@sealant/mend 0.36.0-next.663 → 0.36.0-next.665

package/dist/{chunk-VOP6USOZ.js → chunk-K5WNRH4V.js}

@@ -28227,6 +28227,19 @@ var Session = class extends Schema_exports.Class("Session")({
     Schema_exports.withDecodingDefaultKey(Effect_exports.succeed(null)),
     Schema_exports.withConstructorDefault(Effect_exports.succeed(null))
   ),
+  /**
+   * Who launched the session's executor: the owner of the session whose own launch made it
+   * (`SessionsRepo.executorSessionOf`), which a joined session is not. Remote-SSH into the workspace
+   * admits that person only (docs/adr/0016), in either harness layout, so an editor asks before it
+   * opens. Filled on every API read that hands sessions out (the session list, retained additions
+   * included, the session view and the project view): the view reads in their own statement, the
+   * plain reads from one batched read (`SessionsRepo.launchersOf`). Null with no executor, on the
+   * repository's other reads, and from older servers.
+   */
+  workspaceLauncherUserId: Schema_exports.NullOr(Schema_exports.String).pipe(
+    Schema_exports.withDecodingDefaultKey(Effect_exports.succeed(null)),
+    Schema_exports.withConstructorDefault(Effect_exports.succeed(null))
+  ),
   /**
    * Whether the harness left a conversation behind — a transcript Mend captured at settle or
    * found in the live harness home. False is a dead end: nothing to resume, nothing to hand

package/dist/{dashboard-CEJN6IOO.js → dashboard-DQB5RNXJ.js}

@@ -23,7 +23,7 @@ import {
   workspaceReadsOf,
   worktreeJoinLine,
   wrapWords
-} from "./chunk-VOP6USOZ.js";
+} from "./chunk-K5WNRH4V.js";
 
 // src/dashboard.tsx
 import { CliRenderEvents, createCliRenderer } from "@opentui/core";

package/dist/main.js

@@ -68,7 +68,7 @@ import {
   workspaceRetirementLine,
   worktreeJoinLine,
   worktreeListsPeople
-} from "./chunk-VOP6USOZ.js";
+} from "./chunk-K5WNRH4V.js";
 
