v54: reuse verified firewall rules and retain dashboard reading nodes

Author: Mantiee

V100_AUDIT.md

@@ -614,3 +614,14 @@ Validation: 1010 passed, 65 skipped, one resource-dependent worker integration
 deselected, one existing PEFT warning. Final dashboard/chat checks passed 29 tests.
 No Windows PowerShell runtime is available here; scheduled task operation must be
 confirmed on Windows.
+
+## v54: reusable scoped firewall and retained reading nodes
+
+The previous Windows launcher rejected its own persistent firewall rules after
+reboot. Matching inbound TCP port, local/remote address, action, enabled state and
+program rules are now reused. A mismatched rule is rejected and left unchanged;
+failure cleanup removes only rules created by this launch. The watchdog retains
+the existing game guard and 50 percent target. Windows runtime validation remains
+required. Dashboard keyed details and their existing text nodes are retained and
+updated in place, including nested text scroll and open/closed state. This replaces
+reconstruction of reading nodes, not just restoration of their open flags.

pyproject.toml

@@ -3,7 +3,7 @@ name = "rlms"
 authors = [
     {name = "Alex Zhang", email = "altzhang@mit.edu"},
 ]
-version = "0.1.3+v100.53"
+version = "0.1.3+v100.54"
 description = "Recursive Language Models."
 readme = "README.md"
 license = "MIT"

rlm/v100/dashboard_layout.py

@@ -31,7 +31,7 @@
 agentView(data);
 $('actors').replaceChildren();
 for(const a of data.live?.actors||[]){
- const node=document.createElement('article');node.className='card';const title=document.createElement('h3');title.textContent=a.label;
+ const node=document.createElement('article');node.className='card';node.dataset.scrollKey=a.label+'-resource-card';const title=document.createElement('h3');title.textContent=a.label;
  const state=document.createElement('strong');state.textContent=a.state+(a.stale?' | nieaktualne lub brak danych':'');state.style.color=a.stale?'#ffbf86':'#75c5ae';
  const detail=document.createElement('p');detail.textContent=a.detail||'';node.append(title,state,detail);
  if(a.cooldown_seconds){const p=document.createElement('p');p.textContent='Przerwa helpera: '+a.cooldown_seconds+' s';node.append(p)}
@@ -44,9 +44,10 @@
 }
 
