Command Center v0.7.1

Command Center 0.7.1 is a security release. All 0.7.0 users should upgrade.

Security fixes

• Viewing a submodule's diff no longer runs that submodule's Git filters. In 0.7.0, opening the Unstaged diff of a staged submodule in Repository Details could make Git inspect the submodule's working files with the submodule's own configuration. A copied or extracted repository with a crafted submodule could therefore run a command when you viewed that diff. Per-file diffs now skip nested submodule working files, as the file list and full diff already did.
• Recovery notes are read with a size limit. The recovery notes path comes from Settings or an imported setup bundle. A path such as /dev/zero made Read recovery notes read until memory ran out. Only regular files are read now, and at most 256 KB.
• Settings are private to your user. settings.json and settings.json.bak were created with default permissions, usually readable by other local users. They can hold your Restic repository address, password-file and KWallet entry names, and custom commands. Both are now written with 0600 permissions, like the app's other private data.
• REST-server passwords stay off the command line. Command Center already refused repository URLs with an embedded password, but it missed Restic's rest:https://user:password@host/ form. That password was passed to restic as an argument, where other local users could read it from the process list, and was saved in Activity. These addresses are now refused too.
• Hostile Git output can no longer freeze the app. A Git server could send output that made job-output cleaning take minutes, freezing the window on every launch while the job stayed in Activity. Cleaning is now linear, and displayed output is unchanged.

Behavior changes

• If your Restic repository is a rest: address with a password in it, Restic jobs now stop with an error. Remove the password from the address and set RESTIC_REST_USERNAME and RESTIC_REST_PASSWORD in the environment Command Center runs in.
• A per-file Unstaged diff of a submodule with local edits no longer shows a -dirty marker. Open the submodule directly to inspect its files.
• Read recovery notes reports "Recovery notes must be a regular file" for a device, FIFO or folder.
• Existing settings files become private the next time you save settings.

No other features changed. See the 0.7.0 notes for backup file history.

Linux downloads

The .deb and .rpm assets target x86_64 and require glibc 2.35+, GTK 3, WebKitGTK 4.1, and the platform's AppIndicator library. Notifications additionally use notify-send. File restores and file history require Restic 0.17+.

# Debian / Ubuntu
sudo apt install ./command-center_0.7.1_amd64.deb

# Fedora / RPM
sudo dnf install ./command-center-0.7.1-1.x86_64.rpm

# Arch / Garuda (built against current Arch libraries)
sudo pacman -U ./command-center-0.7.1-1-x86_64.pkg.tar.zst

Download SHA256SUMS beside the package and run:

sha256sum --check --ignore-missing SHA256SUMS

Build and validation

Both packages were built once on Ubuntu 22.04 (glibc 2.35), then installed and launched as a normal user on Ubuntu 22.04, Debian 12, Ubuntu 24.04 and Fedora 43. The Arch package was built from the release tag with packaging/aur/PKGBUILD in a clean container, linted with namcap, installed and launched. Workflow run: https://github.com/Commanderx-code/command-center/actions/runs/36160255578

Command Center v0.7.0

Command Center 0.7.0 adds backup file history: find every saved version of a file across your backups and restore the one you want.

What's new

• Backup file history: in Backup & Restore → File history, search all Restic snapshots for a file name (for example notes.md, matched in any folder), an exact path (~/Documents/report.odt), or a pattern (*.kdbx), with optional Ignore case.
• See how a file changed over time: results are grouped by path, newest first. Each saved copy shows when it was backed up, the snapshot and host, and the file's modification time and size, marked First saved, Changed or Same as previous. Show only versions that changed hides identical copies.
• Find deleted files: if newer snapshots of the same machine and backup path no longer contain a file, the result says it may have been deleted or moved, and when it was last saved.
• Restore a chosen version: Restore this version fills the restore form with that snapshot and the file's exact path. Pick a new destination folder and review. Restores still never overwrite existing files and are verified as they're written.
• Wiki user guide: a step-by-step guide to every page and feature, now linked from the README: https://github.com/Commanderx-code/command-center/wiki

Behavior to know

• Searching is a reviewed, read-only job. It lists snapshots, then searches all of them, so it can take a while on large repositories and may ask KWallet to unlock. Nothing is restored until you review a restore.
• "Changed" compares size and modification time between copies. It doesn't compare file contents.
• A search matching a huge number of files can't be displayed. Search a more specific path instead.
• Restic treats *, ? and [ in paths as pattern characters. For file names containing them, check the include path before restoring.

