Skip to content

CHANGELOG.md

Latest commit

 

History

History
134 lines (112 loc) · 6.15 KB

CHANGELOG.md

File metadata and controls

134 lines (112 loc) · 6.15 KB

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

Fixed

Security Hardening

  • 1Password temp key files - Now created with restrictive ACLs (current-user-only) via FileSystemAclExtensions.Create, securely deleted on session close, with startup sweep for crash recovery
  • Atomic key file writes - KeyEncryptionService uses write-to-tmp + File.Move pattern to prevent corruption on crash
  • X11ForwardingService - Switched to ProcessStartInfo.ArgumentList with executable whitelist validation
  • KerberosAuthService - Switched to ProcessStartInfo.ArgumentList for consistency
  • op:// reference validation - Tightened regex to block ?, &, = characters in path segments
  • WebView2 CSP - Added Content-Security-Policy meta tag to terminal.html
  • WebView2 dialogs - Disabled JavaScript alert/prompt/confirm via AreDefaultScriptDialogsEnabled = false
  • Terminal error handler - Replaced innerHTML with safe textContent DOM API

Threading & Async

  • Dispatcher deadlocks - Changed all Dispatcher.Invoke to Dispatcher.InvokeAsync in TerminalPaneContainer, SystemTrayService, and StartupWindow
  • Debug.WriteLine in production - Replaced with ILogger<T>.LogError in SshTerminalControl and SnippetManagerViewModel
  • Fire-and-forget errors - All _ = SomeAsync() patterns now have .ContinueWith error logging
  • Sync-over-async deadlock - FileTerminalOutputSegment uses synchronous LoadSync() instead of .GetAwaiter().GetResult()
  • Event invocation in lock - WebTerminalBridge.DataWritten now invoked outside _previewBufferLock
  • Disposal consistency - WebTerminalControl._disposed uses Interlocked.CompareExchange pattern

Performance

  • ArrayPool in read loops - SshTerminalBridge and SerialTerminalBridge use ArrayPool<byte>.Shared to reduce GC pressure
  • AsNoTracking - Added to all read-only EF Core queries across 16 repositories
  • HostStatus polling - HostStatusHostedService uses in-memory cache instead of querying all hosts every 5 seconds
  • Preview throttling - WebTerminalBridge.UpdateOutputPreview throttled to 500ms intervals
  • Line count caching - TerminalOutputBuffer maintains _totalLineCount incrementally
  • Cache zero-copy - HostCacheService.GetAllHostsAsync returns IReadOnlyList<HostEntry> instead of .ToList()
  • Process timeout - AgentKeyService.RunProcessAsync enforces 30-second timeout with process kill

Data Layer

  • Detached entity overwrites - HostRepository.UpdateAsync and GroupRepository.UpdateAsync use fetch-then-SetValues pattern
  • WAL pragma moved - From DI registration to DatabaseInitializationHostedService.StartAsync
  • QuickConnectOverlayViewModel - Now registered in DI instead of created with new

Added

SSH Key Management

  • PPK Import Wizard - Multi-step wizard for batch importing PuTTY private key files
    • Drag-and-drop file selection
    • Automatic PPK file analysis (key type, encryption status, comment)
    • Passphrase entry for encrypted files
    • Configurable output directory
    • Optional re-encryption with new passphrase
    • Add converted keys to SSH agent automatically
    • Track imported keys in managed keys database
  • Key Encryption Service - Manage SSH private key passphrases
    • Encrypt unencrypted keys with a passphrase
    • Change existing key passphrases
    • Remove encryption from keys
    • Supports RSA and ECDSA keys in PKCS#8 format
    • Automatic backup before modifications
  • Agent Key Service - Programmatic SSH agent management
    • Add keys to Pageant or OpenSSH Agent
    • Remove keys from OpenSSH Agent
    • Check agent availability status
    • Secure temporary file handling for key content

PPK Conversion Enhancements

  • Batch conversion - Convert multiple PPK files in a single operation
  • Bidirectional conversion - Convert OpenSSH keys to PPK format (V2 or V3)
  • ConvertToPpkAsync and ConvertAndSaveAsPpkAsync methods for OpenSSH → PPK
  • ConvertBatchToOpenSshAsync and ConvertBatchAndSaveAsync for batch operations

1.0.0 - 2026-01-16

Added

Core Features

  • Host management with hostname, port, username, and authentication settings
  • Group organization for hosts with tagging support
  • Embedded xterm.js terminal with WebView2 rendering
  • Multiple terminal tabs
  • Split panes (horizontal and vertical)
  • Quick Connect command palette (Ctrl+K) with fuzzy search

Serial Port Connections

  • Full COM port support for embedded devices, routers, and network equipment
  • Configurable baud rate (300-230400), data bits, stop bits, parity, and handshake
  • DTR/RTS signal control
  • Local echo mode and configurable line endings (CRLF, LF, CR)
  • Serial Quick Connect dialog with port enumeration

Authentication

  • SSH Agent support (keys from ~/.ssh/ directory)
  • Private key file authentication
  • Password authentication with DPAPI encryption
  • Keyboard-interactive authentication (2FA support)
  • SSH host fingerprint verification

Security

  • DPAPI password encryption (Windows user-specific)
  • Secure in-memory credential caching with configurable timeout
  • Session lock credential clearing

Terminal Features

  • Full VT100/ANSI escape sequence support
  • Session recording and playback (ASCIINEMA v2 format)
  • Session logging to file
  • Find in terminal (Ctrl+F)
  • Broadcast input to multiple sessions
  • Command snippets/macros
  • Configurable scrollback buffer
  • Multiple terminal themes

Connection Features

  • Local and remote port forwarding
  • Jump host (ProxyJump) support
  • SFTP file browser with drag-and-drop
  • Remote file editor
  • Host status monitoring (ping)

Import/Export

  • SSH config import (~/.ssh/config)
  • SSH config export to OpenSSH format
  • PuTTY session import
  • Backup and restore
  • OneDrive cloud sync

UI

  • Modern dark theme with Fluent Design (WPF-UI)
  • System tray with quick-connect menu
  • Window state persistence
  • Connection history tracking