@lemoncat7/dsh-ssh 1.7.0 → 1.9.0

package/ARCHITECTURE.md

@@ -2,6 +2,10 @@
 
 This plugin is split into four boundaries. UI code never reaches SSH or file transports directly, and server code never depends on the DSH client runtime.
 
+Browser uploads use XHR byte progress and wait for the successful server response before marking the remote save complete. Downloads use `client-download.ts` when the client exposes File System Access in a secure context: the picker runs within user activation, the response is streamed to the selected writable file, progress counts acknowledged writes, and completion waits for `close()`. Unknown or encoded lengths do not produce guessed percentages. Cancellation, HTTP/auth failures, length mismatches, disk-write errors and close failures never report completion; partial writes are aborted. No full-file Blob buffering is used. Without a client save API (including Desktop hosts lacking that capability), native link downloads remain available but their result is explicitly unknown, with no progress bar or false completion. The legacy `download-progress.ts` server endpoint remains for older loaded clients only; current clients never poll it. These transient client transfers are not resumable jobs after page/server restart.
+
+FTP LIST timestamps are retained as `modifiedAtText` when MLSD timestamps are unavailable; no timezone/year is guessed and no per-entry MDTM/CWD probes are added to directory listing. Regular file sizes remain the listing-provided byte counts; directory sizes are not recursively computed.
+
 ## Runtime boundaries
 
 ### DSH integration
@@ -14,6 +18,8 @@ This plugin is split into four boundaries. UI code never reaches SSH or file tra
 
 - `src/api.ts` translates HTTP routes into explicit store, terminal, file-transfer, forwarding, and credential operations.
 - `src/store.ts` owns persistent SSH configuration.
+- `src/group-proxy.ts` owns group configuration validation and host-over-group route precedence; `src/connector.ts` resolves the chosen shared proxy and its credentials for all new SSH connections. Group proxy references block unsafe deletion, and group records participate in portable sync without rewriting individual host routes.
+- `src/workspace-refresh.ts` coordinates shared, non-overlapping revision checks and retryable list refreshes; `src/use-workspace-refresh.ts` owns browser visibility/focus scheduling. The revision endpoint reads an in-memory token, never credentials or cloud data. Editors retain their local draft state while collections refresh.
 - `src/gist-sync.ts` owns portable configuration snapshots, encrypted secret export/import, three-way conflict resolution, tombstones, explicit backups, and serialized background synchronization.
 - `src/github-device-auth.ts` owns the bounded GitHub Device Flow state machine. Device codes remain server-side and completed access tokens are written directly to the credential service.
 - `src/session-access.ts` and `src/tools.ts` define the session authorization boundary used by AI tools.
@@ -83,8 +89,12 @@ This plugin is split into four boundaries. UI code never reaches SSH or file tra
 - SSH command permission and remote-file permission are independent; authorizing one never implies the other.
 - A regular user fork copies the parent session grant once, before prompt assembly. Existing child grants win, live terminals/jobs are never copied, and `origin: subagent` lineage is excluded.
 - FTP control and passive data sockets use the same route policy. FTPS wraps both socket classes with verified TLS.
+- Passive data sockets are paused after dialling: proxy negotiation may leave them flowing, and listing/download bytes must remain buffered until the FTP preliminary response attaches the receiving pipeline. The regression test sends data before that control reply and checks repeated list/stat navigation.
+- `ftp-listing-client.ts` handles servers returning empty/factless MLSD listings: verify through LIST in the requested working directory and reuse LIST for that connection. Listing never issues per-entry metadata probes. LIST dates retain their server text instead of guessing a timezone/year.
+- File-transfer layout v3 defaults to one pane (including migration from v2). Explicit 1–4 pane choices persist; a single pane has no next-pane transfer action.
 - Remote-to-remote transfers use backpressured streams and never stage a complete file on local disk.
 - Browser browsing sessions and transfer job sessions are isolated so a long transfer cannot block pane navigation.
+- `transfer-task-list.tsx` provides the shared transfer task container and browser-I/O rows. The file workspace merges remote and browser tasks into one active-first queue; compact SFTP views reuse the same container/styles. Client file writes are not passed to the remote-to-remote scheduler. Only an acknowledged local file close produces a completed download; native handoffs remain unconfirmed.
 - Secrets are write-only from the browser and are never returned by profile APIs.
 - Portable sync never exports session grants, forwarding rules, or local runtime settings. Passwords and private keys are encrypted with AES-256-GCM before network I/O; the token and encryption passphrase never enter the snapshot.
 - GitHub authorization requests only the `gist` scope. The browser receives a one-time user code and flow identifier, never the OAuth access token or GitHub device code.
@@ -103,3 +113,8 @@ This plugin is split into four boundaries. UI code never reaches SSH or file tra
 - Established shared motion tokens and reduced-motion fallbacks without adding an animation runtime dependency.
 
