IMTerm Feature Reference

Agent Mode UNIQUE

• Natural language instructions: "Sign on and show me the top 10 active jobs"
• Five providers: Anthropic Claude, OpenAI GPT, Google Gemini, Ollama (local/offline), Mock (no API key required)
• Protocol-aware tool sets: 5250 menu navigation and CL commands; 3270 ISPF and dataset tools; VT shell
• AI reads screens, navigates menus, fills fields, submits forms, and reports results
• Save AI-generated action sequences as reusable JavaScript scripts

JavaScript Scripting

• CodeMirror editor with JS syntax highlighting, autocompletion, and error markers
• Session API: type(), sendKey(), waitForScreen(), readField(), getScreen()
• Scripts share the live session; no separate host connection needed
• Built-in script templates for common workflows: signon, job query, file transfer
• Run interactively or schedule; output streamed to script console pane

Scheduled Scripts

• Cron-expression scheduling (minute, hourly, daily, weekly)
• Manage schedules from the web UI at Settings > Scheduler
• Schedule state persisted as JSON in the data directory; survives restarts
• Per-schedule enable/disable toggle without deleting the definition
• Execution log with timestamps and script output retained per run

Event-Driven Scripts

• Five event types: screen-change, field-value, session-connect, session-disconnect, error
• Regex pattern matching on screen text to fire the event handler
• Rate limiting prevents runaway loops on high-frequency screen transitions
• Used for auto-reply to confirmation prompts, data extraction triggers, and alerts
• Combine with scheduled scripts for full unattended workflow automation

PSL Migration Tool

• psl2js CLI converts PowerTerm Script Language files to IMTerm JavaScript
• Web-based import wizard at Settings > Import Profiles
• Handles PSL macro commands, send-key sequences, and wait statements
• Translation endpoint at /api/v2/psl2js for programmatic use
• Review and edit converted scripts in the built-in CodeMirror editor before running

HLLAPI Bridge DLL

• Native HLLAPI bridge DLL compatible with UiPath, QTP/UFT, and Blue Prism
• Standard HLLAPI function numbers 1-90 supported
• Existing RPA scripts connect to IMTerm sessions without code changes
• Tested with common AS/400 automation patterns: data entry, inquiry, report extraction
• Bridge routes HLLAPI calls to the live IMTerm session via WebSocket

Macro Recorder

• Record keystrokes and screen navigations from the toolbar
• Save macros with a name; assign to keyboard shortcut or Power Pad button
• Replay single or looped; adjustable playback speed
• Exported macros are JavaScript - edit in the script editor for advanced logic
• PowerTerm .pts session files import as connection profiles

REST API for Modern Automations

• OpenAPI 3.0 spec at /api/docs with interactive Swagger UI
• Webhook delivery for session-connect, session-disconnect, and security events
• Read screen content, set field values, and send AID keys over REST
• Bearer token auth; rate limiting configurable per token
• Agent Mode for AI-driven automation using natural language instructions

TLS and Security Headers

• TLS 1.2 minimum; TLS 1.3 preferred; configurable cipher suites
• HSTS with configurable max-age; sent on all HTTPS responses
• Content Security Policy (CSP) — strict; inline scripts use nonces
• X-Frame-Options: DENY; X-Content-Type-Options: nosniff
• WebSocket origin validation; rejects cross-origin WS upgrade requests

FIPS 140-2

• FIPS build uses Go BoringCrypto, certificate #3678
• Build with make build-fips; produces bin/imterm-fips
• AES-GCM, RSA-OAEP, ECDSA P-256/P-384 — only FIPS-approved algorithms
• All session keys, TLS handshake, and password hashing use approved primitives
• FIPS mode verified at startup; process exits if BoringCrypto is not active

Audit Log

• 96 structured IMTE message IDs covering all security-relevant events
• JSON format, one record per line; SIEM-compatible (Splunk, Elastic, QRadar)
• Events: login, logout, failed auth, session open/close, key send, file transfer, print, config change
• Log rotation configurable by size and time; compressed archives retained
• Audit log access restricted to Admin role; append-only file

LDAP / Active Directory

• Full Active Directory integration via LDAP bind authentication
• Group-to-role mapping: AD groups automatically assign Admin, User, or View-Only role
• Periodic group sync: role assignments stay current without manual intervention
• Mixed mode: LDAP primary with local account fallback for service accounts
• Kerberos SSO: transparent browser login on Windows domain machines via SPNEGO

Azure AD / Entra ID (OIDC)

• OpenID Connect redirect flow for Entra ID / Azure AD
• Tenant and client configured via imterm-setup Phase 6
• Group-to-role mapping from Azure AD group membership claims
• Mixed mode: OIDC primary with local admin fallback
• "Sign in with Microsoft" button on the login page

Privacy and Licensing

• No phone-home: zero telemetry, no external DNS lookups at runtime
• Offline license: key validated locally; no license server process required
• License file is a signed JWT verified against the Infomanta public key
• Seat count enforced locally; aggregate counting in Redis cluster mode
• Runs in air-gapped environments with no internet access

Peer Mesh Architecture

• Every node is equal - no primary, no replica, no dedicated aggregator
• Admin console on any node shows all sessions and users across the full cluster
• Terminate any session from any node's admin console
• Cluster health visible at each node's /admin panel
• Node identity (node_id) stamped on every audit event for traceability

