ssh-picker 0.1.0

package/README.md

@@ -0,0 +1,68 @@
+# SSHP / SSH Picker
+
+SSHP is a terminal dashboard for saved SSH servers with an encrypted portable vault and SFTP file transfers.
+
+## Install
+
+From npm:
+
+```bash
+npm install -g ssh-picker
+```
+
+From the GitHub release tarball:
+
+```bash
+npm install -g https://github.com/adittanu/ssh-picker/releases/download/v0.1.0/ssh-picker-0.1.0.tgz
+```
+
+From a local checkout:
+
+```bash
+npm install -g .
+```
+
+The package builds automatically during install and exposes a global `sshp` command.
+
+## Quick start
+
+```bash
+sshp init        # create ~/.sshp/sshp.db encrypted with a master password
+sshp add         # add a password-based SSH server
+sshp             # open the dashboard
+```
+
+Dashboard keys:
+
+- `Enter` connect to the selected server over SSH
+- `F` open SFTP file manager
+- `/` search servers
+- `Q` or `Esc` quit
+
+## Scriptable commands
+
+```bash
+sshp list
+sshp connect <server>
+sshp files <server>
+sshp upload <server> <local> <remote>
+sshp download <server> <remote> <local>
+sshp export backup.sshp
+sshp import backup.sshp
+sshp config set dataDir <path>
+```
+
+## Security notes
+
+- The master password is never stored.
+- Credentials are encrypted with AES-256-GCM.
+- The vault key is derived with Node's `scrypt` implementation.
+- Export files contain the already-encrypted SQLite vault and still require the master password.
+
+## Development
+
+```bash
+npm install
+npm run build
+npm test
+```

package/dist/cli/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/cli/index.js

