JumpServer Desktop v0.1.7

Update delivery

• Windows x64 NSIS and Linux x64 AppImage builds can use the in-app updater from this public release.
• Linux .deb packages are manual downloads; use this release page for updates.
• macOS updates are manual downloads only. The application does not download or install macOS updates automatically.

Signing status

All release artifacts are unsigned. macOS builds are not signed or notarized and may be blocked by Gatekeeper. Download only from this trusted GitHub Release; do not bypass platform security prompts.

Full Changelog: v0.1.6...v0.1.7

JumpServer Desktop v0.1.6

中文

自动发现新版，由你决定何时安装

v0.1.6 完善桌面端自动更新：后台检查、可选自动下载、清晰的更新入口，同时保留安装前确认，避免更新打断运维工作。更新源继续使用本仓库 GitHub Releases，不需要额外配置更新服务器。

本次更新

• 自动检查默认开启：启动并加载设备设置 15 秒后首次检查，此后每轮后台检查结束 6 小时后再次检查。只获取正式稳定版本；开发模式不会访问更新服务。
• 自动下载默认关闭：Windows NSIS 和 Linux AppImage 可在“设置 → 关于与更新”中开启。发现新版后后台下载；已有可用新版时，保存开启设置会立即开始下载。关闭选项不会取消已开始的下载。
• 更新入口常驻顶部：发现新版或下载完成时显示版本，点击进入设置查看更新说明或安装，不会关闭当前连接。
• 安装始终由用户确认：下载完成后选择“重启并安装”；不强制重启，也不在普通退出时自动安装。连接、传输和未保存编辑仍有退出确认；设置有未保存草稿时禁止安装。
• 偏好跨登录保留：检查与下载选项通过“保存并应用”保存为设备设置。旧版设置自动补齐新字段，保留已有字体、语言等配置。关闭自动检查后仍可手动检查。
• 后台失败不打断工作：错误和进度在设置页显示，支持手动重试；离线不会误报为最新版。并发检查合并，迟到的命令回复不会覆盖新的下载状态。
• 更新控件、全局入口和安装提示均提供中英文，适配紧凑窗口。

从旧版升级

• Windows x64 / Linux AppImage：在旧版“设置 → 关于与更新”中手动检查、下载并确认安装 v0.1.6；本次新增的后台检查策略在升级后生效。
• Linux .deb：下载新版后通过系统包管理器安装。
• macOS Apple Silicon / Intel：下载对应 arm64 / x64 安装包，退出应用后手动替换 /Applications/JumpServer Desktop.app。macOS 和 .deb 可检查新版，但当前不提供应用内自动下载或安装。

macOS 手动安装与隔离提示

所有平台安装包均未签名；macOS 也未公证。 先从本仓库正式 Release 下载，并将安装包 SHA-256 与附件 SHA256SUMS 核对。校验和可检测下载损坏，但不能替代发行者签名。

如果将应用复制到“应用程序”后仍因隔离属性被 macOS 拦截，在确认来源、校验值和组织安全策略允许后，可在终端手动执行以下命令。工具名是 xattr，不是 xttr：

xattr -dr com.apple.quarantine "/Applications/JumpServer Desktop.app"

该命令仅移除此应用及其内部文件的隔离属性，不等于获得 Apple 信任，也不会为应用签名或公证。不要对整个 /Applications 或下载目录执行，不要关闭全局 Gatekeeper。若提示权限不足，先检查安装位置与文件权限，不要直接改用 sudo；组织禁止未签名应用时请停止安装。应用与 README 提供相同说明，界面只显示／复制命令，绝不会代为执行。

验证

• 本地类型检查、生产构建和 127 项测试通过。
• 使用真实 electron-updater 与隔离的本地更新源，验证定时检查、SHA-512 校验下载，以及下载完成后等待明确安装操作；未执行真实安装替换。
• 已验证实际桌面 IPC 设置持久化，以及中英文界面的保存失败保护、迟到响应、全局更新入口和 macOS 紧凑布局。
• 发布流水线对 Windows、Linux、macOS 进行验证、打包、打包后启动与 IPC 冒烟检查，完整产物校验通过后才公开发布。

本项目为非官方社区项目，与 JumpServer 官方没有隶属或背书关系。

---

English

Discover updates automatically. Install when you choose.

v0.1.6 adds background update checks, optional automatic downloads, and a persistent update entry while keeping installation under your control. Updates continue to come from this repository's GitHub Releases; no additional update server configuration is required.

