dsh-ssh-manage 0.3.2 → 0.3.4

package/README.en.md

@@ -25,7 +25,7 @@
 - **Host management** — scan the config, groups, tags, favorites, notes, latency and host inspection;
 - **Interactive terminal** — ssh2 allocates a PTY, xterm.js renders it, with colors, arrow keys, full-screen programs such as `vim`/`top`, and window resizing;
 - **Day-to-day operations** — batch commands, SFTP browse/mkdir/rename/delete/upload/download, connection tests;
-- **Credentials** — one AES-256-GCM encrypted password per host, never written to `~/.ssh/config` and never returned to the browser;
+- **Credentials** — one AES-256-GCM encrypted password per host, never written to `~/.ssh/config`; passwords are not returned to the browser by default, but Show password decrypts one on demand in the current page and auto-hides it after 30 seconds;
 - **Agent tool** — `ssh_manager` exposes the same capabilities to the model.
 
 No more jumping between a terminal and DSH, and no need to remember where each host lives in the config file.
@@ -60,7 +60,7 @@ No more jumping between a terminal and DSH, and no need to remember where each h
 ### Credentials and data
 
 - Passwords are AES-256-GCM encrypted in the plugin state directory and unlocked automatically at startup; no master password, no system Keychain.
-- Passwords are only used for SSH password authentication (also compatible with hosts that only offer keyboard-interactive). They are never written to `~/.ssh/config`, command arguments, logs or responses.
+- Passwords are only used for SSH password authentication (also compatible with hosts that only offer keyboard-interactive). They are never written to `~/.ssh/config`, command arguments or logs. They are not returned by default; Show password explicitly decrypts one into the current page for 30 seconds and it is never exposed through the Agent tool.
 - Ciphertext and key live in the same user directory, so this mainly protects against accidental file reads, not against malicious processes running as the same user.
 - Groups, tags, favorites, notes and inspection data live in `hosts.json`; passwords live in `vault.json`; configuration changes are snapshotted to the backup directory.
 
@@ -96,16 +96,16 @@ Creating a host requires alias, hostname and password. The password is not writt
 
 ### From npm (recommended)
 
-npm package: [`dsh-ssh-manage`](https://www.npmjs.com/package/dsh-ssh-manage) (current version `0.3.2`).
+npm package: [`dsh-ssh-manage`](https://www.npmjs.com/package/dsh-ssh-manage) (current version `0.3.4`).
 
 ```text
-plugin_manager action=install_bundle target=dsh-ssh-manage@0.3.2
+plugin_manager action=install_bundle target=dsh-ssh-manage@0.3.4
 ```
 
 Or with the DSH CLI:
 
 ```bash
-dsh plugin add dsh-ssh-manage@0.3.2
+dsh plugin add dsh-ssh-manage@0.3.4
 ```
 
 After installation, refresh the Web page; the sidebar shows an "SSH Hosts" entry with id `dsh-ssh-manage`.

package/README.md

@@ -25,7 +25,7 @@
 - **主机管理**：扫描配置、分组、标签、收藏、备注、连接延迟、主机巡检；
 - **交互式终端**：ssh2 分配 PTY，xterm.js 渲染，支持彩色输出、方向键、`vim`/`top` 等全屏程序和窗口自适应；
 - **日常运维**：批量命令、SFTP 目录浏览 / 新建 / 重命名 / 删除 / 上传 / 下载、测试连接；
-- **凭据管理**：每台主机保存一份 AES-256-GCM 加密密码，不写进 `~/.ssh/config`，也不返回给浏览器；
+- **凭据管理**：每台主机保存一份 AES-256-GCM 加密密码，不写进 `~/.ssh/config`；默认不返回浏览器，在主机详情点“显示密码”时才按需解密到当前页面，30 秒后自动隐藏；
 - **Agent 工具**：`ssh_manager` 把同一套能力开放给模型。
 
