Changelog

C-SSH 0.9.8: host connections, Cloud access and stability

This release updates Windows, macOS, Linux and Android, together with the C-SSH Agents. It focuses on host connection errors, self-hosted Cloud access, Android session recovery, host deletion and diagnostic overhead.

1. Clearer host connection errors

When adding a host, connection failures now appear in a dialog that matches the C-SSH interface. Messages distinguish address resolution, network connectivity, SSH handshake, authentication and proxy authentication failures so that users can identify which part of the connection needs attention.

Closing the dialog preserves the entered connection details. An authentication rejection is not automatically labeled an incorrect password: the username, key and server authentication policy may also be responsible.

2. Separate hosts at the same IP address

Fixes hosts with the same address but different SSH ports being treated as duplicates during creation or synchronization. Connection endpoints are identified by both address and SSH port; their host records, credentials, trust records and Cloud mappings remain separate.

Existing host identities are preserved. Adding a different port does not require deleting the original host or replacing its credentials.

3. Automatic protocol detection for self-hosted Cloud

In Settings → Cloud service → Self-hosted cloud, enter an IP address, domain or address with a port. Test the connection to see the detected protocol, then save and switch. A protocol prefix is optional for a new address.

Detection tries HTTPS first. An explicitly configured, trusted private-network deployment may use HTTP without importing certificates on every client. The interface displays the selected protocol and warns that HTTP traffic is not encrypted.

Explicit or previously saved HTTPS addresses, certificate verification failures and public-network addresses are never silently downgraded to HTTP. Detection sends no existing account credentials or session cookies. The official Cloud continues to use HTTPS. Self-hosted servers must use a compatible server version and explicitly enable the private-network HTTP mode.

4. Android AI session recovery after interruptions

Improves recovery when the phone is locked, the network disconnects, connectivity returns or the app returns to the foreground. Addresses blocked follow-up messages, unrecognized task errors and save state that did not recover promptly.

Recovery reconciles the original task with locally saved state, preserves content already received and allows the conversation to continue. It does not automatically replay model requests or remote modification commands. Related save acknowledgements are handled in the correct order to reduce discrepancies between stored conversation content and the displayed state.

5. Less unnecessary waiting when deleting hosts

Fixes host deletion waiting on a resource lock already held by the same cleanup operation when the host has server-browser environments. This could leave the interface showing “Deleting” for an unnecessarily long time.

The deletion path now releases the relevant resources before completing browser-environment cleanup. The remote Agent uninstall attempt remains time limited; a failure does not indefinitely block deletion of the local host record.

6. Lower Agent diagnostic overhead

When diagnostics are disabled, recording work is skipped earlier. The Linux Agent summarizes normal, short monitoring operations while retaining the necessary details for errors, slow operations and other activity that needs diagnosis.

Log maintenance uses bounded periodic work instead of heavier cleanup on request paths. The Windows Agent receives the corresponding maintenance scheduling changes. These changes target diagnostic recording and maintenance costs; they do not reduce monitoring frequency or change logging settings for other server programs.

7. Cloud administrator account deletion

Fixes deletion being blocked by device references when an account contains hosts, AI configurations, proxy profiles or synchronization history.

The account and its dependent synchronization records are handled in one database transaction. Failures roll back completely, and other accounts remain unchanged. Administrator protections, global history and audit requirements remain in place. The official Cloud has received this backend fix; self-hosted deployments need the updated server implementation.

Versions and installation

• Windows, macOS, Linux and Android clients, and C-SSH Agents: 0.9.8.
• This release announces the update and directs users to download and install it manually. It does not force updates or download and install them automatically.
• Keep the existing installation identity and local data. Do not uninstall, clear app data or remove keys as an update step.
• macOS remains available for Apple Silicon. The app is not notarized with an Apple Developer ID; this installation limitation is unchanged.
• iOS development and releases remain paused. The mobile server-browser entry remains hidden.

C-SSH 0.9.7 brings together recent improvements to the AI assistant, server browser, monitoring, cloud sync, and all four active client interfaces.

This release uses notifications and manual downloads only. Visit the download page to install it yourself. There are no forced upgrades or background downloads or installations. iOS development and distribution remain paused.

