tmux Control Mode (tmux -CC) - Native tmux Integration: Attach in control mode (or use the new auto-start option on a profile) and your tmux session maps onto rootshell itself: every tmux window becomes a native tab and every pane a native split. Splits, resizing, copy and paste, search, and scrollback are real rootshell gestures, not forwarded escape sequences. - Sessions Dashboard: See every session on the server with live, tappable window previews; switch, create, rename, and kill sessions, with full hardware-keyboard control. - Seamless Resume: Over tssh, your tmux tabs survive an app restart and re-enter control mode automatically on reattach. Scrolling - Pixel-Smooth Scrollback: Scrolling glides pixel by pixel instead of snapping a row at a time, tracking your finger 1:1 with natural momentum and optional rubber-band overscroll. A "Use Line Scrolling" toggle restores the classic behavior. - 120 Hz on iPhone: The terminal now renders at up to 120 Hz on supported iPhones, matching iPad and Mac. Connections - Keyboard-Interactive SSH Auth: 2FA, one-time-password, and PAM challenges are now supported on every connection path, with iOS password-manager AutoFill for both password and OTP prompts. - Secure Enclave SSH Keys: Generate a P-256 key that is created in, and never leaves, the Secure Enclave. Signing happens inside the secure coprocessor; servers see a standard ECDSA key. - OpenPubkey SSH (opkssh): Sign in with Google, Microsoft, GitLab, or a custom OIDC issuer to get a self-renewing SSH identity, with no key files to generate or distribute. - SSH User Certificates: Attach an OpenSSH user certificate to any key, including Secure Enclave, YubiKey, and FIDO2 keys, for servers using TrustedUserCAKeys. - Trusted Host Certificate Authorities: Validate host keys against an OpenSSH CA, ending "host key has changed" prompts on fleets that rotate keys. - A launch command can run as the session's initial PTY command (like ssh -t), dropping you straight into a TUI or tmux; tssh roaming also picked up a major reliability pass. - Sort profiles by name, recently used, most used, or date created. iOS Local Shell - git Commit Signing: The built-in git signs commits with your existing GPG and SSH keys, with no private key on disk. git commit -S and the usual signing config keys are honored. Keyboard - Collapse the keyboard toolbar to reclaim screen space, or pin the on-screen keyboard hidden with a long-press on the dismiss chevron. - Command-Tap Input Switching: Tap Left or Right Command alone to switch the hardware keyboard to a chosen input language - ideal for CJK. - Drag toolbar keys directly between the Main Row and the Drawer. Appearance - Two new background effects: Butterflies, with procedurally animated visitors that occasionally drift across the terminal, and a fully rewritten Aurora with parallax curtains and new color modes. Interface - Always On Display keeps the screen awake during long builds or monitoring sessions. - Full Screen mode returns to iPhone, running edge to edge. - Switching in and out of the app is dramatically faster, and the "would like to paste" prompt no longer appears on every return. AI Agent - Claude Opus 4.8 with a 1M-token context window, on the Anthropic API and AWS Bedrock.

