mirror of https://github.com/l0ng-ai/tty7.git synced 2026-09-21 16:02:20 +00:00

Files

T

l0ng-ai 22e1ab1694 tty7: a GPU-rendered, daemon-backed terminal in pure Rust

tty7 is split into two Rust processes: a persistent daemon that owns the
shells and a GPU-rendered client that talks to it over a local socket.
Because the shells live in the daemon, quitting and reopening the app
leaves the session intact — detach and reattach, no tmux required.

- Persistent sessions — the daemon holds the PTYs and child processes, so
  closing a window or swapping in a new build never takes a shell down.
- Performance — an 11 MB `cat` completes in 95 ms and DOOM-fire renders at
  888 fps; the daemon drains the PTY at device speed off the render path.
- Shell-aware — new tabs and splits open in the current working directory;
  zsh, bash, fish, and PowerShell are set up automatically.
- Enhanced prompt — inline completion, syntax highlighting, history, and
  in-terminal search, with rich flag/subcommand signatures for common tools.
- Tabs, resizable splits, a command palette, click-to-open links, desktop
  notifications, eight themes, and CJK/IME input.

Native builds for macOS, Windows, and Linux.
Built on Zed's gpui and Alacritty's VT core.

2026-07-06 21:54:27 +08:00

1022 B

Raw Permalink Blame History

Security Policy

Supported versions

Only the latest release receives security fixes.

Reporting a vulnerability

Please report vulnerabilities privately — do not open a public issue.

Use GitHub private vulnerability reporting — "Report a vulnerability" under the repository's Security tab.

You should get an initial response within a few days. Please include a reproduction if you can — a byte sequence, a clipboard payload, or a shell snippet is ideal.

Scope notes

A terminal emulator's attack surface is unusual: untrusted input arrives as escape sequences from anything you cat, ssh, or paste. Reports in these areas are especially valuable:

Escape-sequence parsing (VT/OSC/CSI handling, including the daemon-side scanners).
Clipboard and paste handling (e.g. bracketed-paste escapes).
Shell-integration scripts and the ZDOTDIR bootstrap.
The daemon's Unix socket / named pipe protocol and its process lifecycle.

1022 B Raw Permalink Blame History

Security Policy

Supported versions

Reporting a vulnerability

Scope notes

1022 B

Raw Permalink Blame History