webgate 0.1.0__tar.gz → 0.2.0__tar.gz

{webgate-0.1.0 → webgate-0.2.0}/.dockerignore

@@ -13,6 +13,6 @@ CLAUDE.md
 CLAUDE.local.md
 .env
 docs/
-README.md
+ROADMAP.md
 *.png
 .playwright-cli/

webgate-0.2.0/CHANGELOG.md

@@ -0,0 +1,69 @@
+# Changelog
+
+## v0.2.0 (2026-04-09)
+
+### Features
+
+- **SFTP read-only mode** -- per-server flag to allow browse and download only, blocking all write operations (upload, write, mkdir, rename, delete, chmod)
+- **Server status monitoring** -- background task checks SSH connectivity every 60 seconds; online/offline indicator (green/red dot) on server dashboard
+- **Dark/light theme toggle** -- user preference saved in localStorage; CSS custom properties for full theme support; terminal and editor adapt to theme
+- **Keyboard shortcuts** -- Escape closes modals, Ctrl+1 goes to Site Manager, Ctrl+N opens New Server
+- **Drag & drop upload progress** -- visual progress bar with percentage during file uploads
+- **Folder download as ZIP** -- right-click a directory in SFTP browser to download it as a ZIP archive
+- **Lightweight DB migrations** -- automatic ALTER TABLE for new columns on existing databases
+
+### Details
+
+- New server model field: `sftp_read_only` (bool, default false)
+- New file: `servers/monitor.py` — ServerMonitor class with asyncio background task
+- New API endpoints: `GET /api/servers/status`, `GET /api/servers/{id}/status`
+- New API endpoint: `GET /api/files/{id}/download-zip?path=`
+- Config settings: `monitor_interval`, `monitor_timeout`, `monitor_concurrency`
+- CSS variables for theming: `--bg-primary`, `--text-primary`, `--accent`, etc.
+- Terminal theme switches between dark (Tokyo Night) and light on toggle
+
+---
+
+## v0.1.1 (2026-04-08)
+
+### Features
+
+- **Per-server SSH/SFTP toggles** -- admin can enable or disable SSH terminal and SFTP file browser independently for each server
+- **SFTP path restrictions** -- admin can configure allowed directory paths per server; users are restricted to only those directories and their subdirectories (empty list = unrestricted)
+
+### Details
+
+- New server model fields: `ssh_enabled` (bool), `sftp_enabled` (bool), `sftp_allowed_paths` (JSON list of paths)
+- SSH disabled servers return WebSocket close code 4003
+- SFTP disabled servers return HTTP 403
+- Path restriction enforced on all SFTP operations (ls, read, write, upload, download, mkdir, rename, delete, chmod)
+- Rename operations validate both source and destination paths against allowed paths
+- All existing tests continue to pass (34 tests)
+
+---
+
+## v0.1.0 (2026-04-08)
+
+First public release.
+
+### Features
+
+- SSH web terminal (xterm.js + asyncssh WebSocket bridge)
+- SFTP file browser (directory listing, upload, download, rename, delete, mkdir, chmod)
+- In-browser text editor (CodeMirror 6 with oneDark theme)
+- PDF and image preview (PDF, PNG, JPG, GIF, SVG, WebP)
+- Server registry with groups, tags, and encrypted credentials (Fernet)
+- Quick Connect toolbar for one-off SSH connections
+- Admin/user role system with group-based access control
+- Default admin account with forced password change on first login
+- User management panel (create, delete, assign groups)
+- Multi-tab split pane (terminal + file browser side by side)
+- File search/filter within SFTP listings
+- Server import/export (JSON) from the UI
+- Session persistence across page reloads
+- Rate limiting on auth endpoints (slowapi)
+- Audit log (admin-viewable action history)
+- SFTP connection pool (reuse per server, 5 min TTL)
+- Modern dark UI (GitHub-inspired theme)
+- Docker multi-stage build with demo SSH container
+- 34 automated tests

