS automation.",
   "type": "module",
   "bin": {