@miraj181/ipingyou 2.1.3 → 2.1.5

package/README.md

@@ -25,7 +25,7 @@ No firewalls to configure. No port forwarding. No plaintext leakage.
 * 🧭 **Approval Gate**: Require the Host to explicitly approve clients before they receive tunnel/key material.
 * 📦 **One-Time File Share**: Serve a single file/folder over SCP and revoke after use.
 * 🌐 **HTTP & TCP Exposure**: Share a local web app or any TCP service (DB/RDP/VNC) beyond SSH.
-* 📂 **Shared Drop Folder**: Auto-prepared dropbox folder for safe file transfers (macOS friendly).
+* 📂 **Shared Drop Folder**: Auto-prepared dropbox folder for safe file transfers (macOS friendly), removed on exit.
 * 🧾 **Live Session Logs**: Host/client/broker write ephemeral per-session logs with actions and request/response status, removed on exit.
 
 ---
@@ -60,22 +60,43 @@ securelink
 
 ## 🔒 Zero-Knowledge Architecture
 
-The public broker server exists solely to rendezvous connections. It is fundamentally a **"Dumb Pipe"**.
+The public broker server exists solely to rendezvous connections and approvals. It is fundamentally a **"Dumb Pipe"**.
+
+### Session Bootstrap & Data Path
 
 ```mermaid
 graph LR
-    H[Host CLI] -->|AES-256-CBC Encrypted Payload| B((Broker Relay))
-    B -->|Encrypted Payload| C[Client CLI]
+    H[Host CLI] -->|AES-256-CBC Encrypted Session Payload| B((Broker Relay))
+    H -->|Host Auth Token for approvals and telemetry| B
+    B -->|Encrypted Session Payload| C[Client CLI]
     C -->|Locally Decrypts Password| C
-    C -->|Direct Cloudflare SSH| H
+    C -->|Direct Cloudflare SSH/TCP| H
     C -->|E2E AES-GCM WebSockets| H
 ```
 
-1. **Host** starts up, spawns `cloudflared` tunnels for SSH and Chat, and generates a random, offline **AES-256 Session Password**.
-2. **Host** encrypts the tunnel data with the password and sends the *ciphertext* to the Broker alongside a short UID.
+1. **Host** starts up, spawns `cloudflared` tunnels for SSH/HTTP/TCP and Chat, then generates a random **AES-256 Session Password** plus a **host-only auth token**.
+2. **Host** encrypts the session payload with the password and registers the ciphertext (plus the host token) with the Broker under a short UID.
 3. **Client** runs `ipingyou connect`, enters the UID and Password.
-4. **Client** fetches the ciphertext, decrypts it locally, and connects directly via SSH and WebSockets.
-5. On `Ctrl+C`, `tree-kill` initiates a graceful shutdown, revokes the UID from the broker, and scrubs `/tmp` memory.
+4. **Client** fetches the ciphertext, decrypts it locally, and connects directly via SSH or WebSockets.
+5. On `Ctrl+C`, `tree-kill` initiates a graceful shutdown, revokes the UID from the broker, and removes session artifacts.
+
+### Approval Gate Flow (Optional)
+
+```mermaid
+sequenceDiagram
+    participant C as Client CLI
+    participant B as Broker Relay
+    participant H as Host CLI
+    C->>B: approval-request encrypted metadata
+    H->>B: fetch approvals with x-host-token
+    H->>B: approve/deny with x-host-token
+    C->>B: poll approval status
+    B-->>C: approved/denied
+```
+
+1. **Client** submits encrypted approval metadata (username, host, intent) to the Broker.
+2. **Host** lists and decides approvals using its host-only auth token; the Broker never shares this token with clients.
+3. **Client** polls for approval status and proceeds only when approved.
 
 ---
 
@@ -111,6 +132,8 @@ These alerts (e.g., "AI-detected potential code anomaly", "Shell access", "Netwo
 | `ipingyou service install` | 👻 Installs Host mode as an always-on background daemon. |
 | `ipingyou service stop` | Stops and removes the background daemon. |
 | `ipingyou service status` | Shows background daemon status. |
+| `ipingyou allowlist` | Manage the AI command allowlist (list/add/remove). |
+| `ipingyou history` | View session event logs from `~/.ipingyou/logs`. |
 
