mazip 0.1.4__tar.gz

mazip-0.1.4/MANIFEST.in

@@ -0,0 +1,3 @@
+include README.md TEST_REPORT.md example.json tested-environment.txt
+recursive-include tests *.py
+include install.sh

mazip-0.1.4/PKG-INFO

@@ -0,0 +1,87 @@
+Metadata-Version: 2.4
+Name: mazip
+Version: 0.1.4
+Summary: Interactive local network information and verified SSH connections
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+Requires-Dist: paramiko<6,>=4
+Requires-Dist: psutil<8,>=5.9
+Provides-Extra: test
+Requires-Dist: pytest<10,>=8; extra == "test"
+
+# mazip 0.1.4
+
+Interactive local network information and verified SSH connections. Requires Python 3.10 or newer. Not published to PyPI.
+
+## Install on Kali / Ubuntu
+
+Open a terminal in the extracted MeziLink directory:
+
+```bash
+sudo apt install pipx
+bash install.sh
+```
+
+Open a NEW terminal and run `mazip` from any directory. No environment activation is required. pipx manages dependencies in its own isolated environment; it does not install into the system Python. You may move or remove the extracted project after installation.
+
+The installer uses the bundled wheel, exposes the command with pipx, and runs `pipx ensurepath`. It removes only the old `alias mazip=".../.venv/bin/mazip"` format from .zshrc/.bashrc, saving a backup first. Other custom aliases are left unchanged.
+
+To install manually:
+
+```bash
+pipx install --force ./dist/mazip-0.1.4-py3-none-any.whl
+pipx ensurepath
+```
+
+Remove any old mazip alias before using the pipx command. Uninstall with `pipx uninstall mazip`.
+
+## Install on Windows
+
+```powershell
+py -m venv .venv
+.venv\Scripts\python.exe -m pip install .
+.venv\Scripts\mazip.exe
+```
+
+## Use
+
+- Option 1 displays local IPv4/IPv6 addresses, local username, SSH client availability, identifiable SSH server bind addresses/ports, and visible TCP listeners/UDP bindings. SSH listeners are identified by process name, not by an assumed port. Limited permissions are reported; firewall reachability and SSH account access are not verified.
+- Option 2 asks for destination OS, IP, port, then TCP-only testing or SSH authentication.
+- After SSH authentication, c opens a persistent interactive terminal; x runs a single noninteractive command. Ctrl+] closes the interactive shell channel and returns to the menu. Ctrl+C is forwarded to interrupt the remote command. Typing exit also returns to the menu. cd and shell variables persist within that shell, but not after closing and reopening it.
+- Option 0 exits or disconnects.
+
+```bash
+mazip --local
+mazip -S -vv
+mazip -S -vv -f example.json
+python -m mezilink
+```
+
+`-S` opens the destination menu. `-v` shows connection stages; `-vv` adds cipher and server metadata. `-f` loads JSON settings without passwords or commands.
+
+## Connection security
+
+The destination must already run an SSH service and accept your credentials. No installation, firewall changes or remote scanning are performed.
+
+Existing known_hosts entries are checked. For an unknown server, independently compare the displayed SHA256 fingerprint with the destination console or administrator, then enter the full fingerprint. Merely copying the displayed value does not establish identity. This verification applies to the current connection only.
+
+A verified `fingerprint` in the JSON settings becomes the independent trust pin and replaces known_hosts verification. Changed or mismatched identities are rejected. Passwords and private-key passphrases use hidden input and are not saved. Automatic SSH-agent and key discovery are disabled. Python does not guarantee secure erasure of secrets from memory.
+
+## Platform and execution limits
+
+Windows profiles require OpenSSH Server. Linux requires an SSH service. Android requires an existing SSH environment such as Termux. Selecting a profile does not detect or install a remote OS.
+
+Preset commands and option x use separate noninteractive sessions, with 1 MiB output and 30-second waiting limits. Option c requests a remote PTY and preserves shell state, allows interactive input, and has no command duration/output cap. Linux terminal mode supports Ctrl+C, terminal resizing and raw keyboard input. The Windows client keyboard path is implemented but not tested; full-screen rendering depends on the local terminal and remote SSH server. The remote server must permit PTY and shell requests. A real local terminal is required for c. Closing a channel or timing out does not guarantee that the remote process stops. Single-command output has terminal control characters removed; interactive shell output retains terminal sequences for terminal behavior; its language depends on the destination.
+
+Local addresses do not reveal a public NAT IP. Port listings may be incomplete due to OS permissions. A UDP binding does not prove remote reachability. When interface enumeration is unavailable, an explicit warning accompanies limited hostname-resolved addresses; interface status is unknown.
+
+## Tests
+
+```bash
+python -m pip install '.[test]'
+python -m pytest -q
+```
+
+See TEST_REPORT.md for the original functional validation and limitations. Version 0.1.2 removes the iOS profile. All application text is English; Python source contains no comments or docstrings. The internal Python module remains `mezilink`; the distribution and executable are `mazip`.
+
+Reference: https://docs.paramiko.org/en/stable/api/client.html

