@sealant/mend 0.22.0 → 0.23.0

package/man/mend-accounts.1

@@ -1,4 +1,4 @@
-.TH MEND-ACCOUNTS 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-ACCOUNTS 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-accounts \- your connected accounts on the platform
 .SH SYNOPSIS

package/man/mend-adopt.1

@@ -1,12 +1,12 @@
-.TH MEND-ADOPT 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-ADOPT 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-adopt \- adopt a repository into the store
 .SH SYNOPSIS
-.B mend adopt [source] [\-\-name <name>] [\-\-auth ambient|mend\-key|bridge]
+.B mend adopt [git\-url] [\-\-name <name>] [\-\-auth ambient|mend\-key|bridge]
 .br
 .SH DESCRIPTION
 .PP
-Clones the repository into Mend's store. Every session then gets its own worktree of it. The default source is the current directory; any git URL works, GitHub, GitLab, self\-hosted, ssh://, or a local path.
+Clones a network Git repository into Mend's store. Every session then gets its own worktree of it. With no argument, Mend uses the current checkout's origin URL. HTTP(S), SSH, git://, and SCP\-style URLs work; local paths and file:// URLs do not.
 .PP
 \-\-auth says how the store fetches from the remote. Default: your mode from mend keys mode. mend\-key signs with your Mend key on the server (see mend keys). bridge relays this machine's ssh\-agent while a mend command runs here, so hardware keys stay on your desk. ambient uses the server's own credentials.
 .SH OPTIONS
@@ -20,7 +20,7 @@ mend\-key, bridge, or ambient. Default: mend keys mode
 .PP
 .B mend adopt
 .br
-the repository you are standing in
+the current repository's origin URL
 .PP
 .B mend adopt git@github.com:acme/api.git \-\-auth mend\-key
 .SH SEE ALSO

package/man/mend-attach.1

@@ -1,4 +1,4 @@
-.TH MEND-ATTACH 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-ATTACH 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-attach \- reattach this terminal to a running session
 .SH SYNOPSIS

package/man/mend-codex.1

@@ -1,4 +1,4 @@
-.TH MEND-CODEX 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-CODEX 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-codex \- launch codex, claude, or opencode in a recorded worktree
 .SH SYNOPSIS

package/man/mend-completions.1

@@ -1,4 +1,4 @@
-.TH MEND-COMPLETIONS 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-COMPLETIONS 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-completions \- print the TAB\-completion hook
 .SH SYNOPSIS

package/man/mend-connect.1

@@ -1,4 +1,4 @@
-.TH MEND-CONNECT 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-CONNECT 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-connect \- send this machine's provider credential to the platform
 .SH SYNOPSIS

package/man/mend-continue.1

@@ -1,4 +1,4 @@
-.TH MEND-CONTINUE 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-CONTINUE 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-continue \- resume a session with its pending review follow\-up
 .SH SYNOPSIS

package/man/mend-doctor.1

@@ -1,4 +1,4 @@
-.TH MEND-DOCTOR 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-DOCTOR 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-doctor \- check this machine's setup
 .SH SYNOPSIS

package/man/mend-dotfiles-sync.1

@@ -1,4 +1,4 @@
-.TH MEND-DOTFILES-SYNC 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-DOTFILES-SYNC 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-dotfiles\-sync \- capture config files from this machine into your store
 .SH SYNOPSIS

package/man/mend-dotfiles.1

@@ -1,4 +1,4 @@
-.TH MEND-DOTFILES 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-DOTFILES 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-dotfiles \- your dotfiles on the server: repo and synced files
 .SH SYNOPSIS

package/man/mend-env-cluster.1

@@ -1,4 +1,4 @@
-.TH MEND-ENV-CLUSTER 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-ENV-CLUSTER 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-env\-cluster \- bind Kubernetes secrets and configmaps to the workspaces
 .SH SYNOPSIS