 不用再在终端和 DSH 之间来回切换，也不用记每个主机在配置文件里的位置。
@@ -60,7 +60,7 @@
 ### 凭据与数据
 
 - 密码使用 AES-256-GCM 加密保存在插件自己的状态目录，插件启动时自动解锁，不需要每次输入主密码，也不使用系统 Keychain。
-- 密码只用于 SSH password authentication，同时兼容只提供 keyboard-interactive 的主机；不会写入 `~/.ssh/config`、命令参数、日志或返回给浏览器。
+- 密码只用于 SSH password authentication，同时兼容只提供 keyboard-interactive 的主机；不会写入 `~/.ssh/config`、命令参数或日志。默认不返回浏览器；仅在你主动点击“显示密码”时按需解密到当前页面，30 秒后自动隐藏，且不会通过 Agent 工具返回。
 - 密码密文与本地密钥位于同一用户目录，主要防止文件被直接误读，不能抵御同一用户下的恶意进程。
 - 主机分组、标签、收藏、备注、巡检结果保存在 `hosts.json`；密码保存在 `vault.json`；删除/修改配置前写入备份目录。
 
@@ -98,16 +98,16 @@
 
 ### 从 npm 安装（推荐）
 
-npm 包：[`dsh-ssh-manage`](https://www.npmjs.com/package/dsh-ssh-manage)（当前版本 `0.3.2`）。
+npm 包：[`dsh-ssh-manage`](https://www.npmjs.com/package/dsh-ssh-manage)（当前版本 `0.3.4`）。
 
 ```text
-plugin_manager action=install_bundle target=dsh-ssh-manage@0.3.2
+plugin_manager action=install_bundle target=dsh-ssh-manage@0.3.4
 ```
 
 或使用 DSH CLI：
 
 ```bash
-dsh plugin add dsh-ssh-manage@0.3.2
+dsh plugin add dsh-ssh-manage@0.3.4
 ```
 
 安装后刷新 Web 页面，左侧栏会出现「SSH 主机」入口，入口 id 为 `dsh-ssh-manage`。

package/client.js

@@ -134,6 +134,9 @@ window.__ModuleLoader__.load({
       'editor.port': ['端口', 'Port'],
       'editor.group': ['分组', 'Group'],
       'editor.groupPlaceholder': ['例如 production', 'e.g. production'],
+      'editor.groupChoose': ['选择已有分组', 'Choose an existing group'],
+      'editor.groupNone': ['无分组', 'No group'],
+      'editor.groupNoOptions': ['还没有已有分组，直接输入新名称即可。', 'No groups yet; type a new name.'],
       'editor.tags': ['标签', 'Tags'],
       'editor.tagsPlaceholder': ['web, critical（逗号分隔）', 'web, critical (comma separated)'],
       'editor.label': ['显示名称', 'Display name'],
@@ -206,7 +209,13 @@ window.__ModuleLoader__.load({
       'drawer.details.password': ['密码', 'Password'],
       'drawer.details.savePassword': ['保存密码', 'Save password'],
       'drawer.details.clearPassword': ['清除密码', 'Clear password'],
-      'drawer.details.passwordHint': ['密码使用 AES-256-GCM 加密保存在本机，不会回传到浏览器。', 'Passwords are AES-256-GCM encrypted on this machine and never returned to the browser.'],
+      'drawer.details.passwordHint': ['密码使用 AES-256-GCM 加密保存在本机；点击“显示密码”可在当前页面临时明文查看，30 秒后自动隐藏。', 'Passwords are AES-256-GCM encrypted at rest; use Show password to reveal one temporarily on this page (auto-hides after 30 seconds).'],
+      'drawer.details.reveal': ['显示密码', 'Show password'],
+      'drawer.details.hide': ['隐藏密码', 'Hide password'],
+      'drawer.details.copyPassword': ['复制密码', 'Copy password'],
+      'drawer.details.passwordCopied': ['密码已复制', 'Password copied'],
+      'drawer.details.revealWarning': ['密码已明文显示；注意旁人、录屏和截图，30 秒后自动隐藏。', 'The password is visible in plain text; watch for onlookers, screen recording and screenshots. It hides after 30 seconds.'],
+      'drawer.details.revealFailed': ['无法显示密码：{message}', 'Could not reveal the password: {message}'],
       'drawer.details.system': ['主机信息', 'System'],
       'drawer.details.detect': ['检测信息', 'Detect'],
       'drawer.details.detecting': ['检测中…', 'Detecting…'],
@@ -780,6 +789,25 @@ window.__ModuleLoader__.load({
       )
     }
 
