Oryxis: baixar versions anteriors

What's Changed
- feat(snippets): add clipboard paste and run action by @hamidrg20001379 in #257
- fix(app): a dragged tab follows the cursor as Chrome does, then lights up by @shideqin in #263
- fix(terminal): delegate IME focus to active text inputs over the canvas by @cesszlr in #264
- fix(terminal): send ESC prefix on Alt/Option + Backspace for word deletion by @cesszlr in #265
- fix(macos): isolate tab drag from implicit titlebar window movement by @cesszlr in #267
New Contributors
- @cesszlr made their first contribution in #264
Full Changelog: v0.21.0...v0.22.0

What's Changed
- fix(net-tools): the traceroute raw output reads on a Chinese Windows by @shideqin in #249
- Add terminal copy shortcuts and remove Copy All by @hamidrg20001379 in #253
- Add user-defined terminal shortcut sequences by @hamidrg20001379 in #254
Full Changelog: v0.20.1...v0.21.0

Oryxis 0.20.1
A patch release. The app starts again on Intel integrated GPUs whose Vulkan driver predates the 1.3.215 spec revision, and the AI chat speaks to Gemini 3 models with the thinking switch that generation accepts.
Fixes
- Windows: the app starts on Intel integrated GPUs whose Vulkan driver predates spec 1.3.215 (UHD 630, Ice Lake) (#248, reported by @koobs). On 0.20.0, setting WGPU_BACKEND=dx12 gets past it.
AI chat
- Gemini 3 models think at the lowest level with Reasoning off, the switch Google keeps for that generation; Gemini 2.5 models keep their thinking budget of zero.
- A newly selected Google Gemini provider suggests gemini-3.8-flash; a model already chosen stays.
Full Changelog: v0.20.0...v0.20.1

What's Changed
- feat: add native FIDO2 SSH authentication on Windows by @Rulio723 in #237
- fix(i18n): localize SSH connection progress by @Rulio723 in #239
New Contributors
- @Rulio723 made their first contribution in #237
Full Changelog: v0.19.0...v0.20.0

What's Changed
- fix(sync): set actual paired device name from settings by @mediclab in #224
- fix(sync): a re-typed passphrase falls back to the saved one by @shideqin in #228
- refactor(toolbar): one shared icon-button helper for the toolbar squares by @shideqin in #233
- test(sftp): the entry-name guard is asserted per platform by @shideqin in #235
- feat(hosts): a multi-select mode, batch connect and batch remove by @shideqin in #234
Full Changelog: v0.18.0...v0.19.0

What's Changed
- bugfix: sync ssh private keys fix by @mediclab in #221
New Contributors
- @mediclab made their first contribution in #221
Full Changelog: v0.17.0...v0.18.0

What's Changed
- feat(terminal): export visible screen to clipboard by @hamidrg20001379 in #198
- feat(terminal): confirm remote links and tunnel their loopback callbacks by @kblock1 in #200
- feat(tabs): opt-in confirmation before closing live sessions by @shideqin in #204
- feat(sidebar): multi-select with bulk copy, delete and download in the Files browser by @shideqin in #205
- test(sftp-shell): a rooted local path is asserted by where it resolves by @kblock1 in #214
- fix(sftp): the new-entry dialog takes the keyboard the moment it opens by @kblock1 in #215
- fix(terminal): notice when a local shell exits, instead of freezing its pane by @kblock1 in #212
- feat(terminal): a split tab's pane ends on its own terms, and the bar follows it by @kblock1 in #213
- feat(terminal): a pane can leave its grid, into its own tab or another by @kblock1 in #216
- fix(terminal): hold a scrolled-up viewport in place while new output runs by @shideqin in #218
New Contributors
- @hamidrg20001379 made their first contribution in #198
Full Changelog: v0.16.0...v0.17.0

