release-2.5.0 (#994)

* feat(sshid) - sshid.io equivalent for termix (#919) * feat(ssh-id): database schema, migrations and field encryption Adds ssh_identities, ssh_identity_keys and ssh_identity_ca tables (public keys stored plaintext for the unauthenticated resolver; CA private key registered for per-user field encryption), with UNIQUE(user_id), an index on ssh_identity_keys(identity_id), and idempotent CREATE TABLE migrations. * feat(ssh-id): backend API — resolver, key management, CA and certificates Mounts /sshid (nginx route added). Public text/plain authorized_keys resolver (+ exact /:algo filter, HTML viewer) and CA public-key endpoint; no-store + noindex headers on every resolver response including early 404s. Authenticated management: claim/rename/delete handle, add/import/generate/enable/delete keys, and a per-user CA (create/rotate/delete) with pure-Node OpenSSH certificate issuance. Audit logging on all mutations; UNIQUE races map to a precise 409. Unit tests for key parsing and certificate signing (ssh-keygen-validated). * feat(ssh-id): frontend panel, API client and i18n SSH ID panel wired into the app rail and AppShell: claim handle, resolver URL + curl one-liner, key list, generate, paste/import, CA enable/rotate/remove with server trust command, and per-key certificate issuance. API client re-exported through main-axios.ts; all strings i18n'd. * style(ssh-id): align panel and resolver page with Termix theme - Rebuild the SSH ID sidebar panel with the theme's square components (SectionCard / SettingRow / FakeSwitch) instead of rounded ad-hoc cards; use accent-brand and destructive tokens rather than raw red/green. - Fix panel scrolling: move overflow to a block scroll container so the cards keep their natural height instead of being clipped. - Restyle the public resolver HTML page (/sshid/u/:handle) to the Termix dark theme: square corners, #18181b/#303032 palette, #f59145 accent, uppercase section labels. - Tidy copy: 'Save To Credentials' label, drop the redundant generate intro, and correct the generate tooltip (the key is stored when saving to vault). * feat: rename to Termix ID, improve UI, backend inconsistencies, and general bug fixes --------- Co-authored-by: LukeGus <bugattiguy527@gmail.com> * ci(deps): bump actions/checkout from 6 to 7 in the github-actions group (#922) Bumps the github-actions group with 1 update: [actions/checkout](https://github.com/actions/checkout). Updates `actions/checkout` from 6 to 7 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v6...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-dev): bump the dev-patch-updates group with 11 updates (#923) Bumps the dev-patch-updates group with 11 updates: | Package | From | To | | --- | --- | --- | | [@codemirror/search](https://github.com/codemirror/search) | `6.7.0` | `6.7.1` | | [@codemirror/view](https://github.com/codemirror/view) | `6.43.0` | `6.43.1` | | [@tailwindcss/vite](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-vite) | `4.3.0` | `4.3.1` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.8` | `4.1.9` | | [@vitest/ui](https://github.com/vitest-dev/vitest/tree/HEAD/packages/ui) | `4.1.8` | `4.1.9` | | [eslint-plugin-react-refresh](https://github.com/ArnaudBarre/eslint-plugin-react-refresh) | `0.5.2` | `0.5.3` | | [lint-staged](https://github.com/lint-staged/lint-staged) | `17.0.7` | `17.0.8` | | [prettier](https://github.com/prettier/prettier) | `3.8.3` | `3.8.4` | | [sharp](https://github.com/lovell/sharp) | `0.35.1` | `0.35.2` | | [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.3.0` | `4.3.1` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.8` | `4.1.9` | Updates `@codemirror/search` from 6.7.0 to 6.7.1 - [Changelog](https://github.com/codemirror/search/blob/main/CHANGELOG.md) - [Commits](https://github.com/codemirror/search/commits) Updates `@codemirror/view` from 6.43.0 to 6.43.1 - [Changelog](https://github.com/codemirror/view/blob/main/CHANGELOG.md) - [Commits](https://github.com/codemirror/view/commits) Updates `@tailwindcss/vite` from 4.3.0 to 4.3.1 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.1/packages/@tailwindcss-vite) Updates `@vitest/coverage-v8` from 4.1.8 to 4.1.9 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.9/packages/coverage-v8) Updates `@vitest/ui` from 4.1.8 to 4.1.9 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.9/packages/ui) Updates `eslint-plugin-react-refresh` from 0.5.2 to 0.5.3 - [Release notes](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/releases) - [Changelog](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/blob/main/CHANGELOG.md) - [Commits](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/compare/v0.5.2...v0.5.3) Updates `lint-staged` from 17.0.7 to 17.0.8 - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](https://github.com/lint-staged/lint-staged/compare/v17.0.7...v17.0.8) Updates `prettier` from 3.8.3 to 3.8.4 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](https://github.com/prettier/prettier/compare/3.8.3...3.8.4) Updates `sharp` from 0.35.1 to 0.35.2 - [Release notes](https://github.com/lovell/sharp/releases) - [Commits](https://github.com/lovell/sharp/compare/v0.35.1...v0.35.2) Updates `tailwindcss` from 4.3.0 to 4.3.1 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.1/packages/tailwindcss) Updates `vitest` from 4.1.8 to 4.1.9 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.9/packages/vitest) --- updated-dependencies: - dependency-name: "@codemirror/search" dependency-version: 6.7.