@termix-ssh/plugin-sdk 1.0.12 → 1.0.15

package/dist/host/{chunk-RUPLD6RF.js → chunk-3L45NNT5.js}

@@ -4920,31 +4920,6 @@ async function updateSSHHost(hostId, hostData) {
     throw handleApiError(error, "update SSH host");
   }
 }
-async function bulkImportSSHHosts(hosts, overwrite = false, credentials) {
-  try {
-    const response = await sshHostApi.post("/bulk-import", {
-      hosts,
-      overwrite,
-      ...credentials ? { credentials } : {}
-    });
-    invalidateHostsAndStatusCaches();
-    return response.data;
-  } catch (error) {
-    handleApiError(error, "bulk import SSH hosts");
-  }
-}
-async function importSSHConfigHosts(content, overwrite = false) {
-  try {
-    const response = await sshHostApi.post("/ssh-config-import", {
-      content,
-      overwrite
-    });
-    invalidateHostsAndStatusCaches();
-    return response.data;
-  } catch (error) {
-    handleApiError(error, "import SSH config hosts");
-  }
-}
 async function bulkUpdateSSHHosts(hostIds, updates) {
   try {
     const response = await sshHostApi.patch("/bulk-update", {
@@ -4957,6 +4932,14 @@ async function bulkUpdateSSHHosts(hostIds, updates) {
     handleApiError(error, "bulk update SSH hosts");
   }
 }
+async function getHostPolicy() {
+  try {
+    const response = await sshHostApi.get("/policy");
+    return response.data;
+  } catch (error) {
+    handleApiError(error, "load host policy");
+  }
+}
 async function reorderSSHHosts(positions) {
   try {
     const response = await sshHostApi.put("/reorder", { positions });
@@ -4975,16 +4958,6 @@ async function deleteSSHHost(hostId) {
     handleApiError(error, "delete SSH host");
   }
 }
-async function exportAllSSHHosts(options) {
-  try {
-    const response = await sshHostApi.get(
-      options?.share ? "/db/hosts/export?share=1" : "/db/hosts/export"
-    );
-    return response.data;
-  } catch (error) {
-    handleApiError(error, "export all SSH hosts");
-  }
-}
 
 // src/ui/api/host-status-api.ts
 init_define_import_meta_env();
@@ -5623,20 +5596,30 @@ async function updateSessionTimeout(timeoutHours) {
     handleApiError(error, "update session timeout");
   }
 }
-async function getBranding() {
+async function getHttpsSettings() {
   try {
-    const response = await authApi.get("/users/branding");
+    const response = await authApi.get("/users/https-settings");
     return response.data;
   } catch (error) {
-    handleApiError(error, "fetch branding settings");
+    handleApiError(error, "fetch HTTPS settings");
   }
 }
-async function updateBranding(update) {
+async function updateHttpsSettings(forceHttps) {
   try {
-    const response = await authApi.patch("/users/branding", update);
+    const response = await authApi.patch("/users/https-settings", {
+      forceHttps
+    });
+    return response.data;
+  } catch (error) {
+    handleApiError(error, "update HTTPS settings");
+  }
+}
+async function getBranding() {
+  try {
+    const response = await authApi.get("/users/branding");
     return response.data;
   } catch (error) {
-    handleApiError(error, "update branding settings");
+    handleApiError(error, "fetch branding settings");
   }
 }
 
@@ -6221,40 +6204,6 @@ async function reorderCredentials(positions) {
     throw error;
   }
 }
-async function generatePublicKeyFromPrivate(privateKey, keyPassword) {
-  try {
-    const response = await authApi.post("/credentials/generate-public-key", {
-      privateKey,
-      keyPassword
-    });
-    return response.data;
-  } catch (error) {
-    throw handleApiError(error, "generate public key from private key");
-  }
-}
-async function generateKeyPair(keyType, keySize, passphrase) {
-  try {