{webgate-0.1.0 → webgate-0.2.0}/Dockerfile

@@ -4,7 +4,7 @@ FROM python:3.13-slim AS builder
 WORKDIR /app
 COPY --from=ghcr.io/astral-sh/uv:latest /uv /usr/local/bin/uv
 
-COPY pyproject.toml uv.lock ./
+COPY pyproject.toml uv.lock README.md ./
 RUN uv sync --frozen --no-dev --no-editable
 
 COPY src/ src/

{webgate-0.1.0 → webgate-0.2.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: webgate
-Version: 0.1.0
+Version: 0.2.0
 Summary: Self-hosted web application for remote server management via SSH terminal and SFTP file browser
 Project-URL: Homepage, https://github.com/kalexnolasco/webgate
 Project-URL: Documentation, https://kalexnolasco.github.io/webgate/
@@ -44,11 +44,12 @@ Description-Content-Type: text/markdown
 
 # webgate
 
-[![Python](https://img.shields.io/badge/python-3.11+-blue?style=flat-square&logo=python&logoColor=white)](https://python.org)
+[![PyPI](https://img.shields.io/pypi/v/webgate?style=flat-square)](https://pypi.org/project/webgate/)
+[![Python](https://img.shields.io/pypi/pyversions/webgate?style=flat-square)](https://pypi.org/project/webgate/)
+[![License](https://img.shields.io/pypi/l/webgate?style=flat-square)](https://github.com/kalexnolasco/webgate/blob/main/LICENSE)
 [![FastAPI](https://img.shields.io/badge/FastAPI-0.115+-009688?style=flat-square&logo=fastapi&logoColor=white)](https://fastapi.tiangolo.com)
-[![License](https://img.shields.io/badge/license-MIT-green?style=flat-square)](LICENSE)
 [![Docker](https://img.shields.io/badge/docker-ready-2496ED?style=flat-square&logo=docker&logoColor=white)](Dockerfile)
-[![Status](https://img.shields.io/badge/status-beta-orange?style=flat-square)]()
+[![Status](https://img.shields.io/badge/status-beta-orange?style=flat-square)](https://pypi.org/project/webgate/)
 [![Tests](https://img.shields.io/badge/tests-34%20passed-brightgreen?style=flat-square)](https://github.com/kalexnolasco/webgate/actions)
 [![Docs](https://img.shields.io/badge/docs-kalexnolasco.github.io-blue?style=flat-square)](https://kalexnolasco.github.io/webgate/)
 
@@ -183,16 +184,25 @@ flowchart TB
 | **SFTP File Browser** | Directory listing, upload/download, drag & drop, rename, delete, mkdir, chmod, breadcrumb navigation |
 | **File Editor** | In-browser text editor powered by CodeMirror 6 with syntax highlighting (oneDark theme) |
 | **File Preview** | PDF viewer, image preview (PNG, JPG, GIF, SVG, WebP) directly in the browser |
-| **Server Registry** | Add/edit/delete servers, groups, tags, password & key auth, test connectivity, import/export |
+| **Server Registry** | Add/edit/delete servers, groups, tags, password & key auth, test connectivity, import/export, per-server SSH/SFTP toggles |
 | **Quick Connect** | One-off SSH/SFTP connections without saving server config (FileZilla-style toolbar) |
-| **User Management** | Admin creates users and assigns server groups -- users only see what they're allowed to |
+| **Access Control** | Admin creates users, assigns server groups, enables/disables SSH or SFTP per server, restricts SFTP to specific paths, read-only SFTP mode |
+| **Server Monitoring** | Background SSH connectivity checks every 60s, green/red status dot on server dashboard |
+| **Dark/Light Theme** | Toggle between dark and light themes, saved in localStorage, terminal adapts |
 | **Credential Security** | SSH passwords and private keys encrypted at rest with Fernet (derived from app secret) |
 | **Connection Pool** | SFTP connections are reused per server (5 min TTL), not opened/closed on every request |
+| **Upload Progress** | Visual progress bar with percentage during file uploads |
+| **ZIP Download** | Download entire directories as ZIP archives from the SFTP browser |
+| **Keyboard Shortcuts** | Escape closes modals, Ctrl+1 Site Manager, Ctrl+N New Server |
 | **Docker Ready** | Multi-stage Dockerfile, single-command deployment, health checks, persistent volumes |
+| **Responsive** | Adapts to tablet and mobile screen sizes |
 | **Zero Frontend Build** | Vanilla JS + Alpine.js, no npm/node required, all assets from CDN |
 