Linux downloads

The .deb and .rpm assets target x86_64 and require glibc 2.35+, GTK 3, WebKitGTK 4.1, and the platform's AppIndicator library. Notifications additionally use notify-send. File restores and file history require Restic 0.17+.

# Debian / Ubuntu
sudo apt install ./command-center_0.7.0_amd64.deb

# Fedora / RPM
sudo dnf install ./command-center-0.7.0-1.x86_64.rpm

# Arch / Garuda (built against current Arch libraries)
sudo pacman -U ./command-center-0.7.0-1-x86_64.pkg.tar.zst

Download SHA256SUMS beside the package and run:

sha256sum --check --ignore-missing SHA256SUMS

Build and validation

Both packages were built once on Ubuntu 22.04 (glibc 2.35), then installed and launched as a normal user on Ubuntu 22.04, Debian 12, Ubuntu 24.04 and Fedora 43. The Arch package was built from the release tag with packaging/aur/PKGBUILD in a clean container, linted with namcap, installed and launched. Workflow run: https://github.com/Commanderx-code/command-center/actions/runs/36028997681

Command Center v0.6.0

Command Center 0.6.0 makes setup imports safer, runs independent jobs side by side, and brings the packages to older distributions.

What's new

• Merge setup imports: choose Merge (the default) to keep this machine's preferences and saved definitions and add the bundle's new workflows, machine profiles, personal tools, quick actions, workspace profiles, scan folders, and Toolbox favorites. Empty integration paths are filled; different items whose IDs already exist here are kept and listed in the preview. Replace works as before.
• Interrupted imports recover automatically: imports now keep a journal. If the app or computer stops mid-import, the next launch restores every file from the pre-import backup before the interface opens and tells you on the dashboard.
• Run several jobs: repository actions and project tasks in different repositories run at the same time, alongside one workstation task such as a backup, installer, or Home Manager switch. Jobs in the same folder, and embedded-terminal sessions, still take turns; a waiting job names the job it is waiting for. Stop each job from Activity.
• Wider distribution support: packages now require glibc 2.35+ instead of 2.39, adding Ubuntu 22.04 and Debian 12. Every package is install- and launch-tested on Ubuntu 22.04, Debian 12, Ubuntu 24.04, and Fedora 43, and the Arch recipe is built, linted, and launched in a clean Arch container.
• MIT licensed: Command Center is now released under the MIT License. The .deb, .rpm, and Arch packages include the license and the bundled third-party notices.
• Favorites saved with your data: Toolbox favorites move from webview storage into the app's data folder on first launch and are included transactionally in setup imports.

Behavior to know

• Merge never changes preferences such as theme, editor, or terminal, and never replaces a non-empty integration path. Use Replace to adopt another machine's setup wholesale.
• The backup health helper, password-file, and wallet settings always stay local, as in 0.5.1.
• Automatic recovery only restores the files an import writes. If it cannot finish, the dashboard shows the reason and the manual steps in the setup guide.
• Two jobs never share a working directory, so a project task and a Git action in the same repository still run one after the other.

Linux downloads

The .deb and .rpm assets target x86_64 and require glibc 2.35+, GTK 3, WebKitGTK 4.1, and the platform's AppIndicator library. Notifications additionally use notify-send. File restores require Restic 0.17+.

# Debian / Ubuntu
sudo apt install ./command-center_0.6.0_amd64.deb

# Fedora / RPM
sudo dnf install ./command-center-0.6.0-1.x86_64.rpm

# Arch / Garuda (built against current Arch libraries)
sudo pacman -U ./command-center-0.6.0-1-x86_64.pkg.tar.zst

Download SHA256SUMS beside the package and run:

sha256sum --check --ignore-missing SHA256SUMS

Arch users can also build the same package themselves with makepkg -si from packaging/aur/.

