Termex

An open-source, AI-native SSH client built with Rust.

以 SSH 协议为底座，打造 AI 时代永不断线的云端智能工作平台。

SSH is the wire. What flows through it is your entire AI-powered workflow.

Connect from any device. Punch through any network.

AI keeps working while you're away. Reconnect, and pick up right where it left off.

Devices are temporary. Your workspace is permanent.

Installation • Features • Shortcuts • Development • Roadmap

Why Termex?

	Termius	Tabby	WindTerm	Termex
Beautiful UI	Yes	Yes	No	Yes
Native Performance	Yes	No (Electron)	Yes	Yes (Tauri/Rust)
AI Integrated	No	No	No	Yes
Free & Open Source	No	Yes	Yes	Yes (MIT)
Encrypted Config	No	Partial	Partial	Yes (OS Keychain + AES-256-GCM)

Installation

Download

Download the latest release for your platform from GitHub Releases:

Platform	Architecture	Format
macOS	Apple Silicon (M1/M2/M3)	`.dmg`
macOS	Intel	`.dmg`
Windows	x64	`.msi` / `.exe`
Linux	x86_64	`.deb` / `.rpm` / `.AppImage`
Linux	aarch64	`.deb` / `.rpm`

Build from Source

git clone https://github.com/user/termex.git
cd termex
./scripts/frb-codegen.sh          # generate Dart bindings from Rust API
cd app
flutter pub get
flutter build macos --release     # or: flutter build windows / linux

ⓘ The legacy pnpm tauri build recipe is disabled as of v0.78.0. For an emergency Tauri rebuild see scripts/legacy/build-tauri.sh.

Optional: install git hooks

./scripts/install-git-hooks.sh    # opt-in pre-commit FRB drift check

The pre-commit hook only fires when staged files touch the Rust ↔ Dart bridge surface (crates/termex-flutter-bridge/src/api/** or the bridge Cargo.toml). Other commits are untouched. Bypass any hook with git commit --no-verify.

Features

SSH Terminal -- WebGL-accelerated xterm.js, multi-tab, 60fps, password & key auth
Server Management -- Tree view with groups, search, drag & drop, encrypted credential storage
SFTP File Browser -- Dual-pane with context menu, drag & drop, copy/cut/paste, chmod, file info
SSH Tunnel -- ProxyJump / bastion host support (multi-level), port forwarding (local/remote/dynamic)
AI Assistant -- Dangerous command detection, command explanation, natural language to shell
Local AI -- Built-in llama-server with 12 GGUF models, fully offline, no API key required
Terminal Search -- In-terminal search (Cmd+F), keyword highlighting, cross-tab search (Cmd+Shift+F)
Customization -- Dark/Light themes, 6 built-in fonts + custom upload, customizable keybindings
Security -- OS Keychain (macOS/Windows/Linux), AES-256-GCM fallback, SQLCipher encrypted database
Config Backup -- Encrypted export/import (.termex format), cross-device migration
i18n -- English and Chinese out of the box

Use Cases

Reuse old phones as a personal SSH/SFTP file vault — run Termux + sshd on a spare Android phone and Termex's built-in SFTP browser instantly turns its 128G/256G internal storage into a LAN-accessible file vault. Zero extra hardware, zero cloud fees. See docs/use-cases/old-phone-personal-cloud.md.

Tech Stack

🪦 v0.78.0 cutover — Tauri/Vue build stopped. As of v0.78.0:

CI no longer builds the Tauri/Vue desktop. Release artefacts ship Flutter binaries only (.dmg / .msix / .deb / .rpm / .AppImage).

src-tauri/ and src/ directories REMAIN in the repo as a forensic / rollback snapshot — they are excluded from the Cargo workspace and the npm scripts (pnpm tauri dev / pnpm dev) print a deprecation notice.

To produce a Tauri binary by hand for emergency rebuild, see scripts/legacy/build-tauri.sh.

v0.80.0 will physically delete the legacy directories.

Existing Tauri-installed users continue to work; data + credentials are fully shared (SQLCipher DB + OS keychain) so switching to a Flutter binary requires no manual migration. See v0.77.0 final parity and v0.78.0 cutover plan.

