Skip to content

Zync v2.33.2

Choose a tag to compare

@gajendraxdev gajendraxdev released this 27 Sep 19:06
· 136 commits to main since this release

Release Notes - Zync v2.33.2

Release date: Pending publication


What's New

This release combines the previously unpublished v2.33.0 and v2.33.1 drafts
with v2.33.2's workspace and plugin stability improvements.

The highlights are a signed plugin marketplace, explicit plugin permissions, and
plugin panes that keep their state while you switch tabs or rearrange your workspace.

Highlights:

  • PM2 Monitor 2.0.0: Install from the marketplace and manage processes on your connected server.
  • More stable workspace panes: Plugin content stays mounted through tab switches, splits, moves, and layout collapse.
  • Permissions you control: Allow or deny optional actions without restarting a plugin.
  • Better plugin recovery: Ordinary restarts no longer pause all third-party plugins; repeated failures remain quarantined individually.

Compare: v2.32.2...v2.33.2


See It in Action

plugin.mp4

Added

  • Signed distribution: Registry signatures, publisher identity and package integrity are verified before installation. Marketplace updates reject downgrades and replacement of an existing version with different package contents. Explicit retained-version rollback remains available.
  • PM2 Monitor: Browse processes, inspect logs and environment information, and start, restart, reload, stop or delete selected processes. Requires PM2 to be installed on the connected server.
  • Manifest v2: Isolated workers and panes, declared capabilities, runtime health tracking, crash-loop quarantine and recovery controls. (93f3fc0, 7ccfe31)
  • Optional permissions: Host-owned Allow/Deny prompts let you approve an optional action without restarting. Denial cancels the action; a later attempt may ask again. Grants can be revoked in plugin settings.
  • Beta channels: Compatible signed plugins can offer an opt-in beta build without creating a duplicate marketplace listing.
  • Authoring packages: The beta @zync-sh/plugin-sdk provides types, validation and a starter template. The beta @zync-sh/plugin-ui provides theme integration, controls, accessible dropdowns and tooltips. (ea32a61, 41eaaa2)
  • Pane-bound SSH commands: Plugin API 2.1 provides permission-checked remote commands with quoted arguments, bounded execution/output and stale-connection protection. (e9aa6c8)

Changed

  • Retained plugin content: Switching workspace or pane tabs no longer recreates visited plugin frames. Hidden panes receive visibility updates so compatible plugins can pause background polling. (e58e875, 7b7ac50)
  • Stable content through layout changes: Splitting, moving, changing owners and collapsing groups preserve content hosts and iframe documents instead of reloading them. Closed content is disposed, and hidden terminals remain inactive. (feed932)
  • Shared pane layout: Standalone plugins use the same workspace pane system as other content instead of a terminal overlay. Docking keeps the destination selected, and moves or closes preserve surviving panes and their identities. (7b7ac50)
  • Safer dragging: Rearranging panes no longer triggers a trailing browser click on a close button. Dragging a standalone shell onto its own edge creates a sibling shell without hiding the original tab.
  • Dynamic plugin icons: Workspace menus, pane headers, installed-plugin settings and details use package-provided image assets. Marketplace icons retain valid thumbnail fallbacks when installed assets are missing or fail to load. (76b045b, 7b7ac50)
  • Loading feedback: A preparing plugin canvas shows a loading state rather than a blank view.

Fixed

  • Plugin startup: Ordinary app restarts and unclean exits no longer cause a blanket third-party plugin pause. (57b9c5e)
  • Recovery history: Unreadable recovery history blocks activation without discarding saved failures; corrupt files are preserved for repair. (57b9c5e)
  • Failed reloads: Commands, panels and pane routing are cleared when their workers stop, preventing stale UI entries. (cc010f6)
  • Plugin pane identity and workspace position survive failures and reloads.
  • Left and AI sidebars, plus split dividers, remain draggable across plugin frames.
  • Shell discovery waits for a ready connection and retries after reconnect.
  • Tunnel reconciliation: Now supplies the required connectionId, fixing the missing-argument error. (57b9c5e)
  • Host-owned theme selection works independently of plugin workers.

Security

  • Registry freshness: Production release checks reject non-expiring metadata and validity periods longer than seven days. Registry publication uses bounded expiry with daily automated refreshes; clients retain accepted version history and revocations. (cc010f6, cef8c21)
  • Release preflight validates configured registry trust settings, signatures, expiry and version floors, and can require marketplace-enabled builds.
  • Plugin shortcuts and native operations remain host-controlled; a plugin message is not treated as proof of a user keypress.
  • Plugin asset access, editor frames and package extraction have tighter boundaries and validation.
  • Local and legacy plugins require explicit Developer Mode, which defaults off. Turning it off stops those runtimes without affecting signed marketplace plugins.
  • A valid signature establishes provenance and integrity—not a guarantee that a plugin's behavior is harmless. Remote-command grants use your connected SSH account's authority. Review requested permissions and remove sensitive data before sharing logs.

Plugin Compatibility

Older local or legacy plugins are not automatically converted to Manifest v2.
Look for a compatible signed marketplace release; legacy plugins require Developer
Mode and do not provide the same isolation guarantees.


Thank You

Thank you to everyone who tested the plugin marketplace, reported pane issues,
and helped improve Zync's workspace stability.


Feedback

Something broken, confusing, or missing after this update?

Include your OS, Zync version (v2.33.2) and steps to reproduce. Remove secrets
from logs and screenshots before sharing.


Quick Check After Upgrade

  1. Confirm Settings → About shows v2.33.2.

  2. Open Settings → Plugins → Marketplace and install PM2 Monitor.

  3. Connect to a server with PM2 installed, then open the plugin to inspect processes and logs.

  4. Switch tabs and rearrange panes to check that plugin content retains its state.

  5. Restart Zync and confirm plugins are not globally paused.


Upgrade

Download your platform's build from Zync v2.33.2.

For existing package-repository installations:

# Debian / Ubuntu (APT repository)
sudo apt update && sudo apt install zync

# Arch (pacman repository)
sudo pacman -Syu zync

Full Changelog

For implementation details and commit references, see the full changelog.


References