rds_ssm_connect 1.7.14 → 1.7.16

package/.github/workflows/update-homebrew.yml

@@ -0,0 +1,186 @@
+name: Update Homebrew Tap
+
+on:
+  release:
+    types: [published]
+
+jobs:
+  update-tap:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Get version
+        id: version
+        run: echo "VERSION=${GITHUB_REF_NAME#v}" >> $GITHUB_OUTPUT
+
+      - name: Download release assets
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          VERSION=${{ steps.version.outputs.VERSION }}
+          gh release download "v${VERSION}" -R yarka-guru/connection_app \
+            -p "RDS.SSM.Connect_${VERSION}_aarch64.dmg" \
+            -p "RDS.SSM.Connect_${VERSION}_x64.dmg" \
+            -p "RDS.SSM.Connect_${VERSION}_amd64.deb" \
+            -p "RDS.SSM.Connect_${VERSION}_arm64.deb"
+
+      - name: Compute SHA256 hashes
+        id: hashes
+        run: |
+          VERSION=${{ steps.version.outputs.VERSION }}
+          echo "ARM_DMG_SHA=$(sha256sum RDS.SSM.Connect_${VERSION}_aarch64.dmg | cut -d' ' -f1)" >> $GITHUB_OUTPUT
+          echo "X64_DMG_SHA=$(sha256sum RDS.SSM.Connect_${VERSION}_x64.dmg | cut -d' ' -f1)" >> $GITHUB_OUTPUT
+          echo "AMD64_DEB_SHA=$(sha256sum RDS.SSM.Connect_${VERSION}_amd64.deb | cut -d' ' -f1)" >> $GITHUB_OUTPUT
+          echo "ARM64_DEB_SHA=$(sha256sum RDS.SSM.Connect_${VERSION}_arm64.deb | cut -d' ' -f1)" >> $GITHUB_OUTPUT
+
+      - name: Checkout Homebrew tap
+        uses: actions/checkout@v4
+        with:
+          repository: yarka-guru/homebrew-tap
+          token: ${{ secrets.HOMEBREW_TAP_TOKEN }}
+          path: homebrew-tap
+
+      - name: Update Cask formula
+        run: |
+          VERSION=${{ steps.version.outputs.VERSION }}
+          cat > homebrew-tap/Casks/rds-ssm-connect.rb << CASK
+          cask "rds-ssm-connect" do
+            version "${VERSION}"
+
+            on_arm do
+              sha256 "${{ steps.hashes.outputs.ARM_DMG_SHA }}"
+              url "https://github.com/yarka-guru/connection_app/releases/download/v#{version}/RDS.SSM.Connect_#{version}_aarch64.dmg"
+            end
+
+            on_intel do
+              sha256 "${{ steps.hashes.outputs.X64_DMG_SHA }}"
+              url "https://github.com/yarka-guru/connection_app/releases/download/v#{version}/RDS.SSM.Connect_#{version}_x64.dmg"
+            end
+
+            name "RDS SSM Connect"
+            desc "Secure database tunneling via AWS SSM"
+            homepage "https://github.com/yarka-guru/connection_app"
+
+            depends_on macos: ">= :monterey"
+            depends_on formula: "aws-vault"
+            depends_on formula: "awscli"
+
+            app "RDS SSM Connect.app"
+
+            caveats <<~EOS
+              You also need the AWS Session Manager Plugin:
+                brew install --cask session-manager-plugin
+
+              Ensure your AWS profiles are configured in ~/.aws/config
+            EOS
+
+            zap trash: [
+              "~/Library/Application Support/com.rds-ssm-connect.desktop",
+              "~/Library/Caches/com.rds-ssm-connect.desktop",
+            ]
+          end
+          CASK
+
+      - name: Update Linux formula
+        run: |
+          VERSION=${{ steps.version.outputs.VERSION }}
+          cat > homebrew-tap/Formula/rds-ssm-connect.rb << FORMULA
+          class RdsSsmConnect < Formula
+            desc "Secure database tunneling via AWS SSM"
+            homepage "https://github.com/yarka-guru/connection_app"
+            version "${VERSION}"
+            license "MIT"
+
+            on_linux do
+              on_intel do
+                url "https://github.com/yarka-guru/connection_app/releases/download/v#{version}/RDS.SSM.Connect_#{version}_amd64.deb"
+                sha256 "${{ steps.hashes.outputs.AMD64_DEB_SHA }}"
+              end
+              on_arm do
+                url "https://github.com/yarka-guru/connection_app/releases/download/v#{version}/RDS.SSM.Connect_#{version}_arm64.deb"
+                sha256 "${{ steps.hashes.outputs.ARM64_DEB_SHA }}"
+              end
+            end
+
+            depends_on "awscli"
+            depends_on "aws-vault"
+
+            def install
+              system "ar", "x", cached_download
+              mkdir_p "extract"
+              system "tar", "xf", Dir["data.tar.*"].first, "-C", "extract"
+
+              bin.install Dir["extract/usr/bin/*"]
+              share.install Dir["extract/usr/share/*"] if Dir.exist?("extract/usr/share")
+            end
+
+            def caveats
+              <<~EOS
+                You also need the AWS Session Manager Plugin:
+                  https://docs.aws.amazon.com/systems-manager/latest/userguide/session-manager-working-with-install-plugin.html
+
+                Ensure your AWS profiles are configured in ~/.aws/config
+
+                On macOS, install the desktop app instead:
+                  brew install --cask rds-ssm-connect
+              EOS
+            end
+          end
+          FORMULA
+
+      - name: Update README
+        run: |
+          VERSION=${{ steps.version.outputs.VERSION }}
+          cat > homebrew-tap/README.md << 'README'
+          # Homebrew Tap for RDS SSM Connect
+
+          Secure database tunneling via AWS SSM.
+
+          ## Installation
+
+          ### macOS (Desktop App)
+
+          ```bash
+          brew tap yarka-guru/tap
+          brew install --cask rds-ssm-connect
+          ```
+
+          ### Linux (x86_64 / ARM64)
+
+          ```bash
+          brew tap yarka-guru/tap
+          brew install rds-ssm-connect
+          ```
+
+          ## Direct Downloads
+
+          Download installers directly from [GitHub Releases](https://github.com/yarka-guru/connection_app/releases/latest):
+
+          | Platform | Format |
+          |----------|--------|
+          | macOS (Apple Silicon) | `.dmg` |
+          | macOS (Intel) | `.dmg` |
+          | Linux (x86_64) | `.deb`, `.rpm`, `.AppImage` |
+          | Linux (ARM64) | `.deb`, `.AppImage` |
+          | Windows | `.exe` (NSIS), `.msi` |
+
+          ## Updating
+
+          ```bash
+          brew update
+          brew upgrade --cask rds-ssm-connect  # macOS
+          brew upgrade rds-ssm-connect          # Linux
+          ```
+          README
+
+      - name: Commit and push
+        working-directory: homebrew-tap
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+          git add -A
+          if git diff --cached --quiet; then
+            echo "No changes to commit"
+          else
+            git commit -m "Update to v${{ steps.version.outputs.VERSION }}"
+            git push
+          fi

