Harden SSH clipboard, key storage, and output flow

[bifrost0x]

Summary

• require an explicit, localized user action before live persistent-tmux OSC 52 output can write to the browser clipboard
• apply the SSH connection attempt limit before any stored target or jump-host key derivation/decryption while preserving missing-reference diagnostics
• add atomic per-account SSH key count and encrypted-byte growth limits plus a pre-crypto key-write rate limit
• replace unbounded room fan-out with per-browser acknowledged output delivery, per-socket/per-user/global byte and event budgets, Paramiko backpressure, and lagging-browser eviction

Compatibility

• normal terminal copy/paste and Ctrl+C interrupt behavior are unchanged
• replayed output and plain SSH sessions remain unable to request clipboard writes; persistent tmux copy remains available through one visible Copy action
• existing over-limit key stores remain readable and can still be renamed, deleted, or replaced without growth
• a stalled browser can be disconnected without closing its SSH or persistent tmux session, which remains available for reconnect
• upload acknowledgements still contain a usable key summary without rescanning and decrypting the complete key store

Validation

• 2365 passed, 29 skipped in the complete Python test suite
• all 38 JavaScript test files passed
• ESLint passed for static/js
• Python and JavaScript syntax checks passed
• focused Playwright browser E2E passed for replay-safe, user-approved tmux OSC 52 clipboard copy
• independent post-patch security review found no remaining actionable findings
• git diff --check origin/main passed

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-04T06:20:07.528159Z	ec17548	Manual request

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: fb829760a2

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[bifrost0x]

@codex review

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: c6016c1d93

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[bifrost0x]

@codex review

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 838538d7a1

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[bifrost0x]

@codex review

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 6eb9f5160d

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[bifrost0x]

@codex review

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 6edc8724f2

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[bifrost0x]

@codex review

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. Chef's kiss.

Reviewed commit: ec17548dd3

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".