What's new in Ravelon

Important

• After updating, the sidebar shows icons only and names appear on hover. To bring back the wide sidebar with names, go to Settings → General → Interface → Sidebar, or click the expand button at the top of the sidebar.
• Settings now open from your avatar at the foot of the sidebar, or as before with ⌘9 on macOS or Ctrl+9 on Windows and Linux.

New

• A browser pane shows web pages right next to your terminal, for example a development server on localhost:3000. Open it with Browser in the tab strip or from the command palette. Pages that do not allow embedding open in your own browser with one click.
• Right-click a host for a menu: connect, open in a new tab or beside the active pane, browse files, copy the SSH command or the address, pin, edit, duplicate and delete. Shift+F10 opens it from the keyboard.
• The menu behind your avatar brings together account and sync, keyboard shortcuts, updates, documentation, light and dark mode, Settings and signing out.
• The new Ravelon Night and Ravelon Day themes are the default for new installs. You can also pick them under Settings → Themes.

Improved

• In the host search, Enter connects to the highlighted match. Use the arrow keys to pick another one without leaving the field. When you type an address, Enter still connects to exactly that address.
• The search field in the title bar opens the command palette, as does ⌘K on macOS or Ctrl+K on Windows and Linux.
• The tool panel on the right of the Workspace remembers whether it was open, which tool was selected and where new connections open.
• The sidebar, the main area and terminal panes stand apart more clearly, and the active pane has a coloured outline.

New

• You can merge tabs: drag a tab onto the middle of another tab and both appear side by side. Rest on it for a moment and the tab opens, so you can drop the dragged tab on an edge of a pane, or in its centre to arrange all panes as a grid. Connections keep running. Use Move to new tab in a pane's context menu to split it off again.
• Remote Desktop can redirect a printer: turn on Redirect printer under Remote Desktop in the host settings, and Windows prints to a printer named "Ravelon". Every job arrives as a PDF in Downloads/Ravelon, and you open it right from the remote desktop pane to print it locally. The server needs the Microsoft Print to PDF driver. Administrators can turn the redirection off by policy.
• Under Settings → Account & sync you can start the free Pro trial of your Ravelon Cloud account without payment details and see how many days are left.
• Your account in the sidebar shows your Gravatar picture when your e-mail address has one.

Improved

• When you join a vault that already holds data, your local entries are synced too instead of being skipped.
• When the sync server was restored from a backup, Ravelon uploads the entries missing there again. Nothing is deleted locally.
• Account & sync shows the pairing code when you pair a device and whether your e-mail address is confirmed. Signing out also signs the device out on the server.

Fixed

• A single very large entry no longer holds up syncing, and many changes at once are uploaded in suitable batches.
• An expired sign-in is renewed in the background instead of stopping sync with an error. When the server is briefly overloaded, Ravelon tries again later.
• A renamed personal vault stays connected to its cloud copy.
• With a self-hosted sync server under a sub-path, changes from other devices arrive right away again.

Important

• An unknown host key can no longer be allowed just once. When you trust it, exactly the shown key is saved, and jump hosts are always checked against their own saved key.

New

• File transfers: when a target already exists, Ravelon asks once whether to replace, resume or skip. Interrupted transfers can be resumed, several files transfer at the same time, and the modification time is kept.
• In the file browser you can change the permissions of files and folders on the server and open server files in your default program. Every save is uploaded. If someone changed the file on the server in the meantime, your copy is kept and nothing is overwritten.
• Groups with subgroups pass user, credential and jump host on to their hosts. You can filter hosts by protocol, sort them, edit several at once and check whether they are reachable.
• Many servers at once: type into all terminals of a tab at the same time, run a command on several hosts and see the output collected. At start, Ravelon can reopen the tabs you had open last.
• SSH through a SOCKS5 or HTTP proxy and through a proxy command, OpenSSH user certificates, jump hosts with their own password or second factor, and older algorithms per host for legacy switches and appliances.
• Import hosts from ~/.ssh/config, CSV, PuTTY, MobaXterm or a Ravelon export, and export them as JSON, CSV or an OpenSSH config. Take over known host keys from ~/.ssh/known_hosts. Passwords are never imported or exported.
• Record terminal output to files per pane or automatically for every SSH session, and forward the SSH agent per host.
• New downloads for Windows and Linux on ARM64 devices, on Linux also as .deb and .rpm packages.