 // src/main.ts
 import { spawn as spawn3, spawnSync as spawnSync6 } from "node:child_process";
@@ -861,6 +861,9 @@ var isTenancy = (value) => TENANCIES.some((tenancy) => tenancy === value);
 var EDGE_IMAGE = "caddy:2.10-alpine";
 var EDGE_COMPOSE_FILE = "compose.edge.yaml";
 var POSTURE_COMPOSE_FILE = "compose.posture.yaml";
+var DECLARABLE_ITEMS = ["core-private", "edge-tls", "workspace-ssh"];
+var isDeclarableItem = (value) => DECLARABLE_ITEMS.some((item) => item === value);
+var publishedAddress = (address, port) => `${net2.isIP(address) === 6 ? `[${address}]` : address}:${port}`;
 var parseEdgeHost = (value) => {
   const host = value.trim().toLowerCase().replace(/\.$/, "");
   const labels = host.split(".");
@@ -876,7 +879,11 @@ var postureEnvironment = (posture) => {
     ...posture.exposure === void 0 ? [] : [["MEND_EXPOSURE", posture.exposure]],
     ...posture.tenancy === void 0 ? [] : [["MEND_TENANCY", posture.tenancy]],
     ...gate ? [["MEND_SOURCE_POLICY", "tenant"], ["MEND_CAPTURE_REQUIRE_SIZES", "true"]] : [],
-    ...posture.exposure === "public" ? [["MEND_URL_BEARERS", "refuse"]] : []
+    ...posture.exposure === "public" ? [["MEND_URL_BEARERS", "refuse"]] : [],
+    // The gate's workspace-ssh item reads where SSH is published apart from the web port; the
+    // container cannot see what its host publishes.
+    ...posture.sshBind === void 0 || posture.sshPort === void 0 ? [] : [["MEND_SSH_PUBLISHED", publishedAddress(posture.sshBind, posture.sshPort)]],
+    ...posture.declared === void 0 || posture.declared.length === 0 ? [] : [["MEND_EXPOSURE_DECLARED", posture.declared.join(",")]]
   ];
 };
 var postureEnvLines = (posture) => [
@@ -927,7 +934,11 @@ var healthPosture = (body) => {
 var declaredPostureLines = (posture) => [
   ...posture.edgeHost === void 0 ? [] : [`edge \xB7 ${posture.edgeHost} \xB7 ${EDGE_IMAGE} on 80 and 443 \xB7 Mend's own port on loopback`],
   `exposure \xB7 declared ${posture.exposure ?? "private"}${posture.exposure === void 0 ? " \xB7 the default, not set on this install" : ""}`,
-  `tenancy \xB7 declared ${posture.tenancy ?? "single"}${posture.tenancy === void 0 ? " \xB7 the default, not set on this install" : ""}`
+  `tenancy \xB7 declared ${posture.tenancy ?? "single"}${posture.tenancy === void 0 ? " \xB7 the default, not set on this install" : ""}`,
+  ...posture.sshBind === void 0 || posture.sshPort === void 0 ? [] : [
+    `workspace ssh \xB7 published on ${publishedAddress(posture.sshBind, posture.sshPort)} apart from the web port`
+  ],
+  ...posture.declared === void 0 || posture.declared.length === 0 ? [] : [`stated verified from outside \xB7 ${posture.declared.join(", ")}`]
 ];
 var observedEdgeLine = (host, observed) => [
   `edge \xB7 ${host}`,
@@ -2710,7 +2721,7 @@ var COMMANDS = [
     summary: "how this instance is exposed, as declared and as observed",
     synopsis: [],
     description: [
-      "Operator only. States MEND_EXPOSURE as declared (loopback, private or public) and one line per item of the public exposure gate, with how it was established: observed (this server read it), carried (this build contains it, and the server cannot see it in effect), declared (you stated it and the server cannot check it), or open. MEND_EXPOSURE=public refuses to start while an item the server can observe is open. Items it cannot observe say what would verify them; once you have verified core-private or edge-tls from outside, name it in MEND_EXPOSURE_DECLARED. The report is what was observed; it is not a statement that the instance is fit to expose."
+      "Operator only. States MEND_EXPOSURE as declared (loopback, private or public) and one line per item of the public exposure gate, with how it was established: observed (this server read it), carried (this build contains it, and the server cannot see it in effect), declared (you stated it and the server cannot check it), or open. MEND_EXPOSURE=public refuses to start while an item that blocks a start is open: every item the server can observe, and workspace-ssh until you declare it. Items it cannot observe say what would verify them; once you have verified core-private, edge-tls or workspace-ssh (SSH published apart from the web port) from outside, name it in MEND_EXPOSURE_DECLARED, or with mend server setup --declare. The report is what was observed; it is not a statement that the instance is fit to expose."
     ],
     see: ["operator gate", "doctor"]
   },
@@ -2796,7 +2807,7 @@ var COMMANDS = [
     section: "this machine",
     summary: "install or repair the local Mend server",
     synopsis: [
-      "[--context <name>] [--version <version|latest>] [--bind <ip>] [--url <origin>] [--origin <origin>...] [--port <n>] [--ssh-port <n>] [--edge <host> | --no-edge] [--exposure <loopback|private|public>] [--tenancy <single|multi>] [--docker-socket <path>] [--assets-dir <dir>] [--offline]"
+      "[--context <name>] [--version <version|latest>] [--bind <ip>] [--ssh-bind <ip>] [--url <origin>] [--origin <origin>...] [--port <n>] [--ssh-port <n>] [--edge <host> | --no-edge] [--exposure <loopback|private|public>] [--tenancy <single|multi>] [--declare <item>...] [--docker-socket <path>] [--assets-dir <dir>] [--offline]"
     ],
     description: [
       "Checks a local Unix-socket Docker context and the Compose plugin, downloads the compose and Postgres initialization assets for one Mend release, preserves existing data and secrets, and starts the server. Re-running repairs the same pinned version. A changed --version is refused; use mend server upgrade. Updating this CLI never updates an existing server pin.",
@@ -2816,6 +2827,10 @@ var COMMANDS = [
         text: "exact Mend server version, or latest; omitted keeps the current pin"
       },
       { flag: "--bind <ip>", text: "published listen address. Default: 127.0.0.1" },
+      {
+        flag: "--ssh-bind <ip>",
+        text: "where workspace SSH is published, when not on --bind; with --edge, Remote-SSH from another machine needs it. Kept across reruns; the --bind address takes it away"
+      },
       { flag: "--url <origin>", text: "advertised browser URL, required with a non-loopback bind" },
       {
         flag: "--origin <origin>",
@@ -2839,6 +2854,10 @@ var COMMANDS = [
         flag: "--tenancy <v>",
         text: "declare single or multi; kept across reruns and upgrades. multi also sets the multi mode gate's variables"
       },
+      {
+        flag: "--declare <item>",
+        text: "state a gate item you verified from outside: core-private, edge-tls or workspace-ssh; repeat for more, none clears. Kept across reruns. public with --ssh-bind beyond loopback needs workspace-ssh"
+      },
       {
         flag: "--assets-dir <dir>",
         text: "copy compose.v2.yaml and postgres-init.sh from a release directory; fresh setup requires --version"
@@ -2859,6 +2878,10 @@ var COMMANDS = [
         command: "mend server setup --version 0.25.0 --assets-dir ./release-assets --offline",
         text: "install from local release assets and preloaded images"
       },
+      {
+        command: "mend server setup --edge mend.example.com --ssh-bind 0.0.0.0 --exposure public --declare workspace-ssh",
+        text: "the TLS edge for the browser and the API, and workspace SSH for Remote-SSH from other machines"
+      },
       {
         command: "mend server setup --edge mend.example.com",
         text: "a TLS edge for mend.example.com; its DNS points at this machine and 80 and 443 reach it"
@@ -4256,7 +4279,7 @@ var gitAuthorLine = (author) => `${author.name} <${author.email}> \xB7 ${author.
 
