feat(plugins): add connection, authentication, and importer providers

App.tsx

@@ -84,6 +84,7 @@ import { resolveSnippetCommand } from './components/SnippetExecutionProvider';
 import { isScriptSnippet } from './domain/snippetScript.ts';
 import { ScriptAutomationRoot } from './components/scripts/ScriptAutomationRoot';
 import { ExternalMcpApprovalsHost } from './components/ai/ExternalMcpApprovalsHost';
+import { PluginAuthenticationHost } from './components/plugins/PluginAuthenticationHost';
 import { useExternalMcpGrantPersister } from './components/ai/useExternalMcpGrantPersister';
 import { setupMcpApprovalBridge } from './infrastructure/ai/shared/approvalGate';
 import { AppActiveTabChrome } from './application/app/AppActiveTabChrome';
@@ -252,6 +253,7 @@ function App({ settings }: { settings: SettingsState }) {
     updateHostLastConnected,
     convertKnownHostToHost,
     importDataFromString,
+    commitPluginImporterData,
     groupConfigs,
     updateGroupConfigs,
   } = useVaultState();
@@ -1574,7 +1576,7 @@ function App({ settings }: { settings: SettingsState }) {
         resolveSessionAppearance={themeRuntime.resolveFocusedAppearance}
         t={t}
       />
-      <AppView ctx={{ accentMode, addShellHistoryEntry, addSessionToWorkspace, addToWorkspaceDialog, appendHostToWorkspace, appendLocalTerminalToWorkspace, clearAndRemoveSource, clearAndRemoveSources, clearUnsavedConnectionLogs, clearSessionFontSizeOverride, closeLogView, closeSession, closeTabsBatch, copySessionWithCurrentShell, copySessionToNewWindowWithCurrentShell, closeWorkspace, connectionLogs, convertKnownHostToHost, createWorkspaceFromSessions, createWorkspaceFromTargets: createWorkspaceFromEffectiveTargets, createWorkspaceWithHosts: createWorkspaceWithEffectiveHosts, customAccent, customGroups, currentTerminalTheme, deepLinkHostDraft, deleteConnectionLog, draggingSessionId, effectiveKnownHosts, editorTabs, editorWordWrap, emptyVaultConflict, followAppTerminalTheme, clearThemeIntent: themeRuntime.clearIntent, settleManualThemeIntent: themeRuntime.settleManualIntent, pickTerminalTheme: themeRuntime.pickTheme, resolveSessionAppearance: themeRuntime.resolveFocusedAppearance, groupConfigs, handleAddKnownHost, handleConnectSerial, handleConnectToHost, handleCreateLocalTerminal, handleDefaultTerminalThemeChange, handleDeleteHost, handleEndSessionDrag, handleFollowAppTerminalThemeChange, handleHostConnectWithProtocolCheck, handleHotkeyAction, handleOpenHostFromVaultNote, handleOpenVaultHostFromChat, handleOpenVaultNoteFromChat, handleOpenVaultSectionFromChat, handleOpenVaultSnippetFromChat, handleKeyboardInteractiveCancel, handleKeyboardInteractiveSubmit, handleOpenQuickSwitcher, handleOpenSettings, handleRootContextMenu, handlePassphraseCancel, handlePassphraseSkip, handlePassphraseSubmit, handleProtocolSelect, handleRequestCloseEditorTabRef, handleSessionStatusChange, handleSyncNowManual, handleTerminalDataCapture, handleToggleTheme, handleUpdateHostFromTerminal, hostById, hosts, terminalHosts, updateTerminalHosts, hotkeyScheme, identities, importOrReuseKey, isBroadcastEnabled, isCreateWorkspaceOpen, isMacClient, isQuickSwitcherOpen, keyBindings, keyboardInteractiveQueue, keys, logViews, managedSources, navigateToSection, noteGroups, notes, openLogView, openNoteRequest, orderedTabsWithEditors, orphanSessions, passphraseQueue, protocolSelectHost, proxyProfiles, portForwardingRules, quickResults, quickSearch, removeSessionFromWorkspace, reorderWorkTabs, reorderWorkspaceSessions, resetSessionRename, resetWorkspaceRename, resolveEmptyVaultConflict, resolvedTheme, runSnippet: handleRunSnippet, sessionLogsDir, sessionLogsEnabled, sessionLogsFormat, sessionLogsTimestampsEnabled, sessionRenameTarget, sessionRenameValue, sessions, setActiveTabId, setAddToWorkspaceDialog, setDeepLinkHostDraft, setDraggingSessionId, setEditorWordWrap, setIsCreateWorkspaceOpen, setIsQuickSwitcherOpen, setNavigateToSection, setProtocolSelectHost, setQuickSearch, setSessionRenameValue, setTerminalFontFamilyId, setTerminalFontSize, setVaultFocusRequest, setWorkspaceFocusedSession, setWorkspaceRenameValue, settings, sftpAutoOpenSidebar, sftpFollowTerminalCwd, setSftpFollowTerminalCwd, sftpAutoSync, sftpDefaultViewMode, sftpDoubleClickBehavior, sftpShowHiddenFiles, sftpUseCompressedUpload, shellHistory, snippetPackages, snippets, splitSessionWithCurrentShell, sshDebugLogsEnabled: settings.sshDebugLogsEnabled, startSessionRename, renameSessionInline, startWorkspaceRename, submitSessionRename, submitWorkspaceRename, t, terminalFontFamilyId, terminalFontSize, terminalSettings, terminalThemeId, themeById, toggleBroadcast, toggleConnectionLogSaved, toggleScriptsSidePanelRef, toggleSidePanelRef, toggleWorkspaceViewMode, unmanageSource, updateConnectionLog, updateCustomGroups, updateGroupConfigs, updateHostDistro, updateHosts, updateIdentities, updateKeys, updateKnownHosts, updateManagedSources, updateNoteGroups, updateNotes, updateProxyProfiles, updateSnippetPackages, updateSnippets, updateSplitSizes, updateSessionFontSize, updateSessionRestoreCwd, updateSessionDynamicTitle, updateSessionCodingCliProvider, updateTerminalSetting, vaultFocusRequest, workspaceRenameTarget, workspaceRenameValue, workspaces, VaultViewContainer, SftpViewMount, TerminalLayerMount, LogViewWrapper }} />
+      <AppView ctx={{ accentMode, addShellHistoryEntry, addSessionToWorkspace, addToWorkspaceDialog, appendHostToWorkspace, appendLocalTerminalToWorkspace, clearAndRemoveSource, clearAndRemoveSources, clearUnsavedConnectionLogs, clearSessionFontSizeOverride, closeLogView, closeSession, closeTabsBatch, commitPluginImporterData, copySessionWithCurrentShell, copySessionToNewWindowWithCurrentShell, closeWorkspace, connectionLogs, convertKnownHostToHost, createWorkspaceFromSessions, createWorkspaceFromTargets: createWorkspaceFromEffectiveTargets, createWorkspaceWithHosts: createWorkspaceWithEffectiveHosts, customAccent, customGroups, currentTerminalTheme, deepLinkHostDraft, deleteConnectionLog, draggingSessionId, effectiveKnownHosts, editorTabs, editorWordWrap, emptyVaultConflict, followAppTerminalTheme, clearThemeIntent: themeRuntime.clearIntent, settleManualThemeIntent: themeRuntime.settleManualIntent, pickTerminalTheme: themeRuntime.pickTheme, resolveSessionAppearance: themeRuntime.resolveFocusedAppearance, groupConfigs, handleAddKnownHost, handleConnectSerial, handleConnectToHost, handleCreateLocalTerminal, handleDefaultTerminalThemeChange, handleDeleteHost, handleEndSessionDrag, handleFollowAppTerminalThemeChange, handleHostConnectWithProtocolCheck, handleHotkeyAction, handleOpenHostFromVaultNote, handleOpenVaultHostFromChat, handleOpenVaultNoteFromChat, handleOpenVaultSectionFromChat, handleOpenVaultSnippetFromChat, handleKeyboardInteractiveCancel, handleKeyboardInteractiveSubmit, handleOpenQuickSwitcher, handleOpenSettings, handleRootContextMenu, handlePassphraseCancel, handlePassphraseSkip, handlePassphraseSubmit, handleProtocolSelect, handleRequestCloseEditorTabRef, handleSessionStatusChange, handleSyncNowManual, handleTerminalDataCapture, handleToggleTheme, handleUpdateHostFromTerminal, hostById, hosts, terminalHosts, updateTerminalHosts, hotkeyScheme, identities, importOrReuseKey, isBroadcastEnabled, isCreateWorkspaceOpen, isMacClient, isQuickSwitcherOpen, keyBindings, keyboardInteractiveQueue, keys, logViews, managedSources, navigateToSection, noteGroups, notes, openLogView, openNoteRequest, orderedTabsWithEditors, orphanSessions, passphraseQueue, protocolSelectHost, proxyProfiles, portForwardingRules, quickResults, quickSearch, removeSessionFromWorkspace, reorderWorkTabs, reorderWorkspaceSessions, resetSessionRename, resetWorkspaceRename, resolveEmptyVaultConflict, resolvedTheme, runSnippet: handleRunSnippet, sessionLogsDir, sessionLogsEnabled, sessionLogsFormat, sessionLogsTimestampsEnabled, sessionRenameTarget, sessionRenameValue, sessions, setActiveTabId, setAddToWorkspaceDialog, setDeepLinkHostDraft, setDraggingSessionId, setEditorWordWrap, setIsCreateWorkspaceOpen, setIsQuickSwitcherOpen, setNavigateToSection, setProtocolSelectHost, setQuickSearch, setSessionRenameValue, setTerminalFontFamilyId, setTerminalFontSize, setVaultFocusRequest, setWorkspaceFocusedSession, setWorkspaceRenameValue, settings, sftpAutoOpenSidebar, sftpFollowTerminalCwd, setSftpFollowTerminalCwd, sftpAutoSync, sftpDefaultViewMode, sftpDoubleClickBehavior, sftpShowHiddenFiles, sftpUseCompressedUpload, shellHistory, snippetPackages, snippets, splitSessionWithCurrentShell, sshDebugLogsEnabled: settings.sshDebugLogsEnabled, startSessionRename, renameSessionInline, startWorkspaceRename, submitSessionRename, submitWorkspaceRename, t, terminalFontFamilyId, terminalFontSize, terminalSettings, terminalThemeId, themeById, toggleBroadcast, toggleConnectionLogSaved, toggleScriptsSidePanelRef, toggleSidePanelRef, toggleWorkspaceViewMode, unmanageSource, updateConnectionLog, updateCustomGroups, updateGroupConfigs, updateHostDistro, updateHosts, updateIdentities, updateKeys, updateKnownHosts, updateManagedSources, updateNoteGroups, updateNotes, updateProxyProfiles, updateSnippetPackages, updateSnippets, updateSplitSizes, updateSessionFontSize, updateSessionRestoreCwd, updateSessionDynamicTitle, updateSessionCodingCliProvider, updateTerminalSetting, vaultFocusRequest, workspaceRenameTarget, workspaceRenameValue, workspaces, VaultViewContainer, SftpViewMount, TerminalLayerMount, LogViewWrapper }} />
     </>
   );
 }
@@ -1621,6 +1623,7 @@ function AppWithProviders() {
         <TooltipProvider delayDuration={300}>
           <ScriptAutomationRoot />
           <ExternalMcpApprovalsHost />
+          <PluginAuthenticationHost />
           <App settings={settings} />
         </TooltipProvider>
       </ToastProvider>