package/man/mend-env-load.1

@@ -1,4 +1,4 @@
-.TH MEND-ENV-LOAD 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-ENV-LOAD 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-env\-load \- load a .env into the project
 .SH SYNOPSIS

package/man/mend-env-show.1

@@ -1,4 +1,4 @@
-.TH MEND-ENV-SHOW 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-ENV-SHOW 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-env\-show \- what the project store holds: names only, never values
 .SH SYNOPSIS

package/man/mend-help.1

@@ -1,4 +1,4 @@
-.TH MEND-HELP 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-HELP 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-help \- this index, or one command's page
 .SH SYNOPSIS

package/man/mend-keys-init.1

@@ -1,4 +1,4 @@
-.TH MEND-KEYS-INIT 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-KEYS-INIT 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-keys\-init \- create your Mend key (ed25519) on the server
 .SH SYNOPSIS

package/man/mend-keys-mode.1

@@ -1,4 +1,4 @@
-.TH MEND-KEYS-MODE 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-KEYS-MODE 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-keys\-mode \- how your remotes are reached: mend\-key or bridge
 .SH SYNOPSIS

package/man/mend-keys-share.1

@@ -1,4 +1,4 @@
-.TH MEND-KEYS-SHARE 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-KEYS-SHARE 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-keys\-share \- relay this machine's ssh\-agent to the server
 .SH SYNOPSIS

package/man/mend-keys-show.1

@@ -1,4 +1,4 @@
-.TH MEND-KEYS-SHOW 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-KEYS-SHOW 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-keys\-show \- print your Mend public key
 .SH SYNOPSIS

package/man/mend-login.1

@@ -1,4 +1,4 @@
-.TH MEND-LOGIN 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-LOGIN 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-login \- sign this terminal in through the browser
 .SH SYNOPSIS

package/man/mend-logout.1

@@ -1,4 +1,4 @@
-.TH MEND-LOGOUT 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-LOGOUT 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-logout \- revoke this terminal's device token and forget it
 .SH SYNOPSIS

package/man/mend-man.1

@@ -1,4 +1,4 @@
-.TH MEND-MAN 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-MAN 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-man \- one command's page, or the whole manual, in man
 .SH SYNOPSIS

package/man/mend-pair.1

@@ -1,4 +1,4 @@
-.TH MEND-PAIR 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-PAIR 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-pair \- pair a phone or a second machine
 .SH SYNOPSIS

package/man/mend-projects.1

@@ -1,4 +1,4 @@
-.TH MEND-PROJECTS 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-PROJECTS 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-projects \- adopted projects and their live sessions
 .SH SYNOPSIS

package/man/mend-refresh.1

@@ -1,4 +1,4 @@
-.TH MEND-REFRESH 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-REFRESH 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-refresh \- fetch origin's branches into the store
 .SH SYNOPSIS

package/man/mend-rejoin.1

@@ -1,4 +1,4 @@
-.TH MEND-REJOIN 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-REJOIN 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-rejoin \- attach if live, otherwise resume
 .SH SYNOPSIS

package/man/mend-resume.1

@@ -1,4 +1,4 @@
-.TH MEND-RESUME 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-RESUME 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-resume \- rejoin a settled session with its state restored
 .SH SYNOPSIS

package/man/mend-run.1

@@ -1,4 +1,4 @@
-.TH MEND-RUN 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-RUN 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-run \- run any command as a session
 .SH SYNOPSIS

package/man/mend-server-logs.1

@@ -0,0 +1,15 @@
+.TH MEND-SERVER-LOGS 1 "" "mend 0.23.0" "mend manual"
+.SH NAME
+mend\-server\-logs \- print a bounded tail of the installation's container logs
+.SH SYNOPSIS
+.B mend server logs [\-\-tail <n>]
+.br
+.SH DESCRIPTION
+.PP
+Reads logs without changing the configuration or data. No follow mode; output capture is also byte\-bounded. Treat container logs as private before sharing them.
+.SH OPTIONS
+.TP
+.B \-\-tail <n>
+lines per service, 1..1000. Default: 100
+.SH SEE ALSO
+mend(1), mend\-server\-status(1)