Concurrent AI tasks and progress

• Configure how many independent read-only tasks run at once, including tasks on the same host. Additional work is queued.
• Delegated tasks follow the main assistant's configured context window. Dependent work and changes requiring confirmation retain their ordering and permissions.
• Responses, subtask progress, and available results appear incrementally.
• A compact activity summary keeps the conversation readable; expand details to inspect commands, files, and individual operations.
• Interjections appear in the conversation, with clearer pause, stop, and resume states.

Context, memory, and history

• Reduced repetitive directory reads, queries, and unnecessary tool cycles during simple host checks.
• Improved context preparation, stable prefixes, and history loading. Context handling follows the actual configured model window.
• Improved tool-result processing and long-conversation storage while preserving original records.
• Fixed sending failures after interruption, incorrect notices about another window taking over, missing content after reopening, and affected Mac AI crashes.
• Fixed Android history selection being invalidated by other conversations, history restoration replacing the active model, and usage not refreshing after window changes.

Token and cache statistics

• Added cumulative tokens, context usage, and cache hit rate. Android has a compact three-value panel; desktop retains detailed statistics.
• Cumulative tokens include reported input and output across requests and subtasks. Context describes one main-assistant request, with a short explanation distinguishing it from the accumulated total.
• Keep previously confirmed values visible during new turns and refreshes. Missing cache reports are unknown, not zero.
• Normalize provider usage fields and deduplicate requests. Cache hit rate is weighted by observable input tokens.

Desktop server browser

• Windows, macOS, and Linux browse through the server Agent using the server's network exit. A local Google Chrome installation is required and checked before launch.
• Create multiple browser environments per server, with separate browsing data, persistent fingerprint seeds, and settings.
• Configure OS presentation, timezone, language, and permissions. Location, microphone, and camera can use normal permission prompts.
• Improved reopening and recovery preserve environment data and identity after abnormal exits.
• Improved first-launch reliability, preparation, and retry behavior. Fixed unexpected closure triggered by affected verification pages, page events, and navigation waits.
• Websites and network exits still determine verification challenges. CAPTCHA-free access or complete concealment of every local fingerprint is not guaranteed. The Android browser entry remains hidden while mobile validation is paused.

Monitoring and communication

• Raised the configurable collection concurrency ceiling to 1000, with queuing and independent host scheduling. This is not a throughput guarantee for every computer or network.
• Reduced database overhead and repeated work in frequent collection paths.
• Added selective compression for suitable payloads, leaving small responses uncompressed.
• Improved Windows Server Agent monitoring sampling costs and CPU usage.
• Fixed delayed Agent status refresh after cloud sync and clarified initial collection states without requiring a restart.

Agent access and ARM compatibility

• Improved multi-device access to existing Agents and dedicated public-key handling.
• Improved detection, reuse, update, and readiness status messages.
• Updated Linux x86_64 and ARM64 Agents and improved independent-channel compatibility, with targeted UOS and Kylin ARM validation recorded.
• SSH-only hosts retain their selected mode; a client update does not automatically install an Agent on them.

Manual cloud sync and data protection

• Reuse valid data-protection verification within the same application process across page changes, checks, and subsequent syncs. A new process requires verification again.
• Added select-all and cloud-default choices and improved the list and confirmation dialogs.
• Fixed Android first-login downloads failing when the model catalog was not yet cached. Downloads now obtain the required catalog themselves.
• AI deletion records without a matching local account no longer appear as downloadable configurations or block host downloads. Necessary internal sync acknowledgements remain.
• Existing local-account conflicts still require a clear choice. Other accounts are not removed by name. Sync remains manual and does not automatically upload AI conversations or memory.

Interface and Android terminals

• Organized settings into four groups with direct access to existing settings.
• Improved desktop window controls, Mac corners, themes, confirmation dialogs, and dark-theme contrast.
• Removed redundant Android context displays and corrected duplicated bottom safe-area spacing and keyboard layout.
• Fixed host-card terminal entry selecting the wrong host and connection waits preventing host or terminal switching.
• Reject late errors and authentication prompts from a previous connection after switching.