package/connect.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { exec } from 'node:child_process'
+import { exec, spawn, spawnSync } from 'node:child_process'
 import { EventEmitter } from 'node:events'
 import fs from 'node:fs/promises'
 import net from 'node:net'
@@ -14,7 +14,7 @@ import {
 } from './configLoader.js'
 
 // Package info for version checking
-const packageJson = { name: 'rds_ssm_connect', version: '1.7.14' }
+const packageJson = { name: 'rds_ssm_connect', version: '1.7.15' }
 
 const execAsync = promisify(exec)
 
@@ -83,20 +83,63 @@ async function checkForUpdates() {
 // Store active child processes for cleanup
 let activeChildProcesses = []
 
+// Recursively collect all descendant PIDs of a process via pgrep.
+function getDescendantPids(pid) {
+  const descendants = []
+  try {
+    const { stdout } = spawnSync('pgrep', ['-P', String(pid)], {
+      encoding: 'utf-8',
+      timeout: 3000,
+    })
+    if (stdout) {
+      const children = stdout.trim().split('\n').filter(Boolean).map(Number)
+      for (const childPid of children) {
+        descendants.push(childPid, ...getDescendantPids(childPid))
+      }
+    }
+  } catch (_err) {
+    // pgrep not available or timed out
+  }
+  return descendants
+}
+
+// Kill entire process tree: shell → aws-vault → aws → session-manager-plugin.
+// Uses three strategies because descendants may escape to different process
+// groups (aws-vault / AWS CLI behavior on macOS).
+function killProcessTree(child) {
+  if (!child || !child.pid) return
+  const rootPid = child.pid
+
+  // Walk the tree to find every descendant PID
+  const descendants = getDescendantPids(rootPid)
+  const allPids = [rootPid, ...descendants]
+
+  // Strategy 1: Process group kill (fast, atomic — works when all share PGID)
+  try { process.kill(-rootPid, 'SIGTERM') } catch (_err) {}
+
+  // Strategy 2: Individual SIGTERM (handles descendants in different groups)
+  for (const pid of allPids) {
+    try { process.kill(pid, 'SIGTERM') } catch (_err) {}
+  }
+
+  // Strategy 3: SIGKILL survivors (cannot be caught or ignored)
+  for (const pid of allPids) {
+    try { process.kill(pid, 'SIGKILL') } catch (_err) {}
+  }
+}
+
 // Handle graceful shutdown
 function setupProcessCleanup() {
-  const cleanup = () => {
+  const killAll = () => {
     activeChildProcesses.forEach((child) => {
-      if (child && !child.killed) {
-        child.kill('SIGTERM')
-      }
+      killProcessTree(child)
     })
-    process.exit(0)
+    activeChildProcesses = []
   }
 