 ---
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miraj181/ipingyou",
-  "version": "2.1.3",
+  "version": "2.1.5",
   "description": "SecureLink-CLI — Secure peer-to-peer remote access via SSH & Cloudflare Tunnels",
   "main": "src/cli.js",
   "bin": {

package/src/cli.js

@@ -27,6 +27,7 @@ import { fileURLToPath } from 'node:url';
 
 import { detectOS, checkDependencies } from './lib/platform.js';
 import { cleanupAll, installShutdownHandlers, executePanicMode } from './lib/cleanup.js';
+import { cleanupSessionLog } from './lib/session-log.js';
 import { startHostMode } from './modes/host.js';
 import { startClientMode } from './modes/client.js';
 import { startAIMode } from './modes/ai.js';
@@ -122,6 +123,8 @@ function showRichHelp() {
   console.log(`    • Cloudflare Tunnels punch through NAT/Firewalls securely.`);
   console.log(`    • ${chalk.green('End-to-End Encryption')}: Tunnel URLs are AES-256 encrypted locally.`);
   console.log(`    • The Broker never sees your plaintext URL, only ciphertext.`);
+  console.log(`    • ${chalk.green('Host Auth Token')}: Host-only token gates approvals & telemetry access.`);
+  console.log(`    • ${chalk.green('Approval Gate')}: Clients submit encrypted metadata; Host approves/denies.`);
   console.log('');
 
   console.log(chalk.bold.white('  🔥 Advanced Features:'));
@@ -130,6 +133,8 @@ function showRichHelp() {
   console.log(`    • ${chalk.green('E2E Chat Room')}      : Real-time Web Crypto AES-GCM secure chat UI for Host & Clients.`);
   console.log(`    • ${chalk.green('Daemonization')}      : Run Host mode as a background service via PM2.`);
   console.log(`    • ${chalk.green('Panic Kill-Switch')}  : Instantly purge all processes, configurations, and traces.`);
+  console.log(`    • ${chalk.green('Shared Drop Folder')} : Session dropbox auto-removed on exit.`);
+  console.log(`    • ${chalk.green('Live Session Logs')}  : Host/client/broker events written per session.`);
   console.log('');
 
   console.log(chalk.bold.white('  💡 Examples:'));
@@ -159,6 +164,7 @@ function fatal(context, err) {
     stackLines.forEach(line => console.error(chalk.dim(`     ${line.trim()}`)));
   }
   console.error('');
+  cleanupSessionLog();
   cleanupAll().finally(() => process.exit(1));
 }
 

package/src/lib/cleanup.js

@@ -14,6 +14,7 @@ import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
 import { execaCommand } from 'execa';
+import { TMUX_SESSION_NAME, tmuxSocketArgs } from './tmux.js';
 
 /** @type {Set<number>} — Active child PIDs we manage */
 const trackedPIDs = new Set();
@@ -191,7 +192,7 @@ export async function executePanicMode() {
     } else {
       await execaCommand('pkill -9 -f cloudflared', { reject: false });
       await execaCommand('pkill -9 -f "sshd:.*@"', { reject: false });
-      await execaCommand('tmux kill-session -t SecureLink_Session', { reject: false });
+      await execaCommand(`tmux ${tmuxSocketArgs().join(' ')} kill-session -t ${TMUX_SESSION_NAME}`, { reject: false });
     }
   } catch {}
 

package/src/lib/path-browser.js

@@ -109,11 +109,11 @@ export async function promptLocalPath(label, browserStart = process.cwd()) {
   return expandLocalPath(localPath);
 }
 
-async function listRemoteDirectory(username, hostname, privateKeyPath, remoteDir) {
+async function listRemoteDirectory(username, hostname, privateKeyPath, remoteDir, persistKnownHosts = true) {
   const cdTarget = formatRemoteCd(remoteDir);
   const cdCommand = cdTarget ? `cd ${cdTarget}` : 'cd';
   const command = `${cdCommand} && printf '__SECURELINK_PWD__%s\\n' "$PWD" && ls -1Ap`;
-  const sshArgs = buildSshArgs(hostname, privateKeyPath);
+  const sshArgs = buildSshArgs(hostname, privateKeyPath, [], { persistKnownHosts });
   sshArgs.push(`${username}@${hostname}`, command);
 
   const result = await execa('ssh', sshArgs, {
@@ -146,7 +146,8 @@ async function listRemoteDirectory(username, hostname, privateKeyPath, remoteDir
   return { pwd, entries };
 }
 
-export async function promptRemotePath(username, hostname, privateKeyPath, purpose, startDir = '~') {
+export async function promptRemotePath(username, hostname, privateKeyPath, purpose, startDir = '~', options = {}) {
+  const { persistKnownHosts = true } = options;
   const browseLabel = purpose === 'source'
     ? 'Browse host files interactively'
     : 'Browse host folders interactively';
@@ -183,7 +184,7 @@ export async function promptRemotePath(username, hostname, privateKeyPath, purpo
   while (true) {
     let listing;
     try {
-      listing = await listRemoteDirectory(username, hostname, privateKeyPath, currentDir);
+      listing = await listRemoteDirectory(username, hostname, privateKeyPath, currentDir, persistKnownHosts);
     } catch (err) {
       console.log(chalk.yellow(`  ⚠️  Could not browse host files: ${err.message}`));
       if (/Operation not permitted/i.test(err.stderr || err.message)) {

