@minato-aqukin/autodl-cli 0.1.1 → 0.2.0

package/README.md

@@ -49,10 +49,10 @@ being saved, and you land on the dashboard. Once configured, `autodl` goes strai
 
 A live table of your instances: status, GPU, region, **how long each has been powered on
 and roughly what that has cost**, and how much TTL is left. Keys: `↑↓` move, `Enter`
-detail, `s` start, `x` stop, `c` copy the SSH command to the clipboard, `ctrl+d` release, `g` GPU stock,
-`n` new instance, `r` refresh, `ctrl+l` log out, `q` quit. The two that change or destroy
-something take ctrl rather than a bare key; shift makes no difference to either, and the
-hints are printed all-lowercase so they do not read as bindings you hold shift for.
+detail, `s` start, `x` stop, `ctrl+d` release, `g` stock,
+`r` refresh, `ctrl+l` log out, `?` help, `q` quit. Release and logout require confirmation.
+The detail screen (`Enter`) owns the per-instance keys: `h` automatically authenticated
+SSH, `f` files, `t` transfers, `c` copy the SSH command, `n` new instance.
 
 `ctrl+d` release wipes the instance permanently, which is why it is not a bare `d`.
 
@@ -61,6 +61,10 @@ it says so when `AUTODL_TOKEN` or `--token` will outrank whatever you save next.
 API rejects the token while the dashboard is open — expired, reset, verification lapsed —
 polling stops and the same login screen is one keystroke away, rather than leaving a
 frozen table above an endless stream of 401s.
+Re-login keeps the same token precedence: `--token` › `AUTODL_TOKEN` › saved token.
+Saving a different token does not switch accounts while an override is active. If that
+override is invalid, remove or update it and restart the TUI; it will not silently fall
+back to the saved account. Authentication failures from GPU stock queries also end the session.
 
 It fills the terminal and shows your account id and balance in the header. Copying with
 `c` puts only the SSH command on the clipboard — never the root password, which any
@@ -78,11 +82,69 @@ Two deliberate honesty constraints. A rate is only knowable from a **running** i
 snapshot, so a stopped instance shows elapsed time and no money — inventing a number
 would be worse than showing none. And while a rate is still loading the total says so
 rather than quietly under-reporting.
+Account runway stays pending until every running instance's rate is known; an unknown
+rate is never treated as free compute. On short terminals, including 80×24, the resource
+and billing panels are hidden when their stacked layout would obscure the instance list
+or keyboard hints.
 
 The TUI never runs in a pipe, in CI, or under `--json`: it exits with code 2 and an
 explanation instead of taking over a terminal that isn't there. A bare `autodl` outside
 an interactive terminal still prints help exactly as before.
 