@@ -0,0 +1,192 @@
+#!/usr/bin/env node
+import { jsx as _jsx } from "react/jsx-runtime";
+import { Command } from 'commander';
+import { render } from 'ink';
+import { input, password, confirm } from '@inquirer/prompts';
+import { statSync } from 'node:fs';
+import { basename } from 'node:path';
+import { writeBootstrapConfig } from '../config/paths.js';
+import { toFriendlyMessage } from '../shared/errors.js';
+async function askMasterPassword(message = 'Master password') {
+    return password({ message, mask: '*' });
+}
+async function unlockFromPrompt() {
+    const { unlockVault } = await import('../vault/vault.js');
+    return unlockVault(await askMasterPassword());
+}
+async function runInit() {
+    const { initVault } = await import('../vault/vault.js');
+    const first = await askMasterPassword('Create master password');
+    const second = await askMasterPassword('Confirm master password');
+    if (first !== second)
+        throw new Error('Master passwords do not match.');
+    const vault = initVault(first);
+    console.log(`Initialized SSHP vault at ${vault.dataDir}`);
+}
+async function runAdd() {
+    const [{ openMigratedDatabase }, { ServerRepository }, { encryptString }] = await Promise.all([
+        import('../db/connection.js'),
+        import('../db/repositories/serverRepository.js'),
+        import('../vault/crypto.js')
+    ]);
+    const vault = await unlockFromPrompt();
+    const name = await input({ message: 'Name' });
+    const host = await input({ message: 'Host' });
+    const username = await input({ message: 'Username' });
+    const portText = await input({ message: 'Port', default: '22' });
+    const serverPassword = await password({ message: 'SSH password', mask: '*' });
+    const defaultRemotePath = await input({ message: 'Default remote path', default: '/home/' + username });
+    const db = openMigratedDatabase(vault.dbPath);
+    try {
+        const server = new ServerRepository(db).create({
+            name,
+            host,
+            username,
+            port: Number(portText) || 22,
+            authType: 'password',
+            encryptedPassword: encryptString(serverPassword, vault.key),
+            defaultRemotePath
+        });
+        console.log(`Added ${server.name} (${server.username}@${server.host}:${server.port})`);
+    }
+    finally {
+        db.close();
+    }
+}
+async function runList() {
+    const [{ openMigratedDatabase }, { ServerRepository }] = await Promise.all([
+        import('../db/connection.js'),
+        import('../db/repositories/serverRepository.js')
+    ]);
+    const vault = await unlockFromPrompt();
+    const db = openMigratedDatabase(vault.dbPath);
+    try {
+        const servers = new ServerRepository(db).list();
+        if (servers.length === 0) {
+            console.log('No servers. Run `sshp add`.');
+            return;
+        }
+        for (const server of servers) {
+            console.log(`${server.name}\t${server.username}@${server.host}:${server.port}\t${server.connectionCount} connections`);
+        }
+    }
+    finally {
+        db.close();
+    }
+}
+async function loadServer(name) {
+    const [{ openMigratedDatabase }, { ServerRepository }] = await Promise.all([
+        import('../db/connection.js'),
+        import('../db/repositories/serverRepository.js')
+    ]);
+    const vault = await unlockFromPrompt();
+    const db = openMigratedDatabase(vault.dbPath);
+    try {
+        const repo = new ServerRepository(db);
+        return { vault, server: repo.findByName(name) };
+    }
+    finally {
+        db.close();
+    }
+}
+async function recordServerAction(vaultDbPath, serverId, action, localPath, remotePath) {
+    const [{ openMigratedDatabase }, { ServerRepository }] = await Promise.all([
+        import('../db/connection.js'),
+        import('../db/repositories/serverRepository.js')
+    ]);
+    const db = openMigratedDatabase(vaultDbPath);
+    try {
+        new ServerRepository(db).recordConnection(serverId, action, localPath, remotePath);
+    }
+    finally {
+        db.close();
+    }
+}
+async function runConnect(name) {
+    const [{ connectSsh }, { decryptServerCredentials }] = await Promise.all([
+        import('../ssh/client.js'),
+        import('../shared/credentials.js')
+    ]);
+    const { vault, server } = await loadServer(name);
+    await connectSsh({ server, credentials: decryptServerCredentials(server, vault) });
+    await recordServerAction(vault.dbPath, server.id, 'ssh');
+}
+async function runDashboard() {
+    const { App } = await import('../tui/App.js');
+    const vault = await unlockFromPrompt();
+    render(_jsx(App, { vault: vault }));
+}
+async function runFiles(name) {
+    const { FileManager } = await import('../tui/screens/FileManager.js');
+    const { vault, server } = await loadServer(name);
+    render(_jsx(FileManager, { server: server, vault: vault, onBack: () => undefined }));
+}
+async function runUpload(name, localPath, remotePath) {
+    const [{ withSftp }, { decryptServerCredentials }] = await Promise.all([
+        import('../sftp/client.js'),
+        import('../shared/credentials.js')
+    ]);
+    const { vault, server } = await loadServer(name);
+    const overwrite = await confirm({ message: 'Overwrite remote path if it exists?', default: false });
+    await withSftp({ server, credentials: decryptServerCredentials(server, vault) }, async (client) => {
+        const stat = statSync(localPath);
+        const target = stat.isDirectory() ? remotePath.replace(/\/$/, '') + '/' + basename(localPath) : remotePath;
+        await client.uploadRecursive(localPath, target, overwrite);
+    });
+    await recordServerAction(vault.dbPath, server.id, 'upload', localPath, remotePath);
+    console.log('Upload complete.');
+}
+async function runDownload(name, remotePath, localPath) {
+    const [{ withSftp }, { decryptServerCredentials }] = await Promise.all([
+        import('../sftp/client.js'),
+        import('../shared/credentials.js')
+    ]);
+    const { vault, server } = await loadServer(name);
+    const overwrite = await confirm({ message: 'Overwrite local path if it exists?', default: false });
+    await withSftp({ server, credentials: decryptServerCredentials(server, vault) }, async (client) => {
+        await client.downloadFile(remotePath, localPath, overwrite);
+    });
+    await recordServerAction(vault.dbPath, server.id, 'download', localPath, remotePath);
+    console.log('Download complete.');
+}
+async function runExport(file) {
+    const { exportVault } = await import('../import-export/archive.js');
+    console.log(`Exported to ${exportVault(file)}`);
+}
+async function runImport(file) {
+    const { importVault } = await import('../import-export/archive.js');
+    const ok = await confirm({ message: 'Import will replace the current vault database. Continue?', default: false });
+    if (!ok)
+        return;
+    console.log(`Imported to ${importVault(file)}`);
+}
+async function main() {
+    const program = new Command();
+    program
+        .name('sshp')
+        .description('Portable encrypted SSH/SFTP picker')
+        .version('0.1.0')
+        .action(runDashboard);
+    program.command('init').description('Create a portable encrypted vault').action(runInit);
+    program.command('add').description('Add a password-based SSH server').action(runAdd);
+    program.command('list').description('List saved servers').action(runList);
+    program.command('connect <server>').description('Connect to a server over SSH').action(runConnect);
+    program.command('files <server>').description('Open the SFTP file manager').action(runFiles);
+    program.command('upload <server> <local> <remote>').description('Upload a file or folder over SFTP').action(runUpload);
+    program.command('download <server> <remote> <local>').description('Download a file over SFTP').action(runDownload);
+    program.command('export <file>').description('Export encrypted vault backup').action(runExport);
+    program.command('import <file>').description('Import encrypted vault backup').action(runImport);
+    const config = program.command('config').description('Manage SSHP configuration');
+    config.command('set <key> <value>').description('Set a config value').action((key, value) => {
+        if (key !== 'dataDir')
+            throw new Error('Only dataDir is supported.');
+        writeBootstrapConfig({ dataDir: value });
+        console.log(`dataDir set to ${value}`);
+    });
+    await program.parseAsync(process.argv);
+}
+main().catch((error) => {
+    console.error(toFriendlyMessage(error));
+    process.exitCode = 1;
+});
+//# sourceMappingURL=index.js.map