What's new

• Automatic checks are enabled by default: the first check runs 15 seconds after startup settings load, then 6 hours after each scheduled check finishes. Only stable releases are considered; development mode does not contact the update service.
• Automatic downloads are opt-in: Windows NSIS and Linux AppImage users can enable them under Settings → About and updates. New versions download in the background; enabling and saving the preference starts a download immediately if an update is already available. Turning it off does not cancel an active download.
• Persistent update entry: the window header shows available or downloaded updates and opens Settings for release notes or installation without closing existing connections.
• Installation always requires confirmation: select “Restart and install” after downloading. Updates never force a restart or install on normal quit. Exit confirmation still protects connections, transfers, and unsaved edits; unsaved settings block installation.
• Preferences survive login changes: use “Save and apply” to persist device-wide update choices. Existing settings are migrated without resetting fonts, language, or other preferences. Manual checks remain available when automatic checks are disabled.
• Quiet background failures: errors and download progress remain visible in Settings with manual retry; offline errors are not reported as “up to date.” Concurrent checks are coalesced, and late command replies cannot overwrite newer download state.
• Update controls, the global entry, and installation guidance are available in Chinese and English, including compact-window layouts.

Upgrading from an earlier version

• Windows x64 / Linux AppImage: use the previous version's Settings → About and updates to manually check, download, and confirm installation of v0.1.6. The new background-check policy takes effect after upgrading.
• Linux .deb: download the new package and install it using your system package manager.
• macOS Apple Silicon / Intel: choose the matching arm64 / x64 package, quit the app, and manually replace /Applications/JumpServer Desktop.app. macOS and .deb installations can check for updates but currently do not download or install them automatically within the app.

macOS manual installation and quarantine

All platform artifacts are unsigned; macOS builds are also not notarized. Download from this repository's official Release and compare the installer's SHA-256 with the attached SHA256SUMS. Checksums detect corruption but do not replace publisher signatures.

If macOS still blocks the app because of quarantine after copying it to Applications, and you have verified the source, checksum, and your organization's security policy, you may manually run the following command in Terminal. The command is xattr, not xttr:

xattr -dr com.apple.quarantine "/Applications/JumpServer Desktop.app"

This removes quarantine only from this app and its contents; it does not sign, notarize, or make the app Apple-trusted. Never target the entire Applications/downloads directory or disable Gatekeeper globally. If permission is denied, check the installation location and file permissions rather than immediately using sudo. Do not install if your organization prohibits unsigned applications. The app and README provide the same guidance; the interface only displays/copies the command and never executes it.

Verification

• Local type checks, the production build, and all 127 tests passed.
• A real electron-updater smoke run against an isolated local feed verified scheduled checks, a SHA-512-verified download, and waiting for explicit installation. No actual installed application was replaced.
• Verified real desktop IPC preference persistence plus Chinese/English UI handling for failed saves, late replies, the global update entry, and compact macOS guidance.
• The release pipeline verifies and packages Windows, Linux, and macOS, runs packaged startup/IPC smoke checks, and validates the complete artifact set before publication.

This is an unofficial community project, not affiliated with or endorsed by JumpServer.

---

完整变更 / Full changelog: v0.1.5...v0.1.6

JumpServer Desktop v0.1.5

中文

本次更新

v0.1.5 将 JumpServer 原生授权分组带回桌面资产工作区，同时改进数据库编辑、变更核对和并发更新体验。分组沿用服务器的层级与权限，不在客户端另建一套资产归属。

资产分组与导航

• 新增左侧授权分组树，支持按需展开、键盘导航，以及按名称或完整路径搜索尚未展开的分组。
• 新增面包屑与分组范围搜索：父分组包含子分组资产，名称／地址搜索可与主机、数据库等类型筛选组合使用。
• “搜索全部资产”保留关键词和类型并移除分组限制；“全部资产”导航重置筛选。收藏和全局快捷搜索不受上一次分组限制。
• 按站点、用户和组织保存分组展开状态及选中节点，恢复前重新验证权限。分组失效会提示并返回全部资产；请求失败有独立错误与重试入口，不会伪装成空分组。
• 切换分组清除旧分页和资产详情，并丢弃迟到响应；已打开的连接会话不受影响。侧栏支持调宽和收起，中英文资产术语同步更新。

数据库工作区

• 将变更核对、SQL 预览和提交报告整合到可展开的底部面板，先核对字段差异，再明确确认执行。
• 关闭面板或按 Escape 不丢失修改和报告；提交期间防止重复提交，报告可从底部变更栏重新打开。
• 表格刷新保留已应用搜索与分页；存在未保存修改时先确认放弃。提交成功后的刷新失败可单独重试读取，不重复执行写入。
• 表格按行隔离渲染，减少搜索输入和提示更新时对未变化行的重绘；单元格复制与编辑支持悬停和键盘聚焦。
• MySQL 更新的并发校验缩小到完整主键和本次修改字段的原值：无关字段变化不再阻止保存，也不会被覆盖；同一字段变化仍受保护。删除操作继续校验整行原值。

