v2.3.2 (#874)

* fix: patch critical security vulnerabilities (GHSA-5fqh, GHSA-ccm8, GHSA-wqfw, GHSA-xmjh)

- Remove passwordHash from /users/list API response
- Require both password and TOTP code for MFA-critical operations
- Restrict tunnel kill commands to tunnelMarker-only matching
- Add session ownership middleware for file manager endpoints

* fix: allow navigating away from split-view to non-pane tabs

Show the normal view container on top of the split view when the active
tab is not assigned to any pane, so users can switch to dashboard or
other tabs while split mode is active.

Closes #739

* fix: add inline quick-action buttons on host name row

Show Terminal, Files, RDP, and VNC shortcut icons on the host name row
on hover, so users can launch connections with a single click without
expanding the full action tray.

Closes #736

* fix: restore SSH keepalive interval to 30s to prevent random disconnects

Revert keepalive defaults from 60s/5 to 30s/3 across terminal, tunnel,
and server-stats SSH connections. The 60s interval introduced in 2.3.0
causes firewalls and NAT devices to drop idle connections before the
next keepalive probe.

Closes #733

* fix: apply guacamole-lite protocol patch in Docker builds

The Dockerfile uses --ignore-scripts which skips the postinstall hook
that patches guacamole-lite for guacd 1.6.0 protocol VERSION_1_5_0.
Without this patch, the timezone handshake instruction is not sent for
protocol versions above 1.1.0, causing VNC connections to fail
immediately on connect.

Closes #734

* fix: show correct icons for network interface types

Detect interface type from name pattern and show appropriate icons:
WiFi for wlan/wl*, Ethernet (Cable) for eth/en*, Container for
docker/bridge/virtual, generic Network for others.

Closes #720

* fix: resolve sudo password for shared host users

The password endpoint required hosts.userId to match the requesting
user, which fails for shared hosts. Now falls back to decrypting with
the owner's key when the requesting user doesn't own the host.

Closes #717

* fix: use jump hosts for online status check and metrics collection

Status polling now pings the first jump host instead of the unreachable
target when jump hosts are configured. The /metrics/start endpoint now
tunnels through the jump host chain to reach the target host.

Closes #716

* fix: broaden sudo prompt detection for newer distros

Add patterns for 'password for <user>:' and bare 'Password:' prompts
in addition to the existing [sudo] and sudo: patterns. Covers Ubuntu
26.04 and other distros that use different sudo prompt formats.

Closes #718

* fix: recalculate terminal layout after web fonts load

xterm.js measures character widths at open() time. If custom fonts
haven't loaded yet, measurements use the fallback font and spacing
becomes incorrect. Now refresh and re-fit the terminal once
document.fonts.ready resolves.

Closes #710

* fix: improve terminal cwd detection and initial directory command

Remove '&& pwd' from initial directory command — the shell prompt
shows the new directory naturally. Fixes PowerShell 5.1 which doesn't
support '&&' as a statement separator.

Prepend Ctrl+U to get_cwd command to clear any pending input before
injecting the cwd probe, reducing interference with foreground programs.

Closes #713, #714

* fix: decode base64 file content as UTF-8 in file manager

Replace bare atob() with TextDecoder('utf-8') for base64 content
decoding. atob() only handles Latin-1, so multi-byte UTF-8 characters
like 'é' were decoded as 'é'.

Closes #719

* fix: normalize lazy import default exports for iOS compatibility

Wrap all lazy() imports with explicit .then(m => ({ default: m.default }))
to ensure consistent module resolution across platforms. iOS Safari/WebView
may handle bare lazy(() => import(...)) differently, returning the module
object instead of extracting the default export.

Closes #721

* fix: prevent RDP display from snapping back after container resize

Remove immediate rescaleDisplay() from ResizeObserver callback. The
display.onresize event already triggers rescaling when the RDP server
responds with the new resolution. Calling rescaleDisplay before the
server responds uses stale display dimensions, causing the bottom of
the screen to be truncated.

Closes #725

* fix: add portal Desktop DBus permission for Flatpak URL opening

Flatpak sandbox blocks window.open() without the portal permission,
causing terminal link clicks to open about:blank. Add talk-name for
org.freedesktop.portal.Desktop to enable xdg-desktop-portal URL
handling.

