20 Commits
Author SHA1 Message Date
Zane Schepke 20593c171c build: revert windows ARM, fix macos key file validation
Windows ARM is not supported by GraalVM yet, reverting arm version changes until upstream supports.
2026-10-03 00:58:34 -04:00
Zane Schepke b3e3fec2b1 build: macOS ARM and windows ARM 2026-10-02 23:53:42 -04:00
Zane Schepke fc681c3747 build: fix packaged detection 2026-10-01 04:39:30 -04:00
Zane Schepke 530d4ea4f4 fix: persist window size and placement
closes #47
2026-09-29 00:18:47 -04:00
Zane Schepke 80ab0a58c0 fix(windows): new install daemon comms error
Add missing icacls /L for socket reading and writing permissions.

closes #43
2026-09-26 04:49:15 -04:00
Zane Schepke d094eef481 fix(windows): elevated gui launches, AppData IPC key fixes, non-ASCII account check fixes
Fixes issues where elevated GUI launches break IPC with the daemon on Windows.

Fixes potential issues with share drives for the IPC key daemon read.

Fixes issues with non-ASCII account IPC failures.
2026-09-25 05:19:03 -04:00
Zane Schepke 548d0d4f8f refactor: ipc path for windows casing 2026-09-23 00:11:50 -04:00
Zane Schepke c9c8218a25 fix: XDG base home dir pollution and no keyring daemon fallback
Falls back to file permission secured raw file if no keyring daemon is detected for first install setup for the db encryption key. Only ever runs in the db isn't already created (first install).

Fixes XDG home dir pollution by moving the ipc key to XDG run dir or local share fallback without weakening the spoofing prevention logic. Both are still derived from the OS's user database.

closes #34
closes #5
2026-09-22 19:22:13 -04:00
Zane Schepke 12f80f4402 refactor: UDS socket security and move restore tunnel/auto tunnel to client start on login
Moves restore tunnel/auto tunnel from the daemon to the client to prevent multi-user issues while adding a start app on login feature for general app startup on user login feature.

Hardened daemon IPC authentication by validating the HMAC key file against real OS ownership and home directory records instead of a caller supplied path. Closes a WebSocket auth bypass and a timing side channel vulnerability, and lock down Windows socket/directory permissions against hijacking.
2026-09-20 02:01:59 -04:00
Zane Schepke c486d17fab feat: improved theme options 2026-09-18 00:50:37 -04:00
Zane Schepke f0f0a672d6 fix(windows): remove bssid detection
Windows heavily gates BSSID reading from apps without Location Services + App location permissions. Due to this BSSID settings are hidden on Windows and core detection has been removed.
2026-09-17 02:03:41 -04:00
Zane Schepke af022fb4cf fix(windows): location permission request and network monitoring 2026-09-16 22:40:44 -04:00
Zane Schepke 74db54772f feat: core backend and nucleus migration (#26)
* initial v2 migration

Migrate to nucleus, graalvm builds, new core backend

* Update winsw

* chore: trigger window build

* ci: fix jdk conflict

* ci: trigger windows build

* chore: bump core to 1.5.3

* ci: switch to nucleus fork

* ci: fix quotes

* ci: fix windows build

* ci: windows fix missing mingw32

* ci: fix mingw setup for windows

* ci: fix winsw build

* fix: winsw build error

* fix: building keyring module on windows

* fix: keyring build for windows

* build: fix service install

* build: add nsis icons, fix daemon and service wrapper inclusion

* build: fix bmp paths

* build: fix lincense

* build: fix winsw paths

* build: fix nsis installer script for admin checks

* refactor: wintun moved to core

Fixe nsis images

* fix lang

* fix: daemon sync UX and disable daemon settings with messaging

Bump core for graalvm fix

* fix: windows native linker issue in core, dev daemon script after nucleus migration

* fix: ktor logging in daemon and core bump for windows cgo long fix

* refactor: user facing strings to res

* fix: add wintun.dlls and packaging

* fix: both proxy clients disabled handling

* fix: ui and windows build changes

* fix: daemon required settings

* refactor: remove mode icon, waiting for stats

* refactor: ui improvements and dns validator integration

* refactor: request active tunnel restart on settings changes when tunnel active

* refactor: better theme integration, auto tunnel status display, config name header comment

* fix: ui changes, logger fixes, install scripts, toasts, daemon sync

* feat: add update checker and tracking

* refactor: display mode in footer and proxy servers in expanded tunnel row

* fix: windows WinSW logging integration

* fix: windows log view, refactor daemon logging

* fix: update docs, add apt repo, CI fixes, windows daemon logs fix
2026-09-13 03:58:56 -04:00
zaneschepke d19db57265 fix: daemon gui tunnel state sync issues 2026-03-27 04:41:29 -04:00
zaneschepke 4c280471c4 fix: windows ipc key file permission check 2026-03-21 02:27:04 -04:00
zaneschepke 3b6b927e39 windows: fix ipc key ownership check 2026-03-06 02:37:19 -05:00
zaneschepke e7c33df9d2 fix: IPC key bug on systems of various languages
Instead if passing the user to look up their home dir, client now passes full IPC key patch for daemon read.
2026-03-06 01:43:36 -05:00
zaneschepke 5dbcd3a3dd fix: windows routing and bootstrapping, and handshake callback 2026-02-23 15:24:39 -05:00
zaneschepke a13e86beda refactor: remove some logging, fix potential race 2026-02-16 17:56:20 -05:00
zaneschepke d499852d17 fix: tray, single instance enforcement 2026-02-16 07:26:42 -05:00