mazip-0.1.4/README.md

@@ -0,0 +1,76 @@
+# mazip 0.1.4
+
+Interactive local network information and verified SSH connections. Requires Python 3.10 or newer. Not published to PyPI.
+
+## Install on Kali / Ubuntu
+
+Open a terminal in the extracted MeziLink directory:
+
+```bash
+sudo apt install pipx
+bash install.sh
+```
+
+Open a NEW terminal and run `mazip` from any directory. No environment activation is required. pipx manages dependencies in its own isolated environment; it does not install into the system Python. You may move or remove the extracted project after installation.
+
+The installer uses the bundled wheel, exposes the command with pipx, and runs `pipx ensurepath`. It removes only the old `alias mazip=".../.venv/bin/mazip"` format from .zshrc/.bashrc, saving a backup first. Other custom aliases are left unchanged.
+
+To install manually:
+
+```bash
+pipx install --force ./dist/mazip-0.1.4-py3-none-any.whl
+pipx ensurepath
+```
+
+Remove any old mazip alias before using the pipx command. Uninstall with `pipx uninstall mazip`.
+
+## Install on Windows
+
+```powershell
+py -m venv .venv
+.venv\Scripts\python.exe -m pip install .
+.venv\Scripts\mazip.exe
+```
+
+## Use
+
+- Option 1 displays local IPv4/IPv6 addresses, local username, SSH client availability, identifiable SSH server bind addresses/ports, and visible TCP listeners/UDP bindings. SSH listeners are identified by process name, not by an assumed port. Limited permissions are reported; firewall reachability and SSH account access are not verified.
+- Option 2 asks for destination OS, IP, port, then TCP-only testing or SSH authentication.
+- After SSH authentication, c opens a persistent interactive terminal; x runs a single noninteractive command. Ctrl+] closes the interactive shell channel and returns to the menu. Ctrl+C is forwarded to interrupt the remote command. Typing exit also returns to the menu. cd and shell variables persist within that shell, but not after closing and reopening it.
+- Option 0 exits or disconnects.
+
+```bash
+mazip --local
+mazip -S -vv
+mazip -S -vv -f example.json
+python -m mezilink
+```
+
+`-S` opens the destination menu. `-v` shows connection stages; `-vv` adds cipher and server metadata. `-f` loads JSON settings without passwords or commands.
+
+## Connection security
+
+The destination must already run an SSH service and accept your credentials. No installation, firewall changes or remote scanning are performed.
+
+Existing known_hosts entries are checked. For an unknown server, independently compare the displayed SHA256 fingerprint with the destination console or administrator, then enter the full fingerprint. Merely copying the displayed value does not establish identity. This verification applies to the current connection only.
+
+A verified `fingerprint` in the JSON settings becomes the independent trust pin and replaces known_hosts verification. Changed or mismatched identities are rejected. Passwords and private-key passphrases use hidden input and are not saved. Automatic SSH-agent and key discovery are disabled. Python does not guarantee secure erasure of secrets from memory.
+
+## Platform and execution limits
+
+Windows profiles require OpenSSH Server. Linux requires an SSH service. Android requires an existing SSH environment such as Termux. Selecting a profile does not detect or install a remote OS.
+
+Preset commands and option x use separate noninteractive sessions, with 1 MiB output and 30-second waiting limits. Option c requests a remote PTY and preserves shell state, allows interactive input, and has no command duration/output cap. Linux terminal mode supports Ctrl+C, terminal resizing and raw keyboard input. The Windows client keyboard path is implemented but not tested; full-screen rendering depends on the local terminal and remote SSH server. The remote server must permit PTY and shell requests. A real local terminal is required for c. Closing a channel or timing out does not guarantee that the remote process stops. Single-command output has terminal control characters removed; interactive shell output retains terminal sequences for terminal behavior; its language depends on the destination.
+
+Local addresses do not reveal a public NAT IP. Port listings may be incomplete due to OS permissions. A UDP binding does not prove remote reachability. When interface enumeration is unavailable, an explicit warning accompanies limited hostname-resolved addresses; interface status is unknown.
+
+## Tests
+
+```bash
+python -m pip install '.[test]'
+python -m pytest -q
+```
+
+See TEST_REPORT.md for the original functional validation and limitations. Version 0.1.2 removes the iOS profile. All application text is English; Python source contains no comments or docstrings. The internal Python module remains `mezilink`; the distribution and executable are `mazip`.
+
+Reference: https://docs.paramiko.org/en/stable/api/client.html

