Merge branch 'dev-1.8.0' into feature/oidc-import

.commitlintrc.json

@@ -0,0 +1,21 @@
+{
+  "extends": ["@commitlint/config-conventional"],
+  "rules": {
+    "type-enum": [
+      2,
+      "always",
+      [
+        "feat",
+        "fix",
+        "docs",
+        "style",
+        "refactor",
+        "perf",
+        "test",
+        "chore",
+        "revert"
+      ]
+    ],
+    "subject-case": [0]
+  }
+}

.editorconfig

@@ -0,0 +1,20 @@
+# EditorConfig is awesome: https://EditorConfig.org
+
+# top-most EditorConfig file
+root = true
+
+# Unix-style newlines with a newline ending every file
+[*]
+charset = utf-8
+end_of_line = lf
+insert_final_newline = true
+trim_trailing_whitespace = true
+
+# Matches multiple files with brace expansion notation
+[*.{js,jsx,ts,tsx,json,css,scss,md,yml,yaml}]
+indent_style = space
+indent_size = 2
+
+# Markdown files
+[*.md]
+trim_trailing_whitespace = false

.gitattributes

@@ -0,0 +1,36 @@
+# Auto detect text files and perform LF normalization
+* text=auto eol=lf
+
+# Source code
+*.js text eol=lf
+*.jsx text eol=lf
+*.ts text eol=lf
+*.tsx text eol=lf
+*.json text eol=lf
+*.css text eol=lf
+*.scss text eol=lf
+*.html text eol=lf
+*.md text eol=lf
+*.yaml text eol=lf
+*.yml text eol=lf
+
+# Scripts
+*.sh text eol=lf
+*.bash text eol=lf
+
+# Windows scripts should use CRLF
+*.bat text eol=crlf
+*.cmd text eol=crlf
+*.ps1 text eol=crlf
+
+# Binary files
+*.png binary
+*.jpg binary
+*.jpeg binary
+*.gif binary
+*.ico binary
+*.svg binary
+*.woff binary
+*.woff2 binary
+*.ttf binary
+*.eot binary

.github/workflows/electron-build.yml

@@ -12,6 +12,7 @@ on:
           - all
           - windows
           - linux
+          - macos
 
 jobs:
   build-windows:
@@ -91,3 +92,167 @@ jobs:
           name: Termix-Linux-Portable
           path: Termix-Linux-Portable.zip
           retention-days: 30
+
+  build-macos:
+    runs-on: macos-latest
+    if: github.event.inputs.build_type == 'macos' || github.event.inputs.build_type == 'all'
+    needs: []
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v5
+        with:
+          fetch-depth: 1
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+
+      - name: Install dependencies
+        run: |
+          rm -f package-lock.json
+          npm install
+          npm install --force @rollup/rollup-darwin-arm64
+
+      - name: Check for Code Signing Certificates
+        id: check_certs
+        run: |
+          if [ -n "${{ secrets.MAC_BUILD_CERTIFICATE_BASE64 }}" ] && [ -n "${{ secrets.MAC_P12_PASSWORD }}" ]; then
+            echo "has_certs=true" >> $GITHUB_OUTPUT
+          else
+            echo "has_certs=false" >> $GITHUB_OUTPUT
+            echo "⚠️ Code signing certificates not configured. MAS build will be unsigned."
+          fi
+
+      - name: Import Code Signing Certificates
+        if: steps.check_certs.outputs.has_certs == 'true'
+        env:
+          MAC_BUILD_CERTIFICATE_BASE64: ${{ secrets.MAC_BUILD_CERTIFICATE_BASE64 }}
+          MAC_INSTALLER_CERTIFICATE_BASE64: ${{ secrets.MAC_INSTALLER_CERTIFICATE_BASE64 }}
+          MAC_P12_PASSWORD: ${{ secrets.MAC_P12_PASSWORD }}
+          MAC_KEYCHAIN_PASSWORD: ${{ secrets.MAC_KEYCHAIN_PASSWORD }}
+        run: |
+          APP_CERT_PATH=$RUNNER_TEMP/app_certificate.p12
+          INSTALLER_CERT_PATH=$RUNNER_TEMP/installer_certificate.p12
+          KEYCHAIN_PATH=$RUNNER_TEMP/app-signing.keychain-db
+
+          # Decode certificates
+          echo -n "$MAC_BUILD_CERTIFICATE_BASE64" | base64 --decode -o $APP_CERT_PATH
+
+          if [ -n "$MAC_INSTALLER_CERTIFICATE_BASE64" ]; then
+            echo "Decoding installer certificate..."
+            echo -n "$MAC_INSTALLER_CERTIFICATE_BASE64" | base64 --decode -o $INSTALLER_CERT_PATH
+          else
+            echo "⚠️ MAC_INSTALLER_CERTIFICATE_BASE64 is empty"
+          fi
+
+          # Create and configure keychain
+          security create-keychain -p "$MAC_KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
+          security set-keychain-settings -lut 21600 $KEYCHAIN_PATH
+          security unlock-keychain -p "$MAC_KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
+
+          # Import application certificate
+          echo "Importing application certificate..."
+          security import $APP_CERT_PATH -P "$MAC_P12_PASSWORD" -A -t cert -f pkcs12 -k $KEYCHAIN_PATH
+
+          # Import installer certificate if it exists
+          if [ -f "$INSTALLER_CERT_PATH" ]; then
+            echo "Importing installer certificate..."
+            security import $INSTALLER_CERT_PATH -P "$MAC_P12_PASSWORD" -A -t cert -f pkcs12 -k $KEYCHAIN_PATH
+          else
+            echo "⚠️ Installer certificate file not found, skipping import"
+          fi
+
+          security list-keychain -d user -s $KEYCHAIN_PATH
+
+          echo "Imported certificates:"
+          security find-identity -v -p codesigning $KEYCHAIN_PATH
+
+      - name: Set version for build
+        if: steps.check_certs.outputs.has_certs == 'true'
+        run: |
+          # Get current version and extract major.minor
+          CURRENT_VERSION=$(node -p "require('./package.json').version")
+          MAJOR_MINOR=$(echo $CURRENT_VERSION | cut -d. -f1-2)
+          NEW_VERSION="${MAJOR_MINOR}.${{ github.run_number }}"
+
+          npm version $NEW_VERSION --no-git-tag-version
+          echo "✅ Version set to: $NEW_VERSION"
+
+      - name: Build macOS App Store Package
+        if: steps.check_certs.outputs.has_certs == 'true'
+        env:
+          ELECTRON_BUILDER_ALLOW_UNRESOLVED_DEPENDENCIES: true
+        run: npm run build:mac
+
+      - name: List release directory
+        if: steps.check_certs.outputs.has_certs == 'true'
+        run: |
+          echo "Contents of release directory:"
+          ls -R release/ || echo "Release directory not found"
+
+      - name: Upload macOS MAS Artifact
+        if: steps.check_certs.outputs.has_certs == 'true'
+        uses: actions/upload-artifact@v4
+        with:
+          name: Termix-macOS-MAS
+          path: |
+            release/*.pkg
+            release/mas/*.pkg
+          retention-days: 30
+          if-no-files-found: warn
+
+      - name: Check for App Store Connect API credentials
+        if: steps.check_certs.outputs.has_certs == 'true'
+        id: check_asc_creds
+        run: |
+          if [ -n "${{ secrets.APPLE_KEY_ID }}" ] && [ -n "${{ secrets.APPLE_ISSUER_ID }}" ] && [ -n "${{ secrets.APPLE_KEY_CONTENT }}" ]; then
+            echo "has_credentials=true" >> $GITHUB_OUTPUT
+            echo "✅ App Store Connect API credentials found. Will deploy to App Store Connect."
+          else
+            echo "has_credentials=false" >> $GITHUB_OUTPUT
+            echo "⚠️ App Store Connect API credentials not configured. Skipping deployment."
+            echo "Add APPLE_KEY_ID, APPLE_ISSUER_ID, and APPLE_KEY_CONTENT secrets to enable automatic deployment."
+          fi
+
+      - name: Setup Ruby for Fastlane
+        if: steps.check_asc_creds.outputs.has_credentials == 'true'
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: '3.2'
+          bundler-cache: false
+
+      - name: Install Fastlane
+        if: steps.check_asc_creds.outputs.has_credentials == 'true'
+        run: |
+          gem install fastlane -N
+          fastlane --version
+
+      - name: Deploy to App Store Connect (TestFlight)
+        if: steps.check_asc_creds.outputs.has_credentials == 'true'
+        run: |
+          PKG_FILE=$(find release -name "*.pkg" -type f | head -n 1)
+          if [ -z "$PKG_FILE" ]; then
+            echo "Error: No .pkg file found in release directory"
+            exit 1
+          fi
+          echo "Found package: $PKG_FILE"
+
+          # Create API key file
+          mkdir -p ~/private_keys
+          echo "${{ secrets.APPLE_KEY_CONTENT }}" | base64 --decode > ~/private_keys/AuthKey_${{ secrets.APPLE_KEY_ID }}.p8
+
+          # Upload to App Store Connect using xcrun altool
+          xcrun altool --upload-app -f "$PKG_FILE" \
+            --type macos \
+            --apiKey "${{ secrets.APPLE_KEY_ID }}" \
+            --apiIssuer "${{ secrets.APPLE_ISSUER_ID }}"
+
+          echo "✅ Upload complete! Build will appear in App Store Connect after processing (10-30 minutes)"
+        continue-on-error: true
+
+      - name: Clean up keychain
+        if: always() && steps.check_certs.outputs.has_certs == 'true'
+        run: |
+          security delete-keychain $RUNNER_TEMP/app-signing.keychain-db || true

.github/workflows/pr-check.yml

@@ -0,0 +1,35 @@
+name: PR Check
+
+on:
+  pull_request:
+    branches: [main, dev-*]
+
+jobs:
+  lint-and-build:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+
+      - name: Install dependencies
+        run: |
+          rm -rf node_modules package-lock.json
+          npm install
+
+      - name: Run ESLint
+        run: npx eslint .
+
+      - name: Run Prettier check
+        run: npx prettier --check .
+
+      - name: Type check
+        run: npx tsc --noEmit
+
+      - name: Build
+        run: npm run build

.gitignore

@@ -27,3 +27,4 @@ dist-ssr
 /.claude/
 /ssl/
 .env
+/.mcp.json

.husky/commit-msg

@@ -0,0 +1 @@
+npx --no -- commitlint --edit $1

.husky/pre-commit

@@ -0,0 +1 @@
+npx lint-staged

.nvmrc

@@ -1 +1 @@
-22
+20

.prettierignore

@@ -1,3 +1,23 @@
 # Ignore artifacts:
 build
 coverage
+dist
+dist-ssr
+release
+
+# Dependencies
+node_modules
+package-lock.json
+pnpm-lock.yaml
+yarn.lock
+
+# Database
+db
+
+# Environment
+.env
+
+# Misc
+*.min.js
+*.min.css
+openapi.json

.prettierrc

@@ -1 +1,9 @@
-{}
+{
+  "semi": true,
+  "singleQuote": false,
+  "tabWidth": 2,
+  "trailingComma": "all",
+  "printWidth": 80,
+  "arrowParens": "always",
+  "endOfLine": "lf"
+}

.vscode/extensions.json

@@ -0,0 +1,7 @@
+{
+  "recommendations": [
+    "dbaeumer.vscode-eslint",
+    "esbenp.prettier-vscode",
+    "editorconfig.editorconfig"
+  ]
+}

README.md

@@ -52,7 +52,7 @@ access, SSH tunneling capabilities, and remote file management, with many more t
 - **SSH Terminal Access** - Full-featured terminal with split-screen support (up to 4 panels) and tab system
 - **SSH Tunnel Management** - Create and manage SSH tunnels with automatic reconnection and health monitoring
 - **Remote File Manager** - Manage files directly on remote servers with support for viewing and editing code, images, audio, and video. Upload, download, rename, delete, and move files seamlessly.
-- **SSH Host Manager** - Save, organize, and manage your SSH connections with tags and folders and easily save reusable login info while being able to automate the deploying of SSH keys
+- **SSH Host Manager** - Save, organize, and manage your SSH connections with tags and folders, and easily save reusable login info while being able to automate the deployment of SSH keys
 - **Server Stats** - View CPU, memory, and HDD usage on any SSH server
 - **User Authentication** - Secure user management with admin controls and OIDC and 2FA (TOTP) support
 - **Database Encryption** - SQLite database files encrypted at rest with automatic encryption/decryption

build/entitlements.mas.inherit.plist

@@ -0,0 +1,16 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>com.apple.security.app-sandbox</key>
+	<true/>
+	<key>com.apple.security.inherit</key>
+	<true/>
+	<key>com.apple.security.cs.allow-jit</key>
+	<true/>
+	<key>com.apple.security.cs.allow-unsigned-executable-memory</key>
+	<true/>
+	<key>com.apple.security.cs.disable-library-validation</key>
+	<true/>
+</dict>
+</plist>

build/entitlements.mas.plist

@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>com.apple.security.app-sandbox</key>
+	<true/>
+	<key>com.apple.security.network.client</key>
+	<true/>
+	<key>com.apple.security.network.server</key>
+	<true/>
+	<key>com.apple.security.files.user-selected.read-write</key>
+	<true/>
+	<key>com.apple.security.cs.allow-jit</key>
+	<true/>
+	<key>com.apple.security.cs.allow-unsigned-executable-memory</key>
+	<true/>
+	<key>com.apple.security.cs.disable-library-validation</key>
+	<true/>
+</dict>
+</plist>

docker/Dockerfile

@@ -82,7 +82,7 @@ COPY --chown=node:node package.json ./
 
 VOLUME ["/app/data"]
 
-EXPOSE ${PORT} 30001 30002 30003 30004 30005
+EXPOSE ${PORT} 30001 30002 30003 30004 30005 30006
 
 COPY docker/entrypoint.sh /entrypoint.sh
 RUN chmod +x /entrypoint.sh

docker/nginx-https.conf

@@ -259,6 +259,24 @@ http {
             proxy_set_header X-Forwarded-Proto $scheme;
         }
 
+        location ~ ^/uptime(/.*)?$ {
+            proxy_pass http://127.0.0.1:30006;
+            proxy_http_version 1.1;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+        }
+
+        location ~ ^/activity(/.*)?$ {
+            proxy_pass http://127.0.0.1:30006;
+            proxy_http_version 1.1;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+        }
+
         error_page 500 502 503 504 /50x.html;
         location = /50x.html {
             root /usr/share/nginx/html;

docker/nginx.conf

@@ -248,6 +248,24 @@ http {
             proxy_set_header X-Forwarded-Proto $scheme;
         }
 
