Release v1.0.55 with socket liveness checks and SSH auth status accuracy.

Validate PHP-FPM socket connectivity (not just socket file presence) before considering pools ready, and fix SSH password-auth status detection to account for keyboard-interactive/challenge-response paths.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: rehmatworks

internal/agent/handlers.go

@@ -1220,11 +1220,16 @@ func cleanupLegacySiteSockets(username, siteID, keepSocket string) {
 	_ = os.Remove(filepath.Join(runDir, fmt.Sprintf("php-%s.sock", siteSocketID(siteID))))
 }
 
-func allSocketsExist(paths []string) bool {
+func allSocketsReady(paths []string) bool {
 	for _, p := range paths {
 		if _, err := os.Stat(p); err != nil {
 			return false
 		}
+		conn, err := net.DialTimeout("unix", p, 300*time.Millisecond)
+		if err != nil {
+			return false
+		}
+		_ = conn.Close()
 	}
 	return true
 }
@@ -1235,7 +1240,7 @@ func waitForSockets(paths []string, timeout time.Duration) bool {
 	}
 	deadline := time.Now().Add(timeout)
 	for {
-		if allSocketsExist(paths) {
+		if allSocketsReady(paths) {
 			return true
 		}
 		if time.Now().After(deadline) {
@@ -3379,6 +3384,11 @@ func parseSSHConfigFile(path string, cfg *SSHConfig) {
 	}
 	defer f.Close()
 
+	passwordAuth := cfg.PasswordAuth
+	kbdAuth := cfg.PasswordAuth
+	passwordSeen := false
+	kbdSeen := false
+
 	scanner := bufio.NewScanner(f)
 	for scanner.Scan() {
 		line := scanner.Text()
@@ -3403,9 +3413,17 @@ func parseSSHConfigFile(path string, cfg *SSHConfig) {
 				cfg.Port = port
 			}
 		case "passwordauthentication":
-			cfg.PasswordAuth = (val == "yes")
+			passwordSeen = true
+			passwordAuth = (val == "yes")
+		case "kbdinteractiveauthentication", "challengeresponseauthentication":
+			kbdSeen = true
+			kbdAuth = (val == "yes")
 		}
 	}
+
+	if passwordSeen || kbdSeen {
+		cfg.PasswordAuth = passwordAuth || kbdAuth
+	}
 }
 
 func resolveSSHDBinary() (string, error) {
@@ -3447,6 +3465,11 @@ func (s *Server) getEffectiveSSHConfig() (*SSHConfig, error) {
 		return nil, fmt.Errorf("failed to read effective ssh config: %w: %s", err, strings.TrimSpace(string(output)))
 	}
 
+	passwordAuth := true
+	kbdAuth := true
+	passwordSeen := false
+	kbdSeen := false
+
 	for _, line := range strings.Split(string(output), "\n") {
 		fields := strings.Fields(strings.TrimSpace(line))
 		if len(fields) < 2 {
@@ -3458,9 +3481,17 @@ func (s *Server) getEffectiveSSHConfig() (*SSHConfig, error) {
 				cfg.Port = port
 			}
 		case "passwordauthentication":
-			cfg.PasswordAuth = strings.EqualFold(fields[1], "yes")
+			passwordSeen = true
+			passwordAuth = strings.EqualFold(fields[1], "yes")
+		case "kbdinteractiveauthentication", "challengeresponseauthentication":
+			kbdSeen = true
+			kbdAuth = strings.EqualFold(fields[1], "yes")
 		}
 	}
+	if passwordSeen || kbdSeen {
+		// Treat "password authentication" in UI as any password-based SSH auth path.
+		cfg.PasswordAuth = passwordAuth || kbdAuth
+	}
 
 	return cfg, nil
 }