七麦数据

Support for post-quantum key exchange algorithms: mlkem768x25519-sha256, mlkem768nistp256-sha256, mlkem1024nistp384-sha384.

Pro users can enable Live Activity from Settings > Advanced or by long-pressing settings button in terminal to follow the active terminal on the lock screen and in the Dynamic Island on supported devices.

Fixes issue from last update where some custom keys on keyboard bar would have empty keycaps despite being assigned.

'notify' and 'widget' commands support image payloads also delivered from shell to app using end-to-end encryption. Update Shell Integration scripts and run the commands without arguments for instructions.

Accept OSC 52 sequences with empty target for copying to clipboard.

Fixed issue where terminal would sometimes lose rightmost characters when resizing window.

Adjustments to background colors on keyboard bar in light mode to make it clearer when keys are pressed.

Fix issue where custom key configured for Paste would capture all keyboard bar touch events to the left of the Paste key.

Configure whether to use CoreFoundation, plain BSD or Multipath TCP for connections inside Settings > Advanced.

Fix to allow copying public key to clipboard directly from SSH key list.

Last update had improvements to handling of .ts.net hostnames allowing the Tailscale on-demand VPN time to start, but would also sometimes introduce a delay for .ts.net hostname if the VPN was already started. This has been improved to avoid delays.

New setting to allow manual certificate import on SSH keys which was removed when I added support for CAs. This is accessible from the gear menu when adding a new Certificate Authority and enabled by default if the app detects previous manual certificates.

Improved handling of .ts.net hostnames for better compatibility with Tailscale VPN.

This is especially useful with multi-address hostnames like
MyMac.local, my-mac.tail2faa9.ts.net
which first attempts a local network connection before falling back to Tailscale.

Running servers listed for Digital Ocean or Hetzner have button to start terminal whether or not a ShellFish configuration exists for each server.

Fixed issue where control sequences like ^X in snippets would be confused with literal caret followed by a letter.

Support for synchronized terminal output mode where server can ask for terminal updates to be deferred until all updates have been sent. This makes Claude Code updates nicer.

Certificate Authority feature uses in-app browser for authentication such that no browser tab is left open.

Error message is shown when Hetzner API key is wrong during Sign In.

Quick Terminal feature works correctly for terminal-only windows.

Fix issue where terminal word wrap was disabled when restore-cursor sequence was used before save-cursor which would often happen for Claude Code.

Improve Certificate Authority with keyId/principals in signing request and PKCE for OAuth.

Fix Unicode variation selectors taking up terminal cell width causing weirdly wrapped terminal lines.

Server groups now display more clearly in the Files app

Fixed an issue where favorite folders could be forgotten in the Files app

Help page now mentions Hetzner alongside Digital Ocean as a supported provider

Uploads and downloads are allowed to use additional memory and CPU to increase transfer speeds on fast networks.

Hetzner servers can be created and managed from Cloud Servers screen.

Drag enbries in server list to customize their order instead of the default alphabetical sorting. Previously, drag and drop could only move servers between groups.

Initial support for short-lived SSH certificates generated on-demand by a Certificate Authority with authentication through OpenID. Configure your CA from the key-plus button above the list of SSH Keys, enter the URL + root certificate fingerprint and authenticate through the browser.

You will then able to pick this CA instead of a SSH key when configuring the server and during authentication your existing unexpired certificate will be used or a new one will be issued and used requiring you to repeat browser-based approval. This browser-based approval isn't possible for connections coming from Files app that will fail if the current certificate has expired.

Includes changes from 2025.36

When approving the use of agent keys, you can configure the approval to last 5 minutes, 60 minutes, or while the connection is active.

Import of servers from CSV files started from the + button above the server list has been improved. When the ID field is assigned, existing servers are matched and updated rather than duplicated. A confirmation screen shows which servers will be added, updated, or left unchanged, along with which fields will change. There's a toggle to delete previously imported servers missing from the import file.

CSV server import has a field for public key, which can contain either the name of the public key, the full public key with or without comment, or the SHA256 fingerprint.

Improvements to terminal when using emoji and side-by-side sessions in tmux.