Changelog

New Proxmox VE — Full Web UI Parity

• Cluster dashboard with PVE-style tree navigation (drawer sidebar), collapsible nodes, status pills
• VM/CT detail view — 5 tabs: Summary (live metrics + graphs), Hardware (edit CPU/RAM/disk), Snapshots, Firewall, Cloud-Init
• Node detail view — 7 tabs: Summary, Network, Storage (content browser), Disks, Syslog, Certificates, Replication
• Create VM/CT — FAB dialog with OS type, CPU, RAM, disk, storage, template selection
• Guest control: start, stop, reboot, pause, resume, migrate, clone, backup, delete
• SPICE remote console (6 decoders, TLS) — direct VM display access
• Snapshot management with tree view and rollback
• Firewall management — cluster/node/VM rules, IP aliases, IP sets, security groups
• User & access control — users, groups, roles, ACL, create/delete users
• Task log with status filter (all/running/OK/error), auto-refresh, log detail
• Resource pools with member browser
• Monitoring graphs — CPU/RAM line charts from RRD data
• Bulk operations — long-press multi-select, batch start/stop/snapshot
• PBS integration: datastores, backup groups, snapshots, verify, GC, restore, backup jobs
• VM/CT expand in host list — tap expand arrow to see VMs with status, CPU, RAM, uptime
• 112 live API tests against PVE 8.3.0 — every Web UI endpoint verified

New Terminal Graphics

• Sixel inline graphics — display images from gnuplot, matplotlib, etc. directly in the terminal
• TN3270 mainframe terminal emulation — EBCDIC, field-based screen, IBM 3270 data stream

New Fleet Management

• Heatmap dashboard: CPU/RAM/disk usage as color-coded grid, auto-refresh
• Batch VM operations: start/stop/restart across host groups
• Alert enhancements: disk >90%, host offline >5min with push notifications
• Fleet export: JSON, CSV, and TXT formats
• Cancel button for running fleet executions
• Variable substitution in command templates: {{HOST}}, {{USER}}, {{PORT}}

New Remote Log

• Stream terminal output to a second device via NSD/MyClerk
• Severity color coding (ERROR, WARN, DEBUG), regex filter, pause/resume

New Docker Compose

• Projects tab: docker compose ls, up/down/restart entire projects
• Health status per container

New ArcHub Integration

• Upload/download config profiles to community server
• Provisioning wizard: connect → detect services → apply profile

New Dual Proxy Mode

• SSH Hop (default): runs ssh target on the jumphost — uses jumphost keys and known_hosts
• Direct Tunnel: end-to-end encrypted DirectTcp tunnel — uses app keys
• Selectable per host in the connection dialog

New URL Highlighting

• URLs in the terminal are now visually highlighted — blue color + underline
• Single-tap opens the link in the browser

New Universal Edge-to-Edge

• EdgeToEdge.applyToFragment() — one-line call handles all insets automatically
• All 41 fragments now respond to keyboard show/hide and system bars

Fix Bugfixes

• Agent forwarding crash through jumphost — race condition resolved
• Jumphost DirectTcp crash on DNS failure — graceful error instead of crash
• DNS resolution completely eliminated for IP addresses — zero DNS calls for IPs
• SSH-Hop mode for jumphost connections — uses jumphost keys naturally
• Duplicate code elimination — centralized FormatUtils, SshExecutorImpl, EdgeToEdge
• Proxmox tool SSH context through jumphost — ProxyConnectionManager cache
• tmux/screen "new session" buttons only shown when installed
• Dashboard probe uses SSH-Hop for hosts behind jumphosts

Security

• Passphrase-protected SSH keys: OpenSSH bcrypt_pbkdf import, AES-256-GCM agent cache

New

• Mosh protocol — pure Kotlin implementation with SSH bootstrap, UDP transport, SSP
• sudo/su integration — auto-fills password prompts via Expect Engine. Supports sudo, su, doas, pfexec, prun
• GNU screen support — attach, detach, list sessions. Dashboard integration alongside tmux
• Shared terminal sessions — server-side (tmux/screen) + device-to-device via MyClerk Tier 3 with R/W permissions
• VNC tunneling — auto-detect installed VNC viewer, SSH local forward, per-host VNC port config
• VPN auto-start — WireGuard, OpenVPN, Tailscale, NordVPN, strongSwan detection and launch before connect