+    function IconEye({ size = 14 }) {
+      return h(
+        Svg,
+        { size },
+        h(P, { d: 'M2.5 12s3.6-6.2 9.5-6.2S21.5 12 21.5 12s-3.6 6.2-9.5 6.2S2.5 12 2.5 12Z' }),
+        h('circle', { cx: 12, cy: 12, r: 3, stroke: 'currentColor', strokeWidth: 1.5 }),
+      )
+    }
+
+    function IconEyeOff({ size = 14 }) {
+      return h(
+        Svg,
+        { size },
+        h(P, { d: 'M3 3l18 18' }),
+        h(P, { d: 'M10.6 6.1A10.7 10.7 0 0 1 12 6c5.9 0 9.5 6 9.5 6a17 17 0 0 1-3.1 3.6M6.4 6.8C3.9 8.7 2.5 12 2.5 12s3.6 6 9.5 6a10.9 10.9 0 0 0 4.5-1' }),
+        h(P, { d: 'M9.9 9.9a3 3 0 0 0 4.2 4.2' }),
+      )
+    }
+
     function IconEraser({ size = 15 }) {
       return h(
         Svg,
@@ -4429,20 +4457,71 @@ window.__ModuleLoader__.load({
     }
 
     function DetailsView({ model, host, onEdit, onDelete }) {
-      const { t, localeId, isPending, testHost, inspectHost, savePassword, removePassword } = model
+      const { t, notify, localeId, isPending, testHost, inspectHost, savePassword, removePassword } = model
       const [password, setPassword] = React.useState('')
       const [saving, setSaving] = React.useState(false)
+      const [revealedPassword, setRevealedPassword] = React.useState('')
+      const [revealing, setRevealing] = React.useState(false)
+      const revealTimer = React.useRef(null)
       const credential = credentialInfo(host, t)
       const testing = isPending(`test:${host.host}`)
       const inspecting = isPending(`inspect:${host.host}`)
       const hasSystem = Boolean(host.system || host.cpuCores || host.memoryGB || host.diskGB || host.latencyMs)
 
+      const hideRevealed = () => {
+        if (revealTimer.current) {
+          clearTimeout(revealTimer.current)
+          revealTimer.current = null
+        }
+        setRevealedPassword('')
+      }
+
+      React.useEffect(() => {
+        hideRevealed()
+        return () => {
+          if (revealTimer.current) clearTimeout(revealTimer.current)
+        }
+      }, [host.host])
+
+      async function toggleReveal() {
+        if (revealedPassword) {
+          hideRevealed()
+          return
+        }
+        if (revealing || host.passwordConfigured !== true) return
+        setRevealing(true)
+        try {
+          const value = await callAction('credential/reveal', { host: host.host })
+          const revealed = String(value?.password ?? '')
+          if (!revealed) return
+          setRevealedPassword(revealed)
+          if (revealTimer.current) clearTimeout(revealTimer.current)
+          revealTimer.current = setTimeout(() => {
+            revealTimer.current = null
+            setRevealedPassword('')
+          }, 30_000)
+        } catch (failure) {
+          notify(t('drawer.details.revealFailed', { message: errorMessage(failure) }), 'error')
+        } finally {
+          setRevealing(false)
+        }
+      }
+
+      async function copyRevealed() {
+        if (!revealedPassword) return
+        const copied = await copyTextToClipboard(revealedPassword)
+        notify(copied ? t('drawer.details.passwordCopied') : t('drawer.details.revealFailed', { message: t('terminal.copyFailed') }), copied ? 'success' : 'error')
+      }
+
       async function submitPassword() {
         if (!password || saving) return
         setSaving(true)
         const ok = await savePassword(host, password)
         setSaving(false)
-        if (ok) setPassword('')
+        if (ok) {
+          setPassword('')
+          hideRevealed()
+        }
       }
 