Validation and installation

Changes use their existing targeted shared-layer, interface, and native validation. Release checks cover version, architecture, embedded resources, signing, and packaging; results are not presented as an exhaustive retest of every system or physical phone. The Android first-login download fix was exercised against an authorized account in the normal SDK Emulator client. macOS supports Apple Silicon and remains ad-hoc signed without Developer ID notarization. Android retains its APK signing identity. Keep important data before upgrading and do not open a migrated database with an older incompatible client.

The product version remains 0.9.6 with SQLite 26. Update in place with the matching platform package while preserving existing data and OS Keychain/keystore entries. Mac is ad-hoc signed and not notarized. Announcement and manual download only, with no upgrade reminders or forced updates.

Added

• A separate revision-3 download record preserves original 0.9.6, revision 2 and historical downloads.

Fixed

• Adding an Agent host checks an existing Agent for compatibility first. Compatible Agents are reused without uploading, reinstalling or restarting. Missing Agents are installed; confirmed older versions follow the safe upgrade path. Unknown probe outcomes or future versions do not overwrite an installation.
• Identity adoption, READY confirmation and credential persistence appear as separate real stages. A readiness failure is no longer reported as an initial SSH connection failure, and does not automatically replay installation.
• Deployment progress is scoped to the current invocation, host and operation; late events after completion or leaving the view are rejected.
• Windows and Mac workbench close buttons match the adjacent window controls in outline, background and size, while preserving danger hover and the existing exit action. Linux retains its normal system title bar.
• Classic and workbench search entry points on Windows, Mac and Linux default to a magnifying-glass icon. Clicking opens the existing search panel, and the existing shortcuts are retained. The terminal toolbar wraps in narrow windows to keep search and connection controls from overlapping.

Verified

• Direct frontend verification completed 170 checks across 38 layouts for classic/workbench search buttons, the existing panel, shortcuts and narrow windows on Windows, Mac and Linux. All three frontend builds passed.
• All ten release packages have matching source and package receipts. The nine refreshed desktop packages contain the final search interface; all four Windows packages have new actual installed identities and valid signatures. Mac is arm64, ad-hoc signed and not notarized.
• Agent acceptance covers three Linux nodes through Mac, native ARM64 and compatible x64 execution on Windows 11 ARM64, and both Linux VM architectures. The search-only change reuses the unchanged Rust-flow evidence; it does not imply a new full-function test of every package or physical Windows x64 acceptance.
• The Android arm64 release APK retains the existing signer. Its normal UI completed existing-Agent reuse, readiness, credential persistence and monitor loading on the SDK Emulator. This does not imply physical-device or ordinary host-deletion acceptance. iOS source and frontend are synchronized only and are not uploaded.

This revision uses SQLite 26. Exit, preserve complete data and keep existing OS Keychain/keystore entries before replacing the program in place. Do not manually move, delete or export raw keys, clear data, or uninstall to work around startup/signing issues. Normal 22→26 and the validated known 25 data were exercised. Other 23–25 data is accepted only for strictly known shapes with trust preserved. Once data adopts 26, do not open it with original 0.9.6 schema 22 binaries. A rollback requires the matching older program and a complete pre-upgrade backup.

Added

• Fresh installations and data without an explicit interface choice default to workbench and system appearance; saved interface and appearance choices are retained.
• A separate revision-2 download record preserves original 0.9.6 and historical downloads.

Fixed

• Fixes the Mac initialization abort. The validated legacy schema 25 data moves forward to 26 and the existing Cloud session page loads normally.
• Fixes the Mac top-right maximize/restore, minimize and close controls.
• The notification center shows announcements and version messages only, removing visible account-security entries and their unread indicators.
• Follow-up in the same interrupted AI conversation retains recorded original text, assistant explanations and tool records with complete, unique known results. Missing results are not invented, and incomplete coverage is not marked as covered.
• SQLite moves forward to 26. Known legacy 23–25 data is continued only after strict shape and trust-preservation checks; plugin execution is not restored.

