中文 | English

Creation-SSH (C-SSH)

Keep operating from your phone: persistent terminals, monitoring, files, and an AI assistant

Creation-SSH is an SSH operations client for Windows PCs and Android. Android is more than a read-only remote: it manages hosts, restores server-side tmux sessions, shows monitoring data, handles files, runs the AI assistant, and opens system-management workflows. The Windows client covers broader day-to-day operations.

Creation-SSH provides explicit Agent and native SSH host modes. Agent mode retains persistent tmux sessions and server-side monitoring. SSH mode requires no installed agent and provides terminal access, port forwarding, SFTP file management, online monitoring, system management, app-center operations, and SSH AI tools. The current public stable release is v0.7.6. Older versions remain available as historical records.

Windows security notice: the NSIS and MSI packages in this release are not Authenticode-signed. Windows SmartScreen may show Unknown Publisher or require an extra confirmation. Download only from this repository's Release and verify the SHA256 values below.

Android v0.7.6 upgrade notice: this release creates only a fresh schema 10 database and does not open or migrate schema 9. When the installation generation changes, the previous local database, hosts, settings, credential references, and AI data are not retained.

v0.7.6 Highlights

• Windows moves to schema 11 and binds data protection to the current data instance. A fresh directory or an EXE copied without its data creates a separate unconfigured instance; only a complete copy of protected data continues to require the original password. The database stores only wrapped master-key material and required parameters, never the data-protection password or a plaintext master key.
• The AI assistant now has fixed Global, Project, and Host scopes. Ordinary summaries receive bounded, relevant cognition from the shared ScopeCognitionSnapshot: Global can cover visible projects and hosts, Project covers the current project and its member hosts, and Host covers only itself, without rereading every full conversation.
• Canonical raw events remain the sole source of truth. Ordinary summaries do not expose per-conversation catalog/body tools. Only an explicit Windows exact-evidence mode can read bounded original-conversation evidence under the current visibility rules.
• Windows adds the gray-white Frost theme, a compact but complete host-status rail, and latency measured from real Agent metrics requests or SSH channel round trips. Unknown latency is shown as — and is never estimated by the frontend.
• Windows and Android restore and display user images from persisted messages. Rendering accepts only local base64 image data URLs, adapts single and multiple images to each chat layout, and never turns corrupt data into an external image request.
• Android creates only fresh schema 10 and connects its Global/Project/Host shell to the same shared cognition layer. Ordinary mobile runs use ScopeCognition, do not expose exact-evidence tools, and do not duplicate the Windows memory implementation.
• Production assets are exactly three Windows packages—NSIS, MSI, and portable ZIP—and one Android arm64 APK. The Linux client remains frozen with no Linux artifact, and Android produces or uploads no AAB.

Current Capabilities

• Windows and Android can persistently enable or disable Startup Password Protection. Both changes verify the current data-protection password in a dialog; disabling it auto-enters on the next cold start without changing local or Cloud data.
• Creation Cloud provides accounts, device sessions, and manual sync. Host credentials and AI-provider Key/Token values, API endpoints, and model bindings are encrypted only by trusted clients; Cloud cannot read or use them.
• AI supports multiple local provider accounts and model bindings. Conversations and five-layer memory remain local and are never synchronized.
• AI permissions remain View, Edit, and Full Access and are independent from Global, Project, and Host scope. Canonical raw events and five-layer memory remain available when switching models.
• Ordinary scoped summaries use the shared cognition snapshot directly. Full original conversations are read only in explicit exact-evidence mode, and cognition recall never grants remote execution authority.
• Shared Rust orchestration handles transient AI retries and durably records each retry schedule before emitting it. A stop request can cancel the wait.
• Broadcast execution can mix Agent and native SSH hosts with common per-host results, isolation, and confirmation behavior.
• Windows installers, portable builds, and direct execution all use the adjacent data directory; file drag-out and download recovery remain inside the same isolated data root.
• Windows Frost, the compact host rail, real latency, and image messages, plus Android scoped AI and image messages, are included in v0.7.6.
• Windows terminal right-click takes over only to copy an existing selection. With no selection, it preserves the remote terminal's right-click behavior.
• Windows and Android provide Contact Us cards for WeChat, QQ group, and WhatsApp, plus a compact mobile AI toolbar.
• Fixed data-protection cold start and forgot-password reset, empty-cloud download previews, live AI configuration refresh, and host-monitor status projection.
• Fixed the Android new-device password dialog being blocked by an invisible reminder overlay and fixed corrupted data-protection copy.