 ## Screenshots
 
+### Login
+![Login](docs/screenshots/login.png)
+
 ### Site Manager
 ![Site Manager](docs/screenshots/site-manager.png)
 
@@ -205,6 +215,24 @@ flowchart TB
 ### File Editor (CodeMirror 6)
 ![Editor](docs/screenshots/editor.png)
 
+### Split View (Terminal + SFTP)
+![Split View](docs/screenshots/split-view.png)
+
+### Access Control (per-server SSH/SFTP toggles + path restrictions)
+![Access Control](docs/screenshots/access-control.png)
+
+### SSH Disabled (button greyed out)
+![SSH Disabled](docs/screenshots/ssh-disabled.png)
+
+### SFTP Path Restriction in Action
+![SFTP Restricted](docs/screenshots/sftp-restricted.png)
+
+### User Management
+![Users](docs/screenshots/users.png)
+
+### Audit Log
+![Audit](docs/screenshots/audit.png)
+
 ## Quick Start
 
 ### Docker (recommended)
@@ -272,10 +300,13 @@ flowchart LR
 | | Admin | User |
 |---|---|---|
 | Add/edit/delete servers | Yes | No |
+| Enable/disable SSH or SFTP per server | Yes | No |
+| Restrict SFTP to specific paths | Yes | No |
 | Create/delete users | Yes | No |
 | Assign groups to users | Yes | No |
 | See all servers | Yes | Only servers in assigned groups |
-| SSH / SFTP / Test | Yes | Yes (allowed servers only) |
+| SSH terminal (if enabled on server) | Yes | Yes (allowed servers only) |
+| SFTP file browser (if enabled, within allowed paths) | Yes | Yes (allowed servers only) |
 | Quick Connect | Yes | Yes |
 
 ### Example workflow
@@ -417,6 +448,9 @@ All settings are configurable via environment variables with the `WEBGATE_` pref
 | `WEBGATE_MAX_UPLOAD_SIZE` | `104857600` | Max upload size (100 MB) |
 | `WEBGATE_JWT_ALGORITHM` | `HS256` | JWT algorithm |
 | `WEBGATE_JWT_EXPIRE_MINUTES` | `1440` | Token expiry (24 hours) |
+| `WEBGATE_MONITOR_INTERVAL` | `60` | Server status check interval (seconds) |
+| `WEBGATE_MONITOR_TIMEOUT` | `5` | SSH connect timeout for checks (seconds) |
+| `WEBGATE_MONITOR_CONCURRENCY` | `10` | Max parallel status checks |
 
 ## Docker
 
@@ -516,6 +550,9 @@ uv run coverage run -m pytest tests/ -v && uv run coverage report
 - **SSH credentials encrypted at rest** with Fernet (key derived from `WEBGATE_SECRET_KEY`)
 - **JWT authentication** with configurable expiry
 - **Group-based access control** -- users only see servers in their assigned groups
+- **Per-server feature control** -- admin can disable SSH or SFTP independently per server
+- **SFTP path restrictions** -- admin can lock SFTP to specific directories per server
+- **SFTP read-only mode** -- admin can set per-server read-only flag, blocking all write operations
 - **SFTP path traversal protection** (server-side normalization and validation)
 - **CORS configurable** per deployment
 - **No plaintext password storage** (user passwords hashed with bcrypt)
@@ -523,6 +560,8 @@ uv run coverage run -m pytest tests/ -v && uv run coverage report
 
