@termix-ssh/plugin-sdk 1.0.20 → 1.0.21

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## 1.0.21
+
+Plugin API 1.12.0.
+
+### Added
+
+- `@termix-ssh/plugin-sdk/host-scripts`: Docker, Linux metrics, systemd, journal and OpenRC command builders and parsers, plus `scriptShell()` and `passwordSudoScript()` to send scripts to `bash -s` on stdin. It has no Node or ssh2 imports, so the Termix mobile app runs the same code
+
 ## 1.0.20
 
 Plugin API 1.12.0.

package/PLUGIN-GUIDE.md

@@ -1,6 +1,6 @@
 # Termix plugin guide
 
-SDK 1.0.20 | Plugin API 1.12.0
+SDK 1.0.21 | Plugin API 1.12.0
 
 This guide is for anyone, person or AI coding tool, building a Termix plugin. It ships inside
 `@termix-ssh/plugin-sdk`, so the copy in your `node_modules` always matches the SDK you have installed.
@@ -335,7 +335,9 @@ try {
 
 `ctx.ssh.withConnection(hostId, { pool, purpose }, fn)` borrows a pooled connection for frequent short
 commands. `@termix-ssh/plugin-sdk/host-commands` has helpers to detect the OS and run package manager and
-sudo commands. Hosts from `ctx.hosts` never carry secrets. Pass the host or its id to `ctx.ssh`.
+sudo commands. `@termix-ssh/plugin-sdk/host-scripts` builds Docker, metrics, systemd and journal
+commands and parses their output; send a script on stdin to the command `scriptShell()` returns. Hosts from
+`ctx.hosts` never carry secrets. Pass the host or its id to `ctx.ssh`.
 
 ### The desktop app
 
@@ -905,6 +907,7 @@ To run your own registry instead, see https://docs.termix.site/develop/registrie
 | `@termix-ssh/plugin-sdk/testing`                                     | `createMockCtx`, `createTestDb`, `renderWithApp`, `createFakeContext`                          |
 | `@termix-ssh/plugin-sdk/vitest-preset`                               | `pluginVitestConfig`                                                                           |
 | `@termix-ssh/plugin-sdk/host-commands`                               | OS detection, package manager and sudo helpers over ssh2                                       |
+| `@termix-ssh/plugin-sdk/host-scripts`                                | Docker, metrics, systemd and journal command builders and parsers, scripts sent to `bash -s`   |
 | `@termix-ssh/plugin-sdk/ssh-certs`                                   | `applyCertificateAuth()` for certificate based SSH auth                                        |
 | `@termix-ssh/plugin-sdk/ssh-keys`                                    | `generateSshKeyPair()`, `detectSshKeyType()`, `publicKeyFromPrivate()`, `validateSshKeyPair()` |
 | `@termix-ssh/plugin-sdk/desktop`                                     | The desktop app bridge, typed. Check it exists before use                                      |

