@electerm/electerm-react 5.0.7 → 5.1.6

package/client/components/terminal/terminal.styl

@@ -34,6 +34,14 @@
     background transparent
   .xterm-viewport
     background-color transparent !important
+  // xterm's DOM renderer paints the background of selected text cells directly
+  // on the <span> as an opaque 6-digit hex (dropping alpha), while empty cells
+  // use the translucent .xterm-selection overlay behind the rows. xterm marks
+  // those spans with .xterm-decoration-top ("rendered above the selection"),
+  // so neutralise that inline background to let the corrected selection overlay
+  // show through uniformly across both empty and text cells.
+  .xterm-decoration-top
+    background-color transparent !important
   .xterm-screen::before
     content ''
     position absolute

package/client/components/terminal-info/base.jsx

@@ -3,10 +3,10 @@
  */
 import { Component } from 'react'
 import {
-  Switch,
   Space,
   Button
 } from 'antd'
+import SwitchLabel from '../common/switch'
 import defaults from '../../common/default-setting'
 import { toggleTerminalLog, toggleTerminalLogTimestamp } from '../terminal/terminal-apis'
 import {
@@ -123,9 +123,8 @@ export default class TerminalInfoBase extends Component {
     }
     const name = e('addTimeStampToTermLog')
     return (
-      <Switch
-        checkedChildren={name}
-        unCheckedChildren={name}
+      <SwitchLabel
+        label={name}
         checked={addTimeStampToTermLog}
         onChange={this.handleToggleTimestamp}
         className='mg1b'
@@ -176,9 +175,8 @@ export default class TerminalInfoBase extends Component {
           <b>ID:</b> {id}
         </div>
         <div className='pd1b'>
-          <Switch
-            checkedChildren={name}
-            unCheckedChildren={name}
+          <SwitchLabel
+            label={name}
             checked={saveTerminalLogToFile}
             onChange={this.handleToggle}
             className='mg1r mg1b'

package/client/components/widgets/widget-form.jsx

@@ -2,8 +2,9 @@
  * Widget form component
  */
 import React, { useState, useEffect } from 'react'
-import { Form, Input, InputNumber, Switch, Select, Button, Tooltip, Alert, Space } from 'antd'
+import { Form, Input, InputNumber, Select, Button, Tooltip, Alert, Space } from 'antd'
 import { formItemLayout, tailFormItemLayout } from '../../common/form-layout'
+import SwitchLabel from '../common/switch'
 import HelpIcon from '../common/help-icon'
 import { nanoid } from 'nanoid'
 import BatchOpEditor from '../batch-op/batch-op-editor'
@@ -91,7 +92,7 @@ export default function WidgetForm ({ widget, onSubmit, loading, hasRunningInsta
             valuePropName='checked'
             tooltip={description}
           >
-            <Switch />
+            <SwitchLabel />
           </Form.Item>
         )
       default:

package/client/css/mobile.styl

@@ -178,12 +178,21 @@
 
 // ---------------------------------------------------------------------------
 // Touch-primary devices only (feature-detected via pointer media query, not
-// UA sniffing or viewport width). iOS Safari and Android Chrome auto-zoom the
-// page when focusing an input with font-size < 16px, and never zoom back out
-// on blur, leaving the page stuck zoomed. Desktop browsers (even with
-// touchscreens or narrow windows) report pointer: fine and never force-zoom,
-// so this never matches them. Force 16px on all focusable form fields (antd
-// inputs default to 14px) to prevent the zoom.
+// UA sniffing or viewport width). Desktop browsers (even with touchscreens or
+// narrow windows) report pointer: fine, so this never matches them.
+//
+// 1. iOS Safari and Android Chrome auto-zoom the page when focusing an input
+//    with font-size < 16px, and never zoom back out on blur, leaving the page
+//    stuck zoomed. Force 16px on all focusable form fields (antd inputs default
+//    to 14px) to prevent the zoom.
+//
+// 2. Mobile browsers also inflate text to improve readability
+//    (-webkit-text-size-adjust defaults to auto). Inside a fixed-size container
+//    this makes the text taller than its wrapper, so it gets clipped — the
+//    clearest victim is the antd small Switch, whose track is only 16px tall /
+//    28px wide with overflow:hidden; the "sort by frequency" label gets blown
+//    past the track and chopped. Pin to 100% so the declared font-size is
+//    honored.
 // ---------------------------------------------------------------------------
 @media (pointer: coarse)
   input,
@@ -194,3 +203,6 @@
   .ant-input-number-input,
   .ant-select-selection-search-input
     font-size 16px !important
+  html
+    -webkit-text-size-adjust 100%
+    text-size-adjust 100%

package/client/store/init-state.js

@@ -167,6 +167,9 @@ export default () => {
     pinnedQuickCommandBar: ls.getItem(pinnedQuickCommandBarKey) === 'y',
     qmSortByFrequency: ls.getItem(qmSortByFrequencyKey) === 'yes',
 
+    // touch-only shortcut bar (see components/terminal/shortcut-bar-entry.jsx)
+    shortcutBarVisible: false,
+
     // sidebar
     openedSideBar: ls.getItem(openedSidebarKey) || '',
     _leftSidePanelWidth: parseInt(ls.getItem(leftSidePanelWidthKey), 10) || 300,

package/client/store/mcp-handler.js

@@ -18,6 +18,30 @@ import {
 } from '../components/bookmark-form/fix-bookmark-default'
 import newTerm from '../common/new-terminal'
 
+// Dangerous props that must not be accepted from MCP/AI tool calls.
+// Mirrors the blocklist in src/client/store/tab.js (dangerousTabProps).
+// These allow arbitrary command execution if set (e.g. execLinux/execLinuxArgs
+// override the shell binary, setEnv injects environment variables, runScripts
+// executes scripts, interactiveValues injects interactive prompts).
+const dangerousTabProps = [
+  'execLinux',
+  'execMac',
+  'execWindows',
+  'execWindowsArgs',
+  'execMacArgs',
+  'execLinuxArgs',
+  'setEnv',
+  'runScripts',
+  'interactiveValues'
+]
+
+// Strip dangerous props from an object, returning a safe copy.
+function stripDangerousTabProps (obj) {
+  return Object.fromEntries(
+    Object.entries(obj).filter(([key]) => !dangerousTabProps.includes(key))
+  )
+}
+
 export default Store => {
   // Initialize MCP handler - called when MCP widget is started
   Store.prototype.initMcpHandler = function () {
@@ -497,7 +521,11 @@ export default Store => {
 
   Store.prototype.mcpOpenTab = function (args) {
     const { store } = window
-    const data = fixBookmarkData({ ...args })
+    // Strip dangerous execution-related props before any processing.
+    // This prevents MCP/AI callers from injecting execLinux/execLinuxArgs,
+    // setEnv, runScripts, etc. to spawn arbitrary local processes.
+    const safeArgs = stripDangerousTabProps({ ...args })
+    const data = fixBookmarkData(safeArgs)
 
     const { valid, errors } = validateBookmarkData(data)
     if (!valid) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@electerm/electerm-react",
-  "version": "5.0.7",
+  "version": "5.1.6",
   "description": "react components src for electerm",
   "main": "./client/components/main/main.jsx",
   "license": "MIT",