Connections - GPG Agent Forwarding: Sign and decrypt on remote servers without copying your private key. rootshell acts as the GPG agent and forwards it over SSH or tssh, so `gpg --sign`, signed git commits, and `gpg -d` are handled on device. Existing SSH keys (including YubiKey PIV) can sign without import; standalone GPG keys are imported under Settings → Connections → GPG Keys. - On-Device Key Generation now offers Ed25519, ECDSA P-256/P-384/P-521, and RSA 2048/3072/4096. - Import from OpenSSH Config: Settings → Privacy & Data reads `ssh_config`, turns Host blocks into saved profiles, and offers to import IdentityFile keys. Wildcards, negated patterns, and ProxyJump identity inheritance are honored. - SSH over Apple Network Framework: Every SSH connect now uses Network framework, so reaching a NAT'd Tailscale peer from outside the home network is reliable. - Transfer tssh to Nearby Device: Long-press the tab title to move a live tssh session to another iCloud-paired device via Handoff. Requires tsshd 0.1.8+. - Mosh renders into the alternate screen so the viewport is isolated and prior scrollback is restored on close (toggleable). - tssh Discard Input While Offline toggle: discard or queue keys pressed between networks. - SFTP `cd` resolves symlinks; `get *.log` works through symlinked directories. - Ctrl-C interrupts in-flight ssh / sftp from the local shell during DNS, handshake, or key exchange. - YubiKey library 1.3.0: correct continuation APDUs, USB-C unplug cancels pending reads, crash and memory leak fixed. Terminal - libghostty rebased on upstream: ~10 escape-sequence DoS and crash fixes from AFL fuzzing. Korean IME preedit crash fixed. Kitty keyboard protocol now reports composed/IME text. iOS Local Shell - libgit2 rebased: reftable backend, faster SHA-256 OID handling, revspec UAF fix. - WASM/WASI: Added file-times, range I/O, sockets, and `env.*` libc imports that Go-compiled and POSIX-shim binaries rely on. Cooked-mode stdin translates Enter to LF so `bufio.ReadString('\n')` no longer hangs. recvfrom returns the real peer; TCP accept no longer hangs on a stale handle. Interface - Two-Finger Long-Press Duration: Configurable under Settings → Terminal → Gestures (0.5s / 1s / 2s / Off) so the new-connection sheet doesn't trigger when you pinch to zoom. - Spacebar Trackpad: Long-pressing the on-screen keyboard spacebar drives the cursor as arrow keys. - iPadOS 18 hardware-keyboard floating button suppressed inside the terminal (CJK IME preserved). - Terminal resize waits for on-screen keyboard animation and padding is pinned during live resize so text doesn't drift. - Per-Theme UI Chrome Colors and Disable Tab Animations toggles added. BUG FIXES - SCP/SFTP tab completion: profile suggestions no longer leak via tag/notes substring matches, completions escape spaces and close open quotes, and slow directory listings no longer overwrite stale text. - Tab close routes to the dying tab when a session ends asynchronously after switching tabs. - SSH cooked-mode pty-req modes populated per RFC 4254 §8. Speculative MikroTik / RouterOS fix. - Backup restore reports per-record failures instead of inflating success counts. - YubiKey wired connect times out at 30s if no key is inserted. - Tab-bar Liquid Glass selection no longer pops or shows the wrong tab during create/close/reorder. - Selection magnifier centers above your finger.

Terminal - Native scrollbar now drives both tmux copy mode and zellij scroll mode, making scrollback position visible in either multiplexer. Connections - Bundled tssh client refreshed to upstream v0.1.8. Upgrade tsshd on your servers for best reliability. - SSH bootstrap retries transient failures with bounded backoff up to ~5 minutes instead of giving up on the first error. Auth failures and host-key rejections still bail immediately. iOS Local Shell - WebAssembly (WASM) Support: the local shell can now execute .wasm binaries cross-compiled to WASI (wasm32-wasip1). Provided for educational use — code you have written yourself or audited; rootshell does not offer a catalog of pre-built binaries. Get a .wasm file onto the device (scp/sftp into the local shell, or the Files app), then run it as `wasm path/to/binary.wasm args...`, or directly if the first token ends in .wasm. Capabilities: sandboxed filesystem read/write rooted at the app's Documents directory, TCP client/listener and UDP sockets via Network.framework, DNS through the system resolver, and TLS/HTTPS through standard WASI crates. Sessions run in cooked mode so Ctrl-C cancels the running binary; a binary can opt into raw mode for full-screen TUIs. Each tab gets its own runtime so two .wasm invocations stay independent. WASM programs participate in the shell like any other command, including pipes (`wasm tool.wasm | grep foo`) and redirects (`wasm tool.wasm > out.txt`). - Shell parser hardened to handle bash-only constructs: `bash -c "$(curl ...)"