@linxin666/dsh-ssh 0.3.5 → 0.3.9

package/lib/client.js

@@ -24,294 +24,6 @@ window.__ModuleLoader__.load({
 			terminal: "/api/dsh-ssh/terminal"
 		};
 		//#endregion
-		//#region src/client/api.ts
-		/**
-		* Browser-side API client for the /api/dsh-ssh route family. The only data
-		* access path the panel components use — plain fetch/WebSocket, same origin.
-		*/
-		/** Error carrying the route's JSON error message. */
-		var SshApiError = class extends Error {
-			constructor(message) {
-				super(message);
-				this.name = "SshApiError";
-			}
-		};
-		/** Extract the `.error` message from a JSON error body; undefined when absent. */
-		function extractError(text) {
-			if (text === "") return void 0;
-			try {
-				const parsed = JSON.parse(text);
-				return typeof parsed?.error === "string" ? parsed.error : void 0;
-			} catch {
-				return;
-			}
-		}
-		/** Parse a JSON response or throw an SshApiError. */
-		async function readJson(response) {
-			let body;
-			try {
-				body = await response.json();
-			} catch {
-				throw new SshApiError(`HTTP ${response.status}: invalid JSON response`);
-			}
-			if (!response.ok) throw new SshApiError(typeof body === "object" && body !== null && typeof body.error === "string" ? body.error : `HTTP ${response.status}`);
-			return body;
-		}
-		/** Query-string helper. */
-		function query(params) {
-			const search = new URLSearchParams();
-			for (const [key, value] of Object.entries(params)) if (value !== void 0 && value !== "") search.set(key, String(value));
-			const text = search.toString();
-			return text === "" ? "" : "?" + text;
-		}
-		/** The browser half's only data entry point. */
-		var SshApi = class {
-			async listHosts(queryText) {
-				return (await readJson(await fetch(SSH_API.hosts + query({ query: queryText })))).hosts;
-			}
-			async createHost(payload) {
-				return (await readJson(await fetch(SSH_API.hosts, {
-					method: "POST",
-					headers: { "content-type": "application/json" },
-					body: JSON.stringify(payload)
-				}))).host;
-			}
-			async updateHost(alias, patch) {
-				return (await readJson(await fetch(SSH_API.hosts + query({ alias }), {
-					method: "PATCH",
-					headers: { "content-type": "application/json" },
-					body: JSON.stringify(patch)
-				}))).host;
-			}
-			async deleteHost(alias) {
-				await readJson(await fetch(SSH_API.hosts + query({ alias }), { method: "DELETE" }));
-			}
-			async importSshConfig() {
-				return (await readJson(await fetch(SSH_API.importSshConfig, { method: "POST" }))).result;
-			}
-			async testHost(alias) {
-				return (await readJson(await fetch(SSH_API.test, {
-					method: "POST",
-					headers: { "content-type": "application/json" },
-					body: JSON.stringify({ alias })
-				}))).result;
-			}
-			async exec(alias, command, timeoutMs) {
-				return (await readJson(await fetch(SSH_API.exec, {
-					method: "POST",
-					headers: { "content-type": "application/json" },
-					body: JSON.stringify({
-						alias,
-						command,
-						timeoutMs
-					})
-				}))).result;
-			}
-			async cluster(options) {
-				return (await readJson(await fetch(SSH_API.cluster, {
-					method: "POST",
-					headers: { "content-type": "application/json" },
-					body: JSON.stringify(options)
-				}))).results;
-			}
-			async ls(alias, path) {
-				return (await readJson(await fetch(SSH_API.ls + query({
-					alias,
-					path
-				})))).entries;
-			}
-			async listTunnels() {
-				return (await readJson(await fetch(SSH_API.tunnel, {
-					method: "POST",
-					headers: { "content-type": "application/json" },
-					body: JSON.stringify({ action: "list" })
-				}))).tunnels;
-			}
-			async startTunnel(options) {
-				return (await readJson(await fetch(SSH_API.tunnel, {
-					method: "POST",
-					headers: { "content-type": "application/json" },
-					body: JSON.stringify({
-						action: "start",
-						...options
-					})
-				}))).tunnel;
-			}
-			async stopTunnel(tunnelId) {
-				return (await readJson(await fetch(SSH_API.tunnel, {
-					method: "POST",
-					headers: { "content-type": "application/json" },
-					body: JSON.stringify({
-						action: "stop",
-						tunnelId
-					})
-				}))).ok;
-			}
-			async stopAllTunnels(alias) {
-				return (await readJson(await fetch(SSH_API.tunnel, {
-					method: "POST",
-					headers: { "content-type": "application/json" },
-					body: JSON.stringify({
-						action: "stop-all",
-						alias
-					})
-				}))).stopped;
-			}
-			/**
-			* Upload one file (raw bytes) to a remote path. Progress arrives through
-			* the NDJSON response stream; resolves when the result frame lands.
-			*/
-			async uploadFile(file, alias, remotePath, onProgress) {
-				const response = await fetch(SSH_API.upload + query({
-					alias,
-					remotePath
-				}), {
-					method: "POST",
-					body: file
-				});
-				if (!response.ok || response.body === null) throw new SshApiError(extractError(await response.text().catch(() => "")) ?? `upload failed: HTTP ${response.status}`);
-				const reader = response.body.getReader();
-				const decoder = new TextDecoder();
-				let buffer = "";
-				let finalError;
-				let sawResult = false;
-				let transferredBytes = 0;
-				for (;;) {
-					const { done, value } = await reader.read();
-					if (done) break;
-					buffer += decoder.decode(value, { stream: true });
-					const lines = buffer.split("\n");
-					buffer = lines.pop() ?? "";
-					for (const line of lines) {
-						if (line.trim() === "") continue;
-						let parsed;
-						try {
-							parsed = JSON.parse(line);
-						} catch {
-							continue;
-						}
-						if (parsed.type === "progress") onProgress?.(parsed.progress);
-						else if (parsed.type === "result") {
-							sawResult = true;
-							if (parsed.ok) transferredBytes = parsed.transferredBytes ?? 0;
-							finalError = parsed.ok ? void 0 : parsed.error ?? "upload failed";
-						}
-					}
-				}
-				if (finalError !== void 0) throw new SshApiError(finalError);
-				if (!sawResult) throw new SshApiError("upload ended without a result frame — the transfer did not complete");
-				return { transferredBytes };
-			}
-			/**
-			* Download a remote file with client-side progress. Streams straight to
-			* disk when the File System Access API is available (no full-file RAM
-			* copy); otherwise falls back to an in-memory Blob.
