release-2.5.1 (#1067)

* chore(deps): bump node from 24-slim to 26-slim in /docker in the docker-major-updates group (#1021) * chore: fix release workflow to merge docs branch * fix: svg donation generator push fail * fix: svg donation generator push fail * Update termix.rb * fix: svg donation generator push fail * chore: move donation badge to badges branch to avoid ruleset conflicts * chore: remove unneeded token from donation badge workflow * chore: debug donation badge commit step * fix: escape < character in donation SVG * fix: point donation badge to badges branch * chore: remove unused donation badge svg from main * Add Rack Genius logo to README Added Rack Genius logo to the README. * chore: improve donation goal svg generator to include stablecoins * chore: donation goal generator syntax error * chore: donation goal generator incorrect docs url usage * chore(deps): bump node in /docker in the docker-major-updates group Bumps the docker-major-updates group in /docker with 1 update: node. Updates `node` from 24-slim to 26-slim --- updated-dependencies: - dependency-name: node dependency-version: 26-slim dependency-type: direct:production dependency-group: docker-major-updates ... Signed-off-by: dependabot[bot] <support@github.com> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: LukeGus <bugattiguy527@gmail.com> Co-authored-by: Luke Gustafson <88517757+LukeGus@users.noreply.github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-dev): bump the dev-patch-updates group with 24 updates (#1023) * chore: fix release workflow to merge docs branch * fix: svg donation generator push fail * fix: svg donation generator push fail * Update termix.rb * fix: svg donation generator push fail * chore: move donation badge to badges branch to avoid ruleset conflicts * chore: remove unneeded token from donation badge workflow * chore: debug donation badge commit step * fix: escape < character in donation SVG * fix: point donation badge to badges branch * chore: remove unused donation badge svg from main * Add Rack Genius logo to README Added Rack Genius logo to the README. * chore: improve donation goal svg generator to include stablecoins * chore: donation goal generator syntax error * chore: donation goal generator incorrect docs url usage * chore(deps-dev): bump the dev-patch-updates group with 24 updates Bumps the dev-patch-updates group with 24 updates: | Package | From | To | | --- | --- | --- | | [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.1` | `2.5.2` | | [@codemirror/commands](https://github.com/codemirror/commands) | `6.10.3` | `6.10.4` | | [@codemirror/view](https://github.com/codemirror/view) | `6.43.1` | `6.43.5` | | [@radix-ui/react-accordion](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/accordion) | `1.2.14` | `1.2.15` | | [@radix-ui/react-alert-dialog](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/alert-dialog) | `1.1.17` | `1.1.18` | | [@radix-ui/react-checkbox](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/checkbox) | `1.3.5` | `1.3.6` | | [@radix-ui/react-dialog](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dialog) | `1.1.17` | `1.1.18` | | [@radix-ui/react-dropdown-menu](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dropdown-menu) | `2.1.18` | `2.1.19` | | [@radix-ui/react-label](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/label) | `2.1.10` | `2.1.11` | | [@radix-ui/react-popover](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/popover) | `1.1.17` | `1.1.18` | | [@radix-ui/react-progress](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/progress) | `1.1.10` | `1.1.11` | | [@radix-ui/react-scroll-area](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/scroll-area) | `1.2.12` | `1.2.13` | | [@radix-ui/react-select](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/select) | `2.3.1` | `2.3.2` | | [@radix-ui/react-separator](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/separator) | `1.1.10` | `1.1.11` | | [@radix-ui/react-slider](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/slider) | `1.4.1` | `1.4.2` | | [@radix-ui/react-switch](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/switch) | `1.3.1` | `1.3.2` | | [@radix-ui/react-tabs](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/tabs) | `1.1.15` | `1.1.16` | | [@radix-ui/react-tooltip](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/tooltip) | `1.2.10` | `1.2.11` | | [@tailwindcss/vite](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-vite) | `4.3.1` | `4.3.2` | | [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.0.2` | `6.0.3` | | [i18next](https://github.com/i18next/i18next) | `26.3.1` | `26.3.4` | | [radix-ui](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/radix-ui) | `1.6.0` | `1.6.1` | | [sharp](https://github.com/lovell/sharp) | `0.35.2` | `0.35.3` | | [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.3.1` | `4.3.2` | Updates `@biomejs/biome` from 2.5.1 to 2.5.2 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.2/packages/@biomejs/biome) Updates `@codemirror/commands` from 6.10.3 to 6.10.4 - [Changelog](https://github.com/codemirror/commands/blob/main/CHANGELOG.md) - [Commits](https://github.com/codemirror/commands/commits) Updates `@codemirror/view` from 6.43.1 to 6.43.5 - [Changelog](https://github.com/codemirror/view/blob/main/CHANGELOG.md) - [Commits](https://github.com/codemirror/view/commits) Updates `@radix-ui/react-accordion` from 1.2.14 to 1.2.15 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/accordion/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/accordion) Updates `@radix-ui/react-alert-dialog` from 1.1.17 to 1.1.18 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/alert-dialog/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/alert-dialog) Updates `@radix-ui/react-checkbox` from 1.3.5 to 1.3.6 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/checkbox/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/checkbox) Updates `@radix-ui/react-dialog` from 1.1.17 to 1.1.18 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dialog/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dialog) Updates `@radix-ui/react-dropdown-menu` from 2.1.18 to 2.1.19 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dropdown-menu/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dropdown-menu) Updates `@radix-ui/react-label` from 2.1.10 to 2.1.11 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/label/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/label) Updates `@radix-ui/react-popover` from 1.1.17 to 1.1.18 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/popover/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/popover) Updates `@radix-ui/react-progress` from 1.1.10 to 1.1.11 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/progress/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/progress) Updates `@radix-ui/react-scroll-area` from 1.2.12 to 1.2.13 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/scroll-area/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/scroll-area) Updates `@radix-ui/react-select` from 2.3.1 to 2.3.2 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/select/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/select) Updates `@radix-ui/react-separator` from 1.1.10 to 1.1.11 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/separator/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/separator) Updates `@radix-ui/react-slider` from 1.4.1 to 1.4.2 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/slider/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/slider) Updates `@radix-ui/react-switch` from 1.3.1 to 1.3.2 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/switch/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/switch) Updates `@radix-ui/react-tabs` from 1.1.15 to 1.1.16 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/tabs/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/tabs) Updates `@radix-ui/react-tooltip` from 1.2.10 to 1.2.11 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/tooltip/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/tooltip) Updates `@tailwindcss/vite` from 4.3.1 to 4.3.2 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.2/packages/@tailwindcss-vite) Updates `@vitejs/plugin-react` from 6.0.2 to 6.0.3 - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.3/packages/plugin-react) Updates `i18next` from 26.3.1 to 26.3.4 - [Release notes](https://github.com/i18next/i18next/releases) - [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md) - [Commits](https://github.com/i18next/i18next/compare/v26.3.1...v26.3.4) Updates `radix-ui` from 1.6.0 to 1.6.1 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/radix-ui/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/radix-ui) Updates `sharp` from 0.35.2 to 0.35.3 - [Release notes](https://github.com/lovell/sharp/releases) - [Commits](https://github.com/lovell/sharp/compare/v0.35.2...v0.35.3) Updates `tailwindcss` from 4.3.1 to 4.3.2 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.2/packages/tailwindcss) --- updated-dependencies: - dependency-name: "@biomejs/biome" dependency-version: 2.5.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@codemirror/commands" dependency-version: 6.10.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@codemirror/view" dependency-version: 6.43.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@radix-ui/react-accordion" dependency-version: 1.2.15 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@radix-ui/react-alert-dialog" dependency-version: 1.1.18 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@radix-ui/react-checkbox" dependency-version: 1.3.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@radix-ui/react-dialog" dependency-version: 1.1.18 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@radix-ui/react-dropdown-menu" dependency-version: 2.1.19 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@radix-ui/react-label" dependency-version: 2.1.11 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@radix-ui/react-popover" dependency-version: 1.1.18 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@radix-ui/react-progress" dependency-version: 1.1.11 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@radix-ui/react-scroll-area" dependency-version: 1.2.13 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@radix-ui/react-select" dependency-version: 2.3.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@radix-ui/react-separator" dependency-version: 1.1.11 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@radix-ui/react-slider" dependency-version: 1.4.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@radix-ui/react-switch" dependency-version: 1.3.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@radix-ui/react-tabs" dependency-version: 1.1.16 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@radix-ui/react-tooltip" dependency-version: 1.2.11 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@tailwindcss/vite" dependency-version: 4.3.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@vitejs/plugin-react" dependency-version: 6.0.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: i18next dependency-version: 26.3.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: radix-ui dependency-version: 1.6.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: sharp dependency-version: 0.35.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: tailwindcss dependency-version: 4.3.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates ... Signed-off-by: dependabot[bot] <support@github.com> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: LukeGus <bugattiguy527@gmail.com> Co-authored-by: Luke Gustafson <88517757+LukeGus@users.noreply.github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump the prod-patch-updates group with 2 updates (#1025) * chore: fix release workflow to merge docs branch * fix: svg donation generator push fail * fix: svg donation generator push fail * Update termix.rb * fix: svg donation generator push fail * chore: move donation badge to badges branch to avoid ruleset conflicts * chore: remove unneeded token from donation badge workflow * chore: debug donation badge commit step * fix: escape < character in donation SVG * fix: point donation badge to badges branch * chore: remove unused donation badge svg from main * Add Rack Genius logo to README Added Rack Genius logo to the README. * chore: improve donation goal svg generator to include stablecoins * chore: donation goal generator syntax error * chore: donation goal generator incorrect docs url usage * chore(deps): bump the prod-patch-updates group with 2 updates Bumps the prod-patch-updates group with 2 updates: [axios](https://github.com/axios/axios) and [nanoid](https://github.com/ai/nanoid). Updates `axios` from 1.18.0 to 1.18.1 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](https://github.com/axios/axios/compare/v1.18.0...v1.18.1) Updates `nanoid` from 5.1.15 to 5.1.16 - [Release notes](https://github.com/ai/nanoid/releases) - [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md) - [Commits](https://github.com/ai/nanoid/compare/5.1.15...5.1.16) --- updated-dependencies: - dependency-name: axios dependency-version: 1.18.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-patch-updates - dependency-name: nanoid dependency-version: 5.1.