Build and validation

Both packages were built once on Ubuntu 22.04 (glibc 2.35), then installed and launched as a normal user on Ubuntu 22.04, Debian 12, Ubuntu 24.04 and Fedora 43. The Arch recipe was built from the same commit in a clean container, linted with namcap, installed and launched. Workflow run: https://github.com/Commanderx-code/command-center/actions/runs/35964235331

The Arch package was added after publication. It was built from the v0.6.0 tag with packaging/aur/PKGBUILD in a clean Arch container, linted with namcap, installed and launched: https://github.com/Commanderx-code/command-center/actions/runs/35967081432. SHA256SUMS now covers all three packages; the .deb and .rpm checksums are unchanged.

Command Center v0.5.1

Command Center 0.5.1 is a security release. All 0.5.0 users should upgrade.

Security fixes

• Repository inspection no longer runs repository-configured programs. In 0.5.0, opening or scanning a repository could run programs named in that repository's Git configuration (hooks, core.fsmonitor, clean/smudge/process filters, external diff or text conversion, signature verifiers, and promisor fetch transports). A copied or extracted repository with a crafted .git/config could therefore run commands without review. Automatic status, diff, and history previews now disable all of these. Reviewed Git actions such as staging and committing still use your normal hooks, filters, identity, and signing.
• Imports can no longer authorize the backup health helper. The health helper runs automatically for dashboard and backup checks. Setup bundles and settings imports now always keep this machine's configured helper (including an empty value) instead of taking the path from the imported file. Configure it separately in Settings after reviewing the executable.

Behavior changes

• Files that a content filter normally normalizes may appear changed in previews. Use the repository terminal for a filter-aware comparison.
• Nested submodule working-file changes are omitted from previews; changed submodule commits remain visible. Open a submodule directly to inspect its files.
• Partial clones with missing objects need an explicit fetch in the terminal before inspection.
• Unsupported or oversized filter configuration makes inspection unavailable instead of running it.

No other features changed. See the 0.5.0 notes for setup bundles and project workspaces.

Linux downloads

The .deb and .rpm assets target x86_64 and require glibc 2.39+, GTK 3, WebKitGTK 4.1, and the platform's AppIndicator library. Notifications additionally use notify-send. File restores require Restic 0.17+.

# Debian / Ubuntu
sudo apt install ./command-center_0.5.1_amd64.deb

# Fedora / RPM
sudo dnf install ./command-center-0.5.1-1.x86_64.rpm

Download SHA256SUMS beside the package and run:

sha256sum --check --ignore-missing SHA256SUMS

Source installs can update with the exported updater: bash ~/Downloads/update-desktop.sh v0.5.1. A local Arch build recipe is included under packaging/aur/.

Build and validation

The .deb was built on Ubuntu 24.04 and the .rpm on Fedora 43. Each package was installed and launched as a normal user on its distribution. Both binaries require glibc 2.39, matching the declared dependency. Workflow run: https://github.com/Commanderx-code/command-center/actions/runs/35961660123

Command Center 0.5.0

Command Center 0.5.0 adds portable workstation setups and project workspaces.

What's new

• Setup bundles: export saved preferences, repository paths and workspace profiles, workflows, machine profiles, personal tools, and Toolbox favorites together. Preview imports, remap home-directory paths, and keep a private backup before replacing saved definitions. Importing starts no commands.
• Setup wizard: connect existing Commander-os/Home Manager and Restic helpers through editable drafts, check local prerequisites, inspect a machine profile, then review and save.
• Project workspaces: save per-repository build/test/dev tasks, discover npm and Cargo task suggestions without executing scripts, and link services for status/log inspection. Every task uses command review and Activity; embedded tasks open in Terminal.
• Keyboard access: skip to main content, navigate primary pages with arrow keys/Home/End, and use clearer focus and active-page semantics. OS reduced-motion preferences are respected.