       return h(
@@ -4484,6 +4563,30 @@ window.__ModuleLoader__.load({
             h('h3', { className: 'ssh-sectionTitle' }, t('drawer.details.credentials')),
             h(Badge, { tone: credential.tone }, credential.label),
           ),
+          h(
+            'div',
+            { className: 'ssh-credentialReveal' },
+            h(
+              Button,
+              {
+                size: 'sm',
+                variant: 'ghost',
+                onClick: () => void toggleReveal(),
+                disabled: revealing || (!host.passwordConfigured && !revealedPassword),
+              },
+              revealing ? h(Spinner, { size: 12 }) : revealedPassword ? h(IconEyeOff, { size: 13 }) : h(IconEye, { size: 13 }),
+              revealedPassword ? t('drawer.details.hide') : t('drawer.details.reveal'),
+            ),
+            revealedPassword
+              ? h('code', { className: 'ssh-revealValue' }, revealedPassword)
+              : null,
+            revealedPassword
+              ? h(IconButton, { title: t('drawer.details.copyPassword'), onClick: () => void copyRevealed() }, h(IconCopy, { size: 14 }))
+              : null,
+          ),
+          revealedPassword
+            ? h('div', { className: 'ssh-sectionHint ssh-revealWarning' }, h(IconEye, { size: 12 }), h('span', null, t('drawer.details.revealWarning')))
+            : null,
           h(
             'div',
             { className: 'ssh-credentialRow' },
@@ -4505,7 +4608,7 @@ window.__ModuleLoader__.load({
             host.passwordConfigured
               ? h(
                   Button,
-                  { size: 'sm', variant: 'dangerGhost', onClick: () => void removePassword(host) },
+                  { size: 'sm', variant: 'dangerGhost', onClick: () => { hideRevealed(); void removePassword(host) } },
                   t('drawer.details.clearPassword'),
                 )
               : null,
@@ -4590,6 +4693,9 @@ window.__ModuleLoader__.load({
       const [password, setPassword] = React.useState('')
       const [passwordError, setPasswordError] = React.useState('')
       const [formError, setFormError] = React.useState('')
+      const [groupMenuOpen, setGroupMenuOpen] = React.useState(false)
+      const groupMenuRef = React.useRef(null)
+      const groupOptions = (model.allGroups ?? []).filter((group) => group.key !== '').map((group) => group.key)
       const busy = isPending('editor')
       const passwordRequired = !original || original.passwordConfigured !== true
 
@@ -4619,6 +4725,27 @@ window.__ModuleLoader__.load({
         }
       })
 
