SSH Drop Dispatcher v4.14.1

SSH Drop Dispatcher v4.14.1

What changed

• Fixed intermittent SSH connection failures that could occur when an SSH key or SSH config bundle refresh overlapped a connection attempt.
• SSH bundle imports now avoid rewriting unchanged files and publish changed SSH files atomically, so consumers do not see a partially written key/config file.

Updating

Install the v4.14.1 Magisk ZIP as a normal update over the existing SSH Drop Dispatcher installation. Existing dispatcher state, target configuration and SSH material remain in the persistent runtime state directory.

SSH Drop Dispatcher v4.14.0

SSH Drop Dispatcher v4.14.0

What changed since v4.13.0

• Return Channel v1: SDD can now pull verified result artifacts from an already configured SSH target back to Android. Return collection is explicitly requested, correlated to a completed outbound delivery and verified with SHA-256 before local acceptance.
• Return CLI: adds sdd return capability, request, status, probe, collect, wait and trace operations with machine-readable output and the existing redaction model.
• Return WebUI: adds a secret-safe Returns inventory and bounded manual Return operations without adding a generic remote file browser or remote shell.
• WebUI Core 0.6: improves mobile/state-aware UI behavior, Preview vs Apply wording, inventory caching with explicit live refresh, stale-response protection and responsive navigation.
• More reliable named delivery: sdd dispatch-file now uses a bounded named-file scan rather than triggering a full queue scan for that workflow, reducing lock contention when watcher/follow-up activity overlaps a user-requested delivery.
• Follow-up coalescing: event follow-up scans are single-flight/coalesced instead of being able to fan out into multiple concurrent follow-up processes.

Upgrade

Install ssh-drop-dispatcher-magisk-v4.14.0.zip through Magisk and reboot normally. Existing persistent configuration under /data/adb/ssh-drop-dispatcher is preserved by the normal module update path.

Return Channel is opt-in per target. Existing targets continue to work as outbound-only targets unless a Return sidecar is configured.

Safety model

Return Channel is a pull-based data path initiated by Android. It does not add target payload auto-execution, arbitrary remote commands, RPC, incoming SSH access to Android or a generic remote file browser.

Current limitation

Python payload delivery remains unsupported by the dispatcher delivery policy.

SSH Drop Dispatcher v4.13.0

SSH Drop Dispatcher v4.13.0

What changed since v4.12.6

• Dispatcher-owned target verification: target readiness, remote shell verification and remote SHA-256 parity are now owned by the dispatcher before a delivery is marked complete.
• CLI v3 workflow: adds delivery tracing, queue/failure/quarantine inspection, read-only preflight, dispatch-file --wait, delivery receipts, incident context and secret-safe ChatGPT context.
• New standalone WebUI: moves administration to WebUI Core 0.3.0 with local-only access, typed/allowlisted operations and stronger session handling.
• Safer target/profile editing: adds typed repeated-record editing, alias canonicalization, preview-before-apply, bounded import/export and secret-aware export handling.
• Better WebUI usability: adds faster local status, bounded inventory views, background jobs, clearer result summaries, stronger confirmation gating and improved mobile record focus/navigation.
• Target readiness UX: adds Test all enabled targets, which checks configured targets sequentially without delivering an artifact and reports intermittent-unavailable targets separately from real readiness failures.
• ntfy and Sortify visibility: adds secret-safe ntfy configured/not-configured status and a read-only Sortify companion inventory.
• Support improvements: support bundles now derive their version from module metadata and Android command handling is more robust in the Magisk/Termux environment.

Upgrade

Install ssh-drop-dispatcher-magisk-v4.13.0.zip through Magisk and reboot normally. Existing persistent configuration under /data/adb/ssh-drop-dispatcher is preserved by the normal module update path.

Current limitation

Python payload delivery remains unsupported by the dispatcher delivery policy.

SSH Drop Dispatcher 4.12.6

SSH Drop Dispatcher 4.12.6 final.

Promotes the rc2 low-latency target-only watchdog after runtime verification and latency smoke.

Verified from rc2 smoke:

• automatic_delivery=PASS
• measured_latency_seconds=37
• last_delivery_latency_seconds=28
• target_only_trigger_gate=PASS
• target_only_scan_log_gate=PASS
• Sortify policy v4115 unchanged
• host_run=no
• no DNS/HA/VIP/route changes

SSH Drop Dispatcher v4.12.5

SSH Drop Dispatcher v4.12.5

Finalizes duplicate-alias guard after Pixel/Magisk runtime smoke.
Sortify marker policy remains v4115. No host-run, DNS, HA, VIP or route changes.