Improved

• Ravelon Voice ends a call only after ten silent minutes and warns you first, survives short connection drops and switches to the new microphone when you unplug a headset. You choose voice, microphone and speaker, and ⌘⌥V on macOS or Ctrl+Alt+V on Windows and Linux starts a call or mutes it.
• For companies: administrators can turn off updates, telemetry, sync, AI, Voice and local agents by policy. Ravelon uses the system proxy and the operating system's certificates, writes a diagnostic log without passwords and creates a support report on request.
• Vaults with a passphrase can lock after an idle time, and copied passwords are removed from the clipboard after 30 seconds.
• An ended SSH terminal stays linked to its host. Enter or Reconnect connects it again.

Important

• Tab no longer accepts autocomplete suggestions and is left to your shell's own completion. Press → to accept a suggestion.

New

• The Ravelon Agent in the right sidebar carries out tasks on your servers. It knows your hosts, groups, tags and open terminals, suggests commands, connects to hosts and plans the next step from the results. Every step waits for your click, and commands that change something need an extra confirmation by typing RUN. The agent never sees passwords or keys.
• Type # in a terminal and describe what you need, for example # find the largest files here. Ravelon suggests matching commands, and → or Enter inserts one without running it. This requires an AI provider to be set up.

Improved

• Autocomplete shows the best suggestion as grey text right after the cursor. Use ↓ and ↑ to choose another one, Enter to insert it without running it, and Esc to hide the list until the next command. Recently used commands rank higher.
• When you start AI agents, pick the project folder from the terminal start folder, the folder of the active terminal or your recent folders. The list stays on this device. If a folder is missing, you see one clear message before any agent starts.

Fixed

• In Automatic mode, autocomplete appears again in zsh, for example with oh-my-zsh, and in fish. It stays hidden in programs you start from the shell, such as Python or an installer.
• Path suggestions in local terminals on Windows now produce valid paths.

Removed

• The previous AI chat in the sidebar is replaced by the Ravelon Agent. Conversations from the old chat are no longer shown.

• Tabs like a browser. ⌘W or Ctrl+W closes the focused pane and, with its last pane, the tab; ⌘⇧T or Ctrl+Shift+T reopens the last closed tab with its layout. In the workspace ⌘ or Ctrl+1 to 8 selects a tab and +9 the last one. Ctrl+Tab cycles tabs, as does Ctrl+PageUp/PageDown on Windows and Linux; a middle-click closes. On macOS ⌘W no longer closes the whole window.
• Copy and paste on every system. Ctrl+V pastes into the terminal again on Windows and Linux, and multi-line text arrives without doubled line breaks. On Windows and Linux Ctrl+C copies a selection and still interrupts without one; Ctrl+Shift+C, Ctrl+Insert and Shift+Insert work as well. On macOS ⌘C copies the terminal selection.
• Safer links. Terminal links, including OSC 8 links from tools such as ls --hyperlink, open in the default browser with ⌘-click or Ctrl+click. A plain click only selects text.
• Shortcuts on every keyboard. Shift+digit and macOS Option shortcuts work on German and other layouts; AltGr characters such as @ never trigger a shortcut. Custom bindings are kept.
• Consistent typography. The interface uses one font size scale, and the zoom setting now enlarges all text, including both sidebars.
• Voice with agents. Ravelon Voice can open host, snippet, tunnel and identity editors, inspect an agent pane after you allow it, and send a message to the agent only after explicit confirmation.

• VNC in the workspace. Open VNC hosts in tabs or split panes alongside SSH, RDP and local terminals. Fit, original size, fullscreen, view-only mode and manual clipboard exchange are included.
• TLS and Apple login. VNC supports VeNCrypt with verified X.509 certificates, custom CA certificates and Apple Remote Desktop authentication. Anonymous TLS requires explicit selection. Classic VNC and Apple login do not encrypt the desktop stream; a saved SSH host can protect the entire connection.
• Custom agent profiles and providers. Configure Codex, Claude Code and other built-in agents with launch arguments, environment variables and API profiles. Manage custom agents and icons centrally in Settings, with matching icons in the launcher and panes.
• Tidier hosts. The host list uses the available width and keeps row actions compact and aligned. The host editor adapts to narrow windows.
• Quieter development startup. Development instances no longer access the release app's saved sync keychain entry. Release sign-ins remain intact.
• Encrypted synchronization. VNC settings remain inside the encrypted vault and work with both cloud and self-hosted sync without a server migration.