+      React.useEffect(() => {
+        if (!groupMenuOpen) return undefined
+        const close = (event) => {
+          if (groupMenuRef.current && groupMenuRef.current.contains(event.target)) return
+          setGroupMenuOpen(false)
+        }
+        const onKey = (event) => {
+          if (event.key === 'Escape') {
+            event.preventDefault()
+            event.stopPropagation()
+            setGroupMenuOpen(false)
+          }
+        }
+        document.addEventListener('mousedown', close)
+        document.addEventListener('keydown', onKey, true)
+        return () => {
+          document.removeEventListener('mousedown', close)
+          document.removeEventListener('keydown', onKey, true)
+        }
+      }, [groupMenuOpen])
+
       async function submit() {
         const alias = draft.host.trim()
         const hostname = draft.hostname.trim()
@@ -4745,11 +4872,59 @@ window.__ModuleLoader__.load({
             h(
               Field,
               { label: t('editor.group') },
-              h(TextInput, {
-                value: draft.group,
-                onChange: (value) => update('group', value),
-                placeholder: t('editor.groupPlaceholder'),
-              }),
+              h(
+                'div',
+                { className: 'ssh-groupCombo', ref: groupMenuRef },
+                h(TextInput, {
+                  value: draft.group,
+                  onChange: (value) => update('group', value),
+                  placeholder: t('editor.groupPlaceholder'),
+                }),
+                h(
+                  'button',
+                  {
+                    type: 'button',
+                    className: 'ssh-groupToggle',
+                    title: t('editor.groupChoose'),
+                    'aria-label': t('editor.groupChoose'),
+                    'aria-haspopup': 'listbox',
+                    'aria-expanded': groupMenuOpen,
+                    onClick: () => setGroupMenuOpen((value) => !value),
+                  },
+                  h(IconChevronDown, { size: 13 }),
+                ),
+                groupMenuOpen
+                  ? h(
+                      'div',
+                      { className: 'ssh-groupMenu', role: 'listbox' },
+                      h('button', {
+                        type: 'button',
+                        role: 'option',
+                        'aria-selected': draft.group.trim() === '',
+                        className: cx('ssh-groupOption', draft.group.trim() === '' && 'active'),
+                        onClick: () => {
+                          update('group', '')
+                          setGroupMenuOpen(false)
+                        },
+                      }, t('editor.groupNone')),
+                      groupOptions.length === 0
+                        ? h('div', { className: 'ssh-groupEmpty' }, t('editor.groupNoOptions'))
+                        : groupOptions.map((option) =>
+                            h('button', {
+                              key: option,
+                              type: 'button',
+                              role: 'option',
+                              'aria-selected': draft.group.trim() === option,
+                              className: cx('ssh-groupOption', draft.group.trim() === option && 'active'),
+                              onClick: () => {
+                                update('group', option)
+                                setGroupMenuOpen(false)
+                              },
+                            }, option),
+                          ),
+                    )
+                  : null,
+              ),
             ),
             h(
               Field,
@@ -5298,7 +5473,7 @@ body.ssh-col-resizing,body.ssh-col-resizing *{cursor:col-resize!important;user-s
 .ssh-mainTop{flex:0 0 auto;display:flex;align-items:center;flex-wrap:wrap;gap:8px;row-gap:6px;padding:10px 14px;border-bottom:.5px solid var(--ssh-border);min-height:56px}
 .ssh-context{display:flex;align-items:baseline;gap:6px;min-width:0;max-width:180px;flex:0 0 auto}
 .ssh-contextName{font-size:14px;font-weight:600;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}
-.ssh-contextCount{font-size:11px;color:var(--ssh-text-3);font-variant-numeric:tabular-nums}
+.ssh-contextCount{font-size:11px;color:var(--ssh-text-2);font-variant-numeric:tabular-nums}