 // src/http-client.ts
 import { Agent, setGlobalDispatcher } from "undici";
-var cliDispatcher = (connect2) => new Agent({ allowH2: false, ...connect2 === void 0 ? {} : { connect: connect2 } });
+var cliDispatcher = (connect3) => new Agent({ allowH2: false, ...connect3 === void 0 ? {} : { connect: connect3 } });
 var useHttp1 = () => {
   setGlobalDispatcher(cliDispatcher());
 };
@@ -5241,13 +5264,13 @@ var renderExposure = (report) => {
   const mark = (item) => marks[item.established];
   const open = report.items.filter((item) => item.established === "open");
   const blocking = open.filter((item) => item.blocksStart).length;
-  const unobservable = open.length - blocking;
+  const notBlocking = open.length - blocking;
   return [
     `exposure \xB7 declared ${report.declared} \xB7 ${EXPOSURE_WORDS[report.declared]}`,
     ...report.items.map(
       (item) => `${mark(item)} ${item.id.padEnd(width)}  ${item.established.padEnd(8)}  ${item.detail}${item.fix === null ? "" : dim4(` \xB7 ${item.fix}`)}`
     ),
-    open.length === 0 ? "nothing open \xB7 every item was observed here, is carried by this build, or was declared by the operator" : `${open.length} of ${report.items.length} items open \xB7 ${blocking} this build can observe${blocking === 0 ? "" : "; MEND_EXPOSURE=public refuses to start"} \xB7 ${unobservable} it cannot`
+    open.length === 0 ? "nothing open \xB7 every item was observed here, is carried by this build, or was declared by the operator" : `${open.length} of ${report.items.length} items open \xB7 ${blocking} refuse a public start${blocking === 0 ? "" : "; MEND_EXPOSURE=public refuses to start"} \xB7 ${notBlocking} do not`
   ];
 };
 var renderOrganizations = (rows) => {
@@ -6817,6 +6840,7 @@ var SETUP_FLAGS = /* @__PURE__ */ new Set([
   "--context",
   "--version",
   "--bind",
+  "--ssh-bind",
   "--url",
   "--origin",
   "--port",
@@ -6827,7 +6851,8 @@ var SETUP_FLAGS = /* @__PURE__ */ new Set([
   "--edge",
   "--no-edge",
   "--exposure",
-  "--tenancy"
+  "--tenancy",
+  "--declare"
 ]);
 var parseExposure = (value) => {
   if (!isExposure(value))
@@ -6839,6 +6864,21 @@ var parseTenancy = (value) => {
     throw setupError(`--tenancy must be one of ${TENANCIES.join(", ")}, not "${value}".`);
   return value;
 };
+var parseDeclared = (values) => {
+  if (values.length === 1 && values[0] === "none") return [];
+  return [
+    ...new Set(
+      values.map((value) => {
+        if (!isDeclarableItem(value)) {
+          throw setupError(
+            `--declare takes ${DECLARABLE_ITEMS.join(", ")} or none, not "${value}". Every other gate item is observed by the server, never stated.`
+          );
+        }
+        return value;
+      })
+    )
+  ];
+};
 var parseEdge = (value) => {
   const host = parseEdgeHost(value);
   if (host === null) {
@@ -6863,7 +6903,7 @@ var parseSetupOptions = (args) => {
     const [value, valueIndex] = nextFlagValue(args, index, flag);
     index = valueIndex;
     const previous = values.get(flag) ?? [];
-    if (flag !== "--origin" && previous.length > 0) {
+    if (flag !== "--origin" && flag !== "--declare" && previous.length > 0) {
       throw setupError(`${flag} may be supplied only once.`);
     }
     previous.push(value);
@@ -6877,12 +6917,14 @@ var parseSetupOptions = (args) => {
   const edge = flagValue3("--edge");
   const exposure = flagValue3("--exposure");
   const tenancy = flagValue3("--tenancy");
+  const declared = values.get("--declare");
   if (edge !== void 0 && values.has("--no-edge"))
     throw setupError("--edge and --no-edge contradict each other.");
   return {
     context: flagValue3("--context"),
     version: version === void 0 ? void 0 : parseVersion(version),
     bind: flagValue3("--bind"),
+    sshBind: flagValue3("--ssh-bind"),
     url: flagValue3("--url"),
     origins: origins === void 0 ? void 0 : origins,
     appPort: appPort === void 0 ? void 0 : parsePort(appPort, "--port"),
@@ -6893,7 +6935,8 @@ var parseSetupOptions = (args) => {
     edge: edge === void 0 ? void 0 : parseEdge(edge),
     noEdge: values.has("--no-edge"),
     exposure: exposure === void 0 ? void 0 : parseExposure(exposure),
-    tenancy: tenancy === void 0 ? void 0 : parseTenancy(tenancy)
+    tenancy: tenancy === void 0 ? void 0 : parseTenancy(tenancy),
+    declared: declared === void 0 ? void 0 : parseDeclared(declared)
   };
 };
 var parseUrl = (input, label) => {
@@ -6927,9 +6970,13 @@ var resolveAppUrl = (existing, options, appPort, edgeHost) => {
     }
     return origin;
   }
-  const oldLocalUrl = existing === null ? null : `http://localhost:${existing.appPort}`;
-  const portChangedOnLocalhost = options.appPort !== void 0 && existing?.appUrl === oldLocalUrl;
-  const fallback = portChangedOnLocalhost || existing?.edgeHost !== void 0 ? `http://localhost:${appPort}` : existing?.appUrl ?? `http://localhost:${appPort}`;
+  if (existing?.edgeHost !== void 0) {
+    return parseHttpOrigin(options.url ?? `http://localhost:${appPort}`, "--url");