-			*/
-			async downloadFile(alias, remotePath, onProgress) {
-				const response = await fetch(SSH_API.download + query({
-					alias,
-					remotePath
-				}));
-				if (!response.ok || response.body === null) throw new SshApiError(extractError(await response.text().catch(() => "")) ?? `download failed: HTTP ${response.status}`);
-				const total = Number(response.headers.get("content-length") ?? "0");
-				const disposition = response.headers.get("content-disposition") ?? "";
-				const filename = /filename="([^"]+)"/.exec(disposition)?.[1] ?? remotePath.split("/").pop() ?? "download";
-				const reader = response.body.getReader();
-				const picker = typeof window !== "undefined" ? window.showSaveFilePicker : void 0;
-				let streamed = false;
-				let writable;
-				const chunks = [];
-				let received = 0;
-				const progress = () => {
-					onProgress?.({
-						phase: "transferring",
-						file: remotePath,
-						transferred: received,
-						total,
-						percent: total > 0 ? Math.round(received / total * 1e3) / 10 : 0
-					});
-				};
-				try {
-					if (picker !== void 0) {
-						writable = await (await picker.call(window, { suggestedName: filename })).createWritable();
-						streamed = true;
-					}
-				} catch {}
-				for (;;) {
-					const { done, value } = await reader.read();
-					if (done) break;
-					if (writable !== void 0) await writable.write(value);
-					else chunks.push(value);
-					received += value.length;
-					progress();
-				}
-				if (writable !== void 0) await writable.close();
-				onProgress?.({
-					phase: "done",
-					file: remotePath,
-					transferred: received,
-					total: received > 0 ? received : total,
-					percent: 100
-				});
-				return {
-					blob: streamed ? void 0 : new Blob(chunks),
-					filename,
-					streamed,
-					bytes: received
-				};
-			}
-			/** Open a WebSocket terminal session. */
-			openTerminal(alias, cols, rows) {
-				const url = (window.location.protocol === "https:" ? "wss" : "ws") + "://" + window.location.host + SSH_API.terminal + query({
-					alias,
-					cols,
-					rows
-				});
-				const socket = new WebSocket(url);
-				const connection = {
-					onReady: void 0,
-					onOutput: void 0,
-					onExit: void 0,
-					send: (data) => {
-						if (socket.readyState === WebSocket.OPEN) socket.send(JSON.stringify({
-							type: "input",
-							data
-						}));
-					},
-					resize: (cols, rows) => {
-						if (socket.readyState === WebSocket.OPEN) socket.send(JSON.stringify({
-							type: "resize",
-							cols,
-							rows
-						}));
-					},
-					close: () => {
-						try {
-							socket.close();
-						} catch {}
-					}
-				};
-				socket.onmessage = (event) => {
-					let frame;
-					try {
-						frame = JSON.parse(event.data);
-					} catch {
-						return;
-					}
-					if (frame.type === "ready") connection.onReady?.();
-					else if (frame.type === "output") connection.onOutput?.(frame.data);
-					else if (frame.type === "exit") connection.onExit?.(frame.code, frame.error);
-				};
-				socket.onclose = () => {
-					connection.onExit?.(null, "connection closed");
-				};
-				socket.onerror = () => {
-					connection.onExit?.(null, "connection error");
-				};
-				return connection;
-			}
-		};
-		//#endregion
 		//#region src/client/locales.ts
 		/**
 		* dsh-ssh surface copy: zh is the key source, en mirrors every key.
@@ -396,6 +108,11 @@ window.__ModuleLoader__.load({
 			"terminal.ready": "终端已连接（{alias}）",
 			"terminal.exited": "终端已退出（{alias}）",
 			"terminal.error": "终端错误：{error}",
+			"terminal.auth.title": "二次身份验证 (2FA / 交互式认证)",
+			"terminal.auth.submit": "提交验证码",
+			"terminal.auth.cancel": "取消",
+			"terminal.auth.placeholder": "请输入验证码或口令",
+			"terminal.auth.hint": "服务器请求进行交互式二次验证（输入仅本次生效，不落盘）：",
 			"transfer.selectHost": "选择主机",
 			"transfer.remotePath": "远程路径",
 			"transfer.remotePathHint": "如 /tmp/ 或 /home/user/app.tar.gz",
@@ -455,7 +172,8 @@ window.__ModuleLoader__.load({
 			"common.loading": "加载中…",
 			"common.error": "出错：{error}",
 			"common.refresh": "刷新",
-			"common.confirm": "确定"
+			"common.confirm": "确定",
+			"error.disabled": "SSH 插件在宿主端未启用。请前往「设置 → Web 插件 → SSH」打开 enabled 开关。"
 		};
 		const en = {
 			"entry.label": "SSH",
@@ -537,6 +255,11 @@ window.__ModuleLoader__.load({
 			"terminal.ready": "Terminal connected ({alias})",
 			"terminal.exited": "Terminal exited ({alias})",
 			"terminal.error": "Terminal error: {error}",
+			"terminal.auth.title": "Two-Factor Authentication (2FA)",
+			"terminal.auth.submit": "Submit Code",
+			"terminal.auth.cancel": "Cancel",
+			"terminal.auth.placeholder": "Enter code or passphrase",
+			"terminal.auth.hint": "The server requested interactive 2FA (session only, never saved):",
 			"transfer.selectHost": "Select host",
 			"transfer.remotePath": "Remote path",
 			"transfer.remotePathHint": "e.g. /tmp/ or /home/user/app.tar.gz",
@@ -596,7 +319,8 @@ window.__ModuleLoader__.load({
 			"common.loading": "Loading…",
 			"common.error": "Error: {error}",
 			"common.refresh": "Refresh",
-			"common.confirm": "Confirm"
+			"common.confirm": "Confirm",
+			"error.disabled": "The SSH plugin is disabled on the host. Please enable it in Settings → Web Plugins → SSH."