-  process.on('SIGINT', cleanup)
-  process.on('SIGTERM', cleanup)
-  process.on('exit', cleanup)
+  process.on('SIGINT', () => { killAll(); process.exit(0) })
+  process.on('SIGTERM', () => { killAll(); process.exit(0) })
+  process.on('exit', killAll)
 }
 
 async function readAwsConfig() {
@@ -251,6 +294,7 @@ async function handleTargetNotConnectedError(
   region,
   retryCount,
   maxRetries,
+  onChild,
 ) {
   // Terminate the disconnected instance
   await terminateBastionInstance(ENV, instanceId, region)
@@ -270,6 +314,7 @@ async function handleTargetNotConnectedError(
     region,
     retryCount + 1,
     maxRetries,
+    onChild,
   )
 }
 
@@ -282,7 +327,11 @@ function executePortForwardingCommand(
   region,
 ) {
   const portForwardingCommand = `aws-vault exec ${ENV} -- aws ssm start-session --region ${region} --target ${instanceId} --document-name AWS-StartPortForwardingSessionToRemoteHost --parameters "host=${rdsEndpoint},portNumber='${remotePort}',localPortNumber='${portNumber}'" --cli-connect-timeout 0`
-  const child = exec(portForwardingCommand)
+  const child = spawn(portForwardingCommand, {
+    shell: true,
+    detached: true,
+    stdio: ['ignore', 'pipe', 'pipe'],
+  })
 
   // Register child process for cleanup
   activeChildProcesses.push(child)
@@ -299,6 +348,7 @@ async function startPortForwardingWithConfig(
   region,
   retryCount = 0,
   maxRetries = RETRY_CONFIG.PORT_FORWARDING_MAX_RETRIES,
+  onChild,
 ) {
   return new Promise((resolve, reject) => {
     const child = executePortForwardingCommand(
@@ -309,6 +359,11 @@ async function startPortForwardingWithConfig(
       remotePort,
       region,
     )
+    // Notify caller of the new child (used for per-connection tracking).
+    // If the connection was already disconnected, the callback kills this
+    // child immediately so it doesn't linger as an orphan.
+    if (onChild) onChild(child)
+
     const sessionState = monitorPortForwardingSession(child)
 
     child.on('close', async (code) => {
@@ -331,6 +386,7 @@ async function startPortForwardingWithConfig(
             region,
             retryCount,
             maxRetries,
+            onChild,
           )
           resolve()
         } else if (code !== 0) {
@@ -543,6 +599,18 @@ async function connect(projectKey, profile, options = {}) {
 
   let manualDisconnect = false
   let stopKeepalive = null
+  let currentChild = null // per-connection child tracking
+
+  // Called whenever a new child process is spawned for this connection.
+  // If disconnect() was already called, kills the child immediately so
+  // it doesn't linger as an orphan during retry chains.
+  const onChild = (child) => {
+    currentChild = child
+    if (manualDisconnect) {
+      killProcessTree(child)
+      activeChildProcesses = activeChildProcesses.filter((p) => p !== child)
+    }
+  }
 
   // Emit status updates
   const emit = (event, data) => {
@@ -600,6 +668,7 @@ async function connect(projectKey, profile, options = {}) {
           region,
           0,
           RETRY_CONFIG.PORT_FORWARDING_MAX_RETRIES,
+          onChild,
         )
 
