Allows OIDC-authenticated users to be auto-provisioned even when
"Allow new account registration" is disabled. Adds an admin UI toggle
and corresponding API endpoints (GET/PATCH /users/oidc-auto-provision).
Falls back to OIDC_ALLOW_REGISTRATION env var if the setting is unset.
Adds a "3-Way (H)" layout option (2 top + 1 bottom) alongside the
existing "3-Way (V)" (1 left + 2 right).
Fixes file manager content overflowing its split pane by adding
min-h-0 to nested flex containers that were missing it.
The default terminal font was configured but never loaded via CSS,
causing browsers to fall back to generic monospace. This broke column
alignment and TUI rendering (ncurses menus, box-drawing chars).
Replace hardcoded setTimeout timing with exec channel polling for
reliable tmux session readiness detection. Add meaningful session
naming (termix-<hostId>-<rand>), aggressive-resize for multi-client
support, and a detach button in the terminal UI.
* Improve Docker container list UI
* Rework SSH tunnel forwarding
* Update macOS Electron packaging
* Optimize frontend bundle splitting
* Add beta version update status
* Add client tunnel preset management
* Secure cookie authentication flows
* Add client tunnel bridge support
* Preserve sessions on restart
* Update runtime to Node 24
* Add client remote tunnel support
* Fix stale frontend cache handling
* Fix Docker image platforms for Node 24
* Fix Electron packaging workflows
* Fix client auth cache after upgrades
* chore: cleanup files
* fix: npm i error
* Fix OIDC auth cookie readiness
* Fix Docker npm ci config
* Add react-is peer dependency
* Fix Electron auth and cache handling
* Improve terminal clipboard and refresh actions
* feat: add API keys
* feat: improve lazy loading with loading spinners
* feat: Introduce FolderTree component with lazy-loading and motion animations for improved file manager UX (#735)
* feat: integrate FolderTree component with lazy-loading for file manager sidebar
- Add motion animation library (v12.38.0) for smooth UI transitions
- Create new FolderTree component with advanced keyboard navigation support
- Refactor kbd component: introduce KbdKey and KbdSeparator subcomponents
- Implement lazy-loading strategy for directory tree in FileManagerSidebar
- Refactor FileManagerSidebar with improved code organization and better separation of concerns
- Update keyboard shortcut displays across CommandPalette, FileViewer, and Dashboard
- Change React/ReactDOM dependency flags from dev to devOptional in package-lock.json
BREAKING CHANGE: KbdGroup component has been replaced. Use <Kbd><KbdKey>...</KbdKey><KbdSeparator /></Kbd> instead.
- Improves UX with smooth animations and better folder navigation
- Reduces initial load time through lazy-loading subdirectories
- Enhances accessibility with ARIA labels and keyboard navigation
- Maintains dark mode support and proper styling
* fix: incorrect use of the theme system and linked file manger sidebar with current folder
---------
Co-authored-by: suryacagur <suryacagur.dev@gmail.com>
Co-authored-by: LukeGus <bugattiguy527@gmail.com>
Co-authored-by: Luke Gustafson <88517757+LukeGus@users.noreply.github.com>
* Enhance VNC token generation to include optional username parameter and refactor username input handling in HostGeneralTab (#733)
* Fix Docker build info generation
* Remove unused node-fetch dependency
* feat: prompt user for SSH key passphrase on use (#715)
When an encrypted SSH key has no stored passphrase, show a lightweight
dialog prompting the user to enter it at connection time instead of
failing with a parse error. Supports both desktop and mobile terminals.
ClosesTermix-SSH/Support#354
* fix: prevent session crash when uploading to permission-denied directory (#716)
- Wrap writeFile sftp.stat callback in try-catch to prevent uncaught
exceptions from escaping the callback into the event loop
- Add missing stream.stderr error handler in writeFile fallback to
prevent unhandled error events from crashing the process
- Remove bogus activeOperations decrement in both writeFile and
uploadFile fallback methods (counter was never incremented)
- Add res.headersSent checks in fallback disconnect paths to prevent
ERR_HTTP_HEADERS_SENT crashes
ClosesTermix-SSH/Support#652
* feat: add LOG_TIMESTAMP_FORMAT env var for 24h/ISO log timestamps (#718)
Support LOG_TIMESTAMP_FORMAT environment variable with values:
- "24h": 24-hour format (14:58:45)
- "iso": ISO 8601 format (2026-04-25T14:58:45.000Z)
- default: locale format (2:58:45 PM)
ClosesTermix-SSH/Support#650
* feat: open file manager at terminal current working directory (#719)
* feat: open file manager at terminal current working directory
When right-clicking in the terminal and selecting "Open File Manager
Here", query the current working directory via a separate SSH exec
channel and pass it as the initial path to the file manager tab.
ClosesTermix-SSH/Support#649
* chore: sync package-lock.json with node-fetch and deps
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
* fix: remove undefined TerminalContextMenu from bad merge resolution
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---------
Co-authored-by: LukeGus <bugattiguy527@gmail.com>
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
Co-authored-by: Luke Gustafson <88517757+LukeGus@users.noreply.github.com>
* fix: show reconnect overlay when SSH server reboots (#720)
When the remote server reboots, the SSH connection closes while the
stream is still active. The close handler only sent the "disconnected"
message when sshStream was null, so the frontend never received the
disconnect notification and hung with a blinking cursor.
Change the else-if condition to always send the "disconnected" message
regardless of stream state.
