release-2.4.1

.github/workflows/dependabot-retarget.yml

@@ -14,7 +14,7 @@ jobs:
     runs-on: blacksmith-2vcpu-ubuntu-2404
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           fetch-depth: 1
 

.github/workflows/electron.yml

@@ -734,8 +734,6 @@ jobs:
           CHECKSUM_X64="${{ steps.appimage-info.outputs.checksum_x64 }}"
           CHECKSUM_ARM64="${{ steps.appimage-info.outputs.checksum_arm64 }}"
           RELEASE_DATE="${{ steps.package-version.outputs.release_date }}"
-          APPIMAGE_X64_NAME="${{ steps.appimage-info.outputs.appimage_x64_name }}"
-          APPIMAGE_ARM64_NAME="${{ steps.appimage-info.outputs.appimage_arm64_name }}"
 
           mkdir -p flatpak-submission
 
@@ -762,6 +760,58 @@ jobs:
           path: flatpak-submission/*
           retention-days: 30
 
+      - name: Check for Flathub token
+        id: check_flathub_token
+        run: |
+          if [ -n "${{ secrets.FLATHUB_TOKEN }}" ]; then
+            echo "has_token=true" >> $GITHUB_OUTPUT
+          fi
+
+      - name: Open PR on Flathub repo
+        if: steps.check_flathub_token.outputs.has_token == 'true'
+        env:
+          GH_TOKEN: ${{ secrets.FLATHUB_TOKEN }}
+          VERSION: ${{ steps.package-version.outputs.version }}
+        run: |
+          FLATHUB_REPO="flathub/com.karmaa.termix"
+          BRANCH="release-$VERSION"
+
+          git config --global user.name "LukeGus"
+          git config --global user.email "bugattiguy527@gmail.com"
+
+          git clone "https://x-access-token:${GH_TOKEN}@github.com/${FLATHUB_REPO}.git" flathub-repo
+          cd flathub-repo
+
+          git checkout -b "$BRANCH"
+
+          cp ../flatpak-submission/com.karmaa.termix.yml ./
+          cp ../flatpak-submission/com.karmaa.termix.desktop ./
+          cp ../flatpak-submission/com.karmaa.termix.metainfo.xml ./
+          cp ../flatpak-submission/flathub.json ./
+          cp ../flatpak-submission/com.karmaa.termix.svg ./
+          cp ../flatpak-submission/icon-256.png ./
+          cp ../flatpak-submission/icon-128.png ./
+
+          if git diff --quiet && git diff --cached --quiet; then
+            echo "No changes to submit for $VERSION; Flathub repo already up to date."
+            exit 0
+          fi
+
+          git add -A
+          git commit -m "Update to $VERSION"
+          git push origin "$BRANCH"
+
+          EXISTING_PR=$(gh pr list --repo "$FLATHUB_REPO" --head "$BRANCH" --state open --json number -q '.[0].number' || true)
+          if [ -z "$EXISTING_PR" ]; then
+            gh pr create --repo "$FLATHUB_REPO" \
+              --base master \
+              --head "$BRANCH" \
+              --title "Update to $VERSION" \
+              --body "Automated release update to version $VERSION."
+          else
+            echo "PR #$EXISTING_PR already open for $BRANCH."
+          fi
+
   submit-to-homebrew:
     runs-on: blacksmith-6vcpu-macos-latest
     if: inputs.artifact_destination == 'submit' && (inputs.build_type == 'all' || inputs.build_type == 'macos')

.github/workflows/release.yml

@@ -85,14 +85,14 @@ jobs:
     runs-on: blacksmith-2vcpu-ubuntu-2404
     steps:
       - name: Checkout dev branch
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           ref: ${{ needs.prep.outputs.dev_branch }}
           fetch-depth: 0
           token: ${{ secrets.GHCR_TOKEN }}
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version-file: ".nvmrc"
           cache: "npm"
@@ -137,17 +137,25 @@ jobs:
     runs-on: blacksmith-2vcpu-ubuntu-2404
     steps:
       - name: Checkout dev branch
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           ref: ${{ needs.prep.outputs.dev_branch }}
           fetch-depth: 0
           token: ${{ secrets.GHCR_TOKEN }}
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version-file: ".nvmrc"
 
