💻 LyShell

🔌 Your terminal, now AI's terminal too. LyShell is a Windows terminal with a built-in MCP server — letting Claude Code and other AI clients drive your SSH / Telnet / serial / local PTY sessions directly. Plus DeepSeek Harness workspaces (TUI + embedded Web UI), AI Agent launcher, plugin system, and Python scripting.

English | 简体中文

✨ Highlights · 🐋 DeepSeek Harness · 🔗 MCP · 🤖 AI Agents · 🧩 Plugins · 🚀 Quick Start · ❓ FAQ

✨ Highlights

📥 Install

Download the latest portable build from Releases — no installation needed, just download and run.

🚧 Currently Windows only — macOS and Linux builds are not yet available.

🔗 MCP Integration

This is what makes LyShell different. It serves as an MCP server, letting external AI clients like Claude Code control terminals via the MCP protocol — listing sessions, sending commands, reading output, transferring files, and managing connections.

📖 Configuration — see MCP Configuration. In most cases you don't configure anything by hand: launch an agent from the Agent Launcher and ask it to configure LyShell as its MCP server itself. Registration configs are emitted in JSON / CLI / TOML to fit different clients.

Tools

Security

• 🔑 Per-session authorization — each terminal gets its own scoped permission
• 🚪 Capability gates — enforced server-side on every endpoint
• 🛡️ Destructive-command check — scans for rm -rf, dd if=, fork bombs
• 🔒 Shared PTY locking — MCP vs human input never collide
• 📊 Audit panel — calendar + filter + pagination, accessible from the title bar

⚠️ Full-screen TUI apps (vim, htop, less) are not supported over MCP — ANSI stripping garbles alternate-screen sequences. Use the LyShell UI native terminal instead.

🤖 AI Agents

Agent-agnostic terminal — no lock-in to any AI tool. Launch any CLI agent and it runs in a regular terminal with full scrollback, split panes, and IME support.

First-class Harness agents — dsh, codex, and claude are first-class in the Harness panel: each gets its own left-rail tab, a dedicated workspace list, dependency detection, and per-workspace model & environment variables (model passed as --model, with OPENAI_API_KEY / ANTHROPIC_API_KEY defaults).

Custom agents: Any CLI tool can be registered — name, command, icon, working directory, env vars. Sessions are transient: close the tab, it's gone.

🐋 DeepSeek Harness

A first-class home for DeepSeek Harness workspaces. Manage every workspace in one dedicated panel, then launch each one as a terminal TUI or an embedded Web UI — inside LyShell, not a separate browser window. The two can even run side by side in split panes.

Dependency detection & install

Each Harness tab auto-detects its CLI dependencies on open — dsh + dsh-tui for DeepSeek Harness, codex / claude for the others — by scanning PATH. When something is missing, the panel shows which dependency is absent, its one-line install command, and the source-repo link — it never installs anything for you. A Re-detect button re-scans on demand, and PATH is read live from the registry, so a freshly installed CLI is picked up without restarting LyShell.

Environment tab: pre-configure, then switch

The panel splits into Workspaces and Environment tabs. In the Environment tab, pre-configure named variable sets — collections of KEY=VALUE (DEEPSEEK_API_KEY, DEEPSEEK_BASE_URL, DSH_HOME, …). At most one set is enabled at a time; click a set to switch to it, or click the always-on System environment slot to fall back to LyShell's own process environment.

Each workspace can bind to a specific set, or follow the enabled set — pick nothing and it inherits whichever set is currently enabled (or the system environment when none is). Enter secrets once, then switch between environments without touching each workspace.

Launch: TUI or Web UI

Every workspace opens two ways:

• Terminal TUI — dsh-tui runs as a standard terminal tab with full scrollback, split panes, and IME support.
• Embedded Web UI — spawned as dsh web --port 0; LyShell parses the real port from stdout and renders the app in an in-app <webview> tab. No browser, no manual port juggling.

TUI + Web UI, side by side

Drag the Web UI tab to a pane edge to split it into its own pane — the TUI and the embedded Web UI run in the same frame, side by side. Drag it back onto a pane's center to remount it as a regular tab.

