v26.10.3 (#1692)

* feat: shell controller, TabStage, layout and theme plugins with repair view

* feat: move the classic layout into its own bundled plugin

* feat: move color themes into a bundled themes plugin

* fix: plugin tests and type checks work with a linked sdk

* fix: home tab, layout switch and missing layout fallbacks for looks

* chore: add classic layout and themes to the readme

* chore: drop example plugin links from the plugin guide

* feat: plugin filters by type, paged browse, hide plugins needing newer termix

* feat: move desktop, status, import, audit and branding features into plugins

* feat: host lock api so a plugin can load hosts from a config file (#1581)

* chore: add hosts config to the plugin table

* feat: login policy hook for plugins and optional https redirect (#1584)

* chore: add login security to the plugin table

* feat: api key socket tickets so a master can open remote sessions (#1654)

* feat: sync moves to a plugin, desktop gets multiple accounts (#1580, #1654)

* chore: add sync to the plugin table

* feat: move the sync screens and wizard out of core into the plugin (#1580)

* fix: add a neutral linked desktop hook for plugins (#1580)

* fix: show the linked account's name and admin flag in the app (#1580)

* feat: ssh transport providers, core ssh relay and plugin folders api

* feat: support FIDO2 security keys through ssh agent

* feat: add companion panels beside host tabs

* feat: mTLS client certificates for desktop server links

* feat: native web view for plugins in the desktop app

* fix: detect the desktop link window by Electron's default user agent

Fixes #1675

* fix: changelog for desktop link fix

* fix: keep text primary keys in the plugin data export

* fix: ship sharp binaries for Windows arm64 builds

* feat: client cert on the sync link types (sdk 1.0.18)

* chore: update translations

* feat: themed title bar for the desktop app (#1690)

* chore: changelog for the themed title bar

* fix: draw the title bar in the sidebar color

* feat: per host layout for the terminal panel bar

* chore: sdk 1.0.19 for the panel bar layout

* chore: bundle all 43 plugins for 26.10.3

* chore: update translations

---------

Co-authored-by: SirHephaistos <60616553+SirHephaistos@users.noreply.github.com>
Co-authored-by: Giovanny Aranda <garanda21@gmail.com>

src/ui/lib/app-version.ts

@@ -0,0 +1,3 @@
+/** The version of this build, empty in a dev build. */
+export const APP_VERSION: string | undefined =
+  import.meta.env.VITE_APP_VERSION || undefined;

src/ui/lib/embedded-frame.ts

@@ -16,14 +16,20 @@ export function isInMobileWebView(): boolean {
   );
 }
 
+// The desktop app's own user agent. The link window frames the server
+// cross-origin, and Electron does not carry webContents.setUserAgent into
+// such a frame, so there navigator.userAgent is Electron's default, which
+// still names the app: "... termix/26.10.2 Chrome/... Electron/43.7.7 ...".
+const DESKTOP_USER_AGENT = /Termix-Desktop\/|\btermix\/[\w.-]+ .*\bElectron\//i;
+
 // Being framed alone is not enough: any site could frame this page and
-// receive the token posted to window.parent. The desktop app tags every
-// request and frame with its own user agent, which a web page cannot fake
-// in someone else's browser.
+// receive the token posted to window.parent. The desktop app's user agent,
+// in either form above, is something a web page cannot fake in someone
+// else's browser.
 export function isInElectronWebView(): boolean {
   if (isInMobileWebView()) return false;
   if ((window as EmbeddedFrameWindow).IS_ELECTRON_WEBVIEW) return true;
-  if (!/Termix-Desktop\//.test(navigator.userAgent)) return false;
+  if (!DESKTOP_USER_AGENT.test(navigator.userAgent)) return false;
   try {
     if (window.self !== window.top) return true;
   } catch {

src/ui/lib/linked-server.ts

@@ -1,3 +1,4 @@
+import { useEffect, useState } from "react";
 import { isElectron } from "@/lib/electron";
 import { authApi } from "@/main-axios";
 import { SYNC_CHANGED_EVENT } from "@/lib/sync-events";
@@ -48,3 +49,22 @@ export function notifySyncChanged(): void {
   cached = null;
   window.dispatchEvent(new CustomEvent(SYNC_CHANGED_EVENT));
 }
+
+/** Whether this desktop is linked to a server, kept current as it changes. */
+export function useDesktopLinked(): boolean {
+  const [linked, setLinked] = useState(false);
+  useEffect(() => {
+    let live = true;
+    const read = () =>
+      void getLinkedSession().then((session) => {
+        if (live) setLinked(!!session);
+      });
+    read();
+    window.addEventListener(SYNC_CHANGED_EVENT, read);
+    return () => {
+      live = false;
+      window.removeEventListener(SYNC_CHANGED_EVENT, read);
+    };
+  }, []);
+  return linked;
+}

src/ui/lib/plugin-i18n.ts

@@ -1,4 +1,8 @@
-import type { TFunction } from "i18next";
+/** The part of a translate function these helpers use. */
+export type Translator = (
+  key: string,
+  options?: Record<string, unknown>,
+) => string;
 