Existing workflow, Toolbox, backup, Git, configuration, notification, and tray features remain available. See the setup and workspace guide.

Linux downloads

The .deb and .rpm assets target x86_64 and require glibc 2.39+, GTK 3, WebKitGTK 4.1, and the platform's AppIndicator library. Notifications additionally use notify-send. File restores require Restic 0.17+.

# Debian / Ubuntu
sudo apt install ./command-center_0.5.0_amd64.deb

# Fedora / RPM
sudo dnf install ./command-center-0.5.0-1.x86_64.rpm

Download SHA256SUMS beside the package and run:

sha256sum --check --ignore-missing SHA256SUMS

A local Arch build recipe is included under packaging/aur/; it has not been submitted to AUR or validated in a clean Arch chroot.

Behavior to know

Setup imports replace the reviewed saved collections rather than merging them. Credential files, wallet identifiers, file contents, activity logs, and recovery baselines are excluded; saved command text is included and should be inspected before sharing. Structured paths are remapped, but command text and arbitrary input values are unchanged. Existing local credential connections are retained. Missing repositories are remembered for scanning, not cloned automatically.

A running job blocks import. Previous data is backed up before replacement and ordinary write failures are rolled back; recovery after a crash during the multi-file import may require restoring that backup manually. Machine profiles operate locally, and each command still requires review. The existing one-running-job limit also applies to project tasks.

Validation

Release commit: c986bd90235e3fd738ce09185ec2cc84e922d5a9.

Linux package validation workflow passed for this exact commit:

• 68 JavaScript tests, 55 Rust tests, and Clippy passed on Ubuntu 24.04.
• The attached .deb was built on Ubuntu 24.04, installed, and passed a 20-second desktop launch check.
• The attached .rpm was built on Fedora 43, installed, and passed a 20-second desktop launch check as a normal user.
• Selected artifacts passed SHA-256 verification, package metadata and x86_64 ELF checks, bundled Toolbox revision checks, and glibc symbol checks (highest required version: 2.39).

These installation and launch checks do not exercise every system-changing workflow. The setup wizard and project workspace were also visually checked locally, and the local desktop build passed an isolated launch check.

Command Center 0.4.0

Command Center 0.4.0 adds complete workstation routines alongside the expanded Git, service, backup, and Toolbox interfaces.

New workflows

• Save maintenance sequences with command review before each step, visible progress, failure stops, and explicit retries.
• Create local machine setup profiles with repository clones, Toolbox installers, presence checks, and Home Manager source overrides.
• Organize personal tools in folders with descriptions, prerequisites, and typed inputs passed as literal arguments.
• Restore individual backup files into a temporary directory and verify them against recorded SHA-256 baselines.
• Search app-recorded changes across jobs and configuration backups in the timeline.
• Opt into task and health notifications with quiet hours; use the tray to hide or reopen the app.

Also included since 0.3.3

Git file diffs, branches, stashes, branch publishing, service controls and audit helpers, backup schedules and readiness/access checks, configuration history, settings transfer, custom quick actions, the command palette, system inventory, release checks, and Toolbox/package update workflows.

Linux downloads

The .deb and .rpm assets target x86_64 and require glibc 2.39+, GTK 3, WebKitGTK 4.1, and the platform's AppIndicator library. Notifications additionally use notify-send. File restores require Restic 0.17+; older versions receive a compatibility error before a restore starts. Install your downloaded package with sudo apt install ./command-center_0.4.0_amd64.deb or sudo dnf install ./command-center-0.4.0-1.x86_64.rpm on a compatible distribution.

Download SHA256SUMS beside the package and run sha256sum --check --ignore-missing SHA256SUMS.

A local Arch build recipe is included under packaging/aur/; it has not been submitted to AUR. See the workflow run and validation details below for tested environments.

Behavior to know

Workflows require review for each step. Profiles configure this computer and do not manage remote hosts. Recovery verification proves the selected file matches its recorded baseline, not that the entire system is recoverable. Notifications run while the app is open. The timeline covers app-recorded changes. Details: operations guide.