Closes #704

* chore: remove unused code and fix PR checks (#851)

* chore: remove unused frontend code

* chore: prune unused theme exports

* ci: fix pr check failures

* chore: reduce lint warnings

* feat(oidc): expose admin_group via OIDC_ADMIN_GROUP env var (#828)

The admin-group OIDC sync added in 2.3.0 (#782) reads `config.admin_group`
to sync the user's admin flag from OIDC group membership on each login.
That field is only populated when the OIDC config is stored in the
in-app DB — `getOIDCConfigFromEnv()` does not expose it, so deployments
using the env-var config path (declarative IaC: Helm/Compose/Puppet)
cannot enable the feature without abandoning env vars and pasting the
client_secret into the admin UI.

Add `admin_group: process.env.OIDC_ADMIN_GROUP || ""` to the env-config
return type and object. Backward compatible: when unset, the existing
`if (config.admin_group)` guard at users.ts:1336 keeps the sync block
skipped, matching today's behavior.

* chore: reduce explicit-any warnings

* chore: reduce more explicit-any warnings

* chore: reduce lint warnings

* chore: silence intentional hook dependency warnings

* chore: clean dependency tooling

* chore: narrow frontend tsconfig scope

* chore: reduce type assertion debt

* refactor: split host manager components

* refactor: split host editor sections

* refactor: split api client modules

* refactor: split more api clients

* refactor: split user settings api clients

* refactor: split tab and history api clients

* refactor: split tunnel api clients

* refactor: split server stats api client

* refactor: split file manager data api

* refactor: split ssh file operations api

* refactor: split host editor general tab

* refactor: split host editor guacamole tabs

* refactor: split ssh host management api

* refactor: split admin general settings sections

* refactor: split admin database section

* refactor: split admin management sections

* refactor: split admin keys and dialogs

* refactor: split system status api clients

* refactor: split user route helpers

* refactor: split host route helpers

* refactor: split file manager ssh helpers

* refactor: split file manager session helpers

* refactor: split file manager listing routes

* refactor: split host opkssh routes

* refactor: split file manager content routes

* refactor: split user api key routes

* refactor: split host folder routes

* refactor: split user settings routes

* refactor: split user totp routes

* refactor: split host file manager bookmark routes

* refactor: split file manager operation routes

* refactor: split server stats settings routes

* refactor: split user session routes

* refactor: split host command history routes

* refactor: split server stats viewer routes

* refactor: split docker container routes

* refactor: split user oidc account routes

* refactor: split host autostart routes

* refactor: split host internal routes

* refactor: split host network routes

* refactor: split user password reset routes

* refactor: split user admin routes

* refactor: split user data access routes

* refactor: split credential key routes

* refactor: split credential deploy routes

* refactor: split host bulk routes

* refactor: split server stats connection helpers

* refactor: split tunnel helpers

* refactor: split file manager action routes

* refactor: split terminal auth helpers

* refactor: split terminal jump host helpers

* refactor: split tunnel relay helpers

* refactor: split tunnel socks relay helpers

* refactor: split tunnel c2s relay handlers

* refactor: split server stats session helpers

* refactor: split terminal presentation helpers

* refactor: split file manager presentation helpers

* refactor: split file manager toolbar

* fix(guacamole-lite): send name instruction for protocol >= 1.3.0

The Guacamole protocol added the `name` handshake instruction in 1.3.0
(an optional human-readable identifier for the joining user). guacd 1.6.0
began requiring it during the VNC handshake even when negotiating older
protocol versions, causing connections to silently drop right after the
"User joined" log line with no client-visible error.

This patch extends scripts/patch-guacamole-lite.cjs with a third
idempotent string-replacement that injects the `name` instruction send
when guacamole-lite has negotiated protocol VERSION_1_3_0 or VERSION_1_5_0.

Verified end-to-end: guacd debug logs now show `Processing instruction:
name` and `Client is using protocol version "VERSION_1_5_0"` (previously
stuck at VERSION_1_1_0). VNC session connects successfully against
guacd 1.5.5 / macOS Tahoe target.

Related: Termix-SSH/Support#567, #734

* fix: resolve recent support bugs

* fix(admin): wire up OIDC-to-password link dialog submit + visibility

The admin user-management UI already shipped a link icon and a "Link
Account" dialog, but two things blocked the flow:

1. The submit button had no onClick handler and the username input was
   uncontrolled (no value/onChange). Clicking "Link Accounts" was a
   no-op — no network request, no console error, no toast.
2. The link icon's visibility condition was `user.isOidc &&
   !user.passwordHash`, which hid the button on OIDC users that had
   been auto-provisioned with a passwordHash. Termix's OIDC provisioning
   sets a passwordHash by default, so the button was hidden on virtually
   every OIDC-provisioned user.