 		};
 		/** Tiny interpolation: {name} -> value. */
 		function t(dictionary, key, values) {
@@ -652,8 +376,305 @@ window.__ModuleLoader__.load({
 					if (value !== "") return value;
 				}
 			}
-			return TERMINAL_FONT_FALLBACK;
-		}
+			return TERMINAL_FONT_FALLBACK;
+		}
+		//#endregion
+		//#region src/client/api.ts
+		/**
+		* Browser-side API client for the /api/dsh-ssh route family. The only data
+		* access path the panel components use — plain fetch/WebSocket, same origin.
+		*/
+		/** Error carrying the route's JSON error message. */
+		var SshApiError = class extends Error {
+			constructor(message) {
+				super(message);
+				this.name = "SshApiError";
+			}
+		};
+		/** Extract the `.error` message from a JSON error body; undefined when absent. */
+		function extractError(text) {
+			if (text === "") return void 0;
+			try {
+				const parsed = JSON.parse(text);
+				return typeof parsed?.error === "string" ? parsed.error : void 0;
+			} catch {
+				return;
+			}
+		}
+		/** Parse a JSON response or throw an SshApiError. */
+		async function readJson(response) {
+			let body;
+			try {
+				body = await response.json();
+			} catch {
+				if (response.status === 404) throw new SshApiError(tt("error.disabled"));
+				throw new SshApiError(`HTTP ${response.status}: invalid JSON response`);
+			}
+			if (!response.ok) throw new SshApiError(typeof body === "object" && body !== null && typeof body.error === "string" ? body.error : response.status === 404 ? tt("error.disabled") : `HTTP ${response.status}`);
+			return body;
+		}
+		/** Query-string helper. */
+		function query(params) {
+			const search = new URLSearchParams();
+			for (const [key, value] of Object.entries(params)) if (value !== void 0 && value !== "") search.set(key, String(value));
+			const text = search.toString();
+			return text === "" ? "" : "?" + text;
+		}
+		/** The browser half's only data entry point. */
+		var SshApi = class {
+			async listHosts(queryText) {
+				return (await readJson(await fetch(SSH_API.hosts + query({ query: queryText })))).hosts;
+			}
+			async createHost(payload) {
+				return (await readJson(await fetch(SSH_API.hosts, {
+					method: "POST",
+					headers: { "content-type": "application/json" },
+					body: JSON.stringify(payload)
+				}))).host;
+			}
+			async updateHost(alias, patch) {
+				return (await readJson(await fetch(SSH_API.hosts + query({ alias }), {
+					method: "PATCH",
+					headers: { "content-type": "application/json" },
+					body: JSON.stringify(patch)
+				}))).host;
+			}
+			async deleteHost(alias) {
+				await readJson(await fetch(SSH_API.hosts + query({ alias }), { method: "DELETE" }));
+			}
+			async importSshConfig() {
+				return (await readJson(await fetch(SSH_API.importSshConfig, { method: "POST" }))).result;
+			}
+			async testHost(alias) {
+				return (await readJson(await fetch(SSH_API.test, {
+					method: "POST",
+					headers: { "content-type": "application/json" },
+					body: JSON.stringify({ alias })
+				}))).result;
+			}
+			async exec(alias, command, timeoutMs) {
+				return (await readJson(await fetch(SSH_API.exec, {
+					method: "POST",
+					headers: { "content-type": "application/json" },
+					body: JSON.stringify({
+						alias,
+						command,
+						timeoutMs
+					})
+				}))).result;
+			}
+			async cluster(options) {
+				return (await readJson(await fetch(SSH_API.cluster, {
+					method: "POST",
+					headers: { "content-type": "application/json" },
+					body: JSON.stringify(options)
+				}))).results;
+			}
+			async ls(alias, path) {
+				return (await readJson(await fetch(SSH_API.ls + query({
+					alias,
+					path
+				})))).entries;
+			}
+			async listTunnels() {
+				return (await readJson(await fetch(SSH_API.tunnel, {
+					method: "POST",
+					headers: { "content-type": "application/json" },
+					body: JSON.stringify({ action: "list" })
+				}))).tunnels;
+			}
+			async startTunnel(options) {
+				return (await readJson(await fetch(SSH_API.tunnel, {
+					method: "POST",
+					headers: { "content-type": "application/json" },
+					body: JSON.stringify({
+						action: "start",
+						...options
+					})
+				}))).tunnel;
+			}
+			async stopTunnel(tunnelId) {
+				return (await readJson(await fetch(SSH_API.tunnel, {
+					method: "POST",
+					headers: { "content-type": "application/json" },
+					body: JSON.stringify({
+						action: "stop",
+						tunnelId
+					})
+				}))).ok;
+			}
+			async stopAllTunnels(alias) {
+				return (await readJson(await fetch(SSH_API.tunnel, {
+					method: "POST",
+					headers: { "content-type": "application/json" },
+					body: JSON.stringify({
+						action: "stop-all",
+						alias
+					})
+				}))).stopped;
+			}
+			/**
+			* Upload one file (raw bytes) to a remote path. Progress arrives through
+			* the NDJSON response stream; resolves when the result frame lands.