-    const response = await authApi.post("/credentials/generate-key-pair", {
-      keyType,
-      keySize,
-      passphrase
-    });
-    return response.data;
-  } catch (error) {
-    throw handleApiError(error, "generate SSH key pair");
-  }
-}
-async function deployCredentialToHost(credentialId, targetHostId) {
-  try {
-    const response = await authApi.post(
-      `/credentials/${credentialId}/deploy-to-host`,
-      { targetHostId }
-    );
-    return response.data;
-  } catch (error) {
-    throw handleApiError(error, "deploy credential to host");
-  }
-}
 
 // src/ui/api/dashboard-api.ts
 init_define_import_meta_env();
@@ -6367,7 +6316,7 @@ async function updateRole(roleId, roleData) {
   try {
     const response = await rbacApi.put(`/rbac/roles/${roleId}`, roleData);
     if (roleData.permissions) {
-      const { notifyPermissionsChanged } = await import("./use-permissions-6VSHHUMB.js");
+      const { notifyPermissionsChanged } = await import("./use-permissions-LLN6TLAL.js");
       notifyPermissionsChanged();
     }
     return response.data;
@@ -6949,7 +6898,7 @@ function createRemoteOriginApiInstance(path) {
   });
   instance.interceptors.request.use(
     async (config) => {
-      const { getLinkedSession: getLinkedSession2 } = await import("./linked-server-B4NEG4MA.js");
+      const { getLinkedSession: getLinkedSession2 } = await import("./linked-server-SCJH7DSL.js");
       const linked = await getLinkedSession2();
       config.baseURL = linked ? `${linked.serverUrl}${path}` : "http://no-server-configured";
       if (config.headers.set) {
@@ -7376,12 +7325,10 @@ export {
   getSSHHosts,
   createSSHHost,
   updateSSHHost,
-  bulkImportSSHHosts,
-  importSSHConfigHosts,
   bulkUpdateSSHHosts,
+  getHostPolicy,
   reorderSSHHosts,
   deleteSSHHost,
-  exportAllSSHHosts,
   websocketAuthProtocols,
   getLinkedSession,
   notifySyncChanged,
@@ -7408,8 +7355,9 @@ export {
   updateLogLevel,
   getSessionTimeout,
   updateSessionTimeout,
+  getHttpsSettings,
+  updateHttpsSettings,
   getBranding,
-  updateBranding,
   hydrateLocalSharedHostAuth,
   getConnectedRemoteApi,
   resolveRemoteHostId,
@@ -7463,9 +7411,6 @@ export {
   deleteAllHostsInFolder,
   renameCredentialFolder,
   reorderCredentials,
-  generatePublicKeyFromPrivate,
-  generateKeyPair,
-  deployCredentialToHost,
   getUptime,
   getRecentActivity,
   logActivity,

package/dist/host/{chunk-VEWOYAMZ.js → chunk-57DJU2ZA.js}

@@ -26,7 +26,7 @@ var inFlight = null;
 function load() {
   if (cache) return Promise.resolve(cache);
   if (inFlight) return inFlight;
-  inFlight = import("./rbac-api-OUO3LUOC.js").then(({ getMyPermissions }) => getMyPermissions()).then((result) => {
+  inFlight = import("./rbac-api-KA5IPQQL.js").then(({ getMyPermissions }) => getMyPermissions()).then((result) => {
     cache = {
       permissions: result.permissions ?? [],
       isAdmin: !!result.isAdmin

package/dist/host/{chunk-XKA3DBB2.js → chunk-V44FCJBQ.js}

@@ -3,7 +3,7 @@ import {
   hasPermission,
   resetPermissionsCache,
   usePermissions
-} from "./chunk-VEWOYAMZ.js";
+} from "./chunk-57DJU2ZA.js";
 import {
   Button,
   Check,
@@ -80,7 +80,7 @@ import {
   withIconBoundary,
   withPluginContext,
   withPluginScope
-} from "./chunk-AWR6FYDO.js";
+} from "./chunk-2IV3VX7F.js";
 import {
   SYNC_CHANGED_EVENT,
   TRUST_TOKEN_KEY,
@@ -130,7 +130,7 @@ import {
   usePluginStore,
   useTabTypes,
   websocketAuthProtocols
-} from "./chunk-RUPLD6RF.js";
+} from "./chunk-3L45NNT5.js";
 import {
   define_import_meta_env_default,
   init_define_import_meta_env
@@ -268,6 +268,14 @@ async function getLoginMethods() {
     return [];
   }
 }
+async function getRememberDeviceAllowed() {
