ssh-picker 0.1.0

package/dist/sftp/client.js

@@ -0,0 +1,123 @@
+import { existsSync, mkdirSync, readdirSync, statSync } from 'node:fs';
+import { basename, dirname, join } from 'node:path';
+import { Client } from 'ssh2';
+import { SshpError } from '../shared/errors.js';
+export function listLocalDirectory(path) {
+    return readdirSync(path, { withFileTypes: true })
+        .map((entry) => {
+        const fullPath = join(path, entry.name);
+        const stat = statSync(fullPath);
+        return { name: entry.name, path: fullPath, isDirectory: entry.isDirectory(), size: stat.size, modifiedAt: stat.mtime };
+    })
+        .sort((a, b) => Number(b.isDirectory) - Number(a.isDirectory) || a.name.localeCompare(b.name));
+}
+export class SftpClient {
+    conn;
+    sftp;
+    async connect({ server, credentials }) {
+        this.conn = new Client();
+        await new Promise((resolve, reject) => {
+            this.conn.on('ready', () => {
+                this.conn.sftp((err, sftp) => {
+                    if (err)
+                        reject(err);
+                    else {
+                        this.sftp = sftp;
+                        resolve();
+                    }
+                });
+            });
+            this.conn.on('error', reject);
+            this.conn.connect({
+                host: server.host,
+                port: server.port,
+                username: server.username,
+                password: credentials.password,
+                privateKey: credentials.privateKey,
+                passphrase: credentials.passphrase,
+                readyTimeout: 20_000
+            });
+        });
+    }
+    close() {
+        this.conn?.end();
+    }
+    async listRemoteDirectory(path) {
+        const sftp = this.requireSftp();
+        const rows = await new Promise((resolve, reject) => {
+            sftp.readdir(path, (err, list) => err ? reject(err) : resolve(list));
+        });
+        return rows.map((entry) => ({
+            name: entry.filename,
+            path: path.replace(/\/$/, '') + '/' + entry.filename,
+            isDirectory: entry.attrs.isDirectory(),
+            size: entry.attrs.size,
+            modifiedAt: new Date(entry.attrs.mtime * 1000)
+        })).sort((a, b) => Number(b.isDirectory) - Number(a.isDirectory) || a.name.localeCompare(b.name));
+    }
+    async uploadFile(localPath, remotePath, overwrite = false) {
+        const sftp = this.requireSftp();
+        if (!overwrite && await this.remoteExists(remotePath))
+            throw new SshpError(`Remote path already exists: ${remotePath}`, 'OVERWRITE_CONFLICT');
+        await new Promise((resolve, reject) => {
+            sftp.fastPut(localPath, remotePath, (err) => err ? reject(err) : resolve());
+        });
+    }
+    async downloadFile(remotePath, localPath, overwrite = false) {
+        const sftp = this.requireSftp();
+        if (!overwrite && existsSync(localPath))
+            throw new SshpError(`Local path already exists: ${localPath}`, 'OVERWRITE_CONFLICT');
+        mkdirSync(dirname(localPath), { recursive: true });
+        await new Promise((resolve, reject) => {
+            sftp.fastGet(remotePath, localPath, (err) => err ? reject(err) : resolve());
+        });
+    }
+    async uploadRecursive(localPath, remotePath, overwrite = false) {
+        const stat = statSync(localPath);
+        if (!stat.isDirectory())
+            return this.uploadFile(localPath, remotePath, overwrite);
+        await this.mkdirRemote(remotePath);
+        for (const entry of readdirSync(localPath, { withFileTypes: true })) {
+            await this.uploadRecursive(join(localPath, entry.name), remotePath.replace(/\/$/, '') + '/' + entry.name, overwrite);
+        }
+    }
+    async downloadRecursive(remotePath, localPath, overwrite = false) {
+        const entries = await this.listRemoteDirectory(remotePath);
+        mkdirSync(localPath, { recursive: true });
+        for (const entry of entries) {
+            const target = join(localPath, basename(entry.name));
+            if (entry.isDirectory)
+                await this.downloadRecursive(entry.path, target, overwrite);
+            else
+                await this.downloadFile(entry.path, target, overwrite);
+        }
+    }
+    async remoteExists(remotePath) {
+        const sftp = this.requireSftp();
+        return new Promise((resolve) => {
+            sftp.stat(remotePath, (err) => resolve(!err));
+        });
+    }
+    async mkdirRemote(remotePath) {
+        const sftp = this.requireSftp();
+        await new Promise((resolve) => {
+            sftp.mkdir(remotePath, { mode: 0o755 }, () => resolve());
+        });
+    }