This change:
- Adds `linkOIDCToPasswordAccount` to the imports from `@/main-axios`.
- Adds two pieces of dialog state: `linkAccountTargetUsername` and
  `linkAccountSubmitting`.
- Makes the dialog's Input field a controlled component.
- Wires the submit Button's onClick to call `linkOIDCToPasswordAccount`,
  emit success/error toasts, refresh the local user list, and close
  the dialog.
- Loosens the visibility condition to `user.isOidc` (the backend
  handler already enforces all integrity checks).
- Adds `linkAccountSuccess`, `linkAccountFailed`, and
  `linkAccountInProgress` translation keys to `en.json`.

Verified locally: full Docker build via docker/Dockerfile passes;
`tsc --noEmit` is clean; `prettier --check .` is clean; ESLint produces
the same warning count as upstream (16 pre-existing `any`-type warnings,
0 errors).

* fix: support native oidc callbacks (#856)

* docs: add cloudflare tunnel guidance (#857)

* fix: sync appearance preferences (#858)

* fix: pass through terminal tab completion (#859)

* fix: resolve terminal jump hosts server-side (#860)

* fix(electron): auto-allow SSL certificates for private network hosts (#861)

Add private network IP detection (RFC 1918, link-local, loopback, IPv6
ULA) to the Electron certificate-error handler so that connections to
local/private servers like 192.168.x.x bypass SSL validation
automatically. Also add an explicit "Allow invalid certificate" toggle
in the server config UI for public HTTPS servers with self-signed certs.

* fix: restore host password copy actions (#862)

* feat: support single-host direct tunnels (ssh -L style) (#863)

Add direct tunnel mode that uses a single SSH host for port forwarding,
matching the behavior of ssh -L / ssh -R / ssh -D without requiring a
second endpoint host in the Termix database. The Termix server creates a
local TCP listener and forwards through the SSH channel directly.

* Merge commit from fork

* Merge commit from fork

* Merge commit from fork

* Merge commit from fork

* Merge commit from fork

* Merge commit from fork

* Merge commit from fork

* Merge commit from fork

* Merge commit from fork

* fix: backend build errors (Type)

* fix: mobile auth failing to login with webview

* fix: mobile app geting incorrectly sent auth token

* feat: commit existing frontend/backend e2e/unit tests (skipped tests containing private info like OIDC and real server testing)

* feat: host-to-host file transfer via server relay

* feat: removed host management from command palette, fixed command palette opening wrong protocol, export/import failing for ssh key hosts, docker ssh2 native crypto not compiled, persisted terminal tabs attempt SSh on RDP hosts after migration, improved layout for click to expand hosts, show ip/username without having to hover over hosts

* fix: credentials not indexing into host manager until refresh

* feat: update credentials lists to match hosts list UI/UX

* feat: add rename folder UI

* feat: improve transfer to host UI/UX

* chore: increment ver

* feat: improve transfer to host UI

* feat: implement initial auto release system

---------

Co-authored-by: ZacharyZcR <zacharyzcr1984@gmail.com>
Co-authored-by: nicodarge <43711429+nicodarge@users.noreply.github.com>
Co-authored-by: Raman Gupta <7243222+raman325@users.noreply.github.com>
Co-authored-by: luc <luc_cook@hotmail.co.uk>