+  try {
+    const response = await authApi.get("/users/auth/methods");
+    return response.data?.rememberDevice !== false;
+  } catch {
+    return true;
+  }
+}
 async function submitLoginMethod(methodId, body, instanceId) {
   try {
     const response = await authApi.post(
@@ -1112,11 +1120,6 @@ var en_default = {
     pluginsSomeFailed: "Some plugins could not be changed. You can fix them later from the Plugins tab. Press Next to continue.",
     pluginsApplyFailed: "Your choices could not be saved. Try again, or continue and change them later from the Plugins tab.",
     pluginsLoadFailed: "The plugin list could not be loaded. You can choose plugins later from the Plugins tab.",
-    presetTitle: "How much do you want on screen?",
-    presetIntro: "Choose how much shows on screen.",
-    presetChangeLater: "You can switch presets or change any single setting later in Settings, under Interface.",
-    appearanceTitle: "Make it yours",
-    appearanceIntro: "Pick a theme, an accent color, a font and your language. Changes show right away, and you can change them later in Settings.",
     securityTitle: "Secure your account",
     securityIntro: "Add a passkey or an authenticator app to your account. You can also do this later in Settings, under Security.",
     desktopTitle: "How do you want to use Termix?",
@@ -1178,10 +1181,7 @@ var en_default = {
     retry: "Retry",
     refresh: "Refresh",
     optional: "Optional",
-    downloadSample: "Download Sample",
     failedToDeleteHost: "Failed to delete {{name}}",
-    importSkipExisting: "Import (skip existing)",
-    importSSHConfig: "Import from SSH config",
     connectionDetails: "Connection Details",
     ssh: "SSH",
     telnet: "Telnet",
@@ -1400,10 +1400,7 @@ var en_default = {
     noFolder: "(No folder)",
     deleteSelected: "Delete",
     exitSelection: "Exit selection",
-    importSkip: "Import (skip existing)",
-    importOverwrite: "Import (overwrite)",
     collapseBtn: "Collapse",
-    importExportBtn: "Import / Export",
     hostStatusesRefreshed: "Host statuses refreshed",
     failedToRefreshHosts: "Failed to refresh hosts",
     movedHostTo: 'Moved {{host}} to "{{folder}}"',
@@ -1458,6 +1455,9 @@ var en_default = {
     deleteFolderConfirm_one: 'Delete "{{name}}" and its {{count}} host? This cannot be undone.',
     deleteFolderConfirm_other: 'Delete "{{name}}" and its {{count}} hosts? This cannot be undone.',
     failedToMoveHosts: "Failed to move hosts",
+    managedBanner: "This host is managed by {{plugin}}. Change it there. You can still pin and reorder it.",
+    managedTooltip: "Managed by {{plugin}}",
+    addBlocked: "Hosts are managed by {{plugin}}, so new hosts can't be added here.",
     failedToReorder: "Failed to reorder",
     expandAll: "Expand all folders",
     collapseAll: "Collapse all folders",
@@ -1568,35 +1568,6 @@ var en_default = {
     addCredentialBtn2: "Add Credential",
     checkingHostStatuses: "Checking host statuses...",
     pinnedSection: "Pinned",
-    hostsExported: "Hosts exported successfully",
-    export: {
-      menuItem: "Export...",
-      title: "Export hosts",
-      scope: "Scope",
-      scopeAll: "All",
-      scopeSelected: "Selected",
-      searchHosts: "Search hosts...",
-      include: "Include",
-      groupConnection: "Connection",
-      groupCredentials: "Credentials",
-      groupNotes: "Notes",
-      groupTags: "Tags & pin",
-      groupProxy: "Proxy",
-      groupJumpHosts: "Jump hosts",
-      groupFeatureFlags: "Plugin settings",
-      groupAdvanced: "Advanced config",
-      preview: "Preview",
-      moreHosts_one: "... {{count}} more host",
