OxideTerm：远程运维与AI助手工作区

AI-native workspace for local shells and remote machines.Zero Webview, zero OpenSSL, zero telemetry, and no app subscription.Written in R…

⚡ OxideTerm A free, native SSH client and remote operations workspace with a bring-your-own-key AI assistant. SSH · Mosh · Telnet · Serial · RDP/VNC · SFTP · port forwarding · built-in editor, all in one GPU-rendered app. No account. No subscription. No telemetry. No Electron. Download · Documentation · Changelog · Report an issue English | 简体中文 | 繁體中文 | 日本語 | 한국어 | Français | Deutsch | Español | Italiano | Português | Tiếng Việt Quick start Install OxideTerm. Grab a package from the latest release; platform notes are in Install below. Add a server. Open the Session Manager and create an SSH connection, or import hosts from your ~/.ssh/config. Connect. Open a terminal. Host keys are checked against ~/.ssh/known_hosts. Use the rest of the workspace. Open SFTP, port forwarding, or the built-in editor on the same node. By default they share one SSH connection. Optional: turn on AI. In Settings, add your own OpenAI, Anthropic, Gemini, Ollama, or OpenAI-compatible endpoint to enable OxideSens. For a guided tour, see the documentation. What you get Terminals and protocols Local shells, SSH, Mosh, Telnet, Serial, split panes, multi-hop routes, SSH agent and agent forwarding, 2FA and TOTP credentials, X11 forwarding, shell integration, command marks, configurable session logs, recording, Sixel and Kitty graphics, trzsz transfers tmux and broadcast Native tmux -CC control mode with pane layouts and draggable dividers, named broadcast groups, and an advanced multi-target command sender for scheduled, repeatable input Reliability Grace Period reconnect keeps TUI apps alive through short network drops, then restores forwards, transfers, and open editor files Files and editing SFTP dual-pane manager, transfer queues with speed limits and ETA, bookmarks, a built-in remote editor with safe writes, conflict handling, and workspace restore Networking Local, remote, and dynamic SOCKS5 forwarding, saved rules, remote port detection, connection topology, ad-hoc socket debugging Remote desktop Install RDP or VNC from the plugin marketplace for the native viewer, clipboard and input support Host operations Monitoring for processes, services, logs, ports, tasks, disks, packages, containers, and tmux AI and automation BYOK OxideSens, MCP, local RAG, Agent Skills, approved workspace actions, a standalone CLI Review and audit Optional Notification & Audit workspace and encrypted session recordings (both off by default) Sync and portability Encrypted cloud sync, portable .oxide bundles Personalization Themes, background images, configurable shortcuts, Quick Commands, 11 interface languages Why OxideTerm Free and local-first. No account, no subscription, no telemetry. Your connections and operational data stay under your control. One workspace per server. Terminal, SFTP, forwarding, RDP/VNC, editor, monitoring, and AI attach to the same node instead of behaving like disconnected utilities. Native, not a browser in disguise. The interface is drawn directly on the GPU with GPUI. There is no Electron and no bundled WebView. AI on your terms. OxideSens uses your own provider and key, and acts only on actions you approve. Resilient connections. Grace Period reconnect probes the old connection for 30 seconds before replacing it, so TUI apps can survive short network drops. Pure-Rust SSH. The SSH stack uses russh with ring, without OpenSSL or libssh2. Memory usage The native rewrite cut idle memory to about a quarter of the old version on macOS and about an eighth on Windows. These are the maintainer's recorded observations from the move from Tauri 1.x to native GPUI 2.0: Platform Tauri 1.x (idle) Native 2.0 (idle) Reduction macOS 318.7 MB 81.3 MB About 74% Windows 182.4 MB 23.5 MB About 87% The old version's total includes OxideTerm and its associated WebView processes. The native version no longer needs those browser processes. Screenshots SSH terminal with OxideSens SFTP file manager Built-in IDE Smart port forwarding Watch OxideSens open a terminal from a plain-language request OxideSens AI OxideSens is an optional assistant that can inspect your live sessions and perform workspace actions only after you approve them. Bring your own key. Works with OpenAI, Anthropic (Claude), Google Gemini, Ollama, and any OpenAI-compatible endpoint, with provider-aware reasoning controls. There are no platform credits. MCP and Agent Skills. Connect MCP servers (stdio and SSE) and load bounded Agent Skills. Local knowledge base (RAG). BM25 full-text search plus a vector index. You control the context. You choose which workspace context and actions are approved, and command policy rules apply. Credential redaction. Messages sent to a provider pass through credential-pattern redaction. Keys stay in your OS keychain and are kept out of structured logs. Plugins OxideTerm supports three plugin paths: Type How it runs Boundary Manifest-only Declarative extensions, no code No executable code WASM Wasmtime/WASI or a sidecar Controlled host calls, capability-scoped Process An ordinary local process Trusted local code, not OS-sandboxed Legacy Tauri (1.x) ESM plugins may be listed but are not executed by the native 2.x app. Only install process plugins from sources you trust. Security and privacy Topic How it works Stored credentials OS keychain (macOS Keychain, Windows Credential Manager, libsecret) Secrets in memory Secret-bearing types and temporary buffers use zeroize at supported ownership boundaries Host keys Trust on first use against ~/.ssh/known_hosts; unexpected changes are rejected Portable exports .oxide bundles use ChaCha20-Poly1305 with Argon2id (256 MB memory, 4 iterations) AI context Credential-pattern redaction before anything reaches a provider; you approve context and actions Session recordings Off by default; stored encrypted on your device and excluded from cloud sync; keyboard input is not captured Audit Off by default; data stays on your device with sensitive details encrypted CLI changes Dry-run plans, --yes guards, and r