+      - name: Merge main into dev branch
+        run: |
+          git config user.name "LukeGus"
+          git config user.email "bugattiguy527@gmail.com"
+          git fetch origin main
+          git merge origin/main -X ours --no-edit || true
+          git push origin HEAD:"${{ needs.prep.outputs.dev_branch }}"
+
       - name: Clean up stale Crowdin git integration branch
         continue-on-error: true
         env:
@@ -287,13 +295,13 @@ jobs:
     runs-on: blacksmith-2vcpu-ubuntu-2404
     steps:
       - name: Checkout main
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           ref: main
           fetch-depth: 1
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version-file: ".nvmrc"
 
@@ -399,14 +407,14 @@ jobs:
     runs-on: blacksmith-2vcpu-ubuntu-2404
     steps:
       - name: Checkout Termix
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           ref: ${{ needs.merge-to-main.outputs.build_ref }}
           fetch-depth: 1
           path: termix
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version-file: "termix/.nvmrc"
           cache: "npm"
@@ -419,7 +427,7 @@ jobs:
           npm run generate:openapi
 
       - name: Checkout Docs repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           repository: Termix-SSH/Docs
           ref: main
@@ -488,13 +496,13 @@ jobs:
     runs-on: blacksmith-2vcpu-ubuntu-2404
     steps:
       - name: Checkout main
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           ref: main
           fetch-depth: 1
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version-file: ".nvmrc"
 

.gitignore

@@ -33,3 +33,5 @@ electron/build-info.cjs
 /.mcp.json
 /CLAUDE.md
 /old_db/
+/scripts/fix-bugs.mjs
+/scripts/fix-features.mjs

RELEASE_NOTES.md

@@ -1,6 +1,6 @@
 <!-- SUMMARY -->
 
-Bug fixes and new features, including Proxmox integration, SSO/OIDC redesign, revamped host metrics, tmux session management, and numerous UI and stability improvements.
+Dozens of bug fixes and small new features, including VNC/RDP sharing, OIDC improvements, file manager fixes, SSH jump host fixes, terminal enhancements, RDP keyboard layout support, and much more.
 
 <!-- /SUMMARY -->
 
@@ -12,42 +12,112 @@ https://youtu.be/ImwAbm4hW-k
 
 <!-- UPDATE_LOG -->
 
-- Improved terminal syntax highlighting with more customizability and reliability (toggle setting moved from user profile to host editor)
-- Tmux session monitor/management
-- Tailscale SSH authentication and device listing support
-- SSO/OIDC redesign (multiple OIDC providers, LDAP, Google, GitHub support)
-- Terminal session logging
-- Customize side rail tab visibility
-- Admin audit log
-- Added `x.x.x` version tag alongside `release-x.x.x` for Docker
-- OIDC custom group claim support
-- Renamed server stats to host metrics
-- Fully revamped host metrics page with new cards and dashboard like organizing system (services, process inspector, log viewer, cron jobs, packages, ssl cert management, firewall, user/permissions, health checks, disk breakdown, timers, and top by memory)
-- Proxmox guest discovery and import integration
-- Moved ssh host config outside of top tab bar and into new tab bar visible on SSH tab
-- Improved folder management (nested folders, folder icons, folder colors, better folder selection, etc.)
-- Storage preference to user profile settings (store/load toggles locally or in the DB)
-- Sort/filter functions to credential list (copy of host list)
+- VNC, RDP, and Telnet credential sharing support
+- Default host settings (SOCKS5, credentials, terminal settings, and more)
+- Custom terminal background image per host
+- Silent OIDC login configurable as default (no URL parameter required)
+- Bulk open SSH sessions for multiple selected hosts at once
+- Improved Nord theme contrast and accessibility
+- Admin can manually create users while registration is disabled
+- OIDC auto-provisioned users supported when registration and password login are disabled
+- OIDC username usable as SSH username credential
+- Custom labels and drag-to-reorder for sessions in the Connections panel
+- Appearance and profile settings persisted to the database across devices
+- Saved server URL dropdown in the app connection screen
+- File manager text editor font size adjustment
+- Tab key shortcut for entering your username in the terminal
+- Shift+Tab hotkey support for mobile
+- Terminal keyboard shortcuts support
+- UTF-8 encoding support in the file manager
+- Optional broadcast address for Wake-on-LAN packets
+- SFTP legacy mode support
+- Snippets JSON import and export with folder metadata
+- Clickable links and service shortcuts on the dashboard
+- Host status color indicators restored to sidebar
+- Per-host configuration to set tab title to shell's window title instead of host name
+- Split screen hotkeys
+- Support for AZERTY and other non-QWERTY keyboard layouts in RDP
+- RDP load balancing info and Connection Broker Cookie support
+- Per-connection guacd proxy host and port configuration
+- Deep link support for bookmarking direct SSH or file manager sessions
+- ACME/Certbot SSL certificate support
+- Import hosts from SSH config file
+- OIDC with custom CA certificate support
+- Open files directly in the file manager text editor
+- File manager text editor Ctrl+W capture to prevent accidental tab close
+- Option to collapse hosts to a single line in the sidebar
+- Select a different backend Termix server from within the app
+- Windows portable app now truly portable (no registry writes)
+- Bundle fonts for offline environments
+- Option to disable clickable links in the terminal
+- Proxmox login options including OPKSSH
+- UI suggestions and general interface improvements
+- Per-protocol host metrics (online/offline detection) configuration
+- Increase file manager max upload size by splicing files and reassembling them (~5GB)
 <!-- /UPDATE_LOG -->
 