Verified

• Ten artifacts total 583,805,859 bytes. Sizes and SHA256 come from current artifact and transfer receipts. Unchanged Mac r26/Windows r11 SSH/SFTP, monitor switching, navigation and UI-R57 deletion evidence is reused within its original scope.
• Mac arm64 reuses the first candidate’s actual 25→26 migration evidence with unchanged Store inputs. Final revision 2 starts under the ordinary identity on data already migrated to schema 26 and passes the existing Cloud page, window controls and close. A real-model text follow-up retained prior information; stopping occurred before provider context with tool=0, so incomplete tool rounds were not tested against a real model. Mac remains ad-hoc signed and unnotarized.
• Windows 11 ARM VM: native ARM64 and emulated x64. Release binaries passed 22→26 preservation, workbench and same-conversation stop/follow-up with an HTTP fixture. A new ordinary-user installer-only lane passed original 0.9.6 same-version replacement, actual EXE identities, data and registration preservation. All four updater epoch3 signatures were verified; no Authenticode. New-identity Session0 close/exit_app natural shutdown failures remain recorded; ARM64 raw separately passed Session1 close/destroyed. This is not a full formal-runtime pass.
• The signed arm64 APK passed same-signer/same build number 9006000 replacement, 22→26 preservation of 51 Required tables and preferences/wrapping data, plus fresh workbench/system appearance on a real Android SDK Emulator. AI entry only; no physical phone or general CleanShutdown validation.
• Both Linux architectures passed 22→26 preservation of 57 tables and 12 old rows, followed by direct FUSE AppImage cold startup after deb installation and real business views in Ubuntu VMs. Native Linux AI follow-up was not tested without independent model credentials.
• Incomplete tool rounds, unique complete results and exact coverage watermarks passed 3 shared integration tests / 4 real local HTTP scenarios; Windows native validation used a controlled HTTP fixture. This does not imply real-model or remote-tool validation on every platform.
• iPhone Simulator version/entry, fresh workbench/system and the two notification categories were exercised; no public upload. Physical devices, minimum-OS execution, other distributions/Wayland, weak networks and untested remote workflows are not implied.

Announcement and manual downloads only; no upgrade reminders or forced updates. iOS is excluded and old versions remain available. SQLite stays at schema22, Android/iOS build number is 9006000, and wire versions and signing identities are unchanged.

Added

• Classic and workbench interfaces coexist. Three desktop card sizes share one compact layout and retain the selected preference.
• Desktop workbench AI chat adds semantic Markdown, tool summaries, highlighted code with raw copying, reading-position handling, quotations and evidence-backed file or snippet diffs.
• Windows and Mac support browsing hosts and tool cards while an AI run stays bound to its original conversation. These two page adaptations are not claimed for Linux or mobile.

Fixed

• Applicable file and monitor pages allow host switching during reads and reject stale results or authentication callbacks. Pending writes keep their guard across navigation.
• Deleting the selected host clears invalid read targets; the hidden monitor page no longer navigates to or automatically reads another host.
• Logs show safe setting values and reduce routine or successful autosave noise. Duplicate icons, card layout and idle animations in the hidden updater are corrected.
• Mac exit waits for saving. Linux Agent diagnostics use the shared DTO conversion and reject client-only preference fields without a wire change.

Verified

• Ten artifacts total 583,386,396 bytes and are bound to the current build and package receipts. Existing Mac/Windows real-VM SSH/SFTP, monitor switching, navigation and deletion regressions are reused without repeating unchanged passing checks.
• Windows x64/ARM64 packages passed per-architecture package, install, 0.9.4→0.9.6 upgrade, uninstall and data-preservation checks in a Windows 11 ARM VM. x64 updater epoch3 signatures were cryptographically verified; these are not Authenticode signatures.
• Mac passed ordinary arm64 Release, ad-hoc strict-signature and DMG checks; it remains unnotarized. Android retained the release signer and passed actual Manifest/DEX 0.9.6/9006000, 16KiB alignment, and same-signer upgrade with settings and 21 protected tables preserved in an API36 arm64 emulator.
• Linux deb/AppImage packages passed per-architecture embedding and isolated startup, log entry and preference preservation on Ubuntu24.04 X11. AppImage used its extracted entry point; FUSE mounting and all remote workflows were not retested.
• iPhone received a Simulator build/identity check only and is not uploaded. Physical devices, minimum-OS execution, other distributions/Wayland, weak networks and untested remote workflows are not implied.

