Add SSH remote project support with terminal-only launches

src/main/db.schema.ts

@@ -3,9 +3,9 @@ import { sqliteTable, text, integer, primaryKey } from "drizzle-orm/sqlite-core"
 export const projects = sqliteTable("projects", {
   id: text("id").primaryKey(),
   name: text("name").notNull(),
-  locationKind: text("location_kind").notNull(), // "windows" | "wsl" | "posix"
-  locationPath: text("location_path"), // for windows/posix
-  locationDistro: text("location_distro"), // for wsl
+  locationKind: text("location_kind").notNull(), // "windows" | "wsl" | "posix" | "ssh"
+  locationPath: text("location_path"), // for windows/posix/ssh
+  locationDistro: text("location_distro"), // for wsl distro / ssh host
   locationLinuxPath: text("location_linux_path"), // for wsl
   locationUncPath: text("location_unc_path"), // for wsl
   lastDraftConfig: text("last_draft_config"), // JSON

src/main/db.ts

@@ -303,8 +303,9 @@ export function closeDatabase() {
 function locationToRow(loc: ProjectLocation) {
   return {
     locationKind: loc.kind,
-    locationPath: loc.kind !== "wsl" ? loc.path : null,
-    locationDistro: loc.kind === "wsl" ? loc.distro : null,
+    locationPath:
+      loc.kind === "windows" || loc.kind === "posix" || loc.kind === "ssh" ? loc.path : null,
+    locationDistro: loc.kind === "wsl" ? loc.distro : loc.kind === "ssh" ? loc.host : null,
     locationLinuxPath: loc.kind === "wsl" ? loc.linuxPath : null,
     locationUncPath: loc.kind === "wsl" ? loc.uncPath : null,
   };
@@ -328,6 +329,9 @@ function rowToLocation(row: {
   if (row.locationKind === "posix") {
     return { kind: "posix", path: row.locationPath! };
   }
+  if (row.locationKind === "ssh") {
+    return { kind: "ssh", host: row.locationDistro!, path: row.locationPath! };
+  }
   return { kind: "windows", path: row.locationPath! };
 }
 

src/renderer/actions/agentLoginActions.ts

@@ -59,22 +59,22 @@ export function runAgentLoginCommand(input: {
   }
 
   const shellId = `login:${crypto.randomUUID()}`;
-  // On WSL the agent CLI can't reach the Windows browser on its own, so we
+  // In remote shells the agent CLI can't reach the Windows browser on its own, so we
   // suppress its opener (BROWSER=/bin/true) and watch stdout for auth URLs to
   // hand off via the Windows shell. Native macOS / Windows CLIs already open
   // their own browser, so a renderer-side watcher would just double-launch.
-  const suppressWslBrowser = project.location.kind === "wsl";
-  const interceptWslUrls = suppressWslBrowser && !isGeminiLoginCommand(input);
+  const suppressRemoteBrowser = project.location.kind === "wsl" || project.location.kind === "ssh";
+  const interceptRemoteUrls = suppressRemoteBrowser && !isGeminiLoginCommand(input);
   // Wipe the bash prompt + echoed script line that briefly appear before the
   // TUI takes over. `clear` (POSIX) / `Clear-Host` (PowerShell) gives the
   // overlay a clean canvas so the user only sees the agent's own UI.
   const loginCommand = buildTerminalCommand({
     command: input.command,
-    env: suppressWslBrowser ? { BROWSER: "/bin/true", ...(input.env ?? {}) } : input.env,
+    env: suppressRemoteBrowser ? { BROWSER: "/bin/true", ...(input.env ?? {}) } : input.env,
   });
   const command =
     project.location.kind === "windows" ? `Clear-Host; ${loginCommand}` : `clear; ${loginCommand}`;
-  const stopOpeningUrls = interceptWslUrls ? watchUrlsInNativeBrowser(shellId) : undefined;
+  const stopOpeningUrls = interceptRemoteUrls ? watchUrlsInNativeBrowser(shellId) : undefined;
   const completionToken = createCompletionToken();
   const script = appendCompletionSignal(command, project, completionToken);
 