package/man/mend-server-restart.1

@@ -0,0 +1,15 @@
+.TH MEND-SERVER-RESTART 1 "" "mend 0.23.0" "mend manual"
+.SH NAME
+mend\-server\-restart \- restart Mend using the same generation and pin
+.SH SYNOPSIS
+.B mend server restart [\-\-offline]
+.br
+.SH DESCRIPTION
+.PP
+Checks preloaded images before stopping Mend, then starts the saved generation and verifies exact\-version health and a loopback registry roundtrip. Postgres stays running. Connections are interrupted; workspace containers and data remain, but active work may need reconnection.
+.SH OPTIONS
+.TP
+.B \-\-offline
+use local release images and assets; still probe the loopback registry
+.SH SEE ALSO
+mend(1), mend\-server\-status(1), mend\-server\-logs(1)

package/man/mend-server-setup.1

@@ -0,0 +1,64 @@
+.TH MEND-SERVER-SETUP 1 "" "mend 0.23.0" "mend manual"
+.SH NAME
+mend\-server\-setup \- install or repair the local Mend server
+.SH SYNOPSIS
+.B mend server setup [\-\-context <name>] [\-\-version <version|latest>] [\-\-bind <ip>] [\-\-url <origin>] [\-\-origin <origin>...] [\-\-port <n>] [\-\-ssh\-port <n>] [\-\-registry\-port <n>] [\-\-docker\-socket <path>] [\-\-assets\-dir <dir>] [\-\-offline]
+.br
+.SH DESCRIPTION
+.PP
+Checks a local Unix\-socket Docker context and the Compose plugin, downloads the compose and Postgres initialization assets for one Mend release, preserves existing data and secrets, and starts the server. Re\-running repairs the same pinned version. A changed \-\-version is refused; use mend server upgrade. Updating this CLI never updates an existing server pin.
+.PP
+The default listens only on localhost at http://localhost:3105. Non\-local access requires both \-\-bind and \-\-url. Every extra browser origin must be named with \-\-origin; setup never guesses from the request Host header or network interfaces.
+.PP
+Docker Desktop on Linux and macOS, and OrbStack on macOS, expose client\-side proxy sockets. Containers use the daemon\-side /var/run/docker.sock. \-\-docker\-socket overrides detection and is retained on reruns.
+.PP
+Setup holds an exclusive process lock through startup and health checks. A busy lock reports its owner and manual recovery steps. Never remove a live lock. Private configuration uses immutable generations and an atomic active pointer; failed attempts retain credentials and never delete Docker volumes.
+.SH OPTIONS
+.TP
+.B \-\-context <name>
+local Docker context to persist; the global context is unchanged
+.TP
+.B \-\-version <v>
+exact Mend server version, or latest; omitted keeps the current pin
+.TP
+.B \-\-bind <ip>
+published listen address. Default: 127.0.0.1
+.TP
+.B \-\-url <origin>
+advertised browser URL, required with a non\-loopback bind
+.TP
+.B \-\-origin <origin>
+additional exact browser origin; repeat for more than one
+.TP
+.B \-\-port <n>
+external web port. Default: 3105
+.TP
+.B \-\-ssh\-port <n>
+external workspace SSH port. Default: 2222
+.TP
+.B \-\-registry\-port <n>
+loopback registry port. Default: 5000; all three ports must differ
+.TP
+.B \-\-assets\-dir <dir>
+copy compose.v1.yaml and postgres\-init.sh from a release directory; fresh setup requires \-\-version
+.TP
+.B \-\-offline
+use retained or supplied assets and preloaded images only; no GitHub requests or release\-image pulls; exact image label, health version and a loopback registry roundtrip required
+.TP
+.B \-\-docker\-socket <path>
+daemon\-side socket mount override for diagnostics
+.SH EXAMPLES
+.PP
+.B mend server setup
+.br
+localhost, using the current local Docker context
+.PP
+.B mend server setup \-\-context orbstack \-\-bind 0.0.0.0 \-\-url http://100.70.80.90:3105
+.br
+explicit tailnet exposure
+.PP
+.B mend server setup \-\-version 0.23.0 \-\-assets\-dir ./release\-assets \-\-offline \-\-registry\-port 5501
+.br
+install from local release assets and preloaded images
+.SH SEE ALSO
+mend(1), mend\-server(1), mend\-login(1), mend\-doctor(1)