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-patch-updates ... Signed-off-by: dependabot[bot] <support@github.com> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: LukeGus <bugattiguy527@gmail.com> Co-authored-by: Luke Gustafson <88517757+LukeGus@users.noreply.github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump the prod-minor-updates group with 3 updates (#1026) * chore: fix release workflow to merge docs branch * fix: svg donation generator push fail * fix: svg donation generator push fail * Update termix.rb * fix: svg donation generator push fail * chore: move donation badge to badges branch to avoid ruleset conflicts * chore: remove unneeded token from donation badge workflow * chore: debug donation badge commit step * fix: escape < character in donation SVG * fix: point donation badge to badges branch * chore: remove unused donation badge svg from main * Add Rack Genius logo to README Added Rack Genius logo to the README. * chore: improve donation goal svg generator to include stablecoins * chore: donation goal generator syntax error * chore: donation goal generator incorrect docs url usage * chore(deps): bump the prod-minor-updates group with 3 updates Bumps the prod-minor-updates group with 3 updates: [js-yaml](https://github.com/nodeca/js-yaml), [motion](https://github.com/motiondivision/motion) and [undici](https://github.com/nodejs/undici). Updates `js-yaml` from 5.0.0 to 5.2.1 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](https://github.com/nodeca/js-yaml/compare/5.0.0...5.2.1) Updates `motion` from 12.40.0 to 12.42.2 - [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md) - [Commits](https://github.com/motiondivision/motion/compare/v12.40.0...v12.42.2) Updates `undici` from 8.5.0 to 8.7.0 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](https://github.com/nodejs/undici/compare/v8.5.0...v8.7.0) --- updated-dependencies: - dependency-name: js-yaml dependency-version: 5.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-minor-updates - dependency-name: motion dependency-version: 12.42.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-minor-updates - dependency-name: undici dependency-version: 8.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-minor-updates ... Signed-off-by: dependabot[bot] <support@github.com> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: LukeGus <bugattiguy527@gmail.com> Co-authored-by: Luke Gustafson <88517757+LukeGus@users.noreply.github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-dev): bump electron from 42.4.1 to 43.0.0 in the major-updates group (#1027) * chore: fix release workflow to merge docs branch * fix: svg donation generator push fail * fix: svg donation generator push fail * Update termix.rb * fix: svg donation generator push fail * chore: move donation badge to badges branch to avoid ruleset conflicts * chore: remove unneeded token from donation badge workflow * chore: debug donation badge commit step * fix: escape < character in donation SVG * fix: point donation badge to badges branch * chore: remove unused donation badge svg from main * Add Rack Genius logo to README Added Rack Genius logo to the README. * chore: improve donation goal svg generator to include stablecoins * chore: donation goal generator syntax error * chore: donation goal generator incorrect docs url usage * chore(deps-dev): bump electron in the major-updates group Bumps the major-updates group with 1 update: [electron](https://github.com/electron/electron). Updates `electron` from 42.4.1 to 43.0.0 - [Release notes](https://github.com/electron/electron/releases) - [Commits](https://github.com/electron/electron/compare/v42.4.1...v43.0.0) --- updated-dependencies: - dependency-name: electron dependency-version: 43.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: major-updates ... Signed-off-by: dependabot[bot] <support@github.com> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: LukeGus <bugattiguy527@gmail.com> Co-authored-by: Luke Gustafson <88517757+LukeGus@users.noreply.github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Fix MC syntax highlighting artifacts (#996) * Filter dashboard status hosts (#997) * Persist dashboard service link changes (#999) * Fix snippet text overflow (#1000) * Persist remote desktop credential auth (#1001) * Guard language switching failures (#1002) * Resolve tunnel source credentials (#1003) * Support Vault auth for monitors (#1004) * Fix Windows file delete command (#1005) * Fix release artifact checkout ref (#1006) * Fix command palette escape in fullscreen (#1008) * Fix alerts and audit log data normalization (#1010) * Fix macOS VNC protocol negotiation (#1012) * Fix port knocking before SSH connect (#1013) * Allow Escape to close link confirmation (#1014) * Prevent Electron modifier wheel zoom (#1016) * Fix credential auth optional password (#1009) * Retry transient terminal DNS lookups (#1011) * Retry transient terminal DNS lookups * Apply DNS retry to SSH entry points * Fix OIDC redirect forwarded port handling (#1007) * Preserve recent open tabs on startup (#1015) * Fix fish prompt OSC highlighting (#998) * Fix terminal font selection (#1018) * fix: font legibility (#1019) * chore: fix release workflow to merge docs branch * fix: svg donation generator push fail * fix: svg donation generator push fail * Update termix.rb * fix: svg donation generator push fail * chore: move donation badge to badges branch to avoid ruleset conflicts * chore: remove unneeded token from donation badge workflow * chore: debug donation badge commit step * fix: escape < character in donation SVG * fix: point donation badge to badges branch * chore: remove unused donation badge svg from main * Add Rack Genius logo to README Added Rack Genius logo to the README. * chore: improve donation goal svg generator to include stablecoins * chore: donation goal generator syntax error * chore: donation goal generator incorrect docs url usage * fix: font legibility Text was entirely unreadable in places for me. Especially with themes like Catppuccin. The muted-foreground text and the tags too similiar to the background. --------- Co-authored-by: LukeGus <bugattiguy527@gmail.com> Co-authored-by: Luke Gustafson <88517757+LukeGus@users.noreply.github.com> Co-authored-by: russell <git@0896c69e.com> * fix(file-manager): chunked uploads fail with 'Expected multipart/form-data request' (#1020) * chore: fix release workflow to merge docs branch * fix: svg donation generator push fail * fix: svg donation generator push fail * Update termix.rb * fix: svg donation generator push fail * chore: move donation badge to badges branch to avoid ruleset conflicts * chore: remove unneeded token from donation badge workflow * chore: debug donation badge commit step * fix: escape < character in donation SVG * fix: point donation badge to badges branch * chore: remove unused donation badge svg from main * Add Rack Genius logo to README Added Rack Genius logo to the README. * chore: improve donation goal svg generator to include stablecoins * chore: donation goal generator syntax error * chore: donation goal generator incorrect docs url usage * fix(file-manager): use postForm for chunked uploads so multipart content-type is sent The fileManagerApi axios instance defaults to Content-Type: application/json. Axios 1.x's default transformRequest converts a FormData body to JSON whenever the request content type is application/json, so every chunk POSTed to /ssh/uploadFileChunk arrived as a JSON body like {"chunk":{}} and the backend rejected it with 400 'Expected multipart/form-data request'. This breaks all uploads of files larger than the 1.5 GiB chunking threshold. The non-chunked path already uses postForm for /ssh/uploadFileStream; use it for the chunk path too so axios keeps the FormData intact and the browser sets the multipart boundary. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> --------- Co-authored-by: LukeGus <bugattiguy527@gmail.com> Co-authored-by: Luke Gustafson <88517757+LukeGus@users.noreply.github.com> Co-authored-by: Claude Fable 5 <noreply@anthropic.com> * feat: implement OIDC back-channel logout support with session management (#1028) * feat: implement OIDC back-channel logout support with session management * Fix OIDC back-channel logout handling * Require logout token replay identifiers --------- Co-authored-by: ZacharyZcR <zacharyzcr1984@gmail.com> * Add API key host enrollment endpoint (#1029) * Fix tmux detection for non-POSIX shells (#1030) * Fix OPKSSH js-yaml ESM import (#1031) * Fix Android Vietnamese IME input (#1032) * Fix Firefox RDP clipboard paste (#1033) * Fix Proxmox discovery over HTTPS (#1041) * Fix external editor actions in file preview (#1042) * Allow pinned hosts with name sorting (#1043) * Fix Firefox desktop OIDC callback (#1044) * feat(session): add recording and replay (#1049) * Fix status checks through jump hosts (#1045) * Add terminal font size shortcuts (#1047) * feat: add Open File Manager to tab right-click menu (#1051) Co-authored-by: SankeerthNara <sankeerthnara@gmail.com> * perf: frontend request cache, poll pause, and code-split shell (#1052) Host/status caching, shell code-split, SSH pool waits, host-metrics concurrency, background-tab idle, per-host status subscriptions, homepage poll quieting, and virtualized host sidebar + file manager lists. * Merge commit from fork * Merge commit from fork * Merge commit from fork * Merge commit from fork * Merge commit from fork * Merge commit from fork * Merge commit from fork * Merge commit from fork * Merge commit from fork * Merge commit from fork * Merge commit from fork * Merge commit from fork * feat: save quick connect sessions as hosts (#1055) * fix: restore sudo password autofill settings (#1056) * fix: preserve file editor position on save (#1057) * fix: sync cloud preference storage mode (#1058) * fix: render RDP sessions at native pixel density (#1059) * fix: restore database import in embedded desktop mode (#1060) * Update Auto-complete.tsx (#1061) * chore: fix release workflow to merge docs branch * fix: svg donation generator push fail * fix: svg donation generator push fail * Update termix.rb * fix: svg donation generator push fail * chore: move donation badge to badges branch to avoid ruleset conflicts * chore: remove unneeded token from donation badge workflow * chore: debug donation badge commit step * fix: escape < character in donation SVG * fix: point donation badge to badges branch * chore: remove unused donation badge svg from main * Add Rack Genius logo to README Added Rack Genius logo to the README. * chore: improve donation goal svg generator to include stablecoins * chore: donation goal generator syntax error * chore: donation goal generator incorrect docs url usage * chore: donation bar reporting wrong result * feat: add Open File Manager to tab right-click menu (#1046) * Revert "feat: add Open File Manager to tab right-click menu (#1046)" (#1050) This reverts commit 0712fdd731. * Remove donation badge from README Removed donation badge from README. * Delete .github/workflows/donation-goal.yml * Update Auto-complete.tsx --------- Co-authored-by: LukeGus <bugattiguy527@gmail.com> Co-authored-by: Luke Gustafson <88517757+LukeGus@users.noreply.github.com> Co-authored-by: ZacharyZcR <zacharyzcr1984@gmail.com> * feat(auth): opt-in OIDC DEK unlock for API-key requests (ALLOW_APIKEY_DATA_UNLOCK) (#1064) * chore: fix release workflow to merge docs branch * fix: svg donation generator push fail * fix: svg donation generator push fail * Update termix.rb * fix: svg donation generator push fail * chore: move donation badge to badges branch to avoid ruleset conflicts * chore: remove unneeded token from donation badge workflow * chore: debug donation badge commit step * fix: escape < character in donation SVG * fix: point donation badge to badges branch * chore: remove unused donation badge svg from main * Add Rack Genius logo to README Added Rack Genius logo to the README. * chore: improve donation goal svg generator to include stablecoins * chore: donation goal generator syntax error * chore: donation goal generator incorrect docs url usage * chore: donation bar reporting wrong result * feat: add Open File Manager to tab right-click menu (#1046) * Revert "feat: add Open File Manager to tab right-click menu (#1046)" (#1050) This reverts commit 0712fdd731. * Remove donation badge from README Removed donation badge from README. * Delete .github/workflows/donation-goal.yml * feat(auth): opt-in OIDC DEK unlock for API-key requests API keys authenticate but cannot touch the encrypted credential/host store ('User data not unlocked') unless the user has a live interactive session, making them unusable for headless automation. For OIDC users the DEK is server-derivable (deriveOIDCSystemKey), so handleApiKeyAuth can unlock it without a password. Gated behind ALLOW_APIKEY_DATA_UNLOCK (default off) because enabling it widens the blast radius of a leaked API key. OIDC-only; password users are untouched. Refs #1063 --------- Co-authored-by: LukeGus <bugattiguy527@gmail.com> Co-authored-by: Luke Gustafson <88517757+LukeGus@users.noreply.github.com> Co-authored-by: Sankeerth Nara <sankeerthnara@gmail.com> Co-authored-by: ZacharyZcR <zacharyzcr1984@gmail.com> * chore: package lock sync * Add Proxmox guest auto sync (#1053) * draft: database layer refactor (#1054) * feat(sshid) - sshid.io equivalent for termix (#919) * feat(ssh-id): database schema, migrations and field encryption Adds ssh_identities, ssh_identity_keys and ssh_identity_ca tables (public keys stored plaintext for the unauthenticated resolver; CA private key registered for per-user field encryption), with UNIQUE(user_id), an index on ssh_identity_keys(identity_id), and idempotent CREATE TABLE migrations. * feat(ssh-id): backend API — resolver, key management, CA and certificates Mounts /sshid (nginx route added). Public text/plain authorized_keys resolver (+ exact /:algo filter, HTML viewer) and CA public-key endpoint; no-store + noindex headers on every resolver response including early 404s. Authenticated management: claim/rename/delete handle, add/import/generate/enable/delete keys, and a per-user CA (create/rotate/delete) with pure-Node OpenSSH certificate issuance. Audit logging on all mutations; UNIQUE races map to a precise 409. Unit tests for key parsing and certificate signing (ssh-keygen-validated). * feat(ssh-id): frontend panel, API client and i18n SSH ID panel wired into the app rail and AppShell: claim handle, resolver URL + curl one-liner, key list, generate, paste/import, CA enable/rotate/remove with server trust command, and per-key certificate issuance. API client re-exported through main-axios.ts; all strings i18n'd. * style(ssh-id): align panel and resolver page with Termix theme - Rebuild the SSH ID sidebar panel with the theme's square components (SectionCard / SettingRow / FakeSwitch) instead of rounded ad-hoc cards; use accent-brand and destructive tokens rather than raw red/green. - Fix panel scrolling: move overflow to a block scroll container so the cards keep their natural height instead of being clipped. - Restyle the public resolver HTML page (/sshid/u/:handle) to the Termix dark theme: square corners, #18181b/#303032 palette, #f59145 accent, uppercase section labels. - Tidy copy: 'Save To Credentials' label, drop the redundant generate intro, and correct the generate tooltip (the key is stored when saving to vault). * feat: rename to Termix ID, improve UI, backend inconsistencies, and general bug fixes --------- Co-authored-by: LukeGus <bugattiguy527@gmail.com> * ci(deps): bump actions/checkout from 6 to 7 in the github-actions group (#922) Bumps the github-actions group with 1 update: [actions/checkout](https://github.com/actions/checkout). Updates `actions/checkout` from 6 to 7 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v6...