Hatoba v0.4.1

The window's language

With the language following the system, Hatoba marked its window as Chinese on English and Japanese systems until you picked a language yourself. Screen readers could read it with a Chinese voice, and Japanese text could appear in a Chinese font. The window now carries the language it shows from the start.

Installed versions update to this version from Settings → About. The sync Worker hasn't changed, so there is nothing to redeploy.

Install

Windows: download Hatoba_0.4.1_windows-x64-setup.exe and run it. It installs Hatoba for the current user and needs no administrator rights. The installer is not code-signed, so Windows SmartScreen may stop it: choose More info, then Run anyway.

Linux (x86_64): on Debian, Ubuntu, and distributions based on them, download Hatoba_0.4.1_linux-x64.deb and install it with sudo apt install ./Hatoba_0.4.1_linux-x64.deb. On other distributions, download Hatoba_0.4.1_linux-x64.AppImage, make it executable with chmod +x Hatoba_0.4.1_linux-x64.AppImage, and run it.

macOS (Apple Silicon, experimental): on macOS 13 or later, download Hatoba_0.4.1_macos-apple-silicon.dmg, open it, and drag Hatoba to Applications. The app is not signed with an Apple Developer ID or notarized, so macOS blocks it the first time you open it: close the warning, go to System Settings → Privacy & Security, choose Open Anyway under Security, and enter your login password. After an update, macOS may ask whether Hatoba can use its keychain items: enter your login password and choose Always Allow, because sync fails if you deny it.

SHA256SUMS.txt has the SHA-256 checksum of each file. The .sig files, Hatoba_0.4.1_macos-apple-silicon-update.app.tar.gz, and latest.json are for the app's updater, so you don't need to download them.

Changelog

Changes since v0.4.0:

Features

• site: try the app in the browser from the home page (#235)

Fixes

• desktop: set the document language from the first locale (#231)

Other changes

• docs(status): record the verification already done by hand (#232)
• refactor(ai): state the tool-choice and approval rules once (#233)
• chore(release): prepare v0.4.1 (#236)

Full diff

Hatoba v0.4.0

Local terminals, memory, and terminal color schemes

New since 0.3.0:

• Local terminals: open a shell on this computer in a tab, from New Local Terminal beside New Tab or with Ctrl+Shift+` (⌃⇧` on macOS). On Windows that is PowerShell, Command Prompt, Git Bash, or a WSL distribution; on macOS and Linux, the shells the system lists. Settings → Terminal → Local Terminal Shell chooses the one the shortcut opens.
• The assistant in local tabs: it runs commands and reads, edits, and searches files on this computer as it does on a host, with the same approvals. In PowerShell and Command Prompt tabs it reads commands in their own syntax, so commands that only read, such as Get-ChildItem or ipconfig, run without asking.
• Memory: the assistant saves what will help later, such as your preferences and facts about your hosts, and every new conversation starts with it. Memories sync with your vault. Settings → AI → Memory, also opened by /memory, lists them, lets you add, edit, and delete them, and turns memory off.
• Terminal color schemes: Settings → Appearance → Terminal Colors offers 18 built-in schemes, among them Dracula, Tokyo Night, Catppuccin, Nord, Gruvbox, Solarized, and Rosé Pine. Pick one for dark and one for light, and choose Match Appearance to switch between them with the app.
• A folder for each command: the assistant can run a command in a given folder. The approval card shows the folder, and Edit changes it.
• Following replies: the AI panel follows a reply to the bottom as it streams, and stops as soon as you scroll up.

Installed versions update to this version from Settings → About. The sync Worker hasn't changed, so there is nothing to redeploy.

Install

Windows: download Hatoba_0.4.0_windows-x64-setup.exe and run it. It installs Hatoba for the current user and needs no administrator rights. The installer is not code-signed, so Windows SmartScreen may stop it: choose More info, then Run anyway.

Linux (x86_64): on Debian, Ubuntu, and distributions based on them, download Hatoba_0.4.0_linux-x64.deb and install it with sudo apt install ./Hatoba_0.4.0_linux-x64.deb. On other distributions, download Hatoba_0.4.0_linux-x64.AppImage, make it executable with chmod +x Hatoba_0.4.0_linux-x64.AppImage, and run it.

macOS (Apple Silicon, experimental): on macOS 13 or later, download Hatoba_0.4.0_macos-apple-silicon.dmg, open it, and drag Hatoba to Applications. The app is not signed with an Apple Developer ID or notarized, so macOS blocks it the first time you open it: close the warning, go to System Settings → Privacy & Security, choose Open Anyway under Security, and enter your login password. After an update, macOS may ask whether Hatoba can use its keychain items: enter your login password and choose Always Allow, because sync fails if you deny it.