package/dist/cli/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.tsx"],"names":[],"mappings":";;AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAGxD,KAAK,UAAU,iBAAiB,CAAC,OAAO,GAAG,iBAAiB;IAC1D,OAAO,QAAQ,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,gBAAgB;IAC7B,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC1D,OAAO,WAAW,CAAC,MAAM,iBAAiB,EAAE,CAAC,CAAC;AAChD,CAAC;AAED,KAAK,UAAU,OAAO;IACpB,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,wBAAwB,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,yBAAyB,CAAC,CAAC;IAClE,IAAI,KAAK,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,OAAO,CAAC,GAAG,CAAC,6BAA6B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,KAAK,UAAU,MAAM;IACnB,MAAM,CAAC,EAAE,oBAAoB,EAAE,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC5F,MAAM,CAAC,qBAAqB,CAAC;QAC7B,MAAM,CAAC,wCAAwC,CAAC;QAChD,MAAM,CAAC,oBAAoB,CAAC;KAC7B,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,MAAM,gBAAgB,EAAE,CAAC;IACvC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9E,MAAM,iBAAiB,GAAG,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,qBAAqB,EAAE,OAAO,EAAE,QAAQ,GAAG,QAAQ,EAAE,CAAC,CAAC;IACxG,MAAM,EAAE,GAAG,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;YAC7C,IAAI;YACJ,IAAI;YACJ,QAAQ;YACR,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE;YAC5B,QAAQ,EAAE,UAAU;YACpB,iBAAiB,EAAE,aAAa,CAAC,cAAc,EAAE,KAAK,CAAC,GAAG,CAAC;YAC3D,iBAAiB;SAClB,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,SAAS,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;IACzF,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAED,KAAK,UAAU,OAAO;IACpB,MAAM,CAAC,EAAE,oBAAoB,EAAE,EAAE,EAAE,gBAAgB,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACzE,MAAM,CAAC,qBAAqB,CAAC;QAC7B,MAAM,CAAC,wCAAwC,CAAC;KACjD,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,MAAM,gBAAgB,EAAE,CAAC;IACvC,MAAM,EAAE,GAAG,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,gBAAgB,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAChD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;YAC3C,OAAO;QACT,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,eAAe,cAAc,CAAC,CAAC;QACzH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,MAAM,CAAC,EAAE,oBAAoB,EAAE,EAAE,EAAE,gBAAgB,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACzE,MAAM,CAAC,qBAAqB,CAAC;QAC7B,MAAM,CAAC,wCAAwC,CAAC;KACjD,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,MAAM,gBAAgB,EAAE,CAAC;IACvC,MAAM,EAAE,GAAG,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACtC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;IAClD,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,WAAmB,EAAE,QAAgB,EAAE,MAAc,EAAE,SAAkB,EAAE,UAAmB;IAC9H,MAAM,CAAC,EAAE,oBAAoB,EAAE,EAAE,EAAE,gBAAgB,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACzE,MAAM,CAAC,qBAAqB,CAAC;QAC7B,MAAM,CAAC,wCAAwC,CAAC;KACjD,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAC7C,IAAI,CAAC;QACH,IAAI,gBAAgB,CAAC,EAAE,CAAC,CAAC,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IACrF,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,MAAM,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,wBAAwB,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACvE,MAAM,CAAC,kBAAkB,CAAC;QAC1B,MAAM,CAAC,0BAA0B,CAAC;KACnC,CAAC,CAAC;IACH,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,UAAU,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,wBAAwB,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;IACnF,MAAM,kBAAkB,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;AAC3D,CAAC;AAED,KAAK,UAAU,YAAY;IACzB,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,MAAM,gBAAgB,EAAE,CAAC;IACvC,MAAM,CAAC,KAAC,GAAG,IAAC,KAAK,EAAE,KAAK,GAAI,CAAC,CAAC;AAChC,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAY;IAClC,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,+BAA+B,CAAC,CAAC;IACtE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,CAAC,KAAC,WAAW,IAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,GAAI,CAAC,CAAC;AACjF,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,SAAiB,EAAE,UAAkB;IAC1E,MAAM,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,wBAAwB,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACrE,MAAM,CAAC,mBAAmB,CAAC;QAC3B,MAAM,CAAC,0BAA0B,CAAC;KACnC,CAAC,CAAC;IACH,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,EAAE,OAAO,EAAE,qCAAqC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACpG,MAAM,QAAQ,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,wBAAwB,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QAChG,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;QAC3G,MAAM,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IACH,MAAM,kBAAkB,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IACnF,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;AAClC,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,UAAkB,EAAE,SAAiB;IAC5E,MAAM,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,wBAAwB,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACrE,MAAM,CAAC,mBAAmB,CAAC;QAC3B,MAAM,CAAC,0BAA0B,CAAC;KACnC,CAAC,CAAC;IACH,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,EAAE,OAAO,EAAE,oCAAoC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACnG,MAAM,QAAQ,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,wBAAwB,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QAChG,MAAM,MAAM,CAAC,YAAY,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IACH,MAAM,kBAAkB,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IACrF,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;AACpC,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAY;IACnC,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,CAAC,eAAe,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAY;IACnC,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAC;IACpE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE,OAAO,EAAE,2DAA2D,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACnH,IAAI,CAAC,EAAE;QAAE,OAAO;IAChB,OAAO,CAAC,GAAG,CAAC,eAAe,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,OAAO;SACJ,IAAI,CAAC,MAAM,CAAC;SACZ,WAAW,CAAC,oCAAoC,CAAC;SACjD,OAAO,CAAC,OAAO,CAAC;SAChB,MAAM,CAAC,YAAY,CAAC,CAAC;IAExB,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,mCAAmC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzF,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,iCAAiC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACrF,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC1E,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,WAAW,CAAC,8BAA8B,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACnG,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,WAAW,CAAC,4BAA4B,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC7F,OAAO,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC,WAAW,CAAC,mCAAmC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACvH,OAAO,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC,WAAW,CAAC,2BAA2B,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACnH,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,WAAW,CAAC,+BAA+B,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAChG,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,WAAW,CAAC,+BAA+B,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAEhG,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,2BAA2B,CAAC,CAAC;IAClF,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;QAC1F,IAAI,GAAG,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACrE,oBAAoB,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,EAAE,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AACzC,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC;IACxC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}

