Repository navigation

Audit fixes: updates after a stream, Docker trust, pairing, input order, clipboard, power, config, service lifecycle, Windows setup, CI - #28

Merged

MrBeldum merged 40 commits into

fix/vps-stream-clipboardfrom

fix/audit-2026-10-14

Oct 20, 2026

Merged

Audit fixes: updates after a stream, Docker trust, pairing, input order, clipboard, power, config, service lifecycle, Windows setup, CI#28
MrBeldum merged 40 commits into
fix/vps-stream-clipboardfrom
fix/audit-2026-10-14

Commits on Oct 17, 2026
- Engine: defer updates only while a viewer is connected, PIN to the requester's own pairing
  
  MrBeldum
  and
  claude
  committed
  4eb6da7
- Control API: under userspace Tailscale, ask who is behind a loopback connection
  
  MrBeldum
  and
  claude
  committed
  b1ea985
- Tailscale: read null maps, keep LAN addresses out of public_ip, idle paths unknown, fix DERP ids
  
  MrBeldum
  and
  claude
  committed
  5ccf2a2
- UI: dark style in Light mode, menus that close cleanly, screen-reader fixes
  
  MrBeldum
  and
  claude
  committed
  898fab5
- Clipboard: cut text to what fits a request body once JSON-escaped
  
  MrBeldum
  and
  claude
  committed
  6d02170
Commits on Oct 18, 2026
- Settings: one unreadable value costs that value, not the file; the service keeps its last good host.toml
  
  MrBeldum
  and
  claude
  committed
  646f02b
- Pairing: hand the PIN over beside the first request, stop on a refusal
  
  MrBeldum
  and
  claude
  committed
  2e103bb
- Updates: a failing self-update no longer stops the PCs' updates
  
  MrBeldum
  and
  claude
  committed
  02e0072
- Lobby and stream: power by node id, ask before sleep, forget a machine
  
  MrBeldum
  and
  claude
  committed
  431ae0a
- Service lifecycle: start through launchd/systemd, stop respawn storms, survive bad updates
  
  MrBeldum
  and
  claude
  committed
  e508d3d
- Pairing: name what went wrong when the PIN never finished
  
  MrBeldum
  and
  claude
  committed
  180b213
- Stream input: send keys, clicks and pastes in the order they were made
  
  MrBeldum
  and
  claude
  committed
  e5727aa
- Power: refuse Sleep where nothing can wake the machine, say why Mac restarts fail, keep a shared Mac awake
  
  MrBeldum
  and
  claude
  committed
  f094e31
- Setup: leave a systemd-run engine to systemd, open the macOS firewall for Latch
  
  MrBeldum
  and
  claude
  committed
  8653911
- Mac login item: say when macOS has it off, and keep scratch copies from taking it over
  
  MrBeldum
  and
  claude
  committed
  751f745
- Retire step: retry the engine move, never nest it, keep the pairing state
  
  MrBeldum
  and
  claude
  committed
  4101fdb
- Windows setup: engine in the signed-in session, even from SSH; no SYSTEM engine beside it
  
  MrBeldum
  and
  claude
  committed
  bab397a
- Linux clipboard: restart the service when the X connection is dead for good
  
  MrBeldum
  and
  claude
  committed
  2340f36
- Deploy kits: kernel Tailscale for the node, no .env in builds, relay updates, desktop after logout
  
  MrBeldum
  and
  claude
  committed
  2faced3
- CI and release: Linux arm64 and x64 hosts, tag checked against the version, --locked, retire step run on Windows
  
  MrBeldum
  and
  claude
  committed
  6908f00
- Merge audit/w4-windows-deploy-ci: Windows setup, Linux clipboard, deploy kits, CI and release
  MrBeldum
  committed
  ee211e8
- Merge audit/w2-client-session-app: pairing, lobby, power, client updates
  MrBeldum
  committed
  6740b80
- Merge audit/w1-client-input: stream input order, clipboard, Mac keys, UI crate
  
  MrBeldum
  and
  claude
  committed
  94e226c
- Viewer in the status: the Mac waits out a stream, a VPS desktop goes back to its idle size
  
  MrBeldum
  and
  claude
  committed
  a1ecc94
- Machine list: a saved LAN address is not the public one; probe peers at once
  
  MrBeldum
  and
  claude
  committed
  1ae49bf
- Tests: a refusing address no parallel test can take
  
  MrBeldum
  and
  claude
  committed
  5e1d032
- macOS bundle: Apple Events usage string and entitlement
  
  MrBeldum
  and
  claude
  committed
  afde470
- Docs and changelog for the audit fixes
  
  MrBeldum
  and
  claude
  committed
  842f4e0
- Tests: wait for the PIN hand-off's notice instead of sleeping 300 ms
  
  MrBeldum
  and
  claude
  committed
  d8352fa
- Retire step: rename the old engine whole, never Move-Item it
  
  MrBeldum
  and
  claude
  committed
  f61f5d1
- Tests: pairing timings waited for, with room for a loaded runner
  
  MrBeldum
  and
  claude
  committed
  f17d821
- Windows: prefer the virtual display and keep a game's cursor in the picture
  
  MrBeldum
  and
  claude
  committed
  2eae45c
- Cursor guard: hold back only cursors that would vanish, only while a viewer watches
  
  MrBeldum
  and
  claude
  committed
  c71a4fd
- Virtual display: read the device list Sunshine logs after a layout recovery
  
  MrBeldum
  and
  claude
  committed
  5ab3ddd
- Cursor guard: read the engine's log through the streamer's viewer check
  
  MrBeldum
  and
  claude
  committed
  1485721
Commits on Oct 19, 2026
- Remove former branding from docs and installer messages
  MrBeldum
  committed
  3bbc80e
Commits on Oct 20, 2026
- Merge pull request #29 from MrBeldum/chore/remove-legacy-name
  MrBeldum
  authored
  072cd3d
- Stream: Caps Lock follows the Mac's
  
  MrBeldum
  and
  claude
  committed
  383e336
- Merge remote-tracking branch 'origin/main' into integrate/all-2026-10-20
  MrBeldum
  committed
  a1465b9
- Merge pull request #27 from MrBeldum/feat/windows-cursor-in-picture
  MrBeldum
  authored
  ee14a16

Commits

Commits on Oct 17, 2026

Commits on Oct 18, 2026

Commits on Oct 19, 2026

Commits on Oct 20, 2026