+        location ~ ^/uptime(/.*)?$ {
+            proxy_pass http://127.0.0.1:30006;
+            proxy_http_version 1.1;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+        }
+
+        location ~ ^/activity(/.*)?$ {
+            proxy_pass http://127.0.0.1:30006;
+            proxy_http_version 1.1;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+        }
+
         error_page 500 502 503 504 /50x.html;
         location = /50x.html {
             root /usr/share/nginx/html;

electron-builder.json

@@ -1,6 +1,7 @@
 {
-  "appId": "com.termix.app",
+  "appId": "com.karmaa.termix",
   "productName": "Termix",
+  "publish": null,
   "directories": {
     "output": "release"
   },
@@ -21,7 +22,7 @@
   },
   "buildDependenciesFromSource": false,
   "nodeGypRebuild": false,
-  "npmRebuild": false,
+  "npmRebuild": true,
   "win": {
     "target": "nsis",
     "icon": "public/icon.ico",
@@ -58,5 +59,35 @@
         "StartupWMClass": "termix"
       }
     }
+  },
+  "mac": {
+    "target": [
+      {
+        "target": "mas",
+        "arch": "universal"
+      }
+    ],
+    "icon": "public/icon.icns",
+    "category": "public.app-category.developer-tools",
+    "hardenedRuntime": true,
+    "gatekeeperAssess": false,
+    "entitlements": "build/entitlements.mas.plist",
+    "entitlementsInherit": "build/entitlements.mas.inherit.plist",
+    "type": "distribution",
+    "minimumSystemVersion": "10.15"
+  },
+  "mas": {
+    "provisioningProfile": "build/Termix_Mac_App_Store.provisionprofile",
+    "entitlements": "build/entitlements.mas.plist",
+    "entitlementsInherit": "build/entitlements.mas.inherit.plist",
+    "hardenedRuntime": false,
+    "gatekeeperAssess": false,
+    "asarUnpack": ["**/*.node"],
+    "type": "distribution",
+    "category": "public.app-category.developer-tools",
+    "extendInfo": {
+      "ITSAppUsesNonExemptEncryption": false,
+      "NSAppleEventsUsageDescription": "Termix needs access to control other applications for terminal operations."
+    }
   }
 }

package.json

@@ -1,13 +1,18 @@
 {
   "name": "termix",
   "private": true,
-  "version": "1.7.3",
+  "version": "1.8.0",
   "description": "A web-based server management platform with SSH terminal, tunneling, and file editing capabilities",
   "author": "Karmaa",
   "main": "electron/main.cjs",
   "type": "module",
   "scripts": {
     "clean": "npx prettier . --write",
+    "format": "prettier --write .",
+    "format:check": "prettier --check .",
+    "lint": "eslint .",
+    "lint:fix": "eslint --fix .",
+    "type-check": "tsc --noEmit",
     "dev": "vite",
     "build": "vite build && tsc -p tsconfig.node.json",
     "build:backend": "tsc -p tsconfig.node.json",
@@ -19,8 +24,10 @@
     "build:linux-portable": "npm run build && electron-builder --linux --dir",
     "build:linux-appimage": "npm run build && electron-builder --linux AppImage",
     "build:linux-targz": "npm run build && electron-builder --linux tar.gz",
+    "build:mac": "npm run build && electron-builder --mac --universal",
     "test:encryption": "tsc -p tsconfig.node.json && node ./dist/backend/backend/utils/encryption-test.js",
-    "migrate:encryption": "tsc -p tsconfig.node.json && node ./dist/backend/backend/utils/encryption-migration.js"
+    "migrate:encryption": "tsc -p tsconfig.node.json && node ./dist/backend/backend/utils/encryption-migration.js",
+    "prepare": "husky"
   },
   "dependencies": {
     "@codemirror/autocomplete": "^6.18.7",
@@ -44,7 +51,7 @@
     "@radix-ui/react-switch": "^1.2.5",
     "@radix-ui/react-tabs": "^1.1.12",
     "@radix-ui/react-tooltip": "^1.2.8",
-    "@tailwindcss/vite": "^4.1.11",
+    "@tailwindcss/vite": "^4.1.14",
     "@types/bcryptjs": "^2.4.6",
     "@types/cookie-parser": "^1.4.9",
     "@types/jszip": "^3.4.0",
@@ -95,16 +102,21 @@
     "react-simple-keyboard": "^3.8.120",
     "react-syntax-highlighter": "^15.6.6",
     "react-xtermjs": "^1.0.10",
+    "recharts": "^3.2.1",
     "remark-gfm": "^4.0.1",
     "sonner": "^2.0.7",
     "speakeasy": "^2.0.0",
     "ssh2": "^1.16.0",
     "tailwind-merge": "^3.3.1",
+    "tailwindcss": "^4.1.14",
     "wait-on": "^9.0.1",
     "ws": "^8.18.3",
     "zod": "^4.0.5"
   },
   "devDependencies": {
+    "@commitlint/cli": "^20.1.0",
+    "@commitlint/config-conventional": "^20.0.0",
+    "@electron/notarize": "^2.5.0",
     "@eslint/js": "^9.34.0",
     "@types/better-sqlite3": "^7.6.13",
     "@types/cors": "^2.8.19",
@@ -123,9 +135,19 @@
     "eslint-plugin-react-hooks": "^5.2.0",
     "eslint-plugin-react-refresh": "^0.4.20",
     "globals": "^16.3.0",
+    "husky": "^9.1.7",
+    "lint-staged": "^16.2.3",
     "prettier": "3.6.2",
     "typescript": "~5.9.2",
     "typescript-eslint": "^8.40.0",
     "vite": "^7.1.5"
+  },
+  "lint-staged": {
+    "*.{js,jsx,ts,tsx}": [
+      "prettier --write"
+    ],
+    "*.{json,css,md}": [
+      "prettier --write"
+    ]
   }
 }

src/backend/database/database.ts

@@ -6,6 +6,7 @@ import userRoutes from "./routes/users.js";
 import sshRoutes from "./routes/ssh.js";
 import alertRoutes from "./routes/alerts.js";
 import credentialsRoutes from "./routes/credentials.js";
+import snippetsRoutes from "./routes/snippets.js";
 import cors from "cors";
 import fetch from "node-fetch";
 import fs from "fs";
@@ -31,6 +32,12 @@ import {
   sshCredentialUsage,
   settings,
 } from "./db/schema.js";
+import type {
+  CacheEntry,
+  GitHubRelease,
+  GitHubAPIResponse,
+  AuthenticatedRequest,
+} from "../../types/index.js";
 import { getDb } from "./db/index.js";
 import Database from "better-sqlite3";
 
@@ -105,17 +112,11 @@ const upload = multer({
   },
 });
 
-interface CacheEntry {
-  data: any;
-  timestamp: number;
-  expiresAt: number;
-}
-
 class GitHubCache {
   private cache: Map<string, CacheEntry> = new Map();
   private readonly CACHE_DURATION = 30 * 60 * 1000;
 
-  set(key: string, data: any): void {
+  set<T>(key: string, data: T): void {
     const now = Date.now();
     this.cache.set(key, {
       data,
@@ -124,7 +125,7 @@ class GitHubCache {
     });
   }
 
-  get(key: string): any | null {
+  get<T>(key: string): T | null {
     const entry = this.cache.get(key);
     if (!entry) {
       return null;
@@ -135,7 +136,7 @@ class GitHubCache {
       return null;
     }
 
-    return entry.data;
+    return entry.data as T;
   }
 }
 
@@ -145,34 +146,16 @@ const GITHUB_API_BASE = "https://api.github.com";
 const REPO_OWNER = "Termix-SSH";
 const REPO_NAME = "Termix";
 
-interface GitHubRelease {
+async function fetchGitHubAPI<T>(
-  id: number;
-  tag_name: string;
-  name: string;
-  body: string;
-  published_at: string;
-  html_url: string;
-  assets: Array<{
-    id: number;
-    name: string;
-    size: number;
-    download_count: number;
-    browser_download_url: string;
-  }>;
-  prerelease: boolean;
-  draft: boolean;
-}
-
-async function fetchGitHubAPI(
   endpoint: string,
   cacheKey: string,
-): Promise<any> {
+): Promise<GitHubAPIResponse<T>> {
-  const cachedData = githubCache.get(cacheKey);
+  const cachedEntry = githubCache.get<CacheEntry<T>>(cacheKey);
-  if (cachedData) {
+  if (cachedEntry) {
     return {
-      data: cachedData,
+      data: cachedEntry.data,
       cached: true,
-      cache_age: Date.now() - cachedData.timestamp,
+      cache_age: Date.now() - cachedEntry.timestamp,
     };
   }
 
@@ -191,8 +174,13 @@ async function fetchGitHubAPI(
       );
     }
 
-    const data = await response.json();
+    const data = (await response.json()) as T;
-    githubCache.set(cacheKey, data);
+    const cacheData: CacheEntry<T> = {
+      data,
+      timestamp: Date.now(),
+      expiresAt: Date.now() + 30 * 60 * 1000,
+    };
+    githubCache.set(cacheKey, cacheData);
 
     return {
       data: data,
@@ -257,7 +245,7 @@ app.get("/version", authenticateJWT, async (req, res) => {
           localVersion = foundVersion;
           break;
         }
-      } catch (error) {
+      } catch {
         continue;
       }
     }
@@ -272,7 +260,7 @@ app.get("/version", authenticateJWT, async (req, res) => {
 
   try {
     const cacheKey = "latest_release";
-    const releaseData = await fetchGitHubAPI(
+    const releaseData = await fetchGitHubAPI<GitHubRelease>(
       `/repos/${REPO_OWNER}/${REPO_NAME}/releases/latest`,
       cacheKey,
     );
@@ -323,12 +311,12 @@ app.get("/releases/rss", authenticateJWT, async (req, res) => {
     );
     const cacheKey = `releases_rss_${page}_${per_page}`;
 
-    const releasesData = await fetchGitHubAPI(
+    const releasesData = await fetchGitHubAPI<GitHubRelease[]>(
       `/repos/${REPO_OWNER}/${REPO_NAME}/releases?page=${page}&per_page=${per_page}`,
       cacheKey,
     );
 
-    const rssItems = releasesData.data.map((release: GitHubRelease) => ({
+    const rssItems = releasesData.data.map((release) => ({
       id: release.id,
       title: release.name || release.tag_name,
       description: release.body,
@@ -372,7 +360,6 @@ app.get("/releases/rss", authenticateJWT, async (req, res) => {
 
 app.get("/encryption/status", requireAdmin, async (req, res) => {
   try {
-    const authManager = AuthManager.getInstance();
     const securityStatus = {
       initialized: true,
       system: { hasSecret: true, isValid: true },
@@ -417,8 +404,6 @@ app.post("/encryption/initialize", requireAdmin, async (req, res) => {
 
 app.post("/encryption/regenerate", requireAdmin, async (req, res) => {
   try {
-    const authManager = AuthManager.getInstance();
-
     apiLogger.warn("System JWT secret regenerated via API", {
       operation: "jwt_regenerate_api",
     });
@@ -440,8 +425,6 @@ app.post("/encryption/regenerate", requireAdmin, async (req, res) => {
 
 app.post("/encryption/regenerate-jwt", requireAdmin, async (req, res) => {
   try {
-    const authManager = AuthManager.getInstance();
-
     apiLogger.warn("JWT secret regenerated via API", {
       operation: "jwt_secret_regenerate_api",
     });
@@ -462,7 +445,7 @@ app.post("/encryption/regenerate-jwt", requireAdmin, async (req, res) => {
 
 app.post("/database/export", authenticateJWT, async (req, res) => {
   try {
-    const userId = (req as any).userId;
+    const userId = (req as AuthenticatedRequest).userId;
     const { password } = req.body;
 
     if (!password) {
@@ -695,7 +678,7 @@ app.post("/database/export", authenticateJWT, async (req, res) => {
           decrypted.authType,
           decrypted.password || null,
           decrypted.key || null,
-          decrypted.keyPassword || null,
+          decrypted.key_password || null,
           decrypted.keyType || null,
           decrypted.autostartPassword || null,
           decrypted.autostartKey || null,
@@ -738,9 +721,9 @@ app.post("/database/export", authenticateJWT, async (req, res) => {
           decrypted.username,
           decrypted.password || null,
           decrypted.key || null,
-          decrypted.privateKey || null,
+          decrypted.private_key || null,
-          decrypted.publicKey || null,
+          decrypted.public_key || null,
-          decrypted.keyPassword || null,
+          decrypted.key_password || null,
           decrypted.keyType || null,
           decrypted.detectedKeyType || null,
           decrypted.usageCount || 0,
@@ -916,7 +899,7 @@ app.post(
         return res.status(400).json({ error: "No file uploaded" });
       }
 
-      const userId = (req as any).userId;
+      const userId = (req as AuthenticatedRequest).userId;
       const { password } = req.body;
       const mainDb = getDb();
 
@@ -998,7 +981,7 @@ app.post(
       try {
         importDb = new Database(req.file.path, { readonly: true });
 
-        const tables = importDb
+        importDb
           .prepare("SELECT name FROM sqlite_master WHERE type='table'")
           .all();
       } catch (sqliteError) {
@@ -1088,7 +1071,7 @@ app.post(
               );
             }
           }
-        } catch (tableError) {
+        } catch {
           apiLogger.info("ssh_data table not found in import file, skipping");
         }
 
@@ -1149,7 +1132,7 @@ app.post(
               );
             }
           }
-        } catch (tableError) {
+        } catch {
           apiLogger.info(
             "ssh_credentials table not found in import file, skipping",
           );
@@ -1220,7 +1203,7 @@ app.post(
                 );
               }
             }
-          } catch (tableError) {
+          } catch {
             apiLogger.info(`${table} table not found in import file, skipping`);
           }
         }
@@ -1258,7 +1241,7 @@ app.post(
               );
             }
           }
-        } catch (tableError) {
+        } catch {
           apiLogger.info(
             "dismissed_alerts table not found in import file, skipping",
           );
@@ -1299,7 +1282,7 @@ app.post(
                 );
               }
             }
-          } catch (tableError) {
+          } catch {
             apiLogger.info("settings table not found in import file, skipping");
           }
         } else {
@@ -1317,7 +1300,7 @@ app.post(
 
       try {
         fs.unlinkSync(req.file.path);
-      } catch (cleanupError) {
+      } catch {
         apiLogger.warn("Failed to clean up uploaded file", {
           operation: "file_cleanup_warning",
           filePath: req.file.path,
@@ -1343,7 +1326,7 @@ app.post(
       if (req.file?.path && fs.existsSync(req.file.path)) {
         try {
           fs.unlinkSync(req.file.path);
-        } catch (cleanupError) {
+        } catch {
           apiLogger.warn("Failed to clean up uploaded file after error", {
             operation: "file_cleanup_error",
             filePath: req.file.path,
@@ -1353,7 +1336,7 @@ app.post(
 
       apiLogger.error("SQLite import failed", error, {
         operation: "sqlite_import_api_failed",
-        userId: (req as any).userId,
+        userId: (req as AuthenticatedRequest).userId,
       });
       res.status(500).json({
         error: "Failed to import SQLite data",
@@ -1365,12 +1348,8 @@ app.post(
 
 app.post("/database/export/preview", authenticateJWT, async (req, res) => {
   try {
-    const userId = (req as any).userId;
+    const userId = (req as AuthenticatedRequest).userId;
-    const {
+    const { scope = "user_data", includeCredentials = true } = req.body;
-      format = "encrypted",
-      scope = "user_data",
-      includeCredentials = true,
-    } = req.body;
 
     const exportData = await UserDataExport.exportUserData(userId, {
       format: "encrypted",
@@ -1440,13 +1419,15 @@ app.use("/users", userRoutes);
 app.use("/ssh", sshRoutes);
 app.use("/alerts", alertRoutes);
 app.use("/credentials", credentialsRoutes);
+app.use("/snippets", snippetsRoutes);
 
 app.use(
   (
     err: unknown,
     req: express.Request,
     res: express.Response,
-    next: express.NextFunction,
+    // eslint-disable-next-line @typescript-eslint/no-unused-vars
+    _next: express.NextFunction,
   ) => {
     apiLogger.error("Unhandled error in request", err, {
       operation: "error_handler",
@@ -1459,7 +1440,6 @@ app.use(
 );
 
 const HTTP_PORT = 30001;
-const HTTPS_PORT = process.env.SSL_PORT || 8443;
 
 async function initializeSecurity() {
   try {
@@ -1472,13 +1452,6 @@ async function initializeSecurity() {
     if (!isValid) {
       throw new Error("Security system validation failed");
     }
-
-    const securityStatus = {
-      initialized: true,
-      system: { hasSecret: true, isValid: true },
-      activeSessions: {},
-      activeSessionCount: 0,
-    };
   } catch (error) {
     databaseLogger.error("Failed to initialize security system", error, {
       operation: "security_init_error",
@@ -1510,13 +1483,17 @@ app.get(
       if (status.hasUnencryptedDb) {
         try {
           unencryptedSize = fs.statSync(dbPath).size;
-        } catch (error) {}
+        } catch {
+          // Ignore file access errors
+        }
       }
 
       if (status.hasEncryptedDb) {
         try {
           encryptedSize = fs.statSync(encryptedDbPath).size;
-        } catch (error) {}
+        } catch {
+          // Ignore file access errors
+        }
       }
 
       res.json({

src/backend/database/db/index.ts

@@ -23,7 +23,7 @@ const enableFileEncryption = process.env.DB_FILE_ENCRYPTION !== "false";
 const dbPath = path.join(dataDir, "db.sqlite");
 const encryptedDbPath = `${dbPath}.encrypted`;
 
