@lemoncat7/dsh-ssh 1.2.0 → 1.3.0

package/ARCHITECTURE.md

@@ -1,6 +1,6 @@
 # DSH SSH architecture
 
-This plugin is split into four boundaries. UI code never reaches the SSH transport directly, and server code never depends on the DSH client runtime.
+This plugin is split into four boundaries. UI code never reaches SSH or file transports directly, and server code never depends on the DSH client runtime.
 
 ## Runtime boundaries
 
@@ -12,10 +12,15 @@ This plugin is split into four boundaries. UI code never reaches the SSH transpo
 
 ### Server application
 
-- `src/api.ts` translates HTTP routes into explicit store, terminal, SFTP, forwarding, and credential operations.
+- `src/api.ts` translates HTTP routes into explicit store, terminal, file-transfer, forwarding, and credential operations.
 - `src/store.ts` owns persistent SSH configuration.
 - `src/session-access.ts` and `src/tools.ts` define the session authorization boundary used by AI tools.
-- `src/connector.ts`, `src/terminal.ts`, `src/sftp.ts`, and `src/forwards.ts` own long-lived resources and their cleanup.
+- `src/remote-files.ts` defines the protocol-neutral endpoint and remote filesystem contract.
+- `src/sftp-adapter.ts` and `src/ftp-adapter.ts` implement that contract without leaking protocol details upward.
+- `src/network-dialer.ts` owns routed TCP creation for FTP control and passive data connections.
+- `src/endpoint-session-manager.ts` owns sequential, idle-reaped browser pane sessions.
+- `src/file-transfer-manager.ts` owns bounded asynchronous jobs, recursive scans, stream backpressure, progress, cancellation, and cleanup.
+- `src/connector.ts`, `src/terminal.ts`, `src/sftp.ts`, and `src/forwards.ts` retain SSH-specific resources and cleanup.
 
 ### Browser features
 
@@ -23,6 +28,8 @@ This plugin is split into four boundaries. UI code never reaches the SSH transpo
 - `src/profile-editor.tsx` owns connection editing, validation, jump chains, and deletion safeguards.
 - `src/remote-workspace-tree.tsx` owns host mounting, fixed directories, and remote-session creation.
 - `src/sftp-client.tsx` owns directory browsing, upload, preview, and download.
+- `src/file-transfer-workspace.tsx` owns transfer task tabs, 2–4 file panes, cross-pane actions, job feedback, and file authorization UI.
+- `src/ftp-profile-editor.tsx` owns FTP/FTPS connection editing and validation.
 - `src/resizable-split.tsx` owns the terminal/SFTP split and persisted sizing.
 - `src/ui-components.tsx` provides shared dialog, field, segment, and empty-state behavior.
 
@@ -37,7 +44,11 @@ This plugin is split into four boundaries. UI code never reaches the SSH transpo
 | State | Owner | Persistence |
 | --- | --- | --- |
 | SSH profiles, proxies, credentials, forwards | server store | profile data + DSH credential service |
+| FTP/FTPS profiles | server store | profile data + DSH credential service |
 | Mounted hosts, permission, fixed directories | session access store | per DSH session |
+| Authorized file endpoints and file permission | session access store | per DSH session |
+| Browser file control sessions | endpoint session manager | process lifetime, 60-second idle reap |
+| File transfer jobs | file transfer manager | process lifetime |
 | Browser terminal process | terminal manager | process lifetime |
 | Active panel, selected host, open dialog | React feature component | browser lifetime |
 | Terminal/SFTP split width | `ResizableSplit` | browser local storage |
@@ -46,6 +57,10 @@ This plugin is split into four boundaries. UI code never reaches the SSH transpo
 
 - The plugin uses only public DSH slots and injected client services; it does not patch DSH source code.
 - A tool call must pass the session access boundary before reaching SSH resources.
+- SSH command permission and remote-file permission are independent; authorizing one never implies the other.
+- FTP control and passive data sockets use the same route policy. FTPS wraps both socket classes with verified TLS.
+- Remote-to-remote transfers use backpressured streams and never stage a complete file on local disk.
+- Browser browsing sessions and transfer job sessions are isolated so a long transfer cannot block pane navigation.
 - Secrets are write-only from the browser and are never returned by profile APIs.
 - Terminal input is sequenced and terminal resources are explicitly disposed on close or unmount.
 - Visual motion uses `transform` and `opacity`, remains interruptible, and is disabled by `prefers-reduced-motion`.