mazip-0.1.4/TEST_REPORT.md

@@ -0,0 +1,56 @@
+# Validation report — 2026-10-17 UTC
+
+Environment: Linux x86_64, Python 3.12; Paramiko 5.0.0, psutil 7.2.2.
+
+Automated suite: **38 passed**. Tests use real TCP sockets and real SSH transport,
+key exchange, host identity checks, authentication and command channels on loopback.
+The SSH lab server is implemented with Paramiko; it is not a production OpenSSH server.
+The echo success case runs a real local subprocess on that test server.
+
+Covered:
+- IPv4 and IPv6 SSH connection and successful remote command result.
+- Password authentication and rejection of an incorrect password.
+- Encrypted private-key authentication.
+- Pinned fingerprint success/mismatch; rejection of unverified unknown servers.
+- Verified fingerprint callback; known_hosts success and changed-key rejection.
+- TCP open and closed port behavior; IP/port validation.
+- Command timeout, output cap, connection loss, stdout/stderr draining and nonzero exit.
+- Invalid configuration, interactive local menu and end-to-end SSH menu with scripted inputs.
+- Terminal control-character filtering, EOF cancellation.
+- Interface permission fallback with a warning; normal per-interface handling with fixture data.
+
+Environment limitation: native network-interface enumeration returned PermissionError.
+The real local-information run therefore used explicitly labeled hostname resolution,
+including IPv4 and IPv6 loopback. Full interface enumeration was verified using fixture
+inputs, not a real unrestricted host. Local port enumeration ran successfully.
+
+Not tested on physical Windows, Red Hat, Android or iOS devices. OS menu entries select
+command profiles and do not certify those platforms. No internet targets were scanned.
+No claim of zero bugs or universal platform compatibility is made.
+
+Package checks: wheel/source build, wheel installation and CLI smoke checks are
+performed as part of this delivery. The full automated tests are included for reruns.
+
+API reference used: https://docs.paramiko.org/en/stable/api/client.html
+
+## Version 0.1.3 validation
+
+41 tests passed on Linux/Python 3.12. New tests cover SSH listener identification
+by process name on nonstandard ports, inaccessible process metadata, permission
+denial, and no visible SSH server. These discovery branches use controlled fixtures;
+SSH transport/authentication tests still use real loopback sockets.
+The installer passes bash syntax validation. The bundled wheel is installed with
+pipx in a separate test directory and its exposed command is smoke-tested without
+activating an environment. Windows and mobile device limitations above still apply.
+
+## Version 0.1.4 validation
+
+45 tests passed on Linux/Python 3.12. Real SSH + local/remote PTY integration
+runs an actual /bin/sh process and verifies consecutive commands, persistent cd
+and shell variables, Ctrl+C interrupting sleep, exit and Ctrl+] returning,
+opening a second shell over the same authenticated SSH connection, and restoring
+local terminal settings. Input escape stripping and non-terminal rejection are
+also tested. Windows client console behavior and physical mobile targets remain
+untested. Interactive terminal output is passed through without control-character
+filtering to support real terminal behavior. No timeout/output cap is imposed on
+interactive sessions; single-command limits remain unchanged.

