v1.4.1

What's Changed

• ci: Add Native macOS .dmg and .pkg Packaging to GitHub Actions Release Workflow by @mzia in #5

Full Changelog: v1.4.0...v1.4.1

PulsarKey v1.4.0: Cross-Platform macOS Support & Streamlined Experience

🌌 PulsarKey v1.4.0 Release Notes

🍎 Cross-Platform macOS Support (Single Rust Codebase)

• Unified Rust Core: Full compatibility with Pop!_OS Linux and macOS (Darwin 12+).
• macOS PAM Integration: Directly targets /etc/pam.d/screensaver, /etc/pam.d/authorization, and /etc/pam.d/sudo.
• Presence Sentinel Daemon: Monitors USB insertion and removal via IOUSB / ioreg, locking the display immediately when the token is unplugged.
• Metal Acceleration: The Iced GUI Settings window natively renders via Apple Metal on macOS and Wayland/Vulkan on Linux.
• Packaging Suite: Adds macOS App Bundle (PulsarKey.app), DMG/PKG generation scripts (build_mac.sh), and a Homebrew Cask formula (pulsarkey.rb).

⚙️ Integrated Settings View as User Selection

• Running pulsarkey in a terminal now presents an interactive view selector to launch the Settings GUI [2] or view the Terminal Status Dashboard [1].
• Direct shortcut: pulsarkey -g (or pulsarkey gui).
• Automatically launches the Settings GUI when double-clicked or invoked from desktop application menus.

📖 Streamlined Documentation

• Comprehensive 2-minute quick start guide.
• Plain-English instructions for everyday lockscreen unlocking and passwordless elevation.

---

📦 Assets

• Pop!_OS / Linux: pulsarkey_1.4.0_amd64.deb
• macOS: PulsarKey-macOS-1.4.0.tar.gz

What's Changed

• feat: COSMIC Native Settings App and Emergency Rescue Suite (v1.4.0) by @mzia in #3
• feat: Cross-Platform macOS Support, App Bundle & Packaging (v1.4.0) by @mzia in #4

Full Changelog: v1.3.0...v1.4.0

PulsarKey v1.3.0: Security Profiles, Audit Journal & Backup Key Assistant

PulsarKey v1.3.0 Release Notes

🛡️ What's New:

• Security Strictness Profiles:

  • Convenience (1FA): Biometric fingerprint touch alone unlocks greeter, sudo, and polkit with password fallback.
  • Fortress (True 2FA): Strictly enforces user password AND physical YubiKey touch.
  • Lockdown: Hardware token strictly mandatory with zero password fallback.
  • Safe PAM file generation with automatic rollback backups (.pulsarkey.bak).
  • Switch via CLI (pulsarkey profile) or directly from the COSMIC panel applet.

• Authentication Audit Journal (Recent Pulses):

  • Real-time logging of authentication and hardware insertion/removal pulses to ~/.config/pulsarkey/audit.log.
  • Dynamic system auth log aggregation from journalctl with a formatted CLI viewer (pulsarkey audit).
  • Integrated tray submenu showing the 5 most recent pulses and 1-click journal inspector.

• Backup Key Sync & Recovery Assistant:

  • Automatically parses /etc/yubico/u2f_keys for hardware redundancy health.
  • Interactive pairing wizard (sudo pulsarkey backup pair) to enroll secondary keys safely without overwriting primary credentials.
  • Verification testing and backup resident SSH key generation.

• COSMIC Panel Applet Enhancements:

  • Low-overhead sysfs hardware detection eliminating polling latency and hidraw lock contention.
  • Direct menu controls for Security Profiles, Recent Pulses, and Backup Assistant.