-let actualDbPath = ":memory:";
+const actualDbPath = ":memory:";
 let memoryDatabase: Database.Database;
 let isNewDatabase = false;
 let sqlite: Database.Database;
@@ -31,7 +31,8 @@ let sqlite: Database.Database;
 async function initializeDatabaseAsync(): Promise<void> {
   const systemCrypto = SystemCrypto.getInstance();
 
-  const dbKey = await systemCrypto.getDatabaseKey();
+  // Ensure database key is initialized
+  await systemCrypto.getDatabaseKey();
   if (enableFileEncryption) {
     try {
       if (DatabaseFileEncryption.isEncryptedDatabaseFile(encryptedDbPath)) {
@@ -165,6 +166,7 @@ async function initializeCompleteDatabase(): Promise<void> {
         tunnel_connections TEXT,
         enable_file_manager INTEGER NOT NULL DEFAULT 1,
         default_path TEXT,
+        stats_config TEXT,
         created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
         updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
         FOREIGN KEY (user_id) REFERENCES users (id)
@@ -242,6 +244,28 @@ async function initializeCompleteDatabase(): Promise<void> {
         FOREIGN KEY (user_id) REFERENCES users (id)
     );
 
+    CREATE TABLE IF NOT EXISTS snippets (
+        id INTEGER PRIMARY KEY AUTOINCREMENT,
+        user_id TEXT NOT NULL,
+        name TEXT NOT NULL,
+        content TEXT NOT NULL,
+        description TEXT,
+        created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+        updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+        FOREIGN KEY (user_id) REFERENCES users (id)
+    );
+
+    CREATE TABLE IF NOT EXISTS recent_activity (
+        id INTEGER PRIMARY KEY AUTOINCREMENT,
+        user_id TEXT NOT NULL,
+        type TEXT NOT NULL,
+        host_id INTEGER NOT NULL,
+        host_name TEXT NOT NULL,
+        timestamp TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,
+        FOREIGN KEY (user_id) REFERENCES users (id),
+        FOREIGN KEY (host_id) REFERENCES ssh_data (id)
+    );
+
 `);
 
   migrateSchema();
@@ -277,7 +301,7 @@ const addColumnIfNotExists = (
                         FROM ${table} LIMIT 1`,
       )
       .get();
-  } catch (e) {
+  } catch {
     try {
       sqlite.exec(`ALTER TABLE ${table}
                 ADD COLUMN ${column} ${definition};`);
@@ -361,6 +385,7 @@ const migrateSchema = () => {
   addColumnIfNotExists("ssh_data", "autostart_password", "TEXT");
   addColumnIfNotExists("ssh_data", "autostart_key", "TEXT");
   addColumnIfNotExists("ssh_data", "autostart_key_password", "TEXT");
+  addColumnIfNotExists("ssh_data", "stats_config", "TEXT");
 
   addColumnIfNotExists("ssh_credentials", "private_key", "TEXT");
   addColumnIfNotExists("ssh_credentials", "public_key", "TEXT");
@@ -476,21 +501,29 @@ async function cleanupDatabase() {
       for (const file of files) {
         try {
           fs.unlinkSync(path.join(tempDir, file));
-        } catch {}
+        } catch {
+          // Ignore cleanup errors
+        }
       }
 
       try {
         fs.rmdirSync(tempDir);
-      } catch {}
+      } catch {
+        // Ignore cleanup errors
+      }
     }
-  } catch (error) {}
+  } catch {
+    // Ignore cleanup errors
+  }
 }
 
 process.on("exit", () => {
   if (sqlite) {
     try {
       sqlite.close();
-    } catch {}
+    } catch {
+      // Ignore close errors on exit
+    }
   }
 });
 

src/backend/database/db/schema.ts

@@ -65,6 +65,7 @@ export const sshData = sqliteTable("ssh_data", {
     .notNull()
     .default(true),
   defaultPath: text("default_path"),
+  statsConfig: text("stats_config"),
   createdAt: text("created_at")
     .notNull()
     .default(sql`CURRENT_TIMESTAMP`),
@@ -172,3 +173,34 @@ export const sshCredentialUsage = sqliteTable("ssh_credential_usage", {
     .notNull()
     .default(sql`CURRENT_TIMESTAMP`),
 });
+
+export const snippets = sqliteTable("snippets", {
+  id: integer("id").primaryKey({ autoIncrement: true }),
+  userId: text("user_id")
+    .notNull()
+    .references(() => users.id),
+  name: text("name").notNull(),
+  content: text("content").notNull(),
+  description: text("description"),
+  createdAt: text("created_at")
+    .notNull()
+    .default(sql`CURRENT_TIMESTAMP`),
+  updatedAt: text("updated_at")
+    .notNull()
+    .default(sql`CURRENT_TIMESTAMP`),
+});
+
+export const recentActivity = sqliteTable("recent_activity", {
+  id: integer("id").primaryKey({ autoIncrement: true }),
+  userId: text("user_id")
+    .notNull()
+    .references(() => users.id),
+  type: text("type").notNull(),
+  hostId: integer("host_id")
+    .notNull()
+    .references(() => sshData.id),
+  hostName: text("host_name").notNull(),
+  timestamp: text("timestamp")
+    .notNull()
+    .default(sql`CURRENT_TIMESTAMP`),
+});

src/backend/database/routes/alerts.ts

@@ -1,3 +1,8 @@
+import type {
+  AuthenticatedRequest,
+  CacheEntry,
+  TermixAlert,
+} from "../../../types/index.js";
 import express from "express";
 import { db } from "../db/index.js";
 import { dismissedAlerts } from "../db/schema.js";
@@ -6,17 +11,11 @@ import fetch from "node-fetch";
 import { authLogger } from "../../utils/logger.js";
 import { AuthManager } from "../../utils/auth-manager.js";
 
-interface CacheEntry {
-  data: any;
-  timestamp: number;
-  expiresAt: number;
-}
-
 class AlertCache {
   private cache: Map<string, CacheEntry> = new Map();
   private readonly CACHE_DURATION = 5 * 60 * 1000;
 
-  set(key: string, data: any): void {
+  set<T>(key: string, data: T): void {
     const now = Date.now();
     this.cache.set(key, {
       data,
@@ -25,7 +24,7 @@ class AlertCache {
     });
   }
 
-  get(key: string): any | null {
+  get<T>(key: string): T | null {
     const entry = this.cache.get(key);
     if (!entry) {
       return null;
@@ -36,7 +35,7 @@ class AlertCache {
       return null;
     }
 
-    return entry.data;
+    return entry.data as T;
   }
 }
 
@@ -47,20 +46,9 @@ const REPO_OWNER = "Termix-SSH";
 const REPO_NAME = "Docs";
 const ALERTS_FILE = "main/termix-alerts.json";
 
-interface TermixAlert {
-  id: string;
-  title: string;
-  message: string;
-  expiresAt: string;
-  priority?: "low" | "medium" | "high" | "critical";
-  type?: "info" | "warning" | "error" | "success";
-  actionUrl?: string;
-  actionText?: string;
-}
-
 async function fetchAlertsFromGitHub(): Promise<TermixAlert[]> {
   const cacheKey = "termix_alerts";
-  const cachedData = alertCache.get(cacheKey);
+  const cachedData = alertCache.get<TermixAlert[]>(cacheKey);
   if (cachedData) {
     return cachedData;
   }
@@ -115,7 +103,7 @@ const authenticateJWT = authManager.createAuthMiddleware();
 // GET /alerts
 router.get("/", authenticateJWT, async (req, res) => {
   try {
-    const userId = (req as any).userId;
+    const userId = (req as AuthenticatedRequest).userId;
 
     const allAlerts = await fetchAlertsFromGitHub();
 
@@ -148,7 +136,7 @@ router.get("/", authenticateJWT, async (req, res) => {
 router.post("/dismiss", authenticateJWT, async (req, res) => {
   try {
     const { alertId } = req.body;
-    const userId = (req as any).userId;
+    const userId = (req as AuthenticatedRequest).userId;
 
     if (!alertId) {
       authLogger.warn("Missing alertId in dismiss request", { userId });
@@ -170,7 +158,7 @@ router.post("/dismiss", authenticateJWT, async (req, res) => {
       return res.status(409).json({ error: "Alert already dismissed" });
     }
 
-    const result = await db.insert(dismissedAlerts).values({
+    await db.insert(dismissedAlerts).values({
       userId,
       alertId,
     });
@@ -186,7 +174,7 @@ router.post("/dismiss", authenticateJWT, async (req, res) => {
 // GET /alerts/dismissed/:userId
 router.get("/dismissed", authenticateJWT, async (req, res) => {
   try {
-    const userId = (req as any).userId;
+    const userId = (req as AuthenticatedRequest).userId;
 
     const dismissedAlertRecords = await db
       .select({
@@ -211,7 +199,7 @@ router.get("/dismissed", authenticateJWT, async (req, res) => {
 router.delete("/dismiss", authenticateJWT, async (req, res) => {
   try {
     const { alertId } = req.body;
-    const userId = (req as any).userId;
+    const userId = (req as AuthenticatedRequest).userId;
 
     if (!alertId) {
       return res.status(400).json({ error: "Alert ID is required" });

src/backend/database/routes/credentials.ts

@@ -1,16 +1,15 @@
+import type { AuthenticatedRequest } from "../../../types/index.js";
 import express from "express";
 import { db } from "../db/index.js";
 import { sshCredentials, sshCredentialUsage, sshData } from "../db/schema.js";
 import { eq, and, desc, sql } from "drizzle-orm";
-import type { Request, Response, NextFunction } from "express";
+import type { Request, Response } from "express";
-import jwt from "jsonwebtoken";
 import { authLogger } from "../../utils/logger.js";
 import { SimpleDBOps } from "../../utils/simple-db-ops.js";
 import { AuthManager } from "../../utils/auth-manager.js";
 import {
   parseSSHKey,
   parsePublicKey,
-  detectKeyType,
   validateKeyPair,
 } from "../../utils/ssh-key-utils.js";
 import crypto from "crypto";
@@ -29,7 +28,11 @@ function generateSSHKeyPair(
 } {
   try {
     let ssh2Type = keyType;
-    const options: any = {};
+    const options: {
+      bits?: number;
+      passphrase?: string;
+      cipher?: string;
+    } = {};
 
     if (keyType === "ssh-rsa") {
       ssh2Type = "rsa";
@@ -46,6 +49,7 @@ function generateSSHKeyPair(
       options.cipher = "aes128-cbc";
     }
 
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
     const keyPair = ssh2Utils.generateKeyPairSync(ssh2Type as any, options);
 
     return {
@@ -64,7 +68,7 @@ function generateSSHKeyPair(
 
 const router = express.Router();
 
-function isNonEmptyString(val: any): val is string {
+function isNonEmptyString(val: unknown): val is string {
   return typeof val === "string" && val.trim().length > 0;
 }
 
@@ -79,7 +83,7 @@ router.post(
   authenticateJWT,
   requireDataAccess,
   async (req: Request, res: Response) => {
-    const userId = (req as any).userId;
+    const userId = (req as AuthenticatedRequest).userId;
     const {
       name,
       description,
@@ -226,7 +230,7 @@ router.get(
   authenticateJWT,
   requireDataAccess,
   async (req: Request, res: Response) => {
-    const userId = (req as any).userId;
+    const userId = (req as AuthenticatedRequest).userId;
 
     if (!isNonEmptyString(userId)) {
       authLogger.warn("Invalid userId for credential fetch");
@@ -259,7 +263,7 @@ router.get(
   authenticateJWT,
   requireDataAccess,
   async (req: Request, res: Response) => {
-    const userId = (req as any).userId;
+    const userId = (req as AuthenticatedRequest).userId;
 
     if (!isNonEmptyString(userId)) {
       authLogger.warn("Invalid userId for credential folder fetch");
@@ -297,7 +301,7 @@ router.get(
   authenticateJWT,
   requireDataAccess,
   async (req: Request, res: Response) => {
-    const userId = (req as any).userId;
+    const userId = (req as AuthenticatedRequest).userId;
     const { id } = req.params;
 
     if (!isNonEmptyString(userId) || !id) {
@@ -328,19 +332,19 @@ router.get(
       const output = formatCredentialOutput(credential);
 
       if (credential.password) {
-        (output as any).password = credential.password;
+        output.password = credential.password;
       }
       if (credential.key) {
-        (output as any).key = credential.key;
+        output.key = credential.key;
       }
       if (credential.private_key) {
-        (output as any).privateKey = credential.private_key;
+        output.privateKey = credential.private_key;
       }
       if (credential.public_key) {
-        (output as any).publicKey = credential.public_key;
+        output.publicKey = credential.public_key;
       }
       if (credential.key_password) {
-        (output as any).keyPassword = credential.key_password;
+        output.keyPassword = credential.key_password;
       }
 
       res.json(output);
@@ -361,7 +365,7 @@ router.put(
   authenticateJWT,
   requireDataAccess,
   async (req: Request, res: Response) => {
-    const userId = (req as any).userId;
+    const userId = (req as AuthenticatedRequest).userId;
     const { id } = req.params;
     const updateData = req.body;
 
@@ -385,7 +389,7 @@ router.put(
         return res.status(404).json({ error: "Credential not found" });
       }
 
-      const updateFields: any = {};
+      const updateFields: Record<string, string | null | undefined> = {};
 
       if (updateData.name !== undefined)
         updateFields.name = updateData.name.trim();
@@ -497,7 +501,7 @@ router.delete(
   authenticateJWT,
   requireDataAccess,
   async (req: Request, res: Response) => {
-    const userId = (req as any).userId;
+    const userId = (req as AuthenticatedRequest).userId;
     const { id } = req.params;
 
     if (!isNonEmptyString(userId) || !id) {
@@ -596,7 +600,7 @@ router.post(
   "/:id/apply-to-host/:hostId",
   authenticateJWT,
   async (req: Request, res: Response) => {
-    const userId = (req as any).userId;
+    const userId = (req as AuthenticatedRequest).userId;
     const { id: credentialId, hostId } = req.params;
 
     if (!isNonEmptyString(userId) || !credentialId || !hostId) {
@@ -629,8 +633,8 @@ router.post(
         .update(sshData)
         .set({
           credentialId: parseInt(credentialId),
-          username: credential.username,
+          username: credential.username as string,
-          authType: credential.auth_type || credential.authType,
+          authType: (credential.auth_type || credential.authType) as string,
           password: null,
           key: null,
           key_password: null,
@@ -675,7 +679,7 @@ router.get(
   "/:id/hosts",
   authenticateJWT,
   async (req: Request, res: Response) => {
-    const userId = (req as any).userId;
+    const userId = (req as AuthenticatedRequest).userId;
     const { id: credentialId } = req.params;
 
     if (!isNonEmptyString(userId) || !credentialId) {
@@ -707,7 +711,9 @@ router.get(
   },
 );
 
-function formatCredentialOutput(credential: any): any {
+function formatCredentialOutput(
+  credential: Record<string, unknown>,
+): Record<string, unknown> {
   return {
     id: credential.id,
     name: credential.name,
@@ -731,7 +737,9 @@ function formatCredentialOutput(credential: any): any {
   };
 }
 