SHA256SUMS.txt has the SHA-256 checksum of each file. The .sig files, Hatoba_0.4.0_macos-apple-silicon-update.app.tar.gz, and latest.json are for the app's updater, so you don't need to download them.

Changelog

Changes since v0.3.0:

Features

• desktop: open a local terminal in a tab, with the assistant (#222)
• ai: read PowerShell and Command Prompt commands in their syntax (#223)
• ai: let run_command start in a given directory (#225)
• desktop: pick terminal color schemes from built-in presets (#227)
• ai: remember notes across conversations, synced with the vault (#228)

Fixes

• desktop: keep AI replies in view and let go on any scroll up (#218)
• core: delete hosts, groups and keys in one transaction (#219)
• desktop: read a repeated selection as typed text, isolate E2E runs (#221)
• ai: count multiline grep matches as rg does, report large files (#224)

Other changes

• refactor(desktop): call native commands through the generated bindings (#220)
• chore(release): prepare v0.4.0 (#229)

Full diff

Hatoba v0.3.0

Sign in with ChatGPT, PIN unlock, and the tray

New since 0.2.0:

• Sign in with ChatGPT: choose Continue with ChatGPT in Settings → AI to use your ChatGPT plan with the assistant. The provider syncs to your other devices, where you sign in once more.
• OpenAI Responses: providers can use the OpenAI Responses protocol. New providers for api.openai.com use it, and existing providers keep theirs.
• Search with the model's provider: without a search provider chosen, the assistant searches the web with the current model's provider, shown as Native Search in Settings → AI. Choose None to turn web search off.
• Main content of web pages: when the assistant reads a page, it gets the main content without the navigation, sidebars, and footers, unless it asks for the whole page.
• Notifications: while Hatoba isn't the active window, a system notification tells you when an AI conversation finishes or waits for your approval. Click it to go back to the conversation, or turn it off in Settings → General.
• Minimize to the tray (Windows and Linux): the close button asks whether to quit or to minimize Hatoba to the system tray, where SSH sessions, port forwards, and sync keep running. Settings → General → Close Button changes the answer. On Linux desktops without a tray, such as GNOME without an extension, the close button quits as before.
• PIN unlock: turn on Settings → Security → Unlock with PIN to unlock with a PIN after the first unlock of each launch. Five wrong PINs in a row turn it off until you unlock with the master password, a recovery code, or Windows Hello.
• Windows Hello on its own: the lock screen shows the Windows Hello prompt as soon as you come back to Hatoba.
• Daily update check: Hatoba checks for updates every day while it runs, and the tray menu offers a new version when there is one.

Installed versions update to this version from Settings → About. The sync Worker hasn't changed, so there is nothing to redeploy.

Install

Windows: download Hatoba_0.3.0_windows-x64-setup.exe and run it. It installs Hatoba for the current user and needs no administrator rights. The installer is not code-signed, so Windows SmartScreen may stop it: choose More info, then Run anyway.

Linux (x86_64): on Debian, Ubuntu, and distributions based on them, download Hatoba_0.3.0_linux-x64.deb and install it with sudo apt install ./Hatoba_0.3.0_linux-x64.deb. On other distributions, download Hatoba_0.3.0_linux-x64.AppImage, make it executable with chmod +x Hatoba_0.3.0_linux-x64.AppImage, and run it.

macOS (Apple Silicon, experimental): on macOS 13 or later, download Hatoba_0.3.0_macos-apple-silicon.dmg, open it, and drag Hatoba to Applications. The app is not signed with an Apple Developer ID or notarized, so macOS blocks it the first time you open it: close the warning, go to System Settings → Privacy & Security, choose Open Anyway under Security, and enter your login password. After an update, macOS may ask whether Hatoba can use its keychain items: enter your login password and choose Always Allow, because sync fails if you deny it.

SHA256SUMS.txt has the SHA-256 checksum of each file. The .sig files, Hatoba_0.3.0_macos-apple-silicon-update.app.tar.gz, and latest.json are for the app's updater, so you don't need to download them.