 /**
  * Where a plugin's i18n keys resolve from.
@@ -28,7 +32,7 @@ export function pluginKey(
  * listed in a registry, shows the manifest name.
  */
 export function pluginName(
-  t: TFunction,
+  t: Translator,
   plugin: { id: string; name: string },
 ): string {
   return t(pluginKey(plugin.id, "plugin.name"), { defaultValue: plugin.name });
@@ -36,7 +40,7 @@ export function pluginName(
 
 /** Same as pluginName, for "plugin.description". */
 export function pluginDescription(
-  t: TFunction,
+  t: Translator,
   plugin: { id: string; description?: string | null },
 ): string {
   return t(pluginKey(plugin.id, "plugin.description"), {

src/ui/lib/role-label.ts

@@ -1,8 +1,8 @@
-import type { TFunction } from "i18next";
+import type { Translator } from "./plugin-i18n";
 
 /** System roles store an i18n key as their display name. */
 export function roleLabel<T extends string | null | undefined>(
-  t: TFunction,
+  t: Translator,
   displayName: T,
 ): T | string {
   return typeof displayName === "string" &&

src/ui/lib/sync-status.ts

@@ -1,86 +0,0 @@
-import { isElectron } from "@/lib/electron";
-import { getSyncStatus, type SyncStatus } from "@/api/sync-api";
-import { notifySyncChanged } from "@/lib/linked-server";
-
-/**
- * The desktop's sync status, polled from the embedded backend while anything
- * shows it. When a pass finishes, the views that show synced data are told
- * to reload.
- */
-
-const IDLE_MS = 15_000;
-const BUSY_MS = 2_000;
-
-let snapshot: SyncStatus | null = null;
-let timer: ReturnType<typeof setTimeout> | null = null;
-let lastSyncAt: string | null | undefined;
-const listeners = new Set<() => void>();
-
-function emit(): void {
-  for (const listener of listeners) listener();
-}
-
-function announce(): void {
-  notifySyncChanged();
-  window.dispatchEvent(new CustomEvent("hosts:refresh"));
-  window.dispatchEvent(new CustomEvent("termix:hosts-changed"));
-  window.dispatchEvent(new CustomEvent("termix:credentials-changed"));
-  window.dispatchEvent(new CustomEvent("termix:plugins-changed"));
-}
-
-async function poll(): Promise<void> {
-  timer = null;
-  try {
-    const next = await getSyncStatus();
-    const syncedAt = next.lastSyncAt ?? null;
-    if (lastSyncAt !== undefined && syncedAt !== lastSyncAt) announce();
-    if (snapshot && snapshot.linked !== next.linked) notifySyncChanged();
-    lastSyncAt = syncedAt;
-    snapshot = next;
-    emit();
-  } catch {
-    // The backend may still be starting; the next poll tries again.
-  }
-  schedule();
-}
-
-function schedule(delay?: number): void {
-  if (listeners.size === 0 || timer) return;
-  const busy = snapshot?.status === "syncing" || !!snapshot?.pending;
-  timer = setTimeout(() => void poll(), delay ?? (busy ? BUSY_MS : IDLE_MS));
-}
-
-export function subscribeSyncStatus(listener: () => void): () => void {
-  listeners.add(listener);
-  if (isElectron() && listeners.size === 1 && !timer) void poll();
-  return () => {
-    listeners.delete(listener);
-    if (listeners.size === 0 && timer) {
-      clearTimeout(timer);
-      timer = null;
-    }
-  };
-}
-
-export function getSyncStatusSnapshot(): SyncStatus | null {
-  return snapshot;
-}
-
-/** Takes a status a request already returned, and checks again soon. */
-export function setSyncStatus(next: SyncStatus): void {
-  snapshot = next;
-  if (lastSyncAt !== undefined && (next.lastSyncAt ?? null) !== lastSyncAt) {
-    announce();
-  }
-  lastSyncAt = next.lastSyncAt ?? null;
-  emit();
-  if (timer) clearTimeout(timer);
-  timer = null;
-  schedule(BUSY_MS);
-}
-
-export function refreshSyncStatus(): void {
-  if (timer) clearTimeout(timer);
-  timer = null;
-  void poll();
-}