Files
OpenTerminal/.gitignore
T
Bill 35583b2c15 feat(lock): main-window lock screen; harden env gating, sandbox and ssh teardown
Lock screen (main-window overlay, no second window):
- scrypt password verifier in <userData>/lock.json (per-write salt,
  timingSafeEqual); salt/hash/password never leave the main process
- lock now / idle auto-lock / lock at startup, growing failure cooldown,
  lock flags persisted so a quit-and-relaunch cannot bypass the lock
- locked shell and body portals go inert while sessions keep running;
  menu accelerators (reload, DevTools, zoom) are swallowed while locked
- settings gains a Lock tab; all copy in zh-CN/zh-TW/en/ja

Security and stability:
- packaged builds ignore ELECTRON_RENDERER_URL / OT_UPDATE_URL (devEnv)
- renderer preload runs with sandbox: true
- unreadable known_hosts store fails closed instead of being overwritten
- connect-time secrets gated by the bookmark's auth method (connectPromptFor)
- ssh stream teardown is idempotent: PTY_EXIT broadcasts exactly once
- sysinfo polling is refcounted for split panes (forceStopPolling on close)
- session-log index entries are path-contained; settings store writes
  atomically with EPERM/EBUSY retry
- sync-changelog tolerates CRLF checkouts (was a silent no-op)
- retry ssh2 host-key generation (flaky malformed key, ~1/500)

Tests: lock-store + lock-controller suites; transport-death PTY_EXIT e2e;
GitHub Actions CI (typecheck + 10 offline tests + build)
2026-09-24 22:16:43 +08:00

49 lines
784 B
Plaintext

# dependencies
node_modules/
# build output
out/
dist/
tests/.session-e2e.cjs
tests/.sftp-svc.*
tests/.hl-smoke.*
# research artifacts (XTerminal reverse-engineering notes, not part of the app)
research/
# logs / misc
*.log
.DS_Store
# credentials (do not commit)
.env
# ts build info
*.tsbuildinfo
.sftp-test-*.bin
.sftp-dl-*
tests/.commands-store.cjs
tests/.known-hosts.cjs
tests/.lock-store.cjs
tests/.lock-controller.cjs
tests/.settings-store.cjs
tests/.session-e2e.cjs
tests/.hl-split-smoke.cjs
tests/.hl-rules.cjs
tests/.zmodem-e2e.cjs
release/
# stray local test artifacts
.min-test.bin
.min2-test.bin
.exact-test.bin
tests/.zm-src-*/
tests/.zm-out-*/
# release notes drafts (consumed by scripts/release.cjs + sync-changelog.cjs)
RELEASE_NOTES*.md
tmp-test/
tmp-test*