         // Session ended — clean up keepalive
@@ -672,13 +741,12 @@ async function connect(projectKey, profile, options = {}) {
     disconnect: () => {
       manualDisconnect = true
       stopKeepalive?.()
-      // Kill all active child processes
-      activeChildProcesses.forEach((child) => {
-        if (child && !child.killed) {
-          child.kill('SIGTERM')
-        }
-      })
-      activeChildProcesses = []
+      // Kill only THIS connection's child process group
+      if (currentChild) {
+        killProcessTree(currentChild)
+        activeChildProcesses = activeChildProcesses.filter((p) => p !== currentChild)
+        currentChild = null
+      }
     },
     waitForClose: () => portForwardingPromise,
   }

package/gui-adapter.js

@@ -253,19 +253,19 @@ async function handleCommand(command) {
   }
 }
 
-// Handle process signals for cleanup
-function setupCleanup() {
-  const cleanup = () => {
-    for (const [_connId, connection] of activeConnections) {
-      connection.disconnect()
-    }
-    activeConnections.clear()
-    process.exit(0)
+// Disconnect all active connections (idempotent — safe to call multiple times)
+function disconnectAll() {
+  for (const [_connId, connection] of activeConnections) {
+    connection.disconnect()
   }
+  activeConnections.clear()
+}
 
-  process.on('SIGINT', cleanup)
-  process.on('SIGTERM', cleanup)
-  process.on('exit', cleanup)
+// Handle process signals for cleanup
+function setupCleanup() {
+  process.on('SIGINT', () => { disconnectAll(); process.exit(0) })
+  process.on('SIGTERM', () => { disconnectAll(); process.exit(0) })
+  process.on('exit', disconnectAll)
 }
 
 // Main entry point
@@ -294,10 +294,7 @@ async function main() {
   })
 
   rl.on('close', () => {
-    for (const [_connId, connection] of activeConnections) {
-      connection.disconnect()
-    }
-    activeConnections.clear()
+    disconnectAll()
     process.exit(0)
   })
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rds_ssm_connect",
-  "version": "1.7.14",
+  "version": "1.7.16",
   "type": "module",
   "repository": {
     "type": "git",

package/src/App.svelte

@@ -57,6 +57,15 @@ function handleGlobalKeydown(e) {
     e.preventDefault()
     showSettings = !showSettings
   }
+  // Ctrl+Q (Linux) / Cmd+Q fallback → quit app
+  if ((e.metaKey || e.ctrlKey) && e.key === 'q') {
+    e.preventDefault()
+    if (activeConnections.length > 0) {
+      showCloseConfirm = true
+    } else {
+      invoke?.('quit_app').catch(() => appWindow?.destroy())
+    }
+  }
 }
 
 onMount(() => {
@@ -103,11 +112,13 @@ async function initApp() {
     return
   }
 
-  // Intercept window close — prompt if there are active connections
+  // Intercept window close — prompt if active connections, otherwise quit cleanly
   unlistenCloseRequested = await appWindow.onCloseRequested(async (event) => {
+    event.preventDefault()
     if (activeConnections.length > 0) {
-      event.preventDefault()
       showCloseConfirm = true
+    } else {
+      try { await invoke('quit_app') } catch (_err) { appWindow?.destroy() }
     }
   })
 
@@ -182,7 +193,12 @@ async function confirmClose() {
   } catch (_err) {
     // Best-effort disconnect before closing
   }
-  await invoke('quit_app')
+  try {
+    await invoke('quit_app')
+  } catch (_err) {
+    // If quit_app fails, force close via window API
+    appWindow?.close()
+  }
 }
 
 function cancelClose() {
@@ -428,8 +444,10 @@ async function handleInstallUpdate() {
 
   try {
     await invoke('install_update')
-    statusMessage = 'Update installed! Restart to apply.'
-    // The app will restart automatically after install
+    // App should auto-restart and never reach here, but just in case:
+    isUpdating = false
+    showUpdateBanner = false
+    statusMessage = 'Update installed successfully.'
   } catch (err) {
     errorMessage = `Update failed: ${err}`
     isUpdating = false

package/src-tauri/Cargo.lock

@@ -149,7 +149,7 @@ checksum = "3b43422f69d8ff38f95f1b2bb76517c91589a924d1559a0e935d7c8ce0274c11"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.114",
+ "syn 2.0.115",
 ]
 
 [[package]]
@@ -184,7 +184,7 @@ checksum = "9035ad2d096bed7955a320ee7e2230574d28fd3c3a0f186cbea1ff3c7eed5dbb"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.114",
+ "syn 2.0.115",
 ]
 
 [[package]]
@@ -392,7 +392,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "374b7c592d9c00c1f4972ea58390ac6b18cbb6ab79011f3bdc90a0b82ca06b77"
 dependencies = [
  "serde",
- "toml 0.9.11+spec-1.1.0",
+ "toml 0.9.12+spec-1.1.0",
 ]
 