+### SSH and file management
+
+Open the detail screen (`Enter`) and press `h`: it hands the entire terminal to a
+password-authenticated SSH session and restores the dashboard on exit or disconnect;
+this is not an embedded terminal. Credentials are
+fetched live and never placed in command arguments, logs, or transfer records.
+The CLI equivalent is `autodl ssh <id> --auto-auth`. This mode uses ssh2, not OpenSSH
+configuration. Keep using ordinary `autodl ssh <id>` for `~/.ssh/config`, agents and
+forwarding such as `-L`. The implementation uses cross-platform Node.js terminal and
+filesystem interfaces for Linux, macOS and native Windows; sshpass is not required.
+
+On the detail screen, `f` opens local/remote panes; narrow terminals show the active pane. `Tab` switches
+sides, arrows and Enter navigate, Space selects multiple entries, and `a` selects all.
+`g` accepts a directory path; `p` accepts source/destination paths directly.
+`u` transfers the selection to the opposite pane after confirming direction.
+`m` creates directories, `r` renames or moves within one side, and `x` permanently
+deletes after confirmation. `Q` opens the queue; Esc returns.
+
+Relative paths resolve against their corresponding pane. Selected source basenames
+are preserved: copying `project` into `/root/work` produces `/root/work/project`.
+The browser transfers explicitly selected directory contents, without the legacy
+`push` command's ignore rules. Symlinks and special files are skipped; queue details
+offer `v` to browse every skipped entry.
+
+Ordinary conflicts pause for `o` overwrite, `s` skip, or `b` keep both; `a` applies the
+choice to remaining conflicts in this task. Toggle `s` in the browser to synchronize
+one way: skip unchanged files, replace changed files in full, and **never delete
+destination-only files**. Size/mtime comparison is the default; `c` enables SHA-256
+comparison. Checksumming reads both files; remote contents are streamed over SFTP,
+so strict checking can cost as much bandwidth as downloading the files.
+
+The session queue is serial, with byte progress, speed, cancellation (`c`), details
+(Enter), and manual resume (`r`). Recoverable transport failures have bounded retries;
+authentication failures and powered-off instances pause instead. Starting a stopped
+instance to open SSH/files or resume a task always requires a billing confirmation.
+Automatic reconnect never powers an instance on.
+The file view holds one browsing connection for list/mkdir/rename/remove; directory
+contents are always read live, a dead connection reconnects on the next operation,
+and leaving the view releases it.
+The CLI `files` and `queue` commands share the same queue records: a task added via
+`queue add` can be confirmed and resumed from the dashboard, and vice versa.
+
+Transfers write same-directory `.autodl-*.part` files and commit only after completion,
+preserving existing destinations on interruption. Resume validates the source version
+and partial prefix, restarting changed/corrupt files. Remote replacement requires the
+OpenSSH atomic-rename extension; unsupported servers fail without deleting the old file.
+Credential-free records live under the config directory's `transfers/`, scoped by
+account and API endpoint. Exit/logout pauses unfinished work. Restored tasks require
+manual resume: **nothing runs in the background after exit**. Only one process may
+mutate an account's queue; dead-process ownership claims are recoverable.
+Cancelled tasks retain partial data; remove their `.part` files and local checkpoints
+only when you no longer need to resume them.
+
+
 ## Setup
 
 The official API needs a developer token from an **identity-verified** account
@@ -258,6 +320,9 @@ Stable across minor versions. Breaking changes require a major.
 