package/dist/host/{PluginsTab-ZSMTJ5C5.js → PluginsTab-HQGSDSHS.js}

@@ -29,7 +29,7 @@ import {
   sortPlugins,
   uploadEntry,
   youtubeEmbedUrl
-} from "./chunk-CITUENSU.js";
+} from "./chunk-WWFRBU2E.js";
 import {
   ArrowDownWideNarrow,
   BookOpen,
@@ -107,8 +107,8 @@ import {
   updatePlugin,
   uploadPlugin,
   useConfirm
-} from "./chunk-EYONBBRJ.js";
-import "./chunk-7LEJ3HYF.js";
+} from "./chunk-GTHINW3L.js";
+import "./chunk-JFQGI4OD.js";
 import {
   __toESM,
   define_import_meta_env_default,
@@ -2681,7 +2681,7 @@ function InstalledCard({
       )
     ] }) : !running ? /* @__PURE__ */ jsxs6("div", { className: "flex items-center gap-2 border-t border-border px-3 py-2", children: [
       /* @__PURE__ */ jsx6("span", { className: "size-1.5 shrink-0 bg-muted-foreground/40" }),
-      /* @__PURE__ */ jsx6("span", { className: "text-[11px] text-muted-foreground", children: plugin.status === "server" ? t("plugins.manager.status.server") : t("plugins.manager.status.disabled") })
+      /* @__PURE__ */ jsx6("span", { className: "text-[11px] text-muted-foreground", children: plugin.status === "server" ? t("plugins.manager.status.server") : plugin.status === "safeMode" ? t("plugins.manager.status.safeMode") : t("plugins.manager.status.disabled") })
     ] }) : /* @__PURE__ */ jsxs6("div", { className: "flex items-center gap-2 border-t border-border px-3 py-2", children: [
       /* @__PURE__ */ jsx6("span", { className: "size-1.5 shrink-0 bg-green-500" }),
       /* @__PURE__ */ jsx6("span", { className: "text-[11px] text-muted-foreground", children: plugin.pinnedVersion ? t("plugins.manager.pinnedTo", {
@@ -2759,7 +2759,9 @@ function StatusCell({ plugin }) {
   const { t } = useTranslation7();
   const running = plugin.status === "running";
   const failed = plugin.status === "failed" || plugin.status === "blocked";
-  const label = plugin.status === "blocked" ? t("plugins.manager.status.blocked") : failed ? t("plugins.manager.status.failed") : plugin.status === "server" ? t("plugins.manager.status.server") : !running ? t("plugins.manager.status.disabled") : plugin.pinnedVersion ? t("plugins.manager.pinnedTo", { version: plugin.pinnedVersion }) : t("plugins.manager.status.running");
+  const label = plugin.status === "blocked" ? t("plugins.manager.status.blocked") : failed ? t("plugins.manager.status.failed") : plugin.status === "server" ? t("plugins.manager.status.server") : plugin.status === "safeMode" ? t("plugins.manager.status.safeMode") : !running ? t("plugins.manager.status.disabled") : plugin.pinnedVersion ? t("plugins.manager.pinnedTo", {
+    version: plugin.pinnedVersion
+  }) : t("plugins.manager.status.running");
   return /* @__PURE__ */ jsxs6(
     "span",
     {

package/dist/host/{chunk-J3ZQPBDK.js → chunk-A5CULDWV.js}

@@ -3,7 +3,7 @@ import {
   hasPermission,
   resetPermissionsCache,
   usePermissions
-} from "./chunk-2MU6WNSX.js";
+} from "./chunk-FGX27MAA.js";
 import {
   ArrowDownToLine,
   ArrowLeftToLine,
@@ -83,7 +83,7 @@ import {
   withIconBoundary,
   withPluginContext,
   withPluginScope
-} from "./chunk-EYONBBRJ.js";
+} from "./chunk-GTHINW3L.js";
 import {
   SYNC_CHANGED_EVENT,
   TRUST_TOKEN_KEY,
@@ -132,7 +132,7 @@ import {
   usePluginStore,
   useTabTypes,
   websocketAuthProtocols
-} from "./chunk-7LEJ3HYF.js";
+} from "./chunk-JFQGI4OD.js";
 import {
   define_import_meta_env_default,
   init_define_import_meta_env
@@ -1144,6 +1144,10 @@ var en_default = {
     ready: "Termix {{version}} is ready to install",
     readyHint: "It installs the next time Termix restarts."
   },
+  safeMode: {
+    title: "Safe mode",
+    description: "Only layout and theme plugins are running. Restart the server without TERMIX_SAFE_MODE to turn the rest back on."
+  },
   companion: {
     close: "Close panel",
     moveSide: "Move panel",
@@ -2220,7 +2224,8 @@ var en_default = {
         disabled: "Disabled",
         failed: "Stopped unexpectedly",
         blocked: "Waiting on another plugin",
-        server: "Runs on your server"
+        server: "Runs on your server",
+        safeMode: "Off in safe mode"
       },
       groups: {
         running: "Running",
@@ -10263,7 +10268,7 @@ function CompanionLayout({
 // src/ui/shell/tabUtils.tsx
 import { jsx as jsx14, jsxs as jsxs7 } from "react/jsx-runtime";
 var PluginsTab = lazy(
-  () => import("./PluginsTab-ZSMTJ5C5.js").then((m) => ({ default: m.PluginsTab }))
+  () => import("./PluginsTab-HQGSDSHS.js").then((m) => ({ default: m.PluginsTab }))
 );
 function preloadTabSurface(type) {
   const loader = getTabType(type)?.preload;