src/renderer/actions/panelActions.ts

@@ -3,7 +3,7 @@ import { readBridge } from "@/renderer/bridge";
 import { useAppStore } from "@/renderer/state/appStore";
 import { useDevTerminalStore } from "@/renderer/state/devTerminalStore";
 import { useFileEditorStore } from "@/renderer/state/fileEditorStore";
-import { usePanelStore } from "@/renderer/state/panelStore";
+import { usePanelStore, type ProjectSettingsSectionId } from "@/renderer/state/panelStore";
 import { useSharedSettings } from "@/renderer/state/sharedSettingsStore";
 import { buildFileEditorContext, resolveWorktreeBranch } from "@/renderer/utils/gitHelpers";
 import { closeThreads } from "@/renderer/utils/shellUtils";
@@ -83,8 +83,11 @@ export function openUsagePanel(): void {
   panelStore.openUsagePanel();
 }
 
-export function openProjectSettings(projectId: string): void {
-  usePanelStore.getState().openProjectSettings(projectId);
+export function openProjectSettings(
+  projectId: string,
+  initialSection?: ProjectSettingsSectionId,
+): void {
+  usePanelStore.getState().openProjectSettings(projectId, initialSection);
 }
 
 /** Closes git/files side and right-panel content only. Does not hide the dev terminal (bottom or right). */

src/renderer/actions/projectActions.ts

@@ -34,9 +34,24 @@ export function setProjectDisabled(projectId: string, disabled: boolean): void {
   if (!project) return;
   if ((project.disabled ?? false) === disabled) return;
 
+  const projectThreadIds = disabled
+    ? store.threads.filter((t) => t.projectId === projectId).map((t) => t.id)
+    : [];
+
   store.setProjectDisabled(projectId, disabled);
 
   if (disabled) {
+    if (project.location.kind === "ssh" && projectThreadIds.length > 0) {
+      void Promise.allSettled(
+        projectThreadIds.map((threadId) => readBridge().closeThread({ threadId })),
+      ).then(() => {
+        const nextStore = useAppStore.getState();
+        for (const threadId of projectThreadIds) {
+          nextStore.markThreadExited(threadId);
+        }
+      });
+    }
+
     void readBridge()
       .gitUnwatchProject({ projectId })
       .catch(() => undefined);

src/renderer/app.test.tsx

@@ -13,8 +13,10 @@ const { bridge } = vi.hoisted(() => ({
     pickFolder: vi.fn<() => Promise<null>>().mockResolvedValue(null),
     listWslDistros: vi.fn<() => Promise<string[]>>().mockResolvedValue([]),
     getAgentStatuses: vi
-      .fn<() => Promise<{ windows: unknown[]; wsl: unknown[]; fromCache: boolean }>>()
-      .mockResolvedValue({ windows: [], wsl: [], fromCache: false }),
+      .fn<
+        () => Promise<{ windows: unknown[]; wsl: unknown[]; ssh: unknown[]; fromCache: boolean }>
+      >()
+      .mockResolvedValue({ windows: [], wsl: [], ssh: [], fromCache: false }),
     getThreadSnapshots: vi.fn<() => Promise<unknown[]>>().mockResolvedValue([]),
     getHomeScopeLocation: vi
       .fn<() => Promise<{ kind: "windows"; path: string }>>()