What's Changed
- feat(drops): a per-host opt-in that carries OS drops into containers by @shideqin in #192
- fix(sidebar): the Files rows answer Delete and Menu, with or without the ring by @shideqin in #191
- fix(ssh): a command proxy could never connect on Windows by @kblock1 in #195
New Contributors
- @kblock1 made their first contribution in #195
Full Changelog: v0.15.0...v0.16.0

What's Changed
- fix(tabs): scope PTY key gate per connecting tab by @shideqin in #177
Full Changelog: v0.14.0...v0.15.0

What's Changed
- fix(window): sync maximized state with the OS by @shideqin in #142
- feat(vault): confirm manual lock before teardown by @shideqin in #152
- fix(port-forwards): keep retrying a dropped forward under auto_reconnect by @latent-9 in #149
- fix(harness): sandbox the vault on Windows by @shideqin in #153
- fix(logging): clear the debug log on Windows by @shideqin in #154
- Move sync blocking work off the UI thread by @shideqin in #164
- Fix git sync hangs and restart decrypt failure by @shideqin in #165
- fix(keynav): settings fields keep Tab and arrows by @shideqin in #166
- Fix sync passphrase reopen drift and unify passphrase handling by @shideqin in #170
Full Changelog: v0.13.0...v0.14.0

What's Changed
- Monospace IDX terminal theme by @BabakAmini in #129
- Fix terminal drag-and-drop not working when Dashboard view is active by @shideqin in #130
- Fix home tab scrolling away when tab strip overflows by @shideqin in #128
- Show actual connection state in the status bar instead of always connected by @shideqin in #131
- docs: document the oryxis-archive crate by @latent-9 in #136
- Align tab UX with Termius conventions by @shideqin in #132
- Fix inactive-tab close button flickering by @shideqin in #133
- fix(terminal): clear stale terminal modes on session attach by @shideqin in #137
- feat(editor): reveal stored host credentials via the eye toggle by @shideqin in #138
- Join soft-wrapped lines in terminal copy by @shideqin in #141
New Contributors
- @BabakAmini made their first contribution in #129
- @latent-9 made their first contribution in #136
Full Changelog: v0.12.0...v0.13.0

Oryxis 0.12.0
The workspace and community release. Settings now opens as a tab beside your sessions, a dragged tab becomes a split pane right where you drop it, and community themes have a home you can contribute to on GitHub, with the first contributed pair already in. Underneath, port forwards to one host share a single SSH connection, 2FA servers authenticate properly, and the debug log can no longer record a secret.
Settings and themes
- Settings is a tab (#120). It gets a chip in the strip the first time you visit, so tuning something against live content (tab bar options, terminal theme, status bar segments) is one click back and forth. The chip drags and reorders like any other tab, each section remembers its scroll position, and closing it returns you to the tab you were on.
- Community themes (#118). The repo has a themes/ directory you can contribute to with a browser-only pull request, and both in-app theme galleries carry a card that opens the gallery at https://oryxis.app/themes; Copy there pastes straight into Import. First contribution: True Black OLED by @AC-Lover, a true-black UI theme with a matching terminal palette. Night Owl and Night Owl Light join the built-in set, backed by a new contrast test suite over every shipped palette.
- Theme galleries. The terminal and app theme grids move into scrollable gallery modals; Settings shows one card, the theme in force. Deleting a custom theme now asks first.
- Settings > Terminal regrouped. Appearance kept what is actually appearance; Notifications, Integration, Sidebar and Split panes got their own headers. "ZMODEM download folder" is now "Default download folder".
Tabs and split panes
- Drag a tab into the terminal (#112). Release a dragged tab over the content area and its sessions merge into the tab showing there; where you release picks the split. A grouped tab moves all its panes, and live sessions survive the move.
- Tab numbers, duplicate placement and host address (#110, based on work by @shideqin). Optional tab numbers with Ctrl+digit counting tabs the way the numbers read; Duplicate Tab lands next to the original (or end / start); an optional second line shows the host address, masked under Privacy Mode. Labels are measured in pixels now, so mixed Latin/CJK labels stop overflowing.
- Uniform tab width (#112). Sizes every tab to the widest label so the strip stops reflowing when you switch tabs, with a small / medium / large ceiling.
- Split panes (#113). The focused pane gets a visible accent outline (a setting can bare the inactive ones), Ctrl+Shift+Z zooms the focused pane to the whole tab and the zoom follows focus, the seam between panes is the resize handle, and an optional pane gap gives the layout air.
- Closing a grouped tab asks first and names how many sessions are at stake; destructive confirms now say Cancel instead of a second "Close" (#112). "Close other tabs" and "Close all tabs" tear sessions down properly instead of leaving connections and forwards running invisibly.
Terminal
- PRIMARY selection (#106). Selecting sets an X11-style buffer separate from the clipboard; middle-click pastes it, Shift+Insert is the keyboard twin, and a faint ghost band shows what the next paste will insert.
- Drag-and-drop upload (#106). Drop files or folders on a pane to upload to that pane's host: SFTP on the live connection when the shell's cwd is known, ZMODEM fallback otherwise, quoted paths pasted into a local shell. One progress overlay with cancel covers both.
- Mouse buttons as shortcuts. Middle, Back and Forward bind to actions in Settings > Shortcuts like keyboard chords; Back / Forward walk directory history on file surfaces first (#114).
- Typing snaps back to the live edge (#111). Now on by default, and triggered only by bytes actually reaching the PTY.
- Copy works over a recording, along with select-all and scrollback paging, using your own bindings.
- Fixed: the find bar fits a narrow pane without losing its close button; no more "New output"

