Next Terminalv3.10.1
Added
- Agent onboarding and API resource-management client: the access page walks through API key setup, with an English Skill document and install script, persisted instance configuration, interface search, and resource-management calls, plus localized copy.
- Database work-order events and applicant email notifications: creation, approval, rejection, and execution-result events feed the general notification rules; a separate email switch sends the result to the applicant in their language and records delivery failures.
- Access tokens: tokens can be given an expiry time, and creating or editing one now requires a token name; Termark tokens get a generated random name.
- OpenAPI documentation entry for administrators, and the Swagger page is no longer shadowed by the frontend static home page.
Fixed
- AI file operations now use SFTP: file permissions are checked independently and file operations are audited, with command concatenation and the shell fallback removed; SSH restricted-shell and Telnet devices are supported, including input filtering, session isolation, cancellation, and resource cleanup.
- AI conversations no longer leave the input unusable after a connection drop, with WebSocket heartbeat and automatic reconnect added.
- Sensitive operations are restricted to login sessions: two-factor operations, backup file download, and client certificate issuance and revocation; not-found, bad-route, and permission errors now return consistent HTTP status codes; idempotent SSH key deletion and website authorization parameter errors are fixed; the old backup export entry point and the legacy query-parameter token deletion entry point were removed.
- Disk file operations gained security validation and audit records.
- Free licenses no longer run the login access policy, and the system event detail dialog layout is fixed.
- A failed login no longer has its local error message overwritten by the global access-denied redirect.
- An audit administrator's saved name and permissions survive a restart; the system administrator can no longer be edited and built-in roles can no longer be deleted, with roles still in use protected.
- Regular administrators no longer fire unauthorized API requests when crossing pages; the access-request scope-name tree node type error and the virtual-list parameter issue are fixed.
Changed
- Database assets can select a database name, with account permission restrictions documented.
- Access requests support an effective time, event notifications, and resource scoping by department.
- AI interface: conversation rendering, streaming scroll, and tool-execution cards are aligned with the desktop client; the context panel's contrast and hierarchy, the action menu and context-usage percentage, and the reply card and Markdown width were refined, and the copy button moved to the bottom.
- Notification rules: the table layout was refined, with select-all for events and groups plus category preview; the alert-level filter was removed and the security-gateway wording corrected.
- Assets no longer offer an "enable AI" switch — SSH assets have AI available by default.
- Agent permission query and connection constraints were refined, and regular users no longer see the documentation entry.