+    requireSftp() {
+        if (!this.sftp)
+            throw new SshpError('SFTP client is not connected.', 'SFTP_NOT_CONNECTED');
+        return this.sftp;
+    }
+}
+export async function withSftp(options, fn) {
+    const client = new SftpClient();
+    await client.connect(options);
+    try {
+        return await fn(client);
+    }
+    finally {
+        client.close();
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/sftp/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/sftp/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuC,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5G,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,MAAM,EAA6C,MAAM,MAAM,CAAC;AAEzE,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAOhD,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,WAAW,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;SAC9C,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACb,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAChC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;IACzH,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AACnG,CAAC;AAED,MAAM,OAAO,UAAU;IACb,IAAI,CAAU;IACd,IAAI,CAAe;IAE3B,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,WAAW,EAAyB;QAC1D,IAAI,CAAC,IAAI,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,IAAI,CAAC,IAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBAC1B,IAAI,CAAC,IAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;oBAC5B,IAAI,GAAG;wBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;yBAChB,CAAC;wBACJ,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;wBACjB,OAAO,EAAE,CAAC;oBACZ,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,IAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC/B,IAAI,CAAC,IAAK,CAAC,OAAO,CAAC;gBACjB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,QAAQ,EAAE,WAAW,CAAC,QAAQ;gBAC9B,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,YAAY,EAAE,MAAM;aACrB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK;QACH,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,IAAY;QACpC,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,MAAM,IAAI,OAAO,CAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACvE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACvE,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,KAAyB,EAAE,EAAE,CAAC,CAAC;YAC9C,IAAI,EAAE,KAAK,CAAC,QAAQ;YACpB,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,GAAG,KAAK,CAAC,QAAQ;YACpD,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE;YACtC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI;YACtB,UAAU,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC;SAC/C,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAiB,EAAE,CAAiB,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACpI,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,SAAiB,EAAE,UAAkB,EAAE,SAAS,GAAG,KAAK;QACvE,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAChC,IAAI,CAAC,SAAS,IAAI,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,+BAA+B,UAAU,EAAE,EAAE,oBAAoB,CAAC,CAAC;QAC9I,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9E,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,UAAkB,EAAE,SAAiB,EAAE,SAAS,GAAG,KAAK;QACzE,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAChC,IAAI,CAAC,SAAS,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,8BAA8B,SAAS,EAAE,EAAE,oBAAoB,CAAC,CAAC;QAC9H,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9E,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,SAAiB,EAAE,UAAkB,EAAE,SAAS,GAAG,KAAK;QAC5E,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;QAClF,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QACnC,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACvH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,UAAkB,EAAE,SAAiB,EAAE,SAAS,GAAG,KAAK;QAC9E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC;QAC3D,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YACrD,IAAI,KAAK,CAAC,WAAW;gBAAE,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;;gBAC9E,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,UAAkB;QAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAChC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,UAAkB;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAChC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAClC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,WAAW;QACjB,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,SAAS,CAAC,+BAA+B,EAAE,oBAAoB,CAAC,CAAC;QAC3F,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAI,OAA8B,EAAE,EAAsC;IACtG,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;IAChC,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9B,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC;AACH,CAAC"}