C-SSH 0.9.4

2026-10-04

0.9.4 uses announcements and manual downloads only, with no upgrade prompt or forced update. Mac is Apple Silicon arm64 only, minimum target macOS13, ad-hoc signed and not notarized. Windows installers have no Authenticode signature. Android retains the release signer used since 0.9.0; earlier differently signed builds cannot be replaced directly. AI content is excluded from Cloud sync; read the installation and data-preservation guide first.

Added

• Bulk host import: Import CSV or OpenSSH configuration, preview and select entries, then create pending connections. A host becomes active only after credentials are supplied and real authentication succeeds. Previewing is not connecting; passwords and private keys are not stored in the plaintext pending queue.
• Skippable first-use guide: Discover connection, import and operations entry points, or skip directly to the workspace. The choice survives a cold restart and the guide can be reopened in Settings. Upgrades with existing data do not force onboarding.
• Automatic AI operations Skills: Experience is learned only after tools execute and acceptance succeeds. Later tasks reuse it only when the current environment matches. No manual save or adoption step is required; the normal UI shows a single light notice when past experience is referenced. Existing permissions and confirmations still apply. Skills, AI conversations, raw records and long-term memory remain local and are excluded from Cloud sync.
• Readable operation-log rows: One business operation per row, with time, level, local host name and a trustworthy result. Collection is off by default; enable and query it as needed, switch to the technical view or export support material. A successful substep or transfer never implies that the whole operation succeeded; unknown and incomplete outcomes are explicit.
• Version and data upgrade: Four platforms ship 0.9.4 with client SQLite schema 22. iOS is maintained at 0.9.4/9004000 but no iOS artifact is uploaded.

Fixed

• Frost-white theme readability: Corrected primary-button backgrounds, text, hover, disabled and keyboard-focus states on Windows, Mac and Linux.
• Android fresh-install startup: Corrected the earlier 0.9.4 candidate that was incorrectly rejected during cold startup. The new formal APK passed a fresh arm64 Android SDK Emulator cold start and normal UI checks, retaining the original release signer. The earlier candidate's failed result is preserved.

Verified

• All ten formal artifacts have names, byte counts and SHA256 values bound to their platform receipts, totaling 580,358,528 bytes. Windows has current Release and package gates on both architectures; Portable contains only C-SSH/C-SSH.exe. Installation lifecycle and ordinary user-profile startup were not repeated in this packaging round.
• Mac is the ordinary arm64 Release/DMG with checked ad-hoc signing and no notarization. Same-source Mac business evidence is reused without opening the user's normal profile. Android checks cover 0.9.4/9004000, the original signer, 16KB alignment, a fresh SDK Emulator cold start and a normal operation-log row.
• Both Linux architectures passed deb/AppImage package checks and isolated minimal startup; AppImage used its extracted entry point. This round adds no FUSE-mount, upgrade, other-distribution or physical-machine claim.
• Import, onboarding and automatic Skills reuse the October 2–3 native evidence: Mac arm64; Windows ARM64 and x64 within an ARM VM; Linux ARM64, with x64 native differences checked separately; Android SDK Emulator and iPhone Simulator. SSH/Windows management and real-provider learning/cold-restart reuse retain their individual scopes. A complete matrix was not rerun on every architecture.
• Operation-log evidence includes same-source Mac business operations and a normal Android row. Other platforms have the current shared implementation, frontend/package checks and their minimal-startup evidence; this does not claim every business-log path was rerun on every platform.
• No claim covers physical Android/iPhone devices, every input method, every Linux distribution/Wayland, every recovery scenario or untested features in this round.