-function formatSSHHostOutput(host: any): any {
+function formatSSHHostOutput(
+  host: Record<string, unknown>,
+): Record<string, unknown> {
   return {
     id: host.id,
     userId: host.userId,
@@ -751,7 +759,7 @@ function formatSSHHostOutput(host: any): any {
     enableTerminal: !!host.enableTerminal,
     enableTunnel: !!host.enableTunnel,
     tunnelConnections: host.tunnelConnections
-      ? JSON.parse(host.tunnelConnections)
+      ? JSON.parse(host.tunnelConnections as string)
       : [],
     enableFileManager: !!host.enableFileManager,
     defaultPath: host.defaultPath,
@@ -766,7 +774,7 @@ router.put(
   "/folders/rename",
   authenticateJWT,
   async (req: Request, res: Response) => {
-    const userId = (req as any).userId;
+    const userId = (req as AuthenticatedRequest).userId;
     const { oldName, newName } = req.body;
 
     if (!isNonEmptyString(oldName) || !isNonEmptyString(newName)) {
@@ -970,7 +978,7 @@ router.post(
 
     try {
       let privateKeyObj;
-      let parseAttempts = [];
+      const parseAttempts = [];
 
       try {
         privateKeyObj = crypto.createPrivateKey({
@@ -1093,7 +1101,9 @@ router.post(
           finalPublicKey = `${keyType} ${base64Data}`;
           formatType = "ssh";
         }
-      } catch (sshError) {}
+      } catch {
+        // Ignore validation errors
+      }
 
       const response = {
         success: true,
@@ -1117,15 +1127,15 @@ router.post(
 );
 
 async function deploySSHKeyToHost(
-  hostConfig: any,
+  hostConfig: Record<string, unknown>,
   publicKey: string,
-  credentialData: any,
+  // eslint-disable-next-line @typescript-eslint/no-unused-vars
+  _credentialData: Record<string, unknown>,
 ): Promise<{ success: boolean; message?: string; error?: string }> {
   return new Promise((resolve) => {
     const conn = new Client();
-    let connectionTimeout: NodeJS.Timeout;
 
-    connectionTimeout = setTimeout(() => {
+    const connectionTimeout = setTimeout(() => {
       conn.destroy();
       resolve({ success: false, error: "Connection timeout" });
     }, 120000);
@@ -1158,7 +1168,9 @@ async function deploySSHKeyToHost(
                 }
               });
 
-              stream.on("data", (data) => {});
+              stream.on("data", () => {
+                // Ignore output
+              });
             },
           );
         });
@@ -1175,7 +1187,9 @@ async function deploySSHKeyToHost(
               if (parsed.data) {
                 actualPublicKey = parsed.data;
               }
-            } catch (e) {}
+            } catch {
+              // Ignore parse errors
+            }
 
             const keyParts = actualPublicKey.trim().split(" ");
             if (keyParts.length < 2) {
@@ -1202,7 +1216,7 @@ async function deploySSHKeyToHost(
                   output += data.toString();
                 });
 
-                stream.on("close", (code) => {
+                stream.on("close", () => {
                   clearTimeout(checkTimeout);
                   const exists = output.trim() === "0";
                   resolveCheck(exists);
@@ -1229,7 +1243,9 @@ async function deploySSHKeyToHost(
             if (parsed.data) {
               actualPublicKey = parsed.data;
             }
-          } catch (e) {}
+          } catch {
+            // Ignore parse errors
+          }
 
           const escapedKey = actualPublicKey
             .replace(/\\/g, "\\\\")
@@ -1269,7 +1285,9 @@ async function deploySSHKeyToHost(
               if (parsed.data) {
                 actualPublicKey = parsed.data;
               }
-            } catch (e) {}
+            } catch {
+              // Ignore parse errors
+            }
 
             const keyParts = actualPublicKey.trim().split(" ");
             if (keyParts.length < 2) {
@@ -1295,7 +1313,7 @@ async function deploySSHKeyToHost(
                   output += data.toString();
                 });
 
-                stream.on("close", (code) => {
+                stream.on("close", () => {
                   clearTimeout(verifyTimeout);
                   const verified = output.trim() === "0";
                   resolveVerify(verified);
@@ -1356,7 +1374,7 @@ async function deploySSHKeyToHost(
     });
 
     try {
-      const connectionConfig: any = {
+      const connectionConfig: Record<string, unknown> = {
         host: hostConfig.ip,
         port: hostConfig.port || 22,
         username: hostConfig.username,
@@ -1403,14 +1421,15 @@ async function deploySSHKeyToHost(
         connectionConfig.password = hostConfig.password;
       } else if (hostConfig.authType === "key" && hostConfig.privateKey) {
         try {
+          const privateKey = hostConfig.privateKey as string;
           if (
-            !hostConfig.privateKey.includes("-----BEGIN") ||
+            !privateKey.includes("-----BEGIN") ||
-            !hostConfig.privateKey.includes("-----END")
+            !privateKey.includes("-----END")
           ) {
             throw new Error("Invalid private key format");
           }
 
-          const cleanKey = hostConfig.privateKey
+          const cleanKey = privateKey
             .trim()
             .replace(/\r\n/g, "\n")
             .replace(/\r/g, "\n");
@@ -1465,7 +1484,7 @@ router.post(
     }
 
     try {
-      const userId = (req as any).userId;
+      const userId = (req as AuthenticatedRequest).userId;
       if (!userId) {
         return res.status(401).json({
           success: false,
@@ -1521,7 +1540,7 @@ router.post(
 
       const hostData = targetHost[0];
 
-      let hostConfig = {
+      const hostConfig = {
         ip: hostData.ip,
         port: hostData.port,
         username: hostData.username,
@@ -1532,7 +1551,7 @@ router.post(
       };
 
       if (hostData.authType === "credential" && hostData.credentialId) {
-        const userId = (req as any).userId;
+        const userId = (req as AuthenticatedRequest).userId;
         if (!userId) {
           return res.status(400).json({
             success: false,
@@ -1546,7 +1565,7 @@ router.post(
             db
               .select()
               .from(sshCredentials)
-              .where(eq(sshCredentials.id, hostData.credentialId))
+              .where(eq(sshCredentials.id, hostData.credentialId as number))
               .limit(1),
             "ssh_credentials",
             userId,
@@ -1571,7 +1590,7 @@ router.post(
               error: "Host credential not found",
             });
           }
-        } catch (error) {
+        } catch {
           return res.status(500).json({
             success: false,
             error: "Failed to resolve host credentials",
@@ -1581,7 +1600,7 @@ router.post(
 
       const deployResult = await deploySSHKeyToHost(
         hostConfig,
-        credData.publicKey,
+        credData.publicKey as string,
         credData,
       );
 

src/backend/database/routes/snippets.ts

@@ -0,0 +1,260 @@
+import type { AuthenticatedRequest } from "../../../types/index.js";
+import express from "express";
+import { db } from "../db/index.js";
+import { snippets } from "../db/schema.js";
+import { eq, and, desc, sql } from "drizzle-orm";
+import type { Request, Response } from "express";
+import { authLogger } from "../../utils/logger.js";
+import { AuthManager } from "../../utils/auth-manager.js";
+
+const router = express.Router();
+
+function isNonEmptyString(val: unknown): val is string {
+  return typeof val === "string" && val.trim().length > 0;
+}
+
+const authManager = AuthManager.getInstance();
+const authenticateJWT = authManager.createAuthMiddleware();
+const requireDataAccess = authManager.createDataAccessMiddleware();
+
+// Get all snippets for the authenticated user
+// GET /snippets
+router.get(
+  "/",
+  authenticateJWT,
+  requireDataAccess,
+  async (req: Request, res: Response) => {
+    const userId = (req as AuthenticatedRequest).userId;
+
+    if (!isNonEmptyString(userId)) {
+      authLogger.warn("Invalid userId for snippets fetch");
+      return res.status(400).json({ error: "Invalid userId" });
+    }
+
+    try {
+      const result = await db
+        .select()
+        .from(snippets)
+        .where(eq(snippets.userId, userId))
+        .orderBy(desc(snippets.updatedAt));
+
+      res.json(result);
+    } catch (err) {
+      authLogger.error("Failed to fetch snippets", err);
+      res.status(500).json({ error: "Failed to fetch snippets" });
+    }
+  },
+);
+
+// Get a specific snippet by ID
+// GET /snippets/:id
+router.get(
+  "/:id",
+  authenticateJWT,
+  requireDataAccess,
+  async (req: Request, res: Response) => {
+    const userId = (req as AuthenticatedRequest).userId;
+    const { id } = req.params;
+    const snippetId = parseInt(id, 10);
+
+    if (!isNonEmptyString(userId) || isNaN(snippetId)) {
+      authLogger.warn("Invalid request for snippet fetch: invalid ID", {
+        userId,
+        id,
+      });
+      return res.status(400).json({ error: "Invalid request parameters" });
+    }
+
+    try {
+      const result = await db
+        .select()
+        .from(snippets)
+        .where(and(eq(snippets.id, parseInt(id)), eq(snippets.userId, userId)));
+
+      if (result.length === 0) {
+        return res.status(404).json({ error: "Snippet not found" });
+      }
+
+      res.json(result[0]);
+    } catch (err) {
+      authLogger.error("Failed to fetch snippet", err);
+      res.status(500).json({
+        error: err instanceof Error ? err.message : "Failed to fetch snippet",
+      });
+    }
+  },
+);
+
+// Create a new snippet
+// POST /snippets
+router.post(
+  "/",
+  authenticateJWT,
+  requireDataAccess,
+  async (req: Request, res: Response) => {
+    const userId = (req as AuthenticatedRequest).userId;
+    const { name, content, description } = req.body;
+
+    if (
+      !isNonEmptyString(userId) ||
+      !isNonEmptyString(name) ||
+      !isNonEmptyString(content)
+    ) {
+      authLogger.warn("Invalid snippet creation data validation failed", {
+        operation: "snippet_create",
+        userId,
+        hasName: !!name,
+        hasContent: !!content,
+      });
+      return res.status(400).json({ error: "Name and content are required" });
+    }
+
+    try {
+      const insertData = {
+        userId,
+        name: name.trim(),
+        content: content.trim(),
+        description: description?.trim() || null,
+      };
+
+      const result = await db.insert(snippets).values(insertData).returning();
+
+      authLogger.success(`Snippet created: ${name} by user ${userId}`, {
+        operation: "snippet_create_success",
+        userId,
+        snippetId: result[0].id,
+        name,
+      });
+
+      res.status(201).json(result[0]);
+    } catch (err) {
+      authLogger.error("Failed to create snippet", err);
+      res.status(500).json({
+        error: err instanceof Error ? err.message : "Failed to create snippet",
+      });
+    }
+  },
+);
+
+// Update a snippet
+// PUT /snippets/:id
+router.put(
+  "/:id",
+  authenticateJWT,
+  requireDataAccess,
+  async (req: Request, res: Response) => {
+    const userId = (req as AuthenticatedRequest).userId;
+    const { id } = req.params;
+    const updateData = req.body;
+
+    if (!isNonEmptyString(userId) || !id) {
+      authLogger.warn("Invalid request for snippet update");
+      return res.status(400).json({ error: "Invalid request" });
+    }
+
+    try {
+      const existing = await db
+        .select()
+        .from(snippets)
+        .where(and(eq(snippets.id, parseInt(id)), eq(snippets.userId, userId)));
+
+      if (existing.length === 0) {
+        return res.status(404).json({ error: "Snippet not found" });
+      }
+
+      const updateFields: Partial<{
+        updatedAt: ReturnType<typeof sql.raw>;
+        name: string;
+        content: string;
+        description: string | null;
+      }> = {
+        updatedAt: sql`CURRENT_TIMESTAMP`,
+      };
+
+      if (updateData.name !== undefined)
+        updateFields.name = updateData.name.trim();
+      if (updateData.content !== undefined)
+        updateFields.content = updateData.content.trim();
+      if (updateData.description !== undefined)
+        updateFields.description = updateData.description?.trim() || null;
+
+      await db
+        .update(snippets)
+        .set(updateFields)
+        .where(and(eq(snippets.id, parseInt(id)), eq(snippets.userId, userId)));
+
+      const updated = await db
+        .select()
+        .from(snippets)
+        .where(eq(snippets.id, parseInt(id)));
+
+      authLogger.success(
+        `Snippet updated: ${updated[0].name} by user ${userId}`,
+        {
+          operation: "snippet_update_success",
+          userId,
+          snippetId: parseInt(id),
+          name: updated[0].name,
+        },
+      );
+
+      res.json(updated[0]);
+    } catch (err) {
+      authLogger.error("Failed to update snippet", err);
+      res.status(500).json({
+        error: err instanceof Error ? err.message : "Failed to update snippet",
+      });
+    }
+  },
+);
+
+// Delete a snippet
+// DELETE /snippets/:id
+router.delete(
+  "/:id",
+  authenticateJWT,
+  requireDataAccess,
+  async (req: Request, res: Response) => {
+    const userId = (req as AuthenticatedRequest).userId;
+    const { id } = req.params;
+
+    if (!isNonEmptyString(userId) || !id) {
+      authLogger.warn("Invalid request for snippet delete");
+      return res.status(400).json({ error: "Invalid request" });
+    }
+
+    try {
+      const existing = await db
+        .select()
+        .from(snippets)
+        .where(and(eq(snippets.id, parseInt(id)), eq(snippets.userId, userId)));
+
+      if (existing.length === 0) {
+        return res.status(404).json({ error: "Snippet not found" });
+      }
+
+      await db
+        .delete(snippets)
+        .where(and(eq(snippets.id, parseInt(id)), eq(snippets.userId, userId)));
+
+      authLogger.success(
+        `Snippet deleted: ${existing[0].name} by user ${userId}`,
+        {
+          operation: "snippet_delete_success",
+          userId,
+          snippetId: parseInt(id),
+          name: existing[0].name,
+        },
+      );
+
+      res.json({ success: true });
+    } catch (err) {
+      authLogger.error("Failed to delete snippet", err);
+      res.status(500).json({
+        error: err instanceof Error ? err.message : "Failed to delete snippet",
+      });
+    }
+  },
+);
+
+export default router;

src/backend/database/routes/ssh.ts

@@ -1,3 +1,4 @@
+import type { AuthenticatedRequest } from "../../../types/index.js";
 import express from "express";
 import { db } from "../db/index.js";
 import {
@@ -9,8 +10,7 @@ import {
   fileManagerShortcuts,
 } from "../db/schema.js";
 import { eq, and, desc, isNotNull, or } from "drizzle-orm";
-import type { Request, Response, NextFunction } from "express";
+import type { Request, Response } from "express";
-import jwt from "jsonwebtoken";
 import multer from "multer";
 import { sshLogger } from "../../utils/logger.js";
 import { SimpleDBOps } from "../../utils/simple-db-ops.js";
@@ -23,11 +23,11 @@ const router = express.Router();
 
 const upload = multer({ storage: multer.memoryStorage() });
 
-function isNonEmptyString(value: any): value is string {
+function isNonEmptyString(value: unknown): value is string {
   return typeof value === "string" && value.trim().length > 0;
 }
 
-function isValidPort(port: any): port is number {
+function isValidPort(port: unknown): port is number {
   return typeof port === "number" && port > 0 && port <= 65535;
 }
 