 [[package]]
@@ -602,7 +602,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "13b588ba4ac1a99f7f2964d24b3d896ddc6bf847ee3855dbd4366f058cfcd331"
 dependencies = [
  "quote",
- "syn 2.0.114",
+ "syn 2.0.115",
 ]
 
 [[package]]
@@ -612,7 +612,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "32a2785755761f3ddc1492979ce1e48d2c00d09311c39e4466429188f3dd6501"
 dependencies = [
  "quote",
- "syn 2.0.114",
+ "syn 2.0.115",
 ]
 
 [[package]]
@@ -636,7 +636,7 @@ dependencies = [
  "proc-macro2",
  "quote",
  "strsim",
- "syn 2.0.114",
+ "syn 2.0.115",
 ]
 
 [[package]]
@@ -647,14 +647,14 @@ checksum = "d38308df82d1080de0afee5d069fa14b0326a88c14f15c5ccda35b4a6c414c81"
 dependencies = [
  "darling_core",
  "quote",
- "syn 2.0.114",
+ "syn 2.0.115",
 ]
 
 [[package]]
 name = "deranged"
-version = "0.5.5"
+version = "0.5.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ececcb659e7ba858fb4f10388c250a7252eb0a27373f1a72b8748afdd248e587"
+checksum = "cc3dc5ad92c2e2d1c193bbbbdf2ea477cb81331de4f3103f267ca18368b988c4"
 dependencies = [
  "powerfmt",
  "serde_core",
@@ -668,7 +668,7 @@ checksum = "1e567bd82dcff979e4b03460c307b3cdc9e96fde3d73bed1496d2bc75d9dd62a"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.114",
+ "syn 2.0.115",
 ]
 
 [[package]]
@@ -681,7 +681,7 @@ dependencies = [
  "proc-macro2",
  "quote",
  "rustc_version",
- "syn 2.0.114",
+ "syn 2.0.115",
 ]
 
 [[package]]
@@ -739,7 +739,7 @@ checksum = "97369cbbc041bc366949bc74d34658d6cda5621039731c6310521892a3a20ae0"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.114",
+ "syn 2.0.115",
 ]
 
 [[package]]
@@ -762,7 +762,7 @@ checksum = "0fbbb781877580993a8707ec48672673ec7b81eeba04cfd2310bd28c08e47c8f"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.114",
+ "syn 2.0.115",
 ]
 
 [[package]]
@@ -810,7 +810,7 @@ dependencies = [
  "cc",
  "memchr",
  "rustc_version",
- "toml 0.9.11+spec-1.1.0",
+ "toml 0.9.12+spec-1.1.0",
  "vswhom",
  "winreg",
 ]
@@ -854,7 +854,7 @@ checksum = "67c78a4d8fdf9953a5c9d458f9efe940fd97a0cab0941c075a813ac594733827"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.114",
+ "syn 2.0.115",
 ]
 
 [[package]]
@@ -996,7 +996,7 @@ checksum = "1a5c6c585bc94aaf2c7b51dd4c2ba22680844aba4c687be581871a6f518c5742"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.114",
+ "syn 2.0.115",
 ]
 
 [[package]]
@@ -1083,7 +1083,7 @@ checksum = "162ee34ebcb7c64a8abebc059ce0fee27c2262618d7b60ed8faf72fef13c3650"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.114",
+ "syn 2.0.115",
 ]
 
 [[package]]
@@ -1346,7 +1346,7 @@ dependencies = [
  "proc-macro-error",
  "proc-macro2",
  "quote",
- "syn 2.0.114",
+ "syn 2.0.115",
 ]
 
 [[package]]
@@ -1425,7 +1425,7 @@ dependencies = [
  "proc-macro-error",
  "proc-macro2",
  "quote",
- "syn 2.0.114",
+ "syn 2.0.115",
 ]
 
 [[package]]
@@ -2003,7 +2003,7 @@ checksum = "3d0b95e02c851351f877147b7deea7b1afb1df71b63aa5f8270716e0c5720616"
 dependencies = [
  "bitflags 2.10.0",
  "libc",
- "redox_syscall 0.7.0",
+ "redox_syscall 0.7.1",
 ]
 
 [[package]]
@@ -2061,7 +2061,7 @@ checksum = "88a9689d8d44bf9964484516275f5cd4c9b59457a6940c1d5d0ecbb94510a36b"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.114",
+ "syn 2.0.115",
 ]
 
 [[package]]
@@ -2232,7 +2232,7 @@ dependencies = [
  "proc-macro-crate 3.4.0",
  "proc-macro2",
  "quote",
- "syn 2.0.114",
+ "syn 2.0.115",
 ]
 