package/src/lib/ssh.js

@@ -34,11 +34,24 @@ export function getSshControlOptions(hostname) {
   ];
 }
 
-export function buildSshArgs(hostname, privateKeyPath, extraOptions = []) {
+export function getKnownHostsOptions(persistKnownHosts = true) {
+  if (persistKnownHosts) {
+    return ['-o', 'StrictHostKeyChecking=accept-new'];
+  }
+  const nullDevice = process.platform === 'win32' ? 'NUL' : '/dev/null';
+  return [
+    '-o', 'StrictHostKeyChecking=no',
+    '-o', `UserKnownHostsFile=${nullDevice}`,
+    '-o', 'LogLevel=ERROR',
+  ];
+}
+
+export function buildSshArgs(hostname, privateKeyPath, extraOptions = [], options = {}) {
+  const { persistKnownHosts = true } = options;
   const proxyCommand = `cloudflared access tcp --hostname ${hostname}`;
   const sshArgs = [
     '-o', `ProxyCommand=${proxyCommand}`,
-    '-o', 'StrictHostKeyChecking=accept-new',
+    ...getKnownHostsOptions(persistKnownHosts),
     '-o', 'IdentitiesOnly=yes',
     ...getSshControlOptions(hostname),
     ...extraOptions,

package/src/lib/tmux.js

@@ -0,0 +1,13 @@
+import os from 'node:os';
+import path from 'node:path';
+
+export const TMUX_SESSION_NAME = 'SecureLink_Session';
+export const TMUX_SOCKET_PATH = path.join(os.tmpdir(), 'ipingyou-tmux.sock');
+
+export function tmuxSocketArgs() {
+  return ['-S', TMUX_SOCKET_PATH];
+}
+
+export function tmuxSocketCommand() {
+  return `tmux -S ${TMUX_SOCKET_PATH}`;
+}

package/src/modes/client.js

@@ -24,7 +24,8 @@ import { getConfig, saveAlias } from '../lib/config.js';
 import { pushTelemetry, requestHostApproval, resolveUID, revokeUID, waitForApproval } from '../lib/broker.js';
 import { calculateChecksum } from '../lib/checksum.js';
 import { promptLocalPath, promptRemotePath } from '../lib/path-browser.js';
-import { buildSshArgs, extractHostname, formatScpRemotePath, getSshControlOptions, quoteRemoteShell } from '../lib/ssh.js';
+import { buildSshArgs, extractHostname, formatScpRemotePath, getKnownHostsOptions, getSshControlOptions, quoteRemoteShell } from '../lib/ssh.js';
+import { TMUX_SESSION_NAME, tmuxSocketCommand } from '../lib/tmux.js';
 import open from 'open';
 import { cleanupSessionLog, initSessionLog, logSessionEvent, recordEvent } from '../lib/session-log.js';
 
@@ -68,7 +69,7 @@ async function writeEphemeralPrivateKey(privateKey) {
 /**
  * Start SSH connection through the Cloudflare tunnel.
  */
-async function connectSSH(username, hostname, privateKeyPath) {
+async function connectSSH(username, hostname, privateKeyPath, persistKnownHosts = true) {
   console.log('');
   console.log(chalk.bold('  🔗 Establishing SSH Connection'));
   console.log(chalk.dim('  ─────────────────────────────────'));
@@ -84,10 +85,12 @@ async function connectSSH(username, hostname, privateKeyPath) {
     const sshArgs = buildSshArgs(hostname, privateKeyPath, [
       '-o', 'ServerAliveInterval=30',
       '-o', 'ServerAliveCountMax=3'
-    ]);
+    ], { persistKnownHosts });
 
     sshArgs.push(`${username}@${hostname}`);
-    sshArgs.push('-t', 'tmux new-session -A -s SecureLink_Session 2>/dev/null || exec $SHELL -l');
+    const tmuxPrepare = `${tmuxSocketCommand()} has-session -t ${TMUX_SESSION_NAME} 2>/dev/null || ${tmuxSocketCommand()} new-session -d -s ${TMUX_SESSION_NAME}`;
+    const tmuxAttach = `${tmuxSocketCommand()} attach -t ${TMUX_SESSION_NAME}`;
+    sshArgs.push('-t', `${tmuxPrepare} && ${tmuxAttach} || exec $SHELL -l`);
 
     const child = execa('ssh', sshArgs, {
       stdio: 'inherit',
@@ -119,9 +122,9 @@ async function connectSSH(username, hostname, privateKeyPath) {
 /**
  * Perform an SCP file transfer through the Cloudflare tunnel.
  */
-async function chooseRemoteTransferPath(username, hostname, privateKeyPath, direction, sharedDropPath) {
+async function chooseRemoteTransferPath(username, hostname, privateKeyPath, direction, sharedDropPath, persistKnownHosts = true) {
   if (!sharedDropPath) {
-    return promptRemotePath(username, hostname, privateKeyPath, direction === 'upload' ? 'destination' : 'source');
+    return promptRemotePath(username, hostname, privateKeyPath, direction === 'upload' ? 'destination' : 'source', '~', { persistKnownHosts });
   }
 
