ShellVibe 1.10.0

Added

• Terminal: split panes and move between them from the keyboard. ⌘D /
  Ctrl+Shift+D splits side by side, ⇧⌘D / Ctrl+Shift+O splits top and bottom,
  and ⌥⌘ + arrow / Alt + arrow focuses the neighbouring pane. The shortcut
  list has a new Panes group.

Fixed

• SFTP: the file browser no longer reopens its channel every time a terminal
  tab changes, which used to cut off transfers in progress.
• Remote editor: Save writes to a temporary file and renames it over the
  original, so a failed save can no longer leave the file truncated. File
  permissions are kept.
• SSH: a connection whose keep-alive fails is now closed, along with its jump
  hosts, and tunnels no longer reuse it.
• Tunnels: a remote forward the server refuses now reports the error and
  frees its SSH session instead of failing silently.
• Snippets: ${SV:...} builtins are filled in when a snippet is sent from
  the terminal snippet picker or as a startup snippet.
• Host keys: the key type already in known_hosts is preferred, so a server
  that adds a second host key type is no longer reported as a changed key.
• Run history: single-character inputs are no longer masked, which used to
  redact every matching character in the output.
• ssh_config: an Include with a Windows absolute path is no longer read as
  relative to ~/.ssh.
• Billing: signing out and back in no longer leaves backup and sync broken
  until restart.
• Device Link: setting or removing the master password no longer disconnects
  paired phones.
• Links: bare www.host:port/... links in the terminal open again.
• Host keys: the verification hint names the right ssh_host_*_key.pub file.
• Templates: a template saved in another workspace can be replayed instead of
  failing with "host no longer exists".
• Sync: signing in to a different account no longer carries on with the
  previous account's sync. It used to keep that account's key and position,
  so its changes were unreadable to the new account's devices. Sync now stops
  and asks whether this device's data should be added to the new account.
• Cloud Backup: signing in to a different account forgets the previous
  account's passphrase and schedule. The scheduled backup used to upload
  this device's data to the new account's vault, sealed with a passphrase
  that account's other devices could not open. Setup now starts over
  against the new account's own backup.
• AI Access: interrupt and list_sessions no longer wait behind a running
  command. The shellvibe-mcp bridge relayed one request at a time, so an
  agent could not stop a command before it timed out, and busy never read
  true. The bridge also stopped answering notifications with an error.
• AI Access: read-only mode allows cd, seq, cut, tr, basename,
  dirname, and sort and uniq in a pipe.
• AI Access: run_command reports a timeout (timedOut) and output that is
  not text (binary) instead of returning it silently garbled. The less
  hint keeps the file (cat <file>), and list_sessions gives openedAt
  in UTC.

Security

• AI Access: list_hosts and describe_host no longer return a host's
  address and port. Agents only get the opaque host id, as the tool
  descriptions already said.

Verifying your download

Every file is listed in SHA256SUMS:

sha256sum -c SHA256SUMS

The Windows installer is not code-signed

There is no Windows code-signing certificate behind this release yet. Windows
shows "Windows protected your PC" with an unknown publisher. Press
More info, then Run anyway. The warning will not fade with time:
reputation accumulates against a certificate, and there is none. Verify the
checksums above before you run it.

If turning off your operating system's malware protection for an SSH client is
not a trade you want to make, which is a reasonable position, build it
yourself instead:

git clone https://github.com/klc/shellvibe && cd shellvibe
flutter build windows --release