+  }
+  const saved = existing === null ? null : new URL(existing.appUrl);
+  const savedPointsAtOldPort = saved !== null && existing !== null && options.appPort !== void 0 && saved.protocol === "http:" && saved.port !== "" && Number(saved.port) === existing.appPort;
+  if (saved !== null && savedPointsAtOldPort) saved.port = String(appPort);
+  const fallback = saved === null ? `http://localhost:${appPort}` : saved.origin;
   return parseHttpOrigin(options.url ?? fallback, "--url");
 };
 var checkExposurePair = (bind, appUrl, requireExplicitUrl) => {
@@ -6944,7 +6991,7 @@ var checkExposurePair = (bind, appUrl, requireExplicitUrl) => {
     );
   }
 };
-var checkPosture = (bind, ports, edgeHost, exposure) => {
+var checkPosture = (bind, sshBind, ports, edgeHost, exposure, declared) => {
   if (edgeHost !== void 0 && [ports.appPort, ports.sshPort].some((p) => p === 80 || p === 443)) {
     throw setupError(
       "With an edge, --port and --ssh-port must not be 80 or 443: the edge publishes both on every interface."
@@ -6965,6 +7012,16 @@ var checkPosture = (bind, ports, edgeHost, exposure) => {
       "--exposure loopback contradicts a non-loopback --bind: the port is published beyond this machine."
     );
   }
+  if (exposure === "loopback" && !isLoopbackBind(sshBind)) {
+    throw setupError(
+      "--exposure loopback contradicts a non-loopback --ssh-bind: the SSH port is published beyond this machine."
+    );
+  }
+  if (exposure === "public" && !isLoopbackBind(sshBind) && !declared.includes("workspace-ssh")) {
+    throw setupError(
+      `--exposure public with workspace SSH published on ${publishedAddress(sshBind, ports.sshPort)} beside the edge needs a statement Mend cannot observe: who reaches that port. Check it from each network that should not reach it, then add --declare workspace-ssh; or publish SSH on loopback.`
+    );
+  }
   if (exposure === "public" && edgeHost === void 0) {
     throw setupError(
       "--exposure public needs the edge: add --edge <host>. Without it nothing sets MEND_TRUSTED_PROXIES or an https origin, and the server refuses to start as public."
@@ -6983,10 +7040,18 @@ var validateExposure = (existing, options) => {
       "--bind must be a literal IPv4 or IPv6 address, such as 127.0.0.1 or 0.0.0.0."
     );
   }
+  const requestedSshBind = options.sshBind ?? existing?.sshBind;
+  if (requestedSshBind !== void 0 && net3.isIP(requestedSshBind) === 0) {
+    throw setupError(
+      "--ssh-bind must be a literal IPv4 or IPv6 address, such as 127.0.0.1 or 0.0.0.0."
+    );
+  }
+  const sshBind = requestedSshBind === bind ? void 0 : requestedSshBind;
   const edgeHost = options.noEdge ? void 0 : options.edge ?? existing?.edgeHost;
   const exposure = options.exposure ?? existing?.exposure;
   const tenancy = options.tenancy ?? existing?.tenancy;
-  checkPosture(bind, { appPort, sshPort }, edgeHost, exposure);
+  const declared = options.declared ?? existing?.declared ?? [];
+  checkPosture(bind, sshBind ?? bind, { appPort, sshPort }, edgeHost, exposure, declared);
   const appUrl = resolveAppUrl(existing, options, appPort, edgeHost);
   if (edgeHost === void 0)
     checkExposurePair(bind, appUrl, options.url === void 0 && existing === null);
@@ -6997,13 +7062,15 @@ var validateExposure = (existing, options) => {
   ];
   return {
     bind,
+    ...sshBind === void 0 ? {} : { sshBind },
     appUrl,
     allowedOrigins,
     appPort,
     sshPort,
     ...edgeHost === void 0 ? {} : { edgeHost },
     ...exposure === void 0 ? {} : { exposure },
-    ...tenancy === void 0 ? {} : { tenancy }
+    ...tenancy === void 0 ? {} : { tenancy },
+    ...declared.length === 0 ? {} : { declared }
   };
 };
 var parseServerConfig = (raw) => {
@@ -7042,6 +7109,13 @@ var parseServerConfig = (raw) => {
   if (tenancy !== void 0 && !isTenancy(tenancy)) {
     throw setupError(`Server config is corrupt: tenancy must be one of ${TENANCIES.join(", ")}.`);
   }
+  const declaredField = fields.get("declared");
+  if (declaredField !== void 0 && (!Array.isArray(declaredField) || !declaredField.every((item) => typeof item === "string" && isDeclarableItem(item)))) {
+    throw setupError(
+      `Server config is corrupt: declared must be an array of ${DECLARABLE_ITEMS.join(", ")}.`
+    );
+  }
+  const declared = Array.isArray(declaredField) ? declaredField.filter((item) => isDeclarableItem(String(item))) : [];
   const config = {
     schemaVersion: requiredInteger(fields, "schemaVersion"),
     assetContract: requiredString(fields, "assetContract"),
@@ -7051,6 +7125,7 @@ var parseServerConfig = (raw) => {
     dockerSocket: parseDockerSocketPath(requiredString(fields, "dockerSocket")),
     dockerSocketSource,
     bind: requiredString(fields, "bind"),
+    ...fields.has("sshBind") ? { sshBind: requiredString(fields, "sshBind") } : {},
     appUrl: parseHttpOrigin(requiredString(fields, "appUrl"), "Server config appUrl"),
     allowedOrigins: origins.map(
       (origin) => parseHttpOrigin(origin, "Server config allowedOrigins")