package/dist/host/{chunk-2MU6WNSX.js → chunk-FGX27MAA.js}

@@ -26,7 +26,7 @@ var inFlight = null;
 function load() {
   if (cache) return Promise.resolve(cache);
   if (inFlight) return inFlight;
-  inFlight = import("./rbac-api-LZVENREG.js").then(({ getMyPermissions }) => getMyPermissions()).then((result) => {
+  inFlight = import("./rbac-api-AAAPMF52.js").then(({ getMyPermissions }) => getMyPermissions()).then((result) => {
     cache = {
       permissions: result.permissions ?? [],
       isAdmin: !!result.isAdmin

package/dist/host/{chunk-EYONBBRJ.js → chunk-GTHINW3L.js}

@@ -4,7 +4,7 @@ import {
   getPluginRecord,
   rbacApi,
   usePluginStore
-} from "./chunk-7LEJ3HYF.js";
+} from "./chunk-JFQGI4OD.js";
 import {
   __export,
   init_define_import_meta_env

package/dist/host/{chunk-7LEJ3HYF.js → chunk-JFQGI4OD.js}

@@ -4087,7 +4087,9 @@ function unregisteredViewStatus(kind, id) {
     return { status: getPluginStoreState().loaded ? "missing" : "loading" };
   }
   const serverState = owner.summary.state;
-  if (!owner.summary.enabled) return { status: "disabled", owner };
+  if (!owner.summary.enabled || serverState === "safe-mode") {
+    return { status: "disabled", owner };
+  }
   if (owner.frontend === "failed" || owner.frontend === "blocked" || serverState === "failed" || serverState === "blocked") {
     return { status: "failed", owner };
   }
@@ -6316,7 +6318,7 @@ async function updateRole(roleId, roleData) {
   try {
     const response = await rbacApi.put(`/rbac/roles/${roleId}`, roleData);
     if (roleData.permissions) {
-      const { notifyPermissionsChanged } = await import("./use-permissions-BYCDS5PD.js");
+      const { notifyPermissionsChanged } = await import("./use-permissions-VAND5GEG.js");
       notifyPermissionsChanged();
     }
     return response.data;
@@ -6898,7 +6900,7 @@ function createRemoteOriginApiInstance(path) {
   });
   instance.interceptors.request.use(
     async (config) => {
-      const { getLinkedSession: getLinkedSession2 } = await import("./linked-server-OUF3POT7.js");
+      const { getLinkedSession: getLinkedSession2 } = await import("./linked-server-UDSFY3N7.js");
       const linked = await getLinkedSession2();
       config.baseURL = linked ? `${linked.serverUrl}${path}` : "http://no-server-configured";
       if (config.headers.set) {

package/dist/host/{chunk-CITUENSU.js → chunk-WWFRBU2E.js}

@@ -8,10 +8,10 @@ import {
   cn,
   gridSizeStyle,
   useAreaPreferences
-} from "./chunk-EYONBBRJ.js";
+} from "./chunk-GTHINW3L.js";
 import {
   isElectron
-} from "./chunk-7LEJ3HYF.js";
+} from "./chunk-JFQGI4OD.js";
 import {
   __commonJS,
   __toESM,
@@ -2486,6 +2486,7 @@ function pluginStatus(summary) {
   if (summary.state === "failed") return "failed";
   if (summary.state === "blocked") return "blocked";
   if (!summary.enabled) return "disabled";
+  if (summary.state === "safe-mode") return "safeMode";
   return "running";
 }
 function mergePlugins(installed, registry) {

package/dist/host/{linked-server-OUF3POT7.js → linked-server-UDSFY3N7.js}

@@ -4,7 +4,7 @@ import {
   getLinkedSession,
   notifySyncChanged,
   useDesktopLinked
-} from "./chunk-7LEJ3HYF.js";
+} from "./chunk-JFQGI4OD.js";
 import "./chunk-YGYBM7SQ.js";
 export {
   SYNC_CHANGED_EVENT,

package/dist/host/{rbac-api-LZVENREG.js → rbac-api-AAAPMF52.js}

@@ -23,7 +23,7 @@ import {
   shareHost,
   updateHostAccess,
   updateRole
-} from "./chunk-7LEJ3HYF.js";
+} from "./chunk-JFQGI4OD.js";
 import "./chunk-YGYBM7SQ.js";
 export {
   assignRoleToUser,