package/README.md

@@ -1,6 +1,6 @@
 # dsh-ssh
 
-面向 DeepSeek Harness 的 SSH 会话管理插件。它把连接管理、浏览器终端、代理、端口转发和 AI 会话授权放在同一个 DSH 工作区里。
+面向 DeepSeek Harness 的远端工作插件。它把 SSH 会话管理、浏览器终端、FTP/FTPS/SFTP 文件传输、代理、端口转发和 AI 会话授权放在同一个 DSH 工作区里。
 
 浏览器 UI、服务端运行时、会话授权边界和终端生命周期的职责说明见 [ARCHITECTURE.md](./ARCHITECTURE.md)。
 
@@ -33,6 +33,9 @@ dsh plugin --profile web add @lemoncat7/dsh-ssh@latest
 - 当前会话右侧栏支持多个 AI 终端切换与键盘输入
 - AI 调用 `ssh_terminal_open` 创建终端时，当前会话会自动展开 SSH 右栏并切换到新终端
 - SFTP 文件浏览、文本/图片/PDF 预览和流式下载；支持拖放或选择多个文件顺序上传，并可从内嵌预览打开独立放大窗口
+- 独立「文件传输」工作区，支持 2～4 个 FTP、FTPS 或 SFTP 窗格与多个任务页
+- FTP、显式 FTPS、隐式 FTPS；FTP 控制连接与每条被动数据连接统一支持 HTTP CONNECT 和 SOCKS5 代理
+- FTP/FTPS/SFTP 跨协议流式互传，不把完整文件暂存到 DSH 磁盘；支持多文件、递归目录、冲突策略、进度、取消和失败状态
 - 有序多主机跳板链，兼容已有单跳板配置
 - 独立密钥库集中保存常用用户名、密码和私钥，SSH 连接仅保存引用
 - 独立代理库集中保存 HTTP CONNECT 与 SOCKS5 代理，多台主机可复用同一连接路径
@@ -49,9 +52,11 @@ dsh plugin --profile web add @lemoncat7/dsh-ssh@latest
 
 管理工作区分成两部分：
 
-1. 左侧远端树：点击主机行只决定当前会话能否访问，展开箭头独立控制固定目录的展开与收起。点击目录整行即可固定，再次点击已固定目录即可取消；每台主机最多固定一个目录。目录后的新增按钮直接创建并打开新会话。底部统一设置「仅命令 / 终端控制」与执行前确认。
+1. 左侧远端树：点击主机只负责选中并展开固定目录，同时自动收起其他主机；右侧独立的「挂载 / 卸载」按钮决定当前 DSH 会话能否访问该主机，因此浏览终端不会意外改变 AI 权限。点击目录整行即可固定，再次点击已固定目录即可取消；每台主机最多固定一个目录。目录后的新增按钮直接创建并打开新会话。底部统一设置「仅命令 / 终端控制」与执行前确认。
 2. 右侧工作区：默认把终端与当前主机或项目目录的 SFTP 左右并排展示，不需要在两个页面之间切换；SFTP 会等终端首次连接成功后再读取远端目录。拖动两栏之间的分隔线可以调整 SFTP 宽度，双击恢复默认，比例会保存在当前浏览器。另可进入端口转发、密钥库、代理库和设置。SFTP 支持浏览、预览、下载，以及拖放或文件选择器触发的多文件顺序上传；同名文件逐项确认跳过或覆盖，单文件上限为 512 MB。内嵌文件预览可通过下载旁的放大按钮打开独立预览窗口。
 
+「文件传输」是独立工作区页签。每个任务页默认双窗格，可切换为 2～4 栏。每个窗格先显示统一的 SFTP、FTP、FTPS 连接列表，单击连接后才读取远端目录，并可随时返回连接列表。文件既可以拖到另一窗格，也可以选中后使用“传送到下一栏”，因此键盘和触控环境不依赖拖拽。浏览窗格复用自己的协议会话，传输任务使用独立连接，避免大文件占用目录浏览的控制通道；任务完成、失败或取消后只刷新对应目标目录，及时呈现完整或部分写入结果。选中的远端文件或目录可以在插件内确认后删除，目录采用有深度和数量上限的递归删除，且不会跟随符号链接。关闭页面不会中断服务端任务；DSH 进程停止时会统一取消并释放两端连接。
+
 工作区使用插件内职责单一的自适应壳布局。宽容器使用双栏；窄于 820px 时远端树切换为左侧抽屉，窄于 520px 时进一步压缩 SFTP 次要信息和操作密度。响应式判断使用容器查询，因此手机、桌面分屏和 DSH 窄面板采用同一套行为。
 