package/dist/config/paths.d.ts

@@ -0,0 +1,17 @@
+export declare const APP_DIR_NAME = ".sshp";
+export declare const DB_FILE_NAME = "sshp.db";
+export declare const CONFIG_FILE_NAME = "config.json";
+export interface PathResolutionOptions {
+    env?: NodeJS.ProcessEnv;
+    home?: string;
+}
+export interface BootstrapConfig {
+    dataDir?: string;
+}
+export declare function defaultDataDir(home?: string): string;
+export declare function bootstrapConfigPath(home?: string): string;
+export declare function readBootstrapConfig(home?: string): BootstrapConfig;
+export declare function writeBootstrapConfig(config: BootstrapConfig, home?: string): void;
+export declare function resolveDataDir(options?: PathResolutionOptions): string;
+export declare function resolveDbPath(dataDir?: string): string;
+export declare function ensureDataDir(dataDir?: string): string;

package/dist/config/paths.js

@@ -0,0 +1,47 @@
+import { homedir } from 'node:os';
+import { dirname, join, resolve } from 'node:path';
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+export const APP_DIR_NAME = '.sshp';
+export const DB_FILE_NAME = 'sshp.db';
+export const CONFIG_FILE_NAME = 'config.json';
+export function defaultDataDir(home = homedir()) {
+    return join(home, APP_DIR_NAME);
+}
+export function bootstrapConfigPath(home = homedir()) {
+    return join(defaultDataDir(home), CONFIG_FILE_NAME);
+}
+export function readBootstrapConfig(home = homedir()) {
+    const path = bootstrapConfigPath(home);
+    if (!existsSync(path))
+        return {};
+    try {
+        return JSON.parse(readFileSync(path, 'utf8'));
+    }
+    catch {
+        return {};
+    }
+}
+export function writeBootstrapConfig(config, home = homedir()) {
+    const path = bootstrapConfigPath(home);
+    mkdirSync(dirname(path), { recursive: true });
+    writeFileSync(path, `${JSON.stringify(config, null, 2)}\n`, 'utf8');
+}
+export function resolveDataDir(options = {}) {
+    const env = options.env ?? process.env;
+    const home = options.home ?? homedir();
+    const explicit = env.SSHP_DATA_DIR;
+    if (explicit && explicit.trim())
+        return resolve(explicit);
+    const config = readBootstrapConfig(home);
+    if (config.dataDir && config.dataDir.trim())
+        return resolve(config.dataDir);
+    return defaultDataDir(home);
+}
+export function resolveDbPath(dataDir = resolveDataDir()) {
+    return join(dataDir, DB_FILE_NAME);
+}
+export function ensureDataDir(dataDir = resolveDataDir()) {
+    mkdirSync(dataDir, { recursive: true });
+    return dataDir;
+}
+//# sourceMappingURL=paths.js.map

