Issues

• UX and accessibility pass: misleading empty states, terminal shortcuts, dialogs, hover-only actions, unlabeled controls

  CodeAny-inc/Clavyn#178 · Filter by author Sadykhzadeh opened on Oct 17, 2026

• SSH sign-in: no keyboard-interactive, unexplained rejections, Nagle on, and a dead IPv6 address blocks IPv4

  CodeAny-inc/Clavyn#176 · Filter by author Sadykhzadeh opened on Oct 17, 2026

• Native host key dialogs confirm on Return, and the plugin makes the obvious fix unsafe

  CodeAny-inc/Clavyn#175 · Filter by author Sadykhzadeh opened on Oct 17, 2026

• Unreadable state files load as empty (and the vault can be re-created over itself); passphrase minimum is UI-only

  CodeAny-inc/Clavyn#173 · Filter by author Sadykhzadeh opened on Oct 17, 2026

• Key import runs an uncapped KDF twice on an async worker, and keychain calls hold the vault lock

  CodeAny-inc/Clavyn#169 · Filter by author Sadykhzadeh opened on Oct 17, 2026

• Confirmations never block: the dialog plugin turns window.confirm into a Promise

  CodeAny-inc/Clavyn#168 · Filter by author Sadykhzadeh opened on Oct 17, 2026

• Auto-lock ignores terminal typing; masked hosts leak through errors; Files stale after vault reset; three smaller UI bugs

  CodeAny-inc/Clavyn#166 · Filter by author Sadykhzadeh opened on Oct 17, 2026

• Forms: double clicks create duplicates, save failures are silent, an imported key stays in memory

  CodeAny-inc/Clavyn#164 · Filter by author Sadykhzadeh opened on Oct 17, 2026

• Files: Delete/Rename/Download can act on a file in another directory, and an old listing can overwrite a newer one

  CodeAny-inc/Clavyn#162 · Filter by author Sadykhzadeh opened on Oct 17, 2026

• Repository hygiene: a test that cannot fail, dead components and imports, stale docs

  CodeAny-inc/Clavyn#160 · Filter by author Sadykhzadeh opened on Oct 17, 2026

• Terminal output is pushed to the webview with no backpressure, so a fast server can exhaust app memory

  CodeAny-inc/Clavyn#158 · Filter by author Sadykhzadeh opened on Oct 16, 2026

• Triage: external vulnerability report against 0.1.2-alpha.6 (13 findings)

  CodeAny-inc/Clavyn#157 · Filter by author Sadykhzadeh opened on Oct 16, 2026
  2

• The first connection to a host trusts any key without showing its fingerprint

  CodeAny-inc/Clavyn#156 · Filter by author Sadykhzadeh opened on Oct 16, 2026

• Closed local terminals leave zombie shells, and two Tauri plugins are registered for nothing

  CodeAny-inc/Clavyn#153 · Filter by author Sadykhzadeh opened on Oct 16, 2026

• Saving the vault leaves copies of every private key in freed memory

  CodeAny-inc/Clavyn#151 · Filter by author Sadykhzadeh opened on Oct 16, 2026

• Terminal input: pastes can escape bracketed paste, OSC 8 links open popups, keystrokes can reorder

  CodeAny-inc/Clavyn#149 · Filter by author Sadykhzadeh opened on Oct 16, 2026

• Server-opened channels are accepted, and the host startup command is never run

  CodeAny-inc/Clavyn#147 · Filter by author Sadykhzadeh opened on Oct 16, 2026

• CI and release hardening: unenforced lockfile, release.sh key exposure, and settings that leave the signing key reachable

  CodeAny-inc/Clavyn#145 · Filter by author Sadykhzadeh opened on Oct 16, 2026

• An unsigned latest.json can roll every client back to an older signed release

  CodeAny-inc/Clavyn#143 · Filter by author Sadykhzadeh opened on Oct 16, 2026

• A failed SFTP download truncates the file it was overwriting, and uploads use 8 KiB writes

  CodeAny-inc/Clavyn#141 · Filter by author Sadykhzadeh opened on Oct 16, 2026

• One stalled SSH or SFTP peer blocks every other session and keeps vault reset from cutting it off

  CodeAny-inc/Clavyn#139 · Filter by author Sadykhzadeh opened on Oct 16, 2026

• Allow renaming session tabs (custom tab names)

  enhancement
  Feature

  CodeAny-inc/Clavyn#53 · Filter by author computerbox124 opened on Sep 10, 2026
  

• Webview JS can spawn a local shell and write to its stdin via create_local_terminal + session_write

  Security
  CodeAny-inc/Clavyn#30 · Filter by author Sadykhzadeh opened on Sep 10, 2026
  2

  

• Vault reset requires the master passphrase, so the forgot-passphrase recovery path dead-ends

  bug
  CodeAny-inc/Clavyn#28 · Filter by author computerbox124 opened on Sep 10, 2026
  

• Three RUSTSEC advisories in the dependency tree, and Cargo.lock is untracked

  Security
  Task

  CodeAny-inc/Clavyn#18 · Filter by author Sadykhzadeh opened on Sep 9, 2026
  3