feat: scaffold core application architecture and system monitoring dashboard with custom theme

Author: shihebaamrii

.gitattributes

@@ -1 +1 @@
-public/Demo.mp4 filter=lfs diff=lfs merge=lfs -text
+public/DemoFinal.mp4 filter=lfs diff=lfs merge=lfs -text

CHANGELOG.md

@@ -0,0 +1,31 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+### Added
+- **Dynamic Log Monitors:** Interactive split-pane consoles for systemd services (`journalctl`) and Docker containers (`docker logs`).
+- **Telemetry Summary:** System telemetry grid in Dashboard displaying Hostname, OS Kernel Release, RAM space, and storage roots.
+- **Searchable Proxy Routes:** Search and filter functionality in Reverse Proxy manager, along with domain hyperlinks.
+- **Enhanced File Explorer:** Metadata inspector for binary assets, directory creation, recursive deletion, and direct `chmod` permission controller.
+
+### Changed
+- **Visual Polish:** Redesigned layout with custom progress/gauge indicators and CSS status dots.
+- **Inline Demo Media:** Swapped static `.mp4` video redirect link in README for an auto-playing high-quality `.gif` preview.
+
+### Security
+- **Strict Input Validation:** Added backend filters for all SSH filesystem APIs (preventing null-byte characters and path traversal injection).
+
+## [1.0.0] - 2026-06-15
+
+### Added
+- Initial release of Vessel.
+- Secure local SSH key management with OS-native credential vaults.
+- Basic telemetry gauges (CPU, RAM, Disk).
+- File explorer with remote editor.
+- Systemd and Docker supervisors.
+- Reverse proxy configs (Nginx/Caddy) and Certbot integrations.

README.md

@@ -12,9 +12,7 @@
 </p>
 
 <p align="center">
-  <a href="https://github.com/shihebamrii/vessel/raw/main/public/Demo.mp4">
-    🎥 Watch Demo
-  </a>
+  <img src="public/DemoFinal.gif" alt="Vessel Demo" width="800">
 </p>
 
 ---
@@ -72,6 +70,33 @@ Vessel leverages a secure, multi-threaded asynchronous architecture separating s
 
 ---
 
+## 🆕 What's New (Latest Release Updates)
+
+We've shipped significant upgrades since the initial release, focusing on host-level security, interactive log diagnostics, and deep dashboard telemetry.
+
+### 🛡️ 1. Host-Level Security Hardening
+* **Input Sanitization:** Implemented strict backend validation across all filesystem endpoints (`read`, `write`, `delete`, `chmod`, `list`) to filter null-byte sequences and control characters.
+* **Command Injection Guard:** Prevent shell arguments expansion and path traversal vulnerabilities over the SSH connection.
+
+### 📊 2. Dynamic Log Monitors (Split-Pane Layout)
+* **Real-time Diagnostics Console:** Both systemd Service Supervisor and Docker Container Supervisor now feature a high-fidelity split-pane dashboard with interactive log streams (`journalctl` and `docker logs`).
+* **Pulse Status Indicators:** Visual micro-animations showing running, inactive, or error states at a glance.
+* **Manual Log Fetching:** One-click telemetry retrieval directly inside the control plane.
+
+### 📈 3. Extended System Telemetry Inventory
+* **Dashboard Summary:** A new dedicated system inventory panel displaying real-time Hostname, OS Kernel Release, Physical RAM capacity, and detailed Storage Root utilization.
+* **Custom Gauge Bars:** Replaced browser-default ranges with high-contrast, CSS-themed resource utilization visualizers.
+
+### 🔍 4. Mapped Routes Search Engine
+* **Instant Filter Routing:** Added search indexing to the Reverse Proxy panel, letting you filter active Nginx/Caddy server blocks and local target ports in real-time.
+* **Inline Navigation Hub:** Clickable domain links with target external indicators to launch proxy sites directly from the dashboard.
+
+### 📂 5. Refined Editor Workspace
+* **Binary File Protection:** Safe-fail dashboard preventing binary file corruption, showing file metadata (byte sizes, timestamps, access modes).
+* **Direct Permissions Tool:** An inline `chmod` permission configurator to toggle host access permissions instantly.
+
+---
+
 ## 🛠️ Installation & Building
 
 ### 1. Download Pre-built Release

SECURITY.md

@@ -0,0 +1,20 @@
+# Security Policy
+
+## Supported Versions
+
+We actively support and patch security issues for the following versions of Vessel:
+
+| Version | Supported |
+| ------- | --------- |
+| >= 1.0.0 | :white_check_mark: |
+| < 1.0.0 | :x: |
+
+## Reporting a Vulnerability
+
+Vessel takes security very seriously. If you find a security vulnerability, please do NOT open a public GitHub issue. Instead, report it through the following process:
+
+1. Send an email to the maintainer at security@shihebamrii.com (or open a private security advisory on GitHub if enabled).
+2. Include a detailed description of the vulnerability, steps to reproduce, and a proof-of-concept if possible.
+3. We will acknowledge receipt of your report within 48 hours and work with you to resolve the issue.
+
+Please allow us reasonable time to investigate and fix the vulnerability before disclosing it publicly.