package/dist/config/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/config/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAE7E,MAAM,CAAC,MAAM,YAAY,GAAG,OAAO,CAAC;AACpC,MAAM,CAAC,MAAM,YAAY,GAAG,SAAS,CAAC;AACtC,MAAM,CAAC,MAAM,gBAAgB,GAAG,aAAa,CAAC;AAW9C,MAAM,UAAU,cAAc,CAAC,IAAI,GAAG,OAAO,EAAE;IAC7C,OAAO,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAI,GAAG,OAAO,EAAE;IAClD,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,gBAAgB,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAI,GAAG,OAAO,EAAE;IAClD,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAoB,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAuB,EAAE,IAAI,GAAG,OAAO,EAAE;IAC5E,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACvC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,UAAiC,EAAE;IAChE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC;IACvC,MAAM,QAAQ,GAAG,GAAG,CAAC,aAAa,CAAC;IACnC,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE;QAAE,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;IAE1D,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAE5E,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAO,GAAG,cAAc,EAAE;IACtD,OAAO,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAO,GAAG,cAAc,EAAE;IACtD,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/db/connection.d.ts

@@ -0,0 +1,4 @@
+import { DatabaseSync } from 'node:sqlite';
+export type Database = InstanceType<typeof DatabaseSync>;
+export declare function openDatabase(dbPath?: string): Database;
+export declare function openMigratedDatabase(dbPath?: string): Database;

package/dist/db/connection.js

@@ -0,0 +1,17 @@
+import { DatabaseSync } from 'node:sqlite';
+import { dirname } from 'node:path';
+import { mkdirSync } from 'node:fs';
+import { resolveDbPath } from '../config/paths.js';
+import { runMigrations } from './migrations.js';
+export function openDatabase(dbPath = resolveDbPath()) {
+    mkdirSync(dirname(dbPath), { recursive: true });
+    const db = new DatabaseSync(dbPath);
+    db.exec('PRAGMA foreign_keys = ON; PRAGMA journal_mode = WAL;');
+    return db;
+}
+export function openMigratedDatabase(dbPath = resolveDbPath()) {
+    const db = openDatabase(dbPath);
+    runMigrations(db);
+    return db;
+}
+//# sourceMappingURL=connection.js.map

package/dist/db/connection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection.js","sourceRoot":"","sources":["../../src/db/connection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAIhD,MAAM,UAAU,YAAY,CAAC,MAAM,GAAG,aAAa,EAAE;IACnD,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,EAAE,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;IACpC,EAAE,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;IAChE,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAM,GAAG,aAAa,EAAE;IAC3D,MAAM,EAAE,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAChC,aAAa,CAAC,EAAE,CAAC,CAAC;IAClB,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/db/migrations.d.ts

@@ -0,0 +1,4 @@
+import type { Database } from './connection.js';
+export declare const CURRENT_SCHEMA_VERSION = 1;
+export declare function runMigrations(db: Database): void;
+export declare function getSchemaVersion(db: Database): number;

package/dist/db/migrations.js

@@ -0,0 +1,45 @@
+export const CURRENT_SCHEMA_VERSION = 1;
+export function runMigrations(db) {
+    db.exec(`
+    CREATE TABLE IF NOT EXISTS settings (
+      key TEXT PRIMARY KEY,
+      value TEXT NOT NULL
+    );
+
+    CREATE TABLE IF NOT EXISTS servers (
+      id INTEGER PRIMARY KEY AUTOINCREMENT,
+      name TEXT NOT NULL UNIQUE,
+      host TEXT NOT NULL,
+      port INTEGER NOT NULL DEFAULT 22,
+      username TEXT NOT NULL,
+      auth_type TEXT NOT NULL,
+      encrypted_password TEXT,
+      encrypted_private_key TEXT,
+      encrypted_passphrase TEXT,
+      tags TEXT,
+      notes TEXT,
+      default_remote_path TEXT,
+      last_connected_at TEXT,
+      connection_count INTEGER NOT NULL DEFAULT 0,
+      created_at TEXT NOT NULL,
+      updated_at TEXT NOT NULL
+    );
+
+    CREATE TABLE IF NOT EXISTS connection_history (
+      id INTEGER PRIMARY KEY AUTOINCREMENT,
+      server_id INTEGER NOT NULL,
+      action TEXT NOT NULL,
+      local_path TEXT,
+      remote_path TEXT,
+      created_at TEXT NOT NULL,
+      FOREIGN KEY (server_id) REFERENCES servers(id) ON DELETE CASCADE
+    );
+
+    PRAGMA user_version = ${CURRENT_SCHEMA_VERSION};
+  `);
+}
+export function getSchemaVersion(db) {
+    const row = db.prepare('PRAGMA user_version').get();
+    return row?.user_version ?? 0;
+}
+//# sourceMappingURL=migrations.js.map