 SSH 插件不会向聊天标题栏添加按钮。右侧栏统一从左侧「远端」区域打开；当前会话尚未授权主机时会显示引导。仅执行命令权限显示 SFTP 目录；终端控制权限同时显示 SFTP 目录和 AI 终端。多个终端通过紧凑标签切换，运行中的终端支持键盘输入。进入 SFTP 子目录时，该目录会同步成为后续 `ssh_exec` 与新终端的工作目录。
@@ -73,8 +78,13 @@ SSH 插件不会向聊天标题栏添加按钮。右侧栏统一从左侧「远
 | `ssh_forward_list` | 列出已授权连接的转发规则 |
 | `ssh_forward_start` | 启动已有转发规则 |
 | `ssh_forward_stop` | 停止已有转发规则 |
+| `file_endpoint_list` | 只列出当前 DSH 会话明确授权的 FTP/FTPS/SFTP 端点 |
+| `file_directory_list` | 浏览已授权端点中的远端目录 |
+| `file_transfer_start` | 启动端点之间的异步流式文件或目录传输 |
+| `file_transfer_status` | 查询当前会话拥有的传输任务进度 |
+| `file_transfer_cancel` | 取消当前会话拥有的传输任务 |
 
-工具始终从 `exec.agent.session.id` 解析会话授权关系。模型不能通过参数绕过授权，也不能枚举其他 DSH 会话的主机或终端。
+工具始终从 `exec.agent.session.id` 解析会话授权关系。SSH 命令权限与文件权限独立：文件端点必须单独授权，并选择“仅浏览”或“允许跨端传输”。模型不能通过参数绕过授权，也不能枚举其他 DSH 会话的主机、文件端点、终端或传输任务。覆盖目标文件不会被默认推断；`file_transfer_start` 默认使用 `fail` 冲突策略。
 
 「执行前确认」依赖 DSH 当前会话的审批策略：Workspace Write 的 Ask 策略会显示确认；Full Access 使用 Never 策略，不显示确认，并会直接拒绝被 SSH 插件标记为需要审批的操作。若希望在 Full Access 下直接执行 SSH，请关闭该开关。
 
@@ -86,11 +96,14 @@ SSH 插件不会向聊天标题栏添加按钮。右侧栏统一从左侧「远
 - 私钥
 - 私钥口令
 - 代理密码
+- FTP 密码
 
 密钥库条目使用独立的 `dsh-ssh-vault/<credential-id>` Grant Record。SSH Profile 只保存 `credentialId`，不会复制或读回密钥库中的明文。仍被连接引用的密钥库条目不能删除。
 
 代理库条目保存在状态文件中，代理密码使用独立的 `dsh-ssh-proxy/<proxy-id>` Grant Record。SSH Profile 选择常用代理后只保存 `proxyId`；仍被主机引用的代理不能删除。原有内联 HTTP/SOCKS5 配置继续兼容。
 
+FTP Profile 与 SSH Profile 分开保存。FTP Profile 自有密码使用 `dsh-ftp/<profile-id>` Grant Record，也可以引用已有的密码型密钥库条目。普通 FTP 会在界面中明确标记为未加密；FTPS 默认校验证书。FTP 仅使用被动模式，且忽略 PASV 响应中用于改变目标主机的地址，避免 FTP Bounce/SSRF。
+
 管理 API 和 Web UI只返回是否配置以及字段名，不返回任何凭据值。默认拒绝非回环地址的端口监听；若确实需要监听 `0.0.0.0`，必须在「远端 → 设置」中显式开启。
 
 首次连接会拒绝未知主机密钥并展示 SHA-256 指纹。用户确认后才把指纹写入 Profile，后续连接严格比对。

package/lib/api.d.ts

@@ -5,6 +5,10 @@ import { ForwardManager } from './forwards.js';
 import { SshStore } from './store.js';
 import { AiTerminalManager, BrowserTerminalManager } from './terminal.js';
 import { ActivityEventBus } from './activity-events.js';
+import { NetworkDialer } from './network-dialer.js';
+import { RemoteFileSystems } from './remote-file-systems.js';
+import { FileTransferManager } from './file-transfer-manager.js';
+import { EndpointSessionManager } from './endpoint-session-manager.js';
 export interface WebServerLike {
     register(route: {
         kind: 'prefix';
@@ -20,6 +24,10 @@ export interface SshApiRuntime {
     terminals: BrowserTerminalManager;
     aiTerminals: AiTerminalManager;
     activityEvents: ActivityEventBus;
+    dialer: NetworkDialer;
+    files: RemoteFileSystems;
+    transfers: FileTransferManager;
+    fileSessions: EndpointSessionManager;
     sessionCwd(sessionId: string): string | undefined;
 }
 export declare function registerSshApi(webServer: WebServerLike, prefix: string, runtime: SshApiRuntime): () => void;

