SSH-MITM Files

What's Changed

Added

• Flatpak: warn at startup when running sandboxed without home/host filesystem access, since custom host key files, --scp-replace-file/ --sftp-replace-file/--ssh-mirrorshell-key paths, and other files outside the app's private data directory are unreachable otherwise. The same hint is now also shown for permission-denied host key reads under Flatpak, alongside the existing Snap ssh-keys hint.

Changed

• Replaced python-json-logger with an in-house JSON log formatter
• Replaced pytz with the standard library's datetime.UTC
• Replaced colored with an in-house ANSI styling module (sshmitm.colors), now respecting NO_COLOR/FORCE_COLOR
• Colors.emoji() now uses rich.emoji.Emoji instead of rich's private _emoji_codes
• Replaced psrpcore with an in-house PSRP wire-format parser (sshmitm.plugins.powershell.psrp_wire)

Fixed

• snap: build was broken on arm64/armhf — pylock.snap.toml only pinned x86_64 wheel URLs (generated on an amd64 ubuntu-24.04 runner per doc/develop/reproducible-builds.md), so pip had no matching distribution to install on those architectures. Replaced it with requirements-snap.txt, a pip-compile --generate-hashes lock that pins every published wheel/sdist hash per package instead of one platform-specific wheel, so a single file covers both architectures. snapcraft.yaml drops armhf (no working build to begin with) and keeps amd64/arm64.