rterm-backend 3.0.5 → 3.0.7

package/bin/gybackend.cjs

@@ -281246,7 +281246,7 @@ function loadSsh2() {
   }
 }
 var GYSHELL_READY_MARKER2 = "__GYSHELL_READY__";
-var SSH_CONNECT_READY_TIMEOUT_MS = 2e4;
+var SSH_CONNECT_READY_TIMEOUT_MS = 6e4;
 var SSH_KEEPALIVE_INTERVAL_MS = 3e4;
 var SSH_KEEPALIVE_COUNT_MAX = 3;
 var LEGACY_ALGORITHMS = {
@@ -281264,7 +281264,9 @@ var LEGACY_ALGORITHMS = {
     "diffie-hellman-group14-sha1",
     "diffie-hellman-group-exchange-sha256",
     "diffie-hellman-group-exchange-sha1",
-    "diffie-hellman-group1-sha1"
+    "diffie-hellman-group1-sha1",
+    // v3.0.6: group-exchange with SHA-256/512 used by some mid-age daemons.
+    "diffie-hellman-group-exchange-sha512"
   ],
   serverHostKey: [
     "rsa-sha2-512",
@@ -281274,7 +281276,12 @@ var LEGACY_ALGORITHMS = {
     "ecdsa-sha2-nistp256",
     "ecdsa-sha2-nistp384",
     "ecdsa-sha2-nistp521",
-    "ssh-dss"
+    "ssh-dss",
+    // v3.0.6: additional legacy host-key algos some very old daemons offer.
+    "ssh-rsa1",
+    "x509v3-sign-rsa",
+    "x509v3-ssh-rsa",
+    "x509v3-sign-dss"
   ],
   cipher: [
     "aes128-ctr",
@@ -281288,7 +281295,12 @@ var LEGACY_ALGORITHMS = {
     "aes128-cbc",
     "aes192-cbc",
     "aes256-cbc",
-    "3des-cbc"
+    "3des-cbc",
+    // v3.0.6: rijndael/serpent/twofish variants a few ancient servers still use.
+    "rijndael128-cbc",
+    "rijndael192-cbc",
+    "rijndael256-cbc",
+    "rijndael-cbc@lysator.liu.se"
   ],
   hmac: [
     "hmac-sha2-256",
@@ -281318,7 +281330,7 @@ var CISCO_ALGORITHMS = {
     "ecdh-sha2-nistp384",
     "ecdh-sha2-nistp521"
   ],
-  serverHostKey: ["ssh-rsa", "rsa-sha2-256", "rsa-sha2-512", "ssh-ed25519", "ssh-dss"],
+  serverHostKey: ["ssh-rsa", "rsa-sha2-256", "rsa-sha2-512", "ssh-ed25519", "ssh-dss", "x509v3-ssh-rsa", "x509v3-sign-rsa"],
   cipher: [
     "aes128-cbc",
     "aes192-cbc",
@@ -281326,7 +281338,10 @@ var CISCO_ALGORITHMS = {
     "3des-cbc",
     "aes128-ctr",
     "aes192-ctr",
-    "aes256-ctr"
+    "aes256-ctr",
+    "rijndael128-cbc",
+    "rijndael192-cbc",
+    "rijndael256-cbc"
   ],
   hmac: [
     "hmac-sha1",
@@ -281376,7 +281391,9 @@ var SSHBackend = class _SSHBackend {
       host: sshConfig.host,
       port: sshConfig.port,
       username: sshConfig.username,
-      readyTimeout: SSH_CONNECT_READY_TIMEOUT_MS,
+      // Per-connection override (v3.0.6) wins over the 60s default — useful to
+      // raise further for very slow legacy negotiation or lower for fast LAN.
+      readyTimeout: typeof sshConfig.readyTimeout === "number" && sshConfig.readyTimeout > 0 ? sshConfig.readyTimeout : SSH_CONNECT_READY_TIMEOUT_MS,
       keepaliveInterval: SSH_KEEPALIVE_INTERVAL_MS,
       keepaliveCountMax: SSH_KEEPALIVE_COUNT_MAX,
       ...algorithms ? { algorithms } : {},
@@ -289526,6 +289543,14 @@ var normalizePersistedTerminalConfig = (raw) => {
       ...typeof raw.privateKey === "string" ? { privateKey: raw.privateKey } : {},
       ...typeof raw.privateKeyPath === "string" ? { privateKeyPath: raw.privateKeyPath } : {},
       ...typeof raw.passphrase === "string" ? { passphrase: raw.passphrase } : {},
+      // v3.0.6: carry the algorithm preset through persistence/reconnect — dropping
+      // it reverted Cisco/legacy tabs to 'modern' on reopen/reconnect, which broke
+      // the handshake AND made SFTP init run on devices with no SFTP (the
+      // "SFTP unavailable: Not connected" bug).
+      ...raw.algorithmsPreset === "legacy" || raw.algorithmsPreset === "cisco" || raw.algorithmsPreset === "modern" ? { algorithmsPreset: raw.algorithmsPreset } : {},
+      // v3.0.6: carry the SSH handshake ready-timeout override too (slow legacy
+      // negotiation); without it a per-connection override was lost on reopen.
+      ...typeof raw.readyTimeout === "number" && Number.isFinite(raw.readyTimeout) && raw.readyTimeout > 0 ? { readyTimeout: raw.readyTimeout } : {},
       ...isObject(raw.proxy) ? { proxy: raw.proxy } : {},
       ...Array.isArray(raw.tunnels) ? { tunnels: raw.tunnels } : {},
       ...isObject(raw.jumpHost) ? { jumpHost: raw.jumpHost } : {}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rterm-backend",
-  "version": "3.0.5",
+  "version": "3.0.7",
   "description": "rterm-backend — the headless AI-native backend for RTerm (dual-published as neuralOS). run RTerm-as-a-service (AI agent, SSH/WinRM/Serial/local terminals, fleet orchestration, advanced automation, SRE observability, Netdata, AWS APerf, plugin system, governance/audit, Prometheus/OTel metrics export, secrets vault, on-call paging, AI cost budgets, GitOps, cloud inventory, APM/DEM/Infra/ETW ingestion, AgentSpan durable-agent bridge). The RTerm desktop app stays RTerm; neuralOS is the standalone backend daemon. Dual-published as rterm-backend. v3.0.5: terminal core (SSH auto-reconnect, WinRM persistent+streaming, serial break), chat user-message nav, reconnecting indicator, memory search/cap.",
   "main": "bin/gybackend.cjs",
   "bin": {