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps-dev): bump the dev-patch-updates group with 11 updates (#923) Bumps the dev-patch-updates group with 11 updates: | Package | From | To | | --- | --- | --- | | [@codemirror/search](https://github.com/codemirror/search) | `6.7.0` | `6.7.1` | | [@codemirror/view](https://github.com/codemirror/view) | `6.43.0` | `6.43.1` | | [@tailwindcss/vite](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-vite) | `4.3.0` | `4.3.1` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.8` | `4.1.9` | | [@vitest/ui](https://github.com/vitest-dev/vitest/tree/HEAD/packages/ui) | `4.1.8` | `4.1.9` | | [eslint-plugin-react-refresh](https://github.com/ArnaudBarre/eslint-plugin-react-refresh) | `0.5.2` | `0.5.3` | | [lint-staged](https://github.com/lint-staged/lint-staged) | `17.0.7` | `17.0.8` | | [prettier](https://github.com/prettier/prettier) | `3.8.3` | `3.8.4` | | [sharp](https://github.com/lovell/sharp) | `0.35.1` | `0.35.2` | | [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.3.0` | `4.3.1` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.8` | `4.1.9` | Updates `@codemirror/search` from 6.7.0 to 6.7.1 - [Changelog](https://github.com/codemirror/search/blob/main/CHANGELOG.md) - [Commits](https://github.com/codemirror/search/commits) Updates `@codemirror/view` from 6.43.0 to 6.43.1 - [Changelog](https://github.com/codemirror/view/blob/main/CHANGELOG.md) - [Commits](https://github.com/codemirror/view/commits) Updates `@tailwindcss/vite` from 4.3.0 to 4.3.1 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.1/packages/@tailwindcss-vite) Updates `@vitest/coverage-v8` from 4.1.8 to 4.1.9 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.9/packages/coverage-v8) Updates `@vitest/ui` from 4.1.8 to 4.1.9 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.9/packages/ui) Updates `eslint-plugin-react-refresh` from 0.5.2 to 0.5.3 - [Release notes](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/releases) - [Changelog](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/blob/main/CHANGELOG.md) - [Commits](https://github.com/ArnaudBarre/eslint-plugin-react-refresh/compare/v0.5.2...v0.5.3) Updates `lint-staged` from 17.0.7 to 17.0.8 - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](https://github.com/lint-staged/lint-staged/compare/v17.0.7...v17.0.8) Updates `prettier` from 3.8.3 to 3.8.4 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](https://github.com/prettier/prettier/compare/3.8.3...3.8.4) Updates `sharp` from 0.35.1 to 0.35.2 - [Release notes](https://github.com/lovell/sharp/releases) - [Commits](https://github.com/lovell/sharp/compare/v0.35.1...v0.35.2) Updates `tailwindcss` from 4.3.0 to 4.3.1 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.1/packages/tailwindcss) Updates `vitest` from 4.1.8 to 4.1.9 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.9/packages/vitest) --- updated-dependencies: - dependency-name: "@codemirror/search" dependency-version: 6.7.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@codemirror/view" dependency-version: 6.43.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@tailwindcss/vite" dependency-version: 4.3.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@vitest/coverage-v8" dependency-version: 4.1.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: "@vitest/ui" dependency-version: 4.1.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: eslint-plugin-react-refresh dependency-version: 0.5.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: lint-staged dependency-version: 17.0.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: prettier dependency-version: 3.8.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: sharp dependency-version: 0.35.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: tailwindcss dependency-version: 4.3.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates - dependency-name: vitest dependency-version: 4.1.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-patch-updates ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump nanoid in the prod-patch-updates group (#925) Bumps the prod-patch-updates group with 1 update: [nanoid](https://github.com/ai/nanoid). Updates `nanoid` from 5.1.11 to 5.1.15 - [Release notes](https://github.com/ai/nanoid/releases) - [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md) - [Commits](https://github.com/ai/nanoid/compare/5.1.11...5.1.15) --- updated-dependencies: - dependency-name: nanoid dependency-version: 5.1.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-patch-updates ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): bump the major-updates group with 5 updates (#926) Bumps the major-updates group with 5 updates: | Package | From | To | | --- | --- | --- | | [js-yaml](https://github.com/nodeca/js-yaml) | `4.2.0` | `5.0.0` | | [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.39.4` | `10.0.1` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.9.2` | `26.0.0` | | [concurrently](https://github.com/open-cli-tools/concurrently) | `9.2.1` | `10.0.3` | | [eslint](https://github.com/eslint/eslint) | `9.39.4` | `10.5.0` | Updates `js-yaml` from 4.2.0 to 5.0.0 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](https://github.com/nodeca/js-yaml/compare/4.2.0...5.0.0) Updates `@eslint/js` from 9.39.4 to 10.0.1 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](https://github.com/eslint/eslint/commits/v10.0.1/packages/js) Updates `@types/node` from 25.9.2 to 26.0.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `concurrently` from 9.2.1 to 10.0.3 - [Release notes](https://github.com/open-cli-tools/concurrently/releases) - [Commits](https://github.com/open-cli-tools/concurrently/compare/v9.2.1...v10.0.3) Updates `eslint` from 9.39.4 to 10.5.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](https://github.com/eslint/eslint/compare/v9.39.4...v10.5.0) --- updated-dependencies: - dependency-name: js-yaml dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: major-updates - dependency-name: "@eslint/js" dependency-version: 10.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: major-updates - dependency-name: "@types/node" dependency-version: 26.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: major-updates - dependency-name: concurrently dependency-version: 10.0.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: major-updates - dependency-name: eslint dependency-version: 10.5.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: major-updates ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * feat(ssh): add HashiCorp Vault SSH signer authentication * fix: small fixes to vault feature to align with Termix codebase * chore: add view docs links for vault/termix id * fix: file upload fails with 400 and missing schema migrations on upgrade (#929) Two bugs introduced in v2.4.1: 1. uploadFileStream uses fileManagerApi.post() which triggers axios's transformRequest to JSON-serialize the FormData because the instance default Content-Type is application/json. Change to postForm() which sets Content-Type: multipart/form-data so the browser XHR sends the correct multipart body with boundary. 2. Two schema items added to schema.ts were not included in migrateSchema() in db/index.ts, causing 500 errors on existing installations upgrading from v2.4.0: - user_preferences.status_color_scheme (no such column) - dashboard_service_links table (no such table) Fixes #928 Co-authored-by: sash <sash@fominykh.io> * fix: support PuTTY PPK ssh keys (#930) * fix: chunk large file manager uploads (#932) * fix: route dashboard hosts by protocol (#934) * fix: resolve tunnel endpoints reliably (#935) * Fix Electron OIDC browser auth failures (#936) * Allow RDP connections without stored credentials (#937) * Sync role credential shares for OIDC users (#938) * Fix terminal link dialog layering (#940) * Confirm large files before opening editor (#942) * Confirm closing active host connections (#943) * Preserve file path case in file manager UI (#941) * fix: preserve unicode guacamole tokens (#933) * Persist VNC authentication settings (#944) * Fix Guacamole websocket base path (#946) * Promote file manager terminals to tabs (#939) * Guard Guacamole disconnect during startup (#945) * chore: increment ver * feat: bitwarden ssh agent integration * feat: serial connections support * fix: various small bug fixes * feat: open all sessions in a folder and terminal custom theme color support * feat: cross host file manager clipboard and several small bug fixes * feat: tailscale/wireguard support and added a new status state for when backend is checking status * feat: grafana like server stats history, new alert system, ntfy/webhook support * feat: new grid and widget based homepage function * feat: new donate button in dashboard * fix: alert ui incorrectly using termix css and fixed issue with alert system not loading * chore: start database layer refactor * docs: plan database layer refactor * docs: audit database layer refactor phase zero * chore: add database runtime adapter skeleton * chore: add settings repository skeleton * chore: add user session repository skeleton * chore: add host credential repository skeleton * chore: add field encryption boundary * chore: migrate settings route slice * chore: migrate user settings routes * chore: migrate host metrics settings routes * chore: migrate acme settings route * chore: migrate terminal settings route * chore: migrate tailscale settings read * chore: migrate guacamole settings reads * chore: migrate session timeout settings reads * chore: migrate auth route settings reads * chore: migrate host metrics settings reads * chore: migrate startup settings reads * chore: migrate user settings cleanup * chore: migrate password reset settings * chore: migrate oidc legacy settings read * chore: migrate user route settings slice * chore: migrate oidc state settings * chore: migrate user login settings reads * chore: migrate user crypto settings * chore: consolidate startup settings defaults * chore: consolidate database settings import export * chore: migrate core session auth paths * chore: migrate remaining session auth paths * chore: migrate admin user routes * chore: migrate user route admin checks * chore: migrate user lifecycle routes * chore: migrate auth user lookups * chore: migrate oidc user routes * chore: migrate api key repository paths * docs: add database gray rollout guide * chore: migrate trusted device paths * chore: migrate user session route user lookups * chore: add database repository rollout guard * chore: expose repository rollout status * chore: warn on repository rollout misconfiguration * chore: migrate remaining user lookup helpers * chore: migrate ssh user lookups * chore: migrate user settings admin lookups * chore: migrate acme ssl user lookups * chore: migrate audit log admin checks * chore: migrate oidc account user updates * chore: migrate password reset user updates * chore: migrate user deletion core records * chore: migrate snippet audit user lookups * chore: migrate ldap user sync paths * chore: migrate totp user updates * chore: migrate rbac user checks * chore: migrate rbac role paths * chore: migrate permission role lookups * chore: migrate rbac access list reads * chore: migrate shared rbac reads * chore: migrate rbac access writes * chore: migrate permission host access * chore: migrate role host access lookup * chore: migrate snippet access lookup * chore: migrate shared credential access lookups * chore: migrate host access cleanup writes * chore: migrate host list access checks * chore: migrate host access cleanup routes * chore: migrate shared credential role lookups * chore: migrate user role cleanup * chore: migrate admin role sync * chore: migrate ldap role sync * chore: migrate user role assignment * chore: migrate sso provider access * chore: migrate audit log access * chore: migrate user preference access * chore: migrate open tab access * chore: migrate dismissed alert access * chore: migrate homepage layout access * chore: migrate network