Clavra 0.6.3

New

• Record and Stop in every tab. Press Record at the bottom of a tab, or ⌥⌘R, and Stop when you're done. A red dot and a clock show while it records, and the recording starts with what was already on screen. Tabs no longer record on their own unless you choose that in Recordings (Always: hosts that ask before risky commands, or every host).
• Export as video. Recordings › Export › Video (MP4)… saves an MP4 to the folder you pick, Downloads by default. Sharp text at up to 1920 pixels, long pauses cut when Skip pauses is on, passwords and tokens hidden when Hide secrets is on. Export › Recording (.cast)… saves the file asciinema plays.

Fixed

• Recordings shows new recordings right away, without leaving the page and coming back.
• Full commands on the timeline. A command typed or pasted faster than the server echoed it was marked cut short.
• An empty Recordings page explains how it works, and which hosts record on their own.

Update

• On 0.4.x to 0.6.2: Clavra › Check for Updates…, or Settings › About › Check for Updates.
• New here: download Clavra-0.6.3.dmg below, drag Clavra to Applications, and click Open Anyway in System Settings › Privacy & Security the first time.

Requires macOS 15 or later, on Apple Silicon or Intel.

SHA-256 Clavra-0.6.3.dmg: 42fa2823970c919a3d57e3ad7588c9a7ce16d0aa8e1fe27e35331e230c2d4731

Clavra 0.6.2

0.6.1 went out with an earlier build. This one has everything its notes promised.

New

• Recordings hide secrets. Passwords and tokens in KEY=… and --password …, Authorization headers, passwords in URLs, mysql -p…, GitHub, AWS, Slack, OpenAI and GitLab tokens, JWTs and private keys become • in every recording, even when they were typed a key at a time. Add words of your own to hide, and ones never to hide, under Recordings › Words….
• Clavra's own menus. The + and … menus, right-click menus and pickers now use Clavra's own lists, with icons, a check on the current choice, and arrows, Return and Escape.

Fixed

• Right-click in the sidebar opens the menu for the row under the pointer.

Update

• On 0.4.x to 0.6.1: Clavra › Check for Updates…, or Settings › About › Check for Updates.
• New here: download Clavra-0.6.2.dmg below, drag Clavra to Applications, and click Open Anyway in System Settings › Privacy & Security the first time.

Requires macOS 15 or later, on Apple Silicon or Intel.

SHA-256 Clavra-0.6.2.dmg: ee526c280aedf38d3d60235678f0b082d83911a9bafcd48af9cb01cc35e28716

Clavra 0.6.1

Fixed

• RSA keys work with modern servers. Clavra now signs with rsa-sha2-512. Servers on OpenSSH 8.8 or later (Ubuntu 22.04 and up, among others) turned down the old SHA-1 signature, so an RSA key that worked with ssh was refused in Clavra. The old signature is still tried last, for very old servers.
• Automatic tries every key. When the first key was turned down, Clavra gave up instead of offering the next one. It now tries each key in turn, as ssh does, and Test Connection says which one signed in.
• Tabs reopened at launch try again. A tab that can't reach its server right after Clavra opens (after an update, while the network wakes, or while macOS asks about local network access) tries three more times before showing an error.
• Clearer connection errors. Instead of NIOConnectionError error 1, Clavra says whether the server didn't answer, refused the connection, or couldn't be reached on the local network, and what to check.

Update

• On 0.4.x to 0.6.0: Clavra › Check for Updates…, or Settings › About › Check for Updates.
• New here: download Clavra-0.6.1.dmg below, drag Clavra to Applications, and click Open Anyway in System Settings › Privacy & Security the first time.

Requires macOS 15 or later, on Apple Silicon or Intel.