验证与兼容性

• 本地 TypeScript 检查、生产构建及 120 项测试通过；资产分组使用隔离数据验证了搜索、分页、状态恢复、权限失效、迟到响应与身份隔离。
• 桌面端继续通过 JumpServer 授权接口读取分组和资产，不绕过服务器权限。不同部署版本仍需结合实际授权与连接配置验收。
• 数据库批量修改不保证跨行原子事务；提交结果未知时应重新连接并核验数据库，不要直接重复提交。

下载与更新

• Windows x64：下载 .exe 安装包；支持应用内更新。
• Linux x64：AppImage 支持应用内更新；.deb 请下载后通过系统包管理器更新。
• macOS Apple Silicon / Intel：选择对应 arm64 / x64 安装包，手动下载更新；不提供应用内自动安装。
• 校验文件见附件 SHA256SUMS。

安全提示：所有安装包均未签名，macOS 也未公证。 系统可能显示安全提示；请仅从本仓库正式 Release 下载并核对来源，不要关闭或绕过平台安全保护。本项目为非官方社区项目，与 JumpServer 官方没有隶属或背书关系。

---

English

What's new

v0.1.5 brings JumpServer's native authorized asset groups into the desktop asset workspace and improves database editing, change review, and concurrent-update handling. Group hierarchy and permissions remain server-owned; the desktop does not create a separate grouping system.

Asset groups and navigation

• Added an authorized group tree with lazy expansion, keyboard navigation, and name/full-path search across groups that have not been expanded yet.
• Added breadcrumbs and group-scoped asset search. Parent groups include their descendants, and name/address searches combine with asset-type filters such as hosts and databases.
• “Search all assets” keeps the keyword and type filter while removing the group scope; “All assets” resets filters. Favorites and the global quick switcher do not inherit the previous group restriction.
• Expansion and selected-group state are stored separately for each site, user, and organization, with permissions revalidated before restoration. Unavailable groups produce a notice and return to all assets; request failures have explicit errors and retry actions rather than appearing as empty groups.
• Switching groups clears old pages and asset details and discards late responses without interrupting open sessions. The sidebar can be resized or hidden, with updated Chinese and English asset terminology.

Database workspace

• Consolidated change review, SQL preview, and submission reports into an expandable bottom sheet. Review field differences before explicitly confirming execution.
• Closing the sheet or pressing Escape preserves edits and reports. Duplicate submissions are blocked while a submission is running, and reports can be reopened from the bottom change bar.
• Table refresh preserves applied search and pagination and asks before discarding unsaved edits. If refreshing after a successful submission fails, retrying the refresh reads data again without repeating the write.
• Isolated rendering by row reduces redraws of unchanged rows during search-input and notification updates. Cell copy/edit controls support hover and keyboard focus.
• MySQL updates now check the complete primary key and the original values of the fields being changed. Concurrent changes to unrelated fields no longer block the update or get overwritten; changes to the same fields remain protected. Deletes still check the original values of the entire row.

Verification and compatibility

• Local TypeScript checks, the production build, and all 120 tests passed. Isolated-data UI checks covered group search, pagination, restoration, revoked access, late responses, and identity isolation.
• Groups and assets are still read through JumpServer's authorization APIs. Server permissions are not bypassed; individual deployment versions should be validated against their actual authorization and connection configuration.
• Batch database changes are not guaranteed to be atomic across rows. If a submission result is unknown, reconnect and inspect the database instead of immediately resubmitting it.

Downloads and updates

• Windows x64: use the .exe installer; in-app updates are supported.
• Linux x64: AppImage supports in-app updates; download .deb packages and update them with your system package manager.
• macOS Apple Silicon / Intel: choose the matching arm64 / x64 package and update manually. Automatic in-app installation is not available.
• File checksums are provided in the attached SHA256SUMS.

Security notice: all artifacts are unsigned, and macOS builds are not notarized. Operating systems may display security warnings. Download only from this repository's official Releases, verify the source, and do not disable or bypass platform security protections. This is an unofficial community project, not affiliated with or endorsed by JumpServer.