topology access * chore: migrate dashboard service link access * chore: migrate command history access * chore: migrate recent activity cleanup * chore: migrate ssh credential usage access * chore: migrate transfer recent access * chore: migrate file manager bookmark access * chore: migrate c2s tunnel preset access * chore: migrate homepage item access * chore: migrate session recording access * chore: migrate tmux session tag access * chore: migrate opkssh token access * chore: migrate vault token access * chore: migrate vault profile access * chore: migrate host metrics preference access * chore: migrate host health access * chore: migrate host metrics history access * chore: migrate alert persistence access * chore: route alert host lookup through repository * chore: migrate user data export reads * chore: route host metrics stats sync through repository * chore: migrate host folder persistence * chore: migrate host resolution reads * chore: route jump host resolution reads * chore: route docker console jump host reads * chore: route docker ssh resolution reads * chore: route proxmox discovery resolution reads * chore: route file manager activity host reads * chore: route host metrics resolution reads * chore: route ssh auth credential reads * chore: route tunnel endpoint credential reads * chore: route credential deployment resolution reads * chore: route command history host flag reads * chore: route snippet execution resolution reads * chore: route terminal host resolution reads * chore: route vault oidc host resolution reads * chore: route wake on lan host reads * chore: route internal host list reads * chore: route host key verification persistence * chore: route credential read paths * chore: route credential host usage reads * chore: route credential folder rename * chore: route host owner access checks * chore: route shared credential source reads * chore: route user host credential cleanup * chore: route credential delete reads * chore: route credential update reads * chore: route host credential reads * chore: route host read paths * chore: route host projection reads * chore: route host list reads * chore: route snippet read paths * chore: route snippet folder writes * chore: route snippet crud paths * chore: route snippet bulk import * chore: route rbac ownership reads * chore: route user count reads * chore: route cleanup snippets folders * chore: route shared credential persistence * chore: route dashboard activity * chore: route guacamole host reads * chore: route host bulk lookups * chore: remove unlock-only simple db ops * chore: route host autostart persistence * chore: route ldap provisioning through users * chore: route credential encrypted writes * chore: route host encrypted writes * chore: route bulk host encrypted writes * chore: route termix id credentials * chore: route termix id ca persistence * chore: route termix identity persistence * chore: route credential system migration * chore: isolate user encryption migration storage * chore: remove legacy simple db ops * chore: isolate legacy sqlite migration copy * chore: route database settings import export * chore: route database host credential export * chore: route database host credential import * chore: route database file-manager import export * chore: route database alert usage import export * chore: route database user checks * chore: isolate auth lazy migration storage * chore: route explicit database saves * chore: initialize database save boundary * chore: route migration snapshot saves * chore: isolate sqlite import constraints * chore: route import sqlite boundary * chore: route user encryption migration store * chore: centralize current repository runtime * chore: route more current repositories * chore: route activity repository runtimes * chore: route token repository runtimes * chore: route health repository runtimes * chore: route identity repository runtimes * chore: route rbac repository runtime * chore: centralize current sqlite runtime access * chore: route user deletion key cleanup * chore: route user deletion vault cleanup * chore: route user deletion homepage cleanup * chore: route user deletion health cleanup * chore: route user deletion alert cleanup * chore: route user deletion identity cleanup * chore: add database layer preupgrade backup * Fix database repository type errors * fix: complete post-merge compile fixes for database refactor Restore missing DatabaseSaveTrigger/getDb imports, session log format fallback, OIDC provider resolution, guacamole recording insert, and passwordFallbackOnly typing after merging current dev. --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: DivByZero <mr.oplus@yahoo.fr> Co-authored-by: LukeGus <bugattiguy527@gmail.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: devdanetra <46488477+devdanetra@users.noreply.github.com> Co-authored-by: Aleksandr Fominykh <neoformalex@users.noreply.github.com> Co-authored-by: sash <sash@fominykh.io> * refactor(db): collapse repository rollout scaffolding into single factory Repositories are now the only data path. Replaces the 41 current-*-repository wrapper files, the DATABASE_LAYER_REPOSITORY_ROLLOUT flag/alias map and the unused database/runtime adapter with repositories/factory.ts, a plain DatabaseContext type and an in-memory TestSqliteDatabase test harness. * refactor(db): route remaining raw DB access through repositories proxmox, session-log, oidc-utils, webauthn and guacamole recording now use repositories (new WebauthnCredentialRepository; SsoProviderRepository listEnabled; HostRepository findDecryptedByIdAs/listProxmoxEnabled). Remaining raw access: db boot code, simple-db-ops and docker.ts, which are removed/restructured in later phases. * feat(crypto): add UserKeyManager with system-wrapped per-user DEKs New utils/user-keys.ts: one random 32-byte DEK per user, wrapped AES-256-GCM under an HKDF key derived from the system ENCRYPTION_KEY (per-user info string + AAD binding, versioned v3 wrap format stored in settings). Synchronous unwrap-on-demand with a 15-minute cache so the existing DataCrypto facade keeps its sync call sites. Not wired up yet. * feat(crypto): boot-time DEK migration to system-wrapped v3 format utils/crypto-migration/dek-migration.ts carries the legacy unwrap paths (PBKDF2 password KEK, OIDC/WebAuthn system keys, hardcoded-default fallback) and migrates every server-unwrappable DEK to the v3 wrap at startup. Password-wrapped DEKs migrate at next login or from a live session via adoptRecoveredDEK. Legacy rows are kept for now; cleanup flips on once the new path is authoritative. * refactor(crypto): make system-wrapped DEKs the authoritative key path DataCrypto and AuthManager now read keys through UserKeyManager: DEKs are always unwrappable server-side, so the in-memory unlock session, DEK-in-JWT wrapping, session-expiry data locks and ALLOW_APIKEY_DATA_UNLOCK are gone. utils/user-crypto.ts is deleted; boot migration now cleans legacy wraps. A one-release shim adopts DEKs from legacy dataKeyWrap tokens so active password users migrate without re-login. Password login migrates legacy password-wrapped DEKs via migratePasswordUserAtLogin. * refactor(crypto): remove pending share queue and credential sharing key With server-unwrappable DEKs both sides of a share are always available, so the needsReEncryption queue, CREDENTIAL_SHARING_KEY and the system_* shadow columns on ssh_credentials are gone. A one-time boot cleanup re-creates legacy pending share copies where possible (dropping unresolvable ones with a warning) and drops the legacy columns. * feat(auth): non-destructive password resets and admin reset endpoint Password resets no longer destroy user data: the DEK is system-wrapped, so forgot-password and admin resets are just a hash update plus session revoke. The wipe branch survives only for accounts that never logged in since the encryption upgrade and now requires explicit confirmDataWipe (surfaced as a 409 DATA_WIPE_REQUIRED; the reset UI asks for confirmation). Adds POST /users/admin/reset-password and removes the dead re-encryption paths. * refactor(ssh): consolidate four jump-host chain copies into one module terminal, host-metrics and docker now use ssh/jump-host-chain.ts (already shared by file-manager, tmux-monitor and docker-console); docker's inline copy also drops its raw SimpleDBOps host/credential lookups in favor of repositories. * refactor(ssh): single shared createConnectionLog helper file-manager-log.ts becomes ssh/connection-log.ts; the copies in docker.ts and host-metrics-helpers.ts are gone. * refactor(ssh): split docker module into layered directory ssh/docker/{index,routes,session-manager,container-routes,console}.ts: server boot and wiring in index, HTTP handlers in routes, SSH session registry and command execution in session-manager. Code motion only; port 30007/30009 and endpoints unchanged. Swagger now scans ssh subdirectories. * refactor(ssh): split tunnel module into layered directory ssh/tunnel/{index,routes,manager}.ts: server boot in index, HTTP handlers in routes, tunnel state and engine (connect/retry/autostart) in manager. Code motion only; port 30003 and endpoints unchanged. * refactor(backend): reorganize top-level layout - ssh/ renamed to hosts/ (it covers SSH, RDP, VNC, Telnet, Docker, metrics) - serial/serial.ts and guacamole/ moved inside hosts/ - dashboard.ts and homepage.ts moved to services/ - swagger.ts moved to utils/ with adjusted scan globs Import paths and the generate:openapi script updated; ports and endpoints unchanged. * refactor(tests): move backend tests into src/backend/tests mirror tree Backend *.test.ts files (and the test-support harness) no longer sit next to source files; they live under src/backend/tests/ mirroring the source layout. Imports rewritten accordingly; CLAUDE.md convention updated. * refactor(hosts): group host modules into per-feature directories file-manager/, metrics/ (incl. widgets, managers, alert-engine), terminal/, tmux/ and tunnel/ each own their files; docker/ gains container-runtime. Genuinely shared helpers (jump-host chain, host resolver, connection pool, opkssh, vault, serial) stay at hosts/ root. Pure file moves with import path updates; mirrored test paths follow. * refactor(backend): final cleanup pass - re-register WebAuthn passkey routes (registration was dropped in the #1054 merge, breaking passkey login) and document all six endpoints - delete utils/simple-db-ops.ts (last caller migrated to DataCrypto) - starter: use the typed serverReady export, collapse the four-way version lookup to env then package.json candidates - add OpenAPI JSDoc to c2s-tunnel-presets endpoints - strip block-divider comment banners * feat: remove legacy "data_unlocked" field * feat: refactor rbac/sharing to support new permissions and auth types * feat: refactor rbac/sharing to support new permissions and auth types * feat: add "id" to user profile hide list * chore: root cleanup * feat: add more donation references and a 30-day donation reminder * chore: update readme * feat: automate beta tests * feat: add links to milestones * fix: hoist github/google SSO defaults to module scope (#1065) * fix(ssh-tools): allow clipboard paste in key recording field (#1066) The broadcast key-recording input was marked readOnly, which makes browsers block paste entirely (no context-menu Paste, Ctrl+V does nothing). handleKeyDown also called preventDefault() unconditionally, swallowing the Ctrl+V shortcut before a paste event could even fire. Let Ctrl/Cmd+V pass through in handleKeyDown, drop readOnly, and add an onPaste handler that reads the clipboard text and broadcasts it to the selected terminals like any other captured keystroke. Signed-off-by: emreumar <emreumar@users.noreply.github.com> Co-authored-by: emreumar <emreumar@users.noreply.github.com> * chore: write release notes * chore: update release notes * chore: update readmes * chore: add crypto only reminder in en.json * fix: macOS and cask errors on release workflow * chore: sync Crowdin translations for 2.5.1 --------- Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: emreumar <emreumar@users.noreply.github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: ZacharyZcR <zacharyzcr1984@gmail.com> Co-authored-by: Russell Poovey <09.our_seekers@icloud.com> Co-authored-by: russell <git@0896c69e.com> Co-authored-by: Subedi Bibek <77529535+questbibek@users.noreply.github.com> Co-authored-by: Claude Fable 5 <noreply@anthropic.com> Co-authored-by: Alexander Elsner <101340634+Bensonheimer992@users.noreply.github.com> Co-authored-by: SankeerthNara <sankeerthnara@gmail.com> Co-authored-by: Stephan Groth <96803994+Kalvalax@users.noreply.github.com> Co-authored-by: DivByZero <mr.oplus@yahoo.fr> Co-authored-by: devdanetra <46488477+devdanetra@users.noreply.github.com> Co-authored-by: Aleksandr Fominykh <neoformalex@users.noreply.github.com> Co-authored-by: sash <sash@fominykh.io> Co-authored-by: lhojun <ldgs3324@gmail.com> Co-authored-by: Yunus Emre Umar <77045015+emre155@users.noreply.github.com> Co-authored-by: emreumar <emreumar@users.noreply.github.com>
2026-10-28 22:25:24 +00:00 · 2026-07-19 12:29:52 -05:00
1 parent fba645e92e
commit ddbdd5c437
@@ -2,21 +2,20 @@
 import React, {
  createContext,
  useContext,
-  useState,
  useEffect,
  useCallback,
  useRef,
  useMemo,
+  useSyncExternalStore,
+  useState,
 } from "react";
 import { getAllServerStatuses, getSSHHosts } from "@/main-axios";
 import { DEFAULT_STATS_CONFIG } from "@/types/stats-widgets";
-
-type StatusValue = "online" | "offline" | "degraded";
-
-interface ServerStatusEntry {
-  status: StatusValue;
-  lastChecked: string;
-}
+import {
+  ServerStatusStore,
+  type ServerStatusEntry,
+  type StatusValue,
+} from "./server-status-store";