package/lib/api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAEhE,OAAO,EAAwB,YAAY,EAAE,MAAM,gBAAgB,CAAA;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAKrD,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAErC,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAA;AAGzE,OAAO,EAAE,gBAAgB,EAAwB,MAAM,sBAAsB,CAAA;AAM7E,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE;QACd,IAAI,EAAE,QAAQ,CAAA;QACd,IAAI,EAAE,MAAM,CAAA;QACZ,OAAO,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;KACzE,GAAG,MAAM,IAAI,CAAA;CACf;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,QAAQ,CAAA;IACf,WAAW,EAAE,kBAAkB,CAAA;IAC/B,SAAS,EAAE,YAAY,CAAA;IACvB,QAAQ,EAAE,cAAc,CAAA;IACxB,SAAS,EAAE,sBAAsB,CAAA;IACjC,WAAW,EAAE,iBAAiB,CAAA;IAC9B,cAAc,EAAE,gBAAgB,CAAA;IAChC,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;CAClD;AAED,wBAAgB,cAAc,CAAC,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,MAAM,IAAI,CAa3G"}
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAEhE,OAAO,EAAwB,YAAY,EAAE,MAAM,gBAAgB,CAAA;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAKrD,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAErC,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAA;AAGzE,OAAO,EAAE,gBAAgB,EAAwB,MAAM,sBAAsB,CAAA;AAG7E,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAC5D,OAAO,EAAE,mBAAmB,EAA+B,MAAM,4BAA4B,CAAA;AAC7F,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAA;AAKtE,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE;QACd,IAAI,EAAE,QAAQ,CAAA;QACd,IAAI,EAAE,MAAM,CAAA;QACZ,OAAO,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;KACzE,GAAG,MAAM,IAAI,CAAA;CACf;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,QAAQ,CAAA;IACf,WAAW,EAAE,kBAAkB,CAAA;IAC/B,SAAS,EAAE,YAAY,CAAA;IACvB,QAAQ,EAAE,cAAc,CAAA;IACxB,SAAS,EAAE,sBAAsB,CAAA;IACjC,WAAW,EAAE,iBAAiB,CAAA;IAC9B,cAAc,EAAE,gBAAgB,CAAA;IAChC,MAAM,EAAE,aAAa,CAAA;IACrB,KAAK,EAAE,iBAAiB,CAAA;IACxB,SAAS,EAAE,mBAAmB,CAAA;IAC9B,YAAY,EAAE,sBAAsB,CAAA;IACpC,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;CAClD;AAED,wBAAgB,cAAc,CAAC,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,MAAM,IAAI,CAa3G"}