 function textField(parent,label,value){if(value===undefined||value===null||value==='')return;const p=document.createElement('p'),b=document.createElement('strong');b.textContent=label+': ';p.append(b,document.createTextNode(String(value)));parent.append(p)}
-const disclosureStates=new Map(), disclosureScroll=new Map();
-function rememberDisclosures(){for(const n of document.querySelectorAll('details[data-key]')){disclosureStates.set(n.dataset.key,n.open);const pre=n.querySelector?.('pre');if(pre)disclosureScroll.set(n.dataset.key,[pre.scrollTop,pre.scrollLeft])}}
-function restoreDisclosures(){for(const n of document.querySelectorAll('details[data-key]')){if(disclosureStates.has(n.dataset.key))n.open=disclosureStates.get(n.dataset.key);const pre=n.querySelector?.('pre'),position=disclosureScroll.get(n.dataset.key);if(pre&&position){pre.scrollTop=position[0];pre.scrollLeft=position[1]}}}
+const disclosureStates=new Map(), disclosureScroll=new Map(), disclosureNodes=new Map(), panelScroll=new Map();
+function updateNode(old,fresh){if(old.nodeType!==fresh.nodeType||old.nodeName!==fresh.nodeName){old.replaceWith(fresh);return}if(old.nodeType===3){if(old.nodeValue!==fresh.nodeValue)old.nodeValue=fresh.nodeValue;return}const a=[...old.childNodes],b=[...fresh.childNodes];for(let i=0;i<Math.max(a.length,b.length);i++){if(!b[i])a[i].remove();else if(!a[i])old.append(b[i]);else updateNode(a[i],b[i])}}
+function rememberDisclosures(){for(const n of document.querySelectorAll('[data-scroll-key]'))if(n.dataset.scrollKey)panelScroll.set(n.dataset.scrollKey,[n.scrollTop,n.scrollLeft]);for(const n of document.querySelectorAll('details[data-key]')){disclosureStates.set(n.dataset.key,n.open);disclosureNodes.set(n.dataset.key,n);const pre=n.querySelector?.('pre');if(pre)disclosureScroll.set(n.dataset.key,[pre.scrollTop,pre.scrollLeft])}}
+function restoreDisclosures(){for(const n of document.querySelectorAll('[data-scroll-key]')){const position=panelScroll.get(n.dataset.scrollKey);if(position){n.scrollTop=position[0];n.scrollLeft=position[1]}}for(let n of document.querySelectorAll('details[data-key]')){const previous=disclosureNodes.get(n.dataset.key);if(previous&&previous!==n&&n.replaceWith){updateNode(previous,n);n.replaceWith(previous);n=previous}if(disclosureStates.has(n.dataset.key))n.open=disclosureStates.get(n.dataset.key);const pre=n.querySelector?.('pre'),position=disclosureScroll.get(n.dataset.key);if(pre&&position){pre.scrollTop=position[0];pre.scrollLeft=position[1]}}}
 function detailsField(parent,label,value,key,open=false){if(!value)return;const d=document.createElement('details'),h=document.createElement('summary'),p=document.createElement('pre');d.dataset.key=key;d.open=open;h.textContent=label;p.textContent=String(value);d.append(h,p);parent.append(d)}
 function panel(id,title,after){let p=$(id);if(!p){p=document.createElement('section');p.id=id;const h=document.createElement('h2');h.textContent=title;p.append(h);after.after(p)}return p}
 function agentView(data){

tests/test_v100_live_dashboard.py

@@ -180,6 +180,7 @@ class Element {
     program += dashboard_layout.APP_SCRIPT
     program += "\nrender(sample);if(nodes.actors.children.length!==2||!nodes.goals.textContent.includes('Operator goal')||nodes.events.children.length!==1||nodes['agent-grid'].children.length!==1)throw Error('Live renderer failed');\n"
     program += """
+const textNode={nodeType:3,nodeName:'#text',nodeValue:'previous'};const reader={nodeType:1,nodeName:'PRE',childNodes:[textNode],scrollTop:77};const freshReader={nodeType:1,nodeName:'PRE',childNodes:[{nodeType:3,nodeName:'#text',nodeValue:'updated'}]};updateNode(reader,freshReader);if(reader.childNodes[0]!==textNode||textNode.nodeValue!=='updated'||reader.scrollTop!==77)throw Error('Reading node replaced');
 const old={dataset:{key:'reader'},open:false};let disclosures=[old];document.querySelectorAll=()=>disclosures;rememberDisclosures();
 const next={dataset:{key:'reader'},open:true};disclosures=[next];restoreDisclosures();if(next.open)throw Error('User-closed detail reopened');
 next.open=true;rememberDisclosures();const newer={dataset:{key:'reader'},open:false};disclosures=[newer];restoreDisclosures();if(!newer.open)throw Error('User-open detail lost');

tools/start-rtx3090-helper.ps1

@@ -105,8 +105,25 @@ New-Item -ItemType Directory -Path $Root -Force | Out-Null
 New-Item -ItemType Directory -Path (Join-Path $Root 'models') -Force | Out-Null
 New-Item -ItemType Directory -Path (Join-Path $Root 'logs') -Force | Out-Null
 