 ## Roadmap
 
+### Completed (v0.1.x)
+
 - [x] SSH web terminal (xterm.js + asyncssh)
 - [x] SFTP file browser with full CRUD
 - [x] Server registry with groups and tags
@@ -541,6 +580,37 @@ uv run coverage run -m pytest tests/ -v && uv run coverage report
 - [x] Session persistence across page reloads
 - [x] Rate limiting on auth endpoints (slowapi)
 - [x] Audit log (admin-viewable action history)
+- [x] Per-server SSH/SFTP toggles (admin can enable/disable each feature)
+- [x] SFTP path restrictions (admin can limit access to specific directories)
+
+### Completed (v0.2.x)
+
+- [x] SFTP read-only mode per server (browse and download only)
+- [x] Server status monitoring (background SSH checks, green/red dot)
+- [x] Dark/light theme toggle with localStorage persistence
+- [x] Responsive tablet/mobile layout
+- [x] Keyboard shortcuts (Escape, Ctrl+1, Ctrl+N)
+- [x] Upload progress bar with percentage
+- [x] Folder download as ZIP
+
+### Planned (v0.3.x -- Collaboration & Ops)
+
+- [ ] Shared terminal sessions (multiple users watching the same session)
+- [ ] Session recording and playback (audit/training)
+- [ ] SSH command snippets/macros (saved per server or global)
+- [ ] Webhook/notifications on connection events
+- [ ] Two-factor authentication (TOTP)
+- [ ] LDAP/Active Directory integration
+- [ ] API key authentication (for automation/scripts)
+
+### Planned (v0.4.x -- Enterprise)
+
+- [ ] PostgreSQL support (tested and documented)
+- [ ] Multi-instance deployment with shared DB
+- [ ] SSH jump host / bastion support (ProxyCommand equivalent)
+- [ ] Custom branding (logo, colors, company name)
+- [ ] Backup/restore UI for server registry
+- [ ] Internationalization (i18n)
 
 ## Requirements
 

{webgate-0.1.0 → webgate-0.2.0}/README.md

@@ -1,10 +1,11 @@
 # webgate
 
-[![Python](https://img.shields.io/badge/python-3.11+-blue?style=flat-square&logo=python&logoColor=white)](https://python.org)
+[![PyPI](https://img.shields.io/pypi/v/webgate?style=flat-square)](https://pypi.org/project/webgate/)
+[![Python](https://img.shields.io/pypi/pyversions/webgate?style=flat-square)](https://pypi.org/project/webgate/)
+[![License](https://img.shields.io/pypi/l/webgate?style=flat-square)](https://github.com/kalexnolasco/webgate/blob/main/LICENSE)
 [![FastAPI](https://img.shields.io/badge/FastAPI-0.115+-009688?style=flat-square&logo=fastapi&logoColor=white)](https://fastapi.tiangolo.com)
-[![License](https://img.shields.io/badge/license-MIT-green?style=flat-square)](LICENSE)
 [![Docker](https://img.shields.io/badge/docker-ready-2496ED?style=flat-square&logo=docker&logoColor=white)](Dockerfile)
-[![Status](https://img.shields.io/badge/status-beta-orange?style=flat-square)]()
+[![Status](https://img.shields.io/badge/status-beta-orange?style=flat-square)](https://pypi.org/project/webgate/)
 [![Tests](https://img.shields.io/badge/tests-34%20passed-brightgreen?style=flat-square)](https://github.com/kalexnolasco/webgate/actions)
 [![Docs](https://img.shields.io/badge/docs-kalexnolasco.github.io-blue?style=flat-square)](https://kalexnolasco.github.io/webgate/)
 