mazip-0.1.4/example.json

@@ -0,0 +1,7 @@
+{
+  "os": "2",
+  "host": "127.0.0.1",
+  "port": 22,
+  "username": "your-user",
+  "timeout": 8
+}

mazip-0.1.4/install.sh

@@ -0,0 +1,26 @@
+set -eu
+installer_dir=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)
+if ! command -v pipx >/dev/null 2>&1; then
+    printf '%s\n' 'pipx is required. On Kali/Ubuntu: sudo apt install pipx' 'Then run: bash install.sh'
+    exit 1
+fi
+pipx install --force "$installer_dir/dist/mazip-0.1.4-py3-none-any.whl"
+pipx ensurepath
+python3 - <<'PY'
+from pathlib import Path
+import re
+import shutil
+import time
+for name in ('.zshrc', '.bashrc'):
+    path = Path.home() / name
+    if not path.is_file():
+        continue
+    text = path.read_text()
+    cleaned = re.sub(r'^alias mazip="[^"\n]*/\.venv/bin/mazip"\s*$', '', text, flags=re.MULTILINE)
+    if cleaned != text:
+        backup = path.with_name(path.name + '.mazip-backup-' + str(time.time_ns()))
+        shutil.copy2(path, backup)
+        path.write_text(cleaned)
+        print('Removed old project alias from ' + str(path) + '; backup: ' + str(backup))
+PY
+printf '%s\n' 'Installed. Open a new terminal, then run: mazip' 'No environment activation is needed. pipx manages isolated dependencies.'

