@linxin666/dsh-ssh 0.3.5 → 0.3.9

package/lib/index.js

@@ -1,4 +1,3 @@
-import { installSettingsSection, settingsNamespace } from "@deepseek-ai/dsh-settings";
 import { closeSync, createReadStream, createWriteStream, existsSync, lstatSync, mkdirSync, openSync, readFileSync, readdirSync, renameSync, statSync, writeFileSync } from "node:fs";
 import { Client } from "ssh2";
 import { homedir, tmpdir } from "node:os";
@@ -1408,7 +1407,8 @@ function buildConnectConfig(entry, sock, opts) {
 		username: entry.user,
 		readyTimeout: opts.connectTimeoutMs,
 		keepaliveInterval: opts.keepaliveIntervalMs,
-		keepaliveCountMax: 3
+		keepaliveCountMax: 3,
+		tryKeyboard: true
 	};
 	if (sock !== void 0) config.sock = sock;
 	if (entry.auth.kind === "password") config.password = entry.auth.password;
@@ -1433,7 +1433,7 @@ function resolveAgentPath(agentPath) {
 	if (process.platform === "win32") return "pageant";
 }
 /** Connect one ssh2 client (resolve on ready, reject on error/close). */
-function connectClient(config) {
+function connectClient(config, onKeyboardInteractive) {
 	return new Promise((resolve, reject) => {
 		const client = new Client();
 		let settled = false;
@@ -1450,6 +1450,20 @@ function connectClient(config) {
 			settled = true;
 			resolve(client);
 		});
+		client.on("keyboard-interactive", (name, instructions, instructionsLang, prompts, finish) => {
+			if (onKeyboardInteractive !== void 0) {
+				onKeyboardInteractive(name, instructions, instructionsLang, prompts.map((p) => ({
+					prompt: p.prompt,
+					echo: Boolean(p.echo)
+				})), finish);
+				return;
+			}
+			if (config.password !== void 0 && prompts.length > 0 && prompts.every((p) => /password/i.test(p.prompt))) {
+				finish(prompts.map(() => config.password));
+				return;
+			}
+			fail(/* @__PURE__ */ new Error("Authentication failed (keyboard-interactive): " + (prompts.map((p) => p.prompt.trim()).join(", ") || "unsupported interactive challenge")));
+		});
 		client.on("error", fail);
 		try {
 			client.connect(config);
@@ -1475,7 +1489,7 @@ function appendOutput(target, chunk, maxBytes) {
 * order, each forwarding a stream to the next destination, ending with the
 * target client. Shared by the pool and standalone shell sessions.
 */
-async function connectChain(engine, entry) {
+async function connectChain(engine, entry, onKeyboardInteractive) {
 	const hops = [];
 	let sock;
 	const chain = entry.proxyJump;
@@ -1484,7 +1498,7 @@ async function connectChain(engine, entry) {
 			const hopAlias = chain[index];
 			const hop = engine.store.find(hopAlias);
 			if (hop === void 0) throw new Error("proxyJump alias '" + hopAlias + "' not found — create it first");
-			const hopClient = await connectClient(buildConnectConfig(hop, sock, engine.opts));
+			const hopClient = await connectClient(buildConnectConfig(hop, sock, engine.opts), onKeyboardInteractive);
 			hops.push(hopClient);
 			const next = index + 1 < chain.length ? engine.store.find(chain[index + 1]) : void 0;
 			const nextHost = next !== void 0 ? next.host : entry.host;
@@ -1502,7 +1516,7 @@ async function connectChain(engine, entry) {
 	}
 	let target;
 	try {
-		target = await connectClient(buildConnectConfig(entry, sock, engine.opts));
+		target = await connectClient(buildConnectConfig(entry, sock, engine.opts), onKeyboardInteractive);
 		return {
 			client: target,
 			hops
@@ -1688,10 +1702,10 @@ async function execCommand(engine, alias, command, timeoutMs) {
 * The shell is a long-lived exclusive stream: it uses its own connection so
 * closing it can never tear down a pooled exec/tunnel sharing the alias.
 */
-async function openShell(engine, alias, size) {
+async function openShell(engine, alias, size, onKeyboardInteractive) {
 	const entry = engine.store.find(alias);
 	if (entry === void 0) throw new Error("alias '" + alias + "' not found — add it first");
-	const { client, hops } = await connectChain(engine, entry);
+	const { client, hops } = await connectChain(engine, entry, onKeyboardInteractive);
 	return await new Promise((resolve, reject) => {
 		client.shell({
 			term: "xterm-256color",
@@ -2161,8 +2175,8 @@ var SshEngine = class {
 		return cluster(this, options);
 	}
 	/** Open a PTY shell session for the web terminal (standalone connection). */
-	async openShell(alias, size) {