   const { dropChoice } = await inquirer.prompt([{
@@ -145,7 +148,7 @@ async function chooseRemoteTransferPath(username, hostname, privateKeyPath, dire
 
   if (dropChoice === 'drop') return sharedDropPath;
   if (dropChoice === 'drop_browse') {
-    return promptRemotePath(username, hostname, privateKeyPath, 'source', sharedDropPath);
+    return promptRemotePath(username, hostname, privateKeyPath, 'source', sharedDropPath, { persistKnownHosts });
   }
   if (dropChoice === 'manual') {
     const { remotePath } = await inquirer.prompt([{
@@ -157,10 +160,10 @@ async function chooseRemoteTransferPath(username, hostname, privateKeyPath, dire
     return remotePath.trim();
   }
 
-  return promptRemotePath(username, hostname, privateKeyPath, direction === 'upload' ? 'destination' : 'source');
+  return promptRemotePath(username, hostname, privateKeyPath, direction === 'upload' ? 'destination' : 'source', '~', { persistKnownHosts });
 }
 
-async function performSCP(username, hostname, direction, privateKeyPath, sharedDropPath = null) {
+async function performSCP(username, hostname, direction, privateKeyPath, sharedDropPath = null, persistKnownHosts = true) {
   console.log('');
   console.log(chalk.bold(`  📦 SCP Transfer (${direction})`));
   console.log(chalk.dim('  ─────────────────────────────────'));
@@ -169,11 +172,11 @@ async function performSCP(username, hostname, direction, privateKeyPath, sharedD
   let remotePath;
 
   if (direction === 'upload') {
-    remotePath = await chooseRemoteTransferPath(username, hostname, privateKeyPath, direction, sharedDropPath);
+    remotePath = await chooseRemoteTransferPath(username, hostname, privateKeyPath, direction, sharedDropPath, persistKnownHosts);
     localPath = await promptLocalPath('client file/folder to upload');
   } else {
     localPath = await promptLocalPath('client destination');
-    remotePath = await chooseRemoteTransferPath(username, hostname, privateKeyPath, direction, sharedDropPath);
+    remotePath = await chooseRemoteTransferPath(username, hostname, privateKeyPath, direction, sharedDropPath, persistKnownHosts);
   }
 
   await showConnectionTrace('Local', 'Remote SCP');
@@ -184,7 +187,7 @@ async function performSCP(username, hostname, direction, privateKeyPath, sharedD
   const scpArgs = [
     '-r', // recursive just in case
     '-o', `ProxyCommand=${proxyCommand}`,
-    '-o', 'StrictHostKeyChecking=accept-new',
+    ...getKnownHostsOptions(persistKnownHosts),
     '-o', 'IdentitiesOnly=yes',
     ...getSshControlOptions(hostname)
   ];
@@ -230,13 +233,7 @@ async function performSCP(username, hostname, direction, privateKeyPath, sharedD
         console.log(chalk.dim('  🔍 Verifying remote SHA-256 checksum...'));
         try {
           const remoteChecksumPath = joinRemotePath(remotePath, path.basename(localPath));
-          const sshArgs = [
-            '-o', `ProxyCommand=${proxyCommand}`,
-            '-o', 'StrictHostKeyChecking=accept-new',
-            '-o', 'IdentitiesOnly=yes',
-            ...getSshControlOptions(hostname)
-          ];
-          if (privateKeyPath) sshArgs.push('-i', privateKeyPath, '-o', 'IdentityAgent=none');
+          const sshArgs = buildSshArgs(hostname, privateKeyPath, [], { persistKnownHosts });
           sshArgs.push(`${username}@${hostname}`, `shasum -a 256 ${quoteRemoteShell(remoteChecksumPath)} 2>/dev/null || sha256sum ${quoteRemoteShell(remoteChecksumPath)} 2>/dev/null || shasum -a 256 ${quoteRemoteShell(remotePath)} 2>/dev/null || sha256sum ${quoteRemoteShell(remotePath)}`);
 
           const { stdout } = await execa('ssh', sshArgs, { reject: false });
@@ -268,13 +265,13 @@ async function performSCP(username, hostname, direction, privateKeyPath, sharedD
   }
 }
 
