Sushi - SSH Client
An open source Android SSH client focused on fast connections, clean session management, and a modern UI.
Status
- Active development with working SSH & local shell session flow, host management, and automated Plays.
- Conversational AI mode: Talk directly to your connected system using Gemini Cloud or on-device Gemini Nano.
- Security: Host key verification (TOFU), encrypted private keys with passphrase support, and AES256-GCM encrypted credential storage (
SecurePrefs).
- Connection reliability: Foreground service keep-alive (
SshConnectionService) and TCP keep-alive probes prevent background drops.
- Authentication: Modern Android Credential Manager & Identity Authorization for Google Drive log backups; GitHub OAuth Device Flow for in-app feedback.
Features
💻 SSH & Terminal
- Fast interactive terminal with custom
TerminalView, ANSI/OSC escape handling, and UTF-8 support.
- Local shell backend (
LocalShellBackend) alongside remote SSH (SshClient).
- Trust-On-First-Use (TOFU) host key verification with fingerprint verification, mismatch warnings, and
HostKeysActivity management.
- Password, unencrypted private key, and encrypted private key (PEM / OpenSSH bcrypt) authentication.
- Jump server (bastion host / proxy) support.
- Phrase management with quick-execution and automated key deployment phrases.
- Parameterized automated Plays with live preview and description support.
- Foreground service keep-alive ensuring sessions survive app backgrounding, switching apps, and 2FA prompts.
🤖 Conversational AI with Target System
- Talk directly TO your connected Linux system / Raspberry Pi via Gemini (Cloud or Nano).
- Target-side persona (
~/.config/sushi/SUSHI.md) automatically created on first use.
- Three-tier command safety model:
SAFE (auto-execute), CONFIRM (ask user first), and BLOCKED (never execute).
- Live command output streaming (
onChunk) and raw terminal bypass mode.
- SQLite-backed transcript persistence and interactive session history browser (
GeminiHistoryActivity).
- Dual voice and text input.
🎨 Customization & Convenience
- Light, Dark, and System theme support with customizable accent color palette (Gari amber, Wasabi, Coral, Terracotta).
- First-run setup checklist guiding SSH host setup, key generation, and optional cloud integrations.
- In-app feedback system filing issues directly via GitHub Device Flow.
- Google Drive session log backups via modern Credential Manager.
Recent Release Highlights
v0.8.3
- Light Mode: The terminal follows the system theme instead of a fixed dark screen. In light mode its key labels had been drawn at 1.04:1 against their own background — present, but invisible. The ANSI palette came with it, since the raw colour constants suit a dark terminal and put yellow and white at about 1.1:1 on a light one.
- Readable ANSI Backgrounds:
ESC[40m–ESC[47m had reused the foreground palette, so a highlight painted text in its own colour — a blank rectangle at exactly 1.00:1. Backgrounds are now their own palette per theme, and a foreground that would fall short against one is shifted toward white or black until it reads.
- No More Escape Codes at the Prompt: The terminal filtered only two kinds of escape sequence and let the rest through with their payload visible, so a prompt arrived as
=(B larry@edge:~ $. Every escape shape is now recognised and consumed.
- Visible Gemini Responses: The response bubble drew its text in the terminal's colour, which in dark mode was its own background colour. It now reads at about 16:1 in both themes.
v0.8.2
- Command History from the Terminal: Up and Down buttons send the cursor sequences to the shell, so
history is reachable from the phone. A hardware keyboard's arrows work too — neither reached the shell before.
- Readable Status Lines: The terminal's own messages no longer run into each other or into the shell prompt; the same fix applies to the Plays session log.
v0.8.1
- Jump Server Fix: Connecting through a bastion now works when the two hosts use different login methods. The jump host authenticates on its own preference instead of inheriting the target's, which had left a key-auth target's bastion with no password to offer and failed the connection outright.
- Per-Host Authentication Methods: Each connection now offers only the methods its own host is configured for, so a host set to Password no longer authenticates with the key instead.
v0.8.0
- Command History: Every command Sushi runs — AI-issued, Raw Terminal Mode, or a Play — is stored locally in SQLite and browsable from the Terminal tab, with search, per-host filter, and copy / delete / re-run. Capped at 500 entries per host; a Play that substituted a secret parameter value into its command is not recorded at all, since the rendered command would hold that value in plaintext.
- AI-Powered Troubleshooting: The conversation chains diagnosis automatically (command → output → interpretation → next command) until it reaches a conclusion, with every step still classified by
CommandSafety and a switch in the Gemini dialog to turn it off.
- Multi-System Awareness: The AI prompt carries an Infrastructure section describing your other saved hosts, so cross-system questions can be answered without connecting; the Gemini dialog names the active host.
- Complete Localization: Finnish, German, Swedish, and Spanish translations for all 508 translatable strings.
- Crash Fixes: Command execution on Android 12L and older, and feedback with device info on Android 8.x.
以上为 README 的开头部分。其余内容请阅读原文。 查看完整 README ↗