package/man/mend-server-start.1

@@ -0,0 +1,15 @@
+.TH MEND-SERVER-START 1 "" "mend 0.23.0" "mend manual"
+.SH NAME
+mend\-server\-start \- start the selected server generation
+.SH SYNOPSIS
+.B mend server start [\-\-offline]
+.br
+.SH DESCRIPTION
+.PP
+Reuses the saved context, generation, credentials and exact pin. Uses preloaded release images, with no release\-image pulls or asset downloads, even without \-\-offline. Exact image label, health version and a loopback registry roundtrip are required.
+.SH OPTIONS
+.TP
+.B \-\-offline
+use local release images and assets; still probe the loopback registry
+.SH SEE ALSO
+mend(1), mend\-server\-status(1), mend\-server\-upgrade(1)

package/man/mend-server-status.1

@@ -0,0 +1,11 @@
+.TH MEND-SERVER-STATUS 1 "" "mend 0.23.0" "mend manual"
+.SH NAME
+mend\-server\-status \- show the saved pin, generation and container state
+.SH SYNOPSIS
+.B mend server status
+.br
+.SH DESCRIPTION
+.PP
+Reads the existing installation without changing its files. A running Mend must answer health with the exact pinned version. A stopped server makes no health claim. Never installs a server implicitly.
+.SH SEE ALSO
+mend(1), mend\-server\-logs(1), mend\-server\-start(1)

package/man/mend-server-stop.1

@@ -0,0 +1,11 @@
+.TH MEND-SERVER-STOP 1 "" "mend 0.23.0" "mend manual"
+.SH NAME
+mend\-server\-stop \- stop Mend and Postgres without deleting data
+.SH SYNOPSIS
+.B mend server stop
+.br
+.SH DESCRIPTION
+.PP
+Stops only the installation's Compose services. Connections are interrupted. Workspace containers and volumes remain, but active work may lose connectivity and need reconnection. No volume deletion or Docker prune is performed.
+.SH SEE ALSO
+mend(1), mend\-server\-start(1), mend\-server\-status(1)

package/man/mend-server-upgrade.1

@@ -0,0 +1,30 @@
+.TH MEND-SERVER-UPGRADE 1 "" "mend 0.23.0" "mend manual"
+.SH NAME
+mend\-server\-upgrade \- upgrade to an explicit version with a database backup
+.SH SYNOPSIS
+.B mend server upgrade \-\-version <target|latest> [\-\-assets\-dir <dir>] [\-\-offline]
+.br
+.SH DESCRIPTION
+.PP
+Preflights release assets and the canonical image's version label before interrupting Mend. Downgrades are refused. latest is resolved only when explicitly requested; a same\-version request does nothing.
+.PP
+Stops app writers, starts official Postgres if needed, and streams pg_dumpall into a private database backup before selecting and starting the target. Connections are interrupted. Workspace containers and data are retained, but active work can lose connectivity and need reconnection. Stop any external database writers before upgrading.
+.PP
+Preflight or backup failure retains the old pin and attempts to recover the old app if it was running. Once target startup may have begun, Mend never automatically downgrades or restores the database. The target pin, old generation and backup remain. Inspect logs, fix the target, then use mend server start. Recovery records are under the installation's backups/upgrade\-UUID directory.
+.SH OPTIONS
+.TP
+.B \-\-version <target|latest>
+required exact target version, or explicit latest
+.TP
+.B \-\-assets\-dir <dir>
+copy target compose.v1.yaml and postgres\-init.sh from local release assets
+.TP
+.B \-\-offline
+no GitHub requests or release\-image pulls; target assets and exact\-version images must be local; still probe the loopback registry
+.SH EXAMPLES
+.PP
+.B mend server upgrade \-\-version 0.24.0 \-\-assets\-dir ./release\-0.24.0 \-\-offline
+.br
+controlled offline upgrade
+.SH SEE ALSO
+mend(1), mend\-server\-logs(1), mend\-server\-status(1), mend\-server\-start(1)