Changelog

Changes since v0.2.0:

Features

• ai: search the web with the model provider's own search by default (#198)
• ai: fetch_url returns a page's main content (#199)
• desktop: ask to minimize to the tray or quit on close (#201)
• ai: add the OpenAI Responses protocol (#204)
• desktop: check for updates daily and offer them in the tray (#207)
• ai: notify when a conversation finishes or waits for approval (#208)
• PIN unlock and Windows Hello prompt on the lock screen (#209)
• ai: sign in with ChatGPT to use the ChatGPT plan (#210)

Fixes

• desktop: send legacy mouse reports to the shell as bytes (#197)
• ci: keep the PR policy check from failing when a run is replaced (#202)
• desktop: keep checkbox, segments and cursor preview from resizing (#211)
• desktop: open the browser once for Continue with ChatGPT (#212)

Other changes

• ci: close outside pull requests that skip the contribution guide (#200)
• docs(spec): describe the Secure Enclave design for Touch ID (SEC-10) (#213)
• chore(release): prepare v0.3.0 (#214)

Full diff

Hatoba v0.2.0

Dashboard and the hatoba command

New since 0.1.0:

• Dashboard: the online status, CPU, memory, disks, network, load, and uptime of every saved host on one page, as cards or a table, read over SSH with nothing to install on the servers. Open a host for its CPU and network over the last few minutes, and set the warning thresholds and how often it refreshes in Settings → General.
• The hatoba command: turn on Settings → General → Use the hatoba command in terminals, then run hatoba <host name> or hatoba user@host in any terminal to connect in Hatoba.
• / commands and @ mentions: in the AI panel, type / to run a command, a skill, or an MCP prompt, and @ to attach a file or folder on the host, or an MCP resource.
• Conversations keep running: starting a new conversation or opening another one no longer stops the assistant. History marks the conversations that are still working or waiting for your approval.
• Faster tools: the assistant runs calls that only read at the same time, and its file search uses rg where the host has it.
• Stopping a command: when you stop the assistant or a command times out, Hatoba ends the command on the server where it can, and tells the assistant whether it ended or may still be running.

The new website has the downloads and the user documentation.

0.1.0 updates to this version from Settings → About. The sync Worker hasn't changed, so there is nothing to redeploy.

Install

Windows: download Hatoba_0.2.0_windows-x64-setup.exe and run it. It installs Hatoba for the current user and needs no administrator rights. The installer is not code-signed, so Windows SmartScreen may stop it: choose More info, then Run anyway.

Linux (x86_64): on Debian, Ubuntu, and distributions based on them, download Hatoba_0.2.0_linux-x64.deb and install it with sudo apt install ./Hatoba_0.2.0_linux-x64.deb. On other distributions, download Hatoba_0.2.0_linux-x64.AppImage, make it executable with chmod +x Hatoba_0.2.0_linux-x64.AppImage, and run it.

macOS (Apple Silicon, experimental): on macOS 13 or later, download Hatoba_0.2.0_macos-apple-silicon.dmg, open it, and drag Hatoba to Applications. The app is not signed with an Apple Developer ID or notarized, so macOS blocks it the first time you open it: close the warning, go to System Settings → Privacy & Security, choose Open Anyway under Security, and enter your login password. After an update, macOS may ask whether Hatoba can use its keychain items: enter your login password and choose Always Allow, because sync fails if you deny it.

SHA256SUMS.txt has the SHA-256 checksum of each file. The .sig files, Hatoba_0.2.0_macos-apple-silicon-update.app.tar.gz, and latest.json are for the app's updater, so you don't need to download them.

Changelog

Changes since v0.1.0:

Features

• desktop: open hosts from the hatoba command (#167)
• ai: run grep with rg where the host has it (#168)
• ai: run read-only tool calls concurrently (#173)
• desktop: add a dashboard of every host's status and usage (#177)
• ai: keep a conversation's turn running after leaving it (#174)
• ai: add / commands and @ mentions to the panel input (#176)
• site: add the project website at hatoba.fog.moe (#183)

Fixes

• desktop: expand the update progress bar (#178)
• ai: end the remote command when run_command stops or times out (#175)
• desktop: follow up on the dashboard review (#180)
• desktop: list the password and the code as alternatives in Japanese (#181)
• desktop: fit the dashboard beside the AI panel (#182)
• site: match headings across languages and redirect by language (#185)

Other changes

• ci: skip unneeded work on pull requests (#179)
• docs: add skill for codex (99bbb4f)
• docs: point the README at the website for downloads and screenshots (#184)
• chore(release): prepare v0.2.0 (#186)

Full diff

Hatoba v0.1.0

First stable release

Hatoba is a desktop SSH client with an AI assistant and end-to-end encrypted sync through your own Cloudflare account. It runs on Windows 10 and 11 and on Linux, and an experimental build runs on Apple Silicon Macs.