application/app/AppView.tsx

@@ -99,7 +99,7 @@ export function AppView({ ctx }: { ctx: AppViewContext }) {
 
   const {
     accentMode, addShellHistoryEntry, addSessionToWorkspace, addToWorkspaceDialog, appendHostToWorkspace, appendLocalTerminalToWorkspace,
-    clearAndRemoveSource, clearAndRemoveSources, clearUnsavedConnectionLogs, closeLogView, closeSession, closeTabsBatch, closeWorkspace, copySessionToNewWindowWithCurrentShell, copySessionWithCurrentShell,
+    clearAndRemoveSource, clearAndRemoveSources, clearUnsavedConnectionLogs, closeLogView, closeSession, closeTabsBatch, closeWorkspace, commitPluginImporterData, copySessionToNewWindowWithCurrentShell, copySessionWithCurrentShell,
     connectionLogs, convertKnownHostToHost, createWorkspaceFromSessions, createWorkspaceFromTargets, createWorkspaceWithHosts, customAccent,
     customGroups, currentTerminalTheme, deepLinkHostDraft, deleteConnectionLog, draggingSessionId, effectiveKnownHosts, editorTabs, editorWordWrap, emptyVaultConflict,
     followAppTerminalTheme,
@@ -362,6 +362,7 @@ export function AppView({ ctx }: { ctx: AppViewContext }) {
             onUpdateNotes={updateNotes}
             onUpdateNoteGroups={updateNoteGroups}
             onUpdateCustomGroups={updateCustomGroups}
+            onCommitPluginImporterData={commitPluginImporterData}
             onUpdateKnownHosts={updateKnownHosts}
             onUpdateManagedSources={updateManagedSources}
             onClearAndRemoveManagedSource={clearAndRemoveSource}

application/i18n/locales/en/core.ts

@@ -964,5 +964,13 @@ Highlight the focused split pane:
   'settings.plugins.scopeTarget': '{scope} target',
   'settings.plugins.noScopeTargets': 'No available targets',
   'settings.plugins.thisDevice': 'This device',
+  'plugins.authentication.description': 'Complete the authentication request in this Netcatty dialog.',
+  'plugins.authentication.value': 'Value',
+  'plugins.authentication.password': 'Password',
+  'plugins.authentication.code': 'One-time code',
+  'plugins.authentication.deviceCode': 'Device code',
+  'plugins.authentication.openBrowser': 'Open browser',
+  'plugins.authentication.invalidUrl': 'The authentication provider returned an unsafe or invalid URL.',
+  'plugins.authentication.continue': 'Continue',
 
 };

application/i18n/locales/en/terminal.ts

@@ -183,6 +183,7 @@ export const enTerminalMessages: Messages = {
   'terminal.connection.protocol.telnet': 'Telnet',
   'terminal.connection.protocol.mosh': 'Mosh',
   'terminal.connection.protocol.et': 'EternalTerminal',
+  'terminal.connection.protocol.plugin': 'Plugin connection',
   'terminal.et.proxyUnsupported': 'EternalTerminal does not currently support Netcatty proxy settings. Use SSH or remove the proxy for this host.',
   'terminal.et.multiJumpUnsupported': 'EternalTerminal currently supports at most one jump host in Netcatty.',
   'terminal.connection.protocol.serial': 'Serial',

application/i18n/locales/en/vault.ts

@@ -841,6 +841,21 @@ export const enVaultMessages: Messages = {
   'hostDetails.addTag': 'Add a tag...',
   'hostDetails.createTag': 'Create tag',
   'hostDetails.createGroup': 'Create group',
+  'hostDetails.plugin.title': 'Plugin connection',
+  'hostDetails.plugin.provider.placeholder': 'Select a connection provider',
+  'hostDetails.plugin.provider.empty': 'No connection providers are installed',
+  'hostDetails.plugin.authentication.placeholder': 'Select an authentication provider',
+  'hostDetails.plugin.authentication.none': 'Provider-managed or no authentication',
+  'hostDetails.plugin.credential.placeholder': 'Select a host-owned credential',
+  'hostDetails.plugin.credential.none': 'No saved credential',
+  'hostDetails.plugin.credential.password': 'Password identity',
+  'hostDetails.plugin.credential.privateKey': 'Private key',
+  'hostDetails.plugin.credential.unavailable': 'Saved credential unavailable',
+  'hostDetails.plugin.configuration.label': 'Provider configuration (JSON)',
+  'hostDetails.plugin.configuration.invalid': 'Configuration must be valid JSON.',
+  'hostDetails.plugin.configuration.schemaInvalid': 'Configuration does not match the provider schema.',
+  'hostDetails.plugin.unavailable': 'The configured provider is unavailable. Configuration is preserved until the plugin is restored.',
+  'hostDetails.plugin.useSsh': 'Use SSH instead',
 
