v0.15.1 — SSH Security Fixes & Build Improvements

Security

• SSH Host Key Verification (ssh_session.npk): Connections are now aborted if the server's host key does not match the known-hosts database. Previously, host key verification was stubbed out, leaving SSH sessions vulnerable to MITM attacks.

Bug Fixes

• SSH Port Forwarding Rule Iteration (ssh_forward.npk, connection_manager.npk): fwd_apply_profile_rules now correctly iterates over all comma-separated forwarding rules from the connection profile. Local port listeners are spawned for all configured forwarding rules immediately after successful authentication.
• SSH Bind Port / Channel ID Parsing (ssh_session.npk): The forwarded-tcpip payload now correctly extracts bind_port for multi-rule remote forwarding. Channel EOF/CLOSE packets now correctly extract recipient_channel_id before dispatch to forwarding close handlers.
• Plugin Manager Sidebar Visibility (plugin_manager_ui.npk): nitty_gtk4_sidebar_set_visible shim calls are now active, restoring sidebar show/hide functionality.
• Variable Shadowing (profile_editor.npk, ssh_vault.npk): Renamed ok → ok_val to resolve compiler variable-shadowing warnings.
• Serial Toolbar (serial_toolbar.npk): Removed unused nitty_serial_toolbar_create import.

Build

• build.abc: Replaced -Wall -Wextra with -w for the gtk4_shim target to prevent GCC deprecation output from filling the npkbld subprocess pipe buffer during parallel compilation of the large nitty_gtk4_shim.c (caused intermittent build hangs).

---

Full Changelog: https://github.com/alternative-intelligence-cp/nitty/blob/main/CHANGELOG.md

v0.9.1 — Serial Modes, SSH, SFTP

What's New

Serial I/O Modes (src/serial/serial_modes.npk)

• RAW input mode — every keystroke forwarded immediately
• TEXT input mode — buffer until Enter, basic echo
• READLINE input mode — full line editing: arrow keys, backspace, history (up to 100 entries per pane, 64 pane slots), cursor navigation (Home/End/Left/Right/Del)
• TEXT output mode — pass bytes through to VT parser
• HEXDUMP output mode — xxd-style hex+ASCII dump with running byte offset per slot
• Newline conversion for send/receive (CR / LF / CRLF / NONE)
• Slow-feed with per-character and per-line delays (for paste into buggy firmware)

SSH & SFTP

• SSH session management with password, public key, and agent authentication
• Known-hosts verification and management
• SFTP browser and file transfers
• Port forwarding and jump host relay
• Connection Manager UI panel

Compiler Requirement

Requires npkc ≥ v0.60.7.

This release removes the _ensure_init workarounds that were needed to work around Issues 7 & 8 in the compiler. Those issues are now fixed in npkc v0.60.7.