@@ -75,7 +75,7 @@ router.get("/db/host/internal", async (req: Request, res: Response) => {
           : [];
 
         const hasAutoStartTunnels = tunnelConnections.some(
-          (tunnel: any) => tunnel.autoStart,
+          (tunnel: Record<string, unknown>) => tunnel.autoStart,
         );
 
         if (!hasAutoStartTunnels) {
@@ -100,7 +100,7 @@ router.get("/db/host/internal", async (req: Request, res: Response) => {
           credentialId: host.credentialId,
           enableTunnel: true,
           tunnelConnections: tunnelConnections.filter(
-            (tunnel: any) => tunnel.autoStart,
+            (tunnel: Record<string, unknown>) => tunnel.autoStart,
           ),
           pin: !!host.pin,
           enableTerminal: !!host.enableTerminal,
@@ -184,8 +184,8 @@ router.post(
   requireDataAccess,
   upload.single("key"),
   async (req: Request, res: Response) => {
-    const userId = (req as any).userId;
+    const userId = (req as AuthenticatedRequest).userId;
-    let hostData: any;
+    let hostData: Record<string, unknown>;
 
     if (req.headers["content-type"]?.includes("multipart/form-data")) {
       if (req.body.data) {
@@ -234,6 +234,7 @@ router.post(
       enableFileManager,
       defaultPath,
       tunnelConnections,
+      statsConfig,
     } = hostData;
     if (
       !isNonEmptyString(userId) ||
@@ -251,7 +252,7 @@ router.post(
     }
 
     const effectiveAuthType = authType || authMethod;
-    const sshDataObj: any = {
+    const sshDataObj: Record<string, unknown> = {
       userId: userId,
       name,
       folder: folder || null,
@@ -269,6 +270,7 @@ router.post(
         : null,
       enableFileManager: enableFileManager ? 1 : 0,
       defaultPath: defaultPath || null,
+      statsConfig: statsConfig ? JSON.stringify(statsConfig) : null,
     };
 
     if (effectiveAuthType === "password") {
@@ -320,9 +322,12 @@ router.post(
         enableTerminal: !!createdHost.enableTerminal,
         enableTunnel: !!createdHost.enableTunnel,
         tunnelConnections: createdHost.tunnelConnections
-          ? JSON.parse(createdHost.tunnelConnections)
+          ? JSON.parse(createdHost.tunnelConnections as string)
           : [],
         enableFileManager: !!createdHost.enableFileManager,
+        statsConfig: createdHost.statsConfig
+          ? JSON.parse(createdHost.statsConfig as string)
+          : undefined,
       };
 
       const resolvedHost = (await resolveHostCredentials(baseHost)) || baseHost;
@@ -332,7 +337,7 @@ router.post(
         {
           operation: "host_create_success",
           userId,
-          hostId: createdHost.id,
+          hostId: createdHost.id as number,
           name,
           ip,
           port,
@@ -363,8 +368,8 @@ router.put(
   upload.single("key"),
   async (req: Request, res: Response) => {
     const hostId = req.params.id;
-    const userId = (req as any).userId;
+    const userId = (req as AuthenticatedRequest).userId;
-    let hostData: any;
+    let hostData: Record<string, unknown>;
 
     if (req.headers["content-type"]?.includes("multipart/form-data")) {
       if (req.body.data) {
@@ -415,6 +420,7 @@ router.put(
       enableFileManager,
       defaultPath,
       tunnelConnections,
+      statsConfig,
     } = hostData;
     if (
       !isNonEmptyString(userId) ||
@@ -434,7 +440,7 @@ router.put(
     }
 
     const effectiveAuthType = authType || authMethod;
-    const sshDataObj: any = {
+    const sshDataObj: Record<string, unknown> = {
       name,
       folder,
       tags: Array.isArray(tags) ? tags.join(",") : tags || "",
@@ -451,6 +457,7 @@ router.put(
         : null,
       enableFileManager: enableFileManager ? 1 : 0,
       defaultPath: defaultPath || null,
+      statsConfig: statsConfig ? JSON.stringify(statsConfig) : null,
     };
 
     if (effectiveAuthType === "password") {
@@ -520,9 +527,12 @@ router.put(
         enableTerminal: !!updatedHost.enableTerminal,
         enableTunnel: !!updatedHost.enableTunnel,
         tunnelConnections: updatedHost.tunnelConnections
-          ? JSON.parse(updatedHost.tunnelConnections)
+          ? JSON.parse(updatedHost.tunnelConnections as string)
           : [],
         enableFileManager: !!updatedHost.enableFileManager,
+        statsConfig: updatedHost.statsConfig
+          ? JSON.parse(updatedHost.statsConfig as string)
+          : undefined,
       };
 
       const resolvedHost = (await resolveHostCredentials(baseHost)) || baseHost;
@@ -559,7 +569,7 @@ router.put(
 // Route: Get SSH data for the authenticated user (requires JWT)
 // GET /ssh/host
 router.get("/db/host", authenticateJWT, async (req: Request, res: Response) => {
-  const userId = (req as any).userId;
+  const userId = (req as AuthenticatedRequest).userId;
   if (!isNonEmptyString(userId)) {
     sshLogger.warn("Invalid userId for SSH data fetch", {
       operation: "host_fetch",
@@ -575,7 +585,7 @@ router.get("/db/host", authenticateJWT, async (req: Request, res: Response) => {
     );
 
     const result = await Promise.all(
-      data.map(async (row: any) => {
+      data.map(async (row: Record<string, unknown>) => {
         const baseHost = {
           ...row,
           tags:
@@ -588,9 +598,12 @@ router.get("/db/host", authenticateJWT, async (req: Request, res: Response) => {
           enableTerminal: !!row.enableTerminal,
           enableTunnel: !!row.enableTunnel,
           tunnelConnections: row.tunnelConnections
-            ? JSON.parse(row.tunnelConnections)
+            ? JSON.parse(row.tunnelConnections as string)
             : [],
           enableFileManager: !!row.enableFileManager,
+          statsConfig: row.statsConfig
+            ? JSON.parse(row.statsConfig as string)
+            : undefined,
         };
 
         return (await resolveHostCredentials(baseHost)) || baseHost;
@@ -614,7 +627,7 @@ router.get(
   authenticateJWT,
   async (req: Request, res: Response) => {
     const hostId = req.params.id;
-    const userId = (req as any).userId;
+    const userId = (req as AuthenticatedRequest).userId;
 
     if (!isNonEmptyString(userId) || !hostId) {
       sshLogger.warn("Invalid userId or hostId for SSH host fetch by ID", {
@@ -655,6 +668,9 @@ router.get(
           ? JSON.parse(host.tunnelConnections)
           : [],
         enableFileManager: !!host.enableFileManager,
+        statsConfig: host.statsConfig
+          ? JSON.parse(host.statsConfig)
+          : undefined,
       };
 
       res.json((await resolveHostCredentials(result)) || result);
@@ -677,7 +693,7 @@ router.get(
   requireDataAccess,
   async (req: Request, res: Response) => {
     const hostId = req.params.id;
-    const userId = (req as any).userId;
+    const userId = (req as AuthenticatedRequest).userId;
 
     if (!isNonEmptyString(userId) || !hostId) {
       return res.status(400).json({ error: "Invalid userId or hostId" });
@@ -711,7 +727,7 @@ router.get(
         authType: resolvedHost.authType,
         password: resolvedHost.password || null,
         key: resolvedHost.key || null,
-        keyPassword: resolvedHost.keyPassword || null,
+        keyPassword: resolvedHost.key_password || null,
         keyType: resolvedHost.keyType || null,
         folder: resolvedHost.folder,
         tags:
@@ -724,7 +740,7 @@ router.get(
         enableFileManager: !!resolvedHost.enableFileManager,
         defaultPath: resolvedHost.defaultPath,
         tunnelConnections: resolvedHost.tunnelConnections
-          ? JSON.parse(resolvedHost.tunnelConnections)
+          ? JSON.parse(resolvedHost.tunnelConnections as string)
           : [],
       };
 
@@ -752,7 +768,7 @@ router.delete(
   "/db/host/:id",
   authenticateJWT,
   async (req: Request, res: Response) => {
-    const userId = (req as any).userId;
+    const userId = (req as AuthenticatedRequest).userId;
     const hostId = req.params.id;
 
     if (!isNonEmptyString(userId) || !hostId) {
@@ -816,7 +832,7 @@ router.delete(
           ),
         );
 
-      const result = await db
+      await db
         .delete(sshData)
         .where(and(eq(sshData.id, numericHostId), eq(sshData.userId, userId)));
 
@@ -851,7 +867,7 @@ router.get(
   "/file_manager/recent",
   authenticateJWT,
   async (req: Request, res: Response) => {
-    const userId = (req as any).userId;
+    const userId = (req as AuthenticatedRequest).userId;
     const hostId = req.query.hostId
       ? parseInt(req.query.hostId as string)
       : null;
@@ -893,7 +909,7 @@ router.post(
   "/file_manager/recent",
   authenticateJWT,
   async (req: Request, res: Response) => {
-    const userId = (req as any).userId;
+    const userId = (req as AuthenticatedRequest).userId;
     const { hostId, path, name } = req.body;
 
     if (!isNonEmptyString(userId) || !hostId || !path) {
@@ -942,8 +958,8 @@ router.delete(
   "/file_manager/recent",
   authenticateJWT,
   async (req: Request, res: Response) => {
-    const userId = (req as any).userId;
+    const userId = (req as AuthenticatedRequest).userId;
-    const { hostId, path, name } = req.body;
+    const { hostId, path } = req.body;
 
     if (!isNonEmptyString(userId) || !hostId || !path) {
       sshLogger.warn("Invalid data for recent file deletion");
@@ -975,7 +991,7 @@ router.get(
   "/file_manager/pinned",
   authenticateJWT,
   async (req: Request, res: Response) => {
-    const userId = (req as any).userId;
+    const userId = (req as AuthenticatedRequest).userId;
     const hostId = req.query.hostId
       ? parseInt(req.query.hostId as string)
       : null;
@@ -1016,7 +1032,7 @@ router.post(
   "/file_manager/pinned",
   authenticateJWT,
   async (req: Request, res: Response) => {
-    const userId = (req as any).userId;
+    const userId = (req as AuthenticatedRequest).userId;
     const { hostId, path, name } = req.body;
 
     if (!isNonEmptyString(userId) || !hostId || !path) {
@@ -1062,8 +1078,8 @@ router.delete(
   "/file_manager/pinned",
   authenticateJWT,
   async (req: Request, res: Response) => {
-    const userId = (req as any).userId;
+    const userId = (req as AuthenticatedRequest).userId;
-    const { hostId, path, name } = req.body;
+    const { hostId, path } = req.body;
 
     if (!isNonEmptyString(userId) || !hostId || !path) {
       sshLogger.warn("Invalid data for pinned file deletion");
@@ -1095,7 +1111,7 @@ router.get(
   "/file_manager/shortcuts",
   authenticateJWT,
   async (req: Request, res: Response) => {
-    const userId = (req as any).userId;
+    const userId = (req as AuthenticatedRequest).userId;
     const hostId = req.query.hostId
       ? parseInt(req.query.hostId as string)
       : null;
@@ -1136,7 +1152,7 @@ router.post(
   "/file_manager/shortcuts",
   authenticateJWT,
   async (req: Request, res: Response) => {
-    const userId = (req as any).userId;
+    const userId = (req as AuthenticatedRequest).userId;
     const { hostId, path, name } = req.body;
 
     if (!isNonEmptyString(userId) || !hostId || !path) {
@@ -1182,8 +1198,8 @@ router.delete(
   "/file_manager/shortcuts",
   authenticateJWT,
   async (req: Request, res: Response) => {
-    const userId = (req as any).userId;
+    const userId = (req as AuthenticatedRequest).userId;
-    const { hostId, path, name } = req.body;
+    const { hostId, path } = req.body;
 
     if (!isNonEmptyString(userId) || !hostId || !path) {
       sshLogger.warn("Invalid data for shortcut deletion");
@@ -1209,21 +1225,26 @@ router.delete(
   },
 );
 
-async function resolveHostCredentials(host: any): Promise<any> {
+async function resolveHostCredentials(
+  host: Record<string, unknown>,
+): Promise<Record<string, unknown>> {
   try {
     if (host.credentialId && host.userId) {
+      const credentialId = host.credentialId as number;
+      const userId = host.userId as string;
+
       const credentials = await SimpleDBOps.select(
         db
           .select()
           .from(sshCredentials)
           .where(
             and(
-              eq(sshCredentials.id, host.credentialId),
+              eq(sshCredentials.id, credentialId),
-              eq(sshCredentials.userId, host.userId),
+              eq(sshCredentials.userId, userId),
             ),
           ),
         "ssh_credentials",
-        host.userId,
+        userId,
       );
 
       if (credentials.length > 0) {
@@ -1239,6 +1260,7 @@ async function resolveHostCredentials(host: any): Promise<any> {
         };
       }
     }
+
     const result = { ...host };
     if (host.key_password !== undefined) {
       if (result.keyPassword === undefined) {
@@ -1261,7 +1283,7 @@ router.put(
   "/folders/rename",
   authenticateJWT,
   async (req: Request, res: Response) => {
-    const userId = (req as any).userId;
+    const userId = (req as AuthenticatedRequest).userId;
     const { oldName, newName } = req.body;
 
     if (!isNonEmptyString(userId) || !oldName || !newName) {
@@ -1326,7 +1348,7 @@ router.post(
   "/bulk-import",
   authenticateJWT,
   async (req: Request, res: Response) => {
-    const userId = (req as any).userId;
+    const userId = (req as AuthenticatedRequest).userId;
     const { hosts } = req.body;
 
     if (!Array.isArray(hosts) || hosts.length === 0) {
@@ -1398,7 +1420,7 @@ router.post(
           continue;
         }
 
-        const sshDataObj: any = {
+        const sshDataObj: Record<string, unknown> = {
           userId: userId,
           name: hostData.name || `${hostData.username}@${hostData.ip}`,
           folder: hostData.folder || "Default",
@@ -1411,7 +1433,7 @@ router.post(
           credentialId:
             hostData.authType === "credential" ? hostData.credentialId : null,
           key: hostData.authType === "key" ? hostData.key : null,
-          key_password:
+          keyPassword:
             hostData.authType === "key"
               ? hostData.keyPassword || hostData.key_password || null
               : null,
@@ -1425,6 +1447,9 @@ router.post(
           tunnelConnections: hostData.tunnelConnections
             ? JSON.stringify(hostData.tunnelConnections)
             : "[]",
+          statsConfig: hostData.statsConfig
+            ? JSON.stringify(hostData.statsConfig)
+            : null,
           createdAt: new Date().toISOString(),
           updatedAt: new Date().toISOString(),
         };
@@ -1455,7 +1480,7 @@ router.post(
   authenticateJWT,
   requireDataAccess,
   async (req: Request, res: Response) => {
-    const userId = (req as any).userId;
+    const userId = (req as AuthenticatedRequest).userId;
     const { sshConfigId } = req.body;
 
     if (!sshConfigId || typeof sshConfigId !== "number") {
@@ -1519,7 +1544,7 @@ router.post(
           const tunnelConnections = JSON.parse(config.tunnelConnections);
 
           const resolvedConnections = await Promise.all(
-            tunnelConnections.map(async (tunnel: any) => {
+            tunnelConnections.map(async (tunnel: Record<string, unknown>) => {
               if (
                 tunnel.autoStart &&
                 tunnel.endpointHost &&
@@ -1567,7 +1592,7 @@ router.post(
         }
       }
 