Repository layout (as of v0.78.0):

Flutter desktop + mobile: app/ + packages/termex_shared/

Rust core (shared): crates/termex-core/ + crates/termex-flutter-bridge/ + crates/termexd/

Legacy (no longer built): src-tauri/ + src/

Legacy stack — retiring (v0.34.x — Tauri/Vue)

Tauri v2 + Rust          Backend, SSH, encryption, storage
Vue 3 + TypeScript       Frontend framework
Element Plus             UI components
Tailwind CSS             Styling
xterm.js (WebGL)         Terminal rendering
SQLCipher                Encrypted local database
russh                    Pure-Rust SSH2 protocol
ring + Argon2id          AES-256-GCM encryption & key derivation

Migration stack (WIP — target v0.49+ — Flutter/Rust)

Flutter 3.24+ (Dart)     Self-drawn UI, no Material/Cupertino
flutter_rust_bridge v2   FRB bindings (Dart <-> Rust)
Riverpod                 State management
Custom VT100 emulator    Terminal rendering (Dart, no xterm.js)
Rust core (shared)       Same russh/ring/SQLCipher, extracted to crates/termex-core/

Keyboard Shortcuts

All shortcuts are fully customizable via Settings → Keybindings. Click any shortcut label to enter recording mode and press your desired key combination.

General

Action	macOS	Windows / Linux
New Connection	`Cmd+N`	`Ctrl+N`
Open Settings	`Cmd+,`	`Ctrl+,`
Toggle Sidebar	`Cmd+\`	`Ctrl+\`
Toggle AI Panel	`Cmd+Shift+I`	`Ctrl+Shift+I`

Tabs

Action	macOS	Windows / Linux
Close Current Tab	`Cmd+W`	`Ctrl+W`
Next Tab	`Cmd+Tab`	`Ctrl+Tab`
Previous Tab	`Cmd+Shift+Tab`	`Ctrl+Shift+Tab`
Go to Tab 1–9	`Cmd+1` ~ `Cmd+9`	`Ctrl+1` ~ `Ctrl+9`

Search

Action	macOS	Windows / Linux
Search in Terminal	`Cmd+F`	`Ctrl+F`
Search All Tabs	`Cmd+Shift+F`	`Ctrl+Shift+F`

Security

OS Keychain Storage (v0.10.0+)

Termex uses the operating system's native credential manager to protect all sensitive data:

Platform	Backend	Protection
macOS	Keychain Services	Hardware-level (Secure Enclave + Touch ID)
Windows	Credential Manager (DPAPI)	User login password
Linux	Secret Service (GNOME Keyring / KDE Wallet)	User login password

How it works:

SSH passwords, private key passphrases, and AI API keys are stored in the OS keychain -- never in termex.db
termex.db only stores a keychain reference ID (e.g., termex:ssh:password:{uuid})
Even if termex.db is stolen, no credentials are exposed
No master password required -- the OS login session provides the security boundary
Fallback: If the OS keychain is unavailable (headless Linux), Termex falls back to AES-256-GCM encryption with a user-provided master password

Additional Security Measures

Credential fields encrypted with AES-256-GCM (ring crate) in fallback mode
Fallback master password derived via Argon2id (m=64MB, t=3, p=4)
Database encrypted with SQLCipher
AI requests never include passwords, keys, or tokens
No telemetry, no analytics, no phone-home

Project Structure

termex/
├── .github/workflows/         # CI + cross-platform release
├── docs/                      # Requirements, design, prototype
│   ├── iterations/            #   Version iteration plans (v0.1.0 ~ v0.51.0)
│   └── migration/             #   Flutter migration roadmap
├── scripts/                   # Version bump + FRB codegen utilities
│   └── frb-codegen.sh         #   Regenerate Flutter bindings from Rust API
├── flutter_rust_bridge.yaml   # FRB codegen config
│
├── src-tauri/src/             # ── Production (Tauri/Vue v0.34.x) ──
│   ├── commands/              #   Tauri IPC handlers
│   ├── ssh/  sftp/  crypto/  storage/  ai/  team/  recording/
│   └── state.rs
├── src/                       #   Vue 3 frontend
│   ├── components/  composables/  stores/  i18n/  types/  utils/
│
├── crates/                    # ── Migration (Flutter/Rust WIP) ──
│   ├── termex-core/           #   Shared Rust business logic
│   │   └── src/ (14 modules: ssh, sftp, crypto, storage, ai, team, ...)
│   └── termex-flutter-bridge/ #   flutter_rust_bridge v2 layer
│       ├── src/api/           #     29 API modules (≈7,200 LOC)
│       └── lib/src/           #     Dart bindings (stub until codegen runs)
└── app/                       #   Flutter app
    ├── lib/
    │   ├── features/          #     server_list, ai, sftp, team, cloud, ...
    │   ├── terminal/          #     Custom VT100 emulator
    │   ├── widgets/           #     Self-drawn design system
    │   ├── design/  system/   #     Theme tokens, sentinel flags, updater
    │   └── main.dart
    ├── test/  integration_test/
    ├── pubspec.yaml
    └── distribute_options.yaml