Android First

The same hosts and tmux sessions can continue across desktop and phone. Android v0.7.6 ships one arm64 APK. No AAB is generated or uploaded, and x86_64 emulator test builds remain private.

Download

Platform	Recommended download	Other production assets
Android arm64	APK	No AAB for this release
Windows x64	EXE installer	MSI · portable ZIP

SHA256

• E996FEE3EABDBFA4EBEF1C6E429264B17FFB51972CD807E8AFF764F9432C4D48 Creation-SSH_0.7.6_x64-setup.exe
• BF246971DBE5C0A1190EC940E715D9D1752E66D35FF141E76AADB1E427379627 Creation-SSH_0.7.6_x64_en-US.msi
• C43A7006524F5E0C0AC53C9720F7945160D39614969E05B413329F9FDAC8230B Creation-SSH_0.7.6_portable-Windows-x64.zip
• 84A9CA3C71582AC28C6A3468502290611788F2B281AB0A49C32A516626D4996D C-SSH_0.7.6_android-arm64.apk

Linux client development is discontinued and frozen. Historical source and historical releases remain available only as records.

See the v0.7.6 Release for downloads and release notes, or CHANGELOG_EN.md for history.

Delivered Platforms

Platform	Delivered in v0.7.6
Android	Host management, agent install and update/repair, persistent/standard terminals, file upload/download, live monitoring, AI, system management, local login gate, and Me settings
Windows	Complete desktop workflow, distributed as EXE, MSI, and portable ZIP
iOS / macOS	Not released and not part of the v0.7.6 delivery

The Linux client is no longer developed, tested, built, or released. The server-side Linux agent is not a Linux client.

Main Pages

Android

Page	What it does
Hosts	Add, edit, and hard-delete hosts; clear attributable local state on deletion; install or update/repair the agent; enter terminal, monitoring, and system management
Terminal	Switch between reconnectable tmux sessions and standard SSH PTY; manage windows, font, sizing, scrolling, copy, and mobile shortcut keys
Files	Browse, edit, create, rename, and delete remote files; use Android SAF for single-file upload or download destinations with chunking, resume, and integrity checks
Monitoring	View CPU, memory, disk, network, disk I/O, and top processes; background multi-host collection settings persist in local SQLite
AI assistant	Select host, model, permission profile, history, and context; tool execution is governed by permissions and confirmation
System management	Inspect system facts, processes, and firewall ports; confirm actions such as process termination and SSH password changes
Me / login gate	Manage language, theme, version, updates, and local security; a configured login password unlocks the local vault at startup

Android Product Screenshots

These screenshots come from the v0.7.5 Android test UI and use only RFC 5737, example.com, and explicitly labeled offline simulated data. They did not connect to a real host, Cloud, or AI provider, and they are not evidence of physical-arm64 acceptance or complete manual GUI coverage.

Host Management

View connectivity and agent deployment status in one place, install or update/repair the agent, then add, edit, or hard-delete hosts. Hard deletion ends the host's local lifecycle, so adding the same ID or address later still creates a new host without inherited data.

Persistent And Standard Terminals

Switch between reconnectable tmux sessions and standard SSH terminals while managing the active window. Persistent sessions can be reattached so command-line work can continue on mobile.

File Manager

Use the compact two-row toolbar to browse remote directories, collapse deep paths, create files or folders, and toggle hidden items. Android's system picker selects one local file for upload and also chooses download destinations.

Live Monitoring

Monitor CPU, memory, load, network, disk usage, disk I/O, and top processes in real time. The page also shows monitoring health and uptime for quick mobile checks.

AI Assistant

Select a target host, model, and permission profile before chatting with the AI, with controls for context, history, and settings. The screenshot shows an offline timeline explicitly labeled as simulated data; real tool execution remains governed by permissions and confirmation.

Windows Desktop

Windows exposes the complete desktop navigation below and follows the host hard-delete and lifecycle-isolation contract.