src/renderer/app.tsx

@@ -178,6 +178,18 @@ const unsubSupervisor = readBridge().onSupervisorEvent((event) => {
       store.setWslAgentStatuses(event.statuses);
     }
   }
+  if (event.type === "ssh-agent-statuses") {
+    console.log(`[renderer] event: ssh-agent-statuses (${event.statuses.length} agents)`);
+    const store = useAgentStatusesStore.getState();
+    if (store.inFirstLaunchDiscovery && store.discoveryScope?.kind === "ssh") {
+      const statuses = event.statuses;
+      setTimeout(() => {
+        useAgentStatusesStore.getState().setSshAgentStatuses(statuses);
+      }, 1000);
+    } else {
+      store.setSshAgentStatuses(event.statuses);
+    }
+  }
 });
 
 const unsubUpdate = readBridge().onUpdateStatus((status) => {

src/renderer/components/providers/conflictResolver.launch.test.ts

@@ -55,6 +55,15 @@ describe("readConflictResolverSettingsForProject", () => {
     });
   });
 
+  it("falls back to Windows settings for SSH projects when WSL conflict resolver is unset", () => {
+    expect(readConflictResolverSettingsForProject("ssh", settings)).toEqual({
+      provider: "cursor",
+      model: "composer-2.5",
+      effort: "",
+      presentationMode: "terminal",
+    });
+  });
+
   it("uses WSL settings when WSL conflict resolver is configured", () => {
     expect(
       readConflictResolverSettingsForProject("wsl", {
@@ -70,6 +79,22 @@ describe("readConflictResolverSettingsForProject", () => {
       presentationMode: "terminal",
     });
   });
+
+  it("uses WSL settings for SSH projects when WSL conflict resolver is configured", () => {
+    expect(
+      readConflictResolverSettingsForProject("ssh", {
+        ...settings,
+        wslConflictResolverProvider: "cursor",
+        wslConflictResolverModel: "composer-2.5-fast",
+        wslConflictResolverPresentationMode: "terminal",
+      }),
+    ).toEqual({
+      provider: "cursor",
+      model: "composer-2.5-fast",
+      effort: "",
+      presentationMode: "terminal",
+    });
+  });
 });
 
 describe("resolveConflictResolverLaunchConfig", () => {

src/renderer/components/providers/conflictResolver.ts

@@ -33,7 +33,7 @@ export function readConflictResolverSettingsForProject(
   locationKind: ProjectLocation["kind"],
   settings: ConflictResolverSettingsSource,
 ): ConflictResolverSettings {
-  if (locationKind !== "wsl") {
+  if (locationKind !== "wsl" && locationKind !== "ssh") {
     return {
       provider: settings.conflictResolverProvider,
       model: settings.conflictResolverModel,

src/renderer/components/thread/AgentDiscoveryScreen.tsx

@@ -14,9 +14,11 @@ function readyBadge(status: AgentStatus): { label: string; toneClass: string } |
   return { label: "Ready", toneClass: "text-success" };
 }
 