New

• SSH certificates — openssh-cert-v01@openssh.com support
• Agent forwarding — forward SSH keys to remote hosts
• sntrup761x25519-sha512 — OpenSSH default post-quantum KEX
• Own crypto library — BouncyCastle removed, replaced with arcshell-crypto
• X/Z-Modem — file transfer + serial USB transport
• OTP/TOTP generator — one-time passwords for keyboard-interactive auth
• Biometric auth — fingerprint/face unlock for the app
• Expect engine — pattern-matching scripting and automation
• IPv6 support
• Local shell PTY — real PTY via JNI/NDK (forkpty), TERM=xterm-256color, readline, job control
• LogFile viewer — remote log search, regex filter, severity colors, tail -f

Fix

• FileCommander/Tools SSH guard, tunnel NPE fix, advanced options for LOCAL connections

New Config GUI

• Visual config editor for nginx (500+ directives), sshd (120 params), systemd, UFW, Docker Compose, OS basics
• Schema-driven with tooltips, validation, undo, color-coded diffs
• Service dashboard: status cards, quick actions, start/stop/restart, journalctl logs
• nginx sites management: enable/disable, SSL certificate status and expiry

New Profiles & Compliance

• Config profiles: export/import .arcprofile, built-in templates (nginx, sshd, linux-os, systemd)
• Fleet profiles: apply to multiple hosts with dry-run and rollback
• Compliance checking via profile diff

New Enterprise

• MyClerk integration for encrypted vault
• SSO/LDAP host import
• MDM compliance checks
• Audit log with export

New Documentation

• Online handbook in 10 languages at arcshell.app

New

• Package manager UI — 28+ distros, 5 adapters (apt, dnf, pacman, apk, zypper). Install, remove, upgrade, search, manage repos
• Fleet update check — parallel package checks across hosts, "Upgrade All Hosts" button
• Wake on LAN — MAC auto-discover, magic packet, WOL through jumphost
• Jumphost crypto badge — progressive updates during proxy chain connect
• Quick actions — all visible by default, icon mode, disconnect icon

Fix

• tmux: black screen, freeze, background probe, tab handling, reconnect
• Android 10: local shell + FileCommander storage access

New

• tmux dashboard — expand icon shows active sessions as sub-items. Create, attach, or kill sessions directly from the host list
• tmux groups — group tmux sessions across hosts, connect all at once
• tmux templates — reusable scripts with variable substitution (${SESSION_NAME}, ${HOST})
• Projects — temporary host groups for work contexts with auto-connect
• Session recording — capture terminal sessions, export as GIF, MP4, or .cast
• Edge-to-edge — full WindowInsets support for all screens
• Connect All — progress indicator, parallel auth, per-host error handling

New

• SSH terminal — own SSH library with ChaCha20-Poly1305, AES-GCM, ML-KEM-768 post-quantum key exchange
• Own terminal emulation — xterm-256color, TrueColor, scrollback, selection, search
• Host management — groups, folders, favorites, search overlay
• SSH key management — Ed25519, RSA, ECDSA generation. Install key on server with duplicate detection
• SFTP file commander — dual-pane browser, upload/download, directory compare, multi-source share basket
• Port forwarding — local, remote, dynamic (SOCKS5)
• Jumphost / proxy chains — multi-hop SSH with progressive crypto badge
• Fleet management — multi-host command execution, host groups, health monitoring
• Snippets — command library with categories and startup snippets
• Backup/restore — .asb format with selective import
• Plugin system — themes, tools, connectors, snippet packs
• Docker tools — container list, start/stop, logs, images, volumes, networks, stats
• Server info — OS, CPU, memory, disk, SSH details
• Crypto info badge — tap for KEX, cipher, MAC, host key details

Security

• SQLCipher encrypted database
• No telemetry, no tracking, no analytics
• ASCR + TSU export compliance