mazip-0.1.4/mazip.egg-info/PKG-INFO

@@ -0,0 +1,87 @@
+Metadata-Version: 2.4
+Name: mazip
+Version: 0.1.4
+Summary: Interactive local network information and verified SSH connections
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+Requires-Dist: paramiko<6,>=4
+Requires-Dist: psutil<8,>=5.9
+Provides-Extra: test
+Requires-Dist: pytest<10,>=8; extra == "test"
+
+# mazip 0.1.4
+
+Interactive local network information and verified SSH connections. Requires Python 3.10 or newer. Not published to PyPI.
+
+## Install on Kali / Ubuntu
+
+Open a terminal in the extracted MeziLink directory:
+
+```bash
+sudo apt install pipx
+bash install.sh
+```
+
+Open a NEW terminal and run `mazip` from any directory. No environment activation is required. pipx manages dependencies in its own isolated environment; it does not install into the system Python. You may move or remove the extracted project after installation.
+
+The installer uses the bundled wheel, exposes the command with pipx, and runs `pipx ensurepath`. It removes only the old `alias mazip=".../.venv/bin/mazip"` format from .zshrc/.bashrc, saving a backup first. Other custom aliases are left unchanged.
+
+To install manually:
+
+```bash
+pipx install --force ./dist/mazip-0.1.4-py3-none-any.whl
+pipx ensurepath
+```
+
+Remove any old mazip alias before using the pipx command. Uninstall with `pipx uninstall mazip`.
+
+## Install on Windows
+
+```powershell
+py -m venv .venv
+.venv\Scripts\python.exe -m pip install .
+.venv\Scripts\mazip.exe
+```
+
+## Use
+
+- Option 1 displays local IPv4/IPv6 addresses, local username, SSH client availability, identifiable SSH server bind addresses/ports, and visible TCP listeners/UDP bindings. SSH listeners are identified by process name, not by an assumed port. Limited permissions are reported; firewall reachability and SSH account access are not verified.
+- Option 2 asks for destination OS, IP, port, then TCP-only testing or SSH authentication.
+- After SSH authentication, c opens a persistent interactive terminal; x runs a single noninteractive command. Ctrl+] closes the interactive shell channel and returns to the menu. Ctrl+C is forwarded to interrupt the remote command. Typing exit also returns to the menu. cd and shell variables persist within that shell, but not after closing and reopening it.
+- Option 0 exits or disconnects.
+
+```bash
+mazip --local
+mazip -S -vv
+mazip -S -vv -f example.json
+python -m mezilink
+```
+
+`-S` opens the destination menu. `-v` shows connection stages; `-vv` adds cipher and server metadata. `-f` loads JSON settings without passwords or commands.
+
+## Connection security
+
+The destination must already run an SSH service and accept your credentials. No installation, firewall changes or remote scanning are performed.
+
+Existing known_hosts entries are checked. For an unknown server, independently compare the displayed SHA256 fingerprint with the destination console or administrator, then enter the full fingerprint. Merely copying the displayed value does not establish identity. This verification applies to the current connection only.
+
+A verified `fingerprint` in the JSON settings becomes the independent trust pin and replaces known_hosts verification. Changed or mismatched identities are rejected. Passwords and private-key passphrases use hidden input and are not saved. Automatic SSH-agent and key discovery are disabled. Python does not guarantee secure erasure of secrets from memory.
+
+## Platform and execution limits
+
+Windows profiles require OpenSSH Server. Linux requires an SSH service. Android requires an existing SSH environment such as Termux. Selecting a profile does not detect or install a remote OS.
+
+Preset commands and option x use separate noninteractive sessions, with 1 MiB output and 30-second waiting limits. Option c requests a remote PTY and preserves shell state, allows interactive input, and has no command duration/output cap. Linux terminal mode supports Ctrl+C, terminal resizing and raw keyboard input. The Windows client keyboard path is implemented but not tested; full-screen rendering depends on the local terminal and remote SSH server. The remote server must permit PTY and shell requests. A real local terminal is required for c. Closing a channel or timing out does not guarantee that the remote process stops. Single-command output has terminal control characters removed; interactive shell output retains terminal sequences for terminal behavior; its language depends on the destination.
+
+Local addresses do not reveal a public NAT IP. Port listings may be incomplete due to OS permissions. A UDP binding does not prove remote reachability. When interface enumeration is unavailable, an explicit warning accompanies limited hostname-resolved addresses; interface status is unknown.
+
+## Tests
+
+```bash
+python -m pip install '.[test]'
+python -m pytest -q
+```
+
+See TEST_REPORT.md for the original functional validation and limitations. Version 0.1.2 removes the iOS profile. All application text is English; Python source contains no comments or docstrings. The internal Python module remains `mezilink`; the distribution and executable are `mazip`.
+
+Reference: https://docs.paramiko.org/en/stable/api/client.html

mazip-0.1.4/mazip.egg-info/SOURCES.txt

@@ -0,0 +1,20 @@
+MANIFEST.in
+README.md
+TEST_REPORT.md
+example.json
+install.sh
+pyproject.toml
+tested-environment.txt
+mazip.egg-info/PKG-INFO
+mazip.egg-info/SOURCES.txt
+mazip.egg-info/dependency_links.txt
+mazip.egg-info/entry_points.txt
+mazip.egg-info/requires.txt
+mazip.egg-info/top_level.txt
+mezilink/__init__.py
+mezilink/__main__.py
+mezilink/cli.py
+mezilink/core.py
+mezilink/terminal.py
+tests/test_mezilink.py
+tests/test_terminal.py

mazip-0.1.4/mazip.egg-info/dependency_links.txt

@@ -0,0 +1 @@
+

mazip-0.1.4/mazip.egg-info/entry_points.txt

@@ -0,0 +1,2 @@
+[console_scripts]
+mazip = mezilink.cli:main

mazip-0.1.4/mazip.egg-info/requires.txt

@@ -0,0 +1,5 @@
+paramiko<6,>=4
+psutil<8,>=5.9
+
+[test]
+pytest<10,>=8

mazip-0.1.4/mazip.egg-info/top_level.txt

@@ -0,0 +1 @@
+mezilink

mazip-0.1.4/mezilink/__init__.py

@@ -0,0 +1 @@
+__version__ = "0.1.4"

mazip-0.1.4/mezilink/__main__.py

@@ -0,0 +1,3 @@
+from .cli import main
+
+raise SystemExit(main())