• Hosts and terminal: groups, tags, search, ~/.ssh/config import, ProxyJump, SOCKS5 and HTTP proxies, quick connect, tabs, CJK input methods, and server status in the status bar.
• Authentication and keys: passwords, Ed25519, ECDSA, and RSA keys, ssh-agent, keyboard-interactive (2FA), and a key vault that imports OpenSSH, PEM, and PuTTY .ppk keys.
• SFTP and port forwarding: a file panel beside the terminal, and local forwards that can start with the connection.
• Vault: a master password with a recovery code, auto-lock, and encrypted backups.
• Cloud sync: deploy the sync Worker to your Cloudflare account from the app, then sync your devices through it.
• AI assistant: a panel beside each terminal that reads the screen, runs commands, and reads and edits files on the host, with skills and MCP servers.

New since 0.1.0-alpha.2 (all changes):

• Auto mode: a model you choose reviews the assistant's tool calls and lets the ones that are safe or that you asked for run without asking you.
• File tools: the assistant reads, edits, and writes files on the tab's host, shows the diff of each change, and can revert it. It also finds files and searches their contents.
• Conversations: queue messages while the assistant works, ask a side question without stopping it, and fork a conversation from any message.
• MCP servers: add GitHub, Linear, Context7, and Cloudflare from templates. Servers with many tools no longer fill the context, because the assistant looks their tools up when it needs them.
• Cloud sync: a device that already has a vault can join a cloud vault and bring its items along, and the Cloud Sync page names the items too large to sync.

0.1.0-alpha.2 updates to this version from Settings → About. 0.1.0-alpha.1 can't update itself, so download the installer below and run it once. The sync Worker is the same as in the alphas, so there is nothing to redeploy.

If you forget the master password and lose the recovery code, your data cannot be recovered. Report problems with Settings → About → Report a Problem.

Install

Windows: download Hatoba_0.1.0_windows-x64-setup.exe and run it. It installs Hatoba for the current user and needs no administrator rights. The installer is not code-signed, so Windows SmartScreen may stop it: choose More info, then Run anyway.

Linux (x86_64): on Debian, Ubuntu, and distributions based on them, download Hatoba_0.1.0_linux-x64.deb and install it with sudo apt install ./Hatoba_0.1.0_linux-x64.deb. On other distributions, download Hatoba_0.1.0_linux-x64.AppImage, make it executable with chmod +x Hatoba_0.1.0_linux-x64.AppImage, and run it.

macOS (Apple Silicon, experimental): on macOS 13 or later, download Hatoba_0.1.0_macos-apple-silicon.dmg, open it, and drag Hatoba to Applications. The app is not signed with an Apple Developer ID or notarized, so macOS blocks it the first time you open it: close the warning, go to System Settings → Privacy & Security, choose Open Anyway under Security, and enter your login password. After an update, macOS may ask whether Hatoba can use its keychain items: enter your login password and choose Always Allow, because sync fails if you deny it.

SHA256SUMS.txt has the SHA-256 checksum of each file. The .sig files, Hatoba_0.1.0_macos-apple-silicon-update.app.tar.gz, and latest.json are for the app's updater, so you don't need to download them.

Hatoba v0.1.0-alpha.2

Linux, macOS, and in-app updates

The second alpha adds Linux packages and an experimental macOS build for Apple Silicon next to the Windows installer. The maintainer uses Windows, so the Linux and macOS builds have had little testing on real machines. If something doesn't work on them, please open an issue.

0.1.0-alpha.1 can't update itself, so download the installer below and run it once. From this version on, Settings → About checks for updates and installs them. The sync Worker hasn't changed, so there is nothing to redeploy.

New since 0.1.0-alpha.1:

• Quick connect: type a target such as user@host:port in the hosts search field to connect without saving a host.
• Proxies: connect through SOCKS5 and HTTP proxies, saved in Settings → Proxies, with a default proxy for each device.
• Environment variables for each host, sent to the server before the shell starts.
• Server status: the CPU, memory, and network usage of Linux servers in the status bar, and an icon for each host's operating system.
• AI assistant: continue the home tab's conversation in a terminal tab.
• A new app icon.

This is still an alpha: keep a backup of anything you cannot lose.

Install

Windows: download Hatoba_0.1.0-alpha.2_x64-setup.exe and run it. It installs Hatoba for the current user and needs no administrator rights. The installer is not code-signed, so Windows SmartScreen may stop it: choose More info, then Run anyway.