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@codemirror/view" dependency-version: 6.43.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@tailwindcss/vite" dependency-version: 4.3.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@vitest/coverage-v8" dependency-version: 4.1.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@vitest/ui" dependency-version: 4.1.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: eslint-plugin-react-refresh dependency-version: 0.5.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: lint-staged dependency-version: 17.0.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: prettier dependency-version: 3.8.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: sharp dependency-version: 0.35.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: tailwindcss dependency-version: 4.3.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: vitest dependency-version: 4.1.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump nanoid in the prod-patch-updates group (#925) Bumps the prod-patch-updates group with 1 update: [nanoid](https://github.com/ai/nanoid). Updates `nanoid` from 5.1.11 to 5.1.15 - [Release notes](https://github.com/ai/nanoid/releases) - [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md) - [Commits](https://github.com/ai/nanoid/compare/5.1.11...5.1.15) --- updated-dependencies: - dependency-name: nanoid dependency-version: 5.1.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-patch-updates ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump the major-updates group with 5 updates (#926) Bumps the major-updates group with 5 updates: | Package | From | To | | --- | --- | --- | | [js-yaml](https://github.com/nodeca/js-yaml) | `4.2.0` | `5.0.0` | | [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.39.4` | `10.0.1` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.9.2` | `26.0.0` | | [concurrently](https://github.com/open-cli-tools/concurrently) | `9.2.1` | `10.0.3` | | [eslint](https://github.com/eslint/eslint) | `9.39.4` | `10.5.0` | Updates `js-yaml` from 4.2.0 to 5.0.0 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](https://github.com/nodeca/js-yaml/compare/4.2.0...5.0.0) Updates `@eslint/js` from 9.39.4 to 10.0.1 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](https://github.com/eslint/eslint/commits/v10.0.1/packages/js) Updates `@types/node` from 25.9.2 to 26.0.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `concurrently` from 9.2.1 to 10.0.3 - [Release notes](https://github.com/open-cli-tools/concurrently/releases) - [Commits](https://github.com/open-cli-tools/concurrently/compare/v9.2.1...v10.0.3) Updates `eslint` from 9.39.4 to 10.5.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](https://github.com/eslint/eslint/compare/v9.39.4...v10.5.0) --- updated-dependencies: - dependency-name: js-yaml dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: major-updates - dependency-name: "@eslint/js" dependency-version: 10.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: major-updates - dependency-name: "@types/node" dependency-version: 26.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: major-updates - dependency-name: concurrently dependency-version: 10.0.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: major-updates - dependency-name: eslint dependency-version: 10.5.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: major-updates ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * feat(ssh): add HashiCorp Vault SSH signer authentication * fix: small fixes to vault feature to align with Termix codebase * chore: add view docs links for vault/termix id * fix: file upload fails with 400 and missing schema migrations on upgrade (#929) Two bugs introduced in v2.4.1: 1. uploadFileStream uses fileManagerApi.post() which triggers axios's transformRequest to JSON-serialize the FormData because the instance default Content-Type is application/json. Change to postForm() which sets Content-Type: multipart/form-data so the browser XHR sends the correct multipart body with boundary. 