Oryxis 0.11.0: remote apps on your screen, live vitals in the sidebar, and a window you can rearrange
Disclosure: this release note was drafted with assistance from LLM and edited by Wilson Glasser, the project author. The engineering decisions are mine; the LLM helped with the code and turn the changelog into prose.
Oryxis is a Rust-native SSH client built on iced with a russh engine. Where 0.10.0 went down into the trust layer (an ssh-agent for the whole system, certificates, security keys), 0.11.0 goes outward into what a session can show you. Remote GUI applications now draw on your local display. Every SSH tab can report the host's CPU, memory, disk and network without installing anything on the server. Host folders nest. And the window itself became rearrangeable: the tab strip docks to any edge, the sidebar to either side.
Remote applications on your local display
X11 forwarding is in, as a per-host toggle that also imports from ForwardX11 in your ~/.ssh/config. Run xclock, a Java installer or a vendor's GUI admin tool on a server and it draws on your screen.
The part worth explaining is the cookie handling, because getting it wrong is how X11 forwarding leaks a desktop. Oryxis never hands the remote host the real cookie of your local display: on a multi-user server, anyone able to read a forwarded .Xauthority would gain full access to your session, keystrokes and screen included. Instead a fake MIT-MAGIC-COOKIE-1 is minted per session and announced to the server. Every X11 channel the server opens back must present that fake cookie, which is verified in constant time and swapped for the real one before a single byte reaches your X server. A mismatch closes the channel. That is exactly what OpenSSH does, down to the timing-safe compare.
Getting $DISPLAY right across three platforms took more care than the protocol did. Linux and BSD get the unix socket; macOS gets the XQuartz launchd path, whose socket file name literally ends in :0 and which a naive parser silently breaks; Windows has no native X server, so an unset DISPLAY falls back to the TCP endpoint VcXsrv, Xming and MobaXterm serve. Bracketed and bare IPv6 literals, the legacy hostname/unix:N transport form, and displays running with access control off (WSLg, VcXsrv -ac, where the auth is stripped on the way in rather than substituted) all work.
This is trusted forwarding, OpenSSH's -Y. Untrusted mode (-X) relies on the X SECURITY extension, which denies the pointer and keyboard grabs Java and Swing toolkits need, so the enterprise GUIs people actually forward would fail to start under it.
Live host vitals, without installing anything (#83)
A new Monitor tab in the terminal sidebar shows CPU, memory, swap, disk and network for the host you are connected to. It reads them off the SSH connection you already have, on an exec channel multiplexed onto the live session, so there is no agent to install and nothing to keep updated on the server. Linux /proc is the primary source, with BSD and macOS probe fallbacks.
It is opt-in twice: the whole feature hides behind a Features & Plugins toggle, and then per host, so no connection starts probing behind your back. An "Enable for all hosts" switch and a configurable interval are there when you want it everywhere. The panel also lists what the host is listening on and turns any row into a local port forward in one click, honoring the listener's own bind address. Thresholds raise alerts, a long mount list collapses, and an optional status-bar segment keeps the headline numbers visible with the panel closed.
One design note: every number in that panel comes from a machine you may not control. All the probe arithmetic saturates rather than wrapping, and a truncated or forged payload degrades to "unknown" instead of rendering nonsense.
Folders that nest (discussion #67)
Host groups now hold groups, to any depth. If your fleet is prod / eu-west / db rather than a flat list, it finally maps.
The details are where this kind of featu