@@ -7061,7 +7136,8 @@ var parseServerConfig = (raw) => {
     ...fields.has("bucket") ? { bucket: requiredBucket(fields) } : {},
     ...edgeHost === void 0 ? {} : { edgeHost },
     ...exposure === void 0 ? {} : { exposure },
-    ...tenancy === void 0 ? {} : { tenancy }
+    ...tenancy === void 0 ? {} : { tenancy },
+    ...declared.length === 0 ? {} : { declared }
   };
   if (config.schemaVersion !== CONFIG_SCHEMA_VERSION || config.assetContract !== ASSET_CONTRACT && !LEGACY_ASSET_CONTRACTS.has(config.assetContract)) {
     throw setupError(
@@ -7076,6 +7152,7 @@ var parseServerConfig = (raw) => {
     context: void 0,
     version: void 0,
     bind: config.bind,
+    sshBind: config.sshBind,
     url: config.appUrl,
     origins: config.allowedOrigins,
     appPort: config.appPort,
@@ -7086,7 +7163,8 @@ var parseServerConfig = (raw) => {
     edge: config.edgeHost,
     noEdge: false,
     exposure: config.exposure,
-    tenancy: config.tenancy
+    tenancy: config.tenancy,
+    declared: config.declared
   });
   return config;
 };
@@ -7423,9 +7501,10 @@ var renderGarage = (secrets, config) => {
   ];
 };
 var namespaceOf = (config) => config.bucket === "garage" ? MEND_DOCKER_NAMESPACE_WITH_GARAGE : MEND_DOCKER_NAMESPACE;
+var composeHost = (address) => net3.isIP(address) === 6 ? `[${address}]` : address;
 var renderSecrets = (secrets, config) => {
   const sshHost = parseUrl(config.appUrl, "Server config appUrl").hostname.replace(/^\[|\]$/g, "");
-  const composeBind = net3.isIP(config.bind) === 6 ? `[${config.bind}]` : config.bind;
+  const composeBind = composeHost(config.bind);
   return [
     `MEND_VERSION=${config.serverVersion}`,
     "MEND_IMAGE_REPOSITORY=ghcr.io/sealant-sh/mend",
@@ -7433,6 +7512,7 @@ var renderSecrets = (secrets, config) => {
     `APP_URL=${config.appUrl}`,
     `MEND_ALLOWED_ORIGINS=${JSON.stringify(config.allowedOrigins)}`,
     `MEND_BIND_HOST=${composeBind}`,
+    ...config.sshBind === void 0 ? [] : [`MEND_SSH_BIND_HOST=${composeHost(config.sshBind)}`],
     `MEND_PORT=${config.appPort}`,
     `MEND_SSH_PORT=${config.sshPort}`,
     ...config.registryPort === void 0 ? [] : [`MEND_REGISTRY_PORT=${config.registryPort}`],
@@ -7632,6 +7712,13 @@ var resolveDockerSocket = (runtime, options, existing, selectedContext) => {
     dockerSocketSource: override === void 0 ? "detected" : "override"
   };
 };
+var checkSshBindAsset = (config, compose) => {
+  if (config.sshBind !== void 0 && !compose.includes("MEND_SSH_BIND_HOST")) {
+    throw setupError(
+      `Mend ${config.serverVersion}'s ${COMPOSE_ASSET} publishes workspace SSH on --bind and cannot honour --ssh-bind ${config.sshBind}. Use a release that supports --ssh-bind, or pass --ssh-bind with the --bind address.`
+    );
+  }
+};
 var resolveAssets = async (runtime, serverVersion, existing, store, options) => {
   if (options.assetsDir !== void 0) {
     try {
@@ -7865,7 +7952,28 @@ var startCompose = async (runtime, installation) => {
   );
   if (compose.status !== 0) throw commandFailure("Mend containers did not start", compose);
 };
-var edgeStartedLine = (config) => config.edgeHost === void 0 ? null : `The edge for ${config.edgeHost} is up on 80 and 443. Caddy asks for its certificate once ${config.edgeHost} resolves to this machine and both ports reach it from the Internet. mend server status says whether it holds one, and mend server logs shows what Caddy tried.`;
+var SSH_PROBE_BOUND_MS = 1e4;
+var sshPublicationLine = async (runtime, config) => {
+  if (config.sshBind === void 0 || isLoopbackBind(config.sshBind)) return null;
+  const published = publishedAddress(config.sshBind, config.sshPort);
+  if (runtime.probeSsh === void 0) return null;
+  const boundMs = runtime.sshProbeBoundMs ?? SSH_PROBE_BOUND_MS;
+  let bound;
+  const probes = await Promise.race([
+    runtime.probeSsh(config.sshBind, config.sshPort),
+    new Promise((resolve8) => {
+      bound = setTimeout(() => resolve8(null), boundMs);
+    })
+  ]).finally(() => clearTimeout(bound));
+  if (probes === null) {
+    return `Workspace SSH is published on ${published}. This machine's look at it did not finish within ${boundMs / 1e3} s. Who reaches it is up to the network and its firewall; mend operator exposure reports it as workspace-ssh.`;
+  }
+  const observed = probes.length === 0 ? "this machine has no address to try it at" : probes.map(
+    (probe) => probe.banner === null ? `${publishedAddress(probe.address, config.sshPort)} did not answer` : `${publishedAddress(probe.address, config.sshPort)} answers (${probe.banner})`
+  ).join(", ");
+  return `Workspace SSH is published on ${published}. From this machine: ${observed}. Who else reaches it is up to the network and its firewall; mend operator exposure reports it as workspace-ssh.`;
+};