package/dist/host/testing-host.js

@@ -59,10 +59,10 @@ import {
   trackTabHandle,
   useShellController,
   useTabStageStore
-} from "./chunk-J3ZQPBDK.js";
+} from "./chunk-A5CULDWV.js";
 import {
   setPermissionsForTesting
-} from "./chunk-2MU6WNSX.js";
+} from "./chunk-FGX27MAA.js";
 import {
   SurfaceScope,
   notifyShellReady,
@@ -70,14 +70,14 @@ import {
   setShellCallbacks,
   setShellHosts,
   setShellLayoutProvider
-} from "./chunk-EYONBBRJ.js";
+} from "./chunk-GTHINW3L.js";
 import {
   getTabType,
   listTabTypes,
   resetPluginStore,
   setFrontendState,
   setPluginSummaries
-} from "./chunk-7LEJ3HYF.js";
+} from "./chunk-JFQGI4OD.js";
 import {
   init_define_import_meta_env
 } from "./chunk-YGYBM7SQ.js";

package/dist/host/types/src/ui/api/look-api.d.ts

@@ -22,6 +22,8 @@ export interface LookResponse {
     };
     /** TERMIX_SAFE_LAYOUT is set on the server. */
     safeLayout: boolean;
+    /** TERMIX_SAFE_MODE is set: only layout and theme plugins run. */
+    safeMode?: boolean;
     unavailable: UnavailableLook[];
 }
 export declare function getLook(): Promise<LookResponse>;

package/dist/host/types/src/ui/api/plugins-api.d.ts

@@ -120,7 +120,7 @@ export interface PluginSummary {
     name: string;
     version: string;
     enabled: boolean;
-    /** enabled | disabled | blocked | failed, or the loader's live state. */
+    /** enabled | disabled | blocked | failed | safe-mode, or the loader's live state. */
     state: string;
     /** A linked desktop leaves this plugin to its server. */
     runsOnServer?: boolean;

package/dist/host/types/src/ui/lib/app-return.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Sign in for the Termix mobile app in a real browser. The app opens the
+ * login page with ?return_to=termix-mobile://..., and after any login method
+ * the page sends the token back to that address. Only the app's own scheme
+ * is accepted, so the value can never send a token to a website.
+ */
+export declare function isAppReturn(value: unknown): value is string;
+/** Reads return_to from the address bar once and keeps it for this tab. */
+export declare function captureAppReturn(): string | null;
+export declare function pendingAppReturn(): string | null;
+export declare function appReturnUrl(base: string, params: Record<string, string>): string;
+/** Sends the result to the app. False when no app asked for it. */
+export declare function handOffToApp(params: Record<string, string>): boolean;

package/dist/host/types/src/ui/plugins/plugin-model.d.ts

@@ -2,7 +2,7 @@ import { type CapabilityRisk } from "@termix-ssh/plugin-sdk/capabilities";
 import type { PluginEnvVar } from "@termix-ssh/plugin-sdk/docs";
 import { type ChangeType, type ChangelogChange, type ChangelogRelease } from "@termix-ssh/plugin-sdk/changelog";
 import type { PluginChannel, PluginSummary, PluginUploadPreview, RegistryPluginEntry, RegistryPluginVersion } from "../api/plugins-api";
-export type PluginStatus = "running" | "disabled" | "failed" | "blocked" | "server";
+export type PluginStatus = "running" | "disabled" | "failed" | "blocked" | "server" | "safeMode";
 /** One row of the Plugins tab: what is installed merged with the registry. */
 export interface PluginEntry {
     id: string;