package/man/mend-server.1

@@ -0,0 +1,11 @@
+.TH MEND-SERVER 1 "" "mend 0.23.0" "mend manual"
+.SH NAME
+mend\-server \- install and manage this machine's Mend server
+.SH SYNOPSIS
+.B mend server <command>
+.br
+.SH DESCRIPTION
+.PP
+Server commands manage the local Docker Compose installation. They do not sign this CLI in or change Docker's global context.
+.SH SEE ALSO
+mend(1), mend\-server\-setup(1), mend\-server\-status(1), mend\-server\-start(1), mend\-server\-stop(1), mend\-server\-restart(1), mend\-server\-logs(1), mend\-server\-upgrade(1)

package/man/mend-service-add.1

@@ -1,4 +1,4 @@
-.TH MEND-SERVICE-ADD 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-SERVICE-ADD 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-service\-add \- adopt a port something in the workspace already listens on
 .SH SYNOPSIS

package/man/mend-service-connect.1

@@ -1,4 +1,4 @@
-.TH MEND-SERVICE-CONNECT 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-SERVICE-CONNECT 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-service\-connect \- bring live Services to this machine's loopback
 .SH SYNOPSIS

package/man/mend-service-init.1

@@ -1,4 +1,4 @@
-.TH MEND-SERVICE-INIT 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-SERVICE-INIT 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-service\-init \- scaffold mend.toml from package.json and compose ports
 .SH SYNOPSIS

package/man/mend-service-list.1

@@ -1,4 +1,4 @@
-.TH MEND-SERVICE-LIST 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-SERVICE-LIST 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-service\-list \- every live service and its observed state
 .SH SYNOPSIS

package/man/mend-service-logs.1

@@ -1,4 +1,4 @@
-.TH MEND-SERVICE-LOGS 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-SERVICE-LOGS 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-service\-logs \- follow a supervised service's output
 .SH SYNOPSIS

package/man/mend-service-restart.1

@@ -1,4 +1,4 @@
-.TH MEND-SERVICE-RESTART 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-SERVICE-RESTART 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-service\-restart \- re\-run a service's recorded command, same URL
 .SH SYNOPSIS

package/man/mend-service-run.1

@@ -1,4 +1,4 @@
-.TH MEND-SERVICE-RUN 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-SERVICE-RUN 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-service\-run \- start and supervise a server in the session's workspace
 .SH SYNOPSIS

package/man/mend-service-stop.1

@@ -1,4 +1,4 @@
-.TH MEND-SERVICE-STOP 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-SERVICE-STOP 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-service\-stop \- stop a service and close its host port
 .SH SYNOPSIS

package/man/mend-sessions.1

@@ -1,4 +1,4 @@
-.TH MEND-SESSIONS 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-SESSIONS 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-sessions \- sessions with their review facts
 .SH SYNOPSIS

package/man/mend-shell.1

@@ -1,4 +1,4 @@
-.TH MEND-SHELL 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-SHELL 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-shell \- open a shell in a live session's workspace
 .SH SYNOPSIS

package/man/mend-skills-push.1

@@ -1,4 +1,4 @@
-.TH MEND-SKILLS-PUSH 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-SKILLS-PUSH 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-skills\-push \- upload ~/.agents/skills into the library
 .SH SYNOPSIS

