The SSH terminal that Apple Vision Pro deserves.

A native visionOS terminal built from scratch for spatial computing. Float truly transparent terminal windows in your space, then tune opacity and blur independently. AI runs privately on your device. Connect to your Tailscale network, transfer files, and record sessions without a subscription.

glas.sh  |  GitHub Sponsors  |  MIT Licensed

A live htop session floating in your space — full PTY, truecolor, glass ornament controls.

If glas.sh saves you time or brings you joy, consider sponsoring the project.

Every other SSH client on visionOS is a port from iPad. glas.sh is purpose-built for spatial computing — designed for eye-and-hand interaction, glass-first UI, and features that only make sense when your terminal floats in 3D space.

Full PTY interactive sessions with ANSI/truecolor rendering via SwiftTerm. Dynamic resize, cursor styles, visual + audio bell, in-terminal search, and command snippets with usage tracking. Per-session window overrides for opacity, glass material density, and color tint. Keyboard stays active — a focus maintenance system prevents visionOS from silently dropping input after idle.

Powered by Apple's Foundation Models framework. Everything runs on your Vision Pro. Nothing leaves your device.

• Command Assistant — describe what you want in plain English, get a shell command with risk assessment (safe / moderate / destructive)
• Error Explainer — automatically detects errors in terminal output and shows a floating card with diagnosis + suggested fix

Plain English in, a risk-rated shell command out — running entirely on-device.

Connect your entire Tailscale network. Enter your API key or OAuth credentials once, and glas.sh discovers every device on your tailnet. Tap a device, enter SSH credentials, and you're in. Mobile devices (iOS, iPadOS, Android) are automatically filtered out.

Server management with favorites, tags, search, and recent connections. Quick connect bar parses user@host:port on the fly. Host key verification with fingerprint display. Layout presets reopen saved groups of server sessions — open your production stack with one tap.

Connections: favorites, recents, tags, and one-tap Tailscale discovery in a glass sidebar.

• Local (-L) — bind a local port, tunnel through SSH to a remote target
• Remote (-R) — server listens on a remote port, forwards back through the tunnel
• Dynamic/SOCKS (-D) — full SOCKS5 proxy with IPv4, domain name, and IPv6 address support

Single-hop or multi-hop chains. Configure A → B → C with a reorderable hop list. Cycle detection prevents infinite loops. Backward compatible with single-hop configurations.

Full directory browsing with breadcrumb navigation. Tap files to select, batch download or delete, pick your destination folder first then stream with progress. File info sheet shows permissions, uid/gid, timestamps, and raw listing. Show/hide hidden files. Client-side filter for the current directory, or press Return to run find on the server via SSH for deep recursive search.

The SFTP browser opens right over your session — breadcrumbs, filtering, and batch transfers.

• True Secure Enclave signing — P-256 keys generated inside the hardware chip. The private key never exists in memory. Signing happens in silicon.
• User presence authentication before Secure Enclave key use
• Keychain storage with terminal-specific, purpose-namespaced credential accounts
• Host key trust with per-server fingerprint tracking
• RSA SHA-2 and Ed25519 imported-key support, hardware-bound Secure Enclave P-256 signing keys, and migration support for legacy device-wrapped exportable keys

• Immersive Focus Mode — dims the passthrough for distraction-free terminal work. Digital Crown controls depth.
• Spatial Widgets — recent-server widget (small + medium sizes) with tap-to-connect deep links via glassh:// URL scheme
• Notification Overlays — in-window banners for connection events. Auto-dismiss after 4 seconds, max 3 visible.
• Glass Material — choose from ultraThin, thin, regular, or thick material density. Per-session overrides.
• Color Tint — preset swatches + full color picker for window tinting

Asciicast v2 format (NDJSON), compatible with asciinema. Recording is output-only by default; input capture requires explicit consent for each recording and stays visibly disclosed while active. Recordings are protected on disk and stop at a 512 MiB safety limit.