SHA-256 Clavra-0.6.1.dmg: a67cf4518162b40f3ebee675463eae5345f810a685d2178a55d821869deb3896

Clavra 0.6.0

New

• What it would touch. When the guard holds a risky command, Clavra first checks on the server what it would hit, using a read-only stand-in: "Deletes 1,243 files and folders, 3.2 GB", which units depend on the service you're stopping, which containers docker compose down takes with it, and who is signed in before a reboot.
• Undo for rm -rf. "Back Up, Then Run" archives what rm or chmod -R would touch into ~/.clavra-backups on the server first (up to 500 MB, after checking there's room). If you change your mind, Backups in the status line puts everything back.
• A phone's yes. Turn on "Only a phone can say yes" for a host, and its risky commands run only once a phone connected through Phone Access approves them. The Mac on its own can only say no.
• sudo with Touch ID. When sudo asks for a password, Clavra fills it in from the Keychain after Touch ID. It's never typed, so it never lands in the scrollback or the history.
• Keep sessions alive. Each tab can run inside tmux on the server, set up for you: Wi-Fi drops, sleep or quitting Clavra don't stop what's running, and reconnecting puts you back where you were. Closing the tab cleans it up.
• Recordings. Tabs are saved as asciinema .cast files, with every command marked on the timeline. Scrub back, search by command, and jump straight to it. Off by default; kept on this Mac only.
• Compare servers. Two hosts side by side: packages, running services, listening ports, a config file, or a whole folder by checksum.
• Logs and runbooks. Follow a log file, the journal or a container beside the terminal, with errors and warnings standing out. Keep a Markdown runbook for each host; its commands run with a click, through the same guard as typing.
• Notifications. A command that ran 20 seconds or more tells you when it's done if you're in another tab or app. Production hosts are checked every minute, and you hear when one goes down and when it comes back.
• Panes like iTerm. Splits share the space evenly, dividers drag (double-click to even them out), every pane has its own ×, and you can drag a pane onto another pane's edge to move it there. Double-click the top of the window to zoom it.

Fixed

• Clicking Show on an open host, or splitting a pane, could crash Clavra.
• After a dropped connection, a tunnel that had just carried traffic sometimes didn't come back.
• The guard now also holds docker compose -f file.yml down and other commands with options before the subcommand.
• A long command that wraps onto several lines is read whole by the guard, suggestions and history.
• Cancel in the new-label form now closes it.

Update

• On 0.4.x or 0.5.x: Clavra › Check for Updates…, or Settings › About › Check for Updates. Clavra downloads 0.6.0, checks its signature and restarts into it.
• New here: download Clavra-0.6.0.dmg below, drag Clavra to Applications, and click Open Anyway in System Settings › Privacy & Security the first time.

Requires macOS 15 or later, on Apple Silicon or Intel.

SHA-256 Clavra-0.6.0.dmg: c638c22cab6abf510f102d0a4a46979123f4a0ee8d2c7afe328580a769f7ac21

Clavra 0.5.1

New

• Keys found for you. A host's key starts on Automatic: Clavra uses the key ~/.ssh/config names for that host (by its name, its address, a wildcard, or a HostName pointing there), then your usual keys. Test Connection says which key signed in.
• Import with a preview. Importing ~/.ssh/config now lists every host first, with its user, port, key and jump host, so you choose what's saved. Host * defaults, every alias on a Host line, Include and ProxyJump are followed. Entries that only pick a key for git start unticked.
• Your own labels. Next to Personal, Staging and Production, make labels like "Client A" in one of seven soft colours. Right-click one to edit or delete it.
• A clearer host editor. Every field has its name above it, hints are a clear step quieter than what you type, and the pickers are Clavra's own lists, with arrows, Return and Escape.
• Tunnels explain themselves. Ports are checked as you type, a Mac port already in use is flagged, and a failure says whether it happened on this Mac or on the server.

Fixed

• A server key marked @revoked in known_hosts is refused, instead of being offered as a new key.
• The production guard now catches rm --recursive and --force, find -delete, find -exec rm, recursive chown and chgrp, and DELETE or UPDATE without WHERE inside psql -c '…' or mysql -e "…".
• A Mac port that isn't a number, or a port above 65535, is no longer accepted or quietly replaced.
• A new key only lands in ~/.ssh once its passphrase is on, so a failure never leaves an unprotected key behind.
• Buttons in the host editor no longer wrap onto two lines.

Update

• On 0.4.x or 0.5.0: Clavra › Check for Updates…, or Settings › About › Check for Updates. Clavra downloads 0.5.1, checks its signature and restarts into it.
• New here: download Clavra-0.5.1.dmg below, drag Clavra to Applications, and click Open Anyway in System Settings › Privacy & Security the first time.

Requires macOS 15 or later, on Apple Silicon or Intel.