Page	What it does
Hosts	Groups, favorites, search, credential selection, plus agent deployment, repair, and status
AI assistant	Uses explicitly authorized host context for metrics, logs, files, and tools; desktop supports a separate AI window
Terminal	Dual tmux-persistent and standard SSH PTY modes, including persistent-window recovery after disconnects or device changes, plus multiple separate terminal windows for parallel work
Monitoring	Fleet health overview, per-host live details, and historical time-range queries
Files	Remote file management, online editing, chunked transfer, resume, and integrity verification
Port forwarding	SSH local forwarding, bound to 127.0.0.1 by default, with saved start/stop controls
Broadcast execution	Select hosts, enter a command or UTF-8 .sh file, freeze confirmation, execute through the agent, and review per-host results
System management	System facts, processes, firewall ports, and SSH password management
App Center	Install Docker, deploy apps such as Nginx/Redis, and manage containers, images, and systemd services
Access grants	Review the local vault, SSH keys, one-time grants, and AI audit records
Settings	AI provider, language, appearance, local login, monitoring collection, and update checks

Desktop Product Screenshots

These screenshots come from the v0.7.5 Windows candidate UI and use only RFC 5737, example.com, and explicitly labeled offline simulated data. They did not connect to a real host, Cloud, or AI provider, and the eight captured pages are not a complete manual GUI acceptance run.

Host Management

Manage SSH hosts through groups, favorites, and search while reviewing agent status and live metrics. Deletion clears attributable credentials, session history, window persistence, and monitoring cache instead of allowing a later host to inherit old state.

Persistent And Standard Terminals

Select a host and switch between persistent tmux sessions and a standard SSH PTY. Standard terminals keep their live state across menu navigation, while persistent windows can be reattached after disconnects or device changes. Right-click shows Copy only when a selection exists; otherwise, it remains available to the remote TUI or mouse mode.

Multi-host Monitoring Overview

Compare CPU, memory, and live status across hosts while controlling active collection. Select any host to open its detailed monitoring view.

Per-host Monitoring Details

Inspect CPU, memory, disk, swap, load, network, and disk I/O for one host. Trend charts show recent changes, while top-process data helps identify resource usage.

File Manager

Browse and search remote directories, show hidden files, and create, upload, download, edit, or refresh items. File drag-out and downloads support interruption recovery and integrity verification, while the listing includes sizes, modification times, and per-item actions.

AI Assistant

Select a host, model, and permission profile so the AI can read authorized metrics and system information and return a result. Provably transient read-only failures wait a fixed five seconds and retry at most five times; requests that may have side effects are never replayed automatically.

Broadcast Execution

Select one or more hosts, enter a command or UTF-8 .sh file, freeze the confirmation, and execute through the structured agent protocol. Per-host results remain isolated and use redacted aliases; AI summarization is always an explicit action.

Access Grants

Create an independent temporary SSH access key for a selected host, with the private key shown only when the grant is created. Revoke the grant at any time without sharing the host's long-term credentials.

Settings

Configure system-language following, local login and vault protection, AI providers, appearance, and monitoring collection in one place. Windows business state uses the adjacent data directory, while the master key and related platform material remain in Credential Manager.

Security Boundaries

• Private keys and passwords stay in the current device's local encrypted vault. They are not uploaded to servers or a C-SSH cloud; C-SSH does not provide a hosted credential service.
• The agent is reached through an SSH tunnel and listens only on a server-local Unix socket. It exposes no extra public port and runs as the current SSH login identity without self-elevation.
• Host-key anomalies stop the connection, and destructive actions require explicit confirmation. An unreachable host allows local-only deletion only before remote cleanup begins; once remote state is involved, uncertain ownership or incomplete cleanup fails closed.
• Port forwarding binds to 127.0.0.1 by default. Users who choose another listen address are responsible for evaluating LAN exposure.
• AI tools are controlled by permission profiles and execution confirmation. When a third-party AI provider is used, selected conversations and context are processed under that provider's terms.

Free, Languages, And Open-Source Plan

Creation-SSH is currently free forever, with no subscription, paid tier, or feature lock. The interface includes Simplified Chinese, Traditional Chinese, English, Spanish, French, German, Portuguese, Russian, and Korean.

The current release is not open source. This repository contains the public product introduction, screenshots, and Release assets only. The plan is to open-source the project after the official iOS and macOS releases. That is a roadmap statement, not a claim that source is available now or a commitment to a specific date.

Contact

• WeChat: suiyue_creation
• QQ Group (AI Innovation Community): Join here

QQ Group: AI Innovation Community

Scan the QR code or use the link above to join, Group No. 1041937161. The group is for product experience, issue feedback, and future release discussions.