@@ -139,16 +140,25 @@ flowchart TB
 | **SFTP File Browser** | Directory listing, upload/download, drag & drop, rename, delete, mkdir, chmod, breadcrumb navigation |
 | **File Editor** | In-browser text editor powered by CodeMirror 6 with syntax highlighting (oneDark theme) |
 | **File Preview** | PDF viewer, image preview (PNG, JPG, GIF, SVG, WebP) directly in the browser |
-| **Server Registry** | Add/edit/delete servers, groups, tags, password & key auth, test connectivity, import/export |
+| **Server Registry** | Add/edit/delete servers, groups, tags, password & key auth, test connectivity, import/export, per-server SSH/SFTP toggles |
 | **Quick Connect** | One-off SSH/SFTP connections without saving server config (FileZilla-style toolbar) |
-| **User Management** | Admin creates users and assigns server groups -- users only see what they're allowed to |
+| **Access Control** | Admin creates users, assigns server groups, enables/disables SSH or SFTP per server, restricts SFTP to specific paths, read-only SFTP mode |
+| **Server Monitoring** | Background SSH connectivity checks every 60s, green/red status dot on server dashboard |
+| **Dark/Light Theme** | Toggle between dark and light themes, saved in localStorage, terminal adapts |
 | **Credential Security** | SSH passwords and private keys encrypted at rest with Fernet (derived from app secret) |
 | **Connection Pool** | SFTP connections are reused per server (5 min TTL), not opened/closed on every request |
+| **Upload Progress** | Visual progress bar with percentage during file uploads |
+| **ZIP Download** | Download entire directories as ZIP archives from the SFTP browser |
+| **Keyboard Shortcuts** | Escape closes modals, Ctrl+1 Site Manager, Ctrl+N New Server |
 | **Docker Ready** | Multi-stage Dockerfile, single-command deployment, health checks, persistent volumes |
+| **Responsive** | Adapts to tablet and mobile screen sizes |
 | **Zero Frontend Build** | Vanilla JS + Alpine.js, no npm/node required, all assets from CDN |
 
 ## Screenshots
 
+### Login
+![Login](docs/screenshots/login.png)
+
 ### Site Manager
 ![Site Manager](docs/screenshots/site-manager.png)
 
@@ -161,6 +171,24 @@ flowchart TB
 ### File Editor (CodeMirror 6)
 ![Editor](docs/screenshots/editor.png)
 
+### Split View (Terminal + SFTP)
+![Split View](docs/screenshots/split-view.png)
+
+### Access Control (per-server SSH/SFTP toggles + path restrictions)
+![Access Control](docs/screenshots/access-control.png)
+
+### SSH Disabled (button greyed out)
+![SSH Disabled](docs/screenshots/ssh-disabled.png)
+
+### SFTP Path Restriction in Action
+![SFTP Restricted](docs/screenshots/sftp-restricted.png)
+
+### User Management
+![Users](docs/screenshots/users.png)
+
+### Audit Log
+![Audit](docs/screenshots/audit.png)
+
 ## Quick Start
 
 ### Docker (recommended)
@@ -228,10 +256,13 @@ flowchart LR
 | | Admin | User |
 |---|---|---|
 | Add/edit/delete servers | Yes | No |
+| Enable/disable SSH or SFTP per server | Yes | No |
+| Restrict SFTP to specific paths | Yes | No |
 | Create/delete users | Yes | No |
 | Assign groups to users | Yes | No |
 | See all servers | Yes | Only servers in assigned groups |
-| SSH / SFTP / Test | Yes | Yes (allowed servers only) |
+| SSH terminal (if enabled on server) | Yes | Yes (allowed servers only) |
+| SFTP file browser (if enabled, within allowed paths) | Yes | Yes (allowed servers only) |
 | Quick Connect | Yes | Yes |
 