src/ui/locales/en.json

@@ -38,6 +38,8 @@
     "helpText": "Enter the URL where your Termix server is running (e.g., http://localhost:30001 or https://your-server.com)",
     "changeServer": "Change Server",
     "mustIncludeProtocol": "Server URL must start with http:// or https://",
+    "allowInvalidCertificate": "Allow invalid certificate",
+    "allowInvalidCertificateDesc": "Use only for trusted self-hosted servers with self-signed or IP-address certificates.",
     "useEmbedded": "Use Local Server",
     "embeddedDesc": "Run Termix with the built-in local server (no remote server needed)",
     "embeddedConnecting": "Connecting to local server...",
@@ -356,6 +358,7 @@
     "tunnelModeLocalDesc": "Forward a local port to a port on the remote server (or a host reachable from it).",
     "tunnelModeRemoteDesc": "Forward a port on the remote server back to a local port on your machine.",
     "tunnelModeDynamicDesc": "Create a SOCKS5 proxy on a local port for dynamic port forwarding.",
+    "sameHost": "This host (direct tunnel)",
     "endpointHost": "Endpoint Host",
     "endpointPort": "Endpoint Port",
     "bindHost": "Bind Host",
@@ -465,6 +468,8 @@
     "vncUrlCopied": "VNC URL copied",
     "telnetUrlCopied": "Telnet URL copied",
     "remoteDesktopUrlCopied": "Remote Desktop URL copied",
+    "expandActions": "Expand actions",
+    "collapseActions": "Collapse actions",
     "wakeOnLanAction": "Wake on LAN",
     "wakeOnLanSuccess": "Magic packet sent to {{name}}",
     "wakeOnLanError": "Failed to send magic packet",
@@ -542,6 +547,7 @@
     "checkingHostStatuses": "Checking host statuses...",
     "pinnedSection": "Pinned",
     "hostsExported": "Hosts exported successfully",
+    "exportFailed": "Failed to export hosts",
     "sampleDownloaded": "Sample file downloaded",
     "failedToDeleteCredential2": "Failed to delete credential",
     "noFolderOption": "(No folder)",
@@ -1143,6 +1149,107 @@
     "loadingPdf": "Loading PDF...",
     "loadingPage": "Loading page..."
   },
+  "transfer": {
+    "copyToHost": "Copy to host…",
+    "moveToHost": "Move to host…",
+    "copyItemsToHost": "Copy {{count}} items to host…",
+    "moveItemsToHost": "Move {{count}} items to host…",
+    "noHostsConnected": "No other file-manager hosts available.",
+    "noHostsConnectedHint": "Add another SSH host with File Manager enabled in Host Manager.",
+    "selectDestinationHost": "Select destination host",
+    "destinationPath": "Destination path",
+    "recentDestinations": "Recent destinations",
+    "collapseRecentDestinations": "Collapse recent destinations",
+    "expandRecentDestinations": "Expand recent destinations",
+    "browseFolders": "Browse destination folders",
+    "browseDestination": "Browse or enter path",
+    "confirmCopy": "Copy",
+    "confirmMove": "Move",
+    "transferring": "Transferring…",
+    "compressing": "Compressing…",
+    "extracting": "Extracting…",
+    "transferringItems": "Transferring {{current}} of {{total}} items…",
+    "transferSuccess": "Transfer complete",
+    "transferError": "Transfer failed",
+    "transferPartial": "Transfer completed with {{count}} errors",
+    "transferPartialHint": "Could not transfer: {{paths}}",
+    "itemsSummary": "{{count}} items",
+    "destMustBeDirectory": "Destination must be a directory for multi-item transfers",
+    "selectThisFolder": "Select this folder",
+    "browsePathWillBeCreated": "This folder does not exist yet. It will be created when the transfer starts.",
+    "browsePathError": "Could not open this path on the destination host.",
+    "goUp": "Go up",
+    "copyFolderToHost": "Copy folder to host…",
+    "moveFolderToHost": "Move folder to host…",
+    "hostReady": "Ready",
+    "hostConnecting": "Connecting…",
+    "hostDisconnected": "Not connected",
+    "hostAuthRequired": "Authentication required — open File Manager on this host first",
+    "hostConnectionFailed": "Connection failed",
+    "metricsTitle": "Transfer timings",
+    "metricsPrepare": "Prepare destination: {{duration}}",
+    "metricsCompress": "Compress on source: {{duration}}",
+    "metricsHopSourceRead": "Source → server: {{throughput}}",
+    "metricsHopDestSftpWrite": "Server → dest (SFTP): {{throughput}}",
+    "metricsHopDestLocalWrite": "Server → dest (local): {{throughput}}",
+    "metricsTransfer": "End-to-end: {{throughput}} ({{duration}})",
+    "metricsExtract": "Extract on destination: {{duration}}",
+    "metricsSourceDelete": "Remove from source: {{duration}}",
+    "metricsTotal": "Total: {{duration}}",
+    "progressCompressing": "Compressing on source host…",
+    "progressExtracting": "Extracting on destination…",
+    "progressTransferring": "Transferring data…",
+    "progressReconnecting": "Reconnecting…",
+    "parallelSegmentsLabel": "Parallel transfer lanes",
+    "parallelSegmentsOption": "{{count}} lanes",