package/dist/shared/credentials.d.ts

@@ -0,0 +1,2 @@
+import type { ServerCredentials, ServerRecord, VaultContext } from './types.js';
+export declare function decryptServerCredentials(server: ServerRecord, vault: VaultContext): ServerCredentials;

package/dist/shared/credentials.js

@@ -0,0 +1,9 @@
+import { decryptString } from '../vault/crypto.js';
+export function decryptServerCredentials(server, vault) {
+    return {
+        password: server.encryptedPassword ? decryptString(server.encryptedPassword, vault.key) : undefined,
+        privateKey: server.encryptedPrivateKey ? decryptString(server.encryptedPrivateKey, vault.key) : undefined,
+        passphrase: server.encryptedPassphrase ? decryptString(server.encryptedPassphrase, vault.key) : undefined
+    };
+}
+//# sourceMappingURL=credentials.js.map

package/dist/shared/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/shared/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAGnD,MAAM,UAAU,wBAAwB,CAAC,MAAoB,EAAE,KAAmB;IAChF,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,iBAAiB,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;QACnG,UAAU,EAAE,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,mBAAmB,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;QACzG,UAAU,EAAE,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,mBAAmB,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;KAC1G,CAAC;AACJ,CAAC"}

package/dist/shared/errors.d.ts

@@ -0,0 +1,17 @@
+export declare class SshpError extends Error {
+    readonly code: string;
+    constructor(message: string, code?: string);
+}
+export declare class MissingVaultError extends SshpError {
+    constructor(dataDir: string);
+}
+export declare class VaultExistsError extends SshpError {
+    constructor(dataDir: string);
+}
+export declare class InvalidMasterPasswordError extends SshpError {
+    constructor();
+}
+export declare class NotFoundError extends SshpError {
+    constructor(entity: string, key: string);
+}
+export declare function toFriendlyMessage(error: unknown): string;

package/dist/shared/errors.js

@@ -0,0 +1,36 @@
+export class SshpError extends Error {
+    code;
+    constructor(message, code = 'SSHP_ERROR') {
+        super(message);
+        this.code = code;
+        this.name = 'SshpError';
+    }
+}
+export class MissingVaultError extends SshpError {
+    constructor(dataDir) {
+        super(`No SSHP vault found in ${dataDir}. Run \`sshp init\` first.`, 'MISSING_VAULT');
+    }
+}
+export class VaultExistsError extends SshpError {
+    constructor(dataDir) {
+        super(`A SSHP vault already exists in ${dataDir}.`, 'VAULT_EXISTS');
+    }
+}
+export class InvalidMasterPasswordError extends SshpError {
+    constructor() {
+        super('Master password is incorrect.', 'INVALID_MASTER_PASSWORD');
+    }
+}
+export class NotFoundError extends SshpError {
+    constructor(entity, key) {
+        super(`${entity} not found: ${key}`, 'NOT_FOUND');
+    }
+}
+export function toFriendlyMessage(error) {
+    if (error instanceof SshpError)
+        return error.message;
+    if (error instanceof Error)
+        return error.message;
+    return String(error);
+}
+//# sourceMappingURL=errors.js.map