`, `[[ ... ]]` tests, process substitution, array assignment and append, brace-group function bodies, line continuations, and trailing redirects. Customization - Settings → Privacy & Data → Import from Ghostty Config applies fonts, theme, cursor, palette, transparency, copy-on-select, and keybindings from a desktop Ghostty config file. - New steppers in Settings → Appearance → Window for horizontal and vertical window padding. AI Agent - Added GPT-5.5: OpenAI's flagship reasoning model with a 1M token context window. BUG FIXES - Fixed a touch-handler race that affected scroll/select gesture mode for users who had never manually toggled the Scroll Mode setting. - Fixed an iPhone resume wedge where the UI advanced one frame per touch. - Fixed an iOS Local Shell hang where programs calling chdir() (Rust binaries, Vim's :cd, recursive command substitution) blocked forever. - Fixed tssh mode restore for sessions started by typing tssh, ssh, or mosh inside an open local shell tab; mouse capture, alt-screen, cursor-key mode, and bracketed paste are preserved on resume. - Fixed a stack overflow from deferred WiFi-info poll recursion during the resume quiet window. - Fixed a saved-state issue where a force-quit shortly after a successful restoration could leave a stale flag the next launch misread as failure. - Fixed a tssh ClientID race on reattach. - Fixed session recovery loss on a quick launch-then-quit cycle. - Fixed iPadOS scrollbar drag jumpiness; the finger-pan boost no longer applies to thumb or gutter drags. - Fixed an output coalescer ordering window where new writes could land ahead of older queued bytes when the coalescer was disabled. - NWPathMonitor instances now suspend while backgrounded and rearm on foreground.

Appearance - Twenty new app icon variants in Settings -> Appearance -> App Icon: an original set of eight, plus a "Radical of the Unknown" collection of twelve themed after popular terminal color schemes (Solarized, Dracula, Nord, Gruvbox, Tokyo Night, Catppuccin, Bases, Mono, Monokai, Rose Pine). Picking a variant updates the home-screen icon, the animated About icon, and the Live Activity widget at the same time. - A new "Change App Icon" Shortcuts action switches the icon from a shortcut, automation, or Focus mode trigger. - The Classic app icon has been re-mastered. Connections - SSH, mosh, and tssh sessions now implement OpenSSH's "~" escape sequences. At the start of a line: ~. disconnect, ~? help, ~# list active forwards, ~I connection info, ~~ send a literal tilde. Suppressed inside bracketed paste. - A yellow OpenSSH 9.9-style banner now warns when an SSH session negotiates a non-post-quantum key exchange. The Connection Info "Post-Quantum Secure" badge was split into separate key-exchange and host-key signals. - A new SSH Transport settings subpage collects health monitoring, probe interval, and post-quantum warning. - A new SSH Server Compatibility toggle switches public-key auth to a probe-first flow, for routers and embedded servers that reject pre-signed offers. - The local-shell ssh command accepts -AA as a shortcut for agent forwarding with auto-approval, and a new --path flag opts into a Homebrew/Linuxbrew/Go-friendly PATH prepend (otherwise your remote command goes over the wire verbatim). - Tailscale resource lists and Quick Connect suggestions hide devices offline for more than 30 minutes. - tssh resume retries with exponential backoff for up to 24 hours, instead of giving up after a single 30-second attempt. AI Agent - New AWS Bedrock provider routes Claude requests through Amazon Bedrock in your own AWS account, reusing the existing Cloud account flow (Access Keys or SSO/STS). Local Shell - Command substitution and arithmetic expansion: $(...), $((...)), and backticks now expand at the prompt instead of being passed through literally. - Plain parameter expansion ($VAR, ${VAR}, $0-$9, $@ $* $# $? $$ $! $-) now expands at the prompt. Terminal - Per-font cell-width and cell-height sliders (±25%) in Font settings, scoped per font family. Live Activity - A new "Info Only" filter keeps the activity alive on WiFi or Network info alone, without requiring an open terminal or active VPN. BUG FIXES - Fixed a long-standing bracketed-paste hang where a large paste could leave the terminal silently buffering until the next tab focus change. - Fixed an iPhone wedge after returning from background where the UI advanced one frame per touch. - Fixed a terminal size desync after returning from background. - Fixed Backspace in the bundled iOS Vim's INSERT mode. - The watchOS Smart Stack mirror of the Live Activity widget no longer shows a placeholder where the app icon should be. - The AI Agent now re-anchors when the underlying shell context changes; opening it on a tab where you'd SSHed and exited used to keep targeting the previous context. - The AI Agent toolbar menu no longer pulses during streaming. - SSH sessions opened from the local shell now wire up to the agent-approval prompt, so a forwarded-agent identity request no longer silently stalls. - Profile editor validation messages render inline under the offending field. - The reconnect roam banner no longer flickers through several "last seen" timestamps before settling. - Opening Connection Info on iPhone with the keyboard up no longer leaves the keyboard covering the sheet. - Lock-screen Live Activity session totals now aggregate across multiple windows. - Live Activities orphaned by force-quit, OS kill, or crash are adopted in place at launch. - Touch selection handles reappear after backgrounding or dismissing a sheet over a live selection. - Tightened gesture recognizers around vertical scroll vs. the horizontal split-switch swipe.

