Download Niriksh for linux

**Niriksh 1.4.0 is a milestone release delivering seven major infrastructure management features, a high-performance terminal experience, automated in-app updates, and enterprise commercial enhancements.** Niriksh is an agentless server management and observability desktop application developed and licensed exclusively by SOUDIV for Linux, macOS, and Windows. **Zero software, daemons, or temporary files are ever left behind on your target servers** (Rule 2.1). All existing server profiles, credentials, alerts, and licenses from v1.3.0 carry over seamlessly. --- ## ✨ Highlights 1. **Health Incident Timeline & 1-Click Guided Remediation Assistant (Feature 7)** - Autonomous diagnostic incident analyzer evaluating host health (0–100 score). - Instant 1-click single-shot remedies for disk emergencies, journal vacuuming, failed systemd services, cache dropping, and crash log inspections. 2. **Multi-Log Real-Time Streamer & Unified Log Inspector (Feature 6)** - Live streaming log tailer across systemd journals, file logs, and Docker container logs. - Flexible split-pane layouts (1-pane, 2-pane, 4-pane) and Unified Merged Chronological Timeline interleaving logs in real time. 3. **Visual SSH Port Forwarding & Tunnel Studio (Feature 5)** - Complete visual tunnel workbench supporting Local (`-L`), Remote Reverse (`-R`), and Dynamic SOCKS5 (`-D`) proxy routing with live byte counters and connection indicators. 4. **Zero-Footprint Automated Backup & Snapshot Engine (Feature 4)** - Streaming database dumps (`pg_dump`, `mysqldump`), Docker volumes, and system configs streamed directly across SSH stdout straight into local workstation storage without writing temporary archive files to target servers. 5. **Fleet-Wide Batch Operations & Broadcast Runner (Feature 3)** - Multi-node parallel broadcast command execution across server tags or selections with bounded concurrency (1–5 workers) and aggregated status matrix cards. 6. **Runtime Interactive Prompt & Input Bridge in Deployer (Feature 2)** - Real-time heuristic prompt detection (`[y/N]`, `Password:`, tokens) with inline terminal prompt bridges for automated deployment recipes. 7. **In-App Update System with Automatic & Manual Fallback (Feature 1)** - Non-blocking startup release checks against the SOUDIV Authority, top-bar indicator pill, SHA-256 verified streaming downloads, in-place binary execution, and manual installation fallback guide. 8. **High-Performance Terminal & Auto-Copy on Select** - Instant automatic clipboard copy on mouse selection, right-click context menu (Copy, Paste, Clear, Reset, Select All), and native keyboard shortcuts (`Ctrl+C`, `Ctrl+V`, `Ctrl+Shift+C`, `Ctrl+Shift+V`). 9. **Global Latin-Only Brand Standards & SOUDIV Proprietary Commercial Licensing** - Standardized Latin-only brand identity ("NIRIKSH") and formal commercial intellectual property terms. --- ## 🆕 What's New ### 1. Health Incident Timeline & 1-Click Remediation Located under **Alerts → Incidents**, this assistant monitors telemetry and systemd state to calculate a real-time host Health Score (0–100). - **Incident Categorization**: Categorizes issues into Disk Space, Service Failures, Memory/Swap Starvation, CPU Core Saturation, Security Drift, and System Clutter. - **1-Click Remediation**: - *Disk Emergency*: Clean package manager cache, purge orphaned dependencies, and vacuum journal logs to 100 MB. - *Service Crash*: Inspect the last 50 crash log lines, restart service with systemctl active verification, or reload configuration. - *Memory Pressure*: Drop clean pagecache buffers (`echo 3 > /proc/sys/vm/drop_caches`) and inspect top consuming processes. - *CPU Pressure*: Identify top CPU-bound processes. - **Stateless Remote Execution**: Runs stateless commands over SSH stdout with zero server footprint. ### 2. Multi-Log Real-Time Streamer Located under **Observe → Logs**, this studio streams remote log sources simultaneously: - **Sources**: Systemd unit journals, file paths (`/var/log/*`), container runtimes (Docker/Podman), and kernel dmesg. - **Layouts**: 1-pane, 2-pane split, 4-pane grid, or Unified Merged Chronological view. - **Search & Filtering**: Regex search, log level filtering (Error, Warn, Info), auto-scroll tailing with pause on scroll-up. ### 3. Visual SSH Port Forwarding & Tunnel Studio Located under **Network → Tunnels**, this workbench manages SSH tunnels: - **Local Forwarding (`-L`)**: Access remote databases and internal web services via local workstation ports. - **Remote Forwarding (`-R`)**: Expose local workstation services to remote networks. - **Dynamic SOCKS5 Proxy (`-D`)**: Route browser and CLI traffic through the remote server's network. - **Zero Orphaned Sockets**: Disconnecting a server automatically terminates all associated tunnels cleanly. ### 4. Zero-Footprint Automated Backup & Snapshot Engine Located under **Manage → Backups**, this engine creates on-demand backups: - **Streaming Pipeline**: Streams archive bytes directly over standard SSH stdout straight into local workstation storage (`~/niriksh-backups/`). - **Recipes**: PostgreSQL (`pg_dump`), MySQL/MariaDB (`mysqldump`), MongoDB (`mongodump --archive`), Redis (`redis-cli --rdb -`), SQLite (`sqlite3 .backup`), Docker volumes, system configuration directories, and custom folders. - **Integrity**: On-the-fly SHA-256 calculation; partial files are deleted immediately if a transfer fails or is cancelled. - **Verification**: Instant checksum verification testing computed hash against on-disk files and verifying format magic numbers (`PGDMP`, `REDIS`, `SQLite format 3`, `gzip`). ### 5. Fleet-Wide Batch Operations & Broadcast Runner Select multiple servers on the **Fleet** view and launch cluster batch actions: - **Cluster Operations**: Run custom shell scripts, refresh package indices, check disk capacities, or manage services across hundreds of nodes. - **Concurrency Throttling**: Bounded execution (1 to 5 concurrent SSH workers) prevents network starvation. - **Execution Report**: Live status cards, duration counters, log output drawers, and exportable JSON reports. ### 6. Deployer Interactive Prompt & Input Bridge Automated stack deployments now gracefully handle interactive CLI steps: - **Automatic Heuristic Detection**: Detects `read` statements (`read -p`, `read -r`) in bash scripts and auto-activates the interactive stdin bridge. - **Prompt Detection on Stderr & Stdout**: Correctly captures prompts output to standard error (such as bash `read -p`) without trailing newlines. - **Input Bridge**: An inline bridge opens right in the deployment progress drawer allowing operators to answer prompts securely in real time. ### 7. In-App Update System Niriksh checks the central SOUDIV Authority (`https://soudiv.com/api/v1/niriksh/stats`) on startup: - **Non-blocking Indicator**: An accent pill (`🚀 Update Available`) appears in the top bar when an update is detected. - **Two-Stage Workflow**: - *Stage 1 (Automatic)*: Streams the update binary, verifies cryptographic checksums, replaces the application binary, and restarts. - *Stage 2 (Manual Fallback)*: Detailed step-by-step installation instructions for your OS with direct download links. --- ## 🔒 Security & Performance Improvements - **Cross-Platform Native Desktop Alert Fallbacks**: - *macOS*: Integrated reliable AppleScript (`osascript`) notification banner delivery ensuring notifications pop up and register in macOS Notification Center even for unpackaged/standalone binaries. - *Windows*: Integrated WinRT PowerShell toast delivery using the built-in system PowerShell AUMID and `CREATE_NO_WINDOW` (`0x0800_0000`) flag, resolving silent notification drops caused by missing Start Menu shortcut AUMIDs. - *Linux*: Native D-Bus desktop notification delivery with `notify-send` fallback. - **Terminal Auto-Copy Visual Feedback**: Real-time feedback pills and in-terminal floating badges confirm clipboard copying upon mouse text selection. - **Design System Token Integrity (Rule 2.32)**: Enforced strict CSS token adherence across Log Streamer, Tunnel Studio, and About pages, eliminating broken ad-hoc variables. - **External URL System Browser Launcher**: New IPC command `open_external_url` opens links in the operator's default browser, replacing broken webview `target="_blank"` anchors with masked, human-readable action triggers. - **Console Window Flash Suppression**: Windows subprocess executions explicitly suppress temporary conhost console window popups. - **Zero Technology Stack Leakage**: User-facing error messages are sanitized into professional, human-readable domain terms without exposing internal crate paths or regex logic. - **Licensing Catalog Expansion**: Added feature gates `FEAT_FLEET_BATCH_RUNNER` (#38), `FEAT_BACKUP_ENGINE` (#39), `FEAT_PORT_FORWARDING` (#40), `FEAT_MULTI_LOG_STREAMER` (#41), and `FEAT_HEALTH_INCIDENT_REMEDIATION` (#42) with full SOUDIV authority catalog synchronization. --- ## 📋 Quality & Testing Verification - **Real Target Verification**: All 7 new features verified end-to-end against live Debian Linux target container running under rootless Docker. - **Rust Test Suite**: 715 core tests + 43 GUI tests passing with 0 errors (758 total tests passed). - **Frontend Quality Gate**: Svelte-check passing with 0 errors and 0 warnings; 40 UI tests passing. - **Clippy & Formatting**: `cargo clippy --workspace -- -D warnings` and `cargo fmt --all -- --check` passing with 0 warnings. - **Ecosystem Non-Drift**: All 29 tests passing in companion SOUDIV repository (`projects/soudiv`).