Finder and Files no longer get stuck on "Syncing paused". A location that had stopped syncing could stay that way indefinitely, with no error and no way back short of removing and re-adding the app. uSSH now re-reports its servers whenever the system and the app disagree about what has been seen, so a lost update repairs itself instead of wedging the location permanently. Much less background work. Opening Files or reconnecting could start a cycle that re-listed every server's files over a fresh connection every few minutes, draining battery and data for no result. That cycle is gone: uSSH now picks up where it left off and re-checks only what actually arrived. Far less writing to your disk. Keeping track of what each server folder contained rewrote the whole record every single time a folder was listed, so browsing a large server could write hundreds of times more to your drive than the information warranted. That record is now updated a row at a time. Settings > Diagnostics > Disk Write Activity shows what uSSH is writing and will say plainly when it is not the cause. System directories are left alone. Folders like /dev and /proc -- and the ones inside FreeBSD jails and Linux containers -- are no longer watched or listed. On a router or firewall these hold hundreds of constantly changing entries that could never finish syncing. System filesystems are identified by asking the host. When a location connects, uSSH runs one read-only command to find the filesystems that are not really files -- /proc, /sys, /dev and the like, whose contents the kernel makes up as they are read -- and leaves them out. This matters for safety, not tidiness: some of them never end when read, and writing to others can reconfigure or halt the machine. Endless directory trees can no longer run away. On some hosts a link or a mount points back at a folder above it, so browsing could descend forever, doing real work on every level and writing steadily to your disk. uSSH now recognises a tree that leads back into itself and stops -- and if one was already recorded, it is cleared without touching the host. Live updates on FreeBSD. The optional change-feed helper now supports FreeBSD hosts, including OPNsense and pfSense firewalls. Turning off a server's Finder integration now clears it properly, instead of leaving its files behind a spinner. Pasting into tmux is reliable again. If your tmux prefix was a control key that can appear in ordinary text (Ctrl-J, for example), pasted lines could arrive merged together with characters missing. Pasted text is now never read as a keyboard shortcut. The title bar's colour is now optional. A verified host tinted the window green and an unverified one dark yellow -- and since most servers publish no SSHFP records, most people saw yellow permanently. Settings > Appearance can now turn that off and leave ordinary window chrome; the mark beside the connection still reports the verdict, and a host key that contradicts its published record still turns the title bar red. On iPhone and iPad, uSSH now knows your device's real name. The default tmux session name is derived from it, so two iPads no longer end up sharing one session name -- previously iOS only told the app the model ("iPad"). Plus: the host-key verification flyover no longer flashes open when the pointer merely crosses the mark.

This release implements full support for RFC5011 in preparation for IANAS root dnssec key rotation. uSSH checks SSH host keys against DNSSEC-signed SSHFP records, anchored at the internet's root keys. It already picks up a new root key on its own. It now also honours the retirement of an old one: once the root zone publishes a key as revoked, uSSH stops trusting it, permanently and without an app update.

New features: - Block-delta uploads — only changed 1 MiB blocks are sent, applied in place so inode, hard links and xattrs survive, with a rollback journal. Verified tonight at 28 MiB sent instead of 20 GiB. - Out-of-band changes now sync — a file another app changes on disk (a mounted disk image, an encrypted volume) reaches the host, including while uSSH isn't running. Visible improvements - Live upload progress in the Finder/Files ring, tracking bytes actually sent. - One app-wide Finder credentials switch, reconciled across devices instead of drifting per bookmark. Reliability - Editing a file in place no longer produces a " 2.txt" rename dance or a stuck error badge; hard-linked files stay linked; modification dates stop churning; a fresh install retries a transient "No route to host"; and after an app update a stale extension steps aside for the new binary instead of silently lagging.

A bug in where the file extension would crash when it was scanning large directories would prevent uploads from showing as completed even if they were actually uploaded successfully has been resolved.

Bugs have been fixed in the theme selector and in the way the mac version handles overflow of connections in single window mode.

1. Agent forwarding, per bookmark. Turn on "Forward the SSH agent" and programs on that host, such as git, ssh to a second hop, or a deploy script, can use your keys through the connection, like ssh -A. Every request a remote program makes is approved on your device first, and the prompt says which host asked, which key, which account it is authenticating as, and which server it is going to. In tmux sessions the forwarded agent keeps working after you reconnect. 2. Drop files and screenshots into a session. Drop a file on a terminal, or paste a screenshot into it, and uSSH copies it to the host and types its path, exactly what a program like Claude Code expects from a drag. Copied files paste the same way. On iPad, drop from Files or Photos. 3. Review pastes with your own model. Point the paste check at a model server you run, such as Ollama, LM Studio, or any OpenAI-compatible endpoint, instead of the on-device model, with a picker for the server's models, a wait budget, and a Test button. Off by default; only the paste under review is sent, only to that server. 4. Paste guard catches assembled commands. A command built from string slices or hex escapes, the classic way to hide rm -rf inside innocent words, is now flagged by the deterministic rules, whatever a model says. 5. iTerm2-style pane shortcuts. A setting adds iTerm2's keys to tmux windows: ⌘D and ⇧⌘D to split, ⌥⌘-arrows to move between panes, ⌘] and ⌘[ to cycle, ⇧⌘Return to maximize, ⇧⌘] and ⇧⌘[ for tabs. 6. Clearer tmux panes. The pane that takes your keystrokes is unmistakable: inactive panes show a dimmed, blinking underline cursor, and so does the whole terminal when uSSH is not the front app. Clicking a pane always moves the keyboard there, and every pane's scrollbar is reachable.

Live updates in Finder and Files Remote folders now refresh on their own. A small signed helper, ussh-fsmonitor, runs on the host over the existing SSH connection and streams changes back; uSSH installs and upgrades it for you and verifies every copy against a key published in DNS. It watches only the folders you have open, so a busy home directory costs nothing, and the extension keeps a feed alive briefly even when the app is closed. Resync Now really resyncs, deletions reach Finder, and root@ bookmarks can opt in. Paste safety Right-click paste, and a confirmation before any multi-line paste. A built-in rule set flags dangerous commands, and on Apple-silicon devices the on-device model reviews the clipboard and streams its verdict into the sheet, with a red Paste button when the risk is high. A quiet mode lets routine pastes through while still holding anything the model dislikes. Find in scrollback ⌘F searches the scrollback of shell tabs and tmux panes alike, on Mac and iPad. In tmux it can escalate into the pane's full server-side history, and the local scrollback follows the pane's own history limit. tmux across devices Shared sessions get a size lock with ownership: the first device to lock a window keeps its size, others see a scaled view instead of fighting over the grid. Session names are per device, and closing a session's last window no longer disconnects you. Selection Option-drag block selection on the Mac for copying columns out of TUI panels. Shift-drag selects text even inside mouse-aware programs such as btop or tmux with mouse mode on. Keys and trust Passphrase-protected OpenSSH keys import directly. DNSSEC trust aot key rollovers the RFC 5011 way, so validation keeps workingacross the October rollover without an update, and the pre-connect terminal log narrates every DNSSEC and SSHFP step. Finder and Files locations Symlinks are followed on the server, so linked folders such as /ookmarks mount read-only by default with a per-bookmark override. Bookmarks ShellFish-compatible CSV import and export, Duplicate in the context menu, a keyboard-driven launcher filter, and a status bar that shows scrollback size and memory. Fonts on iOS Import TrueType and OpenType fonts from Files, with a verbatim preview, and a font floor of 6 pt for dense layouts. Diagnostics A production debug log you can share from Settings, now including log.

Bugfixes and small ui updates to bring the macos and ios versions to parity