 <!-- BUG_FIXES -->
 
-- SFTP jump-host fallback from host data
-- Guacd password incorrectly passed for app view
-- Admin page failing to load admin information
-- Disabled hardware acceleration on Windows to prevent startup crash
-- Dashboard total credentials stuck at 0
-- Host username ignored when credential attached
-- Clone host cannot switch auth method
-- File manager context menu off-screen
-- File delete affecting inactive tabs
-- Silent delete failure on Windows hosts
-- iPad host tab does nothing
-- Docker console terminal background using incorrect colors
-- Reliable OIDC group syncing for admin roles
-- Guacd connections using incorrect screen height
-- 2FA failing to disable
-- Hostname fill entire column and truncate at proper spot in dashboard
-- Make credentials start collapsed
-- Incorrect JSDoc comments
+- File transfers over 100MB failing
+- File transfers over 30 seconds aborted by axios timeout
+- SSH terminal through jump host chain timing out with malformed SSH messages
+- Cloning a host with SSH key auth not allowing auth method change on the clone
+- File deletion in the file manager affecting selected files in inactive tabs
+- File manager not connecting when cert passphrase is not saved
+- File text editor cursor position lost on save
+- macOS Option + Left/Right Arrow outputting raw ANSI sequences instead of moving cursor by word
+- File manager tree view not sorted alphabetically
+- SFTP failing with timeout when using a jump host chain
+- SSH key auth with Duo not showing prompt and failing immediately
+- Enabling 2FA with password login disabled causing a login deadlock
+- Failed to disable 2FA even when providing correct TOTP or password
+- Arrow buttons not working in Midnight Commander on the Android app
+- Credential deploy command copy failing silently (clipboard API unavailable in some browsers)
+- Disabling password login still showing the password login form
+- Folder picker in the new host form not showing existing folders
+- Command palette always opening hosts as SSH terminal regardless of protocol settings
+- Saving SSH credentials failing on fresh installs
+- Import hosts failing when hosts use SSH key credentials
+- Warpgate authentication prompting for a password unnecessarily
+- File manager folder icon not appearing under host name on hover
+- File manager delete silently failing on Windows hosts (rm -f not supported by PowerShell)
+- SSH terminal failing with keepalive timeout when server MOTD is slow to load
+- SSH connection via SOCKS5 proxy failing after update
+- Linking an OIDC account to a password account not working
+- User password copy missing and RBAC issues in admin panel
+- Debian and Android packages not opening the server on launch
+- Username field in host edit and new host form having no effect
+- Mobile terminal crashing on iOS with React error 130
+- Network interface symbols incorrect in host metrics
+- Sudo password auto-fill not working on Ubuntu Server 26.04
+- get_cwd command injecting into live PTY and corrupting interactive programs
+- Initial directory command failing on Windows PowerShell SSH targets
+- 3-way split not working with layout issues
+- Docker management not working for Windows hosts
+- Docker management failing on Debian with exit code 1
+- Docker logs not respecting the current theme
+- API not responding correctly after update
+- Caddy reverse proxy configuration not working
+- Wrong keyboard layout in VNC sessions
+- KDE scaling issues in the desktop app
+- Linux app failing to start due to better-sqlite3 Node version mismatch
+- Tab autocomplete not working in the macOS x86 app
+- Cloudflare SSL tunnels with third-level subdomains blocking Termix web portal access
+- Fzf completion not working in the Android app
+- SSH terminal frame delivery jitter in Docker (ssh2 native crypto not compiled)
+- OIDC login failing in Linux and Android apps when Authentik has a Captcha stage
+- Android app crashing after entering password when auth is set to None
+- Editing or saving a host clearing the password for RDP and VNC connections
+- Hardcoded 30-minute open-tabs TTL defeating session persistence
+- Keyboard mapping issues on Windows Server 2019 via RDP
+- Shared server not appearing for other users
+- RBAC role assignment failing for OIDC users
+- SSO configuration broken when supplied via environment variables
+- RDP requiring credentials even when none are needed
+- Terminal outputting success right after folder path
+- GitHub/Google SSO provider giving ERR_INVALID_URL
+- Keyboard focus not on main screen when selecting tmux session
+- Remove all references to SALT variable
+- Syntax highlighter duplicating path, visual corruptions, cursor jumps, etc.
+- RDP session screen clips/spills over on viewport resize
 <!-- /BUG_FIXES -->