SHA-256 Clavra-0.5.1.dmg: 231a3a07dcc78bdac726fbec24dd8591abb7d86e48f1f3b0a21644fb8481a599

Clavra 0.5.0

New

• Home lists every host. Type in "Where to?" to filter, press Return to open the first match. Each host shows its tags, latency and whether it's open, with Connect, Test, Edit and a menu for Duplicate, Copy ssh Command and Delete.
• Test Connection. From Home or the host editor, Clavra connects, checks the server's key, signs in and disconnects. A new server key can be trusted right there.
• Identities. Save a user with its key or password once in Keys, then pick it under "Sign in as" for as many hosts as you like. Deleting an identity gives each host its own copy, so nothing gets locked out.
• Tags on every host.
• Sidebar groups. Group hosts by place or by tag from the + menu, fold any group with a click, or collapse and expand them all. Clavra remembers which groups are folded.
• Phone page: scroll back through earlier output, jump back with Latest, and open a saved host in a new tab with +. Text now fits the phone's width.

Fixed

• Checking for updates no longer misses a new release because of a cached feed.

Update

• On 0.4.x: Clavra › Check for Updates…, or Settings › About › Check for Updates. Clavra downloads 0.5.0, checks its signature and restarts into it.
• New here: download Clavra-0.5.0.dmg below, drag Clavra to Applications, and click Open Anyway in System Settings › Privacy & Security the first time.

Requires macOS 15 or later, on Apple Silicon or Intel.

SHA-256 Clavra-0.5.0.dmg: 0234e6e4b8e4f192600466c5db5dd03d04497bb9275fe6a977cc308b23adacd2

Clavra 0.4.1

New

• Phone Access from anywhere. Your phone and Mac now meet through clavra.naqara.dev over HTTPS, so the phone no longer has to be on the same Wi-Fi. Everything stays end-to-end encrypted with the key in the QR code; the relay only passes along data it can't read. Same-Wi-Fi only is still a choice in Phone Access.
• A tidier sidebar. Search with one + for New Host and Import, your hosts, and a quiet row of icons for Snippets, Keys, Phone Access and Settings.
• About and updates in Settings. Version, Check for Updates, and the daily check, all in Settings › About.

Update

• On 0.4.0: Clavra › Check for Updates…, or Settings › About › Check for Updates. Clavra downloads 0.4.1, checks its signature and restarts into it.
• New here: download Clavra-0.4.1.dmg below, drag Clavra to Applications, and click Open Anyway in System Settings › Privacy & Security the first time.

Requires macOS 15 or later, on Apple Silicon or Intel.

SHA-256 Clavra-0.4.1.dmg: 8978a622c31f48c4e7cc0d837d62fa493dd858ea7ac1a091a6f330cb55a8b010

Clavra 0.4.0

The first public release of Clavra, an SSH client for the Mac by Naqara Dev.

What's in it

• Hosts by place (production, staging, personal), search, import from ~/.ssh/config, and a "Where to?" field that takes a saved name or user@server:port.
• Sign in with ed25519, RSA or ECDSA keys (passphrases supported) or a password. Passwords and passphrases live in your Keychain. Host keys are checked, and a changed key is called out.
• Production guard: rm -rf, DROP TABLE, DELETE without WHERE, shutdown, docker rm, git push --force and more wait for a yes before Return reaches the server.
• Split panes (⌘D, ⇧⌘D), suggestions as you type from that host's history (→ to take one), find in scrollback, and a dropped connection that comes back on its own.
• Tunnels: local, remote and SOCKS, with the ports a server listens on offered one click away.
• Files over SFTP beside the terminal: whole folders both ways, and edit any file in a Mac app with each save going back up.
• Server health: reachability in the sidebar; load, memory, disk and uptime while connected.
• Jump hosts, snippets (⌘;), key audit, Phone Access (your tabs in a phone's browser on the same Wi-Fi, by QR code), and optional iCloud Drive sync.

Install

Download Clavra-0.4.0.dmg below and drag Clavra to Applications. The first time, macOS says it can't check the developer: open System Settings › Privacy & Security and click Open Anyway. Updates after this one install in place from Clavra › Check for Updates….

Requires macOS 15 or later, on Apple Silicon or Intel.

SHA-256 Clavra-0.4.0.dmg: b6d488ec6437722a5ddc2e66409418c82f1cd717a2a87577881157a199afcc1e