Development

Prerequisites

Production stack (Tauri/Vue):

Rust (stable)
Node.js (22+)
pnpm (10+)
Platform-specific Tauri v2 dependencies

Migration stack (Flutter):

Rust (stable)
Flutter SDK (3.24+)
cargo install flutter_rust_bridge_codegen --version '^2.0'

Setup — Production stack (Flutter, v0.78.0+)

git clone https://github.com/user/termex.git
cd termex
./scripts/frb-codegen.sh          # generate Dart bindings from Rust API
cd app
flutter pub get
flutter run -d macos              # or -d windows / -d linux

# Mobile dev
flutter run -d "iPhone 17 Pro"
flutter run -d "iPad Pro 13-inch (M5)"

Setup — Legacy Tauri/Vue stack (forensic only, retiring v0.80)

git clone https://github.com/user/termex.git
cd termex
# `pnpm tauri *` scripts now print a deprecation notice + exit. To
# actually rebuild the legacy Tauri binary for rollback, use:
scripts/legacy/build-tauri.sh release

Commands

v0.78.0 PC cutover: the pnpm tauri * commands are disabled. Use the Flutter equivalents below. For a forensic Tauri rebuild see scripts/legacy/build-tauri.sh.

Command	Description
`./scripts/frb-codegen.sh`	Regenerate Flutter <-> Rust bindings
`./scripts/frb-codegen.sh --check`	CI: verify bindings up-to-date
`cargo test --workspace`	Run Rust tests across termex-core / termex-flutter-bridge / termexd
`cd app && flutter pub get`	Resolve Flutter dependencies
`cd app && flutter test`	Run Flutter unit/widget tests
`cd app && flutter analyze`	Static analysis
`cd app && flutter run -d macos`	Dev run on macOS (or `-d windows` / `-d linux`)
`cd app && flutter build macos --release`	Build Flutter production binary
`pnpm version:bump patch`	Bump version (patch/minor/major/x.y.z)
`scripts/legacy/build-tauri.sh release`	(Legacy) Manual Tauri build for rollback

Debug & Launch

# Full-stack development (Flutter UI + Rust core, hot reload)
cd app && flutter run -d macos

# Run all Rust tests (termex-core / termex-flutter-bridge / termexd)
cargo test --workspace

# Run Flutter unit + widget tests
cd app && flutter test

# Verbose Rust logging via env var
RUST_LOG=debug cd app && flutter run -d macos

# Production build
cd app && flutter build macos --release   # or windows / linux

Version Release

# Semantic version bump — syncs package.json + termex-core/Cargo.toml +
# termex-flutter-bridge/Cargo.toml + app/pubspec.yaml. (v0.78.0: src-tauri
# version stamps are no longer synced — see scripts/bump-version.mjs.)
pnpm version:bump patch         # 0.1.0 → 0.1.1
pnpm version:bump minor         # 0.1.0 → 0.2.0
pnpm version:bump major         # 0.1.0 → 1.0.0
pnpm version:bump 0.2.0         # explicit version

# Commit and tag
git add -A && git commit -m "chore: release v0.2.0"
git tag v0.2.0
git push origin main --tags     # triggers GitHub Actions build

Roadmap

Shipped

Desktop — Planned

v0.34.0 -- Team Collaboration v2 (fine-grained role permissions, audit dashboard, conflict resolution UI)
v0.35.0 -- Desktop v1.0 Stable (performance optimization, stability polish)
v0.53.0 -- macOS Code Signing & Notarization (signed/notarized DMG via Apple Developer ID, no xattr workaround needed)

Desktop vs Mobile — Strategic Positioning

Termex follows two complementary product routes:

Desktop (Route A · Terminal-first) — full xterm + SSH chain editing + AI sidebar; for long-form deep operations
Mobile (Route B · AI Operator Console) — monitor and react to long-running AI tasks on remote servers; structured summaries are the primary view, terminal is "advanced details". See docs/mobile-strategy.md.