package/dist/shared/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/shared/errors.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,SAAU,SAAQ,KAAK;IACW;IAA7C,YAAY,OAAe,EAAkB,OAAO,YAAY;QAC9D,KAAK,CAAC,OAAO,CAAC,CAAC;QAD4B,SAAI,GAAJ,IAAI,CAAe;QAE9D,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;IAC1B,CAAC;CACF;AAED,MAAM,OAAO,iBAAkB,SAAQ,SAAS;IAC9C,YAAY,OAAe;QACzB,KAAK,CAAC,0BAA0B,OAAO,4BAA4B,EAAE,eAAe,CAAC,CAAC;IACxF,CAAC;CACF;AAED,MAAM,OAAO,gBAAiB,SAAQ,SAAS;IAC7C,YAAY,OAAe;QACzB,KAAK,CAAC,kCAAkC,OAAO,GAAG,EAAE,cAAc,CAAC,CAAC;IACtE,CAAC;CACF;AAED,MAAM,OAAO,0BAA2B,SAAQ,SAAS;IACvD;QACE,KAAK,CAAC,+BAA+B,EAAE,yBAAyB,CAAC,CAAC;IACpE,CAAC;CACF;AAED,MAAM,OAAO,aAAc,SAAQ,SAAS;IAC1C,YAAY,MAAc,EAAE,GAAW;QACrC,KAAK,CAAC,GAAG,MAAM,eAAe,GAAG,EAAE,EAAE,WAAW,CAAC,CAAC;IACpD,CAAC;CACF;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,KAAK,YAAY,SAAS;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC;IACrD,IAAI,KAAK,YAAY,KAAK;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC;IACjD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC"}

package/dist/shared/types.d.ts

@@ -0,0 +1,56 @@
+export type AuthType = 'password' | 'private_key';
+export interface EncryptedValue {
+    version: 1;
+    algorithm: 'aes-256-gcm';
+    iv: string;
+    tag: string;
+    ciphertext: string;
+}
+export interface VaultContext {
+    dataDir: string;
+    dbPath: string;
+    key: Buffer;
+}
+export interface ServerRecord {
+    id: number;
+    name: string;
+    host: string;
+    port: number;
+    username: string;
+    authType: AuthType;
+    encryptedPassword: string | null;
+    encryptedPrivateKey: string | null;
+    encryptedPassphrase: string | null;
+    tags: string | null;
+    notes: string | null;
+    defaultRemotePath: string | null;
+    lastConnectedAt: string | null;
+    connectionCount: number;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface CreateServerInput {
+    name: string;
+    host: string;
+    port: number;
+    username: string;
+    authType: AuthType;
+    encryptedPassword?: string | null;
+    encryptedPrivateKey?: string | null;
+    encryptedPassphrase?: string | null;
+    tags?: string | null;
+    notes?: string | null;
+    defaultRemotePath?: string | null;
+}
+export interface ServerCredentials {
+    password?: string;
+    privateKey?: string;
+    passphrase?: string;
+}
+export interface DirectoryEntry {
+    name: string;
+    path: string;
+    isDirectory: boolean;
+    size: number;
+    modifiedAt?: Date;
+}

package/dist/shared/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/shared/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/shared/types.ts"],"names":[],"mappings":""}

package/dist/ssh/client.d.ts

@@ -0,0 +1,6 @@
+import type { ServerCredentials, ServerRecord } from '../shared/types.js';
+export interface SshConnectionOptions {
+    server: ServerRecord;
+    credentials: ServerCredentials;
+}
+export declare function connectSsh({ server, credentials }: SshConnectionOptions): Promise<void>;

package/dist/ssh/client.js

@@ -0,0 +1,45 @@
+import { Client } from 'ssh2';
+export function connectSsh({ server, credentials }) {
+    return new Promise((resolve, reject) => {
+        const conn = new Client();
+        const cleanup = () => {
+            if (process.stdin.isTTY)
+                process.stdin.setRawMode?.(false);
+            process.stdin.unpipe();
+        };
+        conn.on('ready', () => {
+            conn.shell((err, stream) => {
+                if (err) {
+                    conn.end();
+                    reject(err);
+                    return;
+                }
+                if (process.stdin.isTTY)
+                    process.stdin.setRawMode?.(true);
+                process.stdin.resume();
+                process.stdin.pipe(stream);
+                stream.pipe(process.stdout);
+                stream.stderr.pipe(process.stderr);
+                stream.on('close', () => {
+                    cleanup();
+                    conn.end();
+                    resolve();
+                });
+            });
+        });
+        conn.on('error', (error) => {
+            cleanup();
+            reject(error);
+        });
+        conn.connect({
+            host: server.host,
+            port: server.port,
+            username: server.username,
+            password: credentials.password,
+            privateKey: credentials.privateKey,
+            passphrase: credentials.passphrase,
+            readyTimeout: 20_000
+        });
+    });
+}
+//# sourceMappingURL=client.js.map