ClosesTermix-SSH/Support#648
* feat: support read-only Docker container mode (#721)
Move nginx runtime files (config, pid, logs, temp dirs) from /app/nginx/
to /tmp/nginx/ so the container can run with read_only: true. Template
files remain in /app/nginx/ as read-only assets.
Users can now harden the container with:
read_only: true
tmpfs:
- /tmp
ClosesTermix-SSH/Support#647
* fix: allow editing host folder without re-entering password (#722)
When editing an existing host, the password field is stripped by the
backend for security. The form validation treated the empty password
as invalid, disabling the Update Host button even for non-auth changes
like folder assignment.
Use an "existing_password" sentinel (mirroring the existing
"existing_key" pattern) to represent an unchanged password during
editing, skip validation for it, and omit it from the update payload.
ClosesTermix-SSH/Support#645
* fix: auto-close tab on graceful SSH disconnect (exit/Ctrl+D) (#723)
Distinguish between graceful shell exit and unexpected disconnection
using the stream close event's exit code. When the shell exits normally
(code != null), send "session_ended" instead of "disconnected". The
frontend auto-closes the tab on session_ended, and shows the reconnect
overlay only on unexpected disconnections.
ClosesTermix-SSH/Support#643
* fix: reattach existing SSH session on WebSocket reconnect (#724)
WebSocket reconnection was always creating a new SSH connection with
full authentication instead of reattaching to the existing SSH session.
The condition `!isReconnectingRef.current` prevented session reattach
during reconnection, causing repeated password auth attempts that
trigger SSHGuard/fail2ban blocking.
Remove the guard so reconnection tries to reattach the persisted
session first. If the session has expired, the backend sends
sessionExpired and the frontend falls back to a new connection.
ClosesTermix-SSH/Support#644
* fix: prevent browser crash when uploading large files (>100MB) (#725)
The file-to-base64 conversion used a byte-by-byte string concatenation
loop (String.fromCharCode + btoa), which allocated ~3x the file size
in intermediate strings, causing the browser tab to OOM on files over
~100MB.
Replace with FileReader.readAsDataURL which delegates base64 encoding
to the browser engine natively, avoiding the intermediate allocations.
ClosesTermix-SSH/Support#577
* fix: support SSH multi-factor auth with publickey + password (#726)
When sshd requires AuthenticationMethods publickey,password, the
connection failed because the key auth branch only set privateKey
without also setting password. After publickey partial auth succeeded,
ssh2 sent keyboard-interactive (due to tryKeyboard:true) instead of
password, which the server rejected.
Pass the credential password alongside the private key so ssh2 can
complete the password step after publickey succeeds.
ClosesTermix-SSH/Support#629
* feat(oidc): add OIDC_ALLOW_REGISTRATION env to bypass allow_registration for OIDC (#727)
The `allow_registration` setting blocks both password-based and OIDC user
creation. Admins who want to close password registration but still onboard
new users via a trusted IdP (with the existing `OIDC_ALLOWED_USERS` whitelist)
have no way to do that today.
Introduce an `OIDC_ALLOW_REGISTRATION` env var. When set to `true`, the OIDC
callback skips the `allow_registration` settings check while still honoring
the `OIDC_ALLOWED_USERS` whitelist. Password registration via `POST
/users/create` continues to respect `allow_registration`.
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
* perf: lazy load locales, file previews, and decouple startup imports (#729)
* perf: lazy load locale bundles
* perf: lazy load file preview modules
* perf: avoid eager api client load on startup
* chore: remove dead code, tighten types, fix lint warnings (#730)
* chore: clean up low-risk lint warnings
* chore: tighten utility types
* chore: preserve backend error causes
* chore: simplify command palette host state
* chore: remove unused frontend code
* chore: prune stale frontend state
* chore: trim unused navigation code
* chore: prune unused user settings props
* chore: trim unused sidebar state
* chore: remove stale host editor imports
* chore: tighten shared frontend types
* chore: narrow desktop helper types
* chore: type network topology data
* chore: type connection log errors
* chore: use typed tab context
* chore: type api client error metadata
* chore: tighten terminal config types
* chore: type host proxy chains
* chore: type host editor form data
* chore: use typed host viewer fields
* chore: format app builder patch script
* Fix client auth cache after upgrades
* chore: fix pr checks after dev merge
* fix: remove duplicate session-expired useEffect in FullScreenAppWrapper
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---------
Co-authored-by: Xenthys <x@dis.gg>
Co-authored-by: LukeGus <bugattiguy527@gmail.com>
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
* fix: npm package warnings
* feat: reconnect after file manager disconnects
* feat: add docs button in api keys
* feat: change colors for server tunnels
* fix: fetch password from API for Copy Password button (#736)
* chore: update readme's
* feat: improve c2s UI in user profile
* feat: improve ssh key detection and move open file manager at path for terminal button
* fix: restore missing getHostPassword import in Tab.tsx (#737)
* fix: security related fixes
* feat: improve alert code
* Fix Electron clipboard handling
* fix: untranslated alert text
---------
Co-authored-by: Xenthys <x@dis.gg>
Co-authored-by: PT Kelana Tech Solutions <ptkelanatechsolutions@gmail.com>
Co-authored-by: suryacagur <suryacagur.dev@gmail.com>
Co-authored-by: zimmra <28514085+zimmra@users.noreply.github.com>
Co-authored-by: ZacharyZcR <zacharyzcr1984@gmail.com>
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
Co-authored-by: Fuad <funtik1229@yandex.ru>
LukeGus