Oryxis 0.10.0: an agent for the whole system, keys that live in hardware, and a terminal with more power under the hood
Disclosure: this release note was drafted with assistance from Claude (Anthropic's LLM) and edited by Wilson Glasser, the project author. The engineering decisions and the code are mine; the LLM helped turn the changelog into prose.
Oryxis is a Rust-native SSH client built on iced with a russh engine. Where 0.9.0 pushed outward (Telnet, serial, two more clouds, files in every tab), 0.10.0 pushes down into the parts that make an SSH client trustworthy: Oryxis now serves your keys to the rest of the system as a standard ssh-agent, authenticates with OpenSSH certificates and FIDO2 security keys, generates keys in-app, and tunes its own vault key derivation to your machine. The terminal grows the power features long-time users keep asking for, scrollback search, broadcast input, a command palette, clickable hyperlinks, and your session recordings finally play back and export as GIFs. Privacy Mode became a system you can tune. And underneath, the whole message and dispatch layer was rebuilt so the compiler proves every message is handled.
Your keys, available to everything (safely)
Oryxis now runs a standard ssh-agent (#54), so git, VS Code, WSL and anything else that speaks the agent protocol can authenticate with your vault keys, no exporting, no copying a private key to disk. The design is deliberately careful: vault keys are read-only over the wire and decrypted per signature, never held in memory for the whole unlocked window, and a per-key "Expose via agent" flag decides what the agent even offers. It works the other way too, opt-in: tools like KeePassXC can push keys in over the protocol, and those keys live in memory only, never touch the vault, and are swept the moment you lock, toggle off, or quit. Every signature can require a confirmation, and keys added with a CONFIRM constraint always prompt.
On Linux and macOS it listens on a unix socket; on Windows, a named pipe with a per-user DACL so only you can reach it, and an opt-in second name (\\.\pipe\openssh-ssh-agent) so tools with a hardcoded target like stock ssh.exe or KeePassXC in OpenSSH mode work with zero configuration. It has its own section in Settings.
Certificates and security keys
Two authentication methods that hardware-and-fleet shops depend on. Oryxis now offers OpenSSH user certificates during publickey auth, with a certificate-only method that never silently falls back to the bare key, a certificate editor and viewer in the keychain, a badge on keys that carry one, and an optional principal / host hint. And FIDO2 security keys (sk-ssh-ed25519, sk-ecdsa-sk) plus PKCS#11 / smartcard identities are usable through your system agent: import the public key, get a "Security key" badge, optionally pin it to a specific agent identity and host. The touch or PIN is handled by the platform, so the hardware-backed private material never enters a place Oryxis can read it.
Generate a key without leaving the app
The keychain grows a Generate flow next to Import: Ed25519, RSA (2048 / 3072 / 4096) or ECDSA (P-256 / P-384 / P-521), with an optional passphrase that also rides the portable export. No more dropping to ssh-keygen in a terminal to make a key you immediately import.
A vault that tunes itself
Key derivation is now calibrated to your machine. At vault creation, and whenever you change the master password, the Argon2id parameters are tuned to target roughly one second to unlock and stored next to the salt, so a fast laptop and a slow one both land near the same wall-clock cost without you touching a knob. Existing vaults keep their parameters until a rotation re-derives them; the sync and portable-export key derivations are deliberately frozen so unlocking on another device or importing on another machine never changes.
The terminal grows up
The features power users have been asking for, all landing together:
- Scrollback search (Ctrl+F): find-in-b