📦 Installation:

sudo apt install ./pulsarkey_1.3.0_amd64.deb

What's Changed

• feat: Security Profiles, Audit Journal, and Backup Key Assistant (v1.3.0) by @mzia in #2

Full Changelog: v1.2.0...v1.3.0

PulsarKey v1.2.0

What's New in PulsarKey v1.2.0

🧬 Native On-Key Biometric & Fingerprint Manager (pulsarkey bio)

• Interactive Biometric Dashboard (pulsarkey bio): View sensor capabilities, remaining PIN retries, and enrolled fingerprints with friendly labels.
• On-Device Enrollment: Enroll new fingerprints directly from PulsarKey with live sensor touch feedback ("Place your finger against the sensor now... 3 more scans needed").
• Template Management: Rename and delete fingerprint templates without resetting the token.
• Hardware PIN Controls (pulsarkey pin): Check remaining PIN attempts, set a new PIN, verify PIN correctness, or change your FIDO2 PIN.
• Secure Masked Input: Zero-echo PIN prompt powered directly by POSIX libc termios.

⚡ Sysfs Zero-Contention USB Polling Engine

• Replaced periodic Python subprocess polling in the COSMIC panel applet with direct Linux kernel sysfs inspection (/sys/bus/usb/devices/*/idVendor).
• Slashes background applet CPU and memory consumption to near-zero.
• Completely prevents USB HID device locking collisions on /dev/hidraw*.

🖥️ Top Bar Panel Applet & Status Dashboard

• Added 🧬 Biometric Fingerprint Manager (Terminal)... directly to the COSMIC panel applet menu.
• Added live Biometric Engine status reporting with retry counters to pulsarkey status.

📦 Installation

Download the attached pulsarkey_1.2.0_amd64.deb and install via COSMIC Store / Eddy or run:

sudo apt install ./pulsarkey_1.2.0_amd64.deb

What's Changed

• feat: Native On-Key Biometric & Fingerprint Manager (v1.2.0) by @mzia in #1

New Contributors

• @mzia made their first contribution in #1

Full Changelog: v1.1.0...v1.2.0

PulsarKey v1.1.0

What's New in PulsarKey v1.1.0

🔑 Hardware-Backed SSH & Git Commit Signing

• Interactive Wizard (pulsarkey ssh-setup): Generate hardware-backed FIDO2 SSH keys (ed25519-sk) stored resident on your security token with biometric User Verification (-O verify-required).
• Cryptographic Git Commit Signing: Automatic configuration of Git (gpg.format = ssh, commit.gpgsign = true, and allowed_signers) so all git commits are cryptographically verified by your YubiKey fingerprint or touch.
• Top Bar Panel Applet Launcher: Launch the SSH & Git signing wizard directly from the COSMIC panel applet.

🛡️ Presence Sentinel & Polkit Elevation

• Auto-Lock on Removal: Real-time USB polling triggers desktop lock (loginctl lock-session) the moment your security key is removed.
• Polkit GUI Elevation: Instant biometric and touch authorization for graphical administrative dialogs (pkexec, Pop!_Shop, Eddy, COSMIC Settings).

📦 Installation

Download the attached pulsarkey_1.1.0_amd64.deb and install via COSMIC Store / Eddy or run:

sudo apt install ./pulsarkey_1.1.0_amd64.deb

Full Changelog: 1.0.0...v1.1.0

PulsarKey v1.0.0

🌌 PulsarKey v1.0.0 — Initial Release

Hardware-backed FIDO2 & Biometric Authentication Manager for Pop!_OS COSMIC.

Key Highlights:

• Zero-Lag Lockscreen: Fixed COSMIC Greeter biometric unlock with Space+Enter activation.
• Touch Sudo: Single-touch biometric privilege escalation for administrative tasks.
• COSMIC Panel Applet: StatusNotifierItem tray applet showing hardware presence and sensor test.
• Hardware User Verification: Full support for YubiKey C Bio (FIDO2 +presence+verification).
• Debian Package (.deb): Native 1-click install for the Pop!_OS COSMIC Store / Eddy.

Full Changelog: https://github.com/mzia/PulsarKey/commits/v1.0.0

1.0.0

🌌 PulsarKey 1.0.0

Hardware-backed FIDO2 & Biometric Authentication Manager for Pop!_OS COSMIC.

Assets:

• pulsarkey_1.0.0_amd64.deb: Native package for Pop!_OS COSMIC Store / Eddy / APT.