termique v0.3.2 is primarily a security release. It closes a set of issues across credential storage, file transfers, and the AI assistant, all found in a full audit of the codebase. If you are on an older version, update. Alongside that, snippets got considerably more useful: there is now a public marketplace where you can search and fork snippets shared by other people.
Update from the in-app updater, or grab a fresh build from the download page.
Security
Each of these is now enforced by the app rather than left to convention. The two that matter most in day to day use are at the top.
- SSH credentials are always encrypted at rest on your machine, and the storage layer now refuses to save a credential that is not encrypted
- File transfers reject any attempt by a server to write outside the folder you picked for the download
- Saved SSH host-key fingerprints can only be changed by termique itself, so a man-in-the-middle warning is always reliable
- The AI assistant re-checks every command locally before auto-running it, instead of trusting a risk rating that arrived over the network
- Command output shared with the AI assistant is scrubbed of credentials before it leaves your machine
- Background server monitoring only ever connects to termique’s own endpoints
- Sign-in links are validated strictly, so only a sign-in you started can complete
- Error reports are scrubbed of sensitive key material before they are sent
- Commands run during an incident investigation are held to a stricter read-only check
If you want the background on how credential encryption works in termique, we wrote it up in end-to-end encrypted SSH credentials.
A public snippet marketplace
Snippets used to be private to your account. Now you can publish one, and browse what other people have shared.
- Browse and search public snippets, filter them by tag, and sort by popularity or recency
- Fork any snippet into your own library in one click, then edit it freely
- Tag your own snippets, public or private, with autocomplete drawn from tags already in use
- Creating and editing a snippet is now a two-step flow: the command first, then the details
- A confirmation step before you attach a snippet somebody else wrote as a startup snippet, with the full command shown
Terminal and files
Splitting a tab into panes and rearranging them by dragging.
- Up to four panes per tab, with drag to rearrange
- A dual-pane file browser with drag and drop between panes, plus drops from Finder and Explorer
- Recursive directory transfer, with conflict handling and per-file progress
- Session uptime shown beside the Terminal and Files switch
Monitoring and investigations
- Investigations can now span multiple hosts, with saved history and report export
- A prerequisite check before pairing a server, so a failed install tells you why
- Redesigned host, group, and monitoring pages
Bug fixes
- A command proposed by the AI assistant no longer runs twice
- Revoking a monitoring token now reports the result correctly
- Monitoring controls are visible only to the owner of a shared host
- The file browser stays bound to the session it was opened from
- Several icons that rendered blank now render
- The snippet dialog no longer grows past the window on smaller screens
