Aegis SSH v0.4.0

Aegis SSH v0.4.0

• Adds automatic configuration, status, repair, and removal for Codex, Claude Code, Gemini CLI, Cursor, VS Code, and OpenClaw.
• Adds checksum-verified one-line GitHub installation, update, and uninstall commands.
• Embeds the managed Agent Skill in the standalone binary and preserves unmanaged same-name Skills.
• Keeps updated brokers locked until the user explicitly unlocks them.

Aegis SSH v0.3.0

Aegis SSH v0.3.0

Aegis SSH v0.3.0 turns the local privacy broker into a background service with guided server enrollment, local approvals, fleet execution, bilingual CLI help, structured diagnostics, and one-command lifecycle management.

Highlights

• Background start/stop/lock/unlock/status lifecycle and optional locked-at-login launchd/systemd user service.
• Six-step server wizard, port 22 default, private-key discovery, masked details, and authenticated connection tests.
• enforce, warn, and off risk policies; enforce approvals move out of agent chat into the local approval center.
• Concurrent ssh_execute_batch, exec --servers, and exec --all, with one immutable approval per risky batch.
• English/Chinese CLI help, configurable operational log levels, improved documentation, and install/update/uninstall support.
• Offline recovery codes can reset a forgotten master password without losing configured servers; legacy vaults without recovery can be archived and safely reinitialized.
• server password <alias> reveals a password only after master-password verification and writes it exclusively to the controlling terminal.

---

Aegis SSH v0.3.0 中文说明

v0.3.0 新增后台服务、交互式服务器向导、本机审批、多服务器并发执行、中英文 CLI、结构化排障日志以及一键安装、更新和卸载。风险审批不再要求用户在 Agent 对话中回复批准码。登录自启服务始终以锁定状态运行，主密码不会持久化。

本版本还支持提前生成离线恢复码，忘记主密码后可在保留服务器数据的前提下重设；未启用恢复的旧 vault 可归档后安全重建。server password <别名> 只会在验证主密码后将服务器密码显示到真实终端，不会进入 MCP 或重定向输出。

Aegis SSH v0.2.0

Aegis SSH v0.2.0

Aegis SSH v0.2.0 adds encrypted private-key authentication while preserving the password workflow and alias-only Agent interface introduced in v0.1.0.

Highlights

• Add SSH private-key authentication for unencrypted and passphrase-encrypted keys.
• Import private-key contents through /dev/tty into the encrypted local vault without storing the source path.
• Keep existing v0.1.0 password vault entries backward compatible; password and private-key servers can coexist under independent aliases.
• Reject key files that are symbolic links, not regular files, not owned by the current user, accessible by group or other users, empty, or larger than 1 MiB.
• Clear password, private-key, and private-key-passphrase byte buffers during daemon locking, command cleanup, and vault replacement.
• Document complete password and private-key enrollment, multiple-server management, Codex MCP setup, Skill behavior, Agent prompts, and exact approval handling in English and Simplified Chinese.

Upgrade Notes

Existing vaults require no migration. Replace the binary, update the companion Skill, restart the Agent client, and restart aegis-ssh daemon. Use aegis-ssh server edit <alias> to switch an existing alias between password and private-key authentication.

The security boundary is unchanged: Aegis SSH isolates credentials and reduces accidental disclosure, but arbitrary remote Shell execution is not a complete sandbox. Review SECURITY.md before use in a sensitive environment.

---

Aegis SSH v0.2.0 中文说明

Aegis SSH v0.2.0 在保留 v0.1.0 密码登录流程和仅使用公开别名的 Agent 接口基础上，新增了加密私钥认证支持。

主要更新

• 支持未加密私钥和带口令的加密私钥进行 SSH 认证。
• 私钥内容通过 /dev/tty 导入本地加密 vault，不保存私钥源路径。
• 保持对 v0.1.0 密码 vault 记录的向后兼容；密码服务器和私钥服务器可以使用不同别名保存在同一个 vault 中。
• 拒绝符号链接、非普通文件、非当前用户所有、组或其他用户可访问、空文件及超过 1 MiB 的私钥文件。
• daemon 锁定、命令清理和 vault 替换时，会清除密码、私钥和私钥口令的字节缓冲区。
• 中英文文档完整说明密码和私钥添加流程、多服务器管理、Codex MCP 配置、Skill 行为、Agent 提示词及精确批准流程。