-async function downloadSpecificRemotePath(username, hostname, privateKeyPath, remotePath, localPath) {
+async function downloadSpecificRemotePath(username, hostname, privateKeyPath, remotePath, localPath, persistKnownHosts = true) {
   await showConnectionTrace('Local', 'Remote SCP');
   const proxyCommand = `cloudflared access tcp --hostname ${hostname}`;
   const scpArgs = [
     '-r',
     '-o', `ProxyCommand=${proxyCommand}`,
-    '-o', 'StrictHostKeyChecking=accept-new',
+    ...getKnownHostsOptions(persistKnownHosts),
     '-o', 'IdentitiesOnly=yes',
     ...getSshControlOptions(hostname),
   ];
@@ -343,6 +340,7 @@ export async function startClientMode(options = {}) {
   let targetUid = null;
   let targetPassword = null;
   let targetUsername = null;
+  let persistKnownHosts = false;
 
   if (aliasKeys.length > 0) {
     const { useAlias } = await inquirer.prompt([
@@ -362,6 +360,7 @@ export async function startClientMode(options = {}) {
       targetUid = aliasData.uid;
       targetPassword = aliasData.password;
       targetUsername = aliasData.username;
+      persistKnownHosts = true;
       logSessionEvent('client_alias_selected', { alias: useAlias, uid: targetUid });
     }
   }
@@ -552,7 +551,7 @@ export async function startClientMode(options = {}) {
     await pushTelemetry(BROKER_URL, targetUid, targetPassword, username, 'one-time-download');
     logSessionEvent('client_one_time_download_start', { uid: targetUid, remotePath: payload.oneTimeSharePath });
 
-    const success = await downloadSpecificRemotePath(username, hostname, privateKeyPath, payload.oneTimeSharePath, localDest);
+    const success = await downloadSpecificRemotePath(username, hostname, privateKeyPath, payload.oneTimeSharePath, localDest, persistKnownHosts);
 
     if (success) {
       console.log(chalk.green('  ✅ One-time file transfer completed successfully!'));
@@ -596,6 +595,7 @@ export async function startClientMode(options = {}) {
       saveAlias(aliasName.trim(), { uid: targetUid, password: targetPassword, username });
       console.log(chalk.green(`  ✓ Saved as alias: ${chalk.bold(aliasName.trim())}\n`));
       logSessionEvent('client_alias_saved', { alias: aliasName.trim(), uid: targetUid });
+      persistKnownHosts = true;
     }
   }
 
@@ -620,11 +620,11 @@ export async function startClientMode(options = {}) {
   if (action === 'chat') {
     await handleClientChat(targetUid, targetPassword, payload.chatUrl);
   } else if (action === 'ssh') {
-    await connectSSH(username, hostname, privateKeyPath);
+    await connectSSH(username, hostname, privateKeyPath, persistKnownHosts);
   } else if (action === 'reverse') {
-    await performReverseForward(username, hostname, privateKeyPath);
+    await performReverseForward(username, hostname, privateKeyPath, persistKnownHosts);
   } else {
-    await performSCP(username, hostname, action, privateKeyPath, payload.sharedDropPath);
+    await performSCP(username, hostname, action, privateKeyPath, payload.sharedDropPath, persistKnownHosts);
   }
 
   console.log('');
@@ -638,7 +638,7 @@ export async function startClientMode(options = {}) {
   ]);
 
   if (reconnect) {
-    await handleSubsequentActions(username, hostname, privateKeyPath, targetUid, targetPassword, payload.sharedDropPath);
+    await handleSubsequentActions(username, hostname, privateKeyPath, targetUid, targetPassword, payload.sharedDropPath, persistKnownHosts);
   }
 
   logSessionEvent('client_session_exit');
@@ -650,7 +650,7 @@ export async function startClientMode(options = {}) {
  * params: { brokerUrl, uid, password, username, direction, localPath, remotePath }
  */
 export async function performSCPNonInteractive(params = {}) {
-  const { brokerUrl, uid, password, username, direction, localPath, remotePath } = params;
+  const { brokerUrl, uid, password, username, direction, localPath, remotePath, persistKnownHosts = true } = params;
   if (!brokerUrl || !uid || !password) throw new Error('Missing broker connection info');
 
   const payload = await resolveUID(brokerUrl, uid, password);
@@ -662,7 +662,7 @@ export async function performSCPNonInteractive(params = {}) {
 
   // Build scp args similar to performSCP
   const proxyCommand = `cloudflared access tcp --hostname ${hostname}`;
-  const scpArgs = ['-r', '-o', `ProxyCommand=${proxyCommand}`, '-o', 'StrictHostKeyChecking=accept-new', '-o', 'IdentitiesOnly=yes', ...getSshControlOptions(hostname)];
+  const scpArgs = ['-r', '-o', `ProxyCommand=${proxyCommand}`, ...getKnownHostsOptions(persistKnownHosts), '-o', 'IdentitiesOnly=yes', ...getSshControlOptions(hostname)];
   if (privateKeyPath) scpArgs.push('-i', privateKeyPath, '-o', 'IdentityAgent=none');
 
   const remoteSpec = `${username}@${hostname}:${formatScpRemotePath(remotePath)}`;
@@ -707,7 +707,7 @@ async function handleClientChat(uid, password, cachedChatUrl) {
   }
 }
 
