Desktop terminals

The desktop terminal supports two sources in the same tab strip:

• Local shell opens a PTY on the desktop machine.
• Attach pane opens a live terminal for a pane on a paired, online bridge.

Remote panes

The pane picker refreshes snapshots from paired online hosts and lists the panes Herdr exposes. Opening one attaches the desktop terminal through the encrypted control channel; the bridge remains the only component that talks to Herdr's local socket.

Sessions and ownership

Terminal sessions are explicit resources. Close a tab when it is no longer needed. If another client currently controls a pane, the client should surface that state rather than silently taking it over.

Security boundary

The packaged renderer has no Node.js access and no arbitrary network access. PTYs, hub transport, SSH, and filesystem-sensitive operations stay in the Electron main process behind a typed, allowlisted IPC bridge.