HearthGate 1.14 is live

Your Mac's remote toolbox now lives inside SSH.

HearthGate 1.14 adds Built-in Terminal Actions: press / on an empty SSH prompt and pick from a curated command palette for the Mac you are connected to. It also introduces Terminal + tunnel packages for full-access keys, so a trusted operator can open a shell while the secure screen tunnel is alive.

Built-in Terminal Actions

Open a live-filtering action picker from the SSH prompt, fill the blanks with Tab path completion, then review the finished command before you press Enter.

Terminal + tunnel packages

Full-access key holders can open an interactive shell and a Screen Sharing tunnel together. Close the shell and the tunnel closes with it.

Safe curated catalog

The default catalog focuses on useful Mac admin checks and helper tasks. Commands are suggested, not auto-run, and the default set avoids sudo and destructive actions.

Actions you can own

Edit the catalog from Configuration, carry custom actions inside encrypted .hgex exports, and keep catalog updates consent-based instead of silently rewritten.

SSH workflow

One terminal, one key, one governed path.

HearthGate now treats SSH as a first-class operator surface, not only as the transport under VNC. A full-access key can get practical terminal workflows while restricted VNC keys stay narrow by default.

No client app required

Works from any SSH client

Use macOS Terminal, Windows PowerShell, a Linux shell, or another standard SSH client. The action picker runs from the Mac side through the same governed SSH path.

No package sprawl

Pure Mac-side provisioning

Terminal Actions use a managed zsh workflow on the Mac. There is no client-side install and no requirement for Homebrew, fzf, or extra server packages.

Security-critical core

Supply-chain surface stays small

HearthGate is pure Swift. Its security-critical core and privileged helper contain zero third-party code. Sparkle is version-pinned, EdDSA-signed, and used only for updates.

Terminal examples

Where 1.14 saves the trip to a cheat sheet

The new palette is built for the small Mac admin tasks people repeat during remote support, homelab care, and development work.

Use case

Check the Mac from Windows PowerShell

Connect over SSH from Windows, press /, and choose common Mac checks without memorizing every command or installing another tool on the client.

Use case

Inspect files, disk, network, and sessions

Use curated actions for folders, search, disk space, processes, networking, system info, login history, and security-oriented session checks.

Use case

Give admins a full-access package

Create a deliberate full-access key and choose Terminal + tunnel when the operator needs both a shell and a screen-sharing path.

Use case

Keep normal screen keys narrow

Restricted VNC-only keys stay excluded from terminal package generation, so routine screen access does not accidentally become shell access.

Security notes

1.14 expands SSH workflows without weakening the default boundary.

This release adds useful terminal surfaces for trusted keys while preserving HearthGate’s default VNC-only posture for ordinary connection packages.

Learn about SILA, the codnamacs security lifecycle framework

Release notes at a glance

  • Pressing / on an empty SSH prompt opens the Built-in Terminal Actions picker.
  • Terminal Actions place the chosen command on the prompt for review. HearthGate does not auto-execute it.
  • The default catalog includes 65 curated actions across files, search, disk, processes, network, system info, sessions, and power workflows.
  • The default catalog avoids sudo and destructive commands.
  • Custom action catalogs can be edited from Configuration and travel inside .hgex exports.
  • Catalog provisioning and changes are visible in the audit trail.
  • Terminal + tunnel packages are available only to keys that are intentionally allowed beyond VNC-only mode.
  • Full-access key state, key expiry synchronization, session disconnect cleanup, hook timeouts, and audit log integrity were tightened in the same release.
  • The v1.14 test suite passes more than 1,000 automated tests.

HearthGate 1.14

HearthGate 1.14 turns SSH into a governed Mac admin surface, while VNC-only keys stay VNC-only.

Open HearthGate page