• Voice beyond the main window. Choose a draggable desktop window, the macOS menu bar or Windows/Linux system tray, or the in-app panel under Settings → General. The main window can stay minimized during a conversation.
• Start speaking with one click. The Voice button starts immediately with the selected eligible OpenAI API profile. Without a profile, it opens setup. Mute and end controls are also available from the tray icon.
• Responsive audio waves. The animation follows microphone and playback levels, matches the app theme, and respects reduced-motion preferences. The interface is more compact, with provider and app-control options behind the settings button.
• One conversation across display modes. Changing the display or hiding the panel preserves the running session. Vault changes and quitting the app stop the conversation. The companion window can access only limited voice controls.

• Bounded agent notifications. The Windows helper processes hook events even when standard input remains open. Input and toast processes have explicit time limits.
• Repair included in the app. Existing Ravelon hooks for Codex, Claude Code and Gemini are updated in the background on the first launch after upgrading. Other hooks and settings are preserved, and changed files are backed up. Node.js is required.
• Less work before commands. Codex notifies for actual input requests instead of every tool call. Automatic approval review stays quiet and completion notifications remain available. Codex may ask you to review the changed hooks again.

• Snippets inside the workspace. Saved commands are available in the right sidebar again and can be inserted into the active terminal.
• Browse connections as folders. The connection picker uses existing groups as folders. Open a folder, go back and connect directly from the workspace.
• Two clearer file lists. The updated SFTP view provides compact local and remote file lists, navigation history and a persistent transfer overview. Drag files between the lists or directly onto destination folders.
• Upload from Windows Explorer. Files and folders can be dragged from Explorer into the remote file list or onto a destination folder.
• Organize hosts more easily. Drag hosts from All Hosts into groups. Expand groups in the collection sidebar to see their hosts with their assigned icons.

• One workspace for terminals and desktops. SSH connections, local terminals and RDP desktops can now share tabs and be arranged side by side or stacked. Running sessions remain available when switching views.
• Save and restore layouts. Mixed terminal and desktop arrangements can be named, saved, reopened and removed.
• Find connections faster. The source sidebar includes search, SSH and RDP filters, and a choice of where to open a new session. Narrow windows use a collapsible sidebar.
• Agents removed. The previous Agents area, including project management, chat history and its integration, has been removed. Notes, the system monitor and the terminal assistant remain accessible in the workspace.

• More space around workspace windows. Terminal, Desktop and Agents panes now have breathing room beside navigation panels and around the workspace edges. Narrow windows use smaller margins.
• Clearer window frames. Borders and shadows distinguish each pane from its background, with a subtle accent around the active pane. Terminal shadows are no longer clipped at the pane edge.
• More space between split panes. Slightly wider split dividers separate the panes and remain draggable for resizing.

• A calmer, clearer interface. Host lists, files, keys, snippets, tunnels, and settings now have more consistent spacing, improved contrast, and clearer compact layouts. File names receive more space, with additional details available on demand.
• Tools integrated into the right panel. The separate vertical toolbar has been removed. Tool selection now sits at the top of the main side panel and remains accessible in narrow windows.
• Account name instead of email. The sidebar and sync status display the saved profile name, falling back to the email address when no name is available.
• Improved keyboard navigation. Workspace tabs, settings, and vault selection are easier to operate by keyboard. Dialogs restore focus and prevent shortcuts from accidentally affecting the background.
• Clearer entry points and feedback. Empty Remote Desktop workspaces provide direct actions to add or select a host. Search, loading, and error states have been improved, and onboarding can finish without an additional Pro step.