-function statusLine(scopedCount: number, installedCount: number, wslDistro: string | undefined) {
+function statusLine(scopedCount: number, installedCount: number, remoteKind: string | undefined) {
   if (scopedCount === 0) {
-    return wslDistro ? "Warming up WSL shell environment…" : "Warming up shell environment…";
+    return remoteKind
+      ? `Warming up ${remoteKind} shell environment…`
+      : "Warming up shell environment…";
   }
   if (installedCount === 0) return "No agents installed yet";
   if (installedCount === 1) return "1 agent ready";
@@ -62,6 +64,7 @@ function statusLabel(status: AgentStatus | undefined): { label: string; toneClas
 export function AgentDiscoveryScreen(props: {
   location?: ProjectLocation;
   onCancel?: () => void;
+  sshHosts?: string[];
   wslDistros?: string[];
 }) {
   // `discoveredAgents` is already scoped by `pushDiscoveredAgent` to the active
@@ -79,6 +82,7 @@ export function AgentDiscoveryScreen(props: {
   }
   const installedCount = discovered.reduce((n, s) => n + (s.installed ? 1 : 0), 0);
   const wslDistro = props.location?.kind === "wsl" ? props.location.distro : undefined;
+  const sshHost = props.location?.kind === "ssh" ? props.location.host : undefined;
   const scanTargets: ScanTarget[] =
     wslDistro !== undefined
       ? [
@@ -88,35 +92,55 @@ export function AgentDiscoveryScreen(props: {
             matches: (status) => status.envKind === "wsl" && status.envDistro === wslDistro,
           },
         ]
-      : props.wslDistros !== undefined
+      : sshHost !== undefined
         ? [
             {
-              key: "native",
-              label: "Windows",
-              matches: (status) => status.envKind !== "wsl",
+              key: `ssh:${sshHost}`,
+              label: `SSH: ${sshHost}`,
+              matches: (status) => status.envKind === "ssh" && status.envHost === sshHost,
             },
-            ...props.wslDistros.map((distro) => ({
-              key: `wsl:${distro}`,
-              label: `WSL: ${distro}`,
-              matches: (status: AgentStatus) =>
-                status.envKind === "wsl" && status.envDistro === distro,
-            })),
           ]
-        : discoveryScope?.kind === "all"
+        : props.wslDistros !== undefined || props.sshHosts !== undefined
           ? [
               {
                 key: "native",
                 label: "Windows",
-                matches: (status) => status.envKind !== "wsl",
+                matches: (status) => status.envKind !== "wsl" && status.envKind !== "ssh",
               },
-              ...discoveryScope.wslDistros.map((distro) => ({
+              ...(props.wslDistros ?? []).map((distro) => ({
                 key: `wsl:${distro}`,
                 label: `WSL: ${distro}`,
                 matches: (status: AgentStatus) =>
                   status.envKind === "wsl" && status.envDistro === distro,
               })),
+              ...(props.sshHosts ?? []).map((host) => ({
+                key: `ssh:${host}`,
+                label: `SSH: ${host}`,
+                matches: (status: AgentStatus) =>
+                  status.envKind === "ssh" && status.envHost === host,
+              })),
             ]
-          : [];
+          : discoveryScope?.kind === "all"
+            ? [
+                {
+                  key: "native",
+                  label: "Windows",
+                  matches: (status) => status.envKind !== "wsl" && status.envKind !== "ssh",
+                },
+                ...discoveryScope.wslDistros.map((distro) => ({
+                  key: `wsl:${distro}`,
+                  label: `WSL: ${distro}`,
+                  matches: (status: AgentStatus) =>
+                    status.envKind === "wsl" && status.envDistro === distro,
+                })),
+                ...(discoveryScope.sshHosts ?? []).map((host) => ({
+                  key: `ssh:${host}`,
+                  label: `SSH: ${host}`,
+                  matches: (status: AgentStatus) =>
+                    status.envKind === "ssh" && status.envHost === host,
+                })),
+              ]
+            : [];
   // Provider plugins self-register at module-load time; reading the registry
   // each render keeps this screen in sync as new agent kinds are added.
   const providers = getRegisteredProviders();
@@ -143,9 +167,11 @@ export function AgentDiscoveryScreen(props: {
         <p className="max-w-sm text-sm text-muted">
           {wslDistro
             ? `Scanning ${wslDistro} for installed CLIs. This usually takes a couple of seconds.`
-            : scanTargets.length > 1
-              ? "Scanning Windows and WSL for installed CLIs. This usually takes a couple of seconds."
-              : "Scanning your system for installed CLIs. This usually takes a couple of seconds."}
+            : sshHost
+              ? `Scanning ${sshHost} for installed CLIs. This usually takes a couple of seconds.`
+              : scanTargets.length > 1
+                ? "Scanning Windows and WSL for installed CLIs. This usually takes a couple of seconds."
+                : "Scanning your system for installed CLIs. This usually takes a couple of seconds."}
         </p>
         {scanTargets.length > 1 ? (
           <div className="flex flex-wrap items-center justify-center gap-1.5">
@@ -207,7 +233,11 @@ export function AgentDiscoveryScreen(props: {
       <div className="shrink-0 text-xs text-muted/70" aria-live="polite">
         {useMatrixLayout
           ? combinedStatusLine(discovered)
-          : statusLine(discovered.length, installedCount, wslDistro)}
+          : statusLine(
+              discovered.length,
+              installedCount,
+              wslDistro ? "WSL" : sshHost ? "SSH" : undefined,
+            )}
       </div>
 