Exponential backoff (1s → 2s → 4s → 8s → 16s, up to 5 attempts). Cancel button in the connection label ornament. Keepalive timer with failure-based timeout detection — no more false disconnects from idle sessions.

glas.sh uses one native Swift 6 application target, one @main, one product identity (sh.glas.app), and one shared glas.sh scheme across Apple Silicon Mac, iPhone, iPad, and Apple Vision Pro. Shared connection, credential, trust, session, terminal, workgroup, theme, and appearance state stays authoritative in the application core. Each platform composes that state with its native UI: AppKit/SwiftUI workspaces on Mac, adaptive navigation on iPad, compact navigation on iPhone, and spatial windows and ornaments on visionOS. Mac is native, not Mac Catalyst.

glas.sh/                          Shared application core and platform scenes
├── glas_shApp.swift               Sole @main and native scene composition
├── ConnectionLibrary.swift        Shared Library projection and filtering
├── ConnectionManagerView.swift    Native connection navigation and actions
├── Models.swift                   SSH sessions, connections, server config
├── SessionManager.swift           Authoritative session lifecycle
├── ServerManager.swift            Server CRUD + shared App Group defaults
├── KeychainManager.swift          GlasSecretStore integration boundary
├── TerminalWindowView.swift       Shared terminal scenes and controls
├── SessionRecorder.swift          Protected asciicast v2 recording
├── SFTPBrowserView.swift          Safe file browsing and transfer
├── PortForwardManager.swift       Local / Remote / Dynamic (SOCKS5) tunnels
└── AIAssistant.swift              On-device command and error assistance

Platforms/macOS/                 Native Mac implementation boundary
├── MacWorkspaceView.swift          Adaptive tabs, sidebars, and splits
├── MacWorkspaceController.swift    Window and workspace lifecycle
├── MacLocalTerminalPaneView.swift  Local PTY terminal
└── MacTerminalWindowPolicy.swift   AppKit window policy and materials

glasWidgets/                      WidgetKit extension
├── ServerHealthWidget.swift      Timeline provider + widget views
└── glasWidgets.swift             Widget bundle entry point

Packages/
├── RealityKitContent/             Cross-platform SwiftTerm host boundary
├── Citadel/                       Vendored SSH client library
└── swift-nio-ssh/                 Vendored NIO SSH compatibility layer

GlasSecretStore                  Pinned shared package for credentials and host trust

• Apple Silicon Mac with the Xcode Metal Toolchain installed
• Xcode 26.4 or newer with the SDK for the destination you are building
• Deployment floor: macOS 26, iOS/iPadOS 26, or visionOS 26
• A supported physical device for final Secure Enclave and on-device AI validation
• Apple Vision Pro hardware for final eye/hand interaction, spatial-window, transparency, accessibility, and performance validation

git clone https://github.com/msitarzewski/glas.sh.git
cd glas.sh
open glas.sh.xcodeproj

# Select the shared glas.sh scheme (not glasWidgets)
# Select My Mac, an iPhone/iPad simulator or device, or Apple Vision Pro
# Build and run (⌘R)

The same application scheme builds every supported destination; the former glas.sh Mac application target and scheme have been retired. The widget remains a separate, platform-filtered extension.

Command-line Release builds use the same shared scheme:

xcodebuild -project glas.sh.xcodeproj -scheme glas.sh -configuration Release -destination 'platform=macOS,arch=arm64' build
xcodebuild -project glas.sh.xcodeproj -scheme glas.sh -configuration Release -destination 'generic/platform=iOS' build
xcodebuild -project glas.sh.xcodeproj -scheme glas.sh -configuration Release -destination 'generic/platform=visionOS' build

A successful build proves compilation for that destination, not runtime or physical-device behavior. Release evidence records builds, test counts, simulator runtimes, physical-device checks, and distribution validation separately.

glas.sh — lightweight project site via GitHub Pages (docs/).

glas.sh is free, open source, and built by one person. If it's useful to you:

• Sponsor on GitHub — recurring or one-time
• Star the repo — helps with visibility
• File issues — bug reports and feature requests are welcome
• Contribute — PRs are open

• SSH Agent authentication is not offered in this release
• visionOS does not provide an API to spatialize short audio effects per-window — bell sound plays globally
• visionOS does not provide an API for custom passthrough blur — only system Materials
• Secure Enclave keys are device-bound and cannot be transferred to another device
• SecureEnclave.isAvailable returns false in the visionOS Simulator

MIT License. Copyright 2026 Michael Sitarzewski.

Built with care for Apple Vision Pro.
Built with Agency Agents.

Sponsor  ·  Website  ·  Issues