 interface ServerStatusContextType {
  statuses: Map<number, ServerStatusEntry>;
@@ -26,6 +25,8 @@ interface ServerStatusContextType {
  getStatus: (hostId: number) => StatusValue;
 }

+/** Stable for the provider lifetime — fine-grained hooks only need this. */
+const StatusStoreContext = createContext<ServerStatusStore | null>(null);
 const ServerStatusContext = createContext<ServerStatusContextType | null>(null);

 const POLL_INTERVAL = 30000;
@@ -37,34 +38,47 @@ export function ServerStatusProvider({
  children: React.ReactNode;
  isAuthenticated?: boolean;
 }) {
-  const [statuses, setStatuses] = useState<Map<number, ServerStatusEntry>>(
-    new Map(),
-  );
-  const [isLoading, setIsLoading] = useState(false);
-  const [initialLoadComplete, setInitialLoadComplete] = useState(false);
-  const [enabledHostIds, setEnabledHostIds] = useState<Set<number>>(new Set());
+  const storeRef = useRef<ServerStatusStore | null>(null);
+  if (!storeRef.current) {
+    storeRef.current = new ServerStatusStore();
+  }
+  const store = storeRef.current;
+
+  // Bumps only full-context consumers (dashboard, folder counts, etc.).
+  const [version, setVersion] = useState(0);
  const mountedRef = useRef(true);
-  const enabledHostIdsRef = useRef(enabledHostIds);
+  const refreshInFlightRef = useRef<Promise<void> | null>(null);

  useEffect(() => {
-    enabledHostIdsRef.current = enabledHostIds;
-  }, [enabledHostIds]);
+    return store.subscribeAll(() => {
+      setVersion((v) => v + 1);
+    });
+  }, [store]);
+
+  useEffect(() => {
+    return store.subscribeMeta(() => {
+      setVersion((v) => v + 1);
+    });
+  }, [store]);

  const fetchEnabledHosts = useCallback(async () => {
    if (!isAuthenticated) {
+      store.setEnabledHostIds(new Set());
      return new Set<number>();
    }

    try {
-      const hosts = await getSSHHosts();
+      const hosts = await getSSHHosts({ includeStatus: false });
      const enabled = new Set<number>();

      hosts.forEach((host) => {
        const statsConfig = (() => {
          try {
-            return host.statsConfig
-              ? JSON.parse(host.statsConfig)
-              : DEFAULT_STATS_CONFIG;
+            if (!host.statsConfig) return DEFAULT_STATS_CONFIG;
+            if (typeof host.statsConfig === "string") {
+              return JSON.parse(host.statsConfig);
+            }
+            return host.statsConfig;
          } catch {
            return DEFAULT_STATS_CONFIG;
          }
@@ -75,94 +89,122 @@ export function ServerStatusProvider({
        }
      });

-      setEnabledHostIds((prev) => {
-        if (prev.size !== enabled.size) return enabled;
-        for (const id of enabled) {
-          if (!prev.has(id)) return enabled;
-        }
-        return prev;
-      });
+      store.setEnabledHostIds(enabled);
      return enabled;
    } catch {
-      return new Set<number>();
+      return store.getEnabledHostIds();
    }
-  }, [isAuthenticated]);
+  }, [isAuthenticated, store]);

  const refreshStatuses = useCallback(async () => {
    if (!mountedRef.current || !isAuthenticated) return;
-
-    setIsLoading(true);
-    try {
-      const data = await getAllServerStatuses();
-      if (!mountedRef.current) return;
-
-      const newStatuses = new Map<number, ServerStatusEntry>();
-      const now = new Date().toISOString();
-
-      if (data && typeof data === "object") {
-        Object.entries(data).forEach(([idStr, statusData]) => {
-          const id = parseInt(idStr, 10);
-          if (!isNaN(id)) {
-            const status =
-              statusData?.status === "online" ? "online" : "offline";
-            newStatuses.set(id, {
-              status,
-              lastChecked: statusData?.lastChecked || now,
-            });
-          }
-        });
-      }
-
-      setStatuses(newStatuses);
-    } catch {
-      if (mountedRef.current) {
-        setStatuses((prev) => {
-          const updated = new Map(prev);
-          enabledHostIdsRef.current.forEach((id) => {
-            const existing = updated.get(id);
-            updated.set(id, {
-              status: "degraded",
-              lastChecked: existing?.lastChecked || new Date().toISOString(),
-            });
-          });
-          return updated;
-        });
-      }
-    } finally {
-      if (mountedRef.current) {
-        setIsLoading(false);
-        setInitialLoadComplete(true);
-      }
+    if (
+      typeof document !== "undefined" &&
+      document.visibilityState === "hidden"
+    ) {
+      return;
    }
-  }, [isAuthenticated]);

-  const stableEnabledHostIds = useMemo(() => enabledHostIds, [enabledHostIds]);
+    if (refreshInFlightRef.current) {
+      return refreshInFlightRef.current;
+    }
+
+    const showLoading = !store.getInitialLoadComplete();
+    if (showLoading) store.setLoading(true);
+
+    const run = (async () => {
+      try {
+        const data = await getAllServerStatuses();
+        if (!mountedRef.current) return;
+
+        const newStatuses = new Map<number, ServerStatusEntry>();
+        const now = new Date().toISOString();
+
+        if (data && typeof data === "object") {
+          Object.entries(data).forEach(([idStr, statusData]) => {
+            const id = parseInt(idStr, 10);
+            if (!isNaN(id)) {
+              const status =
+                statusData?.status === "online" ? "online" : "offline";
+              newStatuses.set(id, {
+                status,
+                lastChecked: statusData?.lastChecked || now,
+              });
+            }
+          });
+        }
+
+        store.applyStatuses(newStatuses);
+      } catch {
+        if (mountedRef.current) {
+          store.markDegraded(store.getEnabledHostIds());
+        }
+      } finally {
+        if (mountedRef.current) {
+          if (showLoading) store.setLoading(false);
+          store.setInitialLoadComplete(true);
+        }
+      }
+    })();
+
+    refreshInFlightRef.current = run.finally(() => {
+      refreshInFlightRef.current = null;
+    });
+    return refreshInFlightRef.current;
+  }, [isAuthenticated, store]);

  const getStatus = useCallback(
-    (hostId: number): StatusValue => {
-      if (!stableEnabledHostIds.has(hostId)) {
-        return "offline";
-      }
-      return statuses.get(hostId)?.status || "degraded";
-    },
-    [statuses, stableEnabledHostIds],
+    (hostId: number): StatusValue => store.getStatus(hostId),
+    [store],
  );

  useEffect(() => {
    mountedRef.current = true;

+    let intervalId: ReturnType<typeof setInterval> | null = null;
+
+    const startPolling = () => {
+      if (intervalId !== null) return;
+      intervalId = setInterval(() => {
+        void refreshStatuses();
+      }, POLL_INTERVAL);
+    };
+
+    const stopPolling = () => {
+      if (intervalId === null) return;
+      clearInterval(intervalId);
+      intervalId = null;
+    };
+
    const init = async () => {
      await fetchEnabledHosts();
      await refreshStatuses();
+      if (
+        mountedRef.current &&
+        (typeof document === "undefined" ||
+          document.visibilityState !== "hidden")
+      ) {
+        startPolling();
+      }
    };

-    init();
+    void init();

-    const intervalId = setInterval(refreshStatuses, POLL_INTERVAL);
+    const onVisibility = () => {
+      if (document.visibilityState === "hidden") {
+        stopPolling();
+        return;
+      }
+      void refreshStatuses();
+      startPolling();
+    };
+
+    document.addEventListener("visibilitychange", onVisibility);

    return () => {
      mountedRef.current = false;
-      clearInterval(intervalId);
+      stopPolling();
+      document.removeEventListener("visibilitychange", onVisibility);
    };
  }, [fetchEnabledHosts, refreshStatuses]);

@@ -181,19 +223,34 @@ export function ServerStatusProvider({
    };
  }, [fetchEnabledHosts, refreshStatuses]);

-  return (
-    <ServerStatusContext.Provider
-      value={{
-        statuses,
-        isLoading,
-        initialLoadComplete,
-        refreshStatuses,
-        getStatus,
-      }}
-    >
-      {children}
-    </ServerStatusContext.Provider>
+  const contextValue = useMemo(
+    () => ({
+      statuses: store.getStatuses(),
+      isLoading: store.getIsLoading(),
+      initialLoadComplete: store.getInitialLoadComplete(),
+      refreshStatuses,
+      getStatus,
+    }),
+    // version refreshes statuses/isLoading/initialLoadComplete snapshots
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+    [version, refreshStatuses, getStatus],
  );
+
+  return (
+    <StatusStoreContext.Provider value={store}>
+      <ServerStatusContext.Provider value={contextValue}>
+        {children}
+      </ServerStatusContext.Provider>
+    </StatusStoreContext.Provider>
+  );
+}
+
+function useStatusStore(): ServerStatusStore {
+  const store = useContext(StatusStoreContext);
+  if (!store) {
+    throw new Error("Server status store hooks require ServerStatusProvider");
+  }
+  return store;
 }

 export function useServerStatus() {
@@ -206,15 +263,44 @@ export function useServerStatus() {
  return context;
 }