Linux (x86_64): on Debian, Ubuntu, and distributions based on them, download Hatoba_0.1.0-alpha.2_amd64.deb and install it with sudo apt install ./Hatoba_0.1.0-alpha.2_amd64.deb. On other distributions, download Hatoba_0.1.0-alpha.2_amd64.AppImage, make it executable with chmod +x Hatoba_0.1.0-alpha.2_amd64.AppImage, and run it.

macOS (Apple Silicon, experimental): on macOS 13 or later, download Hatoba_0.1.0-alpha.2_aarch64.dmg, open it, and drag Hatoba to Applications. The app is not signed with an Apple Developer ID or notarized, so macOS blocks it the first time you open it: close the warning, go to System Settings → Privacy & Security, choose Open Anyway under Security, and enter your login password. After an update, macOS may ask whether Hatoba can use its keychain items: enter your login password and choose Always Allow, because sync fails if you deny it.

SHA256SUMS.txt has the SHA-256 checksum of each file.

Changelog

Changes since v0.1.0-alpha.1:

Features

• desktop: show the server OS icon for hosts (#51)
• desktop: quick connect from the hosts search field (#53)
• desktop: redesign the app icon (#57)
• desktop: install signed updates from the About page (#59)
• desktop: show the server's resource usage in the status bar (#65)
• desktop: send per-host environment variables (#70)
• connect through SOCKS5 and HTTP proxies (#72)
• ai: continue the home conversation in a terminal tab (#87)

Fixes

• desktop: polish the UI (#50)
• ai: record tools/list_changed before the answer that follows it (#54)
• security: patch sharp via wrangler and escape MCP command lines (#63)
• stop ended sync rounds and ask before importing SSH config keys (#79)
• ai: compact with the request the next turn would send (#83)
• desktop: save Markdown and JSON exports (#84)
• ai: note when a terminal becomes available mid-conversation (#85)
• ai: note when a conversation moves off a quick connection (#86)
• ai: show the quick connection a conversation is on (#88)
• desktop: fix keyboard, IME, drop, and font issues on macOS (#58)
• desktop: make the macOS build behave like a native app (#71)

Performance

• ai: read only the newest entries while waiting for tool results (#82)

Other changes

• docs: link the README to the installer on GitHub Releases (#47)
• docs: add screenshots and a demo video to the README (#48)
• docs: add a security policy (#55)
• docs: mark non-SSH protocols as proposed or not planned (#62)
• ci: publish Linux deb and AppImage releases (#61)
• test(worker): make the rate-limit tests independent of the minute window (#64)
• ci: run the hatoba-ai tests on Windows (#80)
• test(ai): require the symlink tests to run in CI (#81)
• ci: build and test on macOS (#56)
• docs: add the macOS requirements as §9.2 (#94)
• build: publish an experimental macOS build in releases (#92)
• docs: note that the Linux and macOS builds get little testing (#95)
• chore(release): prepare v0.1.0-alpha.2 (#96)
• test(ai): make the concurrent tool run test deterministic (#97)

Full diff

Hatoba v0.1.0-alpha.1

First alpha

This is the first preview of Hatoba, a desktop SSH client with an AI assistant and end-to-end encrypted sync through your own Cloudflare account. It runs on Windows 10 and 11. Expect rough edges, and keep a backup of anything you cannot lose: an alpha can still change how data is stored.

What you can try:

• Hosts and terminal: groups, tags, search, ~/.ssh/config import, ProxyJump, tabs, CJK input methods, terminal search, and clickable links.
• Authentication and keys: passwords, Ed25519, ECDSA, and RSA keys, ssh-agent, keyboard-interactive (2FA), and a key vault that imports OpenSSH, PEM, and PuTTY .ppk keys.
• SFTP and port forwarding: a file panel beside the terminal, and local forwards that can start with the connection.
• Vault: a master password with a recovery code, auto-lock, and encrypted backups.
• Cloud sync: deploy the sync Worker to your Cloudflare account from the app, then sync your devices through it.
• AI assistant: a panel beside each terminal that reads the screen and runs commands with your approval, using your own OpenAI-compatible or Anthropic API key, with skills and MCP servers.

If you forget the master password and lose the recovery code, your data cannot be recovered. Report problems with Settings → About → Report a Problem.

Install

Download Hatoba_0.1.0-alpha.1_x64-setup.exe and run it. It installs Hatoba for the current user and needs no administrator rights. The installer is not code-signed, so Windows SmartScreen may stop it: choose More info, then Run anyway. SHA256SUMS.txt has its SHA-256 checksum.