mazip-0.1.4/mezilink/cli.py

@@ -0,0 +1,190 @@
+import argparse
+import getpass
+import platform
+import re
+import sys
+import warnings
+
+import paramiko
+import psutil
+
+from . import __version__
+from .terminal import interactive_shell
+from .core import PROFILES, connect, load_config, local_ports, network_info, run_command, tcp_probe, validate_target, ssh_info
+
+
+def safe(text):
+
+    return re.sub(r'[\x00-\x08\x0b-\x1f\x7f-\x9f]', '', str(text))
+
+
+def show_local():
+    print('\n=== Local device ===')
+    print(safe(platform.platform()))
+    with warnings.catch_warnings(record=True) as notices:
+        warnings.simplefilter('always', RuntimeWarning)
+        rows = network_info()
+    for notice in notices:
+        print('Note: ' + safe(notice.message))
+    for row in rows:
+        print(safe(f"{row['interface']} | {'UNKNOWN' if row['up'] is None else ('UP' if row['up'] else 'DOWN')} | {row['family']} | {row['address']}"))
+    print('Public NAT IP is not queried. Hostname fallback, when used, is not a complete interface list.')
+    info = ssh_info()
+    print('\n=== Local SSH ===')
+    print(safe(f"Local username: {info['username']} (SSH account access is not verified)"))
+    print(safe(f"SSH client: {info['client'] or 'Not found on PATH'}"))
+    if info['listeners']:
+        print('SSH server listeners identified by process name:')
+        for host, port, process in info['listeners']:
+            print(safe(f'  {process} | Bind address: {host} | SSH port: {port}'))
+        print('0.0.0.0 / :: are wildcard binds; use a matching device IP above.')
+        print('127.0.0.1 / ::1 are local-only. Firewall and login access are not verified.')
+    else:
+        print('SSH server: No identifiable SSH listener found. Port: Unknown.')
+    if info['limited']:
+        print('SSH detection is incomplete: some socket/process information is inaccessible.')
+    print('An installed SSH client does not mean an SSH server is running.')
+    print('Port 22 is a common default, not a detected active service.')
+    print('\nLocal TCP listeners / bound UDP ports (visible to your account):')
+    try:
+        for host, port, protocol in local_ports():
+            print(safe(f'  {protocol} [{host}]:{port}'))
+    except (psutil.Error, OSError):
+        print('OS permission denied port listing; IP information is still available.')
+    print('Port list may be incomplete without elevated permissions. No remote scanning.')
+
+
+def choose(prompt, choices):
+    while True:
+        answer = input(prompt).strip()
+        if answer in choices:
+            return answer
+        print('Invalid choice.')
+
+
+def value(config, key, prompt, default=None):
+    if key in config:
+        return config[key]
+    answer = input(prompt).strip()
+    return answer or default
+
+
+def verify_server(host, actual):
+    print(safe(f'New SSH server: {host}\nFingerprint: {actual}'))
+    print('Verify this fingerprint independently using the destination console or administrator, then enter it in full. Enter = cancel.')
+    return input('Verified SHA256 fingerprint: ').strip() == actual
+
+
+def remote(config, verbose=0):
+    print('\n=== Destination OS ===')
+    for key, (name, _) in PROFILES.items():
+        print(f'{key}. {name}')
+    os_id = config.get('os') or choose('OS: ', PROFILES)
+    name, commands = PROFILES[os_id]
+    print(f'Profile: {name}. Destination must already provide SSH.')
+    host = value(config, 'host', 'Destination IPv4 / IPv6: ')
+    port = value(config, 'port', 'SSH port [22]: ', '22')
+    host, port = validate_target(host, port)
+    timeout = config.get('timeout', 8)
+    mode = choose('1. SSH login  2. TCP test only  0. Back: ', {'0', '1', '2'})
+    if mode == '0':
+        return
+    if mode == '2':
+        tcp_probe(host, port, timeout)
+        print('TCP connected. This does not confirm SSH availability or authentication.')
+        return
+    username = value(config, 'username', 'SSH username: ', '')
+    key_file = config.get('key_file')
+    auth = '2' if key_file else choose('1. Password  2. Private key: ', {'1', '2'})
+    password = passphrase = None
+    if auth == '1':
+        password = getpass.getpass('SSH password (hidden): ')
+    else:
+        key_file = key_file or input('Private key path: ').strip()
+        if not key_file:
