bridge-app v0.1.0 is the first public MVP release.
Highlights:
- Go backend with SQLite users, bcrypt password hashing, JWT auth, and chi routes.
- Authenticated WebSocket terminal streaming through tmux.
- React + xterm.js frontend for session browsing and mobile-friendly terminal access.
- Single-binary packaging path with Vite static asset serving.
- Deployment examples for systemd, nginx, and Caddy.
- Public project docs, MIT license, SECURITY.md, CONTRIBUTING.md, CI, and issue templates.
Security/hardening notes:
- WebSocket origins now default to same-origin and support BRIDGE_ALLOWED_ORIGINS for split frontend/backend development or deployment.
- Treat deployments like SSH: use HTTPS, strong secrets, private databases, and trusted networks or reverse proxies.
- Rate limiting, audit logs, stronger admin controls, and broader e2e coverage are still planned hardening work.
This release is source-only for now. Build from source with make build.