---

完整变更 / Full changelog: v0.1.4...v0.1.5

JumpServer Desktop v0.1.4

中文

新增：终端手动重连

• 终端空闲超时、连接丢失、连接关闭或连接失败后，可点击底部的 重新连接 按钮。
• 沿用原资产、账号和连接方式，重新通过 JumpServer 授权流程，在新标签页建立会话；旧标签保留终端输出，便于查看与复制。
• 连接期间显示「正在建立新会话…」并禁用重复点击；失败后可再次尝试。
• 提供中英文界面提示，并补充使用说明。

会话与安全边界

• 重连创建新会话，不会恢复原 shell，也不会重放历史输入或命令。
• 不进行自动重连，不绕过服务端空闲超时策略、资产授权或审计。

验证

• 本地 TypeScript 类型检查和生产构建通过，113 项测试通过。
• 已在构建后的界面中以模拟 IPC 验证断开提示、重复点击保护、失败重试、新标签创建和旧输出保留；尚未对真实 JumpServer 进行空闲超时重连联调。
• 发布流水线在 Linux、Windows 和 macOS 上执行检查、打包与打包后启动 / IPC 冒烟验证，汇集完整产物后才公开发布。

下载与升级

• Windows x64：NSIS .exe 安装包，支持应用内更新。
• Linux x64：.AppImage 支持应用内更新；.deb 请从本页下载并使用系统包管理器安装。
• macOS Intel / Apple Silicon：提供 x64 / arm64 的 .dmg 和 .zip，请手动下载并替换应用；不提供 macOS 自动下载或自动安装。
• 可使用本页的 SHA256SUMS 检查下载文件完整性。

签名状态

所有安装包均未签名；macOS 构建也未公证。 系统可能显示安全警告或阻止运行。仅从本仓库的可信 GitHub Release 下载，遵循组织安全策略，不要绕过平台安全检查。校验和不能代替发行者签名。

---

English

New: manual terminal reconnection

• A Reconnect button is now available at the bottom of the terminal after an idle timeout, connection loss, closure, or connection failure.
• Reuses the original asset, account, and connection method, goes through JumpServer authorization again, and opens the session in a new tab. The old tab retains its terminal output for inspection and copying.
• Shows “Establishing new session…” and disables repeated clicks while connecting. Failed attempts can be retried.
• Includes Chinese and English UI messages and updated usage documentation.

Session and security boundaries

• Reconnection creates a new session. It does not restore the previous shell or replay earlier input or commands.
• No automatic reconnection; server-side idle timeout policies, asset authorization, and auditing are not bypassed.

Verification

• Local TypeScript checks and production builds passed, along with all 113 tests.
• The built UI was exercised with simulated IPC to verify disconnect indicators, duplicate-click protection, retry after failure, new-tab creation, and retention of previous output. Idle-timeout reconnection has not yet been integration-tested against a live JumpServer.
• The release pipeline runs checks, packaging, and packaged startup / IPC smoke verification on Linux, Windows, and macOS. Publication happens only after the complete artifact set is assembled.

Downloads and updates

• Windows x64: NSIS .exe installer with in-app updates.
• Linux x64: .AppImage supports in-app updates. Download .deb packages from this page and install them with your system package manager.
• macOS Intel / Apple Silicon: x64 / arm64 .dmg and .zip downloads. Download and replace the application manually; automatic macOS downloads and installation are not supported.
• Use SHA256SUMS from this release to check download integrity.

Signing status

All release artifacts are unsigned, and macOS builds are not notarized. Your operating system may warn about or block the application. Download only from this repository’s trusted GitHub Release, follow your organization’s security policy, and do not bypass platform security checks. Checksums do not replace publisher signatures.

Full changelog / 完整变更: v0.1.3...v0.1.4

JumpServer Desktop v0.1.3

Update delivery

• Windows x64 NSIS and Linux x64 AppImage builds can use the in-app updater from this public release.
• Linux .deb packages are manual downloads; use this release page for updates.
• macOS updates are manual downloads only. The application does not download or install macOS updates automatically.

Signing status

All release artifacts are unsigned. macOS builds are not signed or notarized and may be blocked by Gatekeeper. Download only from this trusted GitHub Release; do not bypass platform security prompts.

Full Changelog: v0.1.2...v0.1.3

JumpServer Desktop v0.1.2

Update delivery

• Windows x64 NSIS and Linux x64 AppImage builds can use the in-app updater from this public release.
• Linux .deb packages are manual downloads; use this release page for updates.
• macOS updates are manual downloads only. The application does not download or install macOS updates automatically.

Signing status

All release artifacts are unsigned. macOS builds are not signed or notarized and may be blocked by Gatekeeper. Download only from this trusted GitHub Release; do not bypass platform security prompts.

Full Changelog: v0.1.1...v0.1.2