SHA256

• C-SSH_0.9.4_android-arm64.apk: 8ee9649e69ed73660f1bdc42c6c56de9964de64f1ecfe9d72bb52d2ec26fd76c
• C-SSH_0.9.4_aarch64.AppImage: a30eeadb2052a3a7702b4ac4de20ab0544ccf6a1552cd8b4fcfdccab3a744402
• C-SSH_0.9.4_amd64.AppImage: 6e536a4c070539d7ff1195ebfb92b6654402450fdf5d82d5a86de3a47ff91ad5
• C-SSH_0.9.4_amd64.deb: 8bd0330364baf7fe5f5fd6bc71c3c64cb54c4351184dc2a578ccbaf58dd98edc
• C-SSH_0.9.4_arm64.deb: fb12a27ae9fc2e93729aeff6ea826e3b45cc01ca5f168f2283ccc4a8d752d281
• C-SSH_0.9.4_macOS-arm64.dmg: b6c472e64e98965f9859e65cc738de2f2895dbebfb1d5a080ba4c9f553cfe401
• C-SSH_0.9.4_arm64-setup.exe: 463ae846ea6d2129f9fd1e2a25055f02a78a9dcffb9e80abf0672e9477ec8bb6
• C-SSH_0.9.4_portable-Windows-arm64.zip: 1dd2abe077602c94fb976b849648e5432f984ad482de1da91828040520321627
• C-SSH_0.9.4_portable-Windows-x64.zip: 32689bfaf190bab66ae5197d12ece09270358bc139f40c1a30ced15563f72841
• C-SSH_0.9.4_x64-setup.exe: 280b1144366a283f20fd75f224c800239db072d5dd1c0fdd162b71c4ea21ff54

C-SSH 0.9.3

• **Terminal keyboard handling:** Android adaptive terminals resize to the visible area, with corrected cursor and input-anchor positioning. Shortcut keys stay above the keyboard and leave room for the input line when expanded.
• **Accessible form closing:** add/edit host forms have a top-right close button that remains available while scrolling. Clicking outside the form preserves entered values.
• **Mobile terminal font:** Android/iOS default to size 6, preserving saved custom sizes.
• **Version alignment:** iOS is maintained at 0.9.3, without an iOS package upload.
• **Manual installation:** download and install this release yourself. Announcement only; no upgrade prompts or forced updates.

Verification covers Android SDK Emulator, Windows lifecycle/data retention on both architectures, Mac arm64 DMG/signatures, and Ubuntu24.04/X11 on both Linux architectures. No physical Honor-phone claim; Mac remains unnotarized; no iOS upload. Prior releases are preserved. Cloud sync does not include AI conversations or memory.

2026-10-02. Ten packages for Windows x64/ARM64, Apple Silicon Mac, Android arm64 and Linux x86_64/ARM64. No iOS upload. Notices and manual downloads only; no upgrade prompts or forced update.

Added

• Linux deb and AppImage clients with desktop hosts, SSH/Agent, persistent terminals, RDP/DVC, monitoring, files, AI, proxies, forwarding, saved commands and broadcasts.
• Native Windows ARM64 NSIS/Portable, validated under an ordinary user on Windows11 ARM64; remote Windows management components remain x64.
• WinPTY-backed persistent terminals for Server2016 without ConPTY. Modern Windows retains ConPTY; static-CRT management components reduce clean-system runtime dependencies.

Fixed and changed

• Host edit/delete waits, Windows domain connections, file-overwrite permission cleanup and Linux legacy-database migration and keyring integration.
• Sync-operation messages removed from announcements; Cloud sync remains.
• Fully sealed ad-hoc Mac DMG application; still not notarized.

Verified and installation

• Windows lifecycle/manual upgrade/data preservation for both CPU architectures. ARM64 live SSH/files, Linux persistent terminals, Server2022 RDP/DVC and Terminal2 reconnection.
• Mac package/signature checks, Android same-signer upgrade from0.9.1 with retained settings, and Linux deb/AppImage plus Secret Service/cold recovery in both Ubuntu24.04.5 VMs.
• Other Linux distributions, Wayland and physical Android phones remain unvalidated. Initial monitoring and immediate-detach close rejection observations remain recorded, without claiming a root-cause fix.
• Android replaces0.9.0/0.9.1; earlier different signers require separate data preservation. Uninstalling clears local data; AI conversations and memory are not in Cloud sync.
• Windows ARM64, Mac and Linux use manual GitHub links. Previous release assets remain unchanged.