+var edgeStartedLine = (config) => config.edgeHost === void 0 ? null : `The edge for ${config.edgeHost} is up on 80 and 443. Caddy asks for its certificate once ${config.edgeHost} resolves to this machine and both ports reach it from the Internet. mend server status says whether it holds one, and mend server logs shows what Caddy tried.${config.sshBind === void 0 ? ` Workspace SSH is published on ${config.bind}:${config.sshPort} only, so Remote-SSH and mend ssh from another machine cannot reach it; --ssh-bind 0.0.0.0 publishes it.` : ` Workspace SSH is published on ${config.sshBind}:${config.sshPort}.`}`;
 var setupServer = async (args, runtime, store) => {
   if (runtime.platform !== "linux" && runtime.platform !== "darwin") {
     throw setupError(`mend server setup supports Linux and macOS, not ${runtime.platform}.`);
@@ -7904,6 +8012,7 @@ var setupServer = async (args, runtime, store) => {
     ...validateExposure(existing?.config ?? null, options)
   };
   const assets = await resolveAssets(runtime, serverVersion, existing, store, options);
+  checkSshBindAsset(configWithoutBucket, assets.compose);
   const bucket = composeBucket(assets.compose);
   if (bucket !== void 0 && runtime.dockerDaemonFacts !== void 0) {
     const info = await runtime.run("docker", [
@@ -7954,6 +8063,8 @@ var setupServer = async (args, runtime, store) => {
   runtime.writeLine(reachableLine(config));
   const edgeStarted = edgeStartedLine(config);
   if (edgeStarted !== null) runtime.writeLine(edgeStarted);
+  const sshPublication = await sshPublicationLine(runtime, config);
+  if (sshPublication !== null) runtime.writeLine(sshPublication);
   if (existing?.config.edgeHost !== void 0 && config.edgeHost === void 0) {
     runtime.writeLine(
       `The edge for ${existing.config.edgeHost} is gone. Its certificate volumes stay until you remove them: docker --context ${config.dockerContext} volume rm mend_mend-edge-data mend_mend-edge-config`
@@ -8276,6 +8387,7 @@ var upgradeServer = async (args, runtime, store, existing) => {
   const previous = storeValue(store.readActive());
   if (previous === null) throw setupError("The active server generation is missing.");
   const assets = await resolveAssets(runtime, version, existing, store, options);
+  checkSshBindAsset({ ...existing.config, serverVersion: version }, assets.compose);
   const {
     registryPort: _legacyRegistryPort,
     bucket: _previousBucket,
@@ -8615,9 +8727,45 @@ var nodeServerRuntime = () => {
     writeLine: (line) => process.stdout.write(`${redactCredentials(line)}
 `),
     dockerDaemonFacts: hostDockerDaemonFacts,
-    readLogin: (configDir) => savedLogin(configDir, environment)
+    readLogin: (configDir) => savedLogin(configDir, environment),
+    probeSsh: probeSshFromHere
   };
 };
+var sshBannerAt = async (host, port, timeoutMs) => {
+  const socket = net3.connect({ host, port });
+  let deadline;
+  try {
+    return await Promise.race([
+      new Promise((resolve8) => {
+        socket.once(
+          "data",
+          (bytes) => resolve8(bytes.toString("utf8").split(/\r?\n/)[0]?.trim() ?? "")
+        );
+        socket.once("end", () => resolve8(null));
+        socket.once("close", () => resolve8(null));
+        socket.once("error", () => resolve8(null));
+      }),
+      new Promise((resolve8) => {
+        deadline = setTimeout(() => resolve8(null), timeoutMs);
+      })
+    ]);
+  } finally {
+    clearTimeout(deadline);
+    socket.destroy();
+  }
+};
+var probeSshFromHere = async (bind, port) => {
+  const unspecified = bind === "0.0.0.0" || bind === "::";
+  const addresses = unspecified ? Object.values(os10.networkInterfaces()).flatMap((entries) => entries ?? []).filter(
+    (entry) => !entry.internal && (entry.family === "IPv4" || bind === "::" && !entry.address.startsWith("fe80"))
+  ).map((entry) => entry.address).slice(0, 4) : [bind];
+  return Promise.all(
+    addresses.map(async (address) => ({
+      address,
+      banner: await sshBannerAt(address, port, 3e3)
+    }))
+  );
+};
 var savedLogin = (configDir, environment) => {
   let saved = null;
   try {
@@ -10844,7 +10992,7 @@ var attachTty = async (config, sessionId, harness, from, processId, options) =>
       process.stdout.write("\x07");
     }
   };
-  const connect2 = async () => {
+  const connect3 = async () => {
     let url;
     try {
       url = await socketUrl(
@@ -10913,7 +11061,7 @@ ${dim7(`read-only \xB7 ${detachKeyEnabled ? "Ctrl+] or " : ""}Ctrl+C detaches`)}
 `
       );
     }
-    const connected = await connect2();
+    const connected = await connect3();
     stopConnecting();
     if (connected === "unavailable") return "unavailable";
     if (connected === "aborted") return abortReason ?? "interrupted";
@@ -13674,7 +13822,7 @@ var dashboard = async (config, options = {}) => {
     );
     process.exit(rerun.status ?? 0);
   }
-  const { runDashboard } = await import("./dashboard-CEJN6IOO.js");
+  const { runDashboard } = await import("./dashboard-DQB5RNXJ.js");
   const agentShare = await startShareIfBridge(config);
   const tunnels = options.noTunnel === true || serverIsLocal(config) ? null : createServiceTunnels({
     listServices: () => fetchServices(config),