NEW FEATURES Terminal - iTerm2 inline images (imgcat) now render alongside the existing Kitty graphics protocol support, so "imgcat" draws PNGs and JPEGs inline instead of producing no visible output. Background Effects - Import your own movies from Photos or Files and use them as terminal backgrounds. - A new GPU theme tint recolors photo and video backgrounds toward the active theme, with an adjustable strength slider. AI Agent - Claude Opus 4.7 is selectable in the model picker. - A context window indicator shows how much of the model's input budget the last turn used. - Edits to API keys and custom provider settings now apply to sessions you already have open. - Custom provider models can have per-model context window sizes. - The agent and voice agent now attach to SSH, mosh, and tssh sessions launched from the local shell prompt. - Toolbar menus no longer flicker while a reply is streaming. Connections - SSH usernames containing "@" (Active Directory "user@domain" logins) now work everywhere: ssh / mosh / tssh / scp / sftp / ssh-copy-id, Quick Connect, HSS jump hosts, the AI agent's ssh_execute tool, and git SSH URLs. - DNS for nearby SSH profiles is pre-resolved in the background while you browse the sheet. - Standard SSH connections stream output off the main thread with an adaptive receive buffer, so heavy UI work no longer stalls echo and large pastes finish faster. Location Diary - Port forwards and SSH tunnels now participate in Location Diary Keyboard - Multi-key shortcut sequences (for example Ctrl+A, N) now fire on attached hardware keyboards. Previously they saved but did nothing. - On hardware keyboards, Cmd+Left/Right now jumps to line start/end and Opt+Left/Right jumps by word, matching the Darwin defaults in upstream Ghostty. Local Shell - A new TUI welcome banner adapts to terminal width and uses your prompt theme's signature color. - Common stdin-consuming filters (bat, cat, grep, awk, sed, head, tail, tee, and friends) now accept typed input when run without a file argument, with line editing, multibyte Backspace, and Ctrl-D EOF. Fullscreen - On iPadOS 26, the new persistent window controls auto-hide along with the status bar when in-app fullscreen is enabled. SECURITY - Backported the upstream Vim patch for the modeline RCE (GHSA-2gmj-rpqf-pxvh) - Fixed an SSH encrypted packet length overflow that let a remote peer crash the connection before MAC verification. BUG FIXES - Fixed a background-thread crash inside getenv. - Fixed a hang when a command mixed semicolons with pipelines. - Fixed a main-thread deadlock in ping after a network change that could freeze the whole app. - Fixed a background-autosave crash when the app was sent to the background. - Fixed a crash when recording two shortcuts back-to-back. - Fixed a voice agent crash on audio sessions that cannot support echo cancellation. - Bracketed paste no longer leaks literal "^[[200~" text on remote shells. - Copying a collapsed selection no longer publishes HTML under the plain-text clipboard slot, so a later paste types the intended text instead of markup. - Gemini API keys with the new "AQ." prefix are now accepted. - Swipe-to-delete works again on custom provider model rows. - Ping no longer prints a "network path changed" line every time iOS churns its network path.