package/lib/api.js

@@ -1,12 +1,13 @@
 import { randomBytes } from 'node:crypto';
 import { pipeline } from 'node:stream/promises';
 import { HostKeyRequiredError } from './connector.js';
-import { normalizeCredentialEntryDraft, normalizeForwardDraft, normalizeProfileDraft, normalizeProxyEntryDraft, normalizeRemoteProjectDraft, normalizeSecrets, } from './domain.js';
+import { normalizeCredentialEntryDraft, normalizeForwardDraft, normalizeFtpProfileDraft, normalizeProfileDraft, normalizeProxyEntryDraft, normalizeRemoteProjectDraft, normalizeSecrets, } from './domain.js';
 import { setSessionDirectory } from './directory.js';
 import { streamTerminalOutput } from './terminal-stream.js';
 import { listSftpDirectory, openSftpFile, readSftpFilePreview, uploadSftpFile } from './sftp.js';
 import { streamActivityEvents } from './activity-events.js';
 import { listLocalWorkspace, openLocalWorkspaceFile, readLocalWorkspacePreview } from './local-workspace.js';
+import { connectFtpProfile } from './ftp-adapter.js';
 const MAX_BODY_BYTES = 1_048_576;
 const MAX_SFTP_UPLOAD_BYTES = 512 * 1024 * 1024;
 export function registerSshApi(webServer, prefix, runtime) {
@@ -30,7 +31,138 @@ async function dispatch(req, res, prefix, runtime) {
     const segments = relative ? relative.split('/').map(decodeURIComponent) : [];
     const method = req.method ?? 'GET';
     if (method === 'GET' && segments[0] === 'health')
-        return sendJson(res, 200, { ok: true, service: 'dsh-ssh', schemaVersion: 4 });
+        return sendJson(res, 200, { ok: true, service: 'dsh-ssh', schemaVersion: 5 });
+    if (segments[0] === 'file-transfer') {
+        if (method === 'GET' && segments[1] === 'endpoints' && segments.length === 2)
+            return sendJson(res, 200, runtime.files.endpoints());
+        if (method === 'GET' && segments[1] === 'directory' && segments.length === 2) {
+            const endpointId = requireText(url.searchParams.get('endpointId'), 'endpointId', 110);
+            const paneId = requireText(url.searchParams.get('paneId'), 'paneId', 100);
+            return sendJson(res, 200, await runtime.fileSessions.run(paneId, endpointId, session => session.list(url.searchParams.get('path') ?? session.endpoint.initialPath)));
+        }
+        if (method === 'POST' && segments[1] === 'delete' && segments.length === 2) {
+            requireMutationHeader(req);
+            const request = parseFileDeleteRequest(await readObject(req));
+            await runtime.fileSessions.run(request.paneId, request.endpointId, async (session) => {
+                const directory = await session.list(request.directory);
+                const available = new Set(directory.entries.map(entry => entry.path));
+                for (const path of request.paths)
+                    if (!available.has(path))
+                        throw httpError(404, `remote path ${path} is not a direct child of ${directory.path}`);
+                for (const path of request.paths)
+                    await session.remove(path, true);
+            });
+            return sendJson(res, 204, undefined);
+        }
+        if (segments[1] === 'jobs') {
+            if (method === 'GET' && segments.length === 2)
+                return sendJson(res, 200, runtime.transfers.list());
+            if (method === 'POST' && segments.length === 2) {
+                requireMutationHeader(req);
+                const body = await readObject(req);
+                return sendJson(res, 202, runtime.transfers.start('ui', parseTransferRequest(body)));
+            }
+            const jobId = segments[2];
+            if (jobId !== undefined && method === 'GET' && segments.length === 3)
+                return sendJson(res, 200, runtime.transfers.get(jobId));
+            if (jobId !== undefined && method === 'DELETE' && segments.length === 3) {
+                requireMutationHeader(req);
+                runtime.transfers.cancel(jobId);
+                return sendJson(res, 204, undefined);
+            }
+        }
+    }
+    if (segments[0] === 'ftp-profiles') {
+        if (method === 'GET' && segments.length === 1)
+            return sendJson(res, 200, await ftpProfileViews(runtime));
+        if (method === 'POST' && segments[1] === 'test-draft' && segments.length === 2) {
+            requireMutationHeader(req);
+            const body = await readObject(req);
+            const draft = normalizeFtpProfileDraft(body.profile);
+            const id = body.profileId === undefined ? createId('ftp-preview') : requiredFtpProfile(runtime.store, requireText(body.profileId, 'profileId', 100)).id;
+            const previous = body.profileId === undefined ? {} : await runtime.credentials.readFtp(id);
+            const secrets = { ...previous, ...normalizeSecrets(body.secrets) };
+            if (!secrets.password && draft.credentialId === undefined)
+                throw httpError(400, 'FTP password is required');
+            const credentialEntry = draft.credentialId === undefined ? undefined : requiredPasswordCredential(runtime.store, draft.credentialId);
+            const password = credentialEntry === undefined ? secrets.password : (await runtime.credentials.readEntry(credentialEntry.id)).password;
+            if (!password)
+                throw httpError(400, 'FTP password credential is not configured');
+            const now = Date.now();