What's Changed
- chore(deps): bump cmov from 0.5.3 to 0.5.4 by @dependabot[bot] in #58
Full Changelog: v0.8.3...v0.9.0

What's Changed
- feat(sftp): keyboard navigation in the file browser by @vrkuvrku in #47
New Contributors
- @vrkuvrku made their first contribution in #47
Full Changelog: v0.8.2...v0.8.3

Full Changelog: v0.8.1...v0.8.2

Full Changelog: v0.8.0...v0.8.1

Full Changelog: v0.7.4...v0.8.0

What's Changed
- build(deps): bump russh from 0.60.3 to 0.61.1 by @dependabot[bot] in #28
- build(deps): bump astral-tokio-tar from 0.6.1 to 0.6.2 by @dependabot[bot] in #27
Full Changelog: v0.7.3...v0.7.4

Full Changelog: v0.7.2...v0.7.3

What's Changed
- Enable PDB production for Windows nightly by @koobs in #22
Full Changelog: v0.7.1...v0.7.2

What's Changed
- Add "release-with-split-debuginfo-packed" profile by @koobs in #19
- Create and embed Windows manifest by @koobs in #21
- build(deps): bump russh from 0.60.1 to 0.60.3 by @dependabot[bot] in #20
New Contributors
- @koobs made their first contribution in #19
Full Changelog: v0.7.0...v0.7.1

Full Changelog: v0.6.1...v0.7.0

What's Changed
Added
- feat: PuTTY .ppk import (v2 and v3, RSA / Ed25519 / ECDSA P-256 / ECDSA P-384, encrypted or not), verified byte-exact against fixtures from real puttygen output
- feat: encrypted PKCS#8 import (BEGIN ENCRYPTED PRIVATE KEY, RFC 5958 PBES2)
- feat: Ed25519 in PKCS#8 (OID 1.3.101.112, RFC 8410)
Fixed
- fix: DSA and ECDSA P-521 no longer silently mislabel as Ed25519 / P-256; they return an actionable error instead
- fix: legacy OpenSSL-encrypted PEM (Proc-Type:4,ENCRYPTED) now surfaces a dedicated message pointing users at the new .ppk path or ssh-keygen -p
i18n
- Two new keys (key_encrypted_legacy_pem, key_unsupported_kind) translated across all 11 languages
Full Changelog: v0.6.0...v0.6.1
Full Changelog: v0.6.0...v0.6.1

What's Changed
- feat: add last_terminal_tab tracking for improved tab focus management by @devlifeX in #13
New Contributors
- @devlifeX made their first contribution in #13
Full Changelog: v0.5.7...v0.6.0

What's Changed
- fix(tab_bar): zero width for single inactivity bar by @UltraMurlock in #6
- chore(deps): bump astral-tokio-tar from 0.6.0 to 0.6.1 by @dependabot[bot] in #7
New Contributors
- @UltraMurlock made their first contribution in #6
Full Changelog: v0.5.6...v0.5.7

What's Changed
- add proxy support to connection by @ixabolfazl in #4
New Contributors
- @ixabolfazl made their first contribution in #4
Full Changelog: v0.5.5...v0.5.6