package/man/mend-accounts.1

@@ -1,4 +1,4 @@
-.TH MEND-ACCOUNTS 1 "" "mend 0.36.0\-next.663" "mend manual"
+.TH MEND-ACCOUNTS 1 "" "mend 0.36.0\-next.665" "mend manual"
 .SH NAME
 mend\-accounts \- your connected accounts on the platform
 .SH SYNOPSIS

package/man/mend-adopt.1

@@ -1,4 +1,4 @@
-.TH MEND-ADOPT 1 "" "mend 0.36.0\-next.663" "mend manual"
+.TH MEND-ADOPT 1 "" "mend 0.36.0\-next.665" "mend manual"
 .SH NAME
 mend\-adopt \- adopt a repository into the store
 .SH SYNOPSIS

package/man/mend-attach.1

@@ -1,4 +1,4 @@
-.TH MEND-ATTACH 1 "" "mend 0.36.0\-next.663" "mend manual"
+.TH MEND-ATTACH 1 "" "mend 0.36.0\-next.665" "mend manual"
 .SH NAME
 mend\-attach \- reattach this terminal to a running session
 .SH SYNOPSIS

package/man/mend-codex.1

@@ -1,4 +1,4 @@
-.TH MEND-CODEX 1 "" "mend 0.36.0\-next.663" "mend manual"
+.TH MEND-CODEX 1 "" "mend 0.36.0\-next.665" "mend manual"
 .SH NAME
 mend\-codex \- launch codex, claude, opencode or pi in a recorded worktree
 .SH SYNOPSIS

package/man/mend-completions.1

@@ -1,4 +1,4 @@
-.TH MEND-COMPLETIONS 1 "" "mend 0.36.0\-next.663" "mend manual"
+.TH MEND-COMPLETIONS 1 "" "mend 0.36.0\-next.665" "mend manual"
 .SH NAME
 mend\-completions \- print the TAB\-completion hook
 .SH SYNOPSIS

package/man/mend-connect-pi.1

@@ -1,4 +1,4 @@
-.TH MEND-CONNECT-PI 1 "" "mend 0.36.0\-next.663" "mend manual"
+.TH MEND-CONNECT-PI 1 "" "mend 0.36.0\-next.665" "mend manual"
 .SH NAME
 mend\-connect\-pi \- send your pi setup to every pi session of yours
 .SH SYNOPSIS

package/man/mend-connect.1

@@ -1,4 +1,4 @@
-.TH MEND-CONNECT 1 "" "mend 0.36.0\-next.663" "mend manual"
+.TH MEND-CONNECT 1 "" "mend 0.36.0\-next.665" "mend manual"
 .SH NAME
 mend\-connect \- send this machine's provider credential to the platform
 .SH SYNOPSIS