+/**
+ * Subscribe to a single host's status. Only re-renders when that host's
+ * status value changes (or its enabled flag flips). Does not re-render when
+ * other hosts update.
+ */
 export function useHostStatus(
  hostId: number,
  statusCheckEnabled: boolean = true,
-) {
-  const { getStatus } = useServerStatus();
+): StatusValue | null {
+  const store = useStatusStore();
+
+  const status = useSyncExternalStore(
+    (onChange) => store.subscribeHost(hostId, onChange),
+    () => store.getHostSnapshot(hostId),
+    () => store.getHostSnapshot(hostId),
+  );

  if (!statusCheckEnabled) {
-    return "offline" as StatusValue;
+    return null;
  }
+  return status;
+}

-  return getStatus(hostId);
+/** Meta flags without depending on the full status map. */
+export function useServerStatusMeta(): {
+  initialLoadComplete: boolean;
+  isLoading: boolean;
+} {
+  const store = useStatusStore();
+
+  useSyncExternalStore(
+    (onChange) => store.subscribeMeta(onChange),
+    () => store.getMetaSnapshot(),
+    () => store.getMetaSnapshot(),
+  );
+
+  return {
+    initialLoadComplete: store.getInitialLoadComplete(),
+    isLoading: store.getIsLoading(),
+  };
 }
@@ -1,25 +0,0 @@
-import { describe, it, expect, afterEach } from "vitest";
-import { getBasePath } from "./base-path.js";
-
-const win = window as unknown as Record<string, unknown>;
-
-afterEach(() => {
-  delete win.__TERMIX_BASE_PATH__;
-});
-
-describe("getBasePath", () => {
-  it("returns empty string when no runtime override is set (default base)", () => {
-    // Vite test env BASE_URL is "/" which the helper normalizes to "".
-    expect(getBasePath()).toBe("");
-  });
-
-  it("uses the runtime override when present", () => {
-    win.__TERMIX_BASE_PATH__ = "/termix";
-    expect(getBasePath()).toBe("/termix");
-  });
-
-  it("strips a trailing slash from the runtime override", () => {
-    win.__TERMIX_BASE_PATH__ = "/termix/";
-    expect(getBasePath()).toBe("/termix");
-  });
-});
@@ -1,86 +0,0 @@
-import { describe, it, expect, beforeEach, afterEach, vi } from "vitest";
-import { copyToClipboard } from "./clipboard";
-
-describe("copyToClipboard", () => {
-  const originalClipboard = navigator.clipboard;
-
-  beforeEach(() => {
-    delete (window as { electronClipboard?: unknown }).electronClipboard;
-  });
-
-  afterEach(() => {
-    Object.defineProperty(navigator, "clipboard", {
-      value: originalClipboard,
-      configurable: true,
-    });
-    vi.restoreAllMocks();
-  });
-
-  function setClipboard(value: unknown) {
-    Object.defineProperty(navigator, "clipboard", {
-      value,
-      configurable: true,
-    });
-  }
-
-  it("uses the electron bridge when present", async () => {
-    const writeText = vi.fn().mockResolvedValue(true);
-    (window as { electronClipboard?: unknown }).electronClipboard = {
-      writeText,
-      readText: vi.fn(),
-    };
-
-    const ok = await copyToClipboard("hello");
-
-    expect(ok).toBe(true);
-    expect(writeText).toHaveBeenCalledWith("hello");
-  });
-
-  it("uses navigator.clipboard when available", async () => {
-    const writeText = vi.fn().mockResolvedValue(undefined);
-    setClipboard({ writeText });
-
-    const ok = await copyToClipboard("world");
-
-    expect(ok).toBe(true);
-    expect(writeText).toHaveBeenCalledWith("world");
-  });
-
-  it("falls back to execCommand when navigator.clipboard is undefined (Brave / non-HTTPS)", async () => {
-    setClipboard(undefined);
-    const execCommand = vi.fn().mockReturnValue(true);
-    (document as unknown as { execCommand: typeof execCommand }).execCommand =
-      execCommand;
-
-    const ok = await copyToClipboard("fallback");
-
-    expect(ok).toBe(true);
-    expect(execCommand).toHaveBeenCalledWith("copy");
-  });
-
-  it("falls back to execCommand when the async write throws", async () => {
-    setClipboard({
-      writeText: vi.fn().mockRejectedValue(new Error("denied")),
-    });
-    const execCommand = vi.fn().mockReturnValue(true);
-    (document as unknown as { execCommand: typeof execCommand }).execCommand =
-      execCommand;
-
-    const ok = await copyToClipboard("retry");
-
-    expect(ok).toBe(true);
-    expect(execCommand).toHaveBeenCalledWith("copy");
-  });
-
-  it("returns false when every approach fails", async () => {
-    setClipboard(undefined);
-    (document as unknown as { execCommand: () => boolean }).execCommand =
-      () => {
-        throw new Error("no execCommand");
-      };
-
-    const ok = await copyToClipboard("nope");
-
-    expect(ok).toBe(false);
-  });
-});
@@ -0,0 +1,33 @@
+import { getBasePath } from "./base-path";
+
+type BrowserLocation = Pick<
+  Location,
+  "protocol" | "host" | "hostname" | "port"
+>;
+
+interface DatabaseTransferUrlOptions {
+  electron: boolean;
+  configuredServerUrl?: string | null;
+  location: BrowserLocation;
+}
+
+export function getDatabaseTransferUrl(
+  operation: "export" | "import",
+  { electron, configuredServerUrl, location }: DatabaseTransferUrlOptions,
+): string {
+  if (electron) {
+    const serverUrl = configuredServerUrl || "http://localhost:30001";
+    return `${serverUrl.replace(/\/$/, "")}/database/${operation}`;
+  }
+
+  const development =
+    location.port === "5173" ||
+    location.hostname === "localhost" ||
+    location.hostname === "127.0.0.1";
+
+  if (development) {
+    return `http://localhost:30001/database/${operation}`;
+  }
+
+  return `${location.protocol}//${location.host}${getBasePath()}/database/${operation}`;
+}
@@ -0,0 +1,20 @@
+import { isElectron } from "./electron";
+
+export function installElectronWheelZoomGuard(): () => void {
+  if (!isElectron()) return () => {};
+
+  const preventModifierWheelZoom = (event: WheelEvent) => {
+    if (!event.metaKey && !event.ctrlKey) return;
+    event.preventDefault();
+  };
+
+  window.addEventListener("wheel", preventModifierWheelZoom, {
+    capture: true,
+    passive: false,
+  });
+
+  return () =>
+    window.removeEventListener("wheel", preventModifierWheelZoom, {
+      capture: true,
+    });
+}
@@ -1,30 +0,0 @@
-import { describe, it, expect, afterEach } from "vitest";
-import { isElectron } from "./electron.js";
-
-const win = window as unknown as Record<string, unknown>;
-
-afterEach(() => {
-  delete win.IS_ELECTRON;
-  delete win.electronAPI;
-});
-
-describe("isElectron", () => {
-  it("returns false in a plain browser window", () => {
-    expect(isElectron()).toBe(false);
-  });
-
-  it("returns true when IS_ELECTRON flag is set", () => {
-    win.IS_ELECTRON = true;
-    expect(isElectron()).toBe(true);
-  });
-
-  it("returns true when electronAPI is present", () => {
-    win.electronAPI = {};
-    expect(isElectron()).toBe(true);
-  });
-
-  it("returns true when electronAPI.isElectron is true", () => {
-    win.electronAPI = { isElectron: true };
-    expect(isElectron()).toBe(true);
-  });
-});
@@ -1,68 +0,0 @@
-import { describe, it, expect, vi, beforeEach, afterEach } from "vitest";
-import { apiLogger } from "./frontend-logger.js";
-
-// The formatting helpers (status/performance icons, URL sanitization) are
-// private, so we exercise them through the public request* methods and assert
-// on what gets written to the console.
-let logSpy: ReturnType<typeof vi.spyOn>;
-let errorSpy: ReturnType<typeof vi.spyOn>;
-let groupSpy: ReturnType<typeof vi.spyOn>;
-
-beforeEach(() => {
-  logSpy = vi.spyOn(console, "log").mockImplementation(() => {});
-  errorSpy = vi.spyOn(console, "error").mockImplementation(() => {});
-  groupSpy = vi.spyOn(console, "group").mockImplementation(() => {});
-  vi.spyOn(console, "groupEnd").mockImplementation(() => {});
-});
-
-afterEach(() => {
-  vi.restoreAllMocks();
-});
-
-function allLoggedText(): string {
-  return logSpy.mock.calls
-    .concat(errorSpy.mock.calls)
-    .concat(groupSpy.mock.calls)
-    .map((args) => args.join(" "))
-    .join("\n");
-}
-
-describe("frontend logger request success", () => {
-  it("includes the success status icon and a fast-performance icon", () => {
-    apiLogger.requestSuccess("get", "https://x.test/api", 200, 50);
-    const text = allLoggedText();
-    expect(text).toContain("✅"); // 2xx status icon
-    expect(text).toContain("⚡"); // <100ms performance icon
-    expect(text).toContain("200");
-  });
-
-  it("uses the slow-performance icon for long requests", () => {
-    apiLogger.requestSuccess("get", "https://x.test/api", 200, 4000);
-    expect(allLoggedText()).toContain("🐌");
-  });
-});
-
-describe("frontend logger error mapping", () => {
-  it("uses a client-error icon for 4xx responses", () => {
-    apiLogger.requestError("get", "https://x.test/api", 404, "Not Found", 30);
-    expect(allLoggedText()).toContain("⚠️");
-  });
-
-  it("uses a server-error icon for 5xx responses", () => {
-    apiLogger.requestError("get", "https://x.test/api", 500, "Boom", 30);
-    expect(allLoggedText()).toContain("❌");
-  });
-});
-
-describe("frontend logger URL sanitization", () => {
-  it("strips password/token query params from logged URLs", () => {
-    apiLogger.requestStart("get", "https://x.test/login?password=hunter2");
-    const text = allLoggedText();
-    expect(text).not.toContain("hunter2");
-  });
-
-  it("keeps a normal URL intact", () => {
-    apiLogger.requestStart("get", "https://x.test/api/hosts");
-    expect(allLoggedText()).toContain("x.test/api/hosts");
-  });
-});
@@ -0,0 +1,53 @@
+import type { SSHHost } from "@/types/index";
+import type { ServerStatus } from "@/main-axios";
+import { createTtlRequestCache } from "./ttl-request-cache";
+
+/** Host list changes less often than status; keep a short shared window. */
+const HOSTS_TTL_MS = 10_000;
+/** Status polls stack from many UI surfaces; short TTL + inflight dedupe. */
+const STATUS_TTL_MS = 3_000;
+
+const hostsCache = createTtlRequestCache<SSHHost[]>(HOSTS_TTL_MS);
+const statusCache =
+  createTtlRequestCache<Record<number, ServerStatus>>(STATUS_TTL_MS);
+
+let listenersBound = false;
+
+function bindInvalidationListeners(): void {
+  if (listenersBound || typeof window === "undefined") return;
+  listenersBound = true;
+
+  const invalidateHosts = () => {
+    hostsCache.invalidate();
+  };
+
+  window.addEventListener("ssh-hosts:changed", invalidateHosts);
+  window.addEventListener("hosts:refresh", invalidateHosts);
+}
+
+export function getCachedSSHHosts(
+  loader: () => Promise<SSHHost[]>,
+): Promise<SSHHost[]> {
+  bindInvalidationListeners();
+  return hostsCache.get(loader);
+}
+
+export function getCachedServerStatuses(
+  loader: () => Promise<Record<number, ServerStatus>>,
+): Promise<Record<number, ServerStatus>> {
+  return statusCache.get(loader);
+}
+
+export function invalidateSSHHostsCache(): void {
+  hostsCache.invalidate();
+}
+
+export function invalidateServerStatusCache(): void {
+  statusCache.invalidate();
+}
+
+/** Drop both caches after host mutations so the next read is fresh. */
+export function invalidateHostsAndStatusCaches(): void {
+  hostsCache.invalidate();
+  statusCache.invalidate();
+}
@@ -0,0 +1,184 @@
+export type StatusValue = "online" | "offline" | "degraded";
+
+export interface ServerStatusEntry {
+  status: StatusValue;
+  lastChecked: string;
+}
+
+type Listener = () => void;
+
+/**
+ * Mutable store for per-host status so list rows can subscribe to a single host
+ * via useSyncExternalStore instead of re-rendering the whole tree on every poll.
+ */
+export class ServerStatusStore {
+  private statuses = new Map<number, ServerStatusEntry>();
+  private enabledHostIds = new Set<number>();
+  private initialLoadComplete = false;
+  private isLoading = false;
+  private readonly hostListeners = new Map<number, Set<Listener>>();
+  private readonly allListeners = new Set<Listener>();
+  private readonly metaListeners = new Set<Listener>();
+
+  getStatus(hostId: number): StatusValue {
+    if (!this.enabledHostIds.has(hostId)) {
+      return "offline";
+    }
+    return this.statuses.get(hostId)?.status || "degraded";
+  }
+
+  getStatuses(): Map<number, ServerStatusEntry> {
+    return this.statuses;
+  }
+
+  getEnabledHostIds(): Set<number> {
+    return this.enabledHostIds;
+  }
+
+  getInitialLoadComplete(): boolean {
+    return this.initialLoadComplete;
+  }
+
+  getIsLoading(): boolean {
+    return this.isLoading;
+  }
+
+  /** Snapshot string for a host — used as useSyncExternalStore getSnapshot. */
+  getHostSnapshot(hostId: number): StatusValue {
+    return this.getStatus(hostId);
+  }
+
+  getMetaSnapshot(): string {
+    return `${this.initialLoadComplete ? 1 : 0}:${this.isLoading ? 1 : 0}:${this.enabledHostIds.size}`;
+  }
+
+  subscribeHost(hostId: number, listener: Listener): () => void {
+    let set = this.hostListeners.get(hostId);
+    if (!set) {
+      set = new Set();
+      this.hostListeners.set(hostId, set);
+    }
+    set.add(listener);
+    return () => {
+      set!.delete(listener);
+      if (set!.size === 0) {
+        this.hostListeners.delete(hostId);
+      }
+    };
+  }
+
+  subscribeAll(listener: Listener): () => void {
+    this.allListeners.add(listener);
+    return () => {
+      this.allListeners.delete(listener);
+    };
+  }
+
+  subscribeMeta(listener: Listener): () => void {
+    this.metaListeners.add(listener);
+    return () => {
+      this.metaListeners.delete(listener);
+    };
+  }
+
+  setEnabledHostIds(next: Set<number>): void {
+    if (setsEqual(this.enabledHostIds, next)) return;
+    const prev = this.enabledHostIds;
+    this.enabledHostIds = next;
+    this.emitMeta();
+    // Hosts that entered/left the enabled set need a status re-read.
+    for (const id of next) {
+      if (!prev.has(id)) this.emitHost(id);
+    }
+    for (const id of prev) {
+      if (!next.has(id)) this.emitHost(id);
+    }
+    this.emitAll();
+  }
+
+  setLoading(loading: boolean): void {
+    if (this.isLoading === loading) return;
+    this.isLoading = loading;
+    this.emitMeta();
+    this.emitAll();
+  }
+
+  setInitialLoadComplete(complete: boolean): void {
+    if (this.initialLoadComplete === complete) return;
+    this.initialLoadComplete = complete;
+    this.emitMeta();
+    this.emitAll();
+  }
+
+  /**
+   * Replace status map. Notifies only hosts whose status value changed,
+   * plus allListeners when any change occurred.
+   */
+  applyStatuses(next: Map<number, ServerStatusEntry>): void {