SHA256: d8deb3f4b220e24668687ecd21e21159208ae98e478fea7eb70667af619e2df3

SSH Drop Dispatcher v4.12.0

SSH Drop Dispatcher v4.12.0

Stable release after rc2 runtime smoke passed on Pixel/Magisk.

Highlights

• WebUI and CLI controls for enable/disable and dispatch-now.
• Strict target-prefix routing: only policy-clean target-*__* / targets-*__* artifacts route remotely.
• Sidecar queue ignore for *.sha256 and similar verification files.
• Per-target SCP flags with BerylAX/OpenWrt Dropbear legacy-SCP fallback -O.
• Sortify marker contract unchanged: dispatcher-authoritative v4115 marker policy.

Verified runtime smoke

• pi4 dispatch: PASS
• BerylAX legacy SCP dispatch: PASS
• strict unprefixed ignore: PASS
• sidecar ignore: PASS
• dispatcher quiet after delivery: PASS
• DNS/HA/VIP/route changes: none
• host execution during smoke: none

Known verification notes

• Validate with /data/adb/ssh-drop-dispatcher/ssh/ssh-config.dispatch; plain Termux SSH aliases can use the wrong key context.
• OpenSSH post-quantum warning lines can precede command output; SHA parsers should filter digest lines.
• Root su -c may not provide writable HOME; use explicit temp paths or set HOME.

SSH Drop Dispatcher v4.11.0

SSH Drop Dispatcher v4.11.0

Final public release promoted from the fully verified v4.11.0-rc7 line.

Highlights

• Registry-based filename routing for imported target registries.
• Sortify release marker contract with policy=v4115.
• Prompt-safe private-runtime export/import and migration support.
• Interactive dispatch-config setup and repair command.
• Backup/restore, WebUI files and Magisk action fallback.
• Public package contains no private targets, private IPs, private paths, host inventory or SSH keys.

Asset

• ssh-drop-dispatcher-magisk-v4.11.0.zip
• SHA256: 3fcd5a7c33d4ed79bed6e7e0bb8c5bffede0ad30b294b4ce38ad60aad7e8f617

Update metadata

• update.json points at this final release asset.
• update-rc.json remains the RC channel.

SSH Drop Dispatcher 4.11.0-rc7

SSH Drop Dispatcher 4.11.0-rc7

Prerelease asset for the public Magisk module.

Fix in RC7

• Polishes the Magisk installer banner so flash logs show 4.11.0-rc7 instead of the stale RC5 text.
• Carries forward the RC6 load_target_registry() return-code fix.
• Keeps RC5 registry routing and Sortify marker contract behavior.

Asset

• ssh-drop-dispatcher-magisk-v4.11.0-rc7.zip
• SHA256: 9b855c9b5dc1a59280612bdc8f86b0077f6b749bc9e9583503187d3b574216d3

Use dispatch-config after flashing or restoring private runtime data.

SSH Drop Dispatcher 4.11.0-rc6

SSH Drop Dispatcher 4.11.0-rc6

Prerelease asset for the public Magisk module.

Fix in RC6

• Fixes the RC5 load_target_registry() return-code bug that could make --runtime-status and --doctor exit with rc=1 when target configs omit optional verify=.
• Keeps RC5 registry routing and Sortify marker contract behavior.

Asset

• ssh-drop-dispatcher-magisk-v4.11.0-rc6.zip
• SHA256: f90d36decc85646f9738823ccaf31f876ae3df85350384bf08f1f615fbd8ff86

Use dispatch-config after flashing or restoring private runtime data.

SSH Drop Dispatcher 4.11.0-rc5

SSH Drop Dispatcher 4.11.0-rc5

Public Magisk release candidate.

Scope

• Registry-driven filename routing from runtime target files.
• Sortify release marker directory and completion marker contract.
• Prompt-safe private-runtime export retained from rc4.
• Public defaults only; no private targets, paths, IPs, keys, or legacy author metadata.

Asset

• ssh-drop-dispatcher-magisk-v4.11.0-rc5.zip
• sha256=cca590647efd4fc945b7d0d13118c1f8b390cdf321b01eeecd4b9540e8d61b5b