 ### Example workflow
@@ -373,6 +404,9 @@ All settings are configurable via environment variables with the `WEBGATE_` pref
 | `WEBGATE_MAX_UPLOAD_SIZE` | `104857600` | Max upload size (100 MB) |
 | `WEBGATE_JWT_ALGORITHM` | `HS256` | JWT algorithm |
 | `WEBGATE_JWT_EXPIRE_MINUTES` | `1440` | Token expiry (24 hours) |
+| `WEBGATE_MONITOR_INTERVAL` | `60` | Server status check interval (seconds) |
+| `WEBGATE_MONITOR_TIMEOUT` | `5` | SSH connect timeout for checks (seconds) |
+| `WEBGATE_MONITOR_CONCURRENCY` | `10` | Max parallel status checks |
 
 ## Docker
 
@@ -472,6 +506,9 @@ uv run coverage run -m pytest tests/ -v && uv run coverage report
 - **SSH credentials encrypted at rest** with Fernet (key derived from `WEBGATE_SECRET_KEY`)
 - **JWT authentication** with configurable expiry
 - **Group-based access control** -- users only see servers in their assigned groups
+- **Per-server feature control** -- admin can disable SSH or SFTP independently per server
+- **SFTP path restrictions** -- admin can lock SFTP to specific directories per server
+- **SFTP read-only mode** -- admin can set per-server read-only flag, blocking all write operations
 - **SFTP path traversal protection** (server-side normalization and validation)
 - **CORS configurable** per deployment
 - **No plaintext password storage** (user passwords hashed with bcrypt)
@@ -479,6 +516,8 @@ uv run coverage run -m pytest tests/ -v && uv run coverage report
 
 ## Roadmap
 
+### Completed (v0.1.x)
+
 - [x] SSH web terminal (xterm.js + asyncssh)
 - [x] SFTP file browser with full CRUD
 - [x] Server registry with groups and tags
@@ -497,6 +536,37 @@ uv run coverage run -m pytest tests/ -v && uv run coverage report
 - [x] Session persistence across page reloads
 - [x] Rate limiting on auth endpoints (slowapi)
 - [x] Audit log (admin-viewable action history)
+- [x] Per-server SSH/SFTP toggles (admin can enable/disable each feature)
+- [x] SFTP path restrictions (admin can limit access to specific directories)
+
+### Completed (v0.2.x)
+
+- [x] SFTP read-only mode per server (browse and download only)
+- [x] Server status monitoring (background SSH checks, green/red dot)
+- [x] Dark/light theme toggle with localStorage persistence
+- [x] Responsive tablet/mobile layout
+- [x] Keyboard shortcuts (Escape, Ctrl+1, Ctrl+N)
+- [x] Upload progress bar with percentage
+- [x] Folder download as ZIP
+
+### Planned (v0.3.x -- Collaboration & Ops)
+
+- [ ] Shared terminal sessions (multiple users watching the same session)
+- [ ] Session recording and playback (audit/training)
+- [ ] SSH command snippets/macros (saved per server or global)
+- [ ] Webhook/notifications on connection events
+- [ ] Two-factor authentication (TOTP)
+- [ ] LDAP/Active Directory integration
+- [ ] API key authentication (for automation/scripts)
+
+### Planned (v0.4.x -- Enterprise)
+
+- [ ] PostgreSQL support (tested and documented)
+- [ ] Multi-instance deployment with shared DB
+- [ ] SSH jump host / bastion support (ProxyCommand equivalent)
+- [ ] Custom branding (logo, colors, company name)
+- [ ] Backup/restore UI for server registry
+- [ ] Internationalization (i18n)
 