2. Two schema items added to schema.ts were not included in migrateSchema() in db/index.ts, causing 500 errors on existing installations upgrading from v2.4.0: - user_preferences.status_color_scheme (no such column) - dashboard_service_links table (no such table) Fixes #928 Co-authored-by: sash <sash@fominykh.io> * fix: support PuTTY PPK ssh keys (#930) * fix: chunk large file manager uploads (#932) * fix: route dashboard hosts by protocol (#934) * fix: resolve tunnel endpoints reliably (#935) * Fix Electron OIDC browser auth failures (#936) * Allow RDP connections without stored credentials (#937) * Sync role credential shares for OIDC users (#938) * Fix terminal link dialog layering (#940) * Confirm large files before opening editor (#942) * Confirm closing active host connections (#943) * Preserve file path case in file manager UI (#941) * fix: preserve unicode guacamole tokens (#933) * Persist VNC authentication settings (#944) * Fix Guacamole websocket base path (#946) * Promote file manager terminals to tabs (#939) * Guard Guacamole disconnect during startup (#945) * chore: increment ver * feat: bitwarden ssh agent integration * feat: serial connections support * fix: various small bug fixes * feat: open all sessions in a folder and terminal custom theme color support * feat: cross host file manager clipboard and several small bug fixes * feat: tailscale/wireguard support and added a new status state for when backend is checking status * feat: grafana like server stats history, new alert system, ntfy/webhook support * feat: new grid and widget based homepage function * feat: new donate button in dashboard * fix: alert ui incorrectly using termix css and fixed issue with alert system not loading * chore: fix ci checks (#966) * Fix dashboard service link creation (#950) * Fix jump host SOCKS5 proxy selection (#951) * Fix jump host SOCKS5 proxy selection * fix: type jump host socks proxy config * Fix tmux detection path handling (#949) * Support GUACD_URL environment config (#952) * Retry autostart tunnel host fetches (#953) * Retry autostart tunnel host fetches * chore: format tunnel route * Fix PUID html ownership in Docker entrypoint (#954) * feat: allow custom tunnel endpoints (#977) * fix: skip metrics start for non-ssh hosts (#976) * Fix Proxmox import auth fallback (#956) * Fix Proxmox import auth fallback * chore: format proxmox import auth * Fix SSH heading syntax highlighting (#955) * Fix SSH heading syntax highlighting * chore: format terminal highlighter * Initialize auth before fullscreen terminal routes (#957) * Add WebAuthn passkey authentication (#959) * chore: add Biome tooling (#965) * chore: add biome tooling * chore: support tailwind syntax in biome * Fix VNC required argument handshake (#968) * Prioritize host results in command palette search (#969) * Prevent sidebar host hover layout shift (#970) * Add terminal font zoom with mouse wheel (#971) * Add host temperature metrics card (#972) * Make file downloads reliable in desktop app (#973) * Add app rail hover expansion setting (#974) * fix: use correct translation key for nav.close (#964) * fix(tunnel): skip endpoint credential validation for direct tunnels (#963) * fix: SSH port connection bug (#975) * fix: chunked upload for files >=1.5GB to bypass browser ArrayBuffer limit (#948) * feat: support SSH agent auth across SSH features (#960) * feat: add Podman container runtime support (#958) * chore: update readme and release notes * fix: stabilize Windows app icon (#978) * Add safe host sharing export (#979) * Add external editor support for file manager (#985) * Rework SSH credential password handling (#984) * Support password fallback for SSH key credentials * Complete SSH credential password fallback * Fix runtime base path for auth callbacks (#982) * Fix TUI terminal output highlighting (#983) Co-authored-by: LukeGus <bugattiguy527@gmail.com> * Add app fullscreen mode (#993) * Fix host metrics startup polling (#986) * chore: update release notes * fix: line chart text overlap * chore: update RELEASE_NOTES.md * chore: add donation goal to readme * chore: update readme * fix: hide full-screen button in electron app * fix: failed unit tests * chore: lint, format, and bump version to 2.5.0 * chore: remove timeout from crowdin translate * chore: sync Crowdin translations for 2.5.0 --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: DivByZero <mr.oplus@yahoo.fr> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: devdanetra <46488477+devdanetra@users.noreply.github.com> Co-authored-by: Aleksandr Fominykh <neoformalex@users.noreply.github.com> Co-authored-by: sash <sash@fominykh.io> Co-authored-by: ZacharyZcR <zacharyzcr1984@gmail.com>
2026-08-30 10:48:22 +00:00 · 2026-06-29 13:28:26 -05:00
parent fd27a366d0
commit 9de904dd4c
348 changed files with 125184 additions and 76537 deletions
@@ -29,6 +29,8 @@ interface DialogResult {
 export interface ElectronAPI {
  getAppVersion: () => Promise<string>;
  getPlatform: () => Promise<string>;
+  getSetting?: (key: string) => Promise<string | null | undefined>;
+  setSetting?: (key: string, value: string) => Promise<void>;

  getServerConfig: () => Promise<ServerConfig>;
  saveServerConfig: (config: ServerConfig) => Promise<{ success: boolean }>;
@@ -77,6 +79,32 @@ export interface ElectronAPI {
  showSaveDialog: (options: DialogOptions) => Promise<DialogResult>;
  showOpenDialog: (options: DialogOptions) => Promise<DialogResult>;

+  openExternalEditor: (fileData: {
+    fileName: string;
+    content: string;
+    encoding?: "utf8" | "base64";
+    editorPath?: string | null;
+  }) => Promise<{
+    success: boolean;
+    editId?: string;
+    path?: string;
+    error?: string;
+  }>;
+
+  closeExternalEditor: (editId: string) => Promise<{
+    success: boolean;
+    error?: string;
+  }>;
+
+  onExternalEditorSaved?: (
+    callback: (payload: {
+      editId: string;
+      content: string;
+      encoding: "utf8";
+      path: string;
+    }) => void,
+  ) => () => void;
+
  onUpdateAvailable: (callback: () => void) => void;
  onUpdateDownloaded: (callback: () => void) => void;

@@ -0,0 +1,417 @@
+export const GRID_SIZE = 30;
+export const MIN_ZOOM = 0.4;
+export const MAX_ZOOM = 2.0;
+export const ZOOM_STEP = 0.1;
+
+export type WidgetTypeId =
+  | "service_link"
+  | "folder"
+  | "clock"
+  | "notes"
+  | "host_status"
+  | "bookmark_list"
+  | "weather"
+  | "iframe_embed"
+  | "rss_feed"
+  | "metrics_chart"
+  | "host_grid"
+  | "alert_feed"
+  | "ping_status"
+  | "recent_activity"
+  | "termix_uptime"
+  | "system_overview"
+  | "ssh_terminal"
+  | "quick_connect"
+  | "file_manager_widget"
+  | "docker_widget"
+  | "tunnel_widget"
+  | "calendar"
+  | "countdown"
+  | "search_bar"
+  | "text_banner"
+  | "image_widget"
+  | "markdown_notes"
+  | "custom_api"
+  | "service_grid"
+  | "dashboard_links"
+  | "search_links"
+  | "link_tree";
+
+export interface HomepageItemRow {
+  id: number;
+  userId: string;
+  typeId: WidgetTypeId;
+  title: string | null;
+  config: string;
+  createdAt: string;
+  updatedAt: string;
+}
+
+export interface HomepageLayoutEntry {
+  itemId: number;
+  x: number;
+  y: number;
+  w: number;
+  h: number;
+  zOrder?: number;
+}
+
+export interface HomepageLayoutData {
+  entries: HomepageLayoutEntry[];
+  pan: { x: number; y: number };
+  zoom: number;
+}
+
+export interface HomepageLayoutRow {
+  id: number;
+  userId: string;
+  layout: HomepageLayoutData;
+  updatedAt: string;
+}
+
+export interface CanvasWidget {
+  id: number;
+  typeId: WidgetTypeId;
+  title: string | null;
+  config: Record<string, unknown>;
+  x: number;
+  y: number;
+  w: number;
+  h: number;
+  zOrder: number;
+}
+
+// ---- Per-widget config shapes ----
+
+export interface ServiceLinkConfig {
+  url: string;
+  description?: string;
+  accentColor?: string;
+  imageUrl?: string;
+  showImage?: boolean;
+}
+
+export interface FolderConfig {
+  color?: string;
+  isExpanded: boolean;
+}
+
+export interface ClockConfig {
+  timezone?: string;
+  showSeconds: boolean;
+  format: "12h" | "24h";
+}
+
+export interface NotesConfig {
+  content: string;
+  backgroundColor?: string;
+}
+
+export type HostMetricKey =
+  | "cpu"
+  | "memory"
+  | "disk"
+  | "uptime"
+  | "network"
+  | "system"
+  | "processes";