Web UI acts like a terminal tab

• ✕ close — only ✕ tears the tab down and terminates the subprocess.
• Switch away — switching to another tab hides the Web UI but keeps the page state and the dsh web subprocess alive; switching back resumes instantly.

Security

• 🔒 Loopback-locked — navigation and popups are pinned to the workspace's loopback origin.
• ✅ Validated URL — the echoed URL is checked (loopback + explicit port, no embedded credentials) before the <webview> ever loads it.

🧩 Plugin System & Python Scripting

Plugins

Permission-gated host for Python (one-shot / persistent) and Node.js (persistent) plugins. Install from local directory, ZIP, or remote URL. Each plugin runs with its own scoped authorization — granular permissions (read / write / execute / file / session control) with path safety, destructive-command confirmation, and shared-PTY locking.

⚠️ Plugins activate on startup (onStartup) today. Event-based activation and declarative UI contributions are not wired up yet.

📦 Ready-to-run examples in examples/.

Python Engine

Embedded Python with LyShell API for terminal automation:

session = LyShell.get_current_session()
LyShell.execute("ls -la")
LyShell.send("hello\n")
LyShell.wait_for("prompt$")

Environment variables: LYSHELL_SESSION_ID · LYSHELL_SESSION_TYPE · LYSHELL_HOST · LYSHELL_PORT.

Python path auto-detected from system PATH, configurable in settings.

💡 For long-running or scheduled tasks, consider Node.js plugins via the Plugin System — they're a better fit.

🚀 Quick Start

First Connection

1. Click + at the top of the session list → SSH
2. Fill in host, port, username, password/private key
3. Click Connect — tab turns 🟢 green

💡 For network devices needing shell → enable, add those in Shell Enter Commands — LyShell sends them sequentially.

Quick Connect

Ctrl+Alt+F from any app → search → Enter to connect.

Multi-Server Monitoring

Click a session → Ctrl+Shift+V to split vertically → click another session. Layout auto-saves.

File Transfer

• Upload — drag from desktop to File Panel
• Download — double-click remote file or right-click → Download
• Progress — real-time speed + ETA, auto MD5 on completion
• History — file, size, path, MD5 recorded; supports re-download
• Security — independent SSH connection (never blocks terminal), SFTP or TCP-over-SSH tunnel; no plaintext fallback even when AllowTcpForwarding is disabled
• Download directory — default ~/Downloads/LyShell/, optional auto-create server subdirectory for archiving

Quick Commands

Right-click the quick commands bar → Edit Group → add commands like tail -f /var/log/syslog. Trigger with Ctrl+F1–F12. Up to 12 commands × 5 groups.

Session Management

• 📌 Pin — hover card → click 📌
• 📋 Clone session — double-click tab left half
• ⚡ Clone channel (no re-auth) — double-click tab right half (SSH only)
• 🔍 Search — type name/host/tag in search box

Terminal Tips

• Select text → auto-copy · Right-click → paste · Middle-click → search bar
• Ctrl+F → in-terminal search (regex, case-sensitive, cross-tab)
• Encoding issues → edit session, switch UTF-8 / GBK / GB2312
• Click cols × rows in status bar → clear screen
• Click buffer count → scroll to bottom; double-click → clear scrollback

🔌 Connection Types & Terminal

Terminal: GPU-accelerated rendering, full ANSI + 256 colors. Scrollback up to 100,000 lines. Split panes (horizontal/vertical), drag-to-split. Quick commands bar Ctrl+F1–F12. Tab status: 🟢 Connected · 🔴 Error · ⚪ Disconnected · 🔵 New output.

🎨 Themes

5 presets + custom. Instant switch, no restart.

Custom: pick a background and accent color, LyShell auto-builds a complete harmonious theme.

⌨️ Keyboard Shortcuts

⚙️ Configuration

JSON files in %APPDATA%\lyshell\:

sessions.json · preferences.json · quickCommands.json · agents.json · download-history.json · download-config.json · mcp-server.json

AES-256-CBC encrypted export/import for sessions and quick commands.

❓ FAQ

📄 License

LyShell is free to download and use, but the source code is not yet open. Reverse engineering and redistribution of the binary are not permitted without prior permission. See LICENSE.

© 2026 liangyou. All rights reserved.

GitHub · Issues · Releases · Changelog · Contributing