-async function handleSubsequentActions(username, hostname, privateKeyPath, targetUid, targetPassword, sharedDropPath = null) {
+async function handleSubsequentActions(username, hostname, privateKeyPath, targetUid, targetPassword, sharedDropPath = null, persistKnownHosts = true) {
   const { action } = await inquirer.prompt([
     {
       type: 'list',
@@ -732,11 +732,11 @@ async function handleSubsequentActions(username, hostname, privateKeyPath, targe
   if (action === 'chat') {
     await handleClientChat(targetUid, targetPassword, null);
   } else if (action === 'ssh') {
-    await connectSSH(username, hostname, privateKeyPath);
+    await connectSSH(username, hostname, privateKeyPath, persistKnownHosts);
   } else if (action === 'reverse') {
-    await performReverseForward(username, hostname, privateKeyPath);
+    await performReverseForward(username, hostname, privateKeyPath, persistKnownHosts);
   } else {
-    await performSCP(username, hostname, action, privateKeyPath, sharedDropPath);
+    await performSCP(username, hostname, action, privateKeyPath, sharedDropPath, persistKnownHosts);
   }
 
   const { reconnect } = await inquirer.prompt([
@@ -749,11 +749,11 @@ async function handleSubsequentActions(username, hostname, privateKeyPath, targe
   ]);
 
   if (reconnect) {
-    await handleSubsequentActions(username, hostname, privateKeyPath, targetUid, targetPassword, sharedDropPath);
+    await handleSubsequentActions(username, hostname, privateKeyPath, targetUid, targetPassword, sharedDropPath, persistKnownHosts);
   }
 }
 
-async function performReverseForward(username, hostname, privateKeyPath) {
+async function performReverseForward(username, hostname, privateKeyPath, persistKnownHosts = true) {
   console.log('');
   console.log(chalk.bold.cyan('  🔄 Reverse Port Forwarding'));
   console.log(chalk.dim('  ──────────────────────────────────────'));
@@ -782,7 +782,7 @@ async function performReverseForward(username, hostname, privateKeyPath) {
     '-N',
     '-R', portMap,
     '-o', 'ExitOnForwardFailure=yes',
-  ]);
+  ], { persistKnownHosts });
   sshArgs.push(`${username}@${hostname}`);
 
   console.log('');

package/src/modes/host.js

@@ -29,6 +29,7 @@ import { startChatServer, openLocalChatUI } from '../lib/chat.js';
 import { spawnTunnelSupervised } from '../lib/tunnel.js';
 import { decideApprovalRequest, fetchApprovalRequests, pingBroker, registerWithBroker, revokeUID } from '../lib/broker.js';
 import { cleanupSessionLog, getSessionLogPath, initSessionLog, logSessionEvent, recordEvent } from '../lib/session-log.js';
+import { TMUX_SESSION_NAME, tmuxSocketArgs } from '../lib/tmux.js';
 
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
 let BROKER_URL = process.env.BROKER_URL || 'https://ipingyou.onrender.com';
@@ -193,6 +194,23 @@ async function prepareSharedDropFolder(uid) {
   return dropPath;
 }
 
+async function cleanupSharedDropFolder(dropPath, uid) {
+  if (!dropPath) return;
+  const expectedPath = path.join(os.homedir(), `ipingyou-dropbox-${uid}`);
+  if (path.resolve(dropPath) !== path.resolve(expectedPath)) {
+    console.log(chalk.yellow('     Skipping drop folder cleanup (unexpected path).'));
+    return;
+  }
+  try {
+    const stat = await fs.promises.lstat(dropPath).catch(() => null);
+    if (!stat || !stat.isDirectory() || stat.isSymbolicLink()) return;
+    console.log(chalk.dim('     Removing shared drop folder...'));
+    await fs.promises.rm(dropPath, { recursive: true, force: true });
+  } catch (err) {
+    console.log(chalk.yellow(`     Could not remove drop folder: ${err.message}`));
+  }
+}
+
 function showMacPrivacyPreflight(sharedDropPath) {
   if (process.platform !== 'darwin') return;
 
@@ -257,12 +275,37 @@ async function startLocalHostDashboard(uid, password, serviceConfig, sessionStat
       } catch { }
     };
 
-    const iv = setInterval(push, 3000);
+    const iv = setInterval(push, 5000);
     req.on('close', () => { clearInterval(iv); closed = true; });
     // send initial payload
     await push();
   });
 