+            raise ValueError('Private key path is required.')
+        passphrase = getpass.getpass('Key passphrase (Enter if unencrypted): ') or None
+    if verbose:
+        print('Connecting with host verification; credentials and commands are not logged.')
+    client = connect(host, port, username, password=password, key_file=key_file,
+                     passphrase=passphrase, known_hosts=config.get('known_hosts'),
+                     expected=config.get('fingerprint'), verify=verify_server, timeout=timeout)
+    password = passphrase = None
+    try:
+        print('SSH authenticated successfully.')
+        if verbose > 1:
+            transport = client.get_transport()
+            print(safe(f'Cipher: {transport.remote_cipher}; server: {transport.remote_version}'))
+        while True:
+            for index, (label, _) in enumerate(commands, 1):
+                print(f'{index}. {label}')
+            print('c. Interactive terminal\nx. Single command\n0. Disconnect')
+            selection = choose('Action: ', {'0', 'c', 'x'} | {str(i) for i in range(1, len(commands) + 1)})
+            if selection == '0':
+                break
+            if selection == 'c':
+                try:
+                    interactive_shell(client)
+                except (OSError, EOFError, RuntimeError, paramiko.SSHException) as exc:
+                    print('Shell ended: ' + explain(exc))
+                transport = client.get_transport()
+                if transport is None or not transport.is_active():
+                    print('SSH connection lost.')
+                    break
+                continue
+            command = input('Remote command: ').strip() if selection == 'x' else commands[int(selection) - 1][1]
+            if not command:
+                continue
+            print(safe(f'Running on {name}: {command}'))
+            code, stdout, stderr = run_command(client, command)
+            print(safe(stdout), end='')
+            print(safe(stderr), end='', file=sys.stderr)
+            print(f'\nExit status: {code}')
+    finally:
+        client.close()
+        print('Disconnected.')
+
+
+def explain(exc):
+    if isinstance(exc, paramiko.BadHostKeyException):
+        return 'Host key mismatch. Server identity changed; connection blocked.'
+    if isinstance(exc, paramiko.AuthenticationException):
+        return 'Authentication failed. Username, password or key was rejected.'
+    if isinstance(exc, ConnectionRefusedError):
+        return 'Connection refused. Check the destination service and port.'
+    if isinstance(exc, TimeoutError):
+        return 'Timed out. A remote command may still be running.'
+    return safe(str(exc))
+
+
+def main(argv=None):
+    parser = argparse.ArgumentParser(description='mazip: local network information and verified SSH.')
+    parser.add_argument('-S', '--ssh', action='store_true', help='Open destination menu directly')
+    parser.add_argument('-v', action='count', default=0, help='Status details; -vv adds connection metadata')
+    parser.add_argument('-f', '--config', help='JSON settings file; no passwords or commands')
+    parser.add_argument('--local', action='store_true', help='Show local network information and exit')
+    parser.add_argument('--version', action='version', version=__version__)
+    args = parser.parse_args(argv)
+    try:
+        config = load_config(args.config) if args.config else {}
+        if args.local:
+            show_local()
+            return 0
+        if args.ssh:
+            remote(config, args.v)
+            return 0
+        print('mazip | Network & SSH')
+        while True:
+            choice = choose('\n1. Local device IPs & ports\n2. Connect to destination\n0. Exit\n> ', {'0', '1', '2'})
+            if choice == '0':
+                return 0
+            try:
+                show_local() if choice == '1' else remote(config, args.v)
+            except (OSError, ValueError, RuntimeError, paramiko.SSHException, psutil.Error) as exc:
+                print('Operation failed: ' + explain(exc), file=sys.stderr)
+    except (EOFError, KeyboardInterrupt):
+        print('\nCancelled.')
+        return 130
+    except (OSError, ValueError, RuntimeError, paramiko.SSHException, psutil.Error) as exc:
+        print('Operation failed: ' + explain(exc), file=sys.stderr)
+        return 1