Color-coded command blocks make long terminal history readable. The desktop app and bundled CLI share the same SQLite database. Secrets stay in your platform keychain; encrypted sync goes to your own private GitHub repo.
4desktop and mobile targets: macOS, Windows, Linux, Android
0RSSH cloud accounts or hosted secret stores
1shared database for GUI and CLI workflows
137.508°golden-angle hue step for command blocks
rssh lsrssh open prod-apiProxyJump through bastion hostsSFTP upload and downloadlocal, remote, SOCKS5 forwardingsession recording as asciicast v2AI diagnose, never fixGitHub encrypted backuprssh lsrssh open prod-apiProxyJump through bastion hostsSFTP upload and downloadlocal, remote, SOCKS5 forwardingsession recording as asciicast v2AI diagnose, never fixGitHub encrypted backup
Narrative interface
A session turns into a timeline.
RSSH keeps the ordinary SSH loop intact, then adds structure around it: connection profiles, readable command blocks, explainable AI probes, replayable sessions, and sync that does not require a vendor cloud.
Open prod from a GUI group or from any shell.
Profiles, credentials, groups, ProxyJump bastions, and port forwards live in one local database. The GUI is for browsing and editing; the CLI is for muscle memory.
zsh
~rssh ls
prod-api 10.0.1.42 deploy
staging 10.0.2.10 ubuntu
~rssh open prod-api
ok connected via bastion-01
Every Enter key creates a visual boundary.
RSSH uses local xterm markers, not fragile prompt parsing. Each command block gets a golden-angle color, so thousands of lines still show where work started, failed, retried, and recovered.
rssh - production
AI diagnosis pauses at the exact point of risk.
The assistant can choose a Java, Go, CPU, memory, IO, or network playbook, but every command passes shape validation and lands on a human approval card before it runs.
rssh — AI diagnose
AIProbing the environment first — OS and JDK version determine the toolchain.
run_command
java -version && uname -a
Read-only probe. No files changed.
RejectRun on prod-api
One-click CLI install keeps the same source of truth.
Shell completions are generated for zsh, bash, fish, and PowerShell. The CLI can open sessions, manage config, launch forwards, and push encrypted backups.
Desktop GUIprofiles, files, recordings
rw
SQLiteshared local database
sync
CLIrssh open prod
rw
Sync configuration, not blind trust.
Private keys and passwords stay in OS keychain storage. Each credential decides whether it can sync remotely, and the remote target is your private GitHub repo.
keychain
filter
your repo
AI Ops Diagnose
Automated triage, human-approved.
Tell RSSH what is wrong. It picks the playbook, probes the environment, samples lightly, and attributes the likely cause. You never type jstack, pprof, or jmap by hand just to start the investigation.
01
Scenario routing
Java, Go, CPU, memory, IO, network, and shell context are selected from the symptoms.
02
Command shape validation
Destructive forms are rejected before a command reaches the approval card.
03
Diagnose only
The assistant gathers and explains evidence. It does not apply fixes on your server.
symptom
CPU is at 100% on prod-api.
User intent stays plain. The assistant turns it into an investigation plan.
probe
Detect OS, runtime, and toolchain.
RSSH samples environment facts before choosing Java, Go, process, network, or disk tools.
approval
Every command pauses.
java -version && uname -a
Read-only probe. No files changed.
RejectRun on prod-api
sample
Heavy artifacts stay local.
Large files and samples are pulled back for local analysis instead of being pasted into the model context.
report
Cause attribution, not mystery output.
The final answer ties symptoms to evidence and leaves the operator in control of the fix.
Signature feature
Command Block Colors.
Every command becomes a block. A colored edge marks its output until the next command begins. The color sequence is generated by golden-angle HSL rotation, giving stable contrast without remote hooks or shell prompt hacks.
rssh - production-server
137.508°hue step per command
0remote dependencies for block boundaries
∞non-colliding hue progression
localxterm markers and client-side rendering
CLI-first
One database, two interfaces.
The bundled CLI reads the same SQLite database as the desktop app. Create a profile in the GUI, then run rssh open prod from the terminal. Shell completions cover zsh, bash, fish, and PowerShell.
Desktop GUI
Profile groupscolor-coded hosts and credentials
edit
SFTP browserupload and download files
rw
Recordingasciicast v2 playback
play
Forward panelocal, remote, SOCKS5 tunnels
live
SQLiteone local source of truth for GUI and CLI
Terminal CLI
rssh lslist saved targets
read
rssh open prod-apiopen a saved session
ssh
rssh open fwd postgresstart a named tunnel
fwd
rssh config pushencrypted GitHub backup
sync
Security model
Your keys never leave your machine by accident.
Secrets live in your platform keychain. You decide per credential what can sync. The remote destination is your own private GitHub repo, and payloads are encrypted before upload.
KeychainmacOS Keychain, Windows Credential Manager, Linux Secret Service.
Per-key filtersave_to_remote decides what can enter an encrypted backup.
Encrypted payloadConfig is encrypted before it leaves the device.
Your GitHub repoNo RSSH account, no RSSH server, no hosted secret store.
Local secrets
Private keys and passwords are stored in platform secret storage. Android falls back to encrypted SQLite for the mobile environment.
Granular sync control
Production root key? Keep it local. Dev password? Allow it to sync. The decision is attached to each credential instead of a global all-or-nothing switch.
No third-party cloud
The sync target is a private GitHub repo you own. RSSH does not need accounts, hosted config storage, or telemetry to keep devices aligned.
Shape-checked AI commands
AI diagnosis also follows the security model: commands are validated, explained, and explicitly approved before execution.
Workbench
The rest of the terminal day is covered.
RSSH includes the operational details that usually force teams to juggle terminal tabs, SFTP apps, tunnel scripts, shell history, and scattered SSH config files.
SFTP file browser
Remote file browsing with upload and download, attached to the same SSH profiles you already use for terminal sessions.
Port forwarding
Local, remote, and SOCKS5 forwards with named configs and live traffic stats.
Session recording
Record and replay sessions as asciicast v2 with speed control.
Keyword highlighting
Highlight ERROR, WARN, INFO, or your own terms inside long scrollback.
Import ~/.ssh/config
Bring existing SSH config into the profile manager instead of recreating every host.
Command snippets and broadcast
Reusable commands open with Cmd+E, and broadcast can send input across multiple sessions when you are coordinating repeated work.
Mobile keybar
Ctrl, Alt, Esc, Tab, and arrows are reachable on Android with safe-area-aware navigation.
Local terminal
Open zsh, bash, or PowerShell locally when the task starts outside SSH.
JetBrains plugin
Run RSSH inside a JetBrains IDE tool window while sharing the same ~/.rssh data directory.
Deep dives
Read the design notes.
Go deeper into the decisions behind RSSH: why the terminal is a natural ops surface, how AI diagnosis stays operator-approved, and how local-first sync keeps credentials under your control.
Releases are published on GitHub. The cards below resolve to the newest matching asset when the GitHub API is reachable, and fall back to the latest release page otherwise.