+    "parallelSegmentsHint": "Large files are split into 256 MB chunks. Multiple lanes use separate connections (like starting several transfers) for higher total throughput.",
+    "progressTotalSpeed": "{{speed}} total ({{lanes}} lanes)",
+    "progressTransferringItems": "Transferring files ({{current}} of {{total}})…",
+    "progressBytes": "{{transferred}} / {{total}}",
+    "progressItems": "{{current}} / {{total}} files",
+    "sourceNotDeletedPartial": "Source files kept (partial transfer)",
+    "jumpHostLimitation": "Both hosts must be reachable from the Termix server. Direct host-to-host routing is not supported.",
+    "cancel": "Cancel",
+    "methodLabel": "Transfer method",
+    "methodAuto": "Auto",
+    "methodTar": "Tar archive",
+    "methodItemSftp": "Per-file SFTP",
+    "methodAutoHint": "Picks tar or per-file SFTP based on file count, size, and compressibility. Single files always use streaming SFTP.",
+    "methodTarHint": "Compress on source, transfer one archive, extract on destination. Requires tar on both Unix hosts.",
+    "methodItemSftpHint": "Transfer each file individually over SFTP. Works on all hosts including Windows.",
+    "methodPreviewLoading": "Calculating transfer method…",
+    "methodPreviewError": "Could not preview transfer method. The server will still pick a method when you start.",
+    "methodPreviewWillUseTar": "Will use: Tar archive",
+    "methodPreviewWillUseItemSftp": "Will use: Per-file SFTP",
+    "methodPreviewScanSummary": "{{fileCount}} files, {{totalSize}} total (scanned on source host).",
+    "methodItemSftpLimitation": "Each file uses the same SFTP stream as a single-file copy, one after another. Progress is combined across all files, so the bar moves slowly during large files.",
+    "methodReason": {
+      "user_item_sftp": "You chose per-file SFTP.",
+      "user_tar": "You chose tar archive.",
+      "tar_unavailable": "Tar is not available on one or both hosts — per-file SFTP will be used instead.",
+      "windows_host": "A Windows host is involved — tar is not used.",
+      "auto_multi_large": "Auto: multiple files including a large file ({{largestSize}}) with compressible data — tar bundles into one transfer.",
+      "auto_single_large_in_archive": "Auto: one large file ({{largestSize}}) in this set — per-file SFTP.",
+      "auto_many_incompressible": "Auto: mostly incompressible data — per-file SFTP.",
+      "auto_many_files": "Auto: many files ({{fileCount}}) — tar reduces per-file overhead.",
+      "auto_default": "Auto: per-file SFTP for this set."
+    },
+    "progressCancel": "Cancel",
+    "progressCancelling": "Cancelling…",
+    "progressStalled": "Stalled",
+    "resumedHint": "Reconnected to an active transfer started in another window.",
+    "transferCancelled": "Transfer cancelled",
+    "transferCancelledCopyHint": "Partial files may remain on the destination.",
+    "transferCancelledMoveHint": "Partial files may remain on the destination. Source files were not removed.",
+    "cleanupDestFiles": "Clean up destination",
+    "cleanupDestFilesSuccess": "Removed partial files from the destination",
+    "cleanupDestFilesPartial": "Some partial files could not be removed",
+    "cleanupDestFilesNothing": "Nothing to clean up on the destination",
+    "cleanupDestFilesError": "Cleanup failed",
+    "retryTransfer": "Retry",
+    "retryTransferError": "Retry failed",
+    "transferFailedRetryHint": "Partial data was kept on the destination. Retry will resume when the connection is back."
+  },
   "tunnels": {
     "noSshTunnels": "No SSH Tunnels",
     "createFirstTunnelMessage": "You haven't created any SSH tunnels yet. Configure tunnel connections in the Host Manager to get started.",
@@ -1768,6 +1875,9 @@
     "linkAccountTargetUsername": "Target Username",
     "linkAccountTargetPlaceholder": "Enter the local account username to link to",
     "linkAccounts": "Link Accounts",
+    "linkAccountSuccess": "OIDC account linked to \"{{username}}\"",
+    "linkAccountFailed": "Failed to link OIDC account",
+    "linkAccountInProgress": "Linking...",
     "saving": "Saving...",
     "updateRegistrationFailed": "Failed to update registration setting",
     "updatePasswordLoginFailed": "Failed to update password login setting",
@@ -1980,7 +2090,7 @@
         "showHostTags": "Show Host Tags",
         "showHostTagsDesc": "Display tags in host list",
         "hostTrayOnClick": "Click to Expand Host Actions",
-        "hostTrayOnClickDesc": "Require a click to expand host actions instead of hover",
+        "hostTrayOnClickDesc": "Always show connection buttons; click to expand management options instead of hover",
         "pinAppRail": "Pin App Rail",
         "pinAppRailDesc": "Keep the left sidebar app rail always expanded instead of expanding on hover",
         "settingsSnippets": "Snippets",