 Future feature work should extend the closest feature module instead of adding unrelated state or styles to `client.tsx`.
+# Session-local and browser uploads
+
+- `endpoint-upload.ts` owns bounded streaming, temporary remote names, size verification and commit for FTP/FTPS/SFTP uploads. Existing target names are rejected by the adapter; FTP rename cannot guarantee exclusive commit against unrelated concurrent writers.
+- `session-file-upload.ts` restricts Agent reads to regular files within the current DSH session directory, checks permission throughout streaming, and cancels on disposal. Local upload and download are separate opt-in session grants, in addition to transfer and endpoint permissions. Existing sessions default to neither grant.
+- Browser file uploads originate from the user's selected files, not the DSH host directory, and use the shared browser transfer task list. Sent bytes and remote-save acknowledgment are distinct states. Files are streamed without whole-file buffering; single files are capped at 512 MiB with a five-minute operation limit.

package/README.md

@@ -6,7 +6,7 @@
 
 ## 兼容性
 
-版本 `1.7.0` 适配 DeepSeek Harness `0.1.5` 新版主面板与右侧标签 API，保留旧版回退；已在 `0.1.5-rc.1` 镜像验证。需要 Node.js `^22.19.0` 或 `>=24.0.0`。详见 [1.7.0 更新说明](docs/releases/1.7.0.md)。
+版本 `1.9.0` 适配 DeepSeek Harness `0.1.5` 新版主面板与右侧标签 API，保留旧版回退；已在 `0.1.5-rc.1` 镜像验证。需要 Node.js `^22.19.0` 或 `>=24.0.0`。详见 [1.9.0 更新说明](docs/releases/1.9.0.md)。
 
 ## 1.7.0 界面语言
 
@@ -49,7 +49,7 @@ GitHub 同步收到 HTTP 401 后会用账号接口复核，不删除凭据。确
 
 - **同主机多个目录**：先挂载主机，再点选多个固定目录。目录旁会显示“已挂载”；可单独设定默认工作目录。右侧远端目录提供快捷切换，Agent 的 `ssh_list` 也会返回全部挂载目录。目录挂载不改变原有 SSH 权限范围。
 - **终端多标签与分屏**：`+` 新建标签；双屏支持左右／上下排列，增加分屏最多 4 个，桌面三／四屏按四宫格排列，窄屏上下排列。点击已显示的标签只切换焦点，不交换位置；其他标签或新标签仅替换当前选中窗格。命令与连接按钮作用于选中的终端。SFTP 可从主机标题栏收起／展开，保留目录视图与宽度。切换工作台内的页面、主机或标签不主动断开连接；关闭标签或退出工作台会释放对应连接。新标签使用当时选中的远端路径，不修改已经运行的终端。每主机最多 8 个标签，服务端最多 32 个运行中／连接中的浏览器终端。
-- **常用命令**：新增命令页面，支持搜索、新建、编辑和删除；终端内点击“常用命令”选择后先预览，确认后仅在该终端执行。支持多行，不自动采集终端输入；勿保存密码、Token。记录属于当前 DSH 实例，暂不参与 Gist 同步。
+- **常用命令**：支持搜索、新建、编辑和删除；终端内点击“常用命令”选择后先预览，确认后仅在该终端执行。支持多行，不自动采集终端输入；勿保存密码、Token。开发版已接入 Gist 同步与备份，旧备份缺少命令集合时保留本机命令，显式删除仍参与智能合并。
 - **页面统一**：沿用文件传输页的标题栏、圆角、透明材质、字体和列表间距；终端仅在首次连接时创建，隐藏标签降低备用轮询频率。
 