-      moreHosts_other: "... {{count}} more hosts",
-      summary: "{{selected}} of {{total}} hosts",
-      credentialsIncluded: "credentials included",
-      credentialsExcluded: "credentials excluded",
-      noneSelected: "No hosts selected",
-      cancel: "Cancel",
-      confirm: "Export",
-      fetchFailed: "Failed to load hosts for export",
-      bulkButton: "Export"
-    },
     sampleDownloaded: "Sample file downloaded",
     failedToDeleteCredential2: "Failed to delete credential",
     noFolderOption: "(No folder)",
@@ -1759,11 +1730,7 @@ var en_default = {
     editorUpdate: "Update Host",
     editorAdd: "Add Host",
     speedSearch: "Search hosts. Arrow keys to select, Enter to connect, Esc to close",
-    speedSearchList: "Host list. Type or press / to search.",
-    importNoHosts: "No hosts found in the file",
-    importTooMany: "You can import up to {{max}} hosts at once",
-    importSummary: "Import done: {{imported}} imported, {{updated}} updated, {{failed}} failed",
-    importHostsFailed: "Failed to import hosts"
+    speedSearchList: "Host list. Type or press / to search."
   },
   splitScreen: {
     title: "Split screen",
@@ -2087,6 +2054,10 @@ var en_default = {
         title: "Handle sign in",
         consequence: "It can add a login method, a second factor or an SSH sign-in type."
       },
+      "auth:policy": {
+        title: "Set sign in rules",
+        consequence: "It can sign people out when idle, limit session length, turn off remember me and require a second factor."
+      },
       "system:tls": {
         title: "Manage certificates",
         consequence: "It can replace the certificate Termix serves over HTTPS and answer domain checks from certificate authorities."
@@ -2095,6 +2066,10 @@ var en_default = {
         title: "Access serial and USB devices",
         consequence: "It can open a physical serial port on the machine running Termix."
       },
+      "hosts:export": {
+        title: "Export hosts with their secrets",
+        consequence: "Can read your hosts in full, including saved passwords and keys, and hand them out. Every export is written to the audit log."
+      },
       "hosts:write": {
         title: "Create and change hosts",
         consequence: "It can add hosts and edit the ones you already have."
@@ -2139,10 +2114,30 @@ var en_default = {
         title: "Read the audit log",
         consequence: "It can see who did what and when."
       },
+      "network:probe": {
+        title: "Check if ports answer",
+        consequence: "Can open a plain connection to any address from the server, to see if it is reachable."
+      },
+      "hosts:status-provide": {
+        title: "Provide host status",
+        consequence: "Becomes the source of the online and offline dots for every host."
+      },
+      "hosts:activity-provide": {
+        title: "Store recent activity",
+        consequence: "Becomes the store for the recent activity list of every user."
+      },
+      "hosts:lock": {
+        title: "Manage hosts as read only",
+        consequence: "Hosts it manages can't be edited, deleted or reshared by anyone else."
+      },
       "desktop:window": {
         title: "Open desktop windows",
         consequence: "Only in the Termix desktop app."
       },
+      "desktop:local": {
+        title: "Use this computer",
+        consequence: "Can read and change files, run a shell and open local ports on this computer. Only in the Termix desktop app."
+      },
       "users:impersonate": {
         title: "Act as other users",
         consequence: "Runs background work with another user's access, such as scheduled jobs. Every use is written to the audit log."