package/man/mend-continue.1

@@ -1,4 +1,4 @@
-.TH MEND-CONTINUE 1 "" "mend 0.36.0\-next.663" "mend manual"
+.TH MEND-CONTINUE 1 "" "mend 0.36.0\-next.665" "mend manual"
 .SH NAME
 mend\-continue \- resume a session with its pending review follow\-up
 .SH SYNOPSIS

package/man/mend-doctor.1

@@ -1,4 +1,4 @@
-.TH MEND-DOCTOR 1 "" "mend 0.36.0\-next.663" "mend manual"
+.TH MEND-DOCTOR 1 "" "mend 0.36.0\-next.665" "mend manual"
 .SH NAME
 mend\-doctor \- check this machine's setup, or bundle it for a bug report
 .SH SYNOPSIS

package/man/mend-dotfiles-repo.1

@@ -1,4 +1,4 @@
-.TH MEND-DOTFILES-REPO 1 "" "mend 0.36.0\-next.663" "mend manual"
+.TH MEND-DOTFILES-REPO 1 "" "mend 0.36.0\-next.665" "mend manual"
 .SH NAME
 mend\-dotfiles\-repo \- set or clear the repository the server clones at launch
 .SH SYNOPSIS

package/man/mend-dotfiles-sync.1

@@ -1,4 +1,4 @@
-.TH MEND-DOTFILES-SYNC 1 "" "mend 0.36.0\-next.663" "mend manual"
+.TH MEND-DOTFILES-SYNC 1 "" "mend 0.36.0\-next.665" "mend manual"
 .SH NAME
 mend\-dotfiles\-sync \- capture config files from this machine into your store
 .SH SYNOPSIS

package/man/mend-dotfiles.1

@@ -1,4 +1,4 @@
-.TH MEND-DOTFILES 1 "" "mend 0.36.0\-next.663" "mend manual"
+.TH MEND-DOTFILES 1 "" "mend 0.36.0\-next.665" "mend manual"
 .SH NAME
 mend\-dotfiles \- your dotfiles on the server: repo and synced files
 .SH SYNOPSIS

package/man/mend-env-cluster.1

@@ -1,4 +1,4 @@
-.TH MEND-ENV-CLUSTER 1 "" "mend 0.36.0\-next.663" "mend manual"
+.TH MEND-ENV-CLUSTER 1 "" "mend 0.36.0\-next.665" "mend manual"
 .SH NAME
 mend\-env\-cluster \- bind Kubernetes secrets and configmaps to the workspaces
 .SH SYNOPSIS

package/man/mend-env-load.1

@@ -1,4 +1,4 @@
-.TH MEND-ENV-LOAD 1 "" "mend 0.36.0\-next.663" "mend manual"
+.TH MEND-ENV-LOAD 1 "" "mend 0.36.0\-next.665" "mend manual"
 .SH NAME
 mend\-env\-load \- load a .env into the project
 .SH SYNOPSIS

package/man/mend-env-show.1

@@ -1,4 +1,4 @@
-.TH MEND-ENV-SHOW 1 "" "mend 0.36.0\-next.663" "mend manual"
+.TH MEND-ENV-SHOW 1 "" "mend 0.36.0\-next.665" "mend manual"
 .SH NAME
 mend\-env\-show \- what the project store holds: names only, never values
 .SH SYNOPSIS

package/man/mend-folder-create.1

@@ -1,4 +1,4 @@
-.TH MEND-FOLDER-CREATE 1 "" "mend 0.36.0\-next.663" "mend manual"
+.TH MEND-FOLDER-CREATE 1 "" "mend 0.36.0\-next.665" "mend manual"
 .SH NAME
 mend\-folder\-create \- create an organization folder
 .SH SYNOPSIS

package/man/mend-folder-list.1

@@ -1,4 +1,4 @@
-.TH MEND-FOLDER-LIST 1 "" "mend 0.36.0\-next.663" "mend manual"
+.TH MEND-FOLDER-LIST 1 "" "mend 0.36.0\-next.665" "mend manual"
 .SH NAME
 mend\-folder\-list \- list your organization's folders
 .SH SYNOPSIS

package/man/mend-folder-push.1

@@ -1,4 +1,4 @@
-.TH MEND-FOLDER-PUSH 1 "" "mend 0.36.0\-next.663" "mend manual"
+.TH MEND-FOLDER-PUSH 1 "" "mend 0.36.0\-next.665" "mend manual"
 .SH NAME
 mend\-folder\-push \- upload a local directory into a folder
 .SH SYNOPSIS

package/man/mend-folder-rm.1

@@ -1,4 +1,4 @@
-.TH MEND-FOLDER-RM 1 "" "mend 0.36.0\-next.663" "mend manual"
+.TH MEND-FOLDER-RM 1 "" "mend 0.36.0\-next.665" "mend manual"
 .SH NAME
 mend\-folder\-rm \- remove an organization folder
 .SH SYNOPSIS