• Agents can now operate Ravelon's visible browser surfaces through a real MCP connection. Codex, Claude, and OpenCode receive a session-local connection on normal launches without changing global user configuration. Unsupported or customized commands receive no browser credentials.
• New agent activity view. Process phase, attention, approval hints, MCP delivery, and a bounded event history are visible directly in the workspace. The current PTY control path is represented honestly.
• Dedicated browser leases prevent agents from colliding. Each task receives its own visible WebView; releasing or expiring the lease, or disabling MCP, destroys the surface. Navigation, DOM snapshots, stable element references, clicks, input, keys, scrolling, waits, device views, and history are available as tools.
• Comprehensive MCP hardening. Loopback and host validation, bearer authentication before reading the request body, size and time limits, bounded concurrency, immediate revocation, private configuration permissions, and redacted password fields protect the local browser bridge.
• Agent processes now report real exit codes and signals, while an unavailable browser MCP cleanly falls back to a normal agent launch.

• Maintenance rebuild based on the current main state of Ravelon 0.11.0.
• No additional product changes are included compared with 0.11.0.

• One sign-in instead of vault password plus sync passphrase. Sign in to Ravelon Cloud or your own server with your e-mail and account password, and that is the whole setup. The separate sync passphrase is gone. Your password unlocks, on the device, the key that encrypts the vault before upload; Ravelon still cannot read what it syncs. Accounts that sign in with Google, GitHub or Discord use the browser sign-in and are asked for the password once afterwards.
• Existing accounts migrate without re-encryption. The previous sync passphrase is uploaded sealed on the first password sign-in; from then on another device only needs the account password. A vault from an older Ravelon asks for its sync passphrase exactly once.
• Change the password in the app, with the sync key re-sealed automatically. If the password was changed elsewhere, the next device asks once for the previous one.
• Sync keys & identities is now a switch, the way Termius does it, off by default. Hosts, groups, snippets and settings roam right away; identities with their passwords, key passphrases and imported private keys only on request. Accounts that already sync identities keep doing so.
• Require the account password at launch replaces the separate master passphrase as the lock on devices with an account, and the unlock screen asks for the account password accordingly. A custom passphrase remains available for devices without an account.
• Connection failures without guesswork. SSH and SFTP show the active connection attempt with a seconds counter and explain failures such as refused ports, unknown hosts, missing routes, or timeouts directly with a retry button. Remote desktops likewise translate internal IronRDP errors into understandable causes.
• More resilient remote desktops. After an unexpected disconnect, Ravelon retries automatically up to three times. Resizing, fixed resolutions, hidden panes, and switching between app pages work more reliably without rebuilding the session unnecessarily.

• Saved Microsoft RDP hosts now open directly inside Ravelon in a dedicated Desktop area. Remote desktops use the same workspace model as terminals and can be arranged as tabs, split panes, or maximized panes.
• Connections use the official IronRDP web components for RDP, TLS, NLA, and CredSSP. A one-use, loopback-only transport runs inside the existing Ravelon process; no external gateway service, noVNC, VNC, or additional sidecar is required.
• This release includes dynamic remote resolution when resizing the window, correct Retina scaling, clipboard exchange, view-only mode, Ctrl+Alt+Delete, and controlled reconnection after a server disconnect or restart.
• Audio, printer, drive, smart-card, and other device redirection, as well as saving RDP layouts in workspace templates, are not included in this first embedded release yet.

• The host sources list in the right-hand multiplexer panel is fully and independently scrollable again. Its header and management action remain fixed while long, grouped host lists stay reachable with a mouse wheel or trackpad.
• Existing remote Team Vaults no longer invent a different random key on an additional device. Ravelon now retrieves the account-wrapped key material and restores multi-device access without sending plaintext keys to the server.
• Team members keep separate key envelopes protected by their own sync passphrases. One member can no longer overwrite another account's key material.
• Team invitations now use the canonical URL supplied by the connected cloud or self-hosted instance instead of directing every manually copied link to ravelon.app.

• The terminal and agent workspace now has a persistent, searchable sources panel for local shells, SSH hosts, and saved agents. This replaces the previous Start host and Start agent actions.
• Clicking a source opens it in a new tab. Drag and drop can place it as a tab, replace the active pane, or split right or down; the same placement actions are available from the keyboard.
• Hosts are grouped into local, favorites, recent, and alphabetically ordered entries. Agents show favorites first and then sort alphabetically, with working-directory selection and direct access to management and workspace browsing.
• On narrow windows, the sources panel becomes a compact drawer. Persisted panel state, focus handling, reduced-motion support, and explicit drop zones provide consistent multiplexer behavior at every size.
• Autocomplete now returns only relevant matches. Already typed options such as ls -la no longer trigger unrelated path suggestions, and paths are filtered against the current operand.