build/after-pack.cjs

@@ -0,0 +1,12 @@
+const fs = require("fs");
+const path = require("path");
+
+exports.default = async function afterPack(context) {
+  const { targets, appOutDir } = context;
+
+  const isDir = targets.some((t) => t.name === "dir");
+  if (!isDir) return;
+
+  const markerPath = path.join(appOutDir, ".portable");
+  fs.writeFileSync(markerPath, "");
+};

docker/Dockerfile

@@ -1,5 +1,5 @@
 # Stage 1: Install dependencies
-FROM node:24-slim AS deps
+FROM node:26-slim AS deps
 WORKDIR /app
 
 RUN apt-get update && apt-get install -y python3 make g++ && rm -rf /var/lib/apt/lists/*
@@ -36,7 +36,7 @@ RUN npm rebuild better-sqlite3
 RUN npm run build:backend
 
 # Stage 4: Production dependencies only
-FROM node:24-slim AS production-deps
+FROM node:26-slim AS production-deps
 WORKDIR /app
 
 RUN apt-get update && apt-get install -y python3 make g++ && rm -rf /var/lib/apt/lists/*
@@ -53,14 +53,14 @@ RUN npm ci --omit=dev --ignore-scripts && \
     npm cache clean --force
 
 # Stage 5: Final optimized image
-FROM node:24-slim
+FROM node:26-slim
 WORKDIR /app
 
 ENV DATA_DIR=/app/data \
     PORT=8080 \
     NODE_ENV=production
 
-RUN apt-get update && apt-get install -y nginx gettext-base openssl ca-certificates gosu wget && \
+RUN apt-get update && apt-get install -y nginx gettext-base openssl ca-certificates gosu wget certbot python3-certbot-dns-cloudflare && \
     update-ca-certificates && \
     rm -rf /var/lib/apt/lists/* && \
     mkdir -p /app/data /app/uploads /app/data/.opk /app/nginx /tmp/nginx && \

docker/entrypoint.sh

@@ -41,7 +41,7 @@ fi
 mkdir -p /tmp/nginx
 envsubst '${PORT} ${SSL_PORT} ${SSL_CERT_PATH} ${SSL_KEY_PATH}' < $NGINX_CONF_SOURCE > /tmp/nginx/nginx.conf
 
-mkdir -p /app/data /app/uploads /app/data/.opk
+mkdir -p /app/data /app/uploads /app/data/.opk /app/data/acme-webroot/.well-known/acme-challenge
 chmod 755 /app/data /app/uploads /app/data/.opk 2>/dev/null || true
 
 if [ -w /app/data ]; then