   // Host form (legacy modal)
   'hostForm.title.edit': 'Edit Host',
@@ -887,5 +902,25 @@ export const enVaultMessages: Messages = {
   'logView.appearance': 'Appearance',
   'logView.readOnly': 'Read-only',
   'logView.export': 'Export',
+  'vault.import.plugins.title': 'Plugin importers',
+  'vault.import.plugins.loading': 'Building a secure import preview…',
+  'vault.import.plugins.progress': '{completed} of {total} processed {message}',
+  'vault.import.plugins.preview': 'Import preview',
+  'vault.import.plugins.empty': 'No importable drafts were returned.',
+  'vault.import.plugins.summary': '{parsed} drafts · {warnings} warnings · {errors} errors',
+  'vault.import.plugins.commit': 'Import preview',
+  'vault.import.plugins.fileUnavailable': 'The selected file is not available to the desktop importer bridge.',
+  'vault.import.plugins.notRecognized': 'This importer did not recognize the selected file.',
+  'vault.import.plugins.containsErrors': 'The import preview contains errors and cannot be committed.',
+  'vault.import.plugins.committed': 'Imported {count} validated items.',
+  'vault.import.plugins.duplicates': '{count} duplicate items will be skipped.',
+  'vault.import.plugins.validationErrors': '{count} drafts failed host validation and must be fixed by the importer.',
+  'vault.import.plugins.kind.host': 'Host',
+  'vault.import.plugins.kind.identity': 'Identity',
+  'vault.import.plugins.kind.key': 'Key',
+  'vault.import.plugins.kind.snippet': 'Snippet',
+  'vault.import.plugins.kind.group': 'Group',
+  'vault.import.plugins.moreItems': '{count} more items are included in this import.',
+  'vault.import.plugins.moreDiagnostics': '{count} more diagnostics were omitted from this preview.',
 
 };

application/i18n/locales/ru/core.ts

@@ -929,4 +929,12 @@ export const ruCoreMessages: Messages = {
   'settings.plugins.scopeTarget': 'Цель {scope}',
   'settings.plugins.noScopeTargets': 'Нет доступных целей',
   'settings.plugins.thisDevice': 'Это устройство',
+  'plugins.authentication.description': 'Завершите запрос аутентификации в этом диалоге Netcatty.',
+  'plugins.authentication.value': 'Значение',
+  'plugins.authentication.password': 'Пароль',
+  'plugins.authentication.code': 'Одноразовый код',
+  'plugins.authentication.deviceCode': 'Код устройства',
+  'plugins.authentication.openBrowser': 'Открыть браузер',
+  'plugins.authentication.invalidUrl': 'Поставщик аутентификации вернул небезопасный или некорректный URL.',
+  'plugins.authentication.continue': 'Продолжить',
 };

application/i18n/locales/ru/terminal.ts

@@ -201,6 +201,7 @@ export const ruTerminalMessages: Messages = {
   'terminal.connection.protocol.ssh': 'SSH',
   'terminal.connection.protocol.telnet': 'Telnet',
   'terminal.connection.protocol.mosh': 'Mosh',
+  'terminal.connection.protocol.plugin': 'Подключение плагина',
   'terminal.connection.protocol.serial': 'Serial',
   'terminal.connection.protocol.local': 'Локальная оболочка',
   'terminal.hostKey.unknownTitle': 'Подтвердите этот ключ хоста',