• Terminal autocomplete is now fully disabled when set to Off: state, suggestions, and in-flight path lookups are discarded immediately, including in panes that are already open.
• Password, passphrase, OTP, token, and PIN responses are neither tracked as input nor stored in history. Older history entries without the current security policy remain encrypted but are no longer suggested.
• History, Vault snippets, working directories, and path suggestions are bound to the owning Vault and the exact local or SSH target. Falling back from SSH to a local shell can no longer inherit stale remote state.
• AI, Pilot, and file suggestions are validated before insertion for terminal controls, bidirectional text manipulation, and invalid Unicode sequences. Additional filters prevent common inline credentials from being stored.
• The compact, Termius-inspired suggestion menu is anchored at the prompt and shows the current target context, multiple results, their sources, and keyboard hints. Narrow panes and the system reduced-motion preference are respected.

• New professional autocomplete in local and SSH terminal panes for commands, subcommands, options, Vault snippets, history, and local or remote paths.
• Fast suggestions appear while typing; Ctrl+Space opens the complete keyboard- and mouse-accessible menu. Tab or Right Arrow accepts text without executing the command.
• Encrypted command history stays device-local, is separated by host or shell, and can be cleared in Settings. Commands containing likely inline secrets are never stored.
• Autocomplete pauses in full-screen programs and at password, passphrase, OTP, token, and PIN prompts, and can be set to automatic, on demand, or off.
• Path suggestions follow the current working directory through the shell-standard OSC 7 signal and a safe cd fallback, including SFTP-backed paths in SSH sessions.

• New provider-neutral AI assistant directly in each terminal pane, with explicitly shared pane context, safely classified command cards, and confirmation-gated pane control.
• AI chats are encrypted and stored locally per vault so they survive restarts; active provider requests can be cancelled.
• The SFTP browser now transfers complete folders recursively. The local file browser can create, rename, and delete files and folders, and edit text files.
• SSH keyboard-interactive supports real OTP and multi-prompt flows across multiple authentication rounds.
• The Git panel now offers Stage all, Commit, fast-forward-only Pull, and confirmation-gated Push.
• The key area can generate secure Ed25519 keys with an optional passphrase and save them as Ravelon credentials.

• Local terminal panes use login-shell semantics on Unix so packaged macOS app launches can find Homebrew and other tools configured in shell profiles.
• New shell picker in Settings with automatic system detection, executable installations, and a custom executable path.
• A local shell is ready in the Terminal workspace when the app starts. It can be closed and is not recreated during the same session.
• Removed a stale German mapping for invalid sync events.

• Terminal clipboard paste via Mod+V / Ctrl+Shift+V using the local clipboard API, with bracketed paste when the terminal reports it.
• OSC-52 Write (remote to local) enabled; OSC-52 Read stays hard-off in code.
• Sync WebSocket soft-reconnect on unclean TLS/EOF (no toast) with keepalive ping; auth and policy failures stay loud.

• Desktop 0.10.2 with updater channel (Win/mac).
• Signed updater archives for automatic updates.
• Linux AppImage remains optional and separate (unsigned).

• Linux AppImage (unsigned) for manual download.
• New integrated update notification with localized changelogs, manual installer downloads, and optional automatic signature-verified installation.
• Improved onboarding and clearer host, vault, and SSH workflows.
• Native universal macOS app for Apple Silicon and Intel, signed with Developer ID, notarized by Apple, and protected by the hardened runtime.
• Refined title bar, host presentation, and Ravelon application icons.

• New integrated update notification with localized changelogs, manual installer downloads, and optional automatic signature-verified installation.
• Improved onboarding and clearer host, vault, and SSH workflows.
• Native universal macOS app for Apple Silicon and Intel, signed with Developer ID, notarized by Apple, and protected by the hardened runtime.
• Refined title bar, host presentation, and Ravelon application icons.