-		return openShell(this, alias, size);
+	async openShell(alias, size, onKeyboardInteractive) {
+		return openShell(this, alias, size, onKeyboardInteractive);
 	}
 	/** Upload one local file (or directory tree) to a remote path. */
 	async upload(alias, localPath, remotePath, recursive, onProgress) {
@@ -2796,6 +2810,7 @@ function makeRoutes(deps) {
 					let session;
 					let closed = false;
 					let paused = false;
+					let pendingAuthFinish;
 					const resume = () => {
 						if (paused && ws.bufferedAmount < BACKPRESSURE_LOW_WATER) {
 							paused = false;
@@ -2811,14 +2826,39 @@ function makeRoutes(deps) {
 						}
 					};
 					const closeSession = () => {
+						if (pendingAuthFinish !== void 0) {
+							const fn = pendingAuthFinish;
+							pendingAuthFinish = void 0;
+							try {
+								fn([]);
+							} catch {}
+						}
 						const opened = session;
 						session = void 0;
 						if (opened !== void 0) opened.close();
 					};
+					const onKeyboardInteractive = (name, instructions, _lang, prompts, finish) => {
+						const entry = store.find(alias);
+						if (entry?.auth.kind === "password" && entry.auth.password !== void 0 && prompts.length > 0 && prompts.every((p) => /password/i.test(p.prompt))) {
+							const password = entry.auth.password;
+							finish(prompts.map(() => password));
+							return;
+						}
+						pendingAuthFinish = finish;
+						sendFrame({
+							type: "auth_prompt",
+							name,
+							instructions,
+							prompts: prompts.map((p) => ({
+								prompt: p.prompt,
+								echo: p.echo
+							}))
+						});
+					};
 					engine.openShell(alias, {
 						cols: Number.isFinite(cols) ? cols : 80,
 						rows: Number.isFinite(rows) ? rows : 24
-					}).then((opened) => {
+					}, onKeyboardInteractive).then((opened) => {
 						if (ws.readyState !== WebSocket.OPEN) {
 							opened.close();
 							return;
@@ -2863,6 +2903,13 @@ function makeRoutes(deps) {
 						}
 						if (frame.type === "input") session?.send(frame.data);
 						else if (frame.type === "resize") session?.resize(Math.max(2, frame.cols), Math.max(1, frame.rows));
+						else if (frame.type === "auth_response") {
+							if (pendingAuthFinish !== void 0) {
+								const fn = pendingAuthFinish;
+								pendingAuthFinish = void 0;
+								fn(frame.responses);
+							}
+						}
 					});
 					ws.on("close", () => {
 						closed = true;
@@ -3512,7 +3559,7 @@ const inject = [
 * surface edits. Spelled here rather than imported: the browser half spells
 * the same value and must not depend on a Host package.
 */
-const SSH_SETTINGS_NAMESPACE = settingsNamespace("dsh-ssh");
+const SSH_SETTINGS_NAMESPACE = "dsh-ssh";
 const Config = import_lib.default.object({
 	announceToAgent: import_lib.default.boolean().default(false),
 	enabled: import_lib.default.boolean().default(true),
@@ -3532,18 +3579,21 @@ const SSH_GUIDANCE = "本机已安装 dsh-ssh 插件（DSH 远程 SSH 运维）
 const apply = mountOnce("@linxin666/dsh-ssh", applyImpl);
 function applyImpl(ctx, config) {
 	let current = () => config ?? {};
+	let isSettingsBound = false;
+	const store = new HostStore();
+	const engine = new SshEngine(store);
+	ctx.effect(() => () => {
+		engine.dispose();
+	}, "dsh-ssh: engine");
 	const resolve = () => {
 		const value = current();
+		let enabled = value.enabled ?? true;
+		if (enabled === false && !isSettingsBound && store.list().length > 0) enabled = true;
 		return {
 			announceToAgent: value.announceToAgent ?? DEFAULT_ANNOUNCE,
-			enabled: value.enabled ?? true
+			enabled
 		};
 	};
-	const store = new HostStore();
-	const engine = new SshEngine(store);
-	ctx.effect(() => () => {
-		engine.dispose();
-	}, "dsh-ssh: engine");
 	const { routes, upgrade } = makeRoutes({
 		store,
 		engine
@@ -3594,12 +3644,15 @@ function applyImpl(ctx, config) {
 			};
 		}, "dsh-ssh: tools");
 	};
-	installSettingsSection(ctx, SSH_SETTINGS_NAMESPACE, Config, config ?? {}, {
-		setSource: (source) => {
-			current = source;
-			sync();
-		},
-		onChange: sync
+	ctx.inject(["settings"], (settingsCtx) => {
+		settingsCtx.settings.installSection(ctx, SSH_SETTINGS_NAMESPACE, Config, config ?? {}, {
+			setSource: (source) => {
+				isSettingsBound = true;
+				current = source;
+				sync();
+			},
+			onChange: sync
+		});
 	});
 	sync();
 }

package/lib/types/client/api.d.ts

@@ -15,10 +15,17 @@ export interface TerminalConnection {
     onOutput: ((data: string) => void) | undefined;
     /** Fired on the exit frame (or transport error). */
     onExit: ((code: number | null, error?: string) => void) | undefined;
+    /** Fired when the server requests keyboard-interactive 2FA. */
+    onAuthPrompt: ((name: string, instructions: string, prompts: Array<{
+        prompt: string;
+        echo: boolean;
+    }>) => void) | undefined;
     /** Send raw input to the remote shell. */
     send(data: string): void;
     /** Resize the remote PTY. */
     resize(cols: number, rows: number): void;
+    /** Send interactive 2FA response codes to the remote server. */
+    sendAuthResponse(responses: string[]): void;
     /** Close the socket and the remote session. */
     close(): void;
 }

package/lib/types/client/index.d.ts

@@ -10,7 +10,8 @@
  * Export discipline (packages/client rule): the /client surface carries what
  * cordis loading needs plus types only — all value exports stay internal.
  */
-import type { ClientContext, SettingsScope, SettingsScopeSpec } from '@deepseek-ai/dsh-client-runtime/client';
+import type { Context as ClientContext } from '@deepseek-ai/cordis';
+import type { SettingsScope, SettingsScopeSpec } from '@deepseek-ai/dsh-client-ui-settings/client';
 import { type SshKey } from './locales.ts';
 declare module '@deepseek-ai/cordis' {
     interface Context {

package/lib/types/client/locales.d.ts

@@ -81,6 +81,11 @@ export declare const zh: {
     readonly 'terminal.ready': "终端已连接（{alias}）";
     readonly 'terminal.exited': "终端已退出（{alias}）";
     readonly 'terminal.error': "终端错误：{error}";
+    readonly 'terminal.auth.title': "二次身份验证 (2FA / 交互式认证)";
+    readonly 'terminal.auth.submit': "提交验证码";
+    readonly 'terminal.auth.cancel': "取消";
+    readonly 'terminal.auth.placeholder': "请输入验证码或口令";
+    readonly 'terminal.auth.hint': "服务器请求进行交互式二次验证（输入仅本次生效，不落盘）：";
     readonly 'transfer.selectHost': "选择主机";
     readonly 'transfer.remotePath': "远程路径";
     readonly 'transfer.remotePathHint': "如 /tmp/ 或 /home/user/app.tar.gz";
@@ -141,6 +146,7 @@ export declare const zh: {
     readonly 'common.error': "出错：{error}";
     readonly 'common.refresh': "刷新";
     readonly 'common.confirm': "确定";
+    readonly 'error.disabled': "SSH 插件在宿主端未启用。请前往「设置 → Web 插件 → SSH」打开 enabled 开关。";
 };
 export declare const en: Record<keyof typeof zh, string>;
 /** Locale key union. */

package/lib/types/engine/connection-pool.d.ts

@@ -50,8 +50,13 @@ export interface PoolEngine {
 export declare function buildConnectConfig(entry: SshHostEntry, sock: ConnectConfig['sock'] | undefined, opts: Required<EngineOptions>): ConnectConfig;
 /** Resolve the ssh2 agent path for 'agent' auth. */
 export declare function resolveAgentPath(agentPath?: string): string | undefined;
+/** Keyboard-interactive handler callback for 2FA / dynamic prompt flow. */
+export type KeyboardInteractiveHandler = (name: string, instructions: string, instructionsLang: string, prompts: Array<{
+    prompt: string;
+    echo: boolean;
+}>, finish: (responses: string[]) => void) => void;
 /** Connect one ssh2 client (resolve on ready, reject on error/close). */
-export declare function connectClient(config: ConnectConfig): Promise<Client>;
+export declare function connectClient(config: ConnectConfig, onKeyboardInteractive?: KeyboardInteractiveHandler): Promise<Client>;
 /** Cap captured output at the configured byte budget (marks truncation). */
 export declare function appendOutput(target: {
     text: string;
@@ -62,7 +67,7 @@ export declare function appendOutput(target: {
  * order, each forwarding a stream to the next destination, ending with the
  * target client. Shared by the pool and standalone shell sessions.
  */
-export declare function connectChain(engine: PoolEngine, entry: SshHostEntry): Promise<{
+export declare function connectChain(engine: PoolEngine, entry: SshHostEntry, onKeyboardInteractive?: KeyboardInteractiveHandler): Promise<{
     client: Client;
     hops: Client[];
 }>;

package/lib/types/engine/pty.d.ts

@@ -3,7 +3,7 @@
  * ssh2 connection with a long-lived shell channel, resize, and pausable
  * output delivery.
  */
-import { type PoolEngine } from './connection-pool.ts';
+import { type KeyboardInteractiveHandler, type PoolEngine } from './connection-pool.ts';
 /** A live PTY shell session. */
 export interface ShellSession {
     /** Assign to receive remote output. */
@@ -29,4 +29,4 @@ export interface ShellSession {
 export declare function openShell(engine: PoolEngine, alias: string, size: {
     cols: number;
     rows: number;
-}): Promise<ShellSession>;
+}, onKeyboardInteractive?: KeyboardInteractiveHandler): Promise<ShellSession>;

package/lib/types/engine.d.ts

@@ -7,10 +7,10 @@
  */
 import type { ClusterResult, ExecResult, SshHostSummary, TestResult, TransferProgress, TunnelInfo } from './protocol.ts';
 import type { HostStore } from './store.ts';
-import { type EngineOptions, type PoolRecord } from './engine/connection-pool.ts';
+import { type EngineOptions, type KeyboardInteractiveHandler, type PoolRecord } from './engine/connection-pool.ts';
 import { type ShellSession } from './engine/pty.ts';
 import { type TunnelRecord } from './engine/tunnel.ts';
-export type { EngineOptions } from './engine/connection-pool.ts';
+export type { EngineOptions, KeyboardInteractiveHandler } from './engine/connection-pool.ts';
 export type { ShellSession } from './engine/pty.ts';
 export type { PoolRecord } from './engine/connection-pool.ts';
 export type { TunnelRecord } from './engine/tunnel.ts';
@@ -50,7 +50,7 @@ export declare class SshEngine {
     openShell(alias: string, size: {
         cols: number;
         rows: number;
-    }): Promise<ShellSession>;
+    }, onKeyboardInteractive?: KeyboardInteractiveHandler): Promise<ShellSession>;
     /** Upload one local file (or directory tree) to a remote path. */
     upload(alias: string, localPath: string, remotePath: string, recursive: boolean, onProgress?: (progress: TransferProgress) => void): Promise<{
         bytes: number;

package/lib/types/index.d.ts

@@ -8,6 +8,7 @@
  * no dsh source changes.
  */
 import type { Context } from '@deepseek-ai/cordis';
+import type { SettingsNamespace } from '@deepseek-ai/dsh-settings';
 import z from 'schemastery';
 /** Stable cordis plugin name. */
 export declare const name = "ssh";
@@ -18,7 +19,7 @@ export declare const inject: string[];
  * surface edits. Spelled here rather than imported: the browser half spells
  * the same value and must not depend on a Host package.
  */
-export declare const SSH_SETTINGS_NAMESPACE: import("@deepseek-ai/dsh-settings").SettingsNamespace;
+export declare const SSH_SETTINGS_NAMESPACE: SettingsNamespace;
 /** Plugin config, validated by the same-named schemastery schema. */
 export interface Config {
     /**

package/lib/types/protocol.d.ts

@@ -160,6 +160,14 @@ export type TerminalServerFrame = {
     type: 'exit';
     code: number | null;
     error?: string;
+} | {
+    type: 'auth_prompt';
+    name: string;
+    instructions: string;
+    prompts: Array<{
+        prompt: string;
+        echo: boolean;
+    }>;
 };
 export type TerminalClientFrame = {
     type: 'input';
@@ -168,6 +176,9 @@ export type TerminalClientFrame = {
     type: 'resize';
     cols: number;
     rows: number;
+} | {
+    type: 'auth_response';
+    responses: string[];
 };
 /** Route paths the client calls (shared literals). */
 export declare const SSH_API_BASE: "/api/dsh-ssh";

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@linxin666/dsh-ssh",
   "description": "Remote SSH operations for the dsh web GUI: host config store (~/.dsh/dsh-ssh.json, import from ~/.ssh/config), a persistent ssh2 connection pool with jump-host support, exec / PTY web terminal / SFTP transfer / local port-forward tunnels / cluster execution, plus agent tools (ssh_list, ssh_exec, ssh_upload, ssh_download, ssh_tunnel, ssh_cluster). Hot-pluggable — mounted via ~/.dsh/cordis.patch.yml + a profile node_modules symlink, no dsh source changes.",
-  "version": "0.3.5",
+  "version": "0.3.9",
   "type": "module",
   "engines": {
     "node": "^22.19.0 || >=24.0.0"
@@ -26,15 +26,15 @@
   },
   "dsh": {
     "engines": {
-      "dsh": ">=0.1.1-rc.1"
+      "dsh": ">=0.1.2-alpha.1"
     },
     "bundle": {
       "patch": "./cordis.patch.yml"
     },
     "client": {
       "inject": [
-        "@deepseek-ai/dsh-client-runtime",
-        "@deepseek-ai/dsh-client-connection",
+        "@deepseek-ai/dsh-client-locale",
+        "@deepseek-ai/dsh-client-ui-renderer",
         "@deepseek-ai/dsh-client-ui-settings"
       ],
       "platform": "web"
@@ -51,19 +51,19 @@
     "react-dom": "^18.2.0"
   },
   "devDependencies": {
-    "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-client-connection": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-locale": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-runtime": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-settings": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-client-ui-slots": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-host-webserver": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-llm": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-scope": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-settings": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-system-prompt": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-timeout": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-tools": "^0.1.1-rc.2",
+    "@deepseek-ai/cordis": "^4.0.2",
+    "@deepseek-ai/dsh-client-connection": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-client-locale": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-client-ui-renderer": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-client-ui-settings": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-client-ui-slots": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-host-webserver": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-llm": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-scope": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-settings": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-system-prompt": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-timeout": "^0.1.2-alpha.2",
+    "@deepseek-ai/dsh-tools": "^0.1.2-alpha.2",
     "@types/node": "^22.20.0",
     "@types/react": "~18.3.1",
     "@types/react-dom": "^18.3.5",

package/src/client/api.ts

@@ -18,6 +18,7 @@ import {
   type TransferStreamLine,
   type TunnelInfo,
 } from '../protocol.ts'
+import { tt } from './panel/helpers.ts'
 
 /** Minimal File System Access API surface (not in all lib.dom versions). */
 interface WindowWithFileSystemAccess {
@@ -51,12 +52,15 @@ async function readJson<T>(response: Response): Promise<T> {
   try {
     body = await response.json()
   } catch {
+    if (response.status === 404) {
+      throw new SshApiError(tt('error.disabled'))
+    }
     throw new SshApiError(`HTTP ${response.status}: invalid JSON response`)
   }
   if (!response.ok) {
     const message = typeof body === 'object' && body !== null && typeof (body as { error?: unknown }).error === 'string'
       ? (body as { error: string }).error
-      : `HTTP ${response.status}`
+      : (response.status === 404 ? tt('error.disabled') : `HTTP ${response.status}`)
     throw new SshApiError(message)
   }
   return body as T
@@ -80,10 +84,14 @@ export interface TerminalConnection {
   onOutput: ((data: string) => void) | undefined
   /** Fired on the exit frame (or transport error). */
   onExit: ((code: number | null, error?: string) => void) | undefined
+  /** Fired when the server requests keyboard-interactive 2FA. */
+  onAuthPrompt: ((name: string, instructions: string, prompts: Array<{ prompt: string; echo: boolean }>) => void) | undefined
   /** Send raw input to the remote shell. */
   send(data: string): void
   /** Resize the remote PTY. */
   resize(cols: number, rows: number): void
+  /** Send interactive 2FA response codes to the remote server. */
+  sendAuthResponse(responses: string[]): void
   /** Close the socket and the remote session. */
   close(): void
 }
@@ -345,6 +353,7 @@ export class SshApi {
       onReady: undefined,
       onOutput: undefined,
       onExit: undefined,
+      onAuthPrompt: undefined,
       send: (data) => {
         if (socket.readyState === WebSocket.OPEN) {
           socket.send(JSON.stringify({ type: 'input', data } satisfies TerminalClientFrame))
@@ -355,6 +364,11 @@ export class SshApi {
           socket.send(JSON.stringify({ type: 'resize', cols, rows } satisfies TerminalClientFrame))
         }
       },
+      sendAuthResponse: (responses) => {
+        if (socket.readyState === WebSocket.OPEN) {
+          socket.send(JSON.stringify({ type: 'auth_response', responses } satisfies TerminalClientFrame))
+        }
+      },
       close: () => {
         try { socket.close() } catch { /* already closed */ }
       },
@@ -369,6 +383,7 @@ export class SshApi {
       if (frame.type === 'ready') connection.onReady?.()
       else if (frame.type === 'output') connection.onOutput?.(frame.data)
       else if (frame.type === 'exit') connection.onExit?.(frame.code, frame.error)
+      else if (frame.type === 'auth_prompt') connection.onAuthPrompt?.(frame.name, frame.instructions, frame.prompts)
     }
     socket.onclose = () => { connection.onExit?.(null, 'connection closed') }
     socket.onerror = () => { connection.onExit?.(null, 'connection error') }

package/src/client/index.ts

@@ -10,11 +10,14 @@
  * Export discipline (packages/client rule): the /client surface carries what
  * cordis loading needs plus types only — all value exports stay internal.
  */
-import type { ClientContext, SettingsScope, SettingsScopeSpec } from '@deepseek-ai/dsh-client-runtime/client'
+import type { Context as ClientContext } from '@deepseek-ai/cordis'
+import type { SettingsScope, SettingsScopeSpec } from '@deepseek-ai/dsh-client-ui-settings/client'
 // Type-only: pulls the locale plugin's Context merge (ctx.locale).
 import type {} from '@deepseek-ai/dsh-client-locale/client'
 // Type-only: pulls the settings-surface Context merge (ctx.settingsScope).
 import type {} from '@deepseek-ai/dsh-client-ui-settings/client'
+// Type-only: pulls the ctx.slots merge (the renderer owns the slot registry since 0.1.2).
+import type {} from '@deepseek-ai/dsh-client-ui-renderer/client'
 // Type-only: pulls the LocaleNamespaceMap merge table.
 import type {} from '@deepseek-ai/dsh-client-ui-slots'
 import { SshApi } from './api.ts'

package/src/client/locales.ts

@@ -85,6 +85,11 @@ export const zh = {
   'terminal.ready': '终端已连接（{alias}）',
   'terminal.exited': '终端已退出（{alias}）',
   'terminal.error': '终端错误：{error}',
+  'terminal.auth.title': '二次身份验证 (2FA / 交互式认证)',
+  'terminal.auth.submit': '提交验证码',
+  'terminal.auth.cancel': '取消',
+  'terminal.auth.placeholder': '请输入验证码或口令',
+  'terminal.auth.hint': '服务器请求进行交互式二次验证（输入仅本次生效，不落盘）：',
   // transfer
   'transfer.selectHost': '选择主机',
   'transfer.remotePath': '远程路径',
@@ -149,6 +154,7 @@ export const zh = {
   'common.error': '出错：{error}',
   'common.refresh': '刷新',
   'common.confirm': '确定',
+  'error.disabled': 'SSH 插件在宿主端未启用。请前往「设置 → Web 插件 → SSH」打开 enabled 开关。',
 } as const
 
 export const en: Record<keyof typeof zh, string> = {
@@ -231,6 +237,11 @@ export const en: Record<keyof typeof zh, string> = {
   'terminal.ready': 'Terminal connected ({alias})',
   'terminal.exited': 'Terminal exited ({alias})',
   'terminal.error': 'Terminal error: {error}',
+  'terminal.auth.title': 'Two-Factor Authentication (2FA)',
+  'terminal.auth.submit': 'Submit Code',
+  'terminal.auth.cancel': 'Cancel',
+  'terminal.auth.placeholder': 'Enter code or passphrase',
+  'terminal.auth.hint': 'The server requested interactive 2FA (session only, never saved):',
   'transfer.selectHost': 'Select host',
   'transfer.remotePath': 'Remote path',
   'transfer.remotePathHint': 'e.g. /tmp/ or /home/user/app.tar.gz',
@@ -291,6 +302,7 @@ export const en: Record<keyof typeof zh, string> = {
   'common.error': 'Error: {error}',
   'common.refresh': 'Refresh',
   'common.confirm': 'Confirm',
+  'error.disabled': 'The SSH plugin is disabled on the host. Please enable it in Settings → Web Plugins → SSH.',
 }
 
 /** Locale key union. */