Andy Dixon 0a18f7e578 fix: generate SSH keys in-process, verify loopback tunnel peer, bound SSH command output ...

- SSH key pairs are generated with ssh-key (Ed25519/ECDSA P-256/RSA) and
  encrypted in-process, so the passphrase no longer appears as an ssh-keygen
  command-line argument visible in the process list.
- open_tunnel's loopback bridge checks the accepted peer is our own client
  socket, so a local process racing for the ephemeral port can't be spliced
  into the IRC/VNC SSH tunnel.
- run_command caps buffered output at 1 MiB; local-forward abort handles are
  pruned as connections finish; SOCKS5 host/credential lengths over 255 bytes
  are rejected instead of being truncated into a malformed request.

2026-10-12 07:22:31 +01:00

..

examples

Screenshot automation (--connect repeatable, --do, --answer, --shot-delay), SFTP Browser palette entry, centred dialogs, IRC opens the first joined room; demo_data example

2026-10-11 19:41:30 +01:00

migrations

rust: nexus-core storage, vault, keychain, export/import, data-dir migration

2026-10-11 16:05:13 +01:00

src

fix: generate SSH keys in-process, verify loopback tunnel peer, bound SSH command output

2026-10-12 07:22:31 +01:00

tests

Remove the Go backend, JS frontend, Wails config and old build scripts; release.sh now wraps rust/release.sh

2026-10-11 17:43:55 +01:00

Cargo.toml

fix: purge keychain credentials on profile delete, atomic owner-only secret writes, zeroize derived keys

2026-10-12 07:20:11 +01:00