package/dist/host/ui.js

@@ -160,10 +160,10 @@ import {
   useThemes,
   verifySecondFactor,
   withProtocolSettings
-} from "./chunk-J3ZQPBDK.js";
+} from "./chunk-A5CULDWV.js";
 import {
   usePermissions
-} from "./chunk-2MU6WNSX.js";
+} from "./chunk-FGX27MAA.js";
 import {
   AddButton,
   Card,
@@ -184,7 +184,7 @@ import {
   isPrerelease,
   reportBetaFeedbackUrl,
   reportCoreIssueUrl
-} from "./chunk-CITUENSU.js";
+} from "./chunk-WWFRBU2E.js";
 import {
   Action,
   Activity,
@@ -374,7 +374,7 @@ import {
   useSurfaceKind,
   useUiPreference,
   useUiPreferencesContext
-} from "./chunk-EYONBBRJ.js";
+} from "./chunk-GTHINW3L.js";
 import {
   CREDENTIAL_ROW_FIELD_KEYS,
   PRESETS,
@@ -535,7 +535,7 @@ import {
   useTabs,
   useTabsSafe,
   verifyPasswordResetCode
-} from "./chunk-7LEJ3HYF.js";
+} from "./chunk-JFQGI4OD.js";
 import {
   define_import_meta_env_default,
   init_define_import_meta_env
@@ -3327,6 +3327,39 @@ function isInElectronWebView() {
   }
   return false;
 }
+function isEmbeddedAuthFrame() {
+  return isInMobileWebView() || isInElectronWebView();
+}
+
+// src/ui/lib/app-return.ts
+init_define_import_meta_env();
+var STORAGE_KEY = "termix-app-return";
+var APP_RETURN = /^termix-mobile:\/\/[A-Za-z0-9._~/-]*$/;
+function isAppReturn(value) {
+  return typeof value === "string" && APP_RETURN.test(value);
+}
+function pendingAppReturn() {
+  try {
+    const value = sessionStorage.getItem(STORAGE_KEY);
+    return isAppReturn(value) ? value : null;
+  } catch {
+    return null;
+  }
+}
+function appReturnUrl(base2, params) {
+  const query = new URLSearchParams(params).toString();
+  return query ? `${base2}?${query}` : base2;
+}
+function handOffToApp(params) {
+  const base2 = pendingAppReturn();
+  if (!base2) return false;
+  try {
+    sessionStorage.removeItem(STORAGE_KEY);
+  } catch {
+  }
+  window.location.replace(appReturnUrl(base2, params));
+  return true;
+}
 
 // src/ui/auth/Auth.tsx
 import { useState as useState7, useEffect as useEffect6, useCallback as useCallback5, useRef as useRef4 } from "react";
@@ -3878,7 +3911,7 @@ function currentDeps() {
   return deps ?? defaultDeps;
 }
 function serverAllowsFrontend(summary) {
-  return summary.enabled && summary.state !== "failed" && summary.state !== "blocked" && !!summary.frontend;
+  return summary.enabled && summary.state !== "failed" && summary.state !== "blocked" && summary.state !== "safe-mode" && !!summary.frontend;
 }
 function orderForActivation(summaries) {
   const byId = new Map(summaries.map((summary) => [summary.id, summary]));
@@ -4252,7 +4285,7 @@ function LanguageRow({
     )
   ] });
 }
-var STORAGE_KEY = "termix_auth";
+var STORAGE_KEY2 = "termix_auth";
 function parseSecondFactorIds(value) {
   const ids = (value ?? "").split(",").filter(Boolean);
   return ids.map((id) => ({ id, pluginId: "", labelKey: "" }));
@@ -4266,10 +4299,15 @@ function hasDesktopManualLogout() {
 }
 function storeAuth(username) {
   localStorage.setItem(
-    STORAGE_KEY,
+    STORAGE_KEY2,
     JSON.stringify({ loggedIn: true, username })
   );
 }
+async function handOffLogin(token) {
+  if (!pendingAppReturn() || isEmbeddedAuthFrame()) return false;
+  const value = token || await getCurrentToken();
+  return handOffToApp(value ? { token: value } : { error: "no_token" });
+}
 function PasswordInput2({
   value,
   onChange,
@@ -4407,8 +4445,9 @@ function Auth({ onLogin }) {
   useEffect6(() => {
     if (proxySigninHandledRef.current || isElectron()) return;
     proxySigninHandledRef.current = true;
-    requestTrustedProxyLogin().then((result) => {
+    requestTrustedProxyLogin().then(async (result) => {
       if (!result.enabled || !result.success) return;
+      if (await handOffLogin()) return;
       storeAuth(result.username || "");
       onLogin(
         result.username || "",
@@ -4625,21 +4664,24 @@ function Auth({ onLogin }) {
         }
         return;
       }
-      getUserInfo().then((meRes) => {
-        storeAuth(meRes.username || "");
-        clearDesktopManualLogout();
-        onLogin(
-          meRes.username || "",
-          meRes.userId || void 0,
-          !!meRes.is_admin
-        );
-        window.history.replaceState(
-          {},
-          document.title,
-          window.location.pathname
-        );
-      }).catch(() => {
-        toast2.error(t3("errors.failedUserInfo"));
+      void handOffLogin(urlParams.get("token")).then((handedOff) => {
+        if (handedOff) return;
+        getUserInfo().then((meRes) => {
+          storeAuth(meRes.username || "");
+          clearDesktopManualLogout();
+          onLogin(
+            meRes.username || "",
+            meRes.userId || void 0,
+            !!meRes.is_admin
+          );
+          window.history.replaceState(
+            {},
+            document.title,
+            window.location.pathname
+          );
+        }).catch(() => {
+          toast2.error(t3("errors.failedUserInfo"));
+        });
       });
     }
   }, [onLogin, t3]);
@@ -4721,6 +4763,7 @@ function Auth({ onLogin }) {
       setWebviewAuthSuccess(true);
       return;
     }
+    if (await handOffLogin(res?.token)) return;
     const meRes = await getUserInfo();
     const name2 = meRes.username || res.username || options.fallbackUsername || "";
     storeAuth(name2);