 ## Requirements
 

webgate-0.2.0/ROADMAP.md

@@ -0,0 +1,79 @@
+# Roadmap
+
+This document tracks the development plan for **webgate**. Items are organized by release milestone.
+
+---
+
+## v0.1.0 -- Foundation (Released 2026-04-08)
+
+- [x] SSH web terminal (xterm.js + asyncssh WebSocket bridge)
+- [x] SFTP file browser (ls, upload, download, rename, delete, mkdir, chmod)
+- [x] In-browser text editor (CodeMirror 6 with oneDark theme)
+- [x] PDF and image preview (PDF, PNG, JPG, GIF, SVG, WebP)
+- [x] Server registry with groups, tags, and encrypted credentials (Fernet)
+- [x] Quick Connect toolbar for one-off SSH connections
+- [x] Admin/user role system with group-based access control
+- [x] Default admin account with forced password change on first login
+- [x] User management panel (create, delete, assign groups)
+- [x] Multi-tab split pane (terminal + file browser side by side)
+- [x] SSH key management (per-server key upload with visual indicator)
+- [x] File search/filter within SFTP listings
+- [x] Server import/export (JSON) from the UI
+- [x] Session persistence across page reloads
+- [x] Rate limiting on auth endpoints (slowapi)
+- [x] Audit log (admin-viewable action history)
+- [x] SFTP connection pool (reuse per server, 5 min TTL)
+- [x] Docker multi-stage build with demo SSH container
+- [x] 34 automated tests
+
+## v0.1.1 -- Per-Server Access Control (Released 2026-04-08)
+
+- [x] Per-server SSH toggle (admin can disable SSH terminal for specific servers)
+- [x] Per-server SFTP toggle (admin can disable SFTP file browser for specific servers)
+- [x] SFTP path restrictions (admin can limit SFTP access to specific directories per server)
+- [x] Path enforcement on all SFTP operations (ls, read, write, upload, download, mkdir, rename, delete, chmod)
+
+---
+
+## v0.2.0 -- Access Refinement & UX (Released 2026-04-09)
+
+- [x] SFTP read-only mode (per-server flag: browse/download only, block upload/write/delete/rename/mkdir/chmod)
+- [x] Server status monitoring (background SSH checks every 60s, green/red dot on dashboard)
+- [x] Dark/light theme toggle (CSS variables, localStorage persistence, terminal/editor adapt)
+- [x] Responsive tablet layout (CSS media queries for 1024px and 768px breakpoints)
+- [x] Keyboard shortcuts (Escape closes modals, Ctrl+1 Site Manager, Ctrl+N New Server)
+- [x] Drag & drop upload progress bar (XHR with progress events, percentage display)
+- [x] Folder download as ZIP (server-side zip compression, right-click context menu)
+
+## v0.3.0 -- Collaboration & Operations
+
+| Feature | Priority | Description |
+|---------|----------|-------------|
+| Shared terminal sessions | High | Multiple users can watch/interact with the same SSH session in real time |
+| Session recording & playback | High | Record terminal sessions for audit trail and training; replay in browser |
+| SSH command snippets | Medium | Save and execute common commands per server or globally; share across team |
+| Webhook notifications | Medium | Fire webhooks on events: user login, SSH connect, file upload, server added |
+| Two-factor authentication (TOTP) | High | Optional TOTP (Google Authenticator, Authy) for user accounts |
+| LDAP / Active Directory | Medium | Authenticate users against corporate LDAP/AD; auto-map groups |
+| API key authentication | Low | Generate API keys for programmatic access (automation, scripts, CI/CD) |
+
+## v0.4.0 -- Enterprise & Scale
+
+| Feature | Priority | Description |
+|---------|----------|-------------|
+| PostgreSQL support | High | Test, document, and CI-verify PostgreSQL as alternative to SQLite |
+| Multi-instance deployment | Medium | Multiple webgate instances sharing a single database (stateless workers behind LB) |
+| SSH jump host / bastion | High | Connect through a bastion/jump host to reach servers not directly reachable |
+| Custom branding | Low | Configurable logo, application name, and color scheme |
+| Backup/restore UI | Medium | Export/import full application state (users, servers, audit log) from admin panel |
+| Internationalization (i18n) | Low | Multi-language support for the UI (starting with English and Spanish) |
+
+---
+
+## How to Contribute
+
+Feature requests and bug reports go in [GitHub Issues](https://github.com/kalexnolasco/webgate/issues). When proposing a new feature, please include:
+
+1. **Use case** -- What problem does it solve?
+2. **Who benefits** -- Which type of user needs this?
+3. **Suggested approach** -- How would you implement it (optional)?