 **stdout in `--json` mode is pure JSON.** Progress, prompts and warnings all go to
 stderr, so `autodl ... --json | jq` is always safe.
+Unknown commands, unknown options and missing arguments use exit code 2 with a `USAGE`
+error, including a JSON error object when `--json` is enabled. `tui --json` follows the
+same error contract; explicit help and version requests still print their normal text.
 
 ```jsonc
 // success
@@ -292,9 +357,10 @@ stderr, so `autodl ... --json | jq` is always safe.
 | `info <id> [--show-password]` | Details, live SSH info, resource usage |
 | `create --gpu <spec>` | Create a pay-as-you-go Pro instance |
 | `start` / `stop` / `rm <id>` | Power on / off / release |
-| `ssh <id>` | Interactive login (extra flags pass through to `ssh`) |
+| `ssh <id> [--auto-auth]` | System OpenSSH with extra flags, or automatic instance-password authentication |
 | `exec <id> <cmd…>` | Run a command, stream output, propagate exit code |
-| `push` / `pull <id>` | SFTP transfer, recursive, respects ignore files |
+| `files ls/mkdir/mv/rm <id>` | Browse and manage instance files (SFTP, reused connection) |
+| `queue add/ls/resume/cancel/resolve` | Serial transfer queue, shared with the dashboard |
 | `run <cmd…>` | Create → sync → run → fetch → power off |
 | `deploy <repo>` | Create → clone → install deps → start → **stop, keeping data** |
 | `stock [--gpu] [--region]` | Live GPU stock per region |

package/README.zh-CN.md

@@ -43,9 +43,10 @@ autodl tui     # 交互式终端里直接敲 autodl 也进
 粘贴 Token 后会先向 API 验证再保存，然后直接进看板。已经配置过的，敲 `autodl` 直接进。
 
 一张会自己刷新的实例表：状态、GPU、地区、**已开机多久、大概花了多少钱**、TTL 还剩多少。
-快捷键：`↑↓` 移动、`Enter` 详情、`s` 开机、`x` 关机、`c` 复制 SSH 命令到剪贴板、`ctrl+d` 释放、
-`g` 看 GPU 库存、`n` 新建、`r` 刷新、`ctrl+l` 退出登录、`q` 退出。会改变或销毁东西的两个
-都带 ctrl 而不是单键；按不按 shift 都认，提示也统一小写显示，免得看起来像要按 shift。
+快捷键：`↑↓` 移动、`Enter` 详情、`s` 开机、`x` 关机、`ctrl+d` 释放、`g` 库存、
+`r` 刷新、`ctrl+l` 退出登录、`?` 帮助、`q` 退出。释放和退出登录需要确认。
+详情页（`Enter` 进入）里还有实例级操作：`h` 自动认证 SSH、`f` 文件管理、
+`t` 传输队列、`c` 复制 SSH 命令、`n` 新建实例。
 
 `ctrl+d` 释放会永久清空实例，所以它不是单个 `d`。
 
@@ -53,6 +54,9 @@ autodl tui     # 交互式终端里直接敲 autodl 也进
 或 `--token`，确认框会直说它的优先级高于接下来保存的 Token。看板开着时 Token 失效了
 （过期、被重置、实名状态变化），刷新会立刻停下，并给出一个回登录页的入口——
 而不是让你对着一张不再更新的表和刷不完的 401。
+重新登录也遵守 `--token` › `AUTODL_TOKEN` › 本地 Token 的优先级。有覆盖项时，
+保存另一个 Token 不会切换账号；覆盖项失效时需要修改或移除它并重启 TUI，不会悄悄
+改用刚保存的账号。库存查询遇到认证失败时也会结束当前会话。
 
 界面占满终端，头部显示账号 ID 与余额。`c` 只把 **SSH 命令**写进剪贴板，**不含 root 密码**
 ——剪贴板任何进程都能读。没有剪贴板工具的环境（SSH 会话、容器）会退回 OSC 52 并如实说明，
@@ -67,10 +71,61 @@ autodl tui     # 交互式终端里直接敲 autodl 也进
 有两处刻意的诚实约束。单价只能从**运行中**实例的 snapshot 拿到，所以已关机的实例
 只显示时长、不显示金额——编一个看起来合理的数字比留空更糟。单价还没拉到时，
 汇总栏会明说"总额偏低"，而不是安静地少报。
+账号续航会等所有运行实例的单价齐全后才给出时长，不会把未知单价当成免费。
+终端高度不足时（包括 80×24），资源和计费面板会让位给实例列表和按键提示；
+窄屏上下堆叠所占的高度也会计入判断。
 
 TUI 不会在管道、CI 或 `--json` 下启动：它会以退出码 2 退出并说明原因，
 而不是去接管一个并不存在的终端。非交互环境下裸 `autodl` 仍然和以前一样打印帮助。
 
+### SSH 和文件管理
+
+先 `Enter` 进详情页再按 `h`，它会临时交出整个终端，用实时实例密码建立 SSH 会话；
+退出或断线后返回看板，不是看板内嵌入终端。
+也可运行 `autodl ssh <id> --auto-auth`。自动认证模式使用 ssh2，不读取 OpenSSH 配置；
+需要 `~/.ssh/config`、agent 或 `-L` 转发时，继续使用普通 `autodl ssh <id>`。
+实现使用 Node.js 的跨平台终端和文件接口，无需安装 sshpass；支持 Linux、macOS 和原生 Windows。
+
+详情页按 `f` 打开本地/远端双栏，窄屏显示活动侧，`Tab` 切换。文件操作：
+
+| 按键 | 操作 |
+|---|---|
+| `↑↓`、`Enter`、`←` | 选择、进入目录、返回父目录 |
+| `Space` / `a` | 多选 / 全选或清空 |
+| `g` / `p` | 跳转路径 / 直接输入传输来源和目标目录 |
+| `u` | 把选中项传到对侧目录，确认方向后加入队列 |
+| `s` / `c` | 切换单向增量同步 / 内容校验 |
+| `m` / `r` / `x` | 新建目录 / 改名或同端移动 / 确认后永久删除 |
+| `Q` / `Esc` | 查看队列 / 返回 |
+
+相对路径以对应侧当前目录为基准。每个选中来源的文件名或目录名保留在目标目录下：
+例如把本地 `project` 传到远端 `/root/work`，结果是 `/root/work/project`。
+文件管理器传输明确选中的目录内容，不套用旧 `push` 命令的忽略规则；
+符号链接及特殊文件跳过，队列详情按 `v` 可逐项查看全部跳过记录。
+
+普通传输遇到同名文件会暂停询问：`o` 覆盖、`s` 跳过、`b` 保留两份，
+`a` 切换对本任务其余冲突应用同一选择。同步则以所选方向的来源为准：
+跳过未变化文件，整份替换变化文件，**不删除目标端独有文件**。
+默认比较大小和修改时间；可开启 SHA-256 内容校验，但需要读取两端文件内容，
+远端校验会通过 SFTP 读取数据，因此严格校验可能消耗与下载相当的带宽。
+
+队列按顺序执行，显示字节进度、速度和状态。可返回看板继续操作；
+在队列按 `Enter` 看详情、`c` 取消、`r` 恢复已暂停或已取消任务。
+网络中断有界重试；实例关机或认证失败会暂停，不自动开机。
+文件页打开后只建立一条浏览连接，切目录、建目录、改名、删除都复用它；
+目录内容每次实时读取，连接断了下次操作自动重连，离开文件页即释放。
+CLI 的 `files` 和 `queue` 命令与看板共用同一队列记录：
+`queue add` 进去的任务能在看板 `t` 里确认冲突和恢复，反之亦然。
+
+未完成文件写入目标目录里的 `.autodl-*.part`，完成后才替换目标，取消不会截断原文件。
+续传会验证来源版本及已传前缀；来源变化或临时文件损坏时重新传输。
+覆盖远端文件需要服务器的 OpenSSH 原子重命名扩展；不支持时保留原文件并报错。
+任务记录位于配置目录的 `transfers/`，按账号和 API 地址隔离，不保存凭证。
+退出/退出登录会暂停任务；下次进入队列后手动恢复，**退出后不后台传输**。
+同一账号队列只允许一个进程写入，崩溃遗留的所有权记录可自动回收。
+取消会保留续传文件；确定不再恢复时可删除对应任务的 `.part` 和本地续传记录。
+
+
 ## 配置
 
 官方 API 需要**已完成实名认证**（个人或企业）账号的开发者 Token。
@@ -237,6 +292,9 @@ autodl guard idle pro-xxx --threshold 5 --samples 6 --interval 1m
 
 **`--json` 模式下 stdout 是纯 JSON。** 进度、提示、警告一律走 stderr，
 所以 `autodl ... --json | jq` 永远安全。
+未知命令、未知选项和缺少参数统一返回退出码 2、`USAGE` 错误；启用 `--json` 时
+也会输出一个 JSON 错误对象。`tui --json` 同样遵守错误输出契约；显式请求帮助或
+版本号仍输出原来的文本。
 