package/dist/ssh/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/ssh/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAQ9B,MAAM,UAAU,UAAU,CAAC,EAAE,MAAM,EAAE,WAAW,EAAwB;IACtE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,IAAI,GAAG,IAAI,MAAM,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK;gBAAE,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC;YAC3D,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QACzB,CAAC,CAAC;QAEF,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACpB,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE;gBACzB,IAAI,GAAG,EAAE,CAAC;oBACR,IAAI,CAAC,GAAG,EAAE,CAAC;oBACX,MAAM,CAAC,GAAG,CAAC,CAAC;oBACZ,OAAO;gBACT,CAAC;gBACD,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK;oBAAE,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC;gBAC1D,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBACvB,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC3B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBAC5B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBACnC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;oBACtB,OAAO,EAAE,CAAC;oBACV,IAAI,CAAC,GAAG,EAAE,CAAC;oBACX,OAAO,EAAE,CAAC;gBACZ,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACzB,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC;YACX,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,WAAW,CAAC,QAAQ;YAC9B,UAAU,EAAE,WAAW,CAAC,UAAU;YAClC,UAAU,EAAE,WAAW,CAAC,UAAU;YAClC,YAAY,EAAE,MAAM;SACrB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/tui/App.d.ts

@@ -0,0 +1,5 @@
+import type { VaultContext } from '../shared/types.js';
+export interface AppProps {
+    vault: VaultContext;
+}
+export declare function App({ vault }: AppProps): import("react/jsx-runtime").JSX.Element;

package/dist/tui/App.js

@@ -0,0 +1,27 @@
+import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
+import { useState } from 'react';
+import { Text } from 'ink';
+import { openVaultDatabase } from '../vault/vault.js';
+import { ServerRepository } from '../db/repositories/serverRepository.js';
+import { Dashboard } from './screens/Dashboard.js';
+import { FileManager } from './screens/FileManager.js';
+import { decryptServerCredentials } from '../shared/credentials.js';
+import { connectSsh } from '../ssh/client.js';
+import { toFriendlyMessage } from '../shared/errors.js';
+export function App({ vault }) {
+    const [screen, setScreen] = useState('dashboard');
+    const [selectedServer, setSelectedServer] = useState(null);
+    const [status, setStatus] = useState(null);
+    const db = openVaultDatabase(vault);
+    const servers = new ServerRepository(db).list();
+    db.close();
+    if (screen === 'files' && selectedServer) {
+        return _jsx(FileManager, { server: selectedServer, vault: vault, onBack: () => setScreen('dashboard') });
+    }
+    return _jsxs(_Fragment, { children: [_jsx(Dashboard, { servers: servers, onConnect: (server) => {
+                    setStatus(`Connecting to ${server.name}...`);
+                    connectSsh({ server, credentials: decryptServerCredentials(server, vault) })
+                        .catch((error) => setStatus(toFriendlyMessage(error)));
+                }, onFiles: (server) => { setSelectedServer(server); setScreen('files'); } }), status ? _jsx(Text, { color: "yellow", children: status }) : null] });
+}
+//# sourceMappingURL=App.js.map

package/dist/tui/App.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"App.js","sourceRoot":"","sources":["../../src/tui/App.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,KAAK,CAAC;AAC3B,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAE1E,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAMxD,MAAM,UAAU,GAAG,CAAC,EAAE,KAAK,EAAY;IACrC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAwB,WAAW,CAAC,CAAC;IACzE,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAsB,IAAI,CAAC,CAAC;IAChF,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAC1D,MAAM,EAAE,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,IAAI,gBAAgB,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,EAAE,CAAC,KAAK,EAAE,CAAC;IAEX,IAAI,MAAM,KAAK,OAAO,IAAI,cAAc,EAAE,CAAC;QACzC,OAAO,KAAC,WAAW,IAAC,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,GAAI,CAAC;IACrG,CAAC;IAED,OAAO,8BACL,KAAC,SAAS,IACR,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE;oBACpB,SAAS,CAAC,iBAAiB,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC;oBAC7C,UAAU,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,wBAAwB,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;yBACzE,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC3D,CAAC,EACD,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GACvE,EACD,MAAM,CAAC,CAAC,CAAC,KAAC,IAAI,IAAC,KAAK,EAAC,QAAQ,YAAE,MAAM,GAAQ,CAAC,CAAC,CAAC,IAAI,IACpD,CAAC;AACN,CAAC"}

package/dist/tui/screens/Dashboard.d.ts

@@ -0,0 +1,8 @@
+import type { ServerRecord } from '../../shared/types.js';
+export interface DashboardProps {
+    servers: ServerRecord[];
+    onConnect: (server: ServerRecord) => void;
+    onFiles: (server: ServerRecord) => void;
+    onQuit?: () => void;
+}
+export declare function Dashboard({ servers, onConnect, onFiles, onQuit }: DashboardProps): import("react/jsx-runtime").JSX.Element;