+  app.get('/api/clients', async (_req, res) => {
+    try {
+      const brokerRes = await fetch(`${BROKER_URL}/clients/${uid}`, {
+        headers: sessionState.hostToken ? { 'x-host-token': sessionState.hostToken } : {}
+      });
+      if (!brokerRes.ok) {
+        const data = await brokerRes.json().catch(() => ({}));
+        return res.status(brokerRes.status).json({ error: data.error || 'Failed to fetch clients' });
+      }
+      const data = await brokerRes.json();
+      const clients = (data.clients || []).map((clientBlob) => {
+        try {
+          const decrypted = decrypt(clientBlob.iv, clientBlob.ciphertext, password, clientBlob.salt);
+          const t = JSON.parse(decrypted);
+          return { ...t, seenAt: clientBlob.seenAt || null };
+        } catch {
+          return { error: 'decrypt_failed', seenAt: clientBlob.seenAt || null };
+        }
+      });
+      res.json({ clients });
+    } catch (err) {
+      res.status(500).json({ error: err.message });
+    }
+  });
+
   // CSRF Protection Middleware for all mutating endpoints
   app.use((req, res, next) => {
     if (req.method !== 'POST') return next();
@@ -387,6 +430,16 @@ function showToast(msg) {
   t.classList.add('show');
   setTimeout(() => t.classList.remove('show'), 2500);
 }
+ 
+function escapeHtml(value) {
+ return String(value || '').replace(/[&<>"']/g, (m) => ({
+   '&': '&amp;',
+   '<': '&lt;',
+   '>': '&gt;',
+   '"': '&quot;',
+   "'": '&#39;',
+ })[m]);
+}
 
 function updateUptime() {
   const diff = Math.floor((Date.now() - startedAt.getTime()) / 1000);
@@ -473,14 +526,47 @@ async function revokeSession() {
 // Poll client telemetry (separate from SSE for simplicity)
 async function pollClients() {
   try {
-    const res = await fetch('/api/status');
+    const res = await fetch('/api/clients');
     if (!res.ok) return;
-    // Client data is fetched from broker by SSE push. Let's also add a client endpoint.
+    const data = await res.json();
+    renderClients(data.clients || []);
   } catch {}
 }
+ 
+function renderClients(clients) {
+  const container = document.getElementById('clients');
+  if (!clients || clients.length === 0) {
+    container.innerHTML = '<p class="empty">No clients connected yet</p>';
+    document.getElementById('client-count').textContent = '';
+    return;
+  }
+ 
+  document.getElementById('client-count').textContent = '(' + clients.length + ' connected)';
+  let html = '';
+  clients.forEach((c, idx) => {
+    if (c.error) {
+      html += '<div class="client-card"><strong>Client #' + (idx + 1) + '</strong> — payload decryption failed</div>';
+      return;
+    }
+    const when = c.time || (c.seenAt ? new Date(c.seenAt).toLocaleTimeString() : 'Unknown');
+    html += '<div class="client-card">'
+      + '<strong>' + escapeHtml(c.username || 'Unknown') + '</strong>'
+      + ' — ' + escapeHtml(c.action || 'connected') + '<br>'
+      + '<span class="meta">IP: ' + escapeHtml(c.ip || 'Unknown') + '</span><br>'
+      + '<span class="meta">OS: ' + escapeHtml(c.os || 'Unknown') + '</span><br>'
+      + '<span class="meta">CPU: ' + escapeHtml(c.cpu || 'Unknown') + '</span><br>'
+      + '<span class="meta">RAM: ' + escapeHtml(c.ram || 'Unknown') + '</span><br>'
+      + '<span class="meta">Time: ' + escapeHtml(when) + '</span>'
+      + '</div>';
+  });
+  container.innerHTML = html;
+}
+ 
+setInterval(pollClients, 5000);
+pollClients();
 </script>
 </body></html>`);
-  });
+ });
 
   return new Promise((resolve) => {
     const server = app.listen(0, '127.0.0.1', async () => {
@@ -725,7 +811,7 @@ async function hostDashboard(uid, password, serviceConfig, tunnelProcess, sessio
 