-      const updateResult = await db
+      await db
         .update(sshData)
         .set({
           autostartPassword: decryptedConfig.password || null,
@@ -1608,7 +1633,7 @@ router.delete(
   "/autostart/disable",
   authenticateJWT,
   async (req: Request, res: Response) => {
-    const userId = (req as any).userId;
+    const userId = (req as AuthenticatedRequest).userId;
     const { sshConfigId } = req.body;
 
     if (!sshConfigId || typeof sshConfigId !== "number") {
@@ -1624,7 +1649,7 @@ router.delete(
     }
 
     try {
-      const result = await db
+      await db
         .update(sshData)
         .set({
           autostartPassword: null,
@@ -1654,7 +1679,7 @@ router.get(
   "/autostart/status",
   authenticateJWT,
   async (req: Request, res: Response) => {
-    const userId = (req as any).userId;
+    const userId = (req as AuthenticatedRequest).userId;
 
     try {
       const autostartConfigs = await db

src/backend/database/routes/users.ts

@@ -1,3 +1,4 @@
+import type { AuthenticatedRequest } from "../../../types/index.js";
 import express from "express";
 import crypto from "crypto";
 import { db } from "../db/index.js";
@@ -27,48 +28,48 @@ async function verifyOIDCToken(
   idToken: string,
   issuerUrl: string,
   clientId: string,
-): Promise<any> {
+): Promise<Record<string, unknown>> {
+  const normalizedIssuerUrl = issuerUrl.endsWith("/")
+    ? issuerUrl.slice(0, -1)
+    : issuerUrl;
+  const possibleIssuers = [
+    issuerUrl,
+    normalizedIssuerUrl,
+    issuerUrl.replace(/\/application\/o\/[^/]+$/, ""),
+    normalizedIssuerUrl.replace(/\/application\/o\/[^/]+$/, ""),
+  ];
+
+  const jwksUrls = [
+    `${normalizedIssuerUrl}/.well-known/jwks.json`,
+    `${normalizedIssuerUrl}/jwks/`,
+    `${normalizedIssuerUrl.replace(/\/application\/o\/[^/]+$/, "")}/.well-known/jwks.json`,
+  ];
+
   try {
-    const normalizedIssuerUrl = issuerUrl.endsWith("/")
+    const discoveryUrl = `${normalizedIssuerUrl}/.well-known/openid-configuration`;
-      ? issuerUrl.slice(0, -1)
+    const discoveryResponse = await fetch(discoveryUrl);
-      : issuerUrl;
+    if (discoveryResponse.ok) {
-    const possibleIssuers = [
+      const discovery = (await discoveryResponse.json()) as Record<
-      issuerUrl,
+        string,
-      normalizedIssuerUrl,
+        unknown
-      issuerUrl.replace(/\/application\/o\/[^\/]+$/, ""),
+      >;
-      normalizedIssuerUrl.replace(/\/application\/o\/[^\/]+$/, ""),
+      if (discovery.jwks_uri) {
-    ];
+        jwksUrls.unshift(discovery.jwks_uri as string);
-
-    const jwksUrls = [
-      `${normalizedIssuerUrl}/.well-known/jwks.json`,
-      `${normalizedIssuerUrl}/jwks/`,
-      `${normalizedIssuerUrl.replace(/\/application\/o\/[^\/]+$/, "")}/.well-known/jwks.json`,
-    ];
-
-    try {
-      const discoveryUrl = `${normalizedIssuerUrl}/.well-known/openid-configuration`;
-      const discoveryResponse = await fetch(discoveryUrl);
-      if (discoveryResponse.ok) {
-        const discovery = (await discoveryResponse.json()) as any;
-        if (discovery.jwks_uri) {
-          jwksUrls.unshift(discovery.jwks_uri);
-        }
       }
-    } catch (discoveryError) {
-      authLogger.error(`OIDC discovery failed: ${discoveryError}`);
     }
+  } catch (discoveryError) {
+    authLogger.error(`OIDC discovery failed: ${discoveryError}`);
+  }
 
-    let jwks: any = null;
+    let jwks: Record<string, unknown> | null = null;
-    let jwksUrl: string | null = null;
 
     for (const url of jwksUrls) {
       try {
         const response = await fetch(url);
         if (response.ok) {
-          const jwksData = (await response.json()) as any;
+          const jwksData = (await response.json()) as Record<string, unknown>;;
           if (jwksData && jwksData.keys && Array.isArray(jwksData.keys)) {
             jwks = jwksData;
-            jwksUrl = url;
             break;
           } else {
             authLogger.error(
@@ -77,62 +78,54 @@ async function verifyOIDCToken(
           }
         } else {
         }
-      } catch (error) {
+      } catch {
         continue;
       }
     }
 
-    if (!jwks) {
+  if (!jwks) {
-      throw new Error("Failed to fetch JWKS from any URL");
+    throw new Error("Failed to fetch JWKS from any URL");
-    }
-
-    if (!jwks.keys || !Array.isArray(jwks.keys)) {
-      throw new Error(
-        `Invalid JWKS response structure. Expected 'keys' array, got: ${JSON.stringify(jwks)}`,
-      );
-    }
-
-    const header = JSON.parse(
-      Buffer.from(idToken.split(".")[0], "base64").toString(),
-    );
-    const keyId = header.kid;
-
-    const publicKey = jwks.keys.find((key: any) => key.kid === keyId);
-    if (!publicKey) {
-      throw new Error(
-        `No matching public key found for key ID: ${keyId}. Available keys: ${jwks.keys.map((k: any) => k.kid).join(", ")}`,
-      );
-    }
-
-    const { importJWK, jwtVerify } = await import("jose");
-    const key = await importJWK(publicKey);
-
-    const { payload } = await jwtVerify(idToken, key, {
-      issuer: possibleIssuers,
-      audience: clientId,
-    });
-
-    return payload;
-  } catch (error) {
-    throw error;
   }
+
+  if (!jwks.keys || !Array.isArray(jwks.keys)) {
+    throw new Error(
+      `Invalid JWKS response structure. Expected 'keys' array, got: ${JSON.stringify(jwks)}`,
+    );
+  }
+
+  const header = JSON.parse(
+    Buffer.from(idToken.split(".")[0], "base64").toString(),
+  );
+  const keyId = header.kid;
+
+  const publicKey = jwks.keys.find(
+    (key: Record<string, unknown>) => key.kid === keyId,
+  );
+  if (!publicKey) {
+    throw new Error(
+      `No matching public key found for key ID: ${keyId}. Available keys: ${jwks.keys.map((k: Record<string, unknown>) => k.kid).join(", ")}`,
+    );
+  }
+
+  const { importJWK, jwtVerify } = await import("jose");
+  const key = await importJWK(publicKey);
+
+  const { payload } = await jwtVerify(idToken, key, {
+    issuer: possibleIssuers,
+    audience: clientId,
+  });
+
+  return payload;
 }
 
 const router = express.Router();
 
-function isNonEmptyString(val: any): val is string {
+function isNonEmptyString(val: unknown): val is string {
   return typeof val === "string" && val.trim().length > 0;
 }
 
-interface JWTPayload {
-  userId: string;
-  iat?: number;
-  exp?: number;
-}
-
 const authenticateJWT = authManager.createAuthMiddleware();
 const requireAdmin = authManager.createAdminMiddleware();
-const requireDataAccess = authManager.createDataAccessMiddleware();
 
 // Route: Create traditional user (username/password)
 // POST /users/create
@@ -141,7 +134,7 @@ router.post("/create", async (req, res) => {
     const row = db.$client
       .prepare("SELECT value FROM settings WHERE key = 'allow_registration'")
       .get();
-    if (row && (row as any).value !== "true") {
+    if (row && (row as Record<string, unknown>).value !== "true") {
       return res
         .status(403)
         .json({ error: "Registration is currently disabled" });
@@ -186,7 +179,7 @@ router.post("/create", async (req, res) => {
     const countResult = db.$client
       .prepare("SELECT COUNT(*) as count FROM users")
       .get();
-    isFirstUser = ((countResult as any)?.count || 0) === 0;
+    isFirstUser = ((countResult as { count?: number })?.count || 0) === 0;
 
     const saltRounds = parseInt(process.env.SALT || "10", 10);
     const password_hash = await bcrypt.hash(password, saltRounds);
@@ -250,7 +243,7 @@ router.post("/create", async (req, res) => {
 // Route: Create OIDC provider configuration (admin only)
 // POST /users/oidc-config
 router.post("/oidc-config", authenticateJWT, async (req, res) => {
-  const userId = (req as any).userId;
+  const userId = (req as AuthenticatedRequest).userId;
   try {
     const user = await db.select().from(users).where(eq(users.id, userId));
     if (!user || user.length === 0 || !user[0].is_admin) {
@@ -390,7 +383,7 @@ router.post("/oidc-config", authenticateJWT, async (req, res) => {
 // Route: Disable OIDC configuration (admin only)
 // DELETE /users/oidc-config
 router.delete("/oidc-config", authenticateJWT, async (req, res) => {
-  const userId = (req as any).userId;
+  const userId = (req as AuthenticatedRequest).userId;
   try {
     const user = await db.select().from(users).where(eq(users.id, userId));
     if (!user || user.length === 0 || !user[0].is_admin) {
@@ -420,7 +413,7 @@ router.get("/oidc-config", async (req, res) => {
       return res.json(null);
     }
 
-    let config = JSON.parse((row as any).value);
+    let config = JSON.parse((row as Record<string, unknown>).value as string);
 
     if (config.client_secret) {
       if (config.client_secret.startsWith("encrypted:")) {
@@ -450,7 +443,7 @@ router.get("/oidc-config", async (req, res) => {
                 } else {
                   config.client_secret = "[ENCRYPTED - PASSWORD REQUIRED]";
                 }
-              } catch (decryptError) {
+              } catch {
                 authLogger.warn("Failed to decrypt OIDC config for admin", {
                   operation: "oidc_config_decrypt_failed",
                   userId,
@@ -497,13 +490,13 @@ router.get("/oidc/authorize", async (req, res) => {
       return res.status(404).json({ error: "OIDC not configured" });
     }
 
-    const config = JSON.parse((row as any).value);
+    const config = JSON.parse((row as Record<string, unknown>).value as string);
     const state = nanoid();
     const nonce = nanoid();
 
     let origin =
       req.get("Origin") ||
-      req.get("Referer")?.replace(/\/[^\/]*$/, "") ||
+      req.get("Referer")?.replace(/\/[^/]*$/, "") ||
       "http://localhost:5173";
 
     if (origin.includes("localhost")) {
@@ -552,7 +545,8 @@ router.get("/oidc/callback", async (req, res) => {
       .status(400)
       .json({ error: "Invalid state parameter - redirect URI not found" });
   }
-  const redirectUri = (storedRedirectRow as any).value;
+  const redirectUri = (storedRedirectRow as Record<string, unknown>)
+    .value as string;
 
   try {
     const storedNonce = db.$client
@@ -576,7 +570,9 @@ router.get("/oidc/callback", async (req, res) => {
       return res.status(500).json({ error: "OIDC not configured" });
     }
 
-    const config = JSON.parse((configRow as any).value);
+    const config = JSON.parse(
+      (configRow as Record<string, unknown>).value as string,
+    );
 
     const tokenResponse = await fetch(config.token_url, {
       method: "POST",
@@ -602,26 +598,26 @@ router.get("/oidc/callback", async (req, res) => {
         .json({ error: "Failed to exchange authorization code" });
     }
 
-    const tokenData = (await tokenResponse.json()) as any;
+    const tokenData = (await tokenResponse.json()) as Record<string, unknown>;
 
-    let userInfo: any = null;
+    let userInfo: Record<string, unknown> = null;
-    let userInfoUrls: string[] = [];
+    const userInfoUrls: string[] = [];
 
     const normalizedIssuerUrl = config.issuer_url.endsWith("/")
       ? config.issuer_url.slice(0, -1)
       : config.issuer_url;
-    const baseUrl = normalizedIssuerUrl.replace(
+    const baseUrl = normalizedIssuerUrl.replace(/\/application\/o\/[^/]+$/, "");
-      /\/application\/o\/[^\/]+$/,
-      "",
-    );
 
     try {
       const discoveryUrl = `${normalizedIssuerUrl}/.well-known/openid-configuration`;
       const discoveryResponse = await fetch(discoveryUrl);
       if (discoveryResponse.ok) {
-        const discovery = (await discoveryResponse.json()) as any;
+        const discovery = (await discoveryResponse.json()) as Record<
+          string,
+          unknown
+        >;
         if (discovery.userinfo_endpoint) {
-          userInfoUrls.push(discovery.userinfo_endpoint);
+          userInfoUrls.push(discovery.userinfo_endpoint as string);
         }
       }
     } catch (discoveryError) {
@@ -646,13 +642,14 @@ router.get("/oidc/callback", async (req, res) => {
     if (tokenData.id_token) {
       try {
         userInfo = await verifyOIDCToken(
-          tokenData.id_token,
+          tokenData.id_token as string,
           config.issuer_url,
           config.client_id,
         );
-      } catch (error) {
+      } catch {
+        // Fallback to manual decoding
         try {
-          const parts = tokenData.id_token.split(".");
+          const parts = (tokenData.id_token as string).split(".");
           if (parts.length === 3) {
             const payload = JSON.parse(
               Buffer.from(parts[1], "base64").toString(),
@@ -675,7 +672,10 @@ router.get("/oidc/callback", async (req, res) => {
           });
 
           if (userInfoResponse.ok) {
-            userInfo = await userInfoResponse.json();
+            userInfo = (await userInfoResponse.json()) as Record<
+              string,
+              unknown
+            >;
             break;
           } else {
             authLogger.error(
@@ -698,24 +698,25 @@ router.get("/oidc/callback", async (req, res) => {
       return res.status(400).json({ error: "Failed to get user information" });
     }
 
-    const getNestedValue = (obj: any, path: string): any => {
+    const getNestedValue = (
+      obj: Record<string, unknown>,
+      path: string,
+    ): unknown => {
       if (!path || !obj) return null;
       return path.split(".").reduce((current, key) => current?.[key], obj);
     };
 
-    const identifier =
+    const identifier = (getNestedValue(userInfo, config.identifier_path) ||
-      getNestedValue(userInfo, config.identifier_path) ||
       userInfo[config.identifier_path] ||
       userInfo.sub ||
       userInfo.email ||
-      userInfo.preferred_username;
+      userInfo.preferred_username) as string;
 
-    const name =
+    const name = (getNestedValue(userInfo, config.name_path) ||
-      getNestedValue(userInfo, config.name_path) ||
       userInfo[config.name_path] ||
       userInfo.name ||
       userInfo.given_name ||
-      identifier;
+      identifier) as string;
 
     if (!identifier) {
       authLogger.error(
@@ -739,7 +740,7 @@ router.get("/oidc/callback", async (req, res) => {
       const countResult = db.$client
         .prepare("SELECT COUNT(*) as count FROM users")
         .get();
-      isFirstUser = ((countResult as any)?.count || 0) === 0;
+      isFirstUser = ((countResult as { count?: number })?.count || 0) === 0;
 
       const id = nanoid();
       await db.insert(users).values({
@@ -749,14 +750,14 @@ router.get("/oidc/callback", async (req, res) => {
         is_admin: isFirstUser,
         is_oidc: true,
         oidc_identifier: identifier,
-        client_id: config.client_id,
+        client_id: String(config.client_id),
-        client_secret: config.client_secret,
+        client_secret: String(config.client_secret),
-        issuer_url: config.issuer_url,
+        issuer_url: String(config.issuer_url),
-        authorization_url: config.authorization_url,
+        authorization_url: String(config.authorization_url),
-        token_url: config.token_url,
+        token_url: String(config.token_url),
-        identifier_path: config.identifier_path,
+        identifier_path: String(config.identifier_path),
-        name_path: config.name_path,
+        name_path: String(config.name_path),
-        scopes: config.scopes,
+        scopes: String(config.scopes),
       });
 
       try {
@@ -801,7 +802,10 @@ router.get("/oidc/callback", async (req, res) => {
       expiresIn: "50d",
     });
 
-    let frontendUrl = redirectUri.replace("/users/oidc/callback", "");
+    let frontendUrl = (redirectUri as string).replace(
+      "/users/oidc/callback",
+      "",
+    );
 
     if (frontendUrl.includes("localhost")) {
       frontendUrl = "http://localhost:5173";
@@ -820,7 +824,10 @@ router.get("/oidc/callback", async (req, res) => {
   } catch (err) {
     authLogger.error("OIDC callback failed", err);
 
-    let frontendUrl = redirectUri.replace("/users/oidc/callback", "");
+    let frontendUrl = (redirectUri as string).replace(
+      "/users/oidc/callback",
+      "",
+    );
 
     if (frontendUrl.includes("localhost")) {
       frontendUrl = "http://localhost:5173";
@@ -847,6 +854,23 @@ router.post("/login", async (req, res) => {
     return res.status(400).json({ error: "Invalid username or password" });
   }
 
+  try {
+    const row = db.$client
+      .prepare("SELECT value FROM settings WHERE key = 'allow_password_login'")
+      .get();
+    if (row && (row as { value: string }).value !== "true") {
+      return res
+        .status(403)
+        .json({ error: "Password authentication is currently disabled" });
+    }
+  } catch (e) {
+    authLogger.error("Failed to check password login status", {
+      operation: "login_check",
+      error: e,
+    });
+    return res.status(500).json({ error: "Failed to check login status" });
+  }
+
   try {
     const user = await db
       .select()
@@ -893,7 +917,8 @@ router.post("/login", async (req, res) => {
       if (kekSalt.length === 0) {
         await authManager.registerUser(userRecord.id, password);
       }
-    } catch (setupError) {}
+    } catch {
+    }
 
     const dataUnlocked = await authManager.authenticateUser(
       userRecord.id,
@@ -926,7 +951,7 @@ router.post("/login", async (req, res) => {
       dataUnlocked: true,
     });
 
