OpenTerminal

98 Commits 4 Branches 26 Tags

3 Commits

Include renames

Author	SHA1	Message	Date
Bill	5ff311ea0f	docs+chore: refresh README/STATE, cache electron in CI, lock chord by keycode, misc P3 - README: add lock-screen section, refresh test list (13 offline tests), updater fallback order, data locations, architecture tree - STATE.md: v1.0.20, current release.cjs flow (no --skip-github), M11-M13 - ci.yml: actions/cache for the ~100MB Electron binary keyed on lockfile - .gitignore: ignore .env.* but keep committed templates - scripts/archive-releases.cjs moved in from tmp-test; KEEP_TAG is now a required CLI arg (a hardcoded default is how the wrong version gets wiped) - lockShortcuts: isPanicLockChord matches input.code ('KeyL') so Dvorak and non-Latin layouts trigger Ctrl+L lock correctly - settings: drop the dead single-option update-channel Select from About tab - Workspace/App: memo(IconRail/LayoutFlyout), useMemo layoutMenu keyed on language, useCallback onOpenSettings; drop unused IconRail onSplit prop	2026-10-07 22:06:58 +08:00
Bill	35583b2c15	feat(lock): main-window lock screen; harden env gating, sandbox and ssh teardown Lock screen (main-window overlay, no second window): - scrypt password verifier in <userData>/lock.json (per-write salt, timingSafeEqual); salt/hash/password never leave the main process - lock now / idle auto-lock / lock at startup, growing failure cooldown, lock flags persisted so a quit-and-relaunch cannot bypass the lock - locked shell and body portals go inert while sessions keep running; menu accelerators (reload, DevTools, zoom) are swallowed while locked - settings gains a Lock tab; all copy in zh-CN/zh-TW/en/ja Security and stability: - packaged builds ignore ELECTRON_RENDERER_URL / OT_UPDATE_URL (devEnv) - renderer preload runs with sandbox: true - unreadable known_hosts store fails closed instead of being overwritten - connect-time secrets gated by the bookmark's auth method (connectPromptFor) - ssh stream teardown is idempotent: PTY_EXIT broadcasts exactly once - sysinfo polling is refcounted for split panes (forceStopPolling on close) - session-log index entries are path-contained; settings store writes atomically with EPERM/EBUSY retry - sync-changelog tolerates CRLF checkouts (was a silent no-op) - retry ssh2 host-key generation (flaky malformed key, ~1/500) Tests: lock-store + lock-controller suites; transport-death PTY_EXIT e2e; GitHub Actions CI (typecheck + 10 offline tests + build)	2026-09-24 22:16:43 +08:00
Bill	c01d3eb365	feat: product website for GitHub Pages + author CodingPlan.Site Deploy website to GitHub Pages / deploy (push) Canceled after 0s Details - website/: zero-dependency static landing page (HTML+CSS), corporate light theme, real app screenshots, download links pointing to the git.codingplan.site release channel (exe/msi) with GitHub mirror - .github/workflows/deploy-website.yml: deploy website/ to GitHub Pages on push to main (paths: website/**) - package.json: author -> CodingPlan.Site - README: link to the site and its source folder	2026-09-21 09:11:05 +08:00

Author

SHA1

Message

Date

Bill

5ff311ea0f

docs+chore: refresh README/STATE, cache electron in CI, lock chord by keycode, misc P3

- README: add lock-screen section, refresh test list (13 offline tests),
  updater fallback order, data locations, architecture tree
- STATE.md: v1.0.20, current release.cjs flow (no --skip-github), M11-M13
- ci.yml: actions/cache for the ~100MB Electron binary keyed on lockfile
- .gitignore: ignore .env.* but keep committed templates
- scripts/archive-releases.cjs moved in from tmp-test; KEEP_TAG is now a
  required CLI arg (a hardcoded default is how the wrong version gets wiped)
- lockShortcuts: isPanicLockChord matches input.code ('KeyL') so Dvorak and
  non-Latin layouts trigger Ctrl+L lock correctly
- settings: drop the dead single-option update-channel Select from About tab
- Workspace/App: memo(IconRail/LayoutFlyout), useMemo layoutMenu keyed on
  language, useCallback onOpenSettings; drop unused IconRail onSplit prop

2026-10-07 22:06:58 +08:00

Bill

35583b2c15

feat(lock): main-window lock screen; harden env gating, sandbox and ssh teardown

Lock screen (main-window overlay, no second window):
- scrypt password verifier in <userData>/lock.json (per-write salt,
  timingSafeEqual); salt/hash/password never leave the main process
- lock now / idle auto-lock / lock at startup, growing failure cooldown,
  lock flags persisted so a quit-and-relaunch cannot bypass the lock
- locked shell and body portals go inert while sessions keep running;
  menu accelerators (reload, DevTools, zoom) are swallowed while locked
- settings gains a Lock tab; all copy in zh-CN/zh-TW/en/ja

Security and stability:
- packaged builds ignore ELECTRON_RENDERER_URL / OT_UPDATE_URL (devEnv)
- renderer preload runs with sandbox: true
- unreadable known_hosts store fails closed instead of being overwritten
- connect-time secrets gated by the bookmark's auth method (connectPromptFor)
- ssh stream teardown is idempotent: PTY_EXIT broadcasts exactly once
- sysinfo polling is refcounted for split panes (forceStopPolling on close)
- session-log index entries are path-contained; settings store writes
  atomically with EPERM/EBUSY retry
- sync-changelog tolerates CRLF checkouts (was a silent no-op)
- retry ssh2 host-key generation (flaky malformed key, ~1/500)

Tests: lock-store + lock-controller suites; transport-death PTY_EXIT e2e;
GitHub Actions CI (typecheck + 10 offline tests + build)

2026-09-24 22:16:43 +08:00

Bill

c01d3eb365

feat: product website for GitHub Pages + author CodingPlan.Site

Deploy website to GitHub Pages / deploy (push) Canceled after 0s

Details

- website/: zero-dependency static landing page (HTML+CSS), corporate
  light theme, real app screenshots, download links pointing to the
  git.codingplan.site release channel (exe/msi) with GitHub mirror
- .github/workflows/deploy-website.yml: deploy website/ to GitHub Pages
  on push to main (paths: website/**)
- package.json: author -> CodingPlan.Site
- README: link to the site and its source folder

2026-09-21 09:11:05 +08:00