+ MjznRt^RIt^RIt^RIt^RItRt^tRtRtRt Rt Rt R Rlt R R lt R tR R ltR#)usshj.tailnet — tailscale peers + MagicDNS name targeting (B12/B16, leaf). B2 step 2: moved verbatim from sshj_cli.py (single-file era) — no behavior change. Owns TAILNET_MARK (the muted dot-matrix mark the UI renders for tailnet rows) because it is the marker this module stamps. Nu⣿u0_a3602222c\P!R4'gR.3#\P!.RORR\R7p\ P !VP4pRpTPR.4F'pTPR4'dKRT9gK%TpM .pTPR/4P4FpTPR.4Uu.uFpRT9gK TNK ppT'dT^,T8XdKETPR TPR T^,4R T^,R TPR 4;'gRP4R\TPR44RTPR4;'gRP4/4K Y$3# \dR.3u#i;iuupi)u(self_ip, [peer, ...]) from `tailscale status --json`, or ("", []). Each peer: {"name", "ip" (first v4), "os", "online", "dnsname"}. Degrades to ("", []) when tailscale is missing, the call fails, or the JSON is unparseable — the tailnet is a source, never a crash (C3). tailscaleTcapture_outputtexttimeout TailscaleIPsfd:PeernameHostNameiposOSonlineOnlinednsnameDNSNamerstatusz--json)shutilwhich subprocessrun TS_TIMEOUTjsonloadsstdout Exceptionget startswithvaluesappendlowerboolstrip)rdself_iprpeerspipss src/sshj/tailnet.py tailnet_peersr1s << $ $2v  NN<*.T#- / JJqxx GeeNB'}}T""s"}G ( E UU62  % % 'EE."5G5bBrr5Gc!f'  faeeJA7s1vQUU4[..B557QUU8_ 5!%% "2"8"8b!?!?!AC D ( >! 2v HsAF. G(G.G?Gz100.100.100.100cV'gR#VP4PR4pVPR4^,#)zPeer DNSName FQDN -> the short MagicDNS name that actually resolves. MagicDNS serves each node by its FIRST label (e.g. `cw-phone`), so the short name is the first label of the FQDN; the tailnet domain (`.ts.net`) is dropped. None/'' -> ''.r.)r)rstripsplit)fqdnrs& r0_magicdns_shortr7=s3  ::<  s #D ::c?1 cV'd5VP4PR4PR4'gR#T;'g*\PP R4;'gRp\ V4;_uu_4p\VP49d RRR4R#RRR4\P!RR \T4.RR^R 7pTP^8H;'d$\TPP44# +'giLq;i \dLi;i \ dR#i;i) aTrue when the local box can RESOLVE MagicDNS names, so tailnet rows can target the human-readable name instead of the IP. Detection (both must hold for a confident True): 1. self has a `...ts.net` DNSName (we're on a MagicDNS tailnet), AND 2. resolv.conf lists 100.100.100.100, OR `getent hosts ` resolves (covers systemd-resolved/WSL where the nameserver line lives elsewhere). Falsy self DNSName or a foreign domain => False (never a crash).r3z.ts.netFSSHJ_RESOLV_CONFz/etc/resolv.confNTgetenthostsr)r)r4endswithrenvironr#openMAGICDNS_NAMESERVERreadOSErrorrrr7 returncoder(r!r") self_dnsname resolv_confconffr*s&& r0 magicdns_onrHIs |113::3?HH      "**..);<     $ZZ1"affh.Z.  NNHg|/LM*.T1 F||q ;;T!((..*:%;;Z     sN3D(D!D(,D(5;D91#D9 D% D(%D(( D65D69 EEcVPR4;'g,VPR4;'gVPRR4pV'd&VPR4'dVR, RV 2#V#)a#The ssh ADDRESS for a host: its MagicDNS short name when we can resolve it (B16), else the raw hostname/IP. `with_user` adds user@ (connect uses it; probes stay bare so ssh tries both keys). Everything that builds an ssh address goes through here so the IP-fallback stays exact B12 behavior.magicdnshostnamealiasruser@)r#)h with_userhosts&& r0ssh_hostrRgs_ 55  G Gj 1 G GQUU7B5GDQUU6]]F)AdV$$ Kr8cL\P!R4'gR#\P!.RORR\R7p\ P !VP4pVPR4;'g/PR4;'gR# \dR#i;i)zOur own MagicDNS FQDN from `tailscale status --json` (Self.DNSName), or "". One bounded call; degrades to "" like the rest of B12/B16.rrTrSelfrr) rrrrrrr r!r#r")r*r+s r0rDrDss << $ $ NN<*.T#- / JJqxx f ##((399r9 sAB8BB B#"B#c/pVF,pVPR4;'gRpV'gK(WTV&K. \V4p.pVFp V R,p VPV 4p V eRV R&K(V R,R8Xd \\rMRRrYR9dR V 2MR,pV 'dV R V 2pR V R ,R V R ,R,RV RV RV RRRVRRRRRR/ pV'd6V PR4'd\ V R,4pV'dWR&VP V4VP V4WTV &K Wx3#)uFold tailnet peers into the pool (B12/B16) — dedupe, never duplicate. 1. A peer whose IP is already a known row gets the `tailnet` flag (the UI draws the mark in the name cell's reserved last cell — the data stays clean; NO new row, anti-redundancy). 2. A peer matching NO row becomes a new `Name·ts` row: android peers take the Termux sshd convention (user:port); everyone else the bare-IP floor (ssh's own defaults). Heuristic rows are the honest fallback — the checker will tell the truth once it probes them. 3. (B16) When magicdns_on and the peer carries a DNSName, the row gets a `magicdns` short name — the ssh TARGETS use it (ssh_host), the displayed target + dedupe keep the IP. No DNSName / off => exact B12. Returns (hosts, newly_discovered). The TAILNET_MARK is a muted dot-matrix glyph in the NAME column's reserved last cell (ui renders it from the `tailnet` flag, so truncation can never eat it).rKrrTtailnetrandroid22r rNrLrdispu·tsrMportr 0targetsrctssrc_pathrrJ)rrX)r#listTERMUX_SSH_USERTERMUX_SSH_PORTr7r&)r<r,r-rHby_iprOhnoutnewr.rexistingrMrZtgtshorts&&&& r0 merge_tailnetrjsN E  UU:  $ $" 2"I u+C C  tW99R=  "&HY   T7i (/$T$j"8avJbA F!C5/C ai6V); T:r64 XsE4 It 5 155++#AiL1E %*  1  1 b 9: 8Or8)N)F)__doc__rrrr TAILNET_MARKrrarbr1r@r7rHrRrDrjr8r0rnsW    B( <  4r8