-    const response: any = {
+    const response: Record<string, unknown> = {
       success: true,
       is_admin: !!userRecord.is_admin,
       username: userRecord.username,
@@ -957,7 +982,7 @@ router.post("/login", async (req, res) => {
 // POST /users/logout
 router.post("/logout", async (req, res) => {
   try {
-    const userId = (req as any).userId;
+    const userId = (req as AuthenticatedRequest).userId;
 
     if (userId) {
       authManager.logoutUser(userId);
@@ -979,7 +1004,7 @@ router.post("/logout", async (req, res) => {
 // Route: Get current user's info using JWT
 // GET /users/me
 router.get("/me", authenticateJWT, async (req: Request, res: Response) => {
-  const userId = (req as any).userId;
+  const userId = (req as AuthenticatedRequest).userId;
   if (!isNonEmptyString(userId)) {
     authLogger.warn("Invalid userId in JWT for /users/me");
     return res.status(401).json({ error: "Invalid userId" });
@@ -1014,7 +1039,7 @@ router.get("/setup-required", async (req, res) => {
     const countResult = db.$client
       .prepare("SELECT COUNT(*) as count FROM users")
       .get();
-    const count = (countResult as any)?.count || 0;
+    const count = (countResult as { count?: number })?.count || 0;
 
     res.json({
       setup_required: count === 0,
@@ -1028,7 +1053,7 @@ router.get("/setup-required", async (req, res) => {
 // Route: Count users (admin only - for dashboard statistics)
 // GET /users/count
 router.get("/count", authenticateJWT, async (req, res) => {
-  const userId = (req as any).userId;
+  const userId = (req as AuthenticatedRequest).userId;
   try {
     const user = await db.select().from(users).where(eq(users.id, userId));
     if (!user[0] || !user[0].is_admin) {
@@ -1038,7 +1063,7 @@ router.get("/count", authenticateJWT, async (req, res) => {
     const countResult = db.$client
       .prepare("SELECT COUNT(*) as count FROM users")
       .get();
-    const count = (countResult as any)?.count || 0;
+    const count = (countResult as { count?: number })?.count || 0;
     res.json({ count });
   } catch (err) {
     authLogger.error("Failed to count users", err);
@@ -1065,7 +1090,9 @@ router.get("/registration-allowed", async (req, res) => {
     const row = db.$client
       .prepare("SELECT value FROM settings WHERE key = 'allow_registration'")
       .get();
-    res.json({ allowed: row ? (row as any).value === "true" : true });
+    res.json({
+      allowed: row ? (row as Record<string, unknown>).value === "true" : true,
+    });
   } catch (err) {
     authLogger.error("Failed to get registration allowed", err);
     res.status(500).json({ error: "Failed to get registration allowed" });
@@ -1075,7 +1102,7 @@ router.get("/registration-allowed", async (req, res) => {
 // Route: Set registration allowed status (admin only)
 // PATCH /users/registration-allowed
 router.patch("/registration-allowed", authenticateJWT, async (req, res) => {
-  const userId = (req as any).userId;
+  const userId = (req as AuthenticatedRequest).userId;
   try {
     const user = await db.select().from(users).where(eq(users.id, userId));
     if (!user || user.length === 0 || !user[0].is_admin) {
@@ -1095,10 +1122,51 @@ router.patch("/registration-allowed", authenticateJWT, async (req, res) => {
   }
 });
 
+// Route: Get password login allowed status (public - needed for login page)
+// GET /users/password-login-allowed
+router.get("/password-login-allowed", async (req, res) => {
+  try {
+    const row = db.$client
+      .prepare("SELECT value FROM settings WHERE key = 'allow_password_login'")
+      .get();
+    res.json({
+      allowed: row ? (row as { value: string }).value === "true" : true,
+    });
+  } catch (err) {
+    authLogger.error("Failed to get password login allowed", err);
+    res.status(500).json({ error: "Failed to get password login allowed" });
+  }
+});
+
+// Route: Set password login allowed status (admin only)
+// PATCH /users/password-login-allowed
+router.patch("/password-login-allowed", authenticateJWT, async (req, res) => {
+  const userId = (req as AuthenticatedRequest).userId;
+  try {
+    const user = await db.select().from(users).where(eq(users.id, userId));
+    if (!user || user.length === 0 || !user[0].is_admin) {
+      return res.status(403).json({ error: "Not authorized" });
+    }
+    const { allowed } = req.body;
+    if (typeof allowed !== "boolean") {
+      return res.status(400).json({ error: "Invalid value for allowed" });
+    }
+    db.$client
+      .prepare(
+        "UPDATE settings SET value = ? WHERE key = 'allow_password_login'",
+      )
+      .run(allowed ? "true" : "false");
+    res.json({ allowed });
+  } catch (err) {
+    authLogger.error("Failed to set password login allowed", err);
+    res.status(500).json({ error: "Failed to set password login allowed" });
+  }
+});
+
 // Route: Delete user account
 // DELETE /users/delete-account
 router.delete("/delete-account", authenticateJWT, async (req, res) => {
-  const userId = (req as any).userId;
+  const userId = (req as AuthenticatedRequest).userId;
   const { password } = req.body;
 
   if (!isNonEmptyString(password)) {
@@ -1134,7 +1202,7 @@ router.delete("/delete-account", authenticateJWT, async (req, res) => {
       const adminCount = db.$client
         .prepare("SELECT COUNT(*) as count FROM users WHERE is_admin = 1")
         .get();
-      if ((adminCount as any)?.count <= 1) {
+      if (((adminCount as { count?: number })?.count || 0) <= 1) {
         return res
           .status(403)
           .json({ error: "Cannot delete the last admin user" });
@@ -1224,7 +1292,9 @@ router.post("/verify-reset-code", async (req, res) => {
         .json({ error: "No reset code found for this user" });
     }
 
-    const resetData = JSON.parse((resetDataRow as any).value);
+    const resetData = JSON.parse(
+      (resetDataRow as Record<string, unknown>).value as string,
+    );
     const now = new Date();
     const expiresAt = new Date(resetData.expiresAt);
 
@@ -1282,7 +1352,9 @@ router.post("/complete-reset", async (req, res) => {
       return res.status(400).json({ error: "No temporary token found" });
     }
 
-    const tempTokenData = JSON.parse((tempTokenRow as any).value);
+    const tempTokenData = JSON.parse(
+      (tempTokenRow as Record<string, unknown>).value as string,
+    );
     const now = new Date();
     const expiresAt = new Date(tempTokenData.expiresAt);
 
@@ -1315,48 +1387,8 @@ router.post("/complete-reset", async (req, res) => {
       .where(eq(users.username, username));
 
     try {
-      const hasActiveSession = authManager.isUserUnlocked(userId);
+      await authManager.registerUser(userId, newPassword);
-
+      authManager.logoutUser(userId);
-      if (hasActiveSession) {
-        const success = await authManager.resetUserPasswordWithPreservedDEK(
-          userId,
-          newPassword,
-        );
-
-        if (!success) {
-          authLogger.warn(
-            `Failed to preserve DEK during password reset for ${username}. Creating new DEK - data will be lost.`,
-            {
-              operation: "password_reset_preserve_failed",
-              userId,
-              username,
-            },
-          );
-          await authManager.registerUser(userId, newPassword);
-          authManager.logoutUser(userId);
-        } else {
-          authLogger.success(
-            `Password reset completed for user: ${username}. Data preserved using existing session.`,
-            {
-              operation: "password_reset_data_preserved",
-              userId,
-              username,
-            },
-          );
-        }
-      } else {
-        await authManager.registerUser(userId, newPassword);
-        authManager.logoutUser(userId);
-
-        authLogger.warn(
-          `Password reset completed for user: ${username}. Existing encrypted data is now inaccessible and will need to be re-entered.`,
-          {
-            operation: "password_reset_data_inaccessible",
-            userId,
-            username,
-          },
-        );
-      }
 
       await db
         .update(users)
@@ -1366,6 +1398,15 @@ router.post("/complete-reset", async (req, res) => {
           totp_backup_codes: null,
         })
         .where(eq(users.id, userId));
+
+      authLogger.warn(
+        `Password reset completed for user: ${username}. Existing encrypted data is now inaccessible and will need to be re-entered.`,
+        {
+          operation: "password_reset_data_inaccessible",
+          userId,
+          username,
+        },
+      );
     } catch (encryptionError) {
       authLogger.error(
         "Failed to re-encrypt user data after password reset",
@@ -1382,6 +1423,8 @@ router.post("/complete-reset", async (req, res) => {
       });
     }
 
+    authLogger.success(`Password successfully reset for user: ${username}`);
+
     db.$client
       .prepare("DELETE FROM settings WHERE key = ?")
       .run(`reset_code_${username}`);
@@ -1399,7 +1442,7 @@ router.post("/complete-reset", async (req, res) => {
 // Route: List all users (admin only)
 // GET /users/list
 router.get("/list", authenticateJWT, async (req, res) => {
-  const userId = (req as any).userId;
+  const userId = (req as AuthenticatedRequest).userId;
   try {
     const user = await db.select().from(users).where(eq(users.id, userId));
     if (!user || user.length === 0 || !user[0].is_admin) {
@@ -1425,7 +1468,7 @@ router.get("/list", authenticateJWT, async (req, res) => {
 // Route: Make user admin (admin only)
 // POST /users/make-admin
 router.post("/make-admin", authenticateJWT, async (req, res) => {
-  const userId = (req as any).userId;
+  const userId = (req as AuthenticatedRequest).userId;
   const { username } = req.body;
 
   if (!isNonEmptyString(username)) {
@@ -1468,7 +1511,7 @@ router.post("/make-admin", authenticateJWT, async (req, res) => {
 // Route: Remove admin status (admin only)
 // POST /users/remove-admin
 router.post("/remove-admin", authenticateJWT, async (req, res) => {
-  const userId = (req as any).userId;
+  const userId = (req as AuthenticatedRequest).userId;
   const { username } = req.body;
 
   if (!isNonEmptyString(username)) {
@@ -1587,7 +1630,7 @@ router.post("/totp/verify-login", async (req, res) => {
         backupCodes = userRecord.totp_backup_codes
           ? JSON.parse(userRecord.totp_backup_codes)
           : [];
-      } catch (parseError) {
+      } catch {
         backupCodes = [];
       }
 
@@ -1625,7 +1668,7 @@ router.post("/totp/verify-login", async (req, res) => {
       });
     }
 
-    const response: any = {
+    const response: Record<string, unknown> = {
       success: true,
       is_admin: !!userRecord.is_admin,
       username: userRecord.username,
@@ -1655,7 +1698,7 @@ router.post("/totp/verify-login", async (req, res) => {
 // Route: Setup TOTP
 // POST /users/totp/setup
 router.post("/totp/setup", authenticateJWT, async (req, res) => {
-  const userId = (req as any).userId;
+  const userId = (req as AuthenticatedRequest).userId;
 
   try {
     const user = await db.select().from(users).where(eq(users.id, userId));
@@ -1694,7 +1737,7 @@ router.post("/totp/setup", authenticateJWT, async (req, res) => {
 // Route: Enable TOTP
 // POST /users/totp/enable
 router.post("/totp/enable", authenticateJWT, async (req, res) => {
-  const userId = (req as any).userId;
+  const userId = (req as AuthenticatedRequest).userId;
   const { totp_code } = req.body;
 
   if (!totp_code) {
@@ -1753,7 +1796,7 @@ router.post("/totp/enable", authenticateJWT, async (req, res) => {
 // Route: Disable TOTP
 // POST /users/totp/disable
 router.post("/totp/disable", authenticateJWT, async (req, res) => {
-  const userId = (req as any).userId;
+  const userId = (req as AuthenticatedRequest).userId;
   const { password, totp_code } = req.body;
 
   if (!password && !totp_code) {
@@ -1811,7 +1854,7 @@ router.post("/totp/disable", authenticateJWT, async (req, res) => {
 // Route: Generate new backup codes
 // POST /users/totp/backup-codes
 router.post("/totp/backup-codes", authenticateJWT, async (req, res) => {
-  const userId = (req as any).userId;
+  const userId = (req as AuthenticatedRequest).userId;
   const { password, totp_code } = req.body;
 
   if (!password && !totp_code) {
@@ -1869,7 +1912,7 @@ router.post("/totp/backup-codes", authenticateJWT, async (req, res) => {
 // Route: Delete user (admin only)
 // DELETE /users/delete-user
 router.delete("/delete-user", authenticateJWT, async (req, res) => {
-  const userId = (req as any).userId;
+  const userId = (req as AuthenticatedRequest).userId;
   const { username } = req.body;
 
   if (!isNonEmptyString(username)) {
@@ -1898,7 +1941,7 @@ router.delete("/delete-user", authenticateJWT, async (req, res) => {
       const adminCount = db.$client
         .prepare("SELECT COUNT(*) as count FROM users WHERE is_admin = 1")
         .get();
-      if ((adminCount as any)?.count <= 1) {
+      if (((adminCount as { count?: number })?.count || 0) <= 1) {
         return res
           .status(403)
           .json({ error: "Cannot delete the last admin user" });
@@ -1955,7 +1998,7 @@ router.delete("/delete-user", authenticateJWT, async (req, res) => {
 // Route: User data unlock - used when session expires
 // POST /users/unlock-data
 router.post("/unlock-data", authenticateJWT, async (req, res) => {
-  const userId = (req as any).userId;
+  const userId = (req as AuthenticatedRequest).userId;
   const { password } = req.body;
 
   if (!password) {
@@ -1988,7 +2031,7 @@ router.post("/unlock-data", authenticateJWT, async (req, res) => {
 // Route: Check user data unlock status
 // GET /users/data-status
 router.get("/data-status", authenticateJWT, async (req, res) => {
-  const userId = (req as any).userId;
+  const userId = (req as AuthenticatedRequest).userId;
 
   try {
     const isUnlocked = authManager.isUserUnlocked(userId);
@@ -2010,7 +2053,7 @@ router.get("/data-status", authenticateJWT, async (req, res) => {
 // Route: Change user password (re-encrypt data keys)
 // POST /users/change-password
 router.post("/change-password", authenticateJWT, async (req, res) => {
-  const userId = (req as any).userId;
+  const userId = (req as AuthenticatedRequest).userId;
   const { currentPassword, newPassword } = req.body;
 
