ssh-cli

English

Give any LLM the power to operate remote servers via SSH — in a single, memory-safe binary.

What is it?

• Single static binary — zero runtime dependencies, no Node.js, no Python.
• Full Rust SSH stack — russh + aws-lc-rs, no C bindings, memory-safe end to end.
• Cold start under 100 ms on any supported platform.
• Credentials zeroized on drop via secrecy::SecretString — never linger in RAM.
• Parallel stdout/stderr capture on every remote command execution.
• 2 locales built in — en-US and pt-BR, auto-detected from system locale.

Why ssh-cli?

• Eliminates Node.js-based SSH wrappers and their runtime overhead.
• Ships as one file — copy and run, zero install step or package manager required.
• ZERO .env files — all credentials managed exclusively via explicit CLI subcommands.
• Sysexits.h exit codes enable reliable scripting and LLM error classification.

Quick Start

# Install
cargo install ssh-cli

# Register a VPS
ssh-cli vps add \
  --name prod \
  --host prod.example.com \
  --port 22 \
  --user admin \
  --password 's3cret'

# Select the active VPS
ssh-cli connect prod

# Execute a remote command
ssh-cli exec prod "hostname"

Command Reference

Runtime Override Flags

Override stored credentials per-invocation without modifying the VPS registry. These flags take precedence over values saved with vps add or vps edit.

LLM-Friendly camelCase Aliases

All multi-word flags accept camelCase aliases for natural LLM usage:

Example — override password at runtime without storing it:

ssh-cli exec prod "uptime" --password 'runtime-secret'
ssh-cli sudo-exec prod "systemctl restart nginx" --sudoPassword 'sudo-secret'

Global Flags

Environment Variables

Exit Codes

Shell Completions

• Bash: ssh-cli completions bash > ~/.local/share/bash-completion/completions/ssh-cli
• Zsh: ssh-cli completions zsh > ~/.zfunc/_ssh-cli
• Fish: ssh-cli completions fish > ~/.config/fish/completions/ssh-cli.fish
• PowerShell: ssh-cli completions powershell >> $PROFILE

Troubleshooting

• macOS Gatekeeper blocks the binary: run xattr -d com.apple.quarantine /path/to/ssh-cli
• Alpine Linux or musl target: build with --features musl-allocator
• Permission denied on config.toml: run chmod 600 ~/.config/ssh-cli/config.toml

License

MIT — see LICENSE.

Português (Brasil)

Dê a qualquer LLM o poder de operar servidores remotos via SSH — em um único binário, seguro por design.

O que é?

• Binário único estático — zero dependência de runtime, sem Node.js, sem Python.
• Stack SSH completa em Rust — russh + aws-lc-rs, sem bindings C, memory-safe ponta a ponta.
• Cold start abaixo de 100 ms em qualquer plataforma suportada.
• Credenciais zeradas da memória via secrecy::SecretString — nunca ficam na RAM.
• Captura paralela de stdout/stderr em toda execução remota.
• 2 locales prontos — en-US e pt-BR, detectados automaticamente pelo locale do sistema.

Por que ssh-cli?

• Elimina wrappers SSH baseados em Node.js e seu overhead de runtime.
• Um único arquivo — copie e execute, sem passo de instalação ou gerenciador de pacotes.
• ZERO arquivos .env — todas as credenciais gerenciadas exclusivamente via subcomandos CLI.
• Exit codes do sysexits.h permitem scripting confiável e classificação de erros por LLMs.

Início rápido

# Instalar
cargo install ssh-cli

# Registrar uma VPS
ssh-cli vps add \
  --name producao \
  --host producao.exemplo.com \
  --port 22 \
  --user admin \
  --password 's3gred0'

# Selecionar a VPS ativa
ssh-cli connect producao

# Executar comando remoto
ssh-cli exec producao "hostname"

Referência de comandos

Flags de override em runtime

Substitui credenciais armazenadas por invocação sem modificar o registro de VPSs. Estas flags prevalecem sobre os valores salvos com vps add ou vps edit.

Aliases camelCase para LLMs

Todas as flags com múltiplas palavras aceitam aliases camelCase para uso natural por LLMs:

Exemplo — substituir senha em runtime sem armazená-la:

ssh-cli exec producao "uptime" --password 'segredo-runtime'
ssh-cli sudo-exec producao "systemctl restart nginx" --sudoPassword 'segredo-sudo'

Flags globais

Variáveis de ambiente

Exit codes

Completions de shell

• Bash: ssh-cli completions bash > ~/.local/share/bash-completion/completions/ssh-cli
• Zsh: ssh-cli completions zsh > ~/.zfunc/_ssh-cli
• Fish: ssh-cli completions fish > ~/.config/fish/completions/ssh-cli.fish
• PowerShell: ssh-cli completions powershell >> $PROFILE

Solução de problemas

• macOS Gatekeeper bloqueia o binário: execute xattr -d com.apple.quarantine /caminho/para/ssh-cli
• Alpine Linux ou target musl: compile com --features musl-allocator
• Permissão negada no config.toml: execute chmod 600 ~/.config/ssh-cli/config.toml

Licença

MIT — veja LICENSE.