 .ssh-search{position:relative;display:flex;align-items:center;flex:0 1 300px;min-width:120px}
 .ssh-search > svg{position:absolute;left:10px;color:var(--ssh-dim);pointer-events:none;z-index:1}
 .ssh-search .ssh-input{height:30px;padding-left:31px;border-radius:999px;background:var(--ssh-layer-1);font-size:12px}
@@ -5312,7 +5487,7 @@ body.ssh-col-resizing,body.ssh-col-resizing *{cursor:col-resize!important;user-s
 .ssh-table{flex:1;min-height:0;display:flex;flex-direction:column;min-width:0}
 .ssh-tableScroll{flex:1;min-height:0;overflow:auto;display:flex;flex-direction:column}
 .ssh-grid{display:grid;align-items:center;column-gap:8px;padding:0 12px;width:100%;min-width:0}
-.ssh-head{flex:0 0 auto;height:38px;border-bottom:.5px solid var(--ssh-border);color:var(--ssh-text-3);font-size:11px;font-weight:500;background:var(--ssh-bg);position:sticky;top:0;z-index:3;min-width:640px}
+.ssh-head{flex:0 0 auto;height:38px;border-bottom:.5px solid var(--ssh-border);color:var(--ssh-text-2);font-size:11px;font-weight:500;background:var(--ssh-bg);position:sticky;top:0;z-index:3;min-width:640px}
 .ssh-cell{min-width:0;display:flex;align-items:center;gap:6px;overflow:hidden}
 .ssh-headBtn{appearance:none;display:inline-flex;align-items:center;gap:4px;padding:0;border:0;background:transparent;color:inherit;font:inherit;font-size:11px;font-weight:500;cursor:pointer;white-space:nowrap;min-width:0}
 .ssh-headBtn:hover{color:var(--ssh-text)}
@@ -5330,32 +5505,32 @@ body.ssh-col-resizing,body.ssh-col-resizing *{cursor:col-resize!important;user-s
 .ssh-colLatency{min-width:0}
 .ssh-colSystem{min-width:0}
 .ssh-osBadge{flex:0 0 auto;display:inline-flex;align-items:center;justify-content:center;width:26px;height:26px;border-radius:8px;background:var(--ssh-layer-3);color:var(--ssh-brand)}
-.ssh-osBadge.muted{color:var(--ssh-dim)}
+.ssh-osBadge.muted{color:var(--ssh-text-2)}
 .ssh-osName{font-size:11.5px;color:var(--ssh-text-2);white-space:nowrap;overflow:hidden;text-overflow:ellipsis}
-.ssh-osName.muted{color:var(--ssh-dim)}
+.ssh-osName.muted{color:var(--ssh-text-2)}
 .ssh-latency{appearance:none;display:inline-flex;align-items:center;gap:5px;height:24px;padding:0;border:0;border-radius:4px;background:transparent;color:var(--ssh-text-2);font:inherit;font-size:11.5px;white-space:nowrap;cursor:pointer}
-.ssh-latency.ok{color:var(--dsw-alias-state-success-label,var(--ssh-text-2))}
-.ssh-latency.muted{color:var(--ssh-dim)}
+.ssh-latency.ok{color:var(--ssh-success)}
+.ssh-latency.muted{color:var(--ssh-text-2)}
 .ssh-latency:hover:not(:disabled){color:var(--ssh-text)}
 .ssh-latency:disabled{cursor:default}
 .ssh-latencyDot{width:6px;height:6px;border-radius:50%;background:currentColor;opacity:.55}
 .ssh-latencyIcon{display:inline-flex;color:var(--dsw-alias-state-success-label,var(--ssh-success))}
 .ssh-colName{flex-direction:column;align-items:flex-start;gap:0}
 .ssh-nameMain{display:flex;align-items:center;gap:5px;max-width:100%;font-size:12.5px;font-weight:500;color:var(--ssh-text);white-space:nowrap;overflow:hidden;text-overflow:ellipsis}
-.ssh-nameSub{max-width:100%;font-size:10.5px;color:var(--ssh-dim);white-space:nowrap;overflow:hidden;text-overflow:ellipsis}
+.ssh-nameSub{max-width:100%;font-size:10.5px;color:var(--ssh-text-2);white-space:nowrap;overflow:hidden;text-overflow:ellipsis}
 .ssh-favMark{color:var(--ssh-warn);display:inline-flex;flex:0 0 auto}
 .ssh-colAddress{gap:3px;min-width:0}
-.ssh-address{font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;font-size:11px;color:var(--ssh-text-2);white-space:nowrap;overflow:hidden;text-overflow:ellipsis;min-width:0}
+.ssh-address{font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;font-size:11px;color:var(--ssh-text);white-space:nowrap;overflow:hidden;text-overflow:ellipsis;min-width:0}
 .ssh-inlineActions{display:inline-flex;gap:1px;flex:0 0 auto;opacity:.45;transition:opacity .12s ease}
 .ssh-row:hover .ssh-inlineActions{opacity:1}
 .ssh-miniBtn{appearance:none;display:inline-flex;align-items:center;justify-content:center;width:20px;height:20px;padding:0;border:0;border-radius:4px;background:transparent;color:var(--ssh-text-3);cursor:pointer}
 .ssh-miniBtn:hover{background:var(--ssh-hover);color:var(--ssh-text)}
 .ssh-colInfo{gap:4px;row-gap:3px;flex-wrap:wrap;align-content:center;overflow:visible}