 [[package]]
@@ -2500,7 +2500,7 @@ checksum = "a948666b637a0f465e8564c73e89d4dde00d72d4d473cc972f390fc3dcee7d9c"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.114",
+ "syn 2.0.115",
 ]
 
 [[package]]
@@ -2737,7 +2737,7 @@ dependencies = [
  "phf_shared 0.11.3",
  "proc-macro2",
  "quote",
- "syn 2.0.114",
+ "syn 2.0.115",
 ]
 
 [[package]]
@@ -2873,7 +2873,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "479ca8adacdd7ce8f1fb39ce9ecccbfe93a3f1344b3d0d97f20bc0196208f62b"
 dependencies = [
  "proc-macro2",
- "syn 2.0.114",
+ "syn 2.0.115",
 ]
 
 [[package]]
@@ -3057,7 +3057,7 @@ checksum = "20675572f6f24e9e76ef639bc5552774ed45f1c30e2951e1e99c59888861c539"
 
 [[package]]
 name = "rds-ssm-connect"
-version = "1.7.14"
+version = "1.7.16"
 dependencies = [
  "reqwest 0.12.28",
  "semver",
@@ -3085,9 +3085,9 @@ dependencies = [
 
 [[package]]
 name = "redox_syscall"
-version = "0.7.0"
+version = "0.7.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "49f3fe0889e69e2ae9e41f4d6c4c0181701d00e4697b356fb1f74173a5e0ee27"
+checksum = "35985aa610addc02e24fc232012c86fd11f14111180f902b67e2d5331f8ebf2b"
 dependencies = [
  "bitflags 2.10.0",
 ]
@@ -3120,7 +3120,7 @@ checksum = "b7186006dcb21920990093f30e3dea63b7d6e977bf1256be20c3563a5db070da"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.114",
+ "syn 2.0.115",
 ]
 
 [[package]]
@@ -3418,7 +3418,7 @@ dependencies = [
  "proc-macro2",
  "quote",
  "serde_derive_internals",
- "syn 2.0.114",
+ "syn 2.0.115",
 ]
 
 [[package]]
@@ -3530,7 +3530,7 @@ checksum = "d540f220d3187173da220f885ab66608367b6574e925011a9353e4badda91d79"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.114",
+ "syn 2.0.115",
 ]
 
 [[package]]
@@ -3541,7 +3541,7 @@ checksum = "18d26a20a969b9e3fdf2fc2d9f21eda6c40e2de84c9408bb5d3b05d499aae711"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.114",
+ "syn 2.0.115",
 ]
 
 [[package]]
@@ -3565,7 +3565,7 @@ checksum = "175ee3e80ae9982737ca543e96133087cbd9a485eecc3bc4de9c1a37b47ea59c"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.114",
+ "syn 2.0.115",
 ]
 
 [[package]]
@@ -3626,7 +3626,7 @@ dependencies = [
  "darling",
  "proc-macro2",
  "quote",
- "syn 2.0.114",
+ "syn 2.0.115",
 ]
 
 [[package]]
@@ -3648,7 +3648,7 @@ checksum = "772ee033c0916d670af7860b6e1ef7d658a4629a6d0b4c8c3e67f09b3765b75d"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.114",
+ "syn 2.0.115",
 ]
 
 [[package]]
@@ -3875,9 +3875,9 @@ dependencies = [
 
 [[package]]
 name = "syn"
-version = "2.0.114"
+version = "2.0.115"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d4d107df263a3013ef9b1879b0df87d706ff80f65a86ea879bd9c31f9b307c2a"
+checksum = "6e614ed320ac28113fa64972c4262d5dbc89deacdfd00c34a3e4cea073243c12"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -3901,7 +3901,7 @@ checksum = "728a70f3dbaf5bab7f0c4b1ac8d7ae5ea60a4b5549c8a5914361c99147a709d2"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.114",
+ "syn 2.0.115",
 ]
 
 [[package]]
@@ -3986,7 +3986,7 @@ checksum = "f4e16beb8b2ac17db28eab8bca40e62dbfbb34c0fcdc6d9826b11b7b5d047dfd"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.114",
+ "syn 2.0.115",
 ]
 
 [[package]]
@@ -4075,7 +4075,7 @@ dependencies = [
  "serde_json",
  "tauri-utils",
  "tauri-winres",
- "toml 0.9.11+spec-1.1.0",
+ "toml 0.9.12+spec-1.1.0",
  "walkdir",
 ]
 