+			*/
+			async uploadFile(file, alias, remotePath, onProgress) {
+				const response = await fetch(SSH_API.upload + query({
+					alias,
+					remotePath
+				}), {
+					method: "POST",
+					body: file
+				});
+				if (!response.ok || response.body === null) throw new SshApiError(extractError(await response.text().catch(() => "")) ?? `upload failed: HTTP ${response.status}`);
+				const reader = response.body.getReader();
+				const decoder = new TextDecoder();
+				let buffer = "";
+				let finalError;
+				let sawResult = false;
+				let transferredBytes = 0;
+				for (;;) {
+					const { done, value } = await reader.read();
+					if (done) break;
+					buffer += decoder.decode(value, { stream: true });
+					const lines = buffer.split("\n");
+					buffer = lines.pop() ?? "";
+					for (const line of lines) {
+						if (line.trim() === "") continue;
+						let parsed;
+						try {
+							parsed = JSON.parse(line);
+						} catch {
+							continue;
+						}
+						if (parsed.type === "progress") onProgress?.(parsed.progress);
+						else if (parsed.type === "result") {
+							sawResult = true;
+							if (parsed.ok) transferredBytes = parsed.transferredBytes ?? 0;
+							finalError = parsed.ok ? void 0 : parsed.error ?? "upload failed";
+						}
+					}
+				}
+				if (finalError !== void 0) throw new SshApiError(finalError);
+				if (!sawResult) throw new SshApiError("upload ended without a result frame — the transfer did not complete");
+				return { transferredBytes };
+			}
+			/**
+			* Download a remote file with client-side progress. Streams straight to
+			* disk when the File System Access API is available (no full-file RAM
+			* copy); otherwise falls back to an in-memory Blob.
+			*/
+			async downloadFile(alias, remotePath, onProgress) {
+				const response = await fetch(SSH_API.download + query({
+					alias,
+					remotePath
+				}));
+				if (!response.ok || response.body === null) throw new SshApiError(extractError(await response.text().catch(() => "")) ?? `download failed: HTTP ${response.status}`);
+				const total = Number(response.headers.get("content-length") ?? "0");
+				const disposition = response.headers.get("content-disposition") ?? "";
+				const filename = /filename="([^"]+)"/.exec(disposition)?.[1] ?? remotePath.split("/").pop() ?? "download";
+				const reader = response.body.getReader();
+				const picker = typeof window !== "undefined" ? window.showSaveFilePicker : void 0;
+				let streamed = false;
+				let writable;
+				const chunks = [];
+				let received = 0;
+				const progress = () => {
+					onProgress?.({
+						phase: "transferring",
+						file: remotePath,
+						transferred: received,
+						total,
+						percent: total > 0 ? Math.round(received / total * 1e3) / 10 : 0
+					});
+				};
+				try {
+					if (picker !== void 0) {
+						writable = await (await picker.call(window, { suggestedName: filename })).createWritable();
+						streamed = true;
+					}
+				} catch {}
+				for (;;) {
+					const { done, value } = await reader.read();
+					if (done) break;
+					if (writable !== void 0) await writable.write(value);
+					else chunks.push(value);
+					received += value.length;
+					progress();
+				}
+				if (writable !== void 0) await writable.close();
+				onProgress?.({
+					phase: "done",
+					file: remotePath,
+					transferred: received,
+					total: received > 0 ? received : total,
+					percent: 100
+				});
+				return {
+					blob: streamed ? void 0 : new Blob(chunks),
+					filename,
+					streamed,
+					bytes: received
+				};
+			}
+			/** Open a WebSocket terminal session. */
+			openTerminal(alias, cols, rows) {
+				const url = (window.location.protocol === "https:" ? "wss" : "ws") + "://" + window.location.host + SSH_API.terminal + query({
+					alias,
+					cols,
+					rows
+				});
+				const socket = new WebSocket(url);
+				const connection = {
+					onReady: void 0,
+					onOutput: void 0,
+					onExit: void 0,
+					onAuthPrompt: void 0,
+					send: (data) => {
+						if (socket.readyState === WebSocket.OPEN) socket.send(JSON.stringify({
+							type: "input",
+							data
+						}));
+					},
+					resize: (cols, rows) => {
+						if (socket.readyState === WebSocket.OPEN) socket.send(JSON.stringify({
+							type: "resize",
+							cols,
+							rows
+						}));
+					},
+					sendAuthResponse: (responses) => {
+						if (socket.readyState === WebSocket.OPEN) socket.send(JSON.stringify({
+							type: "auth_response",
+							responses
+						}));
+					},
+					close: () => {
+						try {
+							socket.close();
+						} catch {}
+					}
+				};
+				socket.onmessage = (event) => {
+					let frame;
+					try {
+						frame = JSON.parse(event.data);
+					} catch {
+						return;
+					}
+					if (frame.type === "ready") connection.onReady?.();
+					else if (frame.type === "output") connection.onOutput?.(frame.data);
+					else if (frame.type === "exit") connection.onExit?.(frame.code, frame.error);
+					else if (frame.type === "auth_prompt") connection.onAuthPrompt?.(frame.name, frame.instructions, frame.prompts);
+				};
+				socket.onclose = () => {
+					connection.onExit?.(null, "connection closed");
+				};
+				socket.onerror = () => {
