v1.1.65
✨ Release Highlights
🔐 Per-host SSH authentication modes
Hosts can now declare how they log in: Automatic, Password only, Key, or Certificate. The same policy applies across direct SSH, jump hosts, SFTP, port forwarding, Mosh, and EternalTerminal, so a password-only host stops probing local keys everywhere instead of only on some paths.
Automatic mode still tolerates an unavailable agent and keeps convenient key discovery. Hosts that inherit a group authentication policy keep following that group until you override them, including future group policy changes. Ordinary host edits also preserve the login policy that was effective before save, so casual form work does not silently change auth behavior.
🛡️ Safer MFA, EDR step-up, and password-only login
Keyboard-interactive challenges that look like secondary / EDR passwords (including Chinese “二次认证密码” banners) open a clean MFA modal instead of auto-filling the host login password. Save-password is suppressed for true second factors, while Duo-style Password+OTP multi-prompt forms still prefill and allow saving the password slot.
After publickey partialSuccess, Netcatty still auto-fills a following Password challenge when that is the next required factor. Password-only hosts no longer fall back to ~/.ssh default keys after a bad password, which previously made wrong credentials look fine on direct login but fail on ProxyJump and SFTP.
📋 Cleaner terminal copy from soft-wrapped selections
Copying from the terminal now normalizes soft wraps and written padding so multi-line selections reassemble into readable prose instead of glued tokens or broken paths. Heuristics cover CJK, URLs and query strings, Windows paths, CLI flags, hyphenated wraps, and sentence boundaries after complete URLs.
A new Normalize text on copy setting makes this cleanup optional when you need the raw buffer. Column selections and Windows CRLF are preserved so bulk copies stay usable in editors and tickets.
🖥️ Terminal stability under flood and workspace polish
Line-timestamp gutters survive heavy flood output without thrashing markers or freezing scroll: bulk prune, deferred measure, scroll throttle, and capacity sized to the full scrollback setting. An xterm black-block rendering glitch is fixed, and the workspace pane X control again closes the session as expected instead of only detaching the pane.
Download based on your OS:
| OS | Download |
|---|---|
| Windows |  |
| macOS |   |
| Linux |         |
What's Changed
- Update Nix release metadata for v1.1.64 by @binaricat in #2149
- fix(ssh): show MFA modal for EDR secondary passwords (#2150) by @binaricat in #2151
- fix(ssh): password-only hosts must not fall back to default keys (#2079) by @binaricat in #2153
- Fix xterm black block rendering by @binaricat in #2165
- Add per-host SSH authentication modes by @binaricat in #2155
- fix(terminal): prune line timestamps in bulk under flood output by @binaricat in #2164
- fix(terminal): normalize soft wraps and padding when copying selection by @binaricat in #2163
- fix(terminal): restore workspace pane X to close session by @binaricat in #2166
Full Changelog: v1.1.64...v1.1.65
