Lock screen (main-window overlay, no second window): - scrypt password verifier in <userData>/lock.json (per-write salt, timingSafeEqual); salt/hash/password never leave the main process - lock now / idle auto-lock / lock at startup, growing failure cooldown, lock flags persisted so a quit-and-relaunch cannot bypass the lock - locked shell and body portals go inert while sessions keep running; menu accelerators (reload, DevTools, zoom) are swallowed while locked - settings gains a Lock tab; all copy in zh-CN/zh-TW/en/ja Security and stability: - packaged builds ignore ELECTRON_RENDERER_URL / OT_UPDATE_URL (devEnv) - renderer preload runs with sandbox: true - unreadable known_hosts store fails closed instead of being overwritten - connect-time secrets gated by the bookmark's auth method (connectPromptFor) - ssh stream teardown is idempotent: PTY_EXIT broadcasts exactly once - sysinfo polling is refcounted for split panes (forceStopPolling on close) - session-log index entries are path-contained; settings store writes atomically with EPERM/EBUSY retry - sync-changelog tolerates CRLF checkouts (was a silent no-op) - retry ssh2 host-key generation (flaky malformed key, ~1/500) Tests: lock-store + lock-controller suites; transport-death PTY_EXIT e2e; GitHub Actions CI (typecheck + 10 offline tests + build)
49 lines
784 B
Plaintext
49 lines
784 B
Plaintext
# dependencies
|
|
node_modules/
|
|
|
|
# build output
|
|
out/
|
|
dist/
|
|
tests/.session-e2e.cjs
|
|
tests/.sftp-svc.*
|
|
tests/.hl-smoke.*
|
|
|
|
# research artifacts (XTerminal reverse-engineering notes, not part of the app)
|
|
research/
|
|
|
|
# logs / misc
|
|
*.log
|
|
.DS_Store
|
|
|
|
# credentials (do not commit)
|
|
.env
|
|
|
|
# ts build info
|
|
*.tsbuildinfo
|
|
.sftp-test-*.bin
|
|
.sftp-dl-*
|
|
|
|
tests/.commands-store.cjs
|
|
tests/.known-hosts.cjs
|
|
tests/.lock-store.cjs
|
|
tests/.lock-controller.cjs
|
|
tests/.settings-store.cjs
|
|
tests/.session-e2e.cjs
|
|
tests/.hl-split-smoke.cjs
|
|
tests/.hl-rules.cjs
|
|
tests/.zmodem-e2e.cjs
|
|
release/
|
|
|
|
# stray local test artifacts
|
|
.min-test.bin
|
|
.min2-test.bin
|
|
.exact-test.bin
|
|
tests/.zm-src-*/
|
|
tests/.zm-out-*/
|
|
|
|
# release notes drafts (consumed by scripts/release.cjs + sync-changelog.cjs)
|
|
RELEASE_NOTES*.md
|
|
|
|
tmp-test/
|
|
tmp-test*
|