       {props.onCancel ? (

src/renderer/components/thread/ChatPane/chatPathUtils.ts

@@ -39,6 +39,7 @@ function getProjectRoots(projectLocation: ProjectLocation): string[] {
       return [projectLocation.path];
     case "wsl":
       return [projectLocation.linuxPath, projectLocation.uncPath];
+    case "ssh":
     case "posix":
       return [projectLocation.path];
   }

src/renderer/components/thread/ProjectSwitchMenu.tsx

@@ -1,5 +1,5 @@
 import { startTransition } from "react";
-import { ChevronDown, FolderOpen, House, Monitor } from "lucide-react";
+import { ChevronDown, FolderOpen, House, Monitor, Server } from "lucide-react";
 import { Dropdown, Label } from "@heroui/react";
 import { useShallow } from "zustand/shallow";
 import type { Project } from "@/shared/contracts";
@@ -20,6 +20,9 @@ function LocationIcon(props: { kind: Project["location"]["kind"]; className?: st
   if (props.kind === "windows") {
     return <Monitor className={className} />;
   }
+  if (props.kind === "ssh") {
+    return <Server className={className} />;
+  }
   return <FolderOpen className={className} />;
 }
 

src/renderer/components/thread/ThreadAgentUpdateDock.tsx

@@ -43,9 +43,11 @@ export function ThreadAgentUpdateDock(props: {
   >(undefined);
   const [pending, setPending] = useState(false);
 
+  const isSshStatus = agentStatus.envKind === "ssh";
   const registryAgentId = acpGenericInstanceId(agentStatus.kind);
 
   useEffect(() => {
+    if (isSshStatus) return;
     if (registryAgentId) return;
     if (!agentStatus.installed || !agentStatus.version) return;
     let cancelled = false;
@@ -65,7 +67,7 @@ export function ThreadAgentUpdateDock(props: {
     return () => {
       cancelled = true;
     };
-  }, [agentStatus.kind, agentStatus.installed, agentStatus.version, registryAgentId]);
+  }, [agentStatus.kind, agentStatus.installed, agentStatus.version, isSshStatus, registryAgentId]);
 
   // Identity-gated read so a stale entry from a previous agent never matches
   // the current one (avoids one-frame flash on agent switch).
@@ -82,15 +84,19 @@ export function ThreadAgentUpdateDock(props: {
     installedVersion !== undefined &&
     isNewerVersion(resolvedLatest, installedVersion);
 
-  if (!isOutdated || !resolvedLatest || !installedVersion) {
+  if (isSshStatus || !isOutdated || !resolvedLatest || !installedVersion) {
     return null;
   }
 
   const scope = statusUpdateScope(agentStatus);
+  if (scope.envKind === "ssh") {
+    return null;
+  }
+  const updateEnvKind = scope.envKind;
   const previewCommand = resolveSharedUpdateCommand({
     update: agentStatus.update,
     executablePath: agentStatus.executablePath,
-    envKind: scope.envKind,
+    envKind: updateEnvKind,
   });
   const previewCommandLine = previewCommand ? formatUpdateCommandLine(previewCommand) : undefined;
 
@@ -103,7 +109,7 @@ export function ThreadAgentUpdateDock(props: {
     try {
       const result = await readBridge().updateAgentBinary({
         agentKind: agentStatus.kind,
-        envKind: scope.envKind,
+        envKind: updateEnvKind,
         ...(scope.wslDistro ? { wslDistro: scope.wslDistro } : {}),
       });
       if (result.ok) {