package/dist/tui/screens/Dashboard.js

@@ -0,0 +1,42 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useMemo, useState } from 'react';
+import { Box, Text, useApp, useInput } from 'ink';
+export function Dashboard({ servers, onConnect, onFiles, onQuit }) {
+    const { exit } = useApp();
+    const [selected, setSelected] = useState(0);
+    const [query, setQuery] = useState('');
+    const [searching, setSearching] = useState(false);
+    const filtered = useMemo(() => {
+        const q = query.trim().toLowerCase();
+        return q ? servers.filter((server) => server.name.toLowerCase().includes(q) || server.host.toLowerCase().includes(q)) : servers;
+    }, [servers, query]);
+    const current = filtered[Math.min(selected, Math.max(0, filtered.length - 1))];
+    useInput((input, key) => {
+        if (searching) {
+            if (key.return || key.escape)
+                setSearching(false);
+            else if (key.backspace || key.delete)
+                setQuery((value) => value.slice(0, -1));
+            else if (input)
+                setQuery((value) => value + input);
+            setSelected(0);
+            return;
+        }
+        if (key.upArrow)
+            setSelected((value) => Math.max(0, value - 1));
+        if (key.downArrow)
+            setSelected((value) => Math.min(Math.max(0, filtered.length - 1), value + 1));
+        if (key.return && current)
+            onConnect(current);
+        if ((input === 'f' || input === 'F') && current)
+            onFiles(current);
+        if (input === '/')
+            setSearching(true);
+        if (input === 'q' || input === 'Q' || key.escape) {
+            onQuit?.();
+            exit();
+        }
+    });
+    return (_jsxs(Box, { flexDirection: "column", borderStyle: "round", paddingX: 1, children: [_jsxs(Box, { children: [_jsxs(Box, { width: "50%", flexDirection: "column", children: [_jsx(Text, { bold: true, children: "SSHP" }), filtered.length === 0 ? _jsx(Text, { color: "yellow", children: "No servers. Run sshp add." }) : filtered.map((server, index) => (_jsxs(Text, { color: index === selected ? 'cyan' : undefined, children: [index === selected ? '› ' : '  ', server.name, " ", _jsxs(Text, { dimColor: true, children: [server.username, "@", server.host, ":", server.port] })] }, server.id)))] }), _jsxs(Box, { width: "50%", flexDirection: "column", children: [_jsx(Text, { bold: true, children: "Quick Actions" }), _jsx(Text, { children: "Enter  Connect SSH" }), _jsx(Text, { children: "F      File Manager" }), _jsx(Text, { children: "/      Search" }), _jsx(Text, { children: "Q/Esc  Quit" })] })] }), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsxs(Text, { dimColor: true, children: ["Search: ", searching ? query + '█' : (query || 'press /')] }), _jsx(Text, { dimColor: true, children: "Vault: unlocked" })] })] }));
+}
+//# sourceMappingURL=Dashboard.js.map

package/dist/tui/screens/Dashboard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Dashboard.js","sourceRoot":"","sources":["../../../src/tui/screens/Dashboard.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACjD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,CAAC;AAUlD,MAAM,UAAU,SAAS,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAkB;IAC/E,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC;IAC1B,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC5C,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACvC,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAElD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE;QAC5B,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAClI,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IACrB,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAE/E,QAAQ,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACtB,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;iBAC7C,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,MAAM;gBAAE,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;iBACzE,IAAI,KAAK;gBAAE,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC;YACnD,WAAW,CAAC,CAAC,CAAC,CAAC;YACf,OAAO;QACT,CAAC;QAED,IAAI,GAAG,CAAC,OAAO;YAAE,WAAW,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;QAChE,IAAI,GAAG,CAAC,SAAS;YAAE,WAAW,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;QACjG,IAAI,GAAG,CAAC,MAAM,IAAI,OAAO;YAAE,SAAS,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,CAAC,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,CAAC,IAAI,OAAO;YAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAClE,IAAI,KAAK,KAAK,GAAG;YAAE,YAAY,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACjD,MAAM,EAAE,EAAE,CAAC;YACX,IAAI,EAAE,CAAC;QACT,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,CACL,MAAC,GAAG,IAAC,aAAa,EAAC,QAAQ,EAAC,WAAW,EAAC,OAAO,EAAC,QAAQ,EAAE,CAAC,aACzD,MAAC,GAAG,eACF,MAAC,GAAG,IAAC,KAAK,EAAC,KAAK,EAAC,aAAa,EAAC,QAAQ,aACrC,KAAC,IAAI,IAAC,IAAI,2BAAY,EACrB,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAC,IAAI,IAAC,KAAK,EAAC,QAAQ,0CAAiC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAC/G,MAAC,IAAI,IAAiB,KAAK,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,aACjE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,OAAE,MAAC,IAAI,IAAC,QAAQ,mBAAE,MAAM,CAAC,QAAQ,OAAG,MAAM,CAAC,IAAI,OAAG,MAAM,CAAC,IAAI,IAAQ,KAD1G,MAAM,CAAC,EAAE,CAEb,CACR,CAAC,IACE,EACN,MAAC,GAAG,IAAC,KAAK,EAAC,KAAK,EAAC,aAAa,EAAC,QAAQ,aACrC,KAAC,IAAI,IAAC,IAAI,oCAAqB,EAC/B,KAAC,IAAI,qCAA0B,EAC/B,KAAC,IAAI,sCAA2B,EAChC,KAAC,IAAI,gCAAqB,EAC1B,KAAC,IAAI,8BAAmB,IACpB,IACF,EACN,MAAC,GAAG,IAAC,SAAS,EAAE,CAAC,EAAE,aAAa,EAAC,QAAQ,aACvC,MAAC,IAAI,IAAC,QAAQ,+BAAU,SAAS,CAAC,CAAC,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,SAAS,CAAC,IAAQ,EAC9E,KAAC,IAAI,IAAC,QAAQ,sCAAuB,IACjC,IACF,CACP,CAAC;AACJ,CAAC"}