+					connection.onExit?.(null, "connection error");
+				};
+				return connection;
+			}
+		};
 		//#endregion
 		//#region \0dsh-css:packages/dsh-ssh/src/client/panel/panel.module.css.mjs
 		const css = "[data-pane=conversation],[class*=centerCol]{position:relative}[data-dsh-ssh-view]{z-index:60;background:var(--dsw-alias-bg-base);display:none;position:absolute;inset:0}html[data-dsh-ssh-active]:not([data-dsh-taskboard-active]) [data-dsh-ssh-view]{display:block}html[data-dsh-ssh-active]:not([data-dsh-taskboard-active]) [data-pane=conversation]>:not([data-dsh-ssh-view]),html[data-dsh-ssh-active]:not([data-dsh-taskboard-active]) [class*=centerCol]>:not([data-dsh-ssh-view]){display:none!important}.mL8Uca_entry{box-sizing:border-box;width:100%;min-height:36px;color:var(--dsw-alias-label-secondary);cursor:pointer;white-space:nowrap;background:0 0;border:none;border-radius:8px;align-items:center;gap:10px;padding:0 10px;font-size:13px;display:flex}.mL8Uca_entry:hover{background:var(--dsw-alias-interactive-bg-hover);color:var(--dsw-alias-label-primary)}.mL8Uca_entry[data-active]{background:var(--dsw-alias-interactive-bg-active);color:var(--dsw-alias-label-primary);font-weight:600}.mL8Uca_entryIcon{flex:none;justify-content:center;align-items:center;width:24px;height:24px;display:inline-flex}.mL8Uca_entryIcon svg{width:18px;height:18px;display:block}.mL8Uca_entryLabel{text-overflow:ellipsis;overflow:hidden}[data-dsh-frame][data-sidebar-collapsed] .mL8Uca_entry{border-radius:50%;justify-content:center;width:36px;min-height:36px;margin:0 auto 12px;padding:0}[data-dsh-frame][data-sidebar-collapsed] .mL8Uca_entryLabel{display:none}.mL8Uca_view{overflow:hidden}.mL8Uca_panel{background:var(--dsw-alias-bg-base);min-width:0;height:100%;min-height:0;color:var(--dsw-alias-label-primary);font-family:var(--dsw-font-family);flex-direction:column;gap:10px;padding:14px 16px 16px;display:flex}.mL8Uca_panelHeader{flex:none;align-items:center;gap:10px;display:flex}.mL8Uca_panelTitle{color:var(--dsw-alias-label-primary);white-space:nowrap;flex:1;margin:0;font-size:16px;font-weight:700}.mL8Uca_backButton{align-items:center;gap:4px;display:inline-flex}.mL8Uca_tabBar{border-bottom:1px solid var(--dsw-alias-border-l1);flex:none;gap:2px;display:flex}.mL8Uca_tab{color:var(--dsw-alias-label-secondary);cursor:pointer;white-space:nowrap;background:0 0;border:none;border-bottom:2px solid #0000;border-radius:6px 6px 0 0;padding:7px 14px;font-size:13px}.mL8Uca_tab:hover{color:var(--dsw-alias-label-primary);background:var(--dsw-alias-interactive-bg-hover)}.mL8Uca_tab[data-active]{color:var(--dsw-alias-label-primary);border-bottom-color:var(--dsw-alias-state-business-primary);font-weight:600}.mL8Uca_panelContent{flex-direction:column;flex:1;min-height:0;display:flex;overflow:hidden}.mL8Uca_tabBody{flex-direction:column;flex:1;gap:10px;min-height:0;display:flex;overflow-y:auto}.mL8Uca_fillBody{flex-direction:column;flex:1;gap:10px;min-height:0;display:flex;overflow:hidden}.mL8Uca_toolbar,.mL8Uca_controls{flex-wrap:wrap;flex:none;align-items:center;gap:8px;display:flex}.mL8Uca_controls .mL8Uca_input{flex:0 260px;min-width:150px}.mL8Uca_toolbarSpacer{flex:1}.mL8Uca_search{min-width:120px;color:var(--dsw-alias-label-primary);background:var(--dsw-specific-input-major);border:1px solid var(--dsw-alias-border-l2);border-radius:8px;outline:none;flex:0 260px;padding:6px 10px;font-size:13px}.mL8Uca_search::placeholder{color:var(--dsw-alias-label-tertiary)}.mL8Uca_groupBySelect{color:var(--dsw-alias-label-primary);background:var(--dsw-specific-input-major);border:1px solid var(--dsw-alias-border-l2);border-radius:8px;outline:none;padding:6px 8px;font-size:13px}.mL8Uca_groupSection+.mL8Uca_groupSection{border-top:1px solid var(--dsw-alias-border-l1)}.mL8Uca_groupHeader{background:var(--dsw-alias-bg-base,var(--dsw-specific-input-major));align-items:center;gap:8px;padding:4px 8px;display:flex;position:sticky;top:0}.mL8Uca_groupToggle{min-width:0;color:var(--dsw-alias-label-primary);cursor:pointer;text-align:left;background:0 0;border:none;border-radius:6px;flex:1;align-items:center;gap:6px;padding:4px 6px;font-size:12.5px;font-weight:500;display:flex}.mL8Uca_groupToggle:hover{background:var(--dsw-alias-interactive-bg-hover)}.mL8Uca_groupChevron{border-right:1.5px solid var(--dsw-alias-label-tertiary);border-bottom:1.5px solid var(--dsw-alias-label-tertiary);flex:none;width:7px;height:7px;margin-bottom:2px;transition:transform .12s;transform:rotate(45deg)}.mL8Uca_groupChevron[data-collapsed]{margin-bottom:0;transform:rotate(-45deg)}.mL8Uca_groupName{text-overflow:ellipsis;white-space:nowrap;overflow:hidden}.mL8Uca_groupCount{color:var(--dsw-alias-label-tertiary);flex:none;font-weight:400}.mL8Uca_tableWrap{border:1px solid var(--dsw-alias-border-l1);border-radius:10px;flex:1;min-height:0;overflow:auto}.mL8Uca_table{border-collapse:collapse;width:100%;font-size:12.5px}.mL8Uca_table th{z-index:1;text-align:left;background:var(--dsw-alias-bg-layer-2);color:var(--dsw-alias-label-secondary);border-bottom:1px solid var(--dsw-alias-border-l1);white-space:nowrap;padding:8px 10px;font-weight:600;position:sticky;top:0}.mL8Uca_table td{border-bottom:1px solid var(--dsw-alias-separator-primary);vertical-align:top;padding:7px 10px}.mL8Uca_table tbody tr:last-child td{border-bottom:none}.mL8Uca_table tbody tr:hover td{background:var(--dsw-alias-interactive-bg-hover)}.mL8Uca_mono{font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace}.mL8Uca_cellMuted{color:var(--dsw-alias-label-tertiary)}.mL8Uca_actions{white-space:nowrap;align-items:center;gap:8px;display:flex}.mL8Uca_inlineTest{color:var(--dsw-alias-label-secondary);align-items:center;gap:6px;font-size:11.5px;display:inline-flex}.mL8Uca_inlineTest[data-status=ok]{color:var(--dsw-alias-state-success-primary)}.mL8Uca_inlineTest[data-status=fail]{color:var(--dsw-alias-state-error-primary)}.mL8Uca_badge{border:1px solid var(--dsw-alias-border-l2);color:var(--dsw-alias-label-secondary);white-space:nowrap;border-radius:999px;padding:1px 8px;font-size:11px;line-height:1.6;display:inline-block}.mL8Uca_badge[data-kind=key]{color:var(--dsw-alias-state-business-primary);border-color:var(--dsw-alias-state-business-primary)}.mL8Uca_badge[data-kind=password]{color:var(--dsw-alias-state-warn-primary);border-color:var(--dsw-alias-state-warn-primary)}.mL8Uca_badge[data-kind=agent],.mL8Uca_badge[data-status=ok]{color:var(--dsw-alias-state-success-primary);border-color:var(--dsw-alias-state-success-primary)}.mL8Uca_badge[data-status=fail]{color:var(--dsw-alias-state-error-primary);border-color:var(--dsw-alias-state-error-primary)}.mL8Uca_badge[data-status=timeout]{color:var(--dsw-alias-state-warn-primary);border-color:var(--dsw-alias-state-warn-primary)}.mL8Uca_primaryButton{color:var(--dsw-alias-label-primary-foreground);background:var(--dsw-alias-button-info-fill);cursor:pointer;white-space:nowrap;border:none;border-radius:8px;padding:6px 14px;font-size:13px;font-weight:600}.mL8Uca_primaryButton:hover:not(:disabled){background:var(--dsw-alias-button-info-hover)}.mL8Uca_primaryButton:disabled{opacity:.5;cursor:default}.mL8Uca_ghostButton{color:var(--dsw-alias-label-primary);border:1px solid var(--dsw-alias-border-l2);cursor:pointer;white-space:nowrap;background:0 0;border-radius:8px;padding:5px 12px;font-size:12px}.mL8Uca_ghostButton:hover:not(:disabled){background:var(--dsw-alias-interactive-bg-hover)}.mL8Uca_ghostButton:disabled{opacity:.45;cursor:default}.mL8Uca_iconButton{width:26px;height:26px;color:var(--dsw-alias-label-secondary);cursor:pointer;background:0 0;border:none;border-radius:6px;justify-content:center;align-items:center;padding:0;font-size:13px;display:inline-flex}.mL8Uca_iconButton:hover{background:var(--dsw-alias-interactive-bg-hover);color:var(--dsw-alias-label-primary)}.mL8Uca_linkButton{color:var(--dsw-alias-state-business-primary);cursor:pointer;white-space:nowrap;background:0 0;border:none;padding:0;font-size:12px}.mL8Uca_linkButton:hover:not(:disabled){text-decoration:underline}.mL8Uca_linkButton:disabled{opacity:.45;cursor:default}.mL8Uca_linkButton[data-danger]{color:var(--dsw-alias-state-error-primary)}.mL8Uca_spinner{border:2px solid var(--dsw-alias-state-business-primary);vertical-align:-1px;border-top-color:#0000;border-radius:50%;flex:none;width:11px;height:11px;animation:.8s linear infinite mL8Uca_dshSshSpin;display:inline-block}@keyframes mL8Uca_dshSshSpin{to{transform:rotate(360deg)}}.mL8Uca_banner{border:1px solid var(--dsw-alias-border-l2);color:var(--dsw-alias-label-secondary);overflow-wrap:anywhere;border-radius:8px;padding:8px 12px;font-size:12.5px;line-height:1.5}.mL8Uca_banner[data-kind=ok]{color:var(--dsw-alias-state-success-primary);border-color:var(--dsw-alias-state-success-primary)}.mL8Uca_banner[data-kind=error]{color:var(--dsw-alias-state-error-primary);border-color:var(--dsw-alias-state-error-primary)}.mL8Uca_banner[data-kind=info]{color:var(--dsw-alias-state-business-primary);border-color:var(--dsw-alias-state-business-primary)}.mL8Uca_empty,.mL8Uca_loading{text-align:center;color:var(--dsw-alias-label-tertiary);padding:28px 12px;font-size:12.5px}.mL8Uca_modalBackdrop{z-index:40;background:var(--dsw-alias-bg-mask-1);justify-content:center;align-items:center;display:flex;position:fixed;inset:0}.mL8Uca_modal{background:var(--dsw-alias-bg-base);border:1px solid var(--dsw-alias-border-l2);width:min(560px,100vw - 48px);max-height:calc(100vh - 96px);box-shadow:var(--dsw-shadow-lv3);color:var(--dsw-alias-label-primary);border-radius:14px;flex-direction:column;gap:12px;padding:18px;display:flex;overflow-y:auto}.mL8Uca_modalTitle{margin:0;font-size:15px;font-weight:700}.mL8Uca_modalFooter{justify-content:flex-end;gap:10px;margin-top:4px;display:flex}.mL8Uca_formError{color:var(--dsw-alias-state-error-primary);margin:0;font-size:12px}.mL8Uca_hint{color:var(--dsw-alias-label-tertiary);font-size:11.5px}.mL8Uca_field{flex-direction:column;gap:5px;display:flex}.mL8Uca_fieldLabel{color:var(--dsw-alias-label-secondary);font-size:12px;font-weight:600}.mL8Uca_input{color:var(--dsw-alias-label-primary);background:var(--dsw-specific-input-major);border:1px solid var(--dsw-alias-border-l2);resize:vertical;border-radius:8px;outline:none;padding:7px 10px;font-family:inherit;font-size:13px}.mL8Uca_input:focus{border-color:var(--dsw-alias-state-business-primary)}.mL8Uca_input::placeholder{color:var(--dsw-alias-label-tertiary)}.mL8Uca_input:disabled{opacity:.55}.mL8Uca_formRow{grid-template-columns:repeat(auto-fit,minmax(180px,1fr));gap:10px 12px;display:grid}.mL8Uca_radioRow{align-items:center;gap:16px;display:flex}.mL8Uca_radioLabel{color:var(--dsw-alias-label-primary);cursor:pointer;align-items:center;gap:6px;font-size:13px;display:inline-flex}.mL8Uca_termBody{flex-direction:column;flex:1;gap:8px;min-height:0;display:flex;overflow:hidden}.mL8Uca_termWrap{border:1px solid var(--dsw-alias-border-l1);background:#0b0e14;border-radius:10px;flex:1;min-height:0;position:relative;overflow:hidden}.mL8Uca_termContainer{position:absolute;inset:8px 10px}.mL8Uca_termPlaceholder{z-index:2;text-align:center;color:var(--dsw-alias-label-tertiary);background:var(--dsw-alias-bg-base);justify-content:center;align-items:center;padding:0 24px;font-size:12.5px;display:flex;position:absolute;inset:0}.mL8Uca_hiddenFile{display:none}.mL8Uca_browsePanel{border:1px solid var(--dsw-alias-border-l1);border-radius:10px;flex-direction:column;flex:none;display:flex;overflow:hidden}.mL8Uca_browseHeader{background:var(--dsw-alias-bg-layer-2);border-bottom:1px solid var(--dsw-alias-border-l1);align-items:center;gap:8px;padding:8px 10px;display:flex}.mL8Uca_browsePath{text-overflow:ellipsis;white-space:nowrap;min-width:0;color:var(--dsw-alias-label-secondary);flex:1;font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;font-size:12px;overflow:hidden}.mL8Uca_browseList{max-height:240px;overflow-y:auto}.mL8Uca_dirRow{text-align:left;width:100%;font:inherit;color:var(--dsw-alias-label-primary);border:none;border-bottom:1px solid var(--dsw-alias-separator-primary);cursor:pointer;background:0 0;grid-template-columns:minmax(0,1fr) auto auto;gap:12px;padding:5px 10px;font-size:12.5px;display:grid}.mL8Uca_dirRow:hover{background:var(--dsw-alias-interactive-bg-hover)}.mL8Uca_dirRow[data-type=dir] .mL8Uca_dirName{color:var(--dsw-alias-state-business-primary)}.mL8Uca_dirRow[data-up]{color:var(--dsw-alias-label-secondary)}.mL8Uca_dirName{text-overflow:ellipsis;white-space:nowrap;font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;overflow:hidden}.mL8Uca_dirType{color:var(--dsw-alias-label-tertiary);white-space:nowrap}.mL8Uca_dirSize{color:var(--dsw-alias-label-tertiary);white-space:nowrap;text-align:right}.mL8Uca_transferBlock{flex-direction:column;flex:none;gap:6px;display:flex}.mL8Uca_progressMeta{color:var(--dsw-alias-label-secondary);flex-wrap:wrap;gap:12px;font-size:12px;display:flex}.mL8Uca_progressTrack{background:var(--dsw-alias-interactive-bg-hover);border-radius:999px;height:8px;overflow:hidden}.mL8Uca_progressBar{background:var(--dsw-alias-state-business-primary);border-radius:999px;height:100%;transition:width .12s linear}.mL8Uca_tunnelList{flex-direction:column;flex:none;gap:8px;display:flex}.mL8Uca_tunnelRow{background:var(--dsw-alias-bg-layer-2);border:1px solid var(--dsw-alias-border-l2);border-radius:10px;align-items:center;gap:10px;padding:8px 12px;display:flex}.mL8Uca_tunnelRow[data-state=forwarding]{border-color:var(--dsw-alias-state-success-primary)}.mL8Uca_tunnelRow[data-state=connecting]{border-color:var(--dsw-alias-state-warn-primary)}.mL8Uca_tunnelRow[data-state=failed]{border-color:var(--dsw-alias-state-error-primary)}.mL8Uca_tunnelLabel{text-overflow:ellipsis;white-space:nowrap;flex:1;min-width:0;font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;font-size:12.5px;overflow:hidden}.mL8Uca_formCard{background:var(--dsw-alias-bg-layer-2);border:1px solid var(--dsw-alias-border-l1);border-radius:10px;flex-direction:column;flex:none;gap:10px;padding:12px;display:flex}.mL8Uca_clusterForm{flex-direction:column;flex:none;gap:8px;display:flex}.mL8Uca_clusterFilters{grid-template-columns:repeat(auto-fit,minmax(160px,1fr));gap:10px;display:grid}.mL8Uca_commandInput{min-height:96px;font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace}.mL8Uca_cellDetails summary{cursor:pointer;color:var(--dsw-alias-label-secondary);font-size:12px}.mL8Uca_cellPre{background:var(--dsw-alias-bg-layer-2);border:1px solid var(--dsw-alias-border-l2);white-space:pre-wrap;word-break:break-all;border-radius:6px;max-height:180px;margin:4px 0 0;padding:6px 8px;font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;font-size:11.5px;overflow:auto}";
@@ -14786,6 +14807,8 @@ window.__ModuleLoader__.load({
 			const [hosts, setHosts] = (0, react.useState)([]);
 			const [alias, setAlias] = (0, react.useState)(presetAlias ?? "");
 			const [status, setStatus] = (0, react.useState)({ kind: "idle" });
+			const [authPrompt, setAuthPrompt] = (0, react.useState)(void 0);
+			const [authInputs, setAuthInputs] = (0, react.useState)([]);
 			const containerRef = (0, react.useRef)(null);
 			const termRef = (0, react.useRef)(null);
 			const fitRef = (0, react.useRef)(null);
@@ -14826,12 +14849,15 @@ window.__ModuleLoader__.load({
 				if (presetAlias !== void 0) setAlias(presetAlias);
 			}, [presetAlias, requestId]);
 			const teardown = () => {
+				setAuthPrompt(void 0);
+				setAuthInputs([]);
 				const connection = connRef.current;
 				connRef.current = null;
 				if (connection !== null) {
 					connection.onReady = void 0;
 					connection.onOutput = void 0;
 					connection.onExit = void 0;
+					connection.onAuthPrompt = void 0;
 					connection.close();
 				}
 				dataSubRef.current?.dispose();
@@ -14902,7 +14928,17 @@ window.__ModuleLoader__.load({
 				dataSubRef.current = term.onData((data) => {
 					connection.send(data);
 				});
+				connection.onAuthPrompt = (name, instructions, prompts) => {
+					setAuthPrompt({
+						name,
+						instructions,
+						prompts
+					});
+					setAuthInputs(prompts.map(() => ""));
+				};
 				connection.onReady = () => {
+					setAuthPrompt(void 0);
+					setAuthInputs([]);
 					setStatus({
 						kind: "connected",
 						alias: target
@@ -14914,6 +14950,8 @@ window.__ModuleLoader__.load({
 				connection.onExit = (_code, error) => {
 					if (settled) return;
 					settled = true;
+					setAuthPrompt(void 0);
+					setAuthInputs([]);
 					dataSubRef.current?.dispose();
 					dataSubRef.current = null;
 					term.options.disableStdin = true;
@@ -14929,6 +14967,12 @@ window.__ModuleLoader__.load({
 				teardown();
 				setStatus({ kind: "idle" });
 			};
+			const submitAuth = (e) => {
+				e?.preventDefault();
+				if (connRef.current === null || authPrompt === void 0) return;
+				connRef.current.sendAuthResponse(authInputs);
+				setAuthPrompt(void 0);
+			};
 			const active = status.kind === "connecting" || status.kind === "connected";
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 				className: panel_module_css_default.termBody,
@@ -14993,14 +15037,73 @@ window.__ModuleLoader__.load({
 					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 						className: panel_module_css_default.termWrap,
-						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-							ref: containerRef,
-							className: panel_module_css_default.termContainer,
-							"data-dsh-part": "terminal"
-						}), status.kind === "idle" && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
-							className: panel_module_css_default.termPlaceholder,
-							children: hosts.length === 0 ? tt("hosts.empty") : tt("terminal.placeholder")
-						})]
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+								ref: containerRef,
+								className: panel_module_css_default.termContainer,
+								"data-dsh-part": "terminal"
+							}),
+							status.kind === "idle" && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+								className: panel_module_css_default.termPlaceholder,
+								children: hosts.length === 0 ? tt("hosts.empty") : tt("terminal.placeholder")
+							}),
+							authPrompt !== void 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+								className: panel_module_css_default.modalBackdrop,
+								style: {
+									position: "absolute",
+									zIndex: 10
+								},
+								children: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("form", {
+									className: panel_module_css_default.modalCard,
+									style: { maxWidth: 420 },
+									onSubmit: submitAuth,
+									children: [
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+											className: panel_module_css_default.modalHeader,
+											children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("h3", {
+												className: panel_module_css_default.modalTitle,
+												children: authPrompt.name || tt("terminal.auth.title")
+											})
+										}),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+											className: panel_module_css_default.hint,
+											children: authPrompt.instructions || tt("terminal.auth.hint")
+										}),
+										authPrompt.prompts.map((p, idx) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
+											className: panel_module_css_default.field,
+											children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+												className: panel_module_css_default.fieldLabel,
+												children: p.prompt.trim() || tt("terminal.auth.title")
+											}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+												autoFocus: idx === 0,
+												className: panel_module_css_default.input,
+												type: p.echo ? "text" : "password",
+												placeholder: tt("terminal.auth.placeholder"),
+												value: authInputs[idx] ?? "",
+												onChange: (event) => {
+													const next = [...authInputs];
+													next[idx] = event.target.value;
+													setAuthInputs(next);
+												}
+											})]
+										}, idx)),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+											className: panel_module_css_default.modalFooter,
+											children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+												type: "button",
+												className: panel_module_css_default.ghostButton,
+												onClick: disconnect,
+												children: tt("terminal.auth.cancel")
+											}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+												type: "submit",
+												className: panel_module_css_default.primaryButton,
+												children: tt("terminal.auth.submit")
+											})]
+										})
+									]
+								})
+							})
+						]
 					})
 				]
 			});
@@ -15982,7 +16085,7 @@ window.__ModuleLoader__.load({
 		/** The building package's version, when the bundle carries it. */
 		function bakedVersion() {
 			try {
-				return "0.3.5";
+				return "0.3.9";
 			} catch {
 				return;
 			}