+
+export interface HostStatusConfig {
+  hostId: number;
+  /** @deprecated use shownMetrics instead */
+  showMetrics?: boolean;
+  /** @deprecated use shownMetrics instead */
+  showDisk?: boolean;
+  shownMetrics: HostMetricKey[];
+  showSparkline?: boolean;
+}
+
+export interface BookmarkLink {
+  label: string;
+  url: string;
+}
+
+export interface BookmarkListConfig {
+  links: BookmarkLink[];
+}
+
+export interface WeatherConfig {
+  location: string;
+  unit: "C" | "F";
+  showForecast: boolean;
+}
+
+export interface IframeConfig {
+  url: string;
+  scrolling: boolean;
+}
+
+export interface RssFeedConfig {
+  feedUrl: string;
+  maxItems: number;
+  showDescription: boolean;
+}
+
+// ---- New widget configs ----
+
+export type MetricsChartMetric =
+  | "cpu"
+  | "memory"
+  | "disk"
+  | "net_rx"
+  | "net_tx";
+export type MetricsChartRange = "15m" | "1h" | "6h" | "24h";
+
+export interface MetricsChartConfig {
+  hostId: number;
+  metric: MetricsChartMetric;
+  range: MetricsChartRange;
+  showCurrentValue: boolean;
+}
+
+export interface HostGridConfig {
+  hostIds: number[];
+  showIp: boolean;
+  columns: 2 | 3 | 4;
+}
+
+export interface AlertFeedConfig {
+  maxItems: number;
+  showAcknowledged: boolean;
+}
+
+export interface PingUrl {
+  label: string;
+  url: string;
+}
+
+export interface PingStatusConfig {
+  urls: PingUrl[];
+  refreshInterval: number;
+  showLatency: boolean;
+}
+
+export type ActivityType =
+  | "terminal"
+  | "file_manager"
+  | "docker"
+  | "tunnel"
+  | "rdp"
+  | "vnc"
+  | "telnet";
+
+export interface RecentActivityConfig {
+  maxItems: number;
+  filterTypes: ActivityType[];
+  showTimestamp: boolean;
+}
+
+export interface TermixUptimeConfig {
+  showDetailed: boolean;
+}
+
+export interface SystemOverviewConfig {
+  showVersion: boolean;
+  showDbHealth: boolean;
+  showUptime: boolean;
+}
+
+export interface FileManagerWidgetConfig {
+  hostId: number;
+}
+
+export interface DockerWidgetConfig {
+  hostId: number;
+}
+
+export interface TunnelWidgetConfig {
+  hostId: number;
+}
+
+export interface SshTerminalConfig {
+  hostId: number;
+  autoConnect: boolean;
+}
+
+export type QuickConnectType =
+  | "terminal"
+  | "files"
+  | "docker"
+  | "tunnel"
+  | "host-metrics"
+  | "rdp"
+  | "vnc"
+  | "telnet";
+
+export interface QuickConnectConfig {
+  hostIds: number[];
+  connectionTypes: QuickConnectType[];
+  showStatus: boolean;
+  layout: "grid" | "list";
+}
+
+export interface CalendarConfig {
+  timezone?: string;
+  startOnMonday: boolean;
+}
+
+export interface CountdownConfig {
+  targetDate: string;
+  label: string;
+  showDays: boolean;
+  showHours: boolean;
+}
+
+export type SearchEngine = "google" | "duckduckgo" | "bing" | "custom";
+
+export interface SearchBarConfig {
+  engine: SearchEngine;
+  customUrl?: string;
+  placeholder?: string;
+  openInNewTab: boolean;
+}
+
+export type TextBannerFontSize = "sm" | "md" | "lg" | "xl";
+export type TextBannerAlign = "left" | "center" | "right";
+export type TextBannerWeight = "normal" | "semibold" | "bold";
+
+export interface TextBannerConfig {
+  text: string;
+  fontSize: TextBannerFontSize;