+    const changedIds: number[] = [];
+
+    for (const [id, entry] of next) {
+      const prev = this.statuses.get(id);
+      if (!prev || prev.status !== entry.status) {
+        changedIds.push(id);
+      }
+    }
+    for (const id of this.statuses.keys()) {
+      if (!next.has(id)) {
+        changedIds.push(id);
+      }
+    }
+
+    if (changedIds.length === 0) {
+      // Still refresh lastChecked silently without notifying.
+      this.statuses = next;
+      return;
+    }
+
+    this.statuses = next;
+    for (const id of changedIds) {
+      this.emitHost(id);
+    }
+    this.emitAll();
+  }
+
+  markDegraded(enabledIds: Iterable<number>): void {
+    const next = new Map(this.statuses);
+    let changed = false;
+    const now = new Date().toISOString();
+    for (const id of enabledIds) {
+      const existing = next.get(id);
+      if (existing?.status === "degraded") continue;
+      changed = true;
+      next.set(id, {
+        status: "degraded",
+        lastChecked: existing?.lastChecked || now,
+      });
+    }
+    if (changed) {
+      this.applyStatuses(next);
+    }
+  }
+
+  private emitHost(hostId: number): void {
+    const set = this.hostListeners.get(hostId);
+    if (!set) return;
+    for (const listener of set) listener();
+  }
+
+  private emitAll(): void {
+    for (const listener of this.allListeners) listener();
+  }
+
+  private emitMeta(): void {
+    for (const listener of this.metaListeners) listener();
+  }
+}
+
+function setsEqual(a: Set<number>, b: Set<number>): boolean {
+  if (a.size !== b.size) return false;
+  for (const id of a) {
+    if (!b.has(id)) return false;
+  }
+  return true;
+}
@@ -1,309 +0,0 @@
-import { describe, it, expect } from "vitest";
-import { highlightTerminalOutput } from "./terminal-syntax-highlighter.js";
-
-const ESC = "\x1b";
-
-describe("highlightTerminalOutput", () => {
-  it("returns empty/whitespace text unchanged", () => {
-    expect(highlightTerminalOutput("")).toBe("");
-    expect(highlightTerminalOutput("   ")).toBe("   ");
-  });
-
-  it("wraps ERROR in bright red", () => {
-    const out = highlightTerminalOutput("Something ERROR happened");
-    expect(out).toContain(ESC + "[91m");
-    expect(out).toContain("ERROR");
-  });
-
-  it("wraps lowercase error in bright red (case-insensitive)", () => {
-    const out = highlightTerminalOutput("something error happened");
-    expect(out).toContain(ESC + "[91m");
-  });
-
-  it("wraps Error (mixed case) in bright red", () => {
-    const out = highlightTerminalOutput("Error: connection refused");
-    expect(out).toContain(ESC + "[91m");
-  });
-
-  it("wraps warn (lowercase) in bright yellow", () => {
-    const out = highlightTerminalOutput("warn: disk almost full");
-    expect(out).toContain(ESC + "[93m");
-  });
-
-  it("wraps warning (lowercase) in bright yellow", () => {
-    const out = highlightTerminalOutput("warning: something is off");
-    expect(out).toContain(ESC + "[93m");
-  });
-
-  it("highlights IPv4 addresses in magenta", () => {
-    const out = highlightTerminalOutput("connect to 192.168.1.10 now");
-    expect(out).toContain("192.168.1.10");
-    expect(out).toContain(ESC + "[35m");
-  });
-
-  it("leaves text with no matchable tokens unchanged", () => {
-    const plain = "just a normal sentence here";
-    expect(highlightTerminalOutput(plain)).toBe(plain);
-  });
-
-  it("leaves text ending in an incomplete ANSI escape untouched", () => {
-    const partial = `loading${ESC}[`;
-    expect(highlightTerminalOutput(partial)).toBe(partial);
-  });
-
-  it("skips TUI cursor-positioning frames (nano/vim protection)", () => {
-    const tuiFrame = `${ESC}[H${ESC}[2J some nano content`;
-    expect(highlightTerminalOutput(tuiFrame)).toBe(tuiFrame);
-  });
-
-  it("skips private TUI mode sequences", () => {
-    const tuiFrame = `${ESC}[?1049h${ESC}[?25lERROR at /var/log/app.log`;
-    expect(highlightTerminalOutput(tuiFrame)).toBe(tuiFrame);
-  });
-
-  it("skips bracketed paste mode sequences", () => {
-    const chunk = `${ESC}[?2004hERROR: enabled paste mode`;
-    expect(highlightTerminalOutput(chunk)).toBe(chunk);
-  });
-
-  it("highlights text that already has ANSI codes", () => {
-    let heavy = "";
-    for (let i = 0; i < 12; i++) heavy += `${ESC}[32mgreen${ESC}[0m `;
-    heavy += "ERROR at line 5";
-    const out = highlightTerminalOutput(heavy);
-    expect(out).toContain(ESC + "[91m");
-  });
-
-  it("does not process lines exceeding MAX_LINE_LENGTH", () => {
-    const huge = "ERROR " + "x".repeat(3000);
-    expect(highlightTerminalOutput(huge)).toBe(huge);
-  });
-
-  it("highlights simple absolute paths in cyan", () => {
-    const out = highlightTerminalOutput("log at /var/log/nginx/access.log");
-    expect(out).toContain(ESC + "[36m");
-    expect(out).toContain("/var/log/nginx/access.log");
-  });
-
-  it("highlights absolute paths with glob wildcards in cyan", () => {
-    const out = highlightTerminalOutput("files: /usr/share/doc/*/copyright");
-    expect(out).toContain(ESC + "[36m");
-    expect(out).toContain("/usr/share/doc/*/copyright");
-  });
-
-  it("highlights home paths in cyan", () => {
-    const out = highlightTerminalOutput("file: ~/documents/notes.txt");
-    expect(out).toContain(ESC + "[36m");
-    expect(out).toContain("~/documents/notes.txt");
-  });
-
-  it("highlights bracket timestamps in bright black", () => {
-    const out = highlightTerminalOutput("[12:34:56] server started");
-    expect(out).toContain(ESC + "[90m");
-    expect(out).toContain("[12:34:56]");
-  });
-
-  it("does not highlight out-of-range bracket timestamps", () => {
-    // [99:99] is not a valid time
-    const out = highlightTerminalOutput("[99:99] something");
-    expect(out).not.toContain(ESC + "[90m");
-  });
-
-  it("highlights ISO date timestamps in bright black", () => {
-    const out = highlightTerminalOutput("2024-01-15 event occurred");
-    expect(out).toContain(ESC + "[90m");
-    expect(out).toContain("2024-01-15");
-  });
-
-  it("does not highlight version strings as ISO dates", () => {
-    // 2.4.0 or 1.2024.3 should not trigger ISO date
-    const out = highlightTerminalOutput("version 2.4.0 released");
-    expect(out).toBe("version 2.4.0 released");
-  });
-
-  it("highlights labeled numbers (port)", () => {
-    const out = highlightTerminalOutput("listening on port 8080");
-    expect(out).toContain(ESC + "[96m");
-    expect(out).toContain("8080");
-  });
-
-  it("highlights labeled numbers (exit)", () => {
-    const out = highlightTerminalOutput("process exited with exit 1");
-    expect(out).toContain(ESC + "[96m");
-  });
-
-  it("highlights labeled numbers (status)", () => {
-    const out = highlightTerminalOutput("returned status 404");
-    expect(out).toContain(ESC + "[96m");
-  });
-
-  it("does not highlight standalone numbers outside labeled context", () => {
-    const out = highlightTerminalOutput("there are 42 files here");
-    expect(out).toBe("there are 42 files here");
-  });
-
-  it("does not highlight 'up' or 'active' as success", () => {
-    const out = highlightTerminalOutput("service is up and running");
-    expect(out).not.toContain(ESC + "[92m");
-  });
-
-  it("highlights unambiguous success keywords (case-insensitive)", () => {
-    const out = highlightTerminalOutput("Test passed successfully");
-    expect(out).toContain(ESC + "[92m");
-  });
-
-  it("highlights URLs with blue+underline", () => {
-    const out = highlightTerminalOutput("visit https://example.com now");
-    expect(out).toContain(ESC + "[34m");
-    expect(out).toContain(ESC + "[4m");
-  });
-
-  it("preserves \\r in CRLF terminal output", () => {
-    const out = highlightTerminalOutput("ERROR occurred\r\n");
-    expect(out).toContain("\r\n");
-  });
-
-  it("processes multi-line text line by line", () => {
-    const text = "some output\nERROR: failed\n";
-    const out = highlightTerminalOutput(text);
-    expect(out).toContain(ESC + "[91m");
-  });
-
-  it("respects category options - disabling logLevels skips error highlight", () => {
-    const out = highlightTerminalOutput("ERROR occurred", { logLevels: false });
-    expect(out).not.toContain(ESC + "[91m");
-  });
-
-  it("respects category options - disabling paths skips path highlight", () => {
-    const out = highlightTerminalOutput("at /usr/share/doc/something/file", {
-      paths: false,
-    });
-    expect(out).not.toContain(ESC + "[36m");
-  });
-
-  it("respects category options - disabling urls skips url highlight", () => {
-    const out = highlightTerminalOutput("see https://example.com", {
-      urls: false,
-    });
-    expect(out).not.toContain(ESC + "[34m");
-  });
-
-  it("respects category options - disabling ipAddresses skips IP highlight", () => {
-    const out = highlightTerminalOutput("connect to 192.168.1.1", {
-      ipAddresses: false,
-    });
-    expect(out).not.toContain(ESC + "[35m");
-  });
-
-  it("respects category options - disabling timestamps skips ISO date highlight", () => {
-    const out = highlightTerminalOutput("2024-01-15 something", {
-      timestamps: false,
-    });
-    expect(out).not.toContain(ESC + "[90m");
-  });
-
-  it("respects category options - disabling numbers skips port highlight", () => {
-    const out = highlightTerminalOutput("listening on port 8080", {
-      numbers: false,
-    });
-    expect(out).not.toContain(ESC + "[96m");
-  });
-
-  it("skips highlighting when chunk contains a mid-line carriage return", () => {
-    // Progress bars and shell prompt redraws use \r to overwrite the current line
-    const chunk = "downloading...\rdownloading [====] 100%";
-    expect(highlightTerminalOutput(chunk)).toBe(chunk);
-  });
-
-  it("still processes CRLF line endings (\\r\\n is fine)", () => {
-    const out = highlightTerminalOutput("ERROR occurred\r\n");
-    expect(out).toContain(ESC + "[91m");
-  });
-
-  it("does not highlight shell prompt lines (user@host:path$)", () => {
-    const prompt = `${ESC}[01;32mpi@raspberrypi${ESC}[00m:${ESC}[01;34m/home/pi${ESC}[00m$ `;
-    const out = highlightTerminalOutput(prompt);
-    expect(out).toBe(prompt);
-  });
-
-  it("does not highlight plain-text shell prompt line", () => {
-    const prompt = "pi@raspberrypi:/home/pi$ ";
-    const out = highlightTerminalOutput(prompt);
-    expect(out).toBe(prompt);
-  });
-
-  it("does not highlight log keywords inside bracketed SSH headings", () => {
-    const out = highlightTerminalOutput("[info@archlinux] command output");
-    expect(out).toBe("[info@archlinux] command output");
-  });
-
-  it("still highlights log keywords after a bracketed SSH heading", () => {
-    const out = highlightTerminalOutput("[warning@host] command ERROR");
-    expect(out).not.toContain(`${ESC}[93mwarning`);
-    expect(out).toContain(`${ESC}[91mERROR`);
-  });
-
-  it("does not highlight 'success' when immediately followed by a path (cd output)", () => {
-    // Some shells print "success~/new/dir" or "success/path" after a cd command
-    const out = highlightTerminalOutput("success~/home/user/projects");
-    expect(out).not.toContain(ESC + "[92m");
-  });
-
-  it("still highlights 'success' when not followed by a path separator", () => {
-    const out = highlightTerminalOutput("Build success: all tests passed");
-    expect(out).toContain(ESC + "[92m");
-  });
-
-  it("highlights output lines but not the prompt in a mixed chunk", () => {
-    const chunk = `ERROR: disk full\npi@raspberrypi:~$ `;
-    const out = highlightTerminalOutput(chunk);
-    // The error line should be highlighted
-    expect(out).toContain(ESC + "[91m");
-    // The prompt line should be unchanged
-    expect(out).toContain("pi@raspberrypi:~$ ");
-    const promptLine = out.split("\n")[1];
-    expect(promptLine).toBe("pi@raspberrypi:~$ ");
-  });
-
-  it("does not highlight paths inside a command-echo line (prompt + command)", () => {
-    // When the shell echoes the user's command, it prefixes the prompt.
-    // The path in the prompt portion (/home/user) must not be highlighted —
-    // the shell already colored it, and re-coloring it causes the doubled-path bug.
-    const echo = "user@host:/home/user$ cd /opt/app/bin/files";
-    const out = highlightTerminalOutput(echo);
-    expect(out).toBe(echo);
-  });
-
-  it("does not highlight paths in colored command-echo lines (root prompt)", () => {
-    const echo = `${ESC}[01;32mroot@host${ESC}[00m:${ESC}[01;34m/home/user${ESC}[00m# cd /opt/app/bin/files`;
-    const out = highlightTerminalOutput(echo);
-    expect(out).toBe(echo);
-  });
-
-  it("does not highlight the last line of a multi-line chunk with no trailing newline", () => {
-    // In a multi-line chunk, the trailing fragment without \n could be a live
-    // readline input line. Injecting ANSI bytes there breaks bash's cursor
-    // arithmetic (causes cursor jump / text shift when using arrow keys).
-    const chunk = "ERROR: disk full\nuser@host:/path$ cd /var/log";
-    const out = highlightTerminalOutput(chunk);
-    // First line (terminated by \n) gets highlighted
-    expect(out.split("\n")[0]).toContain(ESC + "[91m");
-    // Last unterminated fragment is left verbatim
-    expect(out.split("\n")[1]).toBe("user@host:/path$ cd /var/log");
-  });
-
-  it("still highlights a single-line chunk with no trailing newline", () => {
-    // A single-line chunk with no \n is plain command output, not a readline
-    // input fragment — highlight it normally.
-    const out = highlightTerminalOutput("ERROR: something failed");
-    expect(out).toContain(ESC + "[91m");
-  });
-
-  it("highlights all lines when the chunk ends with a newline", () => {
-    // When a chunk ends with \n every line is complete output — highlight them all.
-    const chunk = "ERROR: disk full\nconnect to /var/run/app.sock\n";
-    const out = highlightTerminalOutput(chunk);
-    expect(out.split("\n")[0]).toContain(ESC + "[91m");
-    expect(out.split("\n")[1]).toContain(ESC + "[36m");
-  });
-});
@@ -61,6 +61,8 @@ const MAX_LINE_LENGTH = 2000;
 // (mc, nano, vim, htop). If a chunk contains these, highlighting can inject
 // extra SGR bytes into a full-screen redraw and corrupt xterm's cursor state.
 const TUI_SEQUENCE = /\x1b\[(?:[\d;]*[ABCDEFGHJKST]|\?[\d;]*[hl])/;
+const TUI_FRAME_SEQUENCE = /[\u2500-\u257f]|\x1b[()][0B]|\x1b\[[0-9;]*[~`]/;
+const CONTROL_STRING_SEQUENCE = /\x1b[\]P^_]/;