+            const profile = { ...draft, id, username: credentialEntry?.username ?? draft.username, port: draft.port ?? defaultFtpPort(draft.protocol), proxy: draft.proxy ?? { type: 'none' }, initialPath: draft.initialPath ?? '/', connectTimeoutMs: draft.connectTimeoutMs ?? 15_000, createdAt: now, updatedAt: now };
+            const session = await connectFtpProfile(profile, password, runtime.dialer);
+            try {
+                await session.list(profile.initialPath);
+                return sendJson(res, 200, { ok: true });
+            }
+            finally {
+                session.close();
+            }
+        }
+        if (method === 'POST' && segments.length === 1) {
+            requireMutationHeader(req);
+            const body = await readObject(req);
+            const draft = normalizeFtpProfileDraft(body.profile);
+            if (draft.credentialId !== undefined)
+                requiredPasswordCredential(runtime.store, draft.credentialId);
+            const secrets = normalizeSecrets(body.secrets);
+            if (draft.credentialId === undefined && !secrets.password)
+                throw httpError(400, 'FTP password is required');
+            const now = Date.now();
+            const profile = { ...draft, id: createId('ftp'), port: draft.port ?? defaultFtpPort(draft.protocol), proxy: draft.proxy ?? { type: 'none' }, initialPath: draft.initialPath ?? '/', connectTimeoutMs: draft.connectTimeoutMs ?? 15_000, createdAt: now, updatedAt: now };
+            if (profile.credentialId === undefined)
+                await runtime.credentials.replaceFtp(profile.id, { password: secrets.password });
+            try {
+                await runtime.store.update(state => { state.ftpProfiles.push(profile); });
+            }
+            catch (error) {
+                if (profile.credentialId === undefined)
+                    await runtime.credentials.deleteFtp(profile.id).catch(() => { });
+                throw error;
+            }
+            return sendJson(res, 201, await ftpProfileView(runtime, profile));
+        }
+        const id = segments[1];
+        if (id !== undefined && method === 'PUT' && segments.length === 2) {
+            requireMutationHeader(req);
+            const previous = requiredFtpProfile(runtime.store, id);
+            const body = await readObject(req);
+            const draft = normalizeFtpProfileDraft(body.profile);
+            if (draft.credentialId !== undefined)
+                requiredPasswordCredential(runtime.store, draft.credentialId);
+            const secrets = normalizeSecrets(body.secrets);
+            const next = { ...previous, ...draft, id, port: draft.port ?? defaultFtpPort(draft.protocol), proxy: draft.proxy ?? { type: 'none' }, initialPath: draft.initialPath ?? '/', connectTimeoutMs: draft.connectTimeoutMs ?? 15_000, createdAt: previous.createdAt, updatedAt: Date.now() };
+            if (draft.group === undefined)
+                delete next.group;
+            if (draft.tlsServerName === undefined)
+                delete next.tlsServerName;
+            const oldSecrets = await runtime.credentials.readFtp(id);
+            if (next.credentialId === undefined && !secrets.password && !oldSecrets.password)
+                throw httpError(400, 'FTP password is required when switching to connection-specific credentials');
+            if (next.credentialId === undefined && secrets.password)
+                await runtime.credentials.writeFtp(id, { password: secrets.password });
+            try {
+                await runtime.store.update(state => { state.ftpProfiles = state.ftpProfiles.map(profile => profile.id === id ? next : profile); });
+            }
+            catch (error) {
+                await runtime.credentials.replaceFtp(id, oldSecrets).catch(() => { });
+                throw error;
+            }
+            if (next.credentialId !== undefined && previous.credentialId === undefined)
+                await runtime.credentials.deleteFtp(id).catch(() => { });
+            return sendJson(res, 200, await ftpProfileView(runtime, next));
+        }
+        if (id !== undefined && method === 'DELETE' && segments.length === 2) {
+            requireMutationHeader(req);
+            requiredFtpProfile(runtime.store, id);
+            await runtime.store.update(state => {
+                state.ftpProfiles = state.ftpProfiles.filter(profile => profile.id !== id);
+                state.injections = state.injections.map(injection => ({ ...injection, fileEndpointIds: injection.fileEndpointIds.filter(endpointId => endpointId !== `ftp:${id}`) }));
+            });
+            await runtime.credentials.deleteFtp(id);
+            return sendJson(res, 204, undefined);
+        }
+    }
     if (segments[0] === 'vault') {
         if (method === 'GET' && segments.length === 1)
             return sendJson(res, 200, await credentialEntryViews(runtime));
@@ -76,9 +208,9 @@ async function dispatch(req, res, prefix, runtime) {
         if (id !== undefined && method === 'DELETE' && segments.length === 2) {
             requireMutationHeader(req);
             requiredCredentialEntry(runtime.store, id);
-            const references = runtime.store.profiles().filter(profile => profile.credentialId === id);
-            if (references.length > 0)