           try {
             await execaCommand('tmux -V', { reject: true });
-            const sessionCheck = await execa('tmux', ['has-session', '-t', 'SecureLink_Session'], { reject: false });
+            const sessionCheck = await execa('tmux', [...tmuxSocketArgs(), 'has-session', '-t', TMUX_SESSION_NAME], { reject: false });
             if (sessionCheck.exitCode !== 0) {
               console.log(chalk.yellow('  ⚠️  No mirrored terminal session is active yet.'));
               console.log(chalk.dim('     A client must choose "Connect via SSH" first. SCP-only clients do not create a tmux session.'));
@@ -733,7 +819,7 @@ async function hostDashboard(uid, password, serviceConfig, tunnelProcess, sessio
               logSessionEvent('host_mirror_missing_session', {}, 'warn');
               return waitForAction();
             }
-            await execaCommand('tmux attach -t SecureLink_Session -r', { stdio: 'inherit' });
+            await execa('tmux', [...tmuxSocketArgs(), 'attach', '-t', TMUX_SESSION_NAME, '-r'], { stdio: 'inherit', reject: false });
             logSessionEvent('host_mirror_attached');
           } catch (err) {
             console.log(chalk.yellow('  ⚠️  Could not attach to tmux.'));
@@ -798,7 +884,7 @@ async function hostDashboard(uid, password, serviceConfig, tunnelProcess, sessio
               await execaCommand('powershell -NoProfile -Command "Get-CimInstance Win32_Process -Filter \\"name = \'sshd.exe\'\\" | Where-Object { $_.CommandLine -match \'sshd:.*@\' } | ForEach-Object { Stop-Process -Id $_.ProcessId -Force }"', { reject: false });
             } else {
               await execaCommand("pkill -f 'sshd:.*@'", { shell: true, reject: false });
-              await execaCommand('tmux kill-session -t SecureLink_Session', { reject: false });
+              await execa('tmux', [...tmuxSocketArgs(), 'kill-session', '-t', TMUX_SESSION_NAME], { reject: false });
             }
             spinner.succeed('All client SSH sessions terminated');
             logSessionEvent('host_sessions_terminated');
@@ -953,6 +1039,7 @@ export async function startHostMode() {
       serviceConfig.sharedDropPath = await prepareSharedDropFolder(uid);
       console.log(chalk.green(`  ✓ Shared drop folder ready: ${serviceConfig.sharedDropPath}`));
       showMacPrivacyPreflight(serviceConfig.sharedDropPath);
+      addCleanupHook(() => cleanupSharedDropFolder(serviceConfig.sharedDropPath, uid));
     } catch (err) {
       console.log(chalk.yellow(`  ⚠️  Could not prepare shared drop folder: ${err.message}`));
     }

package/src/server.js

@@ -68,7 +68,7 @@ app.use((req, res, next) => {
 // Trust proxy is required if the server is behind a reverse proxy (like Render, Heroku, Cloudflare)
 app.set('trust proxy', 1);
 
-// General rate limiter for all requests (100 reqs per 15 minutes per IP)
+// General rate limiter for public requests (100 reqs per 15 minutes per IP)
 const generalLimiter = rateLimit({
   windowMs: 15 * 60 * 1000,
   max: 100,
@@ -76,7 +76,6 @@ const generalLimiter = rateLimit({
   standardHeaders: true,
   legacyHeaders: false,
 });
-app.use(generalLimiter);
 
 // Stricter rate limiter for registration/revocation endpoints (e.g. 20 reqs per 15 mins)
 const strictLimiter = rateLimit({
@@ -87,6 +86,15 @@ const strictLimiter = rateLimit({
   legacyHeaders: false,
 });
 
+// Higher limiter for host-authenticated endpoints (dashboard polling, approvals, telemetry views)
+const hostLimiter = rateLimit({
+  windowMs: 15 * 60 * 1000,
+  max: 600,
+  message: { error: 'Too many host requests. Please try again later.' },
+  standardHeaders: true,
+  legacyHeaders: false,
+});
+
 // ─── Active Defense & IP Blacklisting (IDS) ──────────────────
 const ipViolations = new Map(); // ip → violation_count
 const blacklistedIPs = new Set();
@@ -173,7 +181,7 @@ setInterval(pruneExpired, 5 * 60 * 1000);
 // ─── Routes ──────────────────────────────────────────────────
 
 // Health
-app.get('/health', (_req, res) => {
+app.get('/health', generalLimiter, (_req, res) => {
   res.json({ status: 'ok', uptime: process.uptime(), activeUIDs: store.size });
 });
 
@@ -253,7 +261,7 @@ app.post('/register', strictLimiter, (req, res) => {
  * Returns the ENCRYPTED blob { iv, ciphertext } for a given UID.
  * The client CLI decrypts it locally — the broker never sees plaintext.
  */
-app.get('/resolve/:uid', (req, res) => {
+app.get('/resolve/:uid', generalLimiter, (req, res) => {
   try {
     const { uid } = req.params;
     if (!isSafeParam(uid)) {
@@ -355,7 +363,7 @@ app.post('/approval-request/:uid', generalLimiter, (req, res) => {
 });
 
 // HOST-ONLY: List approval requests (requires host token)
-app.get('/approval-requests/:uid', generalLimiter, (req, res) => {
+app.get('/approval-requests/:uid', hostLimiter, (req, res) => {
   if (!isSafeParam(req.params.uid)) return res.status(400).json({ error: 'Invalid UID' });
   const entry = store.get(req.params.uid);
   if (!entry) return res.status(404).json({ error: 'UID not found' });
@@ -434,7 +442,7 @@ app.post('/client-info/:uid', generalLimiter, (req, res) => {
  * Host retrieves all securely encrypted client telemetry blobs.
  */
 // HOST-ONLY: View client telemetry (requires host token)
-app.get('/clients/:uid', generalLimiter, (req, res) => {
+app.get('/clients/:uid', hostLimiter, (req, res) => {
   try {
     const { uid } = req.params;
     if (!isSafeParam(uid)) return res.status(400).json({ error: 'Invalid UID format' });