 // A bare \r (not immediately followed by \n) means the terminal is overwriting
 // the current line (shell prompts, progress bars). Highlighting mid-rewrite
@@ -376,6 +378,7 @@ function highlightLine(
  const bare = cr ? line.slice(0, -1) : line;

  if (!bare.trim()) return line;
+  if (bare.length > MAX_LINE_LENGTH) return line;
  if (isShellPromptLine(bare)) return line;

  const segments = parseAnsiSegments(bare);
@@ -398,6 +401,8 @@ export function highlightTerminalOutput(
  if (hasIncompleteAnsiSequence(text)) return text;

  if (TUI_SEQUENCE.test(text)) return text;
+  if (TUI_FRAME_SEQUENCE.test(text)) return text;
+  if (CONTROL_STRING_SEQUENCE.test(text)) return text;
  if (MID_LINE_CR.test(text)) return text;

  const activePatterns = buildActivePatterns(options);
@@ -0,0 +1,48 @@
+/**
+ * Short-lived in-memory cache with in-flight request deduplication.
+ * Concurrent callers share one loader promise; failures are not cached.
+ */
+export type TtlRequestCache<T> = {
+  get(loader: () => Promise<T>): Promise<T>;
+  invalidate(): void;
+  peek(): T | null;
+};
+
+export function createTtlRequestCache<T>(ttlMs: number): TtlRequestCache<T> {
+  let cached: { value: T; expiresAt: number } | null = null;
+  let inflight: Promise<T> | null = null;
+
+  return {
+    get(loader: () => Promise<T>): Promise<T> {
+      if (cached && Date.now() < cached.expiresAt) {
+        return Promise.resolve(cached.value);
+      }
+      if (inflight) {
+        return inflight;
+      }
+
+      inflight = (async () => {
+        try {
+          const value = await loader();
+          cached = { value, expiresAt: Date.now() + ttlMs };
+          return value;
+        } finally {
+          inflight = null;
+        }
+      })();
+
+      return inflight;
+    },
+
+    invalidate(): void {
+      cached = null;
+    },
+
+    peek(): T | null {
+      if (cached && Date.now() < cached.expiresAt) {
+        return cached.value;
+      }
+      return null;
+    },
+  };
+}
@@ -1,21 +0,0 @@
-import { describe, it, expect } from "vitest";
-import { cn } from "./utils.js";
-
-describe("cn", () => {
-  it("joins class names", () => {
-    expect(cn("a", "b")).toBe("a b");
-  });
-
-  it("drops falsy values", () => {
-    expect(cn("a", false, null, undefined, "b")).toBe("a b");
-  });
-
-  it("merges conflicting tailwind classes, keeping the last", () => {
-    expect(cn("p-2", "p-4")).toBe("p-4");
-    expect(cn("text-red-500", "text-blue-500")).toBe("text-blue-500");
-  });
-
-  it("supports conditional object syntax", () => {
-    expect(cn("base", { active: true, hidden: false })).toBe("base active");
-  });
-});