-                throw httpError(409, `credential entry is used by ${references.length} SSH profile(s)`);
+            const references = runtime.store.profiles().filter(profile => profile.credentialId === id).length + runtime.store.ftpProfiles().filter(profile => profile.credentialId === id).length;
+            if (references > 0)
+                throw httpError(409, `credential entry is used by ${references} connection(s)`);
             await runtime.store.update(state => { state.credentialEntries = state.credentialEntries.filter(entry => entry.id !== id); });
             await runtime.credentials.deleteEntry(id);
             return sendJson(res, 204, undefined);
@@ -127,9 +259,9 @@ async function dispatch(req, res, prefix, runtime) {
         if (id !== undefined && method === 'DELETE' && segments.length === 2) {
             requireMutationHeader(req);
             requiredProxyEntry(runtime.store, id);
-            const references = runtime.store.profiles().filter(profile => profile.proxy.type === 'saved' && profile.proxy.proxyId === id);
-            if (references.length > 0)
-                throw httpError(409, `proxy entry is used by ${references.length} SSH profile(s)`);
+            const references = runtime.store.profiles().filter(profile => profile.proxy.type === 'saved' && profile.proxy.proxyId === id).length + runtime.store.ftpProfiles().filter(profile => profile.proxy.type === 'saved' && profile.proxy.proxyId === id).length;
+            if (references > 0)
+                throw httpError(409, `proxy entry is used by ${references} connection(s)`);
             await runtime.store.update(state => { state.proxyEntries = state.proxyEntries.filter(entry => entry.id !== id); });
             await runtime.credentials.deleteProxyEntry(id);
             return sendJson(res, 204, undefined);
@@ -284,7 +416,7 @@ async function dispatch(req, res, prefix, runtime) {
                 state.injections = state.injections.map(item => {
                     const { [id]: _removed, ...workingDirectories } = item.workingDirectories;
                     const { [id]: _removedProject, ...workingProjectIds } = item.workingProjectIds;
-                    return { ...item, profileIds: item.profileIds.filter(profileId => profileId !== id), workingDirectories, workingProjectIds };
+                    return { ...item, profileIds: item.profileIds.filter(profileId => profileId !== id), fileEndpointIds: (item.fileEndpointIds ?? []).filter(endpointId => endpointId !== `sftp:${id}`), workingDirectories, workingProjectIds };
                 });
             });
             await runtime.credentials.delete(id);
@@ -374,14 +506,21 @@ async function dispatch(req, res, prefix, runtime) {
         if (sessionId !== undefined && method === 'PUT' && segments.length === 2) {
             requireMutationHeader(req);
             const body = await readObject(req);
+            const previous = runtime.store.injection(sessionId);
             const profileIds = parseProfileIds(body.profileIds, runtime.store);
+            const fileEndpointIds = body.fileEndpointIds === undefined ? previous?.fileEndpointIds ?? [] : parseFileEndpointIds(body.fileEndpointIds, runtime.files);
+            const filePermission = body.filePermission === undefined ? previous?.filePermission ?? 'browse' : body.filePermission === 'browse' ? 'browse' : body.filePermission === 'transfer' ? 'transfer' : undefined;
+            if (filePermission === undefined)
+                throw httpError(400, 'filePermission must be browse or transfer');
             const permission = body.permission === 'exec' ? 'exec' : body.permission === 'terminal' ? 'terminal' : undefined;
             if (permission === undefined)
                 throw httpError(400, 'permission must be exec or terminal');
-            const previous = runtime.store.injection(sessionId);
             const workingDirectories = parseWorkingDirectories(body.workingDirectories, profileIds);
             const workingProjectIds = parseWorkingProjectIds(body.workingProjectIds, profileIds, runtime.store);
-            const injection = { sessionId, profileIds, permission, requireCommandApproval: body.requireCommandApproval !== false, workingDirectories, workingProjectIds, updatedAt: Date.now() };
+            const injection = {
+                sessionId, profileIds, fileEndpointIds, filePermission, requireFileApproval: body.requireFileApproval === undefined ? previous?.requireFileApproval ?? true : body.requireFileApproval !== false,
+                permission, requireCommandApproval: body.requireCommandApproval !== false, workingDirectories, workingProjectIds, updatedAt: Date.now(),
+            };
             await runtime.store.update(state => { state.injections = [...state.injections.filter(item => item.sessionId !== sessionId), injection]; });
             const revoked = previous?.profileIds.filter(profileId => !profileIds.includes(profileId)) ?? [];
             if (permission !== 'terminal')
@@ -606,14 +745,24 @@ async function credentialEntryViews(runtime) {
 async function credentialEntryView(runtime, entry) {
     const credential = await runtime.credentials.describeEntry(entry.id);
     const requiredField = entry.authType === 'password' ? 'password' : 'privateKey';
-    return { ...entry, credential: { ...credential, configured: credential.fields.includes(requiredField) }, references: runtime.store.profiles().filter(profile => profile.credentialId === entry.id).length };