Mobile retains terminal viewing as a baseline capability (Route A底座) but its main value is monitoring + feedback for long-running AI CLI tasks: voice-first dispatch with safety guardrails, structured outcome cards, WebSocket-primary push (FCM fallback for backgrounded apps), same-bastion network identity as your desktop.

Mobile — Planned

v0.40 – v0.61 -- Mobile foundation through App Store release (functional parity with desktop)
v0.70.5 -- termexd remote daemon — single Rust binary on the remote, owns task state, WebSocket API, MCP-aware (prerequisite for v0.71+)
v0.71 -- Task monitoring MVP — task model + voice input + safety guardrails (PendingConfirmation) + structured summary primary view + WS-primary push
v0.72 -- Structured summary view + terminal as advanced expansion
v0.73 -- Network path parity (EgressProfile, PC-edited / mobile-consumed) + cost transparency + Cross-device handoff
v0.74 -- Background execution + reliability + handoff completion (Android Foreground Service / iOS BGTask / network resilience)
v0.75+ -- China-region push services (JPush / Xiaomi / Huawei / OPPO / vivo) + iOS Live Activity + Siri Shortcuts + voice summary announcements

Contributing

Contributions are welcome! Please open an issue before submitting large PRs.

License

MIT

Name		Name	Last commit message	Last commit date
.cargo		.cargo
.claude		.claude
.githooks		.githooks
.github/workflows		.github/workflows
app		app
crates		crates
docs		docs
images		images
packages/termex_shared		packages/termex_shared
scripts		scripts
src-tauri		src-tauri
src		src
.gitignore		.gitignore
CHANGELOG.md		CHANGELOG.md
CLAUDE.md		CLAUDE.md
Cargo.lock		Cargo.lock
Cargo.toml		Cargo.toml
LICENSE		LICENSE
README.md		README.md
flutter_rust_bridge.yaml		flutter_rust_bridge.yaml
index.html		index.html
package.json		package.json
pnpm-lock.yaml		pnpm-lock.yaml
pnpm-workspace.yaml		pnpm-workspace.yaml
postcss.config.js		postcss.config.js
tailwind.config.ts		tailwind.config.ts
tsconfig.json		tsconfig.json
tsconfig.node.json		tsconfig.node.json
vite.config.ts		vite.config.ts

Navigation Menu

Repository files navigation

Termex

Why Termex?

Installation

Download

Build from Source

Optional: install git hooks

Features

Use Cases

Tech Stack

Legacy stack — retiring (v0.34.x — Tauri/Vue)

Migration stack (WIP — target v0.49+ — Flutter/Rust)

Keyboard Shortcuts

General

Tabs

Search

Security

OS Keychain Storage (v0.10.0+)

Additional Security Measures

Project Structure

Development

Prerequisites

Setup — Production stack (Flutter, v0.78.0+)

Setup — Legacy Tauri/Vue stack (forensic only, retiring v0.80)

Commands

Debug & Launch

Version Release

Roadmap

Shipped

Desktop — Planned

Desktop vs Mobile — Strategic Positioning

Mobile — Planned

Contributing

License

About

Releases

Packages

Contributors

Languages

Latest commit

History

Folders and files

Repository files navigation

Termex

Why Termex?

Installation

Download

Build from Source

Optional: install git hooks

Features

Use Cases

Tech Stack

Legacy stack — retiring (v0.34.x — Tauri/Vue)

Migration stack (WIP — target v0.49+ — Flutter/Rust)

Keyboard Shortcuts

General

Tabs

Search

Security

OS Keychain Storage (v0.10.0+)

Additional Security Measures

Project Structure

Development

Prerequisites

Setup — Production stack (Flutter, v0.78.0+)

Setup — Legacy Tauri/Vue stack (forensic only, retiring v0.80)

Commands

Debug & Launch

Version Release

Roadmap

Shipped

Desktop — Planned

Desktop vs Mobile — Strategic Positioning

Mobile — Planned

Contributing

License

About

Resources

Stars

Watchers

Forks

Releases

Packages

Contributors

Languages