2026-09-30. Windows x64 NSIS/Portable, Apple Silicon Mac arm64 DMG and Android arm64 APK. Notices and manual downloads only; no upgrade prompt or forced update. No iOS release; the Linux client stays frozen.

Added

• Enter an IPv4 address or domain directly with automatic detection and a separate port; the address-type selector is removed. Existing IPv6 hosts remain compatible.
• Embedded Windows management Setup ZIP with offline export in DVC, missing-component and maintenance flows; Android also offers system sharing. RDP-only hides the card. No host/credential is exported and the client never runs the EXE.
• Component version 0.9.1; ZIP size 13,308,604 bytes. Setup and Agent/psmux maintenance keep the same verified source.

Fixed and verified

• Existing Setup conflicts remain fail-closed. Portable instructions require backing up the old EXE/Setup while preserving data. Windows ordinary-user manual upgrades and data retention passed.
• Mac arm64/version/ad-hoc signature/DMG mounting and unique embedded-resource checks passed. No notarization, automatic-update or minimum-OS/every-model claim is made.
• Android keeps the 0.9.0 signer; replacement, startup, retained settings and system export/share are verified in Android SDK Emulator. This does not claim a physical phone or recipient delivery.
• Earlier Android signer limitations remain. Uninstalling clears local AI history/memory; preserve data first. 0.9.0 does not require uninstalling.

Installation：https://github.com/suiyuebaobao/C-SSH/blob/v0.9.1/INSTALL_EN.md · New form samples：https://github.com/suiyuebaobao/C-SSH/blob/v0.9.1/screenshots/v0.9.1/README_EN.md · v0.9.1 downloads：https://github.com/suiyuebaobao/C-SSH/releases/tag/v0.9.1

SHA256

• C-SSH_0.9.1_x64-setup.exe: 87738a053666b9a44503cfba10f70db2a075d80c4f703fd857d6c7933974d49f
• C-SSH_0.9.1_portable-Windows-x64.zip: a19dd017d41e79fbd8cdfd1bdb159828eb4368c131b381fcdf537fdc543b3eba
• C-SSH_0.9.1_macOS-arm64.dmg: bc0aa6ffb0459e66ea7efc8536c1c6fe8076b3cf1a4dec7c9bcc96a0b91f0a74
• C-SSH_0.9.1_android-arm64.apk: 9cf10f2049a6824ff9bb5cd5af95f3576a3964d3700ee0ccc77ccff63c74a20e

Download and install 0.9.0 manually. Automatic updates from older versions are unavailable.

Platforms: Windows x64 (NSIS and portable ZIP), Apple Silicon Mac arm64 (DMG), and Android arm64 (APK). iOS is not uploaded; the Linux client remains frozen.

Added and improved

• Apple Silicon Mac client and DMG distribution with shared runtime and desktop capabilities.
• IPv4/Domain host selection with separate ports; domains can resolve to IPv6, and existing IPv6 hosts remain usable.
• Official or self-hosted Creation Cloud selection, with isolated login, sync and update sources.
• Manual Windows server Setup and Windows-account onboarding; automatic installation/OCR removed.
• Windows Agent persistent terminals through Terminal2/psmux, with standard OpenSSH retained.
• Fixes for global/project/host AI-history scope, terminal input, RDP logon readiness, host refresh, system information and shared migration.

Verified

• Windows test VM: installation, startup, uninstallation and manual 0.8.8-to-0.9.0 upgrade with data retained.
• Mac: arm64 build, mounted DMG, version and ad-hoc signature integrity.
• Android: package checks and same-signer test-build upgrade, startup and data preservation in SDK Emulator; not an older-official-signature or physical-phone claim.

Installation notes

• Android has a new signature and cannot replace an older official build directly. Uninstalling removes local data; Cloud excludes AI conversations and memory. Keep the old app if needed data is not safely preserved.
• Mac is M-series only, targets macOS13+, is ad-hoc signed/not notarized and has no automatic updater.
• Windows installers have no Authenticode signature and require WebView2 Runtime.
• No automatic update to this release is offered to older clients; use the official manual downloads.