v11- churring

Full Changelog: v10...v11

nightjar 11.0 — release notes

The churring release: the bird's own song, and the house at full stretch.

11.0 — 2026-10-21 — churring

• Churring opens. The eleventh version is named for the nightjar's own song — the long churr the male pours across the dark, unbroken, unmistakable once you have heard it. Chorus was every voice at once; churring is the bird itself, at full stretch: a bench of instruments, a battery that runs itself, and the house on two kinds of glass now. What churring comes to mean will be written here as it lands.
• One name. The house is nightjar everywhere — the repository, the app, the source a sideload reads — no hyphen, no second word. Nothing about an existing install changes: the bundle, the keys, the name the phones call each other all stay exactly as they were.
• A Mac in the house. The whole instrument stands on macOS now, native: the sidebar shell, its own boot film shot for a laptop screen, the wheel and the console at desk size. The phone remains the flagship; the laptop is the bench it comes home to.
• The pentest bench. The console grows a full bench of graded audit instruments — twenty-three at the count: the web read (robots, webaudit, vhost, dirb, subdomains, methods), the name and the lock (axfr, dnsaudit, tlsgrade), the loud old doors (reflect), the brokers and the directory (mqttprobe, ldapprobe), and the second wave — corsprobe, openredirect, graphqlprobe, jwtcheck, proxyprobe, ftpprobe, smtpprobe, redisprobe, dockerprobe, vncprobe, rdpprobe. Every one knocks once, reads what answers, and grades it in the open. help was rebuilt to read whole on any screen, the narrowest phone included.
• EAZY. One button beside RUN, one word to the console or to Skelli: the full battery. Doors are read, the right probe walks to each open one, the gateway takes its extras — SNMP posture, the reflector doors, the resolvers' agreement — and the whole run files itself in Deliveries with its findings counted. Aim it at your network, at one named host, or — on the Mac — at an access point by name, graded from the air before you ever join it.
• Skelli takes the console. She is plugged into the Blacksite through her chat now: give her a command, an audit, the battery itself, and she runs it on her own shell and reads the results back with judgment — long output filed, the head spoken. Her hands grew with it: she sends payloads built with a purpose against a named target, collects the street's addresses on request and reports them, forgives a near-miss tool name, and answers to eazy like everyone else.
• The wide net. The census knocks the whole street properly now: a liveness pass that hears a closed door's fast refusal as a pulse, the full door list on everything alive, twenty-two Bonjour services browsed, an SSDP round — the neighborhood board fills with the house as it actually is, sleepers and all.
• Black Glass. A ninth theme joins the walls: black glass, silver light. It is worn properly — the operator's own words in her chat and every prominent button in the house are lettered for it, black on silver, readable at a glance.
• For everyone in the world. Nothing of any one house is baked into this app: no address, no subnet, no gear. Every default is drawn live from the wire of whoever is holding it — their gateway from their route table, their board from their street — or it falls to a universal, or the app says plainly that it does not know.
• Honest instruments. The bench's web eyes work past the local wire now — cleartext targets anywhere can be audited, as a bench must. And tlsgrade grades the version a connection actually negotiated, never the label on the attempt: when this device's own stack cannot test an old lock, the tool says so instead of guessing.
• A door for problems. The repository takes reports through proper issue forms now, and a vulnerability never travels in public — the security page routes it privately, to be fixed before it is spoken of.