+  textAlign: TextBannerAlign;
+  fontWeight: TextBannerWeight;
+  backgroundColor?: string;
+}
+
+export interface ImageWidgetConfig {
+  imageUrl: string;
+  fit: "contain" | "cover" | "fill";
+  alt?: string;
+  linkUrl?: string;
+}
+
+export interface MarkdownNotesConfig {
+  content: string;
+  backgroundColor?: string;
+  renderMarkdown: boolean;
+}
+
+export type CustomApiDisplayMode = "value" | "json" | "table";
+
+export interface CustomApiConfig {
+  url: string;
+  displayField?: string;
+  label?: string;
+  unit?: string;
+  refreshInterval: number;
+  displayMode: CustomApiDisplayMode;
+  jsonPath?: string;
+}
+
+export interface ServiceGridItem {
+  label: string;
+  url: string;
+  imageUrl?: string;
+  accentColor?: string;
+}
+
+export interface ServiceGridConfig {
+  services: ServiceGridItem[];
+  columns: 2 | 3 | 4;
+  showLabels: boolean;
+  iconSize: "sm" | "md" | "lg";
+}
+
+export interface DashboardLinksConfig {
+  showIcons: boolean;
+  columns: 1 | 2 | 3;
+  maxItems?: number;
+}
+
+export interface SearchLinkShortcut {
+  label: string;
+  queryTemplate: string;
+  icon?: string;
+  accentColor?: string;
+}
+
+export interface SearchLinksConfig {
+  shortcuts: SearchLinkShortcut[];
+}
+
+export interface LinkTreeLink {
+  label: string;
+  url: string;
+  description?: string;
+}
+
+export interface LinkTreeSection {
+  heading: string;
+  links: LinkTreeLink[];
+}
+
+export interface LinkTreeConfig {
+  sections: LinkTreeSection[];
+  compact: boolean;
+}
+
+// ---- Widget registry types ----
+
+export interface WidgetComponentProps<C = Record<string, unknown>> {
+  widget: CanvasWidget;
+  config: C;
+  isReadOnly?: boolean;
+  onConfigUpdate?: (config: Record<string, unknown>) => void;
+}
+
+export interface WidgetEditFormProps<C = Record<string, unknown>> {
+  config: C;
+  onChange: (config: C) => void;
+}
+
+export interface WidgetTypeDefinition<C = Record<string, unknown>> {
+  id: WidgetTypeId;
+  name: string;
+  description: string;
+  category: "links" | "info" | "system" | "monitoring";
+  icon: React.ReactNode;
+  defaultConfig: C;
+  defaultSize: { w: number; h: number };
+  minSize: { w: number; h: number };
+  component: React.ComponentType<WidgetComponentProps<C>>;
+  editFormComponent?: React.ComponentType<WidgetEditFormProps<C>>;
+}
+
+export interface DragState {
+  widgetId: number;
+  startMouseX: number;
+  startMouseY: number;
+  startWidgetX: number;
+  startWidgetY: number;
+}
+
+export interface ResizeState {
+  widgetId: number;
+  startMouseX: number;
+  startMouseY: number;
+  startW: number;
+  startH: number;
+}
+
+export interface ContextMenuAnchor {
+  top: number;
+  bottom: number;
+  left: number;
+  right: number;
+  width: number;
+  height: number;
+}
+
+export interface ContextMenuState {
+  visible: boolean;
+  screenX: number;
+  screenY: number;
+  canvasX: number;
+  canvasY: number;
+  anchorRect?: ContextMenuAnchor;
+}
@@ -21,7 +21,9 @@ export type HostMetricManagerId =
  | "health_check"
  | "disk_breakdown"
  | "systemd_timers"
-  | "top_memory";
+  | "top_memory"
+  | "wireguard_manager"
+  | "tailscale_manager";