-$ExistingRule = Get-NetFirewallRule -Name $Rule -ErrorAction SilentlyContinue
-if ($ExistingRule -or (Get-NetFirewallRule -Name $BlockRule -ErrorAction SilentlyContinue)) { throw "Helper firewall rule already exists; inspect it before restarting." }
+function Confirm-HelperRule([string]$Name, [string]$Action, [string[]]$Remote, [string]$Program) {
+    $existing = @(Get-NetFirewallRule -Name $Name -ErrorAction SilentlyContinue)
+    if ($existing.Count -eq 0) { return $false }
+    if ($existing.Count -ne 1) { throw "Ambiguous helper firewall rule: $Name" }
+    $item = $existing[0]
+    $ports = $item | Get-NetFirewallPortFilter
+    $addresses = $item | Get-NetFirewallAddressFilter
+    $app = $item | Get-NetFirewallApplicationFilter
+    $expected = ($Remote | Sort-Object) -join ','
+    $actual = (@($addresses.RemoteAddress) | Sort-Object) -join ','
+    if ($item.Direction -ne 'Inbound' -or $item.Action -ne $Action -or $item.Enabled -ne 'True' -or
+        [string]$ports.Protocol -notin @('TCP','6') -or [string]$ports.LocalPort -ne [string]$Port -or
+        [string]$addresses.LocalAddress -ne $WindowsIp -or $actual -ne $expected -or
+        ($Program -and $app.Program -ne $Program)) {
+        throw "Existing helper firewall scope differs: $Name. Nothing replaced."
+    }
+    Write-Host "Reusing verified helper firewall rule: $Name"
+    return $true
+}
 
 # The current model manifest rejects the user's installed Ollama 0.21.2.
 # Use the official standalone runtime, including optional NVIDIA MLX libraries,
@@ -167,13 +184,21 @@ foreach ($number in $Allowed) {
 }
 if ($First -lt 4294967295) { $Ranges += "$(Number-Ip $First)-255.255.255.255" }
 $Worker = $null
+$CreatedAllowRule = $false
+$CreatedBlockRule = $false
 Remove-Item -LiteralPath $OwnerPath -ErrorAction SilentlyContinue
 try {
+if (-not (Confirm-HelperRule $BlockRule 'Block' $Ranges '')) {
 New-NetFirewallRule -Name $BlockRule -DisplayName $BlockRule -Direction Inbound -Action Block `
     -Protocol TCP -LocalPort $Port -LocalAddress $WindowsIp -RemoteAddress $Ranges -Profile Any | Out-Null
+$CreatedBlockRule = $true
+}
+if (-not (Confirm-HelperRule $Rule 'Allow' @($DebianIp) $Ollama)) {
 New-NetFirewallRule -Name $Rule -DisplayName $Rule -Direction Inbound -Action Allow `
     -Protocol TCP -LocalPort $Port -LocalAddress $WindowsIp -RemoteAddress $DebianIp `
     -Program $Ollama -Profile Any | Out-Null
+$CreatedAllowRule = $true
+}
 
 $WorkerScript = Join-Path $Root 'serve-worker.ps1'
 @'
@@ -353,7 +378,7 @@ $Ready = $false
     if ($Worker -and -not $Worker.HasExited) { $Worker.Kill() }
     try { Stop-HelperProcesses $RuntimeRoot }
     catch { Write-Warning "Helper cleanup failed: $($_.Exception.Message)" }
-    Remove-NetFirewallRule -Name $Rule -ErrorAction SilentlyContinue
-    Remove-NetFirewallRule -Name $BlockRule -ErrorAction SilentlyContinue
+    if ($CreatedAllowRule) { Remove-NetFirewallRule -Name $Rule -ErrorAction SilentlyContinue }
+    if ($CreatedBlockRule) { Remove-NetFirewallRule -Name $BlockRule -ErrorAction SilentlyContinue }
     throw $LaunchError
 }

tools/upgrade-v100-retention.sh

@@ -47,7 +47,7 @@ PY
 uv --no-config pip install --python "$PY" --no-deps --reinstall-package rlms \
   "rlms @ git+https://github.com/Mantiee/rlm.git@$REV"
 uv --no-config pip check --python "$PY"
-uv --no-config pip freeze --python "$PY" > "$AI_V100_ROOT/research/requirements.continual.v10053.txt"
+uv --no-config pip freeze --python "$PY" > "$AI_V100_ROOT/research/requirements.continual.v10054.txt"
 
 "$PY" <<'PY'
 import json, os