fix(desktop): surface Tailscale Serve failures instead of failing silently

apps/desktop/src/backend/DesktopBackendConfiguration.test.ts

@@ -46,6 +46,7 @@ const serverExposureLayer = Layer.succeed(DesktopServerExposure.DesktopServerExp
   setMode: () => Effect.die("unexpected setMode"),
   setTailscaleServeEnabled: () => Effect.die("unexpected setTailscaleServeEnabled"),
   getAdvertisedEndpoints: Effect.succeed([]),
+  resolveTailscaleHttpsEndpoint: Effect.succeed(null),
 } satisfies DesktopServerExposure.DesktopServerExposure["Service"]);
 
 function makeEnvironmentLayer(

apps/desktop/src/ipc/DesktopIpcHandlers.ts

@@ -10,6 +10,7 @@ import {
 import {
   getAdvertisedEndpoints,
   getServerExposureState,
+  resolveTailscaleHttpsEndpoint,
   setServerExposureMode,
   setTailscaleServeEnabled,
 } from "./methods/serverExposure.ts";
@@ -72,6 +73,7 @@ export const installDesktopIpcHandlers = Effect.fn("desktop.ipc.installHandlers"
   yield* ipc.handle(setServerExposureMode);
   yield* ipc.handle(setTailscaleServeEnabled);
   yield* ipc.handle(getAdvertisedEndpoints);
+  yield* ipc.handle(resolveTailscaleHttpsEndpoint);
 
   yield* ipc.handle(getWslState);
   yield* ipc.handle(setWslBackendEnabled);

apps/desktop/src/ipc/channels.ts

@@ -34,6 +34,7 @@ export const GET_SERVER_EXPOSURE_STATE_CHANNEL = "desktop:get-server-exposure-st
 export const SET_SERVER_EXPOSURE_MODE_CHANNEL = "desktop:set-server-exposure-mode";
 export const SET_TAILSCALE_SERVE_ENABLED_CHANNEL = "desktop:set-tailscale-serve-enabled";
 export const GET_ADVERTISED_ENDPOINTS_CHANNEL = "desktop:get-advertised-endpoints";
+export const RESOLVE_TAILSCALE_HTTPS_ENDPOINT_CHANNEL = "desktop:resolve-tailscale-https-endpoint";
 export const GET_WSL_STATE_CHANNEL = "desktop:get-wsl-state";
 export const SET_WSL_BACKEND_ENABLED_CHANNEL = "desktop:set-wsl-backend-enabled";
 export const SET_WSL_DISTRO_CHANNEL = "desktop:set-wsl-distro";

apps/desktop/src/ipc/methods/serverExposure.ts

@@ -13,7 +13,10 @@ import * as DesktopIpc from "../DesktopIpc.ts";
 
 const SetTailscaleServeEnabledInput = Schema.Struct({
   enabled: Schema.Boolean,
-  port: Schema.optionalKey(Schema.Number),
+  // Reject out-of-range ports at the boundary. Settings persistence silently
+  // normalizes anything invalid to 443, so a bare Schema.Number would let the
+  // CLI bind one port while settings recorded another.
+  port: Schema.optionalKey(Schema.Int.check(Schema.isBetween({ minimum: 1, maximum: 65_535 }))),
 });
 
 export const getServerExposureState = DesktopIpc.makeIpcMethod({
@@ -67,3 +70,13 @@ export const getAdvertisedEndpoints = DesktopIpc.makeIpcMethod({
     return yield* serverExposure.getAdvertisedEndpoints;
   }),
 });
+
+export const resolveTailscaleHttpsEndpoint = DesktopIpc.makeIpcMethod({
+  channel: IpcChannels.RESOLVE_TAILSCALE_HTTPS_ENDPOINT_CHANNEL,
+  payload: Schema.Void,
+  result: Schema.NullOr(AdvertisedEndpoint),
+  handler: Effect.fn("desktop.ipc.serverExposure.resolveTailscaleHttpsEndpoint")(function* () {
+    const serverExposure = yield* DesktopServerExposure.DesktopServerExposure;
+    return yield* serverExposure.resolveTailscaleHttpsEndpoint;
+  }),
+});

apps/desktop/src/preload.ts

@@ -91,6 +91,8 @@ contextBridge.exposeInMainWorld("desktopBridge", {
   setTailscaleServeEnabled: (input) =>
     ipcRenderer.invoke(IpcChannels.SET_TAILSCALE_SERVE_ENABLED_CHANNEL, input),
   getAdvertisedEndpoints: () => ipcRenderer.invoke(IpcChannels.GET_ADVERTISED_ENDPOINTS_CHANNEL),
+  resolveTailscaleHttpsEndpoint: () =>
+    ipcRenderer.invoke(IpcChannels.RESOLVE_TAILSCALE_HTTPS_ENDPOINT_CHANNEL),
   getWslState: () => ipcRenderer.invoke(IpcChannels.GET_WSL_STATE_CHANNEL),
   setWslBackendEnabled: (enabled) =>
     ipcRenderer.invoke(IpcChannels.SET_WSL_BACKEND_ENABLED_CHANNEL, enabled),

apps/desktop/src/window/DesktopWindow.test.ts

@@ -144,6 +144,7 @@ const desktopServerExposureLayer = Layer.succeed(DesktopServerExposure.DesktopSe
   setMode: () => Effect.die("unexpected setMode"),
   setTailscaleServeEnabled: () => Effect.die("unexpected setTailscaleServeEnabled"),
   getAdvertisedEndpoints: Effect.die("unexpected getAdvertisedEndpoints"),
+  resolveTailscaleHttpsEndpoint: Effect.die("unexpected resolveTailscaleHttpsEndpoint"),
 } satisfies DesktopServerExposure.DesktopServerExposure["Service"]);
 
 const electronMenuLayer = Layer.succeed(ElectronMenu.ElectronMenu, {

apps/desktop/src/wsl/DesktopWslBackend.test.ts

@@ -63,6 +63,7 @@ const serverExposureLayer = Layer.succeed(DesktopServerExposure.DesktopServerExp
   setMode: () => Effect.die("unexpected setMode"),
   setTailscaleServeEnabled: () => Effect.die("unexpected setTailscaleServeEnabled"),
   getAdvertisedEndpoints: Effect.succeed([]),
+  resolveTailscaleHttpsEndpoint: Effect.succeed(null),
 } satisfies DesktopServerExposure.DesktopServerExposure["Service"]);
 
 const backendConfigurationLayer = Layer.succeed(

apps/server/src/server.ts

@@ -106,7 +106,11 @@ import {
 import { orchestrationHttpApiLayer } from "./orchestration/http.ts";
 import * as NetService from "@t3tools/shared/Net";
 import * as RelayClient from "@t3tools/shared/relayClient";
-import { disableTailscaleServe, ensureTailscaleServe } from "@t3tools/tailscale";
+import {
+  disableTailscaleServe,
+  ensureTailscaleServe,
+  formatTailscaleServeUserMessage,
+} from "@t3tools/tailscale";
 
 // Effect's default preemptive shutdown waits 20s before finalizing request scopes.
 // T3's primary transport is long-lived WebSocket RPC, whose Effect scope finalizer
@@ -480,6 +484,7 @@ export const makeServerLayer = Layer.unwrap(
                 Effect.catch((cause) =>
                   Effect.logWarning("Failed to configure Tailscale Serve", {
                     cause,
+                    message: formatTailscaleServeUserMessage(cause),
                     localPort,
                     servePort: config.tailscaleServePort,
                   }).pipe(Effect.as(null)),