+    return { ...entry, credential: { ...credential, configured: credential.fields.includes(requiredField) }, references: runtime.store.profiles().filter(profile => profile.credentialId === entry.id).length + runtime.store.ftpProfiles().filter(profile => profile.credentialId === entry.id).length };
 }
 async function proxyEntryViews(runtime) {
     return Promise.all(runtime.store.proxyEntries().map(entry => proxyEntryView(runtime, entry)));
 }
 async function proxyEntryView(runtime, entry) {
     const credential = await runtime.credentials.describeProxyEntry(entry.id);
-    return { ...entry, credential, references: runtime.store.profiles().filter(profile => profile.proxy.type === 'saved' && profile.proxy.proxyId === entry.id).length };
+    return { ...entry, credential, references: runtime.store.profiles().filter(profile => profile.proxy.type === 'saved' && profile.proxy.proxyId === entry.id).length + runtime.store.ftpProfiles().filter(profile => profile.proxy.type === 'saved' && profile.proxy.proxyId === entry.id).length };
+}
+async function ftpProfileViews(runtime) { return Promise.all(runtime.store.ftpProfiles().map(profile => ftpProfileView(runtime, profile))); }
+async function ftpProfileView(runtime, profile) {
+    if (profile.credentialId !== undefined) {
+        const entry = requiredPasswordCredential(runtime.store, profile.credentialId);
+        const credential = await runtime.credentials.describeEntry(entry.id);
+        return { ...profile, username: entry.username, credential: { ...credential, configured: credential.fields.includes('password'), source: 'vault', entryId: entry.id, entryName: entry.name } };
+    }
+    const credential = await runtime.credentials.describeFtp(profile.id);
+    return { ...profile, credential: { ...credential, configured: credential.fields.includes('password'), source: 'profile' } };
 }
 function requiredProfile(store, id) {
     const profile = store.profile(id);
@@ -621,6 +770,18 @@ function requiredProfile(store, id) {
         throw httpError(404, 'SSH profile was not found');
     return profile;
 }
+function requiredFtpProfile(store, id) {
+    const profile = store.ftpProfile(id);
+    if (profile === undefined)
+        throw httpError(404, 'FTP profile was not found');
+    return profile;
+}
+function requiredPasswordCredential(store, id) {
+    const entry = requiredCredentialEntry(store, id);
+    if (entry.authType !== 'password')
+        throw httpError(400, 'FTP connections require a password credential');
+    return entry;
+}
 function requiredRemoteProject(store, id, profileId) {
     const project = store.remoteProject(id);
     if (project === undefined || project.profileId !== profileId)
@@ -703,6 +864,50 @@ function parseWorkingProjectIds(value, profileIds, store) {
     }
     return result;
 }
+function parseFileEndpointIds(value, files) {
+    if (value === undefined)
+        return [];
+    if (!Array.isArray(value) || value.length > 100)
+        throw httpError(400, 'fileEndpointIds must be an array');
+    return [...new Set(value.map(item => requireText(item, 'fileEndpointId', 110)))].map(id => {
+        if (files.endpoint(id) === undefined)
+            throw httpError(404, `file endpoint ${id} was not found`);
+        return id;
+    });
+}
+function parseTransferRequest(value) {
+    const conflict = value.conflictPolicy;
+    if (conflict !== 'fail' && conflict !== 'skip' && conflict !== 'overwrite' && conflict !== 'rename')
+        throw httpError(400, 'invalid conflictPolicy');
+    if (!Array.isArray(value.sourcePaths))
+        throw httpError(400, 'sourcePaths must be an array');
+    return {
+        sourceEndpointId: requireText(value.sourceEndpointId, 'sourceEndpointId', 110),
+        sourcePaths: value.sourcePaths.map(path => requireRawText(path, 'source path', 4096)),
+        destinationEndpointId: requireText(value.destinationEndpointId, 'destinationEndpointId', 110),
+        destinationDirectory: requireRawText(value.destinationDirectory, 'destinationDirectory', 4096),
+        conflictPolicy: conflict,
+    };
+}
+function parseFileDeleteRequest(value) {
+    if (!Array.isArray(value.paths) || value.paths.length < 1 || value.paths.length > 100)
+        throw httpError(400, 'paths must contain 1-100 entries');
+    const paths = [...new Set(value.paths.map(path => requireRawText(path, 'remote path', 4096)))];
+    for (const path of paths)
+        assertDeletableRemotePath(path);
+    return {
+        paneId: requireText(value.paneId, 'paneId', 100),
+        endpointId: requireText(value.endpointId, 'endpointId', 110),
+        directory: requireRawText(value.directory, 'directory', 4096),
+        paths,
+    };
+}
+function assertDeletableRemotePath(value) {
+    const normalized = value.trim().replaceAll('\\', '/').replace(/\/+$/, '') || '/';
+    if (normalized === '/' || normalized === '.' || normalized === '~' || /^[A-Za-z]:$/.test(normalized))
+        throw httpError(400, 'refusing to delete a remote filesystem root');
+}
+function defaultFtpPort(protocol) { return protocol === 'ftps-implicit' ? 990 : 21; }
 function createId(prefix) { return `${prefix}-${randomBytes(10).toString('hex')}`; }
 function assertSameOrigin(req) {
     const origin = req.headers.origin;