@@ -2389,7 +2384,6 @@ var en_default = {
       noServerAccess: "No access to your servers",
       searchInstalled: "Search installed",
       searchPlugins: "Search plugins",
-      allCategories: "All",
       nothingMatches: "Nothing matches that.",
       noneInstalled: "No plugins installed yet. Browse to add some.",
       nothingHere: "Nothing here.",
@@ -2479,7 +2473,44 @@ var en_default = {
       documentation: "Documentation",
       envVars: "Environment variables",
       envRequired: "Required",
-      envDefault: "Default: {{value}}"
+      envDefault: "Default: {{value}}",
+      kinds: {
+        layouts: "Layouts",
+        themes: "Themes",
+        tabs: "Tabs",
+        panels: "Sidebar panels",
+        dashboardCards: "Dashboard cards",
+        protocols: "Connection types",
+        auth: "Sign in methods",
+        actions: "Actions",
+        hostCapability: "Host settings"
+      },
+      filters: {
+        type: "Type",
+        allTypes: "All types",
+        category: "Category",
+        allCategories: "All categories",
+        results_one: "{{count}} plugin",
+        results_other: "{{count}} plugins",
+        remove: "Remove filter {{name}}",
+        clear: "Clear filters",
+        button: "Filters",
+        buttonCount: "Filters ({{count}})"
+      },
+      pager: {
+        range: "{{from}}-{{to}} of {{total}}",
+        page: "Page {{page}} of {{pages}}",
+        previous: "Previous page",
+        next: "Next page",
+        perPage: "{{count}} per page",
+        perPageLabel: "Plugins per page"
+      },
+      showUnsupportedHint: "These are listed but no release runs on this version yet. Update Termix to install them.",
+      unsupported: "Needs a newer Termix",
+      unsupportedHint: "No release of this plugin runs on this version of Termix. Update Termix to install it.",
+      needsTermix: "Needs Termix {{range}}",
+      showUnsupported: "Show unsupported ({{count}})",
+      showMore: "Show {{count}} more ({{total}} left)"
     }
   },
   settings: {
@@ -3104,6 +3135,8 @@ function makeHostSshSubTabs(t, protocols2, defaultsMode = false) {
 init_define_import_meta_env();
 var actions = createRegistry(byOrderThenId);
 var badges = createRegistry(byOrderThenId);
+var statusIndicators = createRegistry(byOrderThenId);
+var editorToolbarItems = createRegistry(byOrderThenId);
 var menuItems = createRegistry(byOrderThenId);
 var registerHostAction = actions.register;
 var useHostActions = actions.useList;
@@ -3113,6 +3146,10 @@ function actionOrder(action) {
 var listHostActions = actions.list;
 var registerHostBadge = badges.register;
 var useHostBadges = badges.useList;
+var registerHostStatusIndicator = statusIndicators.register;
+var useHostStatusIndicators = statusIndicators.useList;
+var registerHostEditorToolbarItem = editorToolbarItems.register;
+var useHostEditorToolbarItems = editorToolbarItems.useList;
 var registerHostContextMenuItem = menuItems.register;
 var useHostContextMenuItems = menuItems.useList;
 function safeWhen(predicate, host) {
@@ -3135,6 +3172,12 @@ function defaultConnectAction(all, host) {
 function hostBadgesFor(all, host) {
   return all.filter((badge) => safeWhen(badge.when, host));
 }
+function hostStatusIndicatorsFor(all, host) {
+  return all.filter((item) => safeWhen(item.when, host));
+}
+function hostEditorToolbarItemsFor(all, host) {
+  return all.filter((item) => safeWhen(item.when, host));
+}
 function hostMenuItemsFor(all, host) {
   return all.filter((item) => safeWhen(item.when, host));
 }
@@ -3145,6 +3188,8 @@ function runHostAction(action, host, shell2) {
 function resetHostContributions() {
   actions.reset();
   badges.reset();
