ops-bridge/workplans/ADHOC-2026-06-14.md

id, type, title, domain, repo, status, owner, topic_slug, created, updated, state_hub_workstream_id

id	type	title	domain	repo	status	owner	topic_slug	created	updated	state_hub_workstream_id
ADHOC-2026-06-14	workplan	Ad hoc ops-bridge fixes for 2026-06-14	custodian	ops-bridge	finished	codex	ops-bridge	2026-06-14	2026-06-14	fbc2ef7e-626f-4c6a-bdf8-c69bf29097ce

Fix haskelseed bridge diagnostics

id: ADHOC-2026-06-14-T01
status: done
priority: medium
state_hub_task_id: "ffe6b8d8-889c-4ec4-8b64-00b77f86e39f"

haskelseed is an Alpine host without ss, so bridge check reported reverse tunnel ports as closed even while SSH reverse listeners were present. Updated diagnostics to fall back from ss to netstat and then /proc/net/tcp/tcp6. Also fixed local-direction diagnostics so nix-daemon-haskelseed checks the local -L listener instead of probing a remote reverse port.

Verification:

• state-hub-haskelseed responded through 127.0.0.1:18000/state/health.
• bridge check --json reported all configured tunnels ok: true.
• python3 -m pytest tests/test_cli.py tests/test_diagnostics.py passed.

Make default target safe and add setup

id: ADHOC-2026-06-14-T02
status: done
priority: medium
state_hub_task_id: "3b932955-0d75-4b95-9821-92bfa2dadbd0"

Changed make to default to a help listing that only shows targets with ## comments. Added make setup to run uv sync --all-groups and reinstall the editable bridge CLI wrapper through uv tool install -e . --force.

Verification:

• uv sync --all-groups succeeded and installed the project environment.
• make listed targets only and did not run tests or setup.
• make setup succeeded and installed the bridge executable.
• make test passed all 235 tests.
• make lint passed.