ssh-cli

English

Give any LLM the power to operate remote servers via SSH — in a single, memory-safe binary.

What is it?

• Single static binary — zero runtime dependencies, no Node.js, no Python.
• Full Rust SSH stack — russh + aws-lc-rs, no C bindings, memory-safe end to end.
• Cold start under 100 ms on any supported platform.
• Credentials zeroized on drop via secrecy::SecretString — never linger in RAM.
• Parallel stdout/stderr capture on every remote command execution.
• 2 locales built in — en-US and pt-BR, auto-detected from system locale.

Why ssh-cli?

• Eliminates Node.js-based SSH wrappers and their runtime overhead.
• Ships as one file — copy and run, zero install step or package manager required.
• ZERO .env files — all credentials managed exclusively via explicit CLI subcommands.
• Sysexits.h exit codes enable reliable scripting and LLM error classification.

Quick Start

# Install
cargo install ssh-cli

# Register a VPS
ssh-cli vps add \
  --name prod \
  --host prod.example.com \
  --port 22 \
  --user admin \
  --password 's3cret'

# Select the active VPS
ssh-cli connect prod

# Execute a remote command
ssh-cli exec prod "hostname"

Command Reference

Global Flags

Environment Variables

Exit Codes

Shell Completions

• Bash: ssh-cli completions bash > ~/.local/share/bash-completion/completions/ssh-cli
• Zsh: ssh-cli completions zsh > ~/.zfunc/_ssh-cli
• Fish: ssh-cli completions fish > ~/.config/fish/completions/ssh-cli.fish
• PowerShell: ssh-cli completions powershell >> $PROFILE

Troubleshooting

• macOS Gatekeeper blocks the binary: run xattr -d com.apple.quarantine /path/to/ssh-cli
• Alpine Linux or musl target: build with --features musl-allocator
• Permission denied on config.toml: run chmod 600 ~/.config/ssh-cli/config.toml

License

MIT — see LICENSE.

Português (Brasil)

Dê a qualquer LLM o poder de operar servidores remotos via SSH — em um único binário, seguro por design.

O que é?

• Binário único estático — zero dependência de runtime, sem Node.js, sem Python.
• Stack SSH completa em Rust — russh + aws-lc-rs, sem bindings C, memory-safe ponta a ponta.
• Cold start abaixo de 100 ms em qualquer plataforma suportada.
• Credenciais zeradas da memória via secrecy::SecretString — nunca ficam na RAM.
• Captura paralela de stdout/stderr em toda execução remota.
• 2 locales prontos — en-US e pt-BR, detectados automaticamente pelo locale do sistema.

Por que ssh-cli?

• Elimina wrappers SSH baseados em Node.js e seu overhead de runtime.
• Um único arquivo — copie e execute, sem passo de instalação ou gerenciador de pacotes.
• ZERO arquivos .env — todas as credenciais gerenciadas exclusivamente via subcomandos CLI.
• Exit codes do sysexits.h permitem scripting confiável e classificação de erros por LLMs.

Início rápido

# Instalar
cargo install ssh-cli

# Registrar uma VPS
ssh-cli vps add \
  --name producao \
  --host producao.exemplo.com \
  --port 22 \
  --user admin \
  --password 's3gred0'

# Selecionar a VPS ativa
ssh-cli connect producao

# Executar comando remoto
ssh-cli exec producao "hostname"

Referência de comandos

Flags globais

Variáveis de ambiente

Exit codes

Completions de shell

• Bash: ssh-cli completions bash > ~/.local/share/bash-completion/completions/ssh-cli
• Zsh: ssh-cli completions zsh > ~/.zfunc/_ssh-cli
• Fish: ssh-cli completions fish > ~/.config/fish/completions/ssh-cli.fish
• PowerShell: ssh-cli completions powershell >> $PROFILE

Solução de problemas

• macOS Gatekeeper bloqueia o binário: execute xattr -d com.apple.quarantine /caminho/para/ssh-cli
• Alpine Linux ou target musl: compile com --features musl-allocator
• Permissão negada no config.toml: execute chmod 600 ~/.config/ssh-cli/config.toml

Licença

MIT — veja LICENSE.