{webgate-0.1.0 → webgate-0.2.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "webgate"
-version = "0.1.0"
+version = "0.2.0"
 description = "Self-hosted web application for remote server management via SSH terminal and SFTP file browser"
 readme = "README.md"
 license = "MIT"

{webgate-0.1.0 → webgate-0.2.0}/src/webgate/app.py

@@ -4,7 +4,6 @@ from contextlib import asynccontextmanager
 from fastapi import FastAPI
 from fastapi.middleware.cors import CORSMiddleware
 from fastapi.staticfiles import StaticFiles
-
 from slowapi import _rate_limit_exceeded_handler
 from slowapi.errors import RateLimitExceeded
 
@@ -15,6 +14,7 @@ from webgate.config import settings
 from webgate.db.engine import async_session_factory, close_db, init_db
 from webgate.files.pool import sftp_pool
 from webgate.files.routes import router as files_router
+from webgate.servers.monitor import server_monitor
 from webgate.servers.routes import router as servers_router
 from webgate.terminal.routes import router as terminal_router
 
@@ -25,7 +25,9 @@ async def lifespan(app: FastAPI) -> AsyncGenerator[None]:
     async with async_session_factory() as session:
         await seed_admin(session)
     await sftp_pool.start()
+    await server_monitor.start()
     yield
+    await server_monitor.stop()
     await sftp_pool.stop()
     await close_db()
 

{webgate-0.1.0 → webgate-0.2.0}/src/webgate/config.py

@@ -20,6 +20,11 @@ class Settings(BaseSettings):
     jwt_algorithm: str = "HS256"
     jwt_expire_minutes: int = 1440  # 24 hours
 
+    # Server monitoring
+    monitor_interval: int = 60  # seconds between connectivity checks
+    monitor_timeout: int = 5  # SSH connect timeout for checks
+    monitor_concurrency: int = 10  # max parallel checks
+
     @property
     def static_dir(self) -> Path:
         return Path(__file__).parent / "static"

{webgate-0.1.0 → webgate-0.2.0}/src/webgate/db/engine.py

@@ -1,11 +1,14 @@
+import logging
 from collections.abc import AsyncGenerator
 
-from sqlalchemy import MetaData
+from sqlalchemy import MetaData, text
 from sqlalchemy.ext.asyncio import AsyncSession, async_sessionmaker, create_async_engine
 from sqlalchemy.orm import DeclarativeBase
 
 from webgate.config import settings
 
+logger = logging.getLogger(__name__)
+
 engine = create_async_engine(settings.db_url, echo=False)
 async_session_factory = async_sessionmaker(engine, expire_on_commit=False)
 
@@ -27,9 +30,21 @@ async def get_session() -> AsyncGenerator[AsyncSession]:
         yield session
 
 
+_MIGRATIONS = [
+    "ALTER TABLE servers ADD COLUMN sftp_read_only BOOLEAN DEFAULT 0",
+]
+
+
 async def init_db() -> None:
     async with engine.begin() as conn:
         await conn.run_sync(Base.metadata.create_all)
+        # Lightweight migrations for columns added after initial release
+        for sql in _MIGRATIONS:
+            try:
+                await conn.execute(text(sql))
+                logger.info("Migration applied: %s", sql.split("ADD COLUMN ")[1].split()[0])
+            except Exception:
+                pass  # Column already exists
 
 
 async def close_db() -> None: