[bifrost0x]

Changes

Make SSH targets, browser access and retained data explicit in the existing workflows:

• Freeze broadcast recipients and require session-bound previews for multiline or control-character input, including mobile, clipboard and broadcast paths.
• List active browser logins and revoke selected or all other logins, with bounded resource cleanup and preserved shared SSH/tmux sessions.
• Preview affected accounts, remaining configured methods and MFA loss before disabling authentication features; reject stale approvals.
• Show effective personal/global SSH trust and the concrete remaining trust before deleting a personal entry.
• Explain unusable saved-password assignments and reuse the existing target-bound authorization flow.
• Keep active and failed transfers accessible with filters, paging and source/destination labels.
• Name the account in deletion confirmation and explain retained quarantine files and operator cleanup.
• Generate allowlisted local support reports only on request, with exact preview, copy and download.
• Make Continue working a regular Overview panel: move, resize, hide and restore it through Customize, with a bottom default and preserved existing layouts.
• Keep the header stable when applying two- or four-pane presets, place presets under the workspace Layout menu on desktop and mobile, and remove the permanent session-continuity paragraph.
• Integrate translated backup coverage and the recovery checklist into Settings Center, with compact expandable guidance.

Uses existing UI conventions and six locales. Adds no dependencies, telemetry or external notification service.

Validation

• Latest focused Python run: 290 passed, covering Overview persistence, settings, admin, security UI and customer workflows.
• JavaScript: 1,116 passed, 1 skipped; lint, vendor integrity (16 assets), authentication translations and repository hygiene passed.
• 74 desktop/mobile browser checks passed for workspace navigation, floating windows, settings, recovery and presets; the Overview panel and existing shortcuts were also checked with the 41-case Overview regression run.
• Preset regressions compare header geometry before and after applying two/four panes at 1440 and 3200 pixels, while retaining an existing terminal and preventing unintended connections.
• Backup coverage and the working recovery dialog are checked in all six locales, with desktop/mobile screenshots and keyboard focus restoration.
• Other regression coverage includes login-ID reuse, revocation during socket/transfer/discovery admission, stale impact approvals, trust deletion races, paste retargeting and support-report data exclusion.

Hosted validation for a4c2ad495a4bb9b6f516eab982b09657b3e8d624: all 31 checks passed; three release/publish-only jobs were skipped. Includes all eight browser groups, Firefox/WebKit checks, Python tests, SSH/SMB/Redis integration, container upgrade/runtime checks, AMD64/ARM64 image security and CodeQL.

Please keep this PR unmerged until explicitly approved.

[chatgpt-codex-connector]

Codex Review Summary: ✅ Completed

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-11-14T07:32:53.213272Z	3e162d3	PR opened
🔒 Security Review	✅ Completed 2026-11-14T07:37:11.939429Z	3e162d3	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.