package/man/mend-skills.1

@@ -1,4 +1,4 @@
-.TH MEND-SKILLS 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-SKILLS 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-skills \- your skill library on the server, or a project's
 .SH SYNOPSIS

package/man/mend-ssh-setup.1

@@ -1,15 +1,18 @@
-.TH MEND-SSH-SETUP 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-SSH-SETUP 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-ssh\-setup \- make this machine ready to ssh into workspaces, once
 .SH SYNOPSIS
-.B mend ssh setup [\-\-key <path>]
+.B mend ssh setup [\-\-key <path>] [\-\-host <hostname>]
 .br
 .SH DESCRIPTION
 .PP
-Registers a public key with the gateway (a key already in your ssh\-agent is preferred; nothing new is created unless there is none) and writes a Host mend\-ws block to ~/.ssh/config.
+Registers this client's public key and writes a server\-specific managed Host block to ~/.ssh/config. The hostname defaults to the configured Mend URL; the gateway supplies the SSH port.
 .SH OPTIONS
 .TP
 .B \-\-key <path>
 the public key to register
+.TP
+.B \-\-host <hostname>
+override only the SSH hostname
 .SH SEE ALSO
 mend(1), mend\-ssh(1), mend\-shell(1)

package/man/mend-ssh.1

@@ -1,4 +1,4 @@
-.TH MEND-SSH 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-SSH 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-ssh \- workspace SSH status: gateway, registered keys, ssh config
 .SH SYNOPSIS

package/man/mend-stop.1

@@ -1,4 +1,4 @@
-.TH MEND-STOP 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-STOP 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-stop \- stop the agent; the record and the review remain
 .SH SYNOPSIS

package/man/mend-ui.1

@@ -1,4 +1,4 @@
-.TH MEND-UI 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-UI 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-ui \- the dashboard: every project and session, live
 .SH SYNOPSIS

package/man/mend-version.1

@@ -1,4 +1,4 @@
-.TH MEND-VERSION 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-VERSION 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-version \- this CLI's version, and the server's when it answers
 .SH SYNOPSIS

package/man/mend-worktrees.1

@@ -1,4 +1,4 @@
-.TH MEND-WORKTREES 1 "" "mend 0.22.0" "mend manual"
+.TH MEND-WORKTREES 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend\-worktrees \- every worktree and the sessions inside it
 .SH SYNOPSIS