@@ -4097,7 +4097,7 @@ dependencies = [
  "serde",
  "serde_json",
  "sha2",
- "syn 2.0.114",
+ "syn 2.0.115",
  "tauri-utils",
  "thiserror 2.0.18",
  "time",
@@ -4115,7 +4115,7 @@ dependencies = [
  "heck 0.5.0",
  "proc-macro2",
  "quote",
- "syn 2.0.114",
+ "syn 2.0.115",
  "tauri-codegen",
  "tauri-utils",
 ]
@@ -4133,7 +4133,7 @@ dependencies = [
  "serde",
  "serde_json",
  "tauri-utils",
- "toml 0.9.11+spec-1.1.0",
+ "toml 0.9.12+spec-1.1.0",
  "walkdir",
 ]
 
@@ -4312,7 +4312,7 @@ dependencies = [
  "serde_with",
  "swift-rs",
  "thiserror 2.0.18",
- "toml 0.9.11+spec-1.1.0",
+ "toml 0.9.12+spec-1.1.0",
  "url",
  "urlpattern",
  "uuid",
@@ -4327,7 +4327,7 @@ checksum = "1087b111fe2b005e42dbdc1990fc18593234238d47453b0c99b7de1c9ab2c1e0"
 dependencies = [
  "dunce",
  "embed-resource",
- "toml 0.9.11+spec-1.1.0",
+ "toml 0.9.12+spec-1.1.0",
 ]
 
 [[package]]
@@ -4380,7 +4380,7 @@ checksum = "4fee6c4efc90059e10f81e6d42c60a18f76588c3d74cb83a0b242a2b6c7504c1"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.114",
+ "syn 2.0.115",
 ]
 
 [[package]]
@@ -4391,7 +4391,7 @@ checksum = "ebc4ee7f67670e9b64d05fa4253e753e016c6c95ff35b89b7941d6b856dec1d5"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.114",
+ "syn 2.0.115",
 ]
 
 [[package]]
@@ -4458,7 +4458,7 @@ checksum = "af407857209536a95c8e56f8231ef2c2e2aff839b22e07a1ffcbc617e9db9fa5"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.114",
+ "syn 2.0.115",
 ]
 
 [[package]]
@@ -4508,9 +4508,9 @@ dependencies = [
 
 [[package]]
 name = "toml"
-version = "0.9.11+spec-1.1.0"
+version = "0.9.12+spec-1.1.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f3afc9a848309fe1aaffaed6e1546a7a14de1f935dc9d89d32afd9a44bab7c46"
+checksum = "cf92845e79fc2e2def6a5d828f0801e29a2f8acc037becc5ab08595c7d5e9863"
 dependencies = [
  "indexmap 2.13.0",
  "serde_core",
@@ -4577,9 +4577,9 @@ dependencies = [
 
 [[package]]
 name = "toml_parser"
-version = "1.0.6+spec-1.1.0"
+version = "1.0.7+spec-1.1.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a3198b4b0a8e11f09dd03e133c0280504d0801269e9afa46362ffde1cbeebf44"
+checksum = "247eaa3197818b831697600aadf81514e577e0cba5eab10f7e064e78ae154df1"
 dependencies = [
  "winnow 0.7.14",
 ]
@@ -4654,7 +4654,7 @@ checksum = "7490cfa5ec963746568740651ac6781f701c9c5ea257c58e057f3ba8cf69e8da"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.114",
+ "syn 2.0.115",
 ]
 
 [[package]]
@@ -4964,7 +4964,7 @@ dependencies = [
  "bumpalo",
  "proc-macro2",
  "quote",
- "syn 2.0.114",
+ "syn 2.0.115",
  "wasm-bindgen-shared",
 ]
 
@@ -5109,7 +5109,7 @@ checksum = "67a921c1b6914c367b2b823cd4cde6f96beec77d30a939c8199bb377cf9b9b54"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.114",
+ "syn 2.0.115",
 ]
 
 [[package]]
@@ -5236,7 +5236,7 @@ checksum = "053e2e040ab57b9dc951b72c264860db7eb3b0200ba345b4e4c3b14f67855ddf"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.114",
+ "syn 2.0.115",
 ]
 
 [[package]]
@@ -5247,7 +5247,7 @@ checksum = "3f316c4a2570ba26bbec722032c4099d8c8bc095efccdc15688708623367e358"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.114",
+ "syn 2.0.115",
 ]
 