 export type HostMetricsCardId = HostMetricCardId | HostMetricManagerId;

@@ -51,6 +53,7 @@ export const METRIC_CARD_IDS: HostMetricCardId[] = [
  "processes",
  "ports",
  "firewall",
+  "temperature",
 ];

 export const MANAGER_CARD_IDS: HostMetricManagerId[] = [
@@ -66,6 +69,8 @@ export const MANAGER_CARD_IDS: HostMetricManagerId[] = [
  "disk_breakdown",
  "systemd_timers",
  "top_memory",
+  "wireguard_manager",
+  "tailscale_manager",
 ];

 export function isMetricCardId(id: string): id is HostMetricCardId {
@@ -96,6 +101,7 @@ const DEFAULT_COLSPAN: Partial<Record<HostMetricsCardId, HostMetricsColSpan>> =
    uptime: 1,
    system: 1,
    network: 1,
+    temperature: 1,
    processes: 2,
    ports: 2,
    firewall: 2,
@@ -102,7 +102,14 @@ export interface Host {
  folder: string;
  tags: string[];
  pin: boolean;
-  authType: "password" | "key" | "credential" | "none" | "opkssh" | "tailscale";
+  authType:
+    | "password"
+    | "key"
+    | "credential"
+    | "none"
+    | "opkssh"
+    | "tailscale"
+    | "agent";
  useWarpgate?: boolean;
  password?: string;
  key?: string;
@@ -161,6 +168,7 @@ export interface Host {
  security?: string;
  ignoreCert?: boolean;
  guacamoleConfig?: string | Record<string, unknown>;
+  dockerConfig?: Record<string, unknown> | null;

  enableSsh?: boolean;
  enableRdp?: boolean;
@@ -221,7 +229,14 @@ export interface HostData {
  folder?: string;
  tags?: string[];
  pin?: boolean;
-  authType: "password" | "key" | "credential" | "none" | "opkssh" | "tailscale";
+  authType:
+    | "password"
+    | "key"
+    | "credential"
+    | "none"
+    | "opkssh"
+    | "tailscale"
+    | "agent";
  useWarpgate?: boolean;
  password?: string;
  key?: File | null;
@@ -530,6 +545,7 @@ export interface FileItem {
  sshSessionId?: string;
  size?: number;
  modified?: string;
+  modifiedTimestamp?: number;
  permissions?: string;
  owner?: string;
  group?: string;
@@ -622,6 +638,30 @@ export interface TerminalConfig {
  allowLegacyAlgorithms?: boolean;
  linkClickBehavior?: "confirm" | "direct";
  useSSHTitle?: boolean;
+  agentSocketPath?: string;
+  customThemeColors?: {
+    background: string;
+    foreground: string;
+    cursor: string;
+    cursorAccent: string;
+    selectionBackground: string;
+    black: string;
+    red: string;
+    green: string;
+    yellow: string;
+    blue: string;
+    magenta: string;
+    cyan: string;
+    white: string;
+    brightBlack: string;
+    brightRed: string;
+    brightGreen: string;
+    brightYellow: string;
+    brightBlue: string;
+    brightMagenta: string;
+    brightCyan: string;
+    brightWhite: string;
+  };
 }

 // ============================================================================
@@ -656,6 +696,7 @@ export interface TabContextTab {
 export interface TerminalRefHandle {
  disconnect?: () => void;
  reconnect?: () => void;
+  isConnected?: () => boolean;
  fit?: () => void;
  sendInput?: (data: string) => void;
  notifyResize?: () => void;
@@ -1045,6 +1086,7 @@ export interface DockerLogOptions {
 export interface DockerValidation {
  available: boolean;
  version?: string;
+  runtime?: "docker" | "podman";
  error?: string;
  code?: string;
 }
@@ -8,7 +8,8 @@ export type WidgetType =
  | "system"
  | "login_stats"
  | "ports"
-  | "firewall";
+  | "firewall"
+  | "temperature";

 export interface ListeningPort {
  protocol: "tcp" | "udp";
@@ -49,6 +50,17 @@ export interface FirewallMetrics {
  chains: FirewallChain[];
 }