 .ssh-chip{display:inline-flex;flex:0 0 auto;align-items:center;height:21px;max-width:100%;padding:0 7px;border-radius:6px;border:.5px solid var(--ssh-border);background:var(--ssh-layer-3);font-size:10.5px;color:var(--ssh-text-2);white-space:nowrap;overflow:hidden;text-overflow:ellipsis}
-.ssh-mutedText{font-size:11.5px;color:var(--ssh-dim)}
+.ssh-mutedText{font-size:11.5px;color:var(--ssh-text-2)}
 .ssh-colNotes{min-width:0}
 .ssh-noteText{font-size:11.5px;color:var(--ssh-text-2);white-space:nowrap;overflow:hidden;text-overflow:ellipsis}
-.ssh-noteText.muted{color:var(--ssh-dim)}
+.ssh-noteText.muted{color:var(--ssh-text-2)}
 .ssh-colActions{gap:4px;justify-content:flex-start;overflow:visible}
 .ssh-colGear{justify-content:flex-end}
 .ssh-empty{flex:1;display:flex;flex-direction:column;align-items:center;justify-content:center;gap:10px;padding:56px 24px;text-align:center;color:var(--ssh-text-3);font-size:12px;min-height:0}
@@ -5391,6 +5566,14 @@ body.ssh-col-resizing,body.ssh-col-resizing *{cursor:col-resize!important;user-s
 .ssh-input.mono,.ssh-textarea.mono{font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;font-size:11.5px}
 .ssh-textarea{height:auto;padding:9px 11px;line-height:1.65;resize:vertical;min-height:74px}
 .ssh-field{display:flex;flex-direction:column;gap:5px;min-width:0}
+.ssh-groupCombo{position:relative;display:flex;align-items:center;gap:4px}
+.ssh-groupCombo .ssh-input{flex:1;min-width:0}
+.ssh-groupToggle{appearance:none;display:inline-flex;align-items:center;justify-content:center;width:30px;height:30px;padding:0;border:.5px solid var(--ssh-border-strong);border-radius:var(--ssh-radius-sm);background:var(--ssh-layer-2);color:var(--ssh-text-2);cursor:pointer;flex:0 0 auto}
+.ssh-groupToggle:hover{background:var(--ssh-hover);color:var(--ssh-text)}
+.ssh-groupMenu{position:absolute;z-index:12;top:calc(100% + 5px);left:0;right:0;max-height:190px;overflow:auto;padding:4px;border:.5px solid var(--ssh-border-strong);border-radius:var(--ssh-radius-md);background:var(--ssh-layer-1);box-shadow:var(--ssh-shadow)}
+.ssh-groupOption{appearance:none;display:block;width:100%;padding:6px 8px;border:0;border-radius:6px;background:transparent;color:var(--ssh-text);font:inherit;font-size:12px;text-align:left;cursor:pointer}
+.ssh-groupOption:hover,.ssh-groupOption.active{background:var(--ssh-hover)}
+.ssh-groupEmpty{padding:6px 8px;font-size:11.5px;color:var(--ssh-text-2)}
 .ssh-field.wide{grid-column:1/-1}
 .ssh-label{font-size:11.5px;font-weight:500;color:var(--ssh-text-2)}
 .ssh-hint{font-size:10.5px;color:var(--ssh-text-3);line-height:1.55}
@@ -5544,6 +5727,9 @@ body.ssh-col-resizing,body.ssh-col-resizing *{cursor:col-resize!important;user-s
 .ssh-kvValue{color:var(--ssh-text-2);min-width:0;word-break:break-word}
 .ssh-kvValue.mono{font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;font-size:11px}
 .ssh-sectionHint{font-size:11.5px;color:var(--ssh-text-3);line-height:1.65}
+.ssh-credentialReveal{display:flex;align-items:center;gap:8px;flex-wrap:wrap;margin-bottom:2px}
+.ssh-revealValue{font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;font-size:12px;padding:5px 8px;border:.5px solid var(--ssh-border-strong);border-radius:6px;background:var(--ssh-layer-3);color:var(--ssh-text);word-break:break-all;user-select:all}
+.ssh-revealWarning{display:flex;align-items:flex-start;gap:5px;color:var(--ssh-warn)}
 .ssh-tags{display:flex;gap:5px;flex-wrap:wrap}
 .ssh-detailsActions{display:flex;gap:8px;padding-top:2px}
 .ssh-credentialRow{display:flex;align-items:center;gap:6px}

package/index.js

@@ -167,6 +167,12 @@ export async function runAction(paths, action, params = {}) {
     }
     case 'credential/delete':
       return await removePassword(paths, requireString(params, 'host'))
+    case 'credential/reveal': {
+      const host = await findHost(paths, params.host)
+      const password = await getPassword(paths, host.host)
+      if (!password) throw new Error('No password is stored for this host')
+      return { password }
+    }
     case 'host/metadata': {
       const alias = requireString(params, 'host')
       await findHost(paths, alias)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-ssh-manage",
-  "version": "0.3.2",
+  "version": "0.3.4",
   "description": "A DSH sidebar plugin for managing SSH host profiles with a real interactive PTY terminal.",
   "license": "MIT",
   "private": false,