Validation

61 JavaScript tests, 47 Rust tests, and Clippy passed. Recovery tests exercised matching and mismatched file checksums in a temporary encrypted Restic repository. Ubuntu 24.04 and Fedora 43 both passed package metadata validation, installation, and a 20-second application launch check under a virtual display. These launch checks do not exercise every desktop interaction.

The published .deb is from the Ubuntu build and the .rpm is from the Fedora build of commit 0e64aeb890510a4ddd7a72196fce99db887dedc3. Both binaries were checked against their declared glibc floor, and release downloads were verified against SHA-256 checksums.

Successful Linux package workflow · Changes since v0.3.3

Command Center 0.3.3

Command Center 0.3.3 adds staging and commits directly in repository Details, alongside improvements to Settings and integration diagnostics.

What's new

• Stage selected files or all changes, unstage selected files, and review the staged diff.
• Review and create a local commit using your existing Git identity, hooks, and signing settings. Push remains a separate action.
• Detect staged-content or branch changes between preview and execution so you can refresh and review again.
• Search Settings and jump between sections while preserving unsaved drafts.
• Check integration availability against draft paths and installed tools without saving settings or running backup helpers.
• Select any workspace as the startup page, and retry health checks with stale results clearly identified.
• Updated README, user/developer guides, changelog, and contribution templates.

Downloads

Packages target Linux x86_64 / amd64 and require glibc 2.39+, GTK 3, and WebKitGTK 4.1. Built on Arch/Garuda; cross-distribution installation has not yet been tested.

For compatible Debian/Ubuntu systems:

sudo apt install ./command-center_0.3.3_amd64.deb

For compatible Fedora/RPM systems:

sudo dnf install ./command-center-0.3.3-1.x86_64.rpm

Download SHA256SUMS into the same directory as your package and verify it:

sha256sum --check --ignore-missing SHA256SUMS

Validation: 29 JavaScript tests and 33 Rust tests passed. Clippy, frontend checks, and both package builds passed. Package metadata and embedded payloads were checked, and uploaded downloads were verified against SHA-256 checksums.

Changes since v0.3.2

Command Center 0.3.2

Command Center 0.3.2 brings Commander Toolbox into the desktop app, with the current tested custom configurations.

What's included

• All 215 Toolbox actions, organized into the same folders and nested submenus as the TUI.
• Breadcrumbs, folder search, favorites, and quick setup selectors for Myfish, dotfiles, and applications.
• An embedded interactive terminal with keyboard input, resizing, cancellation, and external-terminal support.
• Command previews and Activity results. Interactive output stays in memory unless explicitly saved.
• Existing repository management, Home Manager, backup/recovery, Ghostty/Fastfetch configuration, and system-health features.

Included source revisions

• Commander Toolbox: 6a7edbf834ee60c88bd24f7c6cab853329c8f38e
• Myfish: 24bd2d42c197eb34812327c7b9760383d5fa0390
• Dotfiles / Starship: 78f46c432fa10ccc0ace7738db9249e8affa3f4e

Updating Command Center updates its bundled installer sources. Run the relevant installer to apply configuration changes to your system.

Linux packages

Both downloads target x86_64 / amd64 and require glibc 2.39 or newer, GTK 3, and WebKitGTK 4.1. The packages declare these dependencies. These binaries were built on Arch/Garuda Linux; cross-distribution installation has not yet been tested.

For a compatible Debian/Ubuntu-based system:

sudo apt install ./command-center_0.3.2_amd64.deb

For a compatible Fedora/RPM-based system:

sudo dnf install ./command-center-0.3.2-1.x86_64.rpm

Download SHA256SUMS alongside both packages and verify them with:

sha256sum -c SHA256SUMS

Validation: 28 Command Center Rust tests, 22 JavaScript tests, and 6 Toolbox core tests passed. Rust lint checks and package builds passed. Package metadata, payloads, and download checksums were checked. No real system installers were run during testing.