ShellGuardian v0.4.0

ShellGuardian now includes two controls in the inspector for a Ready sandbox:

• Talk to agent attaches the existing OpenShell main process. An interactive agent keeps its own terminal interface; ShellGuardian does not invent a generic chat API.
• Open terminal starts an independent interactive shell inside that sandbox, with keyboard input, ANSI colors, resizing, and OS-matched appearance.

Both modes retain their selected gateway, workspace, and SSH connection. Terminal output stays in bounded memory, not a database or conversation log. Detaching leaves the main agent running. Closing a shell asks OpenShell to end that exec session; background or detached jobs may continue, and the sandbox is not stopped.

Verified against the published AppImage using an isolated sandbox and real local SSH fixture, including input, resizing, disconnect, and owned-process cleanup. Physical remote-host interactive acceptance remains pending.

Linux x86_64 preview. Per-user install, SHA256 verification, and version-bound signed automatic updates. GTK 3, WebKitGTK 4.1, and a configured OpenShell gateway are required. macOS, Windows, and Linux ARM builds are not published yet.

Full changelog: v0.3.2...v0.4.0

ShellGuardian v0.3.2

Ubuntu launcher icon correction for the Linux x86_64 preview.

• Align native Wayland, GTK, and X11 identities with the installed desktop launcher.
• Resolve the shield icon by its absolute path and repair untouched managed launchers before opening a window.
• Keep a hidden compatibility launcher for older windows, without duplicating the application menu item.
• Preserve customized entries during automatic repair and bound optional desktop-cache refreshes.

Close and reopen ShellGuardian after updating. Existing SSH tunnels close with the app; connect again after relaunching. Dock favorites are never changed automatically.

Verified native Wayland and X11 identity checks, installer behavior, and existing read-only SSH/mTLS lifecycle tests. Visual dock confirmation in each desktop session remains distinct from these checks.

Per-user installation, SHA256 verification, and version-bound signed automatic updates remain enabled. GTK 3 and WebKitGTK 4.1 runtime libraries are required. macOS, Windows, and Linux ARM packages are not published yet.

ShellGuardian v0.3.1

Linux x86_64 preview.

• Connect remote OpenShell servers through session-only SSH tunnels. The remote gateway port defaults to 17670; SSH aliases retain their configured port.
• Follow OS light/dark appearance, including changes while the app is open.
• Install a recognizable Ubuntu launcher icon with matching desktop identity. Existing untouched installer entries are repaired after updating.

SSH uses an existing OpenShell mTLS profile, trusted SSH host key, and key/agent authentication. Certificates remain owned by OpenShell, TLS verification stays enabled, and disconnected sessions never fall back to another gateway. Tunnels close on disconnect or app exit. No database or saved connection store is added.

The per-user installer and default-on signed automatic updates remain available. Updates apply on normal close or explicit restart, without interrupting in-flight OpenShell changes. OpenShell itself is never upgraded automatically.

Requires GTK 3, WebKitGTK 4.1, and a working OpenShell CLI/gateway. OpenSSH is needed for remote tunnels. macOS, Windows, and Linux ARM builds are not published yet.

Verified with 38 bridge tests, 14 native tests, 23 browser checks, installer checks, and real native SSH/mTLS reads through an isolated local SSH server. Physical remote-host and disposable live-agent mutation acceptance remain open. See acceptance status.

Install and update · Changes since v0.2.0

ShellGuardian v0.2.0

Linux x86_64 preview. Per-user install, SHA256 verification, and version-bound signed automatic updates. GTK 3 and WebKitGTK 4.1 runtime libraries required. macOS, Windows, and Linux ARM builds are not published yet.

Full Changelog: https://github.com/pierce403/shellguardian/commits/v0.2.0