 ## 1.4.6 更新
@@ -217,6 +217,8 @@ Device Flow 需要一个属于插件发布者的 GitHub OAuth App Client ID。Cl
 
 - SSH 主机、FTP/FTPS 连接与固定远端项目目录
 - 代理库及代理密码
+- 常用命令（名称与正文按配置元数据保存到私有 Gist，不自动识别或加密正文中的密码；不要在命令中嵌入密码、Token）
+- SSH 分组默认代理；从主机分组标题旁的编辑按钮配置，主机自身代理优先，没有设置时才回退分组代理，分组也没有代理时直连。只影响新连接，不修改主机自身配置，不影响 FTP 分组。被分组引用的代理不能直接删除。
 - 密钥库元数据，以及密码、私钥和私钥口令
 - 连接自身保存的 SSH/FTP 密码和内联代理密码
 
@@ -237,6 +239,8 @@ Device Flow 需要一个属于插件发布者的 GitHub OAuth App Client ID。Cl
 
 空白新设备第一次连接已有 Gist 时始终先安全拉取云端，不会因为选择“本地优先”而覆盖已有配置。自动同步会在插件启动后、本地可同步配置变化约 3 秒后以及后台每 5 分钟运行；任务串行执行，避免并发覆盖。
 
+工作台共享每 5 秒一次的轻量版本检查，后台页面暂停，回到页面立即检查；仅数据改变时刷新主机、FTP、代理库、密钥库、分组配置及命令列表。手动同步完成后立即检查，不重建终端或编辑弹窗。旧版本不认识新增集合，跨设备使用这些功能时建议各端同时升级。
+
 覆盖可能丢失的一侧之前，插件会在同一个 Gist 中创建显式备份文件，并按设置保留 0～50 份。该数量只控制 `dsh-ssh.backup.*.json` 文件；GitHub 自己维护的 Gist revision history 无法由插件裁剪。
 
 设置页显示最近一次由 GitHub 返回的云端 Gist revision SHA（短格式展示，完整值保留在提示中）。创建、上传、下载、合并或连接测试都会刷新这个云端版本；它表示真实的 Gist 修订版本，不是固定的数据结构版本号。

package/docs/dialog-consistency.md

@@ -0,0 +1,26 @@
+# Dialog consistency
+
+`Dialog` owns the shared accessible title/description and closing behavior.
+`dialog.css`, loaded after feature styles, owns common chrome: surface tokens,
+14px radius, title typography, header/content insets and action sizes. Feature
+styles retain only content layout and purpose-specific dimensions.
+
+- Confirmation (440px): host, FTP connection, credential, proxy, pinned directory,
+  saved command, file/directory deletion; terminal close, unsaved-draft decisions,
+  transfer conflict and file download.
+- Forms: host, credential, proxy, forwarding, group proxy, pinned directory,
+  saved command and GitHub device authorization retain their content requirements.
+- Larger work surfaces: FTP manager, session access, command picker, session
+  workspace picker and directory/file preview retain browsing space but share chrome.
+
+Do not introduce browser `confirm()` dialogs. `useConfirmationDialog` provides
+target capture, in-flight protection and visible retryable failures for simple
+asynchronous destructive actions. Complex deletion dialogs retain dependency
+checks and use the same confirmation variant. Set `dismissible={false}` while
+busy to prevent close animations from hiding a request that is still running.
+
+`scripts/verify-i18n.mjs` checks light/dark confirmations and host forms at phone
+and desktop widths, landscape scrolling, long names, cancellation and retries.
+`scripts/verify-preview-refresh.mjs` covers preview/edit/refresh state retention.
+Browser fixtures stub host primitives; icons and host focus/portal behavior
+must also be checked in the installed DSH application.

package/docs/releases/1.8.0.md

@@ -0,0 +1,13 @@
+# 1.8.0
+
+正式版。适配 DSH 0.1.5，已在 0.1.5-rc.1 镜像部署验证。需要 Node.js ^22.19.0 或 >=24.0.0。
+
+- GitHub Gist 同步增加常用命令和分组代理配置；兼容旧备份缺少这些集合的情况，避免误删本地数据。
+- 同步后自动更新代理库、主机与命令列表，保留正在编辑的草稿；页面隐藏时暂停检查，返回时检查更新。
+- 主机分组支持默认代理：主机自己的代理或跳板配置优先，未配置时使用分组代理；已建立的连接不受修改影响。
+- 统一 SSH 弹窗的标题、圆角、材质、留白和按钮规范；删除确认使用紧凑布局，适配手机和横屏。
+- 凭据、代理、固定目录删除不再使用浏览器原生确认框；FTP 删除、文件删除、命令删除及终端关闭统一确认样式。异步删除失败可重试，处理中防重复操作。
+
+安全说明：常用命令属于私有 Gist 中的配置元数据，并非加密凭据。请勿在命令中直接保存密码或 Token；密码、私钥仍独立加密。
+
+验证：146 项自动测试通过；浏览器覆盖深浅色、375px/1024px、横屏、长名称、取消与失败重试，以及 Markdown 编辑与预览刷新状态保持。

package/docs/releases/1.9.0.md

@@ -0,0 +1,15 @@
+# 1.9.0
+
+正式版。适配 DSH 0.1.5，已在 0.1.5-rc.1 镜像部署验证。需要 Node.js ^22.19.0 或 >=24.0.0。
+
+- 修复 FTP 文件识别、目录进入、大小和修改时间解析及排序；文件传输默认单栏，保留多栏选择。
+- 本机上传、下载与远端传输统一显示在传输任务列表，支持任务时间与终态清理。
+- 支持文件保存接口的浏览器按实际写入字节显示下载进度，保存关闭成功后才显示完成。其他浏览器或 Desktop 环境交由原生下载，不伪造进度或保存成功状态。
+- 文件传输页增加本机文件上传，支持 FTP、FTPS、SFTP，多选文件依次上传；发送完成后等待远端保存确认。
+- 会话访问增加 Agent 本地上传、下载独立授权，默认关闭，同时要求端点授权和传输权限；新增 file_upload_from_local 工具。
+- Agent 本地指 DSH 运行机器的当前会话目录，不是浏览器电脑。上传仅支持目录内普通文件；下载默认保存在该目录；单文件最大 512 MiB，限时五分钟。
+- 上传使用临时文件、大小校验及最终改名；同名文件按冲突处理，不主动覆盖。FTP 协议无法保证其他客户端并发改名时的排他提交。
+
+升级提醒：原先允许远端传输的会话不会自动获得本地上传／下载权限，请在“文件传输 → 会话访问”明确开启。
+
+验证：163 项自动测试通过；传输页面覆盖 375/697/1024px、深浅色及一万条目录记录；浏览器测试覆盖实际流式写入、保存确认、取消、失败及上传进度。Desktop 原生文件保存接口未实机验证，不支持时明确显示无法确认进度。

package/lib/api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAEhE,OAAO,EAAwB,YAAY,EAAE,MAAM,gBAAgB,CAAA;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAKrD,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAErC,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAA;AAIzE,OAAO,EAAE,gBAAgB,EAAwB,MAAM,sBAAsB,CAAA;AAG7E,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAC5D,OAAO,EAAE,mBAAmB,EAA+B,MAAM,4BAA4B,CAAA;AAC7F,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAA;AAGtE,OAAO,EAAwB,KAAK,yBAAyB,EAAE,MAAM,uBAAuB,CAAA;AAG5F,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAWhD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE;QACd,IAAI,EAAE,QAAQ,CAAA;QACd,IAAI,EAAE,MAAM,CAAA;QACZ,OAAO,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;KACzE,GAAG,MAAM,IAAI,CAAA;CACf;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,QAAQ,CAAA;IACf,WAAW,EAAE,kBAAkB,CAAA;IAC/B,QAAQ,EAAE,eAAe,CAAA;IACzB,SAAS,EAAE,YAAY,CAAA;IACvB,QAAQ,EAAE,cAAc,CAAA;IACxB,SAAS,EAAE,sBAAsB,CAAA;IACjC,WAAW,EAAE,iBAAiB,CAAA;IAC9B,cAAc,EAAE,gBAAgB,CAAA;IAChC,MAAM,EAAE,aAAa,CAAA;IACrB,KAAK,EAAE,iBAAiB,CAAA;IACxB,SAAS,EAAE,mBAAmB,CAAA;IAC9B,YAAY,EAAE,sBAAsB,CAAA;IACpC,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;IACjD,yBAAyB,CAAC,IAAI,yBAAyB,GAAG,SAAS,CAAA;CACpE;AAED,wBAAgB,cAAc,CAAC,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,MAAM,IAAI,CAa3G"}
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAEhE,OAAO,EAAwB,YAAY,EAAE,MAAM,gBAAgB,CAAA;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAKrD,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAGrC,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAA;AAIzE,OAAO,EAAE,gBAAgB,EAAwB,MAAM,sBAAsB,CAAA;AAG7E,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAC5D,OAAO,EAAE,mBAAmB,EAA+B,MAAM,4BAA4B,CAAA;AAC7F,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAA;AAGtE,OAAO,EAAwB,KAAK,yBAAyB,EAAE,MAAM,uBAAuB,CAAA;AAG5F,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAWhD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE;QACd,IAAI,EAAE,QAAQ,CAAA;QACd,IAAI,EAAE,MAAM,CAAA;QACZ,OAAO,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;KACzE,GAAG,MAAM,IAAI,CAAA;CACf;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,QAAQ,CAAA;IACf,WAAW,EAAE,kBAAkB,CAAA;IAC/B,QAAQ,EAAE,eAAe,CAAA;IACzB,SAAS,EAAE,YAAY,CAAA;IACvB,QAAQ,EAAE,cAAc,CAAA;IACxB,SAAS,EAAE,sBAAsB,CAAA;IACjC,WAAW,EAAE,iBAAiB,CAAA;IAC9B,cAAc,EAAE,gBAAgB,CAAA;IAChC,MAAM,EAAE,aAAa,CAAA;IACrB,KAAK,EAAE,iBAAiB,CAAA;IACxB,SAAS,EAAE,mBAAmB,CAAA;IAC9B,YAAY,EAAE,sBAAsB,CAAA;IACpC,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;IACjD,yBAAyB,CAAC,IAAI,yBAAyB,GAAG,SAAS,CAAA;CACpE;AAED,wBAAgB,cAAc,CAAC,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,MAAM,IAAI,CAwB3G"}

package/lib/api.js

@@ -1,7 +1,10 @@
 import { randomBytes } from 'node:crypto';
+import { uploadEndpointFile } from './endpoint-upload.js';
+import { DownloadProgressStore } from './download-progress.js';
 import { pipeline } from 'node:stream/promises';
 import { HostKeyRequiredError } from './connector.js';
 import { normalizeCredentialEntryDraft, normalizeForwardDraft, normalizeFtpProfileDraft, normalizeProfileDraft, normalizeProxyEntryDraft, normalizeRemoteProjectDraft, normalizeSecrets, } from './domain.js';
+import { saveGroupProxy } from './group-proxy.js';
 import { normalizeRemoteDirectory, setSessionDirectory } from './directory.js';
 import { streamTerminalOutput } from './terminal-stream.js';
 import { normalizeGitHubProxy } from './github-http.js';
@@ -23,15 +26,27 @@ import { saveSftpMarkdown } from './sftp-markdown-file.js';
 const MAX_BODY_BYTES = 1_048_576;
 const MAX_SFTP_UPLOAD_BYTES = 512 * 1024 * 1024;
 export function registerSshApi(webServer, prefix, runtime) {
+    const downloads = new DownloadProgressStore();
     return webServer.register({
         kind: 'prefix',
         path: prefix,
         handler: async (req, res) => {
+            let progress;
             try {
                 assertSameOrigin(req);
+                const url = new URL(req.url ?? '/', 'http://localhost');
+                if (req.method === 'GET' && url.pathname === `${prefix}/download-progress`) {
+                    const status = downloads.get(url.searchParams.get('id') ?? '');
+                    return sendJson(res, status ? 200 : 404, status ?? { error: 'download not found' });
+                }
+                const id = url.searchParams.get('transferId');
+                if (req.method === 'GET' && id && /\/(?:download|local-download)$/.test(url.pathname) && url.searchParams.get('inline') !== '1')
+                    progress = downloads.track(id, res);
                 await dispatch(req, res, prefix, runtime);
+                progress?.complete();
             }
             catch (error) {
+                progress?.fail(error);
                 sendError(res, error);
             }
         },
@@ -42,6 +57,19 @@ async function dispatch(req, res, prefix, runtime) {
     const relative = url.pathname.slice(prefix.length).replace(/^\/+|\/+$/g, '');
     const segments = relative ? relative.split('/').map(decodeURIComponent) : [];
     const method = req.method ?? 'GET';
+    if (method === 'GET' && relative === 'workspace-revision') {
+        res.setHeader('Cache-Control', 'no-store');
+        return sendJson(res, 200, { revision: runtime.store.workspaceRevision() });
+    }
+    if (relative === 'group-proxies') {
+        if (method === 'GET')
+            return sendJson(res, 200, runtime.store.groupProxies());
+        if (method === 'PUT') {
+            requireMutationHeader(req);
+            await saveGroupProxy(runtime.store, await readObject(req));
+            return sendJson(res, 200, runtime.store.groupProxies());
+        }
+    }
     if (segments[0] === 'commands') {
         if (method === 'GET' && segments.length === 1)
             return sendJson(res, 200, runtime.store.commands().sort((a, b) => b.updatedAt - a.updatedAt));
@@ -91,6 +119,28 @@ async function dispatch(req, res, prefix, runtime) {
         }
     }
     if (segments[0] === 'file-transfer') {
+        if (method === 'PUT' && segments[1] === 'upload' && segments.length === 2) {
+            requireMutationHeader(req);
+            const endpointId = requireText(url.searchParams.get('endpointId'), 'endpointId', 110);
+            const directory = requireRawText(url.searchParams.get('directory'), 'directory', 4096);
+            const name = requireRemoteFilename(url.searchParams.get('name'));
+            const length = req.headers['content-length'] === undefined ? undefined : Number(req.headers['content-length']);
+            if (length !== undefined && (!Number.isSafeInteger(length) || length < 0 || length > MAX_SFTP_UPLOAD_BYTES))
+                throw httpError(413, 'upload exceeds the 512 MB limit');
+            const controller = new AbortController();
+            const abort = () => { if (!res.writableEnded)
+                controller.abort(new Error('上传连接已断开')); };
+            req.once('aborted', abort);
+            res.once('close', abort);
+            try {