 ```jsonc
 // 成功
@@ -271,9 +329,10 @@ autodl guard idle pro-xxx --threshold 5 --samples 6 --interval 1m
 | `info <id> [--show-password]` | 详情、实时 SSH 信息、资源占用 |
 | `create --gpu <spec>` | 创建按量计费 Pro 实例 |
 | `start` / `stop` / `rm <id>` | 开机 / 关机 / 释放 |
-| `ssh <id>` | 交互式登录（多余参数原样透传给 `ssh`） |
+| `ssh <id> [--auto-auth]` | 系统 SSH 登录，或使用实例密码自动认证；系统模式支持额外 OpenSSH 参数 |
 | `exec <id> <cmd…>` | 远程执行，流式输出，透传退出码 |
-| `push` / `pull <id>` | SFTP 传输，支持递归目录与忽略规则 |
+| `files ls/mkdir/mv/rm <id>` | 实例文件浏览与管理（SFTP，连接复用） |
+| `queue add/ls/resume/cancel/resolve` | 串行传输队列，与看板共用同一队列 |
 | `run <cmd…>` | 建实例 → 同步 → 执行 → 回传 → 关机 |
 | `deploy <仓库>` | 建实例 → 拉代码 → 装依赖 → 启动 → **关机保留数据** |
 | `stock [--gpu] [--region]` | 各地区 GPU 实时库存 |