package/dist/db/migrations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrations.js","sourceRoot":"","sources":["../../src/db/migrations.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAExC,MAAM,UAAU,aAAa,CAAC,EAAY;IACxC,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4BAmCkB,sBAAsB;GAC/C,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,EAAY;IAC3C,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,GAAG,EAA0C,CAAC;IAC5F,OAAO,GAAG,EAAE,YAAY,IAAI,CAAC,CAAC;AAChC,CAAC"}

package/dist/db/repositories/serverRepository.d.ts

@@ -0,0 +1,13 @@
+import type { Database } from '../connection.js';
+import type { CreateServerInput, ServerRecord } from '../../shared/types.js';
+export declare class ServerRepository {
+    private readonly db;
+    constructor(db: Database);
+    create(input: CreateServerInput): ServerRecord;
+    list(): ServerRecord[];
+    findById(id: number): ServerRecord;
+    findByName(name: string): ServerRecord;
+    remove(id: number): void;
+    update(id: number, input: Partial<CreateServerInput>): ServerRecord;
+    recordConnection(id: number, action: string, localPath?: string, remotePath?: string): void;
+}

package/dist/db/repositories/serverRepository.js

@@ -0,0 +1,83 @@
+import { NotFoundError } from '../../shared/errors.js';
+function mapRow(row) {
+    return {
+        id: row.id,
+        name: row.name,
+        host: row.host,
+        port: row.port,
+        username: row.username,
+        authType: row.auth_type,
+        encryptedPassword: row.encrypted_password,
+        encryptedPrivateKey: row.encrypted_private_key,
+        encryptedPassphrase: row.encrypted_passphrase,
+        tags: row.tags,
+        notes: row.notes,
+        defaultRemotePath: row.default_remote_path,
+        lastConnectedAt: row.last_connected_at,
+        connectionCount: row.connection_count,
+        createdAt: row.created_at,
+        updatedAt: row.updated_at
+    };
+}
+export class ServerRepository {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    create(input) {
+        const now = new Date().toISOString();
+        const result = this.db.prepare(`
+      INSERT INTO servers (
+        name, host, port, username, auth_type, encrypted_password,
+        encrypted_private_key, encrypted_passphrase, tags, notes,
+        default_remote_path, created_at, updated_at
+      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+    `).run(input.name, input.host, input.port, input.username, input.authType, input.encryptedPassword ?? null, input.encryptedPrivateKey ?? null, input.encryptedPassphrase ?? null, input.tags ?? null, input.notes ?? null, input.defaultRemotePath ?? null, now, now);
+        return this.findById(Number(result.lastInsertRowid));
+    }
+    list() {
+        const rows = this.db.prepare('SELECT * FROM servers ORDER BY name COLLATE NOCASE').all();
+        return rows.map(mapRow);
+    }
+    findById(id) {
+        const row = this.db.prepare('SELECT * FROM servers WHERE id = ?').get(id);
+        if (!row)
+            throw new NotFoundError('Server', String(id));
+        return mapRow(row);
+    }
+    findByName(name) {
+        const row = this.db.prepare('SELECT * FROM servers WHERE name = ?').get(name);
+        if (!row)
+            throw new NotFoundError('Server', name);
+        return mapRow(row);
+    }
+    remove(id) {
+        this.db.prepare('DELETE FROM servers WHERE id = ?').run(id);
+    }
+    update(id, input) {
+        const current = this.findById(id);
+        const next = { ...current, ...input };
+        const now = new Date().toISOString();
+        this.db.prepare(`
+      UPDATE servers SET
+        name = ?, host = ?, port = ?, username = ?, auth_type = ?,
+        encrypted_password = ?, encrypted_private_key = ?, encrypted_passphrase = ?,
+        tags = ?, notes = ?, default_remote_path = ?, updated_at = ?
+      WHERE id = ?
+    `).run(next.name, next.host, next.port, next.username, next.authType, next.encryptedPassword ?? null, next.encryptedPrivateKey ?? null, next.encryptedPassphrase ?? null, next.tags ?? null, next.notes ?? null, next.defaultRemotePath ?? null, now, id);
+        return this.findById(id);
+    }
+    recordConnection(id, action, localPath, remotePath) {
+        const now = new Date().toISOString();
+        this.db.prepare(`
+      UPDATE servers
+      SET last_connected_at = ?, connection_count = connection_count + 1, updated_at = ?
+      WHERE id = ?
+    `).run(now, now, id);
+        this.db.prepare(`
+      INSERT INTO connection_history (server_id, action, local_path, remote_path, created_at)
+      VALUES (?, ?, ?, ?, ?)
+    `).run(id, action, localPath ?? null, remotePath ?? null, now);
+    }
+}
+//# sourceMappingURL=serverRepository.js.map