package/dist/tui/screens/FileManager.d.ts

@@ -0,0 +1,7 @@
+import type { ServerRecord, VaultContext } from '../../shared/types.js';
+export interface FileManagerProps {
+    server: ServerRecord;
+    vault: VaultContext;
+    onBack: () => void;
+}
+export declare function FileManager({ server, vault, onBack }: FileManagerProps): import("react/jsx-runtime").JSX.Element;

package/dist/tui/screens/FileManager.js

@@ -0,0 +1,120 @@
+import { jsxs as _jsxs, jsx as _jsx } from "react/jsx-runtime";
+import { useEffect, useState } from 'react';
+import { Box, Text, useApp, useInput } from 'ink';
+import { cwd } from 'node:process';
+import { dirname, join, posix } from 'node:path';
+import { listLocalDirectory, SftpClient } from '../../sftp/client.js';
+import { decryptServerCredentials } from '../../shared/credentials.js';
+import { toFriendlyMessage } from '../../shared/errors.js';
+export function FileManager({ server, vault, onBack }) {
+    const { exit } = useApp();
+    const [pane, setPane] = useState('local');
+    const [localPath, setLocalPath] = useState(cwd());
+    const [remotePath, setRemotePath] = useState(server.defaultRemotePath || '.');
+    const [localEntries, setLocalEntries] = useState([]);
+    const [remoteEntries, setRemoteEntries] = useState([]);
+    const [localSelected, setLocalSelected] = useState(0);
+    const [remoteSelected, setRemoteSelected] = useState(0);
+    const [status, setStatus] = useState('Connecting SFTP...');
+    const [client, setClient] = useState(null);
+    const [pendingTransfer, setPendingTransfer] = useState(null);
+    const refreshLocal = () => {
+        try {
+            setLocalEntries(listLocalDirectory(localPath));
+        }
+        catch (error) {
+            setStatus(toFriendlyMessage(error));
+        }
+    };
+    const refreshRemote = async (activeClient = client) => {
+        if (!activeClient)
+            return;
+        try {
+            setRemoteEntries(await activeClient.listRemoteDirectory(remotePath));
+            setStatus('Ready');
+        }
+        catch (error) {
+            setStatus(toFriendlyMessage(error));
+        }
+    };
+    useEffect(() => { refreshLocal(); }, [localPath]);
+    useEffect(() => {
+        const next = new SftpClient();
+        next.connect({ server, credentials: decryptServerCredentials(server, vault) })
+            .then(() => { setClient(next); setStatus('Ready'); return next.listRemoteDirectory(remotePath); })
+            .then(setRemoteEntries)
+            .catch((error) => setStatus(toFriendlyMessage(error)));
+        return () => next.close();
+    }, []);
+    useEffect(() => { void refreshRemote(); }, [remotePath, client]);
+    useInput((input, key) => {
+        const entries = pane === 'local' ? localEntries : remoteEntries;
+        const selected = pane === 'local' ? localSelected : remoteSelected;
+        const setSelected = pane === 'local' ? setLocalSelected : setRemoteSelected;
+        const current = entries[selected];
+        if (pendingTransfer) {
+            if ((input === 'y' || input === 'Y') && client) {
+                const pending = pendingTransfer;
+                setPendingTransfer(null);
+                setStatus(`${pending.action === 'upload' ? 'Uploading' : 'Downloading'} ${pending.entry.name}...`);
+                const task = pending.action === 'upload'
+                    ? client.uploadRecursive(pending.entry.path, pending.target, true).then(() => { setStatus('Upload complete'); void refreshRemote(); })
+                    : (pending.entry.isDirectory ? client.downloadRecursive(pending.entry.path, pending.target, true) : client.downloadFile(pending.entry.path, pending.target, true))
+                        .then(() => { setStatus('Download complete'); refreshLocal(); });
+                task.catch((error) => setStatus(toFriendlyMessage(error)));
+            }
+            else if (input === 'n' || input === 'N' || key.escape) {
+                setPendingTransfer(null);
+                setStatus('Transfer cancelled');
+            }
+            return;
+        }
+        if (key.tab)
+            setPane((value) => value === 'local' ? 'remote' : 'local');
+        if (key.upArrow)
+            setSelected((value) => Math.max(0, value - 1));
+        if (key.downArrow)
+            setSelected((value) => Math.min(Math.max(0, entries.length - 1), value + 1));
+        if (key.return && current?.isDirectory) {
+            if (pane === 'local') {
+                setLocalPath(current.path);
+                setLocalSelected(0);
+            }
+            else {
+                setRemotePath(current.path);
+                setRemoteSelected(0);
+            }
+        }
+        if (key.backspace) {
+            if (pane === 'local')
+                setLocalPath(dirname(localPath));
+            else
+                setRemotePath(posix.dirname(remotePath));
+        }
+        if (input === 'r' || input === 'R') {
+            refreshLocal();
+            void refreshRemote();
+        }
+        if ((input === 'u' || input === 'U') && client && localEntries[localSelected]) {
+            const entry = localEntries[localSelected];
+            const target = remotePath.replace(/\/$/, '') + '/' + entry.name;
+            setPendingTransfer({ action: 'upload', entry, target });
+            setStatus(`Upload ${entry.name} to ${target}? Press Y to confirm overwrite, N to cancel.`);
+        }
+        if ((input === 'd' || input === 'D') && client && remoteEntries[remoteSelected]) {
+            const entry = remoteEntries[remoteSelected];
+            const target = join(localPath, entry.name);
+            setPendingTransfer({ action: 'download', entry, target });
+            setStatus(`Download ${entry.name} to ${target}? Press Y to confirm overwrite, N to cancel.`);
+        }
+        if (input === 'q' || input === 'Q' || key.escape) {
+            onBack();
+            exit();
+        }
+    });
+    return (_jsxs(Box, { flexDirection: "column", borderStyle: "round", paddingX: 1, children: [_jsxs(Text, { bold: true, children: ["Files: ", server.name] }), _jsxs(Text, { children: ["Local:  ", localPath] }), _jsxs(Text, { children: ["Remote: ", remotePath] }), _jsxs(Box, { marginTop: 1, children: [_jsx(PaneView, { title: "Local files", active: pane === 'local', entries: localEntries, selected: localSelected }), _jsx(PaneView, { title: "Remote files", active: pane === 'remote', entries: remoteEntries, selected: remoteSelected })] }), _jsx(Text, { dimColor: true, children: "Tab pane  Enter open  Backspace up  U upload  D download  R refresh  Q quit" }), _jsx(Text, { color: status === 'Ready' ? 'green' : 'yellow', children: status })] }));
+}
+function PaneView({ title, active, entries, selected }) {
+    return _jsxs(Box, { width: "50%", flexDirection: "column", borderStyle: active ? 'single' : undefined, paddingX: 1, children: [_jsx(Text, { bold: true, color: active ? 'cyan' : undefined, children: title }), entries.slice(0, 15).map((entry, index) => _jsxs(Text, { color: index === selected ? 'cyan' : undefined, children: [index === selected ? '› ' : '  ', entry.name, entry.isDirectory ? '/' : ''] }, entry.path))] });
+}
+//# sourceMappingURL=FileManager.js.map