 [[package]]
@@ -5626,7 +5626,7 @@ dependencies = [
  "heck 0.5.0",
  "indexmap 2.13.0",
  "prettyplease",
- "syn 2.0.114",
+ "syn 2.0.115",
  "wasm-metadata",
  "wit-bindgen-core",
  "wit-component",
@@ -5642,7 +5642,7 @@ dependencies = [
  "prettyplease",
  "proc-macro2",
  "quote",
- "syn 2.0.114",
+ "syn 2.0.115",
  "wit-bindgen-core",
  "wit-bindgen-rust",
 ]
@@ -5785,7 +5785,7 @@ checksum = "b659052874eb698efe5b9e8cf382204678a0086ebf46982b79d6ca3182927e5d"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.114",
+ "syn 2.0.115",
  "synstructure",
 ]
 
@@ -5833,7 +5833,7 @@ dependencies = [
  "proc-macro-crate 3.4.0",
  "proc-macro2",
  "quote",
- "syn 2.0.114",
+ "syn 2.0.115",
  "zbus_names",
  "zvariant",
  "zvariant_utils",
@@ -5867,7 +5867,7 @@ checksum = "4122cd3169e94605190e77839c9a40d40ed048d305bfdc146e7df40ab0f3e517"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.114",
+ "syn 2.0.115",
 ]
 
 [[package]]
@@ -5887,7 +5887,7 @@ checksum = "d71e5d6e06ab090c67b5e44993ec16b72dcbaabc526db883a360057678b48502"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.114",
+ "syn 2.0.115",
  "synstructure",
 ]
 
@@ -5927,7 +5927,7 @@ checksum = "eadce39539ca5cb3985590102671f2567e659fca9666581ad3411d59207951f3"
 dependencies = [
  "proc-macro2",
  "quote",
- "syn 2.0.114",
+ "syn 2.0.115",
 ]
 
 [[package]]
@@ -5944,9 +5944,9 @@ dependencies = [
 
 [[package]]
 name = "zmij"
-version = "1.0.20"
+version = "1.0.21"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4de98dfa5d5b7fef4ee834d0073d560c9ca7b6c46a71d058c48db7960f8cfaf7"
+checksum = "b8848ee67ecc8aedbaf3e4122217aff892639231befc6a1b58d29fff4c2cabaa"
 
 [[package]]
 name = "zvariant"
@@ -5971,7 +5971,7 @@ dependencies = [
  "proc-macro-crate 3.4.0",
  "proc-macro2",
  "quote",
- "syn 2.0.114",
+ "syn 2.0.115",
  "zvariant_utils",
 ]
 
@@ -5984,6 +5984,6 @@ dependencies = [
  "proc-macro2",
  "quote",
  "serde",
- "syn 2.0.114",
+ "syn 2.0.115",
  "winnow 0.7.14",
 ]

package/src-tauri/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "rds-ssm-connect"
-version = "1.7.14"
+version = "1.7.16"
 description = "Secure RDS connections through AWS SSM"
 authors = ["Iaroslav Pyrogov"]
 edition = "2024"

package/src-tauri/src/lib.rs

@@ -818,6 +818,8 @@ async fn install_update(app_handle: AppHandle) -> Result<(), String> {
         .await
         .map_err(|e| format!("Failed to download/install update: {}", e))?;
 
+    app_handle.restart();
+
     Ok(())
 }
 
@@ -836,7 +838,31 @@ async fn open_url(app_handle: AppHandle, url: String) -> Result<(), String> {
 }
 
 #[tauri::command]
-async fn quit_app(app_handle: AppHandle) -> Result<(), String> {
+async fn quit_app(
+    app_handle: AppHandle,
+    state: tauri::State<'_, Arc<TokioMutex<SidecarState>>>,
+) -> Result<(), String> {
+    // Take the sidecar child out (releases the lock before sleeping)
+    let child_to_kill = {
+        let mut guard = state.lock().await;
+        guard.child.take()
+    };
+
+    if let Some(child) = child_to_kill {
+        // Send SIGTERM first so the sidecar's cleanup handlers fire
+        // (disconnects all connections and kills process trees)
+        let pid = child.pid();
+        let _ = std::process::Command::new("kill")
+            .args(["-TERM", &pid.to_string()])
+            .status();
+
+        // Brief wait for graceful shutdown
+        tokio::time::sleep(tokio::time::Duration::from_millis(500)).await;
+
+        // Force-kill if still alive
+        let _ = child.kill();
+    }
+
     app_handle.exit(0);
     Ok(())
 }

package/src-tauri/tauri.conf.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "RDS SSM Connect",
-  "version": "1.7.14",
+  "version": "1.7.16",
   "identifier": "com.rds-ssm-connect.desktop",
   "build": {
     "beforeDevCommand": "npm run dev:vite",