package/dist/host/{use-permissions-BYCDS5PD.js → use-permissions-VAND5GEG.js}

@@ -7,7 +7,7 @@ import {
   resetPermissionsCache,
   setPermissionsForTesting,
   usePermissions
-} from "./chunk-2MU6WNSX.js";
+} from "./chunk-FGX27MAA.js";
 import "./chunk-YGYBM7SQ.js";
 export {
   hasPermission,

package/dist/host-commands.d.ts

@@ -10,6 +10,8 @@
  */
 export type { Client, ClientChannel } from "ssh2";
 import type { Client } from "ssh2";
+import { EXTRA_PATH_DIRS } from "./host-scripts/docker.js";
+export { EXTRA_PATH_DIRS };
 export interface ExecResult {
     stdout: string;
     stderr: string;
@@ -26,12 +28,6 @@ export interface PlatformInfo {
     hasDocker: boolean;
     osPrettyName: string | null;
 }
-/**
- * Non-interactive SSH shells don't source ~/.zprofile or ~/.bash_profile,
- * so PATH additions from installers like Homebrew or OrbStack are missing.
- * Extend PATH with their common install locations before probing.
- */
-export declare const EXTRA_PATH_DIRS = "/opt/homebrew/bin:/opt/homebrew/sbin:/usr/local/bin:\"$HOME/.orbstack/bin\"";
 /**
  * Single probe that reports which tooling is available. Each line is
  * "key=value" so the parser is trivial and order-independent.

package/dist/host-commands.js

@@ -8,6 +8,9 @@
  *
  * A plugin passes the `Client` it got from ctx.ssh.connect/withConnection.
  */
+// Homebrew and OrbStack paths a non-interactive shell misses.
+import { EXTRA_PATH_DIRS } from "./host-scripts/docker.js";
+export { EXTRA_PATH_DIRS };
 /** Runs one non-interactive command over an existing ssh2 client. */
 export function execCommand(client, command, timeoutMs = 30000) {
     return new Promise((resolve, reject) => {
@@ -83,12 +86,6 @@ export function execCommand(client, command, timeoutMs = 30000) {
         });
     });
 }
-/**
- * Non-interactive SSH shells don't source ~/.zprofile or ~/.bash_profile,
- * so PATH additions from installers like Homebrew or OrbStack are missing.
- * Extend PATH with their common install locations before probing.
- */
-export const EXTRA_PATH_DIRS = '/opt/homebrew/bin:/opt/homebrew/sbin:/usr/local/bin:"$HOME/.orbstack/bin"';
 const DOCKER_PROBE = `command -v docker >/dev/null 2>&1` +
     ` || [ -S /var/run/docker.sock ]` +
     ` || [ -S "$HOME/.orbstack/run/docker.sock" ]`;