Graceful Drain and Rolling Upgrades

• Drain a node from the admin console - new sessions routed to other nodes
• Existing sessions remain on the drained node until they disconnect naturally
• Configurable drain timeout; forced disconnect after timeout if needed
• Rolling upgrade: drain, upgrade binary, restart, undrain - repeat per node
• Zero downtime for users during a rolling cluster upgrade

Stable Node Identity

• node_id persists across restarts - set in config.yaml or IMTERM_NODE_ID env var
• Consistent identity allows audit log correlation across cluster nodes
• Cluster peer list configured statically or via shared NFS discovery
• Each node tracks peer health via heartbeat; stale peers removed automatically
• Seat count aggregated across all live nodes
• Resilience demonstration script for SOW Section 6 compliance reporting

Capacity-aware health endpoint

Set max_sessions: 500 in config.yaml. When a node reaches capacity, the health endpoint returns HTTP 503 - your load balancer automatically stops routing new connections to that node. No middleware, no custom scripts.

We are the only terminal emulator that does this.

Use the sizing calculator to find your max_sessions value →

Hotspots and Triggers

• Clickable screen regions: click a menu number to select it without typing
• URL hotspots: click any URL on the terminal to open it in the browser
• Pattern-based triggers auto-send keystrokes when matching text appears on screen
• Rate limiting on triggers: minimum interval between firings prevents runaway loops
• Configure hotspot regions and trigger patterns per connection profile

Power Pad

• Floating 4×6 button grid (24 buttons); toggle with View > Power Pad
• Assign any keystroke, macro, script, or CL command to each button
• Button label and color configurable per button
• Drag-and-drop positioning on screen; position saved per connection profile
• Import/export button grid definitions as JSON

Split Screen

• Side-by-side sessions in one browser tab: Ctrl+\ to toggle
• Draggable vertical divider to adjust panel ratio
• Each pane connects independently to any host and protocol
• Monitor one session while working in another simultaneously
• Copy-paste between panes with standard clipboard

Command and Screen History

• Persistent per-session command history; Up/Down arrow recall
• Search command history with Ctrl+R (incremental)
• Screen history: browse previous screens with Ctrl+PageUp / Ctrl+PageDown
• Review and copy text from past screens without re-navigating the host application
• History depth configurable (default 500 commands, 100 screens)

Macro Recording

• Record keystrokes with timing from a toolbar button
• Save macros with a name; assign to a keyboard shortcut or Power Pad button
• Replay single or looped; adjustable playback speed
• Edit recorded macros as JavaScript in the script editor
• Export macros as JSON to share across the team

Visual Keyboard Mapper

• 104-key CSS keyboard diagram; click any key to reassign it
• Map physical keys to host function keys, PF keys, or macros
• Per-profile keymaps; default IMTerm keymap plus PowerTerm-compatible preset
• Export and import keymap definitions as JSON
• Visual diff between current map and default highlights customizations

Copy as Image and HTML

• Copy terminal screen region as PNG image to clipboard
• Copy selection as HTML preserving colors and monospace font
• Copy as plain text or with ANSI color codes for log files
• Selection rectangle mode for column-aligned data extraction
• Save screenshot directly to file via browser download

Session Sharing and Auto-Reconnect

• Share a live terminal session via a view-only link; no login required for viewer
• Used for training, mentoring, and real-time auditing
• Viewer sees all screen updates in real time; cannot send keystrokes
• Auto-reconnect on network loss: 5 attempts with exponential backoff (2/4/8/16/32 s)
• Session state (screen, cursor, scroll) preserved across reconnects

REST API v1 — HLLAPI

• Classic HLLAPI-style endpoints: read screen, send keys, get cursor position
• Stateless; authenticate with Basic auth or session token
• Used by Agent Mode and external tools that expect a HLLAPI-style interface
• Compatible with scripts written for legacy HLLAPI adapters
• JSON response format; no XML

REST API v2 — OpenAPI 3.0.3

• Full specification at /api/v2/docs/openapi.yaml
• Interactive Swagger UI at /api/v2/docs/
• Bearer token authentication; tokens issued at POST /api/v2/auth/token
• Rate limiting: configurable per-token and global limits
• Versioned and stable; breaking changes only in v3

v2 Endpoint Reference

• POST /api/v2/auth/token — issue Bearer token
• GET /api/v2/sessions — list active sessions
• POST /api/v2/sessions — create session
• GET /api/v2/sessions/{id}/screen — read screen
• POST /api/v2/sessions/{id}/keys — send keystrokes
• GET /api/v2/sessions/{id}/fields — read fields
• POST /api/v2/sessions/{id}/fields — set fields
• GET /api/v2/sessions/{id}/recording — playback
• POST /api/v2/psl2js — translate PSL to JS
• GET /api/v2/users — list users (Admin)
• POST /api/v2/users — create user (Admin)
• GET /api/stats — server statistics

PSL Translation Endpoint

• POST /api/v2/psl2js accepts PSL source in the request body
• Returns JavaScript source compatible with IMTerm scripting engine
• Used by the web import wizard and the psl2js CLI tool
• Handles PSL SENDKEYS, WAIT, SETFIELD, GETFIELD, IF/THEN/GOTO constructs
• Returns line-level warnings for unsupported PSL constructs