+export interface TemperatureSensor {
+  label: string;
+  celsius: number;
+}
+
+export interface TemperatureMetrics {
+  source: "sysfs" | "sensors" | "none";
+  highestCelsius: number | null;
+  sensors: TemperatureSensor[];
+}
+
 export interface StatsConfig {
  enabledWidgets: WidgetType[];
  statusCheckEnabled: boolean;
@@ -72,6 +84,7 @@ export const DEFAULT_STATS_CONFIG: StatsConfig = {
    "processes",
    "ports",
    "firewall",
+    "temperature",
  ],
  statusCheckEnabled: true,
  statusCheckInterval: 30,
@@ -10,9 +10,18 @@ export type Host = {
  ram: number | null;
  lastAccess: string;
  tags?: string[];
-  authType: "password" | "key" | "credential" | "none" | "opkssh" | "tailscale";
+  authType:
+    | "password"
+    | "key"
+    | "credential"
+    | "none"
+    | "opkssh"
+    | "tailscale"
+    | "vault"
+    | "agent";
  useWarpgate?: boolean;
  credentialId?: string;
+  vaultProfileId?: string;
  overrideCredentialUsername?: boolean;
  password?: string;
  hasPassword?: boolean;
@@ -56,6 +65,7 @@ export type Host = {
    environmentVariables: { key: string; value: string }[];
    startupSnippetId?: number | null;
    linkClickBehavior?: "confirm" | "direct";
+    agentSocketPath?: string;
  };

  useSocks5?: boolean;
@@ -95,6 +105,9 @@ export type Host = {
  defaultPath?: string;

  enableDocker: boolean;
+  dockerConfig?: {
+    runtime?: "docker" | "podman";
+  } | null;
  enableProxmox: boolean;
  enableTmuxMonitor: boolean;
  proxmoxConfig?: {
@@ -150,6 +163,7 @@ export type Credential = {
  username: string;
  type: "password" | "key";
  value?: string;
+  password?: string;
  publicKey?: string;
  passphrase?: string;
  description?: string;
@@ -157,6 +171,26 @@ export type Credential = {
  tags?: string[];
 };

+// HashiCorp Vault SSH signer profile — shareable connection settings only
+// (no secrets). Users authenticate to Vault via OIDC at connect time.
+export type VaultProfile = {
+  id: string;
+  name: string;
+  description?: string;
+  folder?: string;
+  tags?: string[];
+  vaultAddr: string;
+  vaultNamespace?: string;
+  oidcMount?: string;
+  oidcRole?: string;
+  sshMount?: string;
+  sshRole: string;
+  validPrincipals?: string;
+  keyType?: string;
+  shared: boolean;
+  owned: boolean;
+};
+
 export type HostFolder = {
  name: string;
  children: (Host | HostFolder)[];
@@ -179,7 +213,17 @@ export type TabType =
  | "docker"
  | "tunnel"
  | "network_graph"
-  | "tmux_monitor"; // --- tmux-monitor ---
+  | "tmux_monitor" // --- tmux-monitor ---
+  | "serial"
+  | "homepage";
+
+export type SerialConfig = {
+  path: string;
+  baudRate: number;
+  dataBits: 5 | 6 | 7 | 8;
+  stopBits: 1 | 2;
+  parity: "none" | "even" | "odd";
+};

 export type TunnelStatusValue =
  | "CONNECTED"
@@ -213,7 +257,10 @@ export type Tab = {
  openedAt: number;
  restoredSessionId?: string | null;
  initialFilePath?: string;
+  serialConfig?: SerialConfig;
  terminalRef?: import("react").RefObject<{
+    disconnect?: () => void;
+    isConnected?: () => boolean;
    sendInput?: (data: string) => void;
    reconnect?: () => void;
    fit?: () => void;
@@ -247,7 +294,8 @@ export type DashboardCardId =
  | "host_status"
  | "recent_activity"
  | "network_graph"
-  | "service_links";
+  | "service_links"
+  | "homepage_preview";

 export type DashboardCardConfig = {
  id: DashboardCardId;