升级说明

现有 vault 无需迁移。替换二进制文件并更新配套 Skill，重新启动 Agent 客户端和 aegis-ssh daemon。使用 aegis-ssh server edit <alias> 可以在密码认证和私钥认证之间切换。

安全边界没有变化：Aegis SSH 用于隔离凭据并降低意外泄露风险，但允许执行任意远程 Shell 并不等同于完整沙箱。在敏感环境中使用前，请阅读 SECURITY.zh-CN.md。

Aegis SSH v0.1.0

Aegis SSH v0.1.0

The first public release of Aegis SSH provides a local, cross-agent broker for operating SSH servers that require password authentication without exposing connection credentials to the agent interface.

Highlights

• Encrypted local credential vault using Argon2id and XChaCha20-Poly1305 under ~/.aegis-ssh.
• Password-only SSH with pinned host-key verification; credentials are entered through /dev/tty and never passed through MCP, CLI arguments, environment variables, or logs.
• Standard MCP tools and ready-to-use examples for Codex, Claude Code, Cursor, and OpenClaw.
• Agent Skill for clients that support reusable skills.
• Arbitrary non-interactive remote shell execution with best-effort sensitive-command analysis, explicit one-time approvals, output redaction, and bounded audit logging.
• Native release archives for macOS and Linux on amd64 and arm64.
• Complete English and Simplified Chinese user and security documentation.

Security Boundary

Aegis SSH isolates SSH credentials and reduces accidental disclosure, but it is not a complete remote shell sandbox. An agent allowed to run arbitrary shell commands can attempt to evade static analysis or output filtering. A malicious process running as the same local OS user may also inspect daemon memory or access the user's local socket. Read SECURITY.md before using the broker in a sensitive environment.

Install

Download the archive for your platform, verify it with SHA256SUMS, extract it, and install the binary:

grep 'aegis-ssh-v0.1.0-<os>-<arch>.tar.gz' SHA256SUMS | shasum -a 256 -c -
# Linux can use sha256sum -c - instead of shasum -a 256 -c -.
tar -xzf aegis-ssh-v0.1.0-<os>-<arch>.tar.gz
cd aegis-ssh-v0.1.0-<os>-<arch>
./aegis-ssh --help

---

Aegis SSH v0.1.0 中文说明

Aegis SSH 的首个公开版本提供了一个适配多种 AI Agent 的本地代理，使 Agent 能够操作必须使用密码认证的 SSH 服务器，同时避免向 Agent 接口暴露连接凭据。

主要功能

• 在 ~/.aegis-ssh 下使用 Argon2id 和 XChaCha20-Poly1305 加密保存本地凭据。
• 支持仅使用密码的 SSH 登录并固定校验主机密钥；凭据通过 /dev/tty 输入，不会进入 MCP、CLI 参数、环境变量或日志。
• 提供标准 MCP 工具，以及 Codex、Claude Code、Cursor 和 OpenClaw 的配置示例。
• 为支持 Skill 的 Agent 客户端提供可复用 Agent Skill。
• 支持任意非交互式远程 Shell，并提供最佳努力的敏感命令分析、一次性明确批准、输出脱敏和有界审计日志。
• 提供 macOS、Linux 的 amd64 和 arm64 原生发布包。
• 提供完整的英文和简体中文使用及安全文档。

安全边界

Aegis SSH 用于隔离 SSH 凭据并降低意外泄露风险，但它不是完整的远程 Shell 沙箱。获准执行任意 Shell 的 Agent 仍可能尝试规避静态分析或输出过滤；同一本地 OS 用户下的恶意进程也可能检查 daemon 内存或访问本地 socket。在敏感环境中使用前，请阅读 SECURITY.zh-CN.md。

安装

下载对应平台的压缩包，使用 SHA256SUMS 校验后解压：

grep 'aegis-ssh-v0.1.0-<os>-<arch>.tar.gz' SHA256SUMS | shasum -a 256 -c -
# Linux 可以将 shasum -a 256 -c - 替换为 sha256sum -c -。
tar -xzf aegis-ssh-v0.1.0-<os>-<arch>.tar.gz
cd aegis-ssh-v0.1.0-<os>-<arch>
./aegis-ssh --help