gxShell

KO | EN

gitlite — search

#pdf #claude #database #json #electron #reactjs #vue #svg #editor #ai-agent

(★ 9)

跨平台桌面 SSH 工作台 — 终端、监控、SFTP、Docker、隧道与 AI 助手一体化

File Explorer

ZIP Download

- - bug_report.yml
  - config.yml
  - feature_request.yml
- - release.yml
  - verify.yml
- dependabot.yml
- - manager.go
  - manager_test.go
- - store.go
  - store_cache_test.go
  - store_test.go
  - terminal.go
  - terminal_test.go
  - transaction.go
  - transaction_test.go
- - manager.go
  - manager_test.go
- - manager.go
  - manager_test.go
  - parse.go
  - root.go
- - localfs.go
- - manager.go
  - manager_test.go
- - logger.go
  - logger_test.go
- - monitor.go
  - monitor_test.go
- - traceroute.go
  - traceroute_other.go
  - traceroute_test.go
  - traceroute_windows.go
- - manager.go
  - manager_test.go
- - dpapi_other.go
  - dpapi_windows.go
  - keyring.go
  - migration.go
  - migration_test.go
  - names_other.go
  - names_windows.go
  - store.go
  - store_test.go
- - manager.go
  - manager_test.go
  - root.go
- - retention.go
  - retention_test.go
  - writer.go
  - writer_test.go
- - manager.go
  - manager_test.go
  - resume.go
  - resume_test.go
  - transfer_integration_test.go
- - agent_other.go
  - agent_windows.go
  - command_stream_test.go
  - compatibility_integration_test.go
  - instances_integration_test.go
  - knownhosts.go
  - recorder.go
  - runtime.go
  - runtime_test.go
  - session.go
  - session_test.go
- - codec.go
  - codec_test.go
  - termio.go
  - termio_test.go
  - writer.go
  - writer_test.go
- - tunnel.go
  - tunnel_cli_test.go
  - tunnel_test.go
- - backup.go
  - id.go
  - terminal.go
  - types.go
- - check.go
  - check_test.go
  - compare.go
  - compare_test.go
  - version.go
- - manager.go
  - manager_test.go
- - Info.dev.plist
  - Info.plist
- - AppIcon.ico
  - icon.ico
  - icon.png
  - info.json
  - wails.exe.manifest
- appicon.png
- README.md
- - main.go
  - main_test.go
- - gxshell-overview.webp
- - backup-migration.md
  - cli-implementation.md
  - document-workspace.md
  - markdown-reading.md
  - session-log-retention.md
  - terminal-batches.md
  - terminal-compatibility.md
  - windows-context-menu.md
- - todo-genesis-prompt.md
- agent-guide.md
- architecture.md
- cli.md
- cli.zh-CN.md
- development.md
- features.md
- releasing.md
- security.md
- - check-bindings.mjs
  - check-css.mjs
  - check-i18n.mjs
  - check-version.mjs
  - smoke-markdown.mjs
  - smoke-workbench.mjs
- - App.tsx
  - constants.tsx
  - i18n.ts
  - main.tsx
  - style.css
  - types.ts
  - vite-env.d.ts
- eslint.config.js
- index.html
- package-lock.json
- package.json
- postcss.config.js
- tailwind.config.js
- tsconfig.json
- tsconfig.node.json
- vite.config.ts
- vitest.config.ts
- - app.go
  - app_ai.go
  - app_ai_requests_test.go
  - app_aitoolregistry.go
  - app_allowedfiles.go
  - app_approval.go
  - app_assets.go
  - app_auth.go
  - app_automation.go
  - app_backup.go
  - app_backup_hosts.go
  - app_backup_plan.go
  - app_backup_review_test.go
  - app_backup_test.go
  - app_backup_validate.go
  - app_backup_workspaces.go
  - app_backup_workspaces_test.go
  - app_change_audit.go
  - app_cli.go
  - app_cli_approval_test.go
  - app_cli_jobs.go
  - app_cli_jobs_test.go
  - app_cli_resources.go
  - app_cli_resources_test.go
  - app_cli_risk.go
  - app_cli_secrets.go
  - app_cli_secrets_test.go
  - app_cli_test.go
  - app_cli_trust_test.go
  - app_cmdguard.go
  - app_cmdguard_bypass_test.go
  - app_cmdtier.go
  - app_cmdtier_paths.go
  - app_cmdtier_test.go
  - app_docker.go
  - app_document_formats_test.go
  - app_document_io.go
  - app_document_safety_test.go
  - app_document_test.go
  - app_fileassoc_other.go
  - app_fileassoc_windows.go
  - app_fileassoc_windows_test.go
  - app_firewall.go
  - app_firewall_test.go
  - app_localfile.go
  - app_log_test.go
  - app_network.go
  - app_postconnect.go
  - app_postconnect_test.go
  - app_profile.go
  - app_profile_batch.go
  - app_profile_batch_test.go
  - app_profile_helpers.go
  - app_profile_settings_test.go
  - app_profile_transfer.go
  - app_profile_transfer_test.go
  - app_quick_connect.go
  - app_ratelimit.go
  - app_recording.go
  - app_scheduler.go
  - app_services.go
  - app_session_logs.go
  - app_sftp.go
  - app_subsystems_test.go
  - app_terminal.go
  - app_terminal_events.go
  - app_test.go
  - app_update.go
  - app_update_test.go
  - app_utils.go
  - app_websites.go
  - app_window.go
  - app_window_test.go
  - app_workspace_test.go
  - entrypoint.go
  - systray.go
  - systray_darwin.go
.gitattributes
.gitignore
AGENTS.md
CHANGELOG.md
CLAUDE.md
CONTRIBUTING.md
go.mod
go.sum
LICENSE
main.go
README.md
README.zh-CN.md
SECURITY.md
wails.json

# Use via CDN

jsDelivr

jsDelivr serves any public GitHub repository as a CDN with zero setup. Pick a version and a file to get a ready-to-paste link and snippet.