SUPPORT.md

@@ -0,0 +1,20 @@
+# Support Policy
+
+Thank you for using Vessel! Here is how you can get support, troubleshoot issues, or ask questions:
+
+## 🔍 Frequently Asked Questions
+Before reaching out, check the [README](README.md) and open issues to see if your question or issue has already been discussed.
+
+## 💬 GitHub Discussions
+For general questions, configuration help, and community discussions:
+- Visit [GitHub Discussions](https://github.com/shihebamrii/vessel/discussions) (if enabled).
+- Ask questions, share ideas, and showcase your VPS deployments.
+
+## 🐛 Bug Reports & Feature Requests
+If you have found a bug or want to suggest a new feature:
+1. Search active issues to ensure it hasn't been reported.
+2. If it's a new issue, use the templates under the [Issues Page](https://github.com/shihebamrii/vessel/issues/new/choose).
+3. Provide as much context as possible (log outputs, operating system, and VPS configuration details).
+
+## 🔒 Security Inquiries
+Do not report security vulnerabilities publicly. Please refer to our [Security Policy](SECURITY.md) for reporting guidelines.

public/Demo.mp4

@@ -11,6 +11,16 @@ pub fn shell_escape(s: &str) -> String {
     format!("'{}'", escaped)
 }
 
+pub fn validate_path(path: &str) -> Result<(), String> {
+    if path.contains('\0') {
+        return Err("Invalid path: contains null byte".to_string());
+    }
+    if path.contains('\n') || path.contains('\r') {
+        return Err("Invalid path: contains newline characters".to_string());
+    }
+    Ok(())
+}
+
 pub fn wrap_sudo(command: &str, password: Option<&str>) -> String {
     if let Some(pass) = password {
         let escaped_pass = shell_escape(pass);
@@ -248,6 +258,9 @@ pub fn disconnect_session(server_id: String) -> Result<(), String> {
 
 #[tauri::command]
 pub async fn execute_command(server_id: String, command: String) -> Result<CommandResult, String> {
+    if command.contains('\0') {
+        return Err("Command contains null byte".to_string());
+    }
     let handle_arc = {
         let sessions = get_sessions().lock().unwrap();
         sessions.get(&server_id).cloned()
@@ -311,6 +324,7 @@ pub async fn write_remote_file(
     path: String,
     base64_content: String,
 ) -> Result<(), String> {
+    validate_path(&path)?;
     let path_buf = std::path::Path::new(&path);
     let parent = path_buf.parent()
         .map(|p| p.to_string_lossy().into_owned())
@@ -374,6 +388,7 @@ pub async fn write_remote_file(
 
 #[tauri::command]
 pub async fn read_remote_file(server_id: String, path: String) -> Result<String, String> {
+    validate_path(&path)?;
     let escaped_path = shell_escape(&path);
     let cmd = format!("base64 {}", escaped_path);
 
@@ -543,6 +558,7 @@ pub struct FileInfo {
 
 #[tauri::command]
 pub async fn list_directory(server_id: String, path: String) -> Result<Vec<FileInfo>, String> {
+    validate_path(&path)?;
     let escaped_path = shell_escape(&path);
 
     let stat_script = format!(
@@ -589,6 +605,7 @@ pub async fn list_directory(server_id: String, path: String) -> Result<Vec<FileI
 
 #[tauri::command]
 pub async fn chmod_file(server_id: String, path: String, mode: String) -> Result<(), String> {
+    validate_path(&path)?;
     if !mode.chars().all(|c| c.is_digit(8)) || mode.is_empty() || mode.len() > 4 {
         return Err("Invalid permissions mode format".to_string());
     }
@@ -602,6 +619,7 @@ pub async fn chmod_file(server_id: String, path: String, mode: String) -> Result
 
 #[tauri::command]
 pub async fn create_directory(server_id: String, path: String) -> Result<(), String> {
+    validate_path(&path)?;
     let cmd = format!("mkdir -p {}", shell_escape(&path));
     let res = execute_command(server_id, cmd).await?;
     if res.exit_code != 0 {
@@ -612,6 +630,7 @@ pub async fn create_directory(server_id: String, path: String) -> Result<(), Str
 
 #[tauri::command]
 pub async fn delete_file_or_directory(server_id: String, path: String, is_dir: bool) -> Result<(), String> {
+    validate_path(&path)?;
     let cmd = if is_dir {
         format!("rm -rf {}", shell_escape(&path))
     } else {