+                const result = await uploadEndpointFile(runtime.files, endpointId, directory, name, req, AbortSignal.any([controller.signal, AbortSignal.timeout(300_000)]), length);
+                return sendJson(res, 201, result);
+            }
+            finally {
+                req.off('aborted', abort);
+                res.off('close', abort);
+            }
+        }
         if (method === 'GET' && segments[1] === 'stat' && segments.length === 2) {
             const endpointId = requireText(url.searchParams.get('endpointId'), 'endpointId', 110);
             const paneId = requireText(url.searchParams.get('paneId'), 'paneId', 100);
@@ -328,6 +378,8 @@ async function dispatch(req, res, prefix, runtime) {
         if (id !== undefined && method === 'DELETE' && segments.length === 2) {
             requireMutationHeader(req);
             requiredProxyEntry(runtime.store, id);
+            if (runtime.store.groupProxies().some(group => group.proxyId === id))
+                throw httpError(409, '代理仍被分组使用，请先修改分组代理');
             const references = runtime.store.profiles().filter(profile => profile.proxy.type === 'saved' && profile.proxy.proxyId === id).length + runtime.store.ftpProfiles().filter(profile => profile.proxy.type === 'saved' && profile.proxy.proxyId === id).length;
             if (references > 0)
                 throw httpError(409, `proxy entry is used by ${references} connection(s)`);
@@ -584,6 +636,9 @@ async function dispatch(req, res, prefix, runtime) {
             requireMutationHeader(req);
             const body = await readObject(req);
             const previous = runtime.store.injection(sessionId);
+            for (const key of ['allowLocalUpload', 'allowLocalDownload'])
+                if (body[key] !== undefined && typeof body[key] !== 'boolean')
+                    throw httpError(400, `${key} must be boolean`);
             const profileIds = parseProfileIds(body.profileIds, runtime.store);
             const fileEndpointIds = body.fileEndpointIds === undefined ? previous?.fileEndpointIds ?? [] : parseFileEndpointIds(body.fileEndpointIds, runtime.files);
             const filePermission = body.filePermission === undefined ? previous?.filePermission ?? 'browse' : body.filePermission === 'browse' ? 'browse' : body.filePermission === 'transfer' ? 'transfer' : undefined;
@@ -610,6 +665,8 @@ async function dispatch(req, res, prefix, runtime) {
             }
             const injection = {
                 sessionId, profileIds, fileEndpointIds, filePermission, requireFileApproval: body.requireFileApproval === undefined ? previous?.requireFileApproval ?? true : body.requireFileApproval !== false,
+                allowLocalUpload: body.allowLocalUpload === undefined ? previous?.allowLocalUpload === true : body.allowLocalUpload === true,
+                allowLocalDownload: body.allowLocalDownload === undefined ? previous?.allowLocalDownload === true : body.allowLocalDownload === true,
                 permission, requireCommandApproval: body.requireCommandApproval !== false, workingDirectories, workingProjectIds, mountedProjectIds, updatedAt: Date.now(),
             };
             await runtime.store.update(state => { state.injections = [...state.injections.filter(item => item.sessionId !== sessionId), injection]; });
@@ -905,7 +962,7 @@ async function proxyEntryViews(runtime) {
 }
 async function proxyEntryView(runtime, entry) {
     const credential = await runtime.credentials.describeProxyEntry(entry.id);
-    return { ...entry, credential, references: runtime.store.profiles().filter(profile => profile.proxy.type === 'saved' && profile.proxy.proxyId === entry.id).length + runtime.store.ftpProfiles().filter(profile => profile.proxy.type === 'saved' && profile.proxy.proxyId === entry.id).length };
+    return { ...entry, credential, references: runtime.store.profiles().filter(profile => profile.proxy.type === 'saved' && profile.proxy.proxyId === entry.id).length + runtime.store.ftpProfiles().filter(profile => profile.proxy.type === 'saved' && profile.proxy.proxyId === entry.id).length + (runtime.store.groupProxies?.() ?? []).filter(group => group.proxyId === entry.id).length };
 }
 async function ftpProfileViews(runtime) { return Promise.all(runtime.store.ftpProfiles().map(profile => ftpProfileView(runtime, profile))); }
 async function ftpProfileView(runtime, profile) {