Theorem Mesh

Overview

Theorem Mesh is a private networking client for connecting desktops, servers, and execution environments without exposing internal services to the public internet.

Desktop users join through a browser-based identity flow and control the connection from Harness. Network membership and access policy remain centrally managed without requiring users to operate a separate administration dashboard.

Operation

On servers and other headless machines, Mesh runs as a system service and uses a setup key in place of interactive sign-in. Harness can then address those machines as private execution environments.

Peer traffic is encrypted. Mesh establishes a direct connection when possible and uses the hosted relay when network conditions prevent one, without making the connected machine publicly reachable.

Installation

Install the signed release wrapper from npm. It downloads the matching checksummed binary for macOS, Linux, or Windows.

Desktop or workstation

npm install --global @theorem-sa/meshtheorem-mesh service installtheorem-mesh service starttheorem-mesh up

Headless server

npm install --global @theorem-sa/meshsudo theorem-mesh service installsudo theorem-mesh service startsudo theorem-mesh up --setup-key <setup-key>theorem-mesh status