package/man/mend.1

@@ -1,4 +1,4 @@
-.TH MEND 1 "" "mend 0.22.0" "mend manual"
+.TH MEND 1 "" "mend 0.23.0" "mend manual"
 .SH NAME
 mend \- the agent workbench
 .SH SYNOPSIS
@@ -124,6 +124,30 @@ how your remotes are reached: mend\-key or bridge
 relay this machine's ssh\-agent to the server
 .SH THIS MACHINE
 .TP
+.B mend server
+install and manage this machine's Mend server
+.TP
+.B mend server setup
+install or repair the local Mend server
+.TP
+.B mend server status
+show the saved pin, generation and container state
+.TP
+.B mend server start
+start the selected server generation
+.TP
+.B mend server stop
+stop Mend and Postgres without deleting data
+.TP
+.B mend server restart
+restart Mend using the same generation and pin
+.TP
+.B mend server logs
+print a bounded tail of the installation's container logs
+.TP
+.B mend server upgrade
+upgrade to an explicit version with a database backup
+.TP
 .B mend ssh
 workspace SSH status: gateway, registered keys, ssh config
 .TP
@@ -165,4 +189,4 @@ url, token, and device id from mend login
 .B ~/.config/mend/keys/
 the deploy key from mend keys init
 .SH SEE ALSO
-mend\-login(1), mend\-connect(1), mend\-adopt(1), mend\-codex(1), mend\-pair(1), mend\-doctor(1), mend\-ui(1), mend\-attach(1), mend\-stop(1), mend\-shell(1), mend\-run(1), mend\-continue(1), mend\-resume(1), mend\-rejoin(1), mend\-sessions(1), mend\-worktrees(1), mend\-projects(1), mend\-refresh(1), mend\-service\-run(1), mend\-service\-add(1), mend\-service\-connect(1), mend\-service\-list(1), mend\-service\-logs(1), mend\-service\-restart(1), mend\-service\-stop(1), mend\-service\-init(1), mend\-env\-show(1), mend\-env\-load(1), mend\-env\-cluster(1), mend\-skills(1), mend\-skills\-push(1), mend\-dotfiles(1), mend\-dotfiles\-sync(1), mend\-keys\-init(1), mend\-keys\-show(1), mend\-keys\-mode(1), mend\-keys\-share(1), mend\-ssh(1), mend\-ssh\-setup(1), mend\-accounts(1), mend\-logout(1), mend\-completions(1), mend\-version(1), mend\-help(1), mend\-man(1)
+mend\-login(1), mend\-connect(1), mend\-adopt(1), mend\-codex(1), mend\-pair(1), mend\-doctor(1), mend\-ui(1), mend\-attach(1), mend\-stop(1), mend\-shell(1), mend\-run(1), mend\-continue(1), mend\-resume(1), mend\-rejoin(1), mend\-sessions(1), mend\-worktrees(1), mend\-projects(1), mend\-refresh(1), mend\-service\-run(1), mend\-service\-add(1), mend\-service\-connect(1), mend\-service\-list(1), mend\-service\-logs(1), mend\-service\-restart(1), mend\-service\-stop(1), mend\-service\-init(1), mend\-env\-show(1), mend\-env\-load(1), mend\-env\-cluster(1), mend\-skills(1), mend\-skills\-push(1), mend\-dotfiles(1), mend\-dotfiles\-sync(1), mend\-keys\-init(1), mend\-keys\-show(1), mend\-keys\-mode(1), mend\-keys\-share(1), mend\-server(1), mend\-server\-setup(1), mend\-server\-status(1), mend\-server\-start(1), mend\-server\-stop(1), mend\-server\-restart(1), mend\-server\-logs(1), mend\-server\-upgrade(1), mend\-ssh(1), mend\-ssh\-setup(1), mend\-accounts(1), mend\-logout(1), mend\-completions(1), mend\-version(1), mend\-help(1), mend\-man(1)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sealant/mend",
-  "version": "0.22.0",
+  "version": "0.23.0",
   "description": "The mend CLI: adopt a repository into Mend's store, launch your coding agent in a recorded session worktree, detach and reattach from any terminal",
   "keywords": [
     "claude-code",
@@ -44,18 +44,22 @@
     "@types/node": "^22.10.2",
     "@types/qrcode": "^1.5.5",
     "@types/react": "^19.2.0",
+    "esbuild": "^0.28.1",
     "typescript": "^5.7.2",
     "vitest": "^3.0.5",
+    "@mend/domain": "0.0.0",
+    "@mend/workspace-ssh": "0.0.0",
     "@mend/typescript": "0.0.0"
   },
   "engines": {
     "node": ">=22"
   },
   "scripts": {
-    "build": "tsc src/main.ts src/dashboard.tsx --outDir dist --module nodenext --target es2023 --types node --skipLibCheck --allowImportingTsExtensions --rewriteRelativeImportExtensions --jsx react-jsx --jsxImportSource @opentui/react && pnpm run man",
+    "build": "node scripts/build.mjs && pnpm run man",
     "lint": "oxlint . --no-error-on-unmatched-pattern",
     "man": "node --experimental-strip-types scripts/man.ts",
     "test": "vitest run --passWithNoTests",
+    "test:package": "node scripts/test-package.mjs",
     "typecheck": "tsgo -p tsconfig.json --noEmit"
   }
 }