+  statusIndicators.reset();
+  editorToolbarItems.reset();
   menuItems.reset();
 }
 
@@ -3607,12 +3652,18 @@ function PluginComponent({
 // src/ui/onboarding/onboarding-registry.ts
 init_define_import_meta_env();
 var SECTION_POSITION = {
+  start: 25,
   setup: 50,
   explore: 80,
   security: 95
 };
+var MIN_POSITION = 1;
+var MAX_POSITION = 99;
 var onboardingSteps = createRegistry();
-function sectionPosition(section, order2 = 0) {
+function sectionPosition(section, order2 = 0, position) {
+  if (typeof position === "number" && Number.isFinite(position)) {
+    return Math.max(MIN_POSITION, Math.min(MAX_POSITION, position));
+  }
   const base = SECTION_POSITION[section ?? "explore"];
   return base + Math.max(-1, Math.min(1, order2 / 1e3)) * 0.4;
 }
@@ -4071,6 +4122,7 @@ function sshHostToHost(h) {
     connectionOrigin: h.connectionOrigin ?? null,
     localOnly: !!h.localOnly,
     sharedCopy: !!h.sharedCopy,
+    ...h.lock ? { lock: h.lock } : {},
     enableSsh: h.enableSsh != null ? h.enableSsh : isSshHost,
     sshPort: h.sshPort ?? (h.connectionType === "ssh" || !h.connectionType ? h.port : 22),
     protocolAuth: h.protocolAuth ?? {},
@@ -8749,7 +8801,30 @@ function createPluginApp(pluginId, manifest, contributes, options = {}) {
           id: badge.id,
           pluginId,
           when: hostCallback(badge.when),
-          component: scoped(badge.component)
+          component: scoped(badge.component),
+          order: badge.order
+        })
+      );
+    },
+    registerHostStatusIndicator(indicator) {
+      return track(
+        registerHostStatusIndicator({
+          id: indicator.id,
+          pluginId,
+          when: hostCallback(indicator.when),
+          component: scoped(indicator.component),
+          order: indicator.order
+        })
+      );
+    },
+    registerHostEditorToolbarItem(item) {
+      return track(
+        registerHostEditorToolbarItem({
+          id: item.id,
+          pluginId,
+          when: hostCallback(item.when),
+          component: scoped(item.component),
+          order: item.order
         })
       );
     },
@@ -8903,7 +8978,8 @@ function createPluginApp(pluginId, manifest, contributes, options = {}) {
           Component: scoped(step.component),
           audience: step.audience ?? "all",
           permission: step.permission ? resolvePluginPermission(pluginId, step.permission) : void 0,
-          position: sectionPosition(step.section, step.order),
+          position: sectionPosition(step.section, step.order, step.position),
+          replaces: step.replaces,
           isRelevant: when ? (ctx) => when({
             isAdmin: ctx.isAdmin,
             isDesktop: ctx.isDesktop,
@@ -9984,7 +10060,7 @@ function hostToSSHHost(h) {
 // src/ui/shell/tabUtils.tsx
 import { jsx as jsx13, jsxs as jsxs6 } from "react/jsx-runtime";
 var PluginsTab = lazy(
-  () => import("./PluginsTab-EV4MSGY6.js").then((m) => ({ default: m.PluginsTab }))
+  () => import("./PluginsTab-S33WIIGC.js").then((m) => ({ default: m.PluginsTab }))
 );
 function preloadTabSurface(type) {
   const loader = getTabType(type)?.preload;
@@ -10169,6 +10245,7 @@ export {
   remScale,
   useIsMobile,
   getLoginMethods,
+  getRememberDeviceAllowed,
   submitLoginMethod,
   startLoginRedirect,
   verifySecondFactor,
@@ -10228,10 +10305,14 @@ export {
   actionOrder,
   listHostActions,
   useHostBadges,
+  useHostStatusIndicators,
+  useHostEditorToolbarItems,
   useHostContextMenuItems,
   hostActionsFor,
   defaultConnectAction,
   hostBadgesFor,
+  hostStatusIndicatorsFor,
+  hostEditorToolbarItemsFor,
   hostMenuItemsFor,
   runHostAction,
   resetHostContributions,