package/dist/db/repositories/serverRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serverRepository.js","sourceRoot":"","sources":["../../../src/db/repositories/serverRepository.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAqBvD,SAAS,MAAM,CAAC,GAAc;IAC5B,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,iBAAiB,EAAE,GAAG,CAAC,kBAAkB;QACzC,mBAAmB,EAAE,GAAG,CAAC,qBAAqB;QAC9C,mBAAmB,EAAE,GAAG,CAAC,oBAAoB;QAC7C,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,iBAAiB,EAAE,GAAG,CAAC,mBAAmB;QAC1C,eAAe,EAAE,GAAG,CAAC,iBAAiB;QACtC,eAAe,EAAE,GAAG,CAAC,gBAAgB;QACrC,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,gBAAgB;IACE;IAA7B,YAA6B,EAAY;QAAZ,OAAE,GAAF,EAAE,CAAU;IAAG,CAAC;IAE7C,MAAM,CAAC,KAAwB;QAC7B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;;KAM9B,CAAC,CAAC,GAAG,CACJ,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,iBAAiB,IAAI,IAAI,EAC/B,KAAK,CAAC,mBAAmB,IAAI,IAAI,EACjC,KAAK,CAAC,mBAAmB,IAAI,IAAI,EACjC,KAAK,CAAC,IAAI,IAAI,IAAI,EAClB,KAAK,CAAC,KAAK,IAAI,IAAI,EACnB,KAAK,CAAC,iBAAiB,IAAI,IAAI,EAC/B,GAAG,EACH,GAAG,CACJ,CAAC;QACF,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC;IACvD,CAAC;IAED,IAAI;QACF,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,oDAAoD,CAAC,CAAC,GAAG,EAA4B,CAAC;QACnH,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IAED,QAAQ,CAAC,EAAU;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC,GAAG,CAAC,EAAE,CAA0B,CAAC;QACnG,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACxD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAED,UAAU,CAAC,IAAY;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC,GAAG,CAAC,IAAI,CAA0B,CAAC;QACvG,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAClD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAED,MAAM,CAAC,EAAU;QACf,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,CAAC,EAAU,EAAE,KAAiC;QAClD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;;KAMf,CAAC,CAAC,GAAG,CACJ,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,iBAAiB,IAAI,IAAI,EAC9B,IAAI,CAAC,mBAAmB,IAAI,IAAI,EAChC,IAAI,CAAC,mBAAmB,IAAI,IAAI,EAChC,IAAI,CAAC,IAAI,IAAI,IAAI,EACjB,IAAI,CAAC,KAAK,IAAI,IAAI,EAClB,IAAI,CAAC,iBAAiB,IAAI,IAAI,EAC9B,GAAG,EACH,EAAE,CACH,CAAC;QACF,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC3B,CAAC;IAED,gBAAgB,CAAC,EAAU,EAAE,MAAc,EAAE,SAAkB,EAAE,UAAmB;QAClF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;KAIf,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACrB,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;KAGf,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,IAAI,IAAI,EAAE,UAAU,IAAI,IAAI,EAAE,GAAG,CAAC,CAAC;IACjE,CAAC;CACF"}

package/dist/db/repositories/settingsRepository.d.ts

@@ -0,0 +1,8 @@
+import type { Database } from '../connection.js';
+export declare class SettingsRepository {
+    private readonly db;
+    constructor(db: Database);
+    get(key: string): string | null;
+    set(key: string, value: string): void;
+    delete(key: string): void;
+}

package/dist/db/repositories/settingsRepository.js

@@ -0,0 +1,20 @@
+export class SettingsRepository {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    get(key) {
+        const row = this.db.prepare('SELECT value FROM settings WHERE key = ?').get(key);
+        return row?.value ?? null;
+    }
+    set(key, value) {
+        this.db.prepare(`
+      INSERT INTO settings (key, value) VALUES (?, ?)
+      ON CONFLICT(key) DO UPDATE SET value = excluded.value
+    `).run(key, value);
+    }
+    delete(key) {
+        this.db.prepare('DELETE FROM settings WHERE key = ?').run(key);
+    }
+}
+//# sourceMappingURL=settingsRepository.js.map

package/dist/db/repositories/settingsRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settingsRepository.js","sourceRoot":"","sources":["../../../src/db/repositories/settingsRepository.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,kBAAkB;IACA;IAA7B,YAA6B,EAAY;QAAZ,OAAE,GAAF,EAAE,CAAU;IAAG,CAAC;IAE7C,GAAG,CAAC,GAAW;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC,GAAG,CAAC,GAAG,CAAkC,CAAC;QAClH,OAAO,GAAG,EAAE,KAAK,IAAI,IAAI,CAAC;IAC5B,CAAC;IAED,GAAG,CAAC,GAAW,EAAE,KAAa;QAC5B,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;KAGf,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACrB,CAAC;IAED,MAAM,CAAC,GAAW;QAChB,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACjE,CAAC;CACF"}