package/dist/tui/screens/FileManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"FileManager.js","sourceRoot":"","sources":["../../../src/tui/screens/FileManager.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACnD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,CAAC;AAClD,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACtE,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAEvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAW3D,MAAM,UAAU,WAAW,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAoB;IACrE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC;IAC1B,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAO,OAAO,CAAC,CAAC;IAChD,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC;IAClD,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,iBAAiB,IAAI,GAAG,CAAC,CAAC;IAC9E,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAmB,EAAE,CAAC,CAAC;IACvE,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC,GAAG,QAAQ,CAAmB,EAAE,CAAC,CAAC;IACzE,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IACtD,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IACxD,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,oBAAoB,CAAC,CAAC;IAC3D,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAoB,IAAI,CAAC,CAAC;IAC9D,MAAM,CAAC,eAAe,EAAE,kBAAkB,CAAC,GAAG,QAAQ,CAAyB,IAAI,CAAC,CAAC;IAErF,MAAM,YAAY,GAAG,GAAG,EAAE;QACxB,IAAI,CAAC;YAAC,eAAe,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,SAAS,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC;QAAC,CAAC;IAChH,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,KAAK,EAAE,YAAY,GAAG,MAAM,EAAE,EAAE;QACpD,IAAI,CAAC,YAAY;YAAE,OAAO;QAC1B,IAAI,CAAC;YACH,gBAAgB,CAAC,MAAM,YAAY,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC,CAAC;YACrE,SAAS,CAAC,OAAO,CAAC,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,SAAS,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC;QAAC,CAAC;IAC1D,CAAC,CAAC;IAEF,SAAS,CAAC,GAAG,EAAE,GAAG,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAClD,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,IAAI,GAAG,IAAI,UAAU,EAAE,CAAC;QAC9B,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,wBAAwB,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;aAC3E,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;aACjG,IAAI,CAAC,gBAAgB,CAAC;aACtB,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACzD,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;IAC5B,CAAC,EAAE,EAAE,CAAC,CAAC;IACP,SAAS,CAAC,GAAG,EAAE,GAAG,KAAK,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;IAEjE,QAAQ,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACtB,MAAM,OAAO,GAAG,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC;QAChE,MAAM,QAAQ,GAAG,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,cAAc,CAAC;QACnE,MAAM,WAAW,GAAG,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,iBAAiB,CAAC;QAC5E,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QAElC,IAAI,eAAe,EAAE,CAAC;YACpB,IAAI,CAAC,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,CAAC,IAAI,MAAM,EAAE,CAAC;gBAC/C,MAAM,OAAO,GAAG,eAAe,CAAC;gBAChC,kBAAkB,CAAC,IAAI,CAAC,CAAC;gBACzB,SAAS,CAAC,GAAG,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC;gBACnG,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,KAAK,QAAQ;oBACtC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,iBAAiB,CAAC,CAAC,CAAC,KAAK,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC;oBACtI,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;yBAC/J,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,mBAAmB,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrE,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC7D,CAAC;iBAAM,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;gBACxD,kBAAkB,CAAC,IAAI,CAAC,CAAC;gBACzB,SAAS,CAAC,oBAAoB,CAAC,CAAC;YAClC,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,GAAG,CAAC,GAAG;YAAE,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACxE,IAAI,GAAG,CAAC,OAAO;YAAE,WAAW,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;QAChE,IAAI,GAAG,CAAC,SAAS;YAAE,WAAW,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;QAChG,IAAI,GAAG,CAAC,MAAM,IAAI,OAAO,EAAE,WAAW,EAAE,CAAC;YACvC,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;gBAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;iBACrE,CAAC;gBAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;QAC7D,CAAC;QACD,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;YAClB,IAAI,IAAI,KAAK,OAAO;gBAAE,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;;gBAClD,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YAAC,YAAY,EAAE,CAAC;YAAC,KAAK,aAAa,EAAE,CAAC;QAAC,CAAC;QAC7E,IAAI,CAAC,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,CAAC,IAAI,MAAM,IAAI,YAAY,CAAC,aAAa,CAAC,EAAE,CAAC;YAC9E,MAAM,KAAK,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC;YAC1C,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC;YAChE,kBAAkB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YACxD,SAAS,CAAC,UAAU,KAAK,CAAC,IAAI,OAAO,MAAM,8CAA8C,CAAC,CAAC;QAC7F,CAAC;QACD,IAAI,CAAC,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,CAAC,IAAI,MAAM,IAAI,aAAa,CAAC,cAAc,CAAC,EAAE,CAAC;YAChF,MAAM,KAAK,GAAG,aAAa,CAAC,cAAc,CAAC,CAAC;YAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3C,kBAAkB,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YAC1D,SAAS,CAAC,YAAY,KAAK,CAAC,IAAI,OAAO,MAAM,8CAA8C,CAAC,CAAC;QAC/F,CAAC;QACD,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YAAC,MAAM,EAAE,CAAC;YAAC,IAAI,EAAE,CAAC;QAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,OAAO,CACL,MAAC,GAAG,IAAC,aAAa,EAAC,QAAQ,EAAC,WAAW,EAAC,OAAO,EAAC,QAAQ,EAAE,CAAC,aACzD,MAAC,IAAI,IAAC,IAAI,8BAAS,MAAM,CAAC,IAAI,IAAQ,EACtC,MAAC,IAAI,2BAAU,SAAS,IAAQ,EAChC,MAAC,IAAI,2BAAU,UAAU,IAAQ,EACjC,MAAC,GAAG,IAAC,SAAS,EAAE,CAAC,aACf,KAAC,QAAQ,IAAC,KAAK,EAAC,aAAa,EAAC,MAAM,EAAE,IAAI,KAAK,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,GAAI,EAC1G,KAAC,QAAQ,IAAC,KAAK,EAAC,cAAc,EAAC,MAAM,EAAE,IAAI,KAAK,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,cAAc,GAAI,IAC1G,EACN,KAAC,IAAI,IAAC,QAAQ,kGAAmF,EACjG,KAAC,IAAI,IAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,YAAG,MAAM,GAAQ,IACjE,CACP,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAmF;IACrI,OAAO,MAAC,GAAG,IAAC,KAAK,EAAC,KAAK,EAAC,aAAa,EAAC,QAAQ,EAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,aACpG,KAAC,IAAI,IAAC,IAAI,QAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,YAAG,KAAK,GAAQ,EAC5D,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,MAAC,IAAI,IAAkB,KAAK,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,aAC9G,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KADtB,KAAK,CAAC,IAAI,CAE1D,CAAC,IACJ,CAAC;AACT,CAAC"}

package/dist/vault/crypto.d.ts

@@ -0,0 +1,14 @@
+export declare const KDF = "scrypt";
+export declare const CIPHER = "aes-256-gcm";
+export declare const KEY_LENGTH = 32;
+export declare const SCRYPT_OPTIONS: {
+    readonly N: number;
+    readonly r: 8;
+    readonly p: 1;
+    readonly maxmem: number;
+};
+export declare function generateSalt(): string;
+export declare function deriveKey(masterPassword: string, saltBase64: string): Buffer;
+export declare function encryptString(plaintext: string, key: Buffer): string;
+export declare function decryptString(serialized: string, key: Buffer): string;
+export declare function safeEquals(a: string, b: string): boolean;