Version

File

Link

Example

# Project Badges

Latest release Visit
CI Visit
License Visit
Windows

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

gxShell is a Windows SSH workbench that combines terminal sessions, SFTP,
monitoring, tunnels, AI tools, a local and remote document viewer/editor, and
an optional CLI in one desktop app.

What it does that a conventional SSH client does not: local tools and AI agents
can run commands on your servers *through* the running app, without ever
receiving your SSH credentials. They address servers by alias only — never a
hostname, user, port, or jump host — with native confirmations and an optional
trust window for permitted operations. Trust can be granted for 1, 4, 8, or 24
hours; there is no permanent switch. Sensitive and high-risk commands still
require confirmation during a trust window.

[中文说明](README.zh-CN.md)

![gxShell desktop SSH workbench](https://raw.githubusercontent.com/gxmst/gxShell/main/docs/assets/gxshell-overview.webp)

## Download

Download the latest [Windows x64 release](https://github.com/gxmst/gxShell/releases/latest).
The recommended zip keeps the desktop app at its root. The optional CLI,
English and Chinese usage guides, and agent-safety guide are grouped under
`CLI/`; the license and build manifest are also included. The CLI server is
disabled by default and must be explicitly enabled in Settings.

Requirements: Windows 10/11 x64 and the Microsoft WebView2 Runtime. The
unsigned build may show a SmartScreen warning on first launch; use **More
info → Run anyway** only when the checksum matches the release page.

To verify the package, compare its hash against `SHA256SUMS.txt` from the same
release:

```powershell
Get-FileHash .\gxShell-v<version>-windows-amd64.zip -Algorithm SHA256
```

## Highlights

- Local CLI and HTTP API that let scripts and AI agents work on your servers through the app, with alias-only targeting, native approvals, expiring trust, and `secret://` references that keep credentials out of prompts and process arguments.
- Built-in AI assistant over any OpenAI-compatible API, with streaming replies, terminal context, and confirmation before any remote tool call.
- Multi-session SSH terminal with independent terminals for the same server, two- or four-pane layouts, named workspaces, reconnect, broadcast input, and searchable tabs.
- Per-server terminal appearance, SSH character encoding, TERM, and Backspace/Delete preferences.
- SFTP browsing, uploads, downloads, resumable transfers, and local/remote document workflows.
- Linux monitoring, Docker operations, SSH tunnels, services, firewall, cron, and website helpers over SSH.
- Local/remote document navigation and editing for Markdown, JSON/JSONC/JSONL/NDJSON, source code, and deployment files; Mermaid zoom, read-only PDF viewing, and responsive large-text previews.
- Encrypted configuration backups with import previews, conflict handling, optional credentials/private keys, and rollback on failed imports.
- Session recording to asciinema `.cast` files with a built-in player, plus opt-in text logs and automatic cleanup by age and total size.
- Windows tray integration, file associations, drag-and-drop opening, and update notifications.

## Keyboard shortcuts

| Shortcut | Action |
| --- | --- |
| `Ctrl+K` | Search servers, sessions, commands, and workspace actions |
| `Ctrl+F` | Find in the focused terminal or document |
| `Ctrl+Tab` / `Ctrl+Shift+Tab` | Next / previous tab |
| `Alt+1` … `Alt+9` | Jump to a tab |
| `Ctrl+Shift+W` | Close the active tab |
| `Ctrl+S` | Save an edited document |

## Security

- Passwords, key passphrases, and AI API keys use the OS credential store or an encrypted fallback.
- CLI access is disabled by default. When explicitly enabled, it is local-only, token-protected, opt-in per profile, and guarded by native confirmations.
- AI and CLI commands apply dangerous-command and sensitive-path policies before execution.
- The app does not send telemetry; its optional public release check is disabled by default.

Read the full [security model](docs/security.md).

## Documentation

| Topic | Document |
| --- | --- |
| Feature reference | [docs/features.md](docs/features.md) |
| Encrypted backup and migration | [docs/development/backup-migration.md](docs/development/backup-migration.md) |
| Session log retention | [docs/development/session-log-retention.md](docs/development/session-log-retention.md) |
| CLI and local API | [docs/cli.md](docs/cli.md) |
| Agent execution contract | [docs/agent-guide.md](docs/agent-guide.md) |
| Architecture notes | [docs/architecture.md](docs/architecture.md) |
| Development | [docs/development.md](docs/development.md) |
| Release process | [docs/releasing.md](docs/releasing.md) |
| Change history | [CHANGELOG.md](CHANGELOG.md) |

## Known limitations

- Windows x64 is the supported release platform. Linux and macOS desktop builds are experimental CI artifacts.
- WebView2, tray behavior, keyring integration, and file associations may differ outside supported Windows versions.
- Monitoring expects Linux-style remote hosts, and Docker management runs over SSH rather than a local Docker socket.
- ProxyJump supports one jump-host level; terminal split view supports up to four visible terminals.
- Text editing supports UTF-8 files up to 5 MiB; PDFs are read-only and limited to 50 MiB.

## License

gxShell is licensed under the [GNU Affero General Public License v3.0](LICENSE).

Commercial use is permitted. Derivative works must be released under the same
license, and if you run a modified version as a network service, its users are
entitled to that version's source. gxShell was previously licensed under
CC BY-NC-SA 4.0, which is not a software license and forbade commercial use;
releases up to and including v1.5.2 remain available under those terms.

gxShell

File Explorer

# Use via CDN

# Project Badges

Was this content helpful?

Recent Feedback

Download README