package/dist/import-export/archive.d.ts

@@ -0,0 +1,3 @@
+export declare function exportVault(outFile: string, dataDir?: string): string;
+export declare function importVault(inFile: string, dataDir?: string): string;
+export declare function copyVaultDataDir(sourceDbPath: string, dataDir?: string): string;

package/dist/import-export/archive.js

@@ -0,0 +1,38 @@
+import { copyFileSync, existsSync, readFileSync, writeFileSync } from 'node:fs';
+import { dirname, resolve } from 'node:path';
+import { mkdirSync } from 'node:fs';
+import { resolveDataDir, resolveDbPath } from '../config/paths.js';
+import { MissingVaultError, SshpError } from '../shared/errors.js';
+const MAGIC = 'SSHP_BACKUP_V1';
+export function exportVault(outFile, dataDir = resolveDataDir()) {
+    const dbPath = resolveDbPath(dataDir);
+    if (!existsSync(dbPath))
+        throw new MissingVaultError(dataDir);
+    const payload = {
+        magic: MAGIC,
+        exportedAt: new Date().toISOString(),
+        database: readFileSync(dbPath).toString('base64')
+    };
+    const target = resolve(outFile);
+    mkdirSync(dirname(target), { recursive: true });
+    writeFileSync(target, `${JSON.stringify(payload, null, 2)}\n`, 'utf8');
+    return target;
+}
+export function importVault(inFile, dataDir = resolveDataDir()) {
+    const source = resolve(inFile);
+    const payload = JSON.parse(readFileSync(source, 'utf8'));
+    if (payload.magic !== MAGIC || !payload.database) {
+        throw new SshpError('Unsupported or corrupt SSHP backup file.', 'INVALID_BACKUP');
+    }
+    mkdirSync(dataDir, { recursive: true });
+    const dbPath = resolveDbPath(dataDir);
+    writeFileSync(dbPath, Buffer.from(payload.database, 'base64'));
+    return dbPath;
+}
+export function copyVaultDataDir(sourceDbPath, dataDir = resolveDataDir()) {
+    mkdirSync(dataDir, { recursive: true });
+    const dbPath = resolveDbPath(dataDir);
+    copyFileSync(sourceDbPath, dbPath);
+    return dbPath;
+}
+//# sourceMappingURL=archive.js.map

package/dist/import-export/archive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive.js","sourceRoot":"","sources":["../../src/import-export/archive.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAChF,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEnE,MAAM,KAAK,GAAG,gBAAgB,CAAC;AAQ/B,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,OAAO,GAAG,cAAc,EAAE;IACrE,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAkB;QAC7B,KAAK,EAAE,KAAK;QACZ,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,QAAQ,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;KAClD,CAAC;IACF,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAChC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,aAAa,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACvE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAc,EAAE,OAAO,GAAG,cAAc,EAAE;IACpE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAkB,CAAC;IAC1E,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACjD,MAAM,IAAI,SAAS,CAAC,0CAA0C,EAAE,gBAAgB,CAAC,CAAC;IACpF,CAAC;IACD,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACtC,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC/D,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,YAAoB,EAAE,OAAO,GAAG,cAAc,EAAE;IAC/E,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACtC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACnC,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/sftp/client.d.ts

@@ -0,0 +1,21 @@
+import type { DirectoryEntry, ServerCredentials, ServerRecord } from '../shared/types.js';
+export interface SftpConnectionOptions {
+    server: ServerRecord;
+    credentials: ServerCredentials;
+}
+export declare function listLocalDirectory(path: string): DirectoryEntry[];
+export declare class SftpClient {
+    private conn?;
+    private sftp?;
+    connect({ server, credentials }: SftpConnectionOptions): Promise<void>;
+    close(): void;
+    listRemoteDirectory(path: string): Promise<DirectoryEntry[]>;
+    uploadFile(localPath: string, remotePath: string, overwrite?: boolean): Promise<void>;
+    downloadFile(remotePath: string, localPath: string, overwrite?: boolean): Promise<void>;
+    uploadRecursive(localPath: string, remotePath: string, overwrite?: boolean): Promise<void>;
+    downloadRecursive(remotePath: string, localPath: string, overwrite?: boolean): Promise<void>;
+    private remoteExists;
+    private mkdirRemote;
+    private requireSftp;
+}
+export declare function withSftp<T>(options: SftpConnectionOptions, fn: (client: SftpClient) => Promise<T>): Promise<T>;