   if (!currentPassword || !newPassword) {

src/backend/homepage.ts

@@ -0,0 +1,261 @@
+import express from "express";
+import cors from "cors";
+import cookieParser from "cookie-parser";
+import { getDb } from "./database/db/index.js";
+import { recentActivity, sshData } from "./database/db/schema.js";
+import { eq, and, desc } from "drizzle-orm";
+import { homepageLogger } from "./utils/logger.js";
+import { SimpleDBOps } from "./utils/simple-db-ops.js";
+import { AuthManager } from "./utils/auth-manager.js";
+import type { AuthenticatedRequest } from "../types/index.js";
+
+const app = express();
+const authManager = AuthManager.getInstance();
+
+// Track server start time
+const serverStartTime = Date.now();
+
+app.use(
+  cors({
+    origin: (origin, callback) => {
+      if (!origin) return callback(null, true);
+
+      const allowedOrigins = [
+        "http://localhost:5173",
+        "http://localhost:3000",
+        "http://127.0.0.1:5173",
+        "http://127.0.0.1:3000",
+      ];
+
+      if (origin.startsWith("https://")) {
+        return callback(null, true);
+      }
+
+      if (origin.startsWith("http://")) {
+        return callback(null, true);
+      }
+
+      if (allowedOrigins.includes(origin)) {
+        return callback(null, true);
+      }
+
+      callback(new Error("Not allowed by CORS"));
+    },
+    credentials: true,
+    methods: ["GET", "POST", "PUT", "PATCH", "DELETE", "OPTIONS"],
+    allowedHeaders: [
+      "Content-Type",
+      "Authorization",
+      "User-Agent",
+      "X-Electron-App",
+    ],
+  }),
+);
+app.use(cookieParser());
+app.use(express.json({ limit: "1mb" }));
+
+app.use(authManager.createAuthMiddleware());
+
+// Get server uptime
+app.get("/uptime", async (req, res) => {
+  try {
+    const uptimeMs = Date.now() - serverStartTime;
+    const uptimeSeconds = Math.floor(uptimeMs / 1000);
+    const days = Math.floor(uptimeSeconds / 86400);
+    const hours = Math.floor((uptimeSeconds % 86400) / 3600);
+    const minutes = Math.floor((uptimeSeconds % 3600) / 60);
+
+    res.json({
+      uptimeMs,
+      uptimeSeconds,
+      formatted: `${days}d ${hours}h ${minutes}m`,
+    });
+  } catch (err) {
+    homepageLogger.error("Failed to get uptime", err);
+    res.status(500).json({ error: "Failed to get uptime" });
+  }
+});
+
+// Get recent activity for current user
+app.get("/activity/recent", async (req, res) => {
+  try {
+    const userId = (req as AuthenticatedRequest).userId;
+
+    if (!SimpleDBOps.isUserDataUnlocked(userId)) {
+      return res.status(401).json({
+        error: "Session expired - please log in again",
+        code: "SESSION_EXPIRED",
+      });
+    }
+
+    const limit = Number(req.query.limit) || 20;
+
+    const activities = await SimpleDBOps.select(
+      getDb()
+        .select()
+        .from(recentActivity)
+        .where(eq(recentActivity.userId, userId))
+        .orderBy(desc(recentActivity.timestamp))
+        .limit(limit),
+      "recent_activity",
+      userId,
+    );
+
+    res.json(activities);
+  } catch (err) {
+    homepageLogger.error("Failed to get recent activity", err);
+    res.status(500).json({ error: "Failed to get recent activity" });
+  }
+});
+
+// Log new activity
+app.post("/activity/log", async (req, res) => {
+  try {
+    const userId = (req as AuthenticatedRequest).userId;
+
+    if (!SimpleDBOps.isUserDataUnlocked(userId)) {
+      return res.status(401).json({
+        error: "Session expired - please log in again",
+        code: "SESSION_EXPIRED",
+      });
+    }
+
+    const { type, hostId, hostName } = req.body;
+
+    if (!type || !hostId || !hostName) {
+      return res.status(400).json({
+        error: "Missing required fields: type, hostId, hostName",
+      });
+    }
+
+    if (type !== "terminal" && type !== "file_manager") {
+      return res.status(400).json({
+        error: "Invalid activity type. Must be 'terminal' or 'file_manager'",
+      });
+    }
+
+    // Verify the host belongs to the user
+    const hosts = await SimpleDBOps.select(
+      getDb()
+        .select()
+        .from(sshData)
+        .where(and(eq(sshData.id, hostId), eq(sshData.userId, userId))),
+      "ssh_data",
+      userId,
+    );
+
+    if (hosts.length === 0) {
+      return res.status(404).json({ error: "Host not found" });
+    }
+
+    // Check if this activity already exists in recent history (within last 5 minutes)
+    const fiveMinutesAgo = new Date(Date.now() - 5 * 60 * 1000).toISOString();
+    const recentSimilar = await SimpleDBOps.select(
+      getDb()
+        .select()
+        .from(recentActivity)
+        .where(
+          and(
+            eq(recentActivity.userId, userId),
+            eq(recentActivity.hostId, hostId),
+            eq(recentActivity.type, type),
+          ),
+        )
+        .orderBy(desc(recentActivity.timestamp))
+        .limit(1),
+      "recent_activity",
+      userId,
+    );
+
+    if (
+      recentSimilar.length > 0 &&
+      recentSimilar[0].timestamp >= fiveMinutesAgo
+    ) {
+      // Activity already logged recently, don't duplicate
+      return res.json({
+        message: "Activity already logged recently",
+        id: recentSimilar[0].id,
+      });
+    }
+
+    // Insert new activity
+    const result = (await SimpleDBOps.insert(
+      recentActivity,
+      "recent_activity",
+      {
+        userId,
+        type,
+        hostId,
+        hostName,
+      },
+      userId,
+    )) as unknown as { id: number };
+
+    // Keep only the last 100 activities per user to prevent bloat
+    const allActivities = await SimpleDBOps.select(
+      getDb()
+        .select()
+        .from(recentActivity)
+        .where(eq(recentActivity.userId, userId))
+        .orderBy(desc(recentActivity.timestamp)),
+      "recent_activity",
+      userId,
+    );
+
+    if (allActivities.length > 100) {
+      const toDelete = allActivities.slice(100);
+      for (const activity of toDelete) {
+        await SimpleDBOps.delete(recentActivity, "recent_activity", userId);
+      }
+    }
+
+    res.json({ message: "Activity logged", id: result.id });
+  } catch (err) {
+    homepageLogger.error("Failed to log activity", err);
+    res.status(500).json({ error: "Failed to log activity" });
+  }
+});
+
+// Reset recent activity for current user
+app.delete("/activity/reset", async (req, res) => {
+  try {
+    const userId = (req as AuthenticatedRequest).userId;
+
+    if (!SimpleDBOps.isUserDataUnlocked(userId)) {
+      return res.status(401).json({
+        error: "Session expired - please log in again",
+        code: "SESSION_EXPIRED",
+      });
+    }
+
+    // Delete all activities for the user
+    const activities = await SimpleDBOps.select(
+      getDb()
+        .select()
+        .from(recentActivity)
+        .where(eq(recentActivity.userId, userId)),
+      "recent_activity",
+      userId,
+    );
+
+    for (const activity of activities) {
+      await SimpleDBOps.delete(recentActivity, "recent_activity", userId);
+    }
+
+    res.json({ message: "Recent activity cleared" });
+  } catch (err) {
+    homepageLogger.error("Failed to reset activity", err);
+    res.status(500).json({ error: "Failed to reset activity" });
+  }
+});
+
+const PORT = 30006;
+app.listen(PORT, async () => {
+  try {
+    await authManager.initialize();
+  } catch (err) {
+    homepageLogger.error("Failed to initialize AuthManager", err, {
+      operation: "auth_init_error",
+    });
+  }
+});

src/backend/ssh/file-manager.ts

@@ -1,13 +1,15 @@
 import express from "express";
 import cors from "cors";
 import cookieParser from "cookie-parser";
+import axios from "axios";
 import { Client as SSHClient } from "ssh2";
 import { getDb } from "../database/db/index.js";
-import { sshCredentials } from "../database/db/schema.js";
+import { sshCredentials, sshData } from "../database/db/schema.js";
 import { eq, and } from "drizzle-orm";
 import { fileLogger } from "../utils/logger.js";
 import { SimpleDBOps } from "../utils/simple-db-ops.js";
 import { AuthManager } from "../utils/auth-manager.js";
+import type { AuthenticatedRequest } from "../../types/index.js";
 
 function isExecutableFile(permissions: string, fileName: string): boolean {
   const hasExecutePermission =
@@ -94,14 +96,33 @@ interface SSHSession {
   timeout?: NodeJS.Timeout;
 }
 
+interface PendingTOTPSession {
+  client: SSHClient;
+  finish: (responses: string[]) => void;
+  config: import("ssh2").ConnectConfig;
+  createdAt: number;
+  sessionId: string;
+  hostId?: number;
+  ip?: string;
+  port?: number;
+  username?: string;
+  userId?: string;
+  prompts?: Array<{ prompt: string; echo: boolean }>;
+  totpPromptIndex?: number;
+  resolvedPassword?: string;
+}
+
 const sshSessions: Record<string, SSHSession> = {};
+const pendingTOTPSessions: Record<string, PendingTOTPSession> = {};
 
 function cleanupSession(sessionId: string) {
   const session = sshSessions[sessionId];
   if (session) {
     try {
       session.client.end();
-    } catch {}
+    } catch {
+      // Ignore connection close errors
+    }
     clearTimeout(session.timeout);
     delete sshSessions[sessionId];
   }
@@ -155,7 +176,7 @@ app.post("/ssh/file_manager/ssh/connect", async (req, res) => {
     credentialId,
   } = req.body;
 
-  const userId = (req as any).userId;
+  const userId = (req as AuthenticatedRequest).userId;
 
   if (!userId) {
     fileLogger.error("SSH connection rejected: no authenticated user", {
@@ -235,10 +256,11 @@ app.post("/ssh/file_manager/ssh/connect", async (req, res) => {
     );
   }
 
-  const config: any = {
+  const config: Record<string, unknown> = {
     host: ip,
     port: port || 22,
     username,
+    tryKeyboard: true,
     readyTimeout: 60000,
     keepaliveInterval: 30000,
     keepaliveCountMax: 3,
@@ -277,12 +299,6 @@ app.post("/ssh/file_manager/ssh/connect", async (req, res) => {
   };
 
   if (
-    resolvedCredentials.authType === "password" &&
-    resolvedCredentials.password &&
-    resolvedCredentials.password.trim()
-  ) {
-    config.password = resolvedCredentials.password;
-  } else if (
     resolvedCredentials.authType === "key" &&
     resolvedCredentials.sshKey &&
     resolvedCredentials.sshKey.trim()
@@ -313,6 +329,22 @@ app.post("/ssh/file_manager/ssh/connect", async (req, res) => {
       });
       return res.status(400).json({ error: "Invalid SSH key format" });
     }
+  } else if (resolvedCredentials.authType === "password") {
+    if (!resolvedCredentials.password || !resolvedCredentials.password.trim()) {
+      fileLogger.warn(
+        "Password authentication requested but no password provided",
+        {
+          operation: "file_connect",
+          sessionId,
+          hostId,
+        },
+      );
+      return res
+        .status(400)
+        .json({ error: "Password required for password authentication" });
+    }
+    // Set password to offer both password and keyboard-interactive methods
+    config.password = resolvedCredentials.password;
   } else {
     fileLogger.warn(
       "No valid authentication method provided for file manager",
@@ -342,6 +374,56 @@ app.post("/ssh/file_manager/ssh/connect", async (req, res) => {
     };
     scheduleSessionCleanup(sessionId);
     res.json({ status: "success", message: "SSH connection established" });
+
+    // Log activity to homepage API
+    if (hostId && userId) {
+      (async () => {
+        try {
+          const hosts = await SimpleDBOps.select(
+            getDb()
+              .select()
+              .from(sshData)
+              .where(and(eq(sshData.id, hostId), eq(sshData.userId, userId))),
+            "ssh_data",
+            userId,
+          );
+
+          const hostName =
+            hosts.length > 0 && hosts[0].name
+              ? hosts[0].name
+              : `${username}@${ip}:${port}`;
+
+          const authManager = AuthManager.getInstance();
+          await axios.post(
+            "http://localhost:30006/activity/log",
+            {
+              type: "file_manager",
+              hostId,
+              hostName,
+            },
+            {
+              headers: {
+                Authorization: `Bearer ${await authManager.generateJWTToken(userId)}`,
+              },
+            },
+          );
+
+          fileLogger.info("File manager activity logged", {
+            operation: "activity_log",
+            userId,
+            hostId,
+            hostName,
+          });
+        } catch (error) {
+          fileLogger.warn("Failed to log file manager activity", {
+            operation: "activity_log_error",
+            userId,
+            hostId,
+            error: error instanceof Error ? error.message : "Unknown error",
+          });
+        }
+      })();
+    }
   });
 
   client.on("error", (err) => {
@@ -364,9 +446,290 @@ app.post("/ssh/file_manager/ssh/connect", async (req, res) => {
     cleanupSession(sessionId);
   });
 
+  client.on(
+    "keyboard-interactive",
+    (
+      name: string,
+      instructions: string,
+      instructionsLang: string,
+      prompts: Array<{ prompt: string; echo: boolean }>,
+      finish: (responses: string[]) => void,
+    ) => {
+      fileLogger.info("Keyboard-interactive authentication requested", {
+        operation: "file_keyboard_interactive",
+        hostId,
+        sessionId,
+        promptsCount: prompts.length,
+      });
+
+      const totpPromptIndex = prompts.findIndex((p) =>
+        /verification code|verification_code|token|otp|2fa|authenticator|google.*auth/i.test(
+          p.prompt,
+        ),
+      );
+
+      if (totpPromptIndex !== -1) {
+        if (responseSent) return;
+        responseSent = true;
+
+        if (pendingTOTPSessions[sessionId]) {
+          fileLogger.warn(
+            "TOTP session already exists, ignoring duplicate keyboard-interactive",
+            {
+              operation: "file_keyboard_interactive",
+              hostId,
+              sessionId,
+            },
+          );
+          // Don't respond to duplicate keyboard-interactive events
+          // The first one is still being processed
+          return;
+        }
+
+        pendingTOTPSessions[sessionId] = {
+          client,
+          finish,
+          config,
+          createdAt: Date.now(),
+          sessionId,
+          hostId,
+          ip,
+          port,
+          username,
+          userId,
+          prompts,
+          totpPromptIndex,
+          resolvedPassword: resolvedCredentials.password,
+        };
+
+        fileLogger.info("Created TOTP session", {
+          operation: "file_keyboard_interactive_totp",
+          hostId,
+          sessionId,
+          prompt: prompts[totpPromptIndex].prompt,
+          promptsCount: prompts.length,
+        });
+
+        res.json({
+          requires_totp: true,
+          sessionId,
+          prompt: prompts[totpPromptIndex].prompt,
+        });
+      } else {
+        if (resolvedCredentials.password) {
+          const responses = prompts.map(
+            () => resolvedCredentials.password || "",
+          );
+          finish(responses);
+        } else {
+          finish(prompts.map(() => ""));
+        }
+      }
+    },
+  );
+
   client.connect(config);
 });
 
+app.post("/ssh/file_manager/ssh/connect-totp", async (req, res) => {
+  const { sessionId, totpCode } = req.body;
+
+  const userId = (req as AuthenticatedRequest).userId;
+
+  if (!userId) {
+    fileLogger.error("TOTP verification rejected: no authenticated user", {
+      operation: "file_totp_auth",
+      sessionId,
+    });
+    return res.status(401).json({ error: "Authentication required" });
+  }
+
+  if (!sessionId || !totpCode) {
+    return res.status(400).json({ error: "Session ID and TOTP code required" });
+  }
+
+  const session = pendingTOTPSessions[sessionId];
+
+  if (!session) {
+    fileLogger.warn("TOTP session not found or expired", {
+      operation: "file_totp_verify",
+      sessionId,
+      userId,
+      availableSessions: Object.keys(pendingTOTPSessions),
+    });
+    return res
+      .status(404)
+      .json({ error: "TOTP session expired. Please reconnect." });
+  }
+
+  if (Date.now() - session.createdAt > 180000) {
+    delete pendingTOTPSessions[sessionId];
+    try {
+      session.client.end();
+    } catch {
+      // Ignore errors when closing timed out session
+    }
+    fileLogger.warn("TOTP session timeout before code submission", {
+      operation: "file_totp_verify",
+      sessionId,
+      userId,
+      age: Date.now() - session.createdAt,
+    });
+    return res
+      .status(408)
+      .json({ error: "TOTP session timeout. Please reconnect." });
+  }
+
+  fileLogger.info("Submitting TOTP code to SSH server", {
+    operation: "file_totp_verify",
+    sessionId,
+    userId,
+    codeLength: totpCode.length,
+    promptsCount: session.prompts?.length || 0,
+  });
+
+  // Build responses for ALL prompts, just like in terminal.ts
+  const responses = (session.prompts || []).map((p, index) => {
+    if (index === session.totpPromptIndex) {
+      return totpCode;
+    }
+    if (/password/i.test(p.prompt) && session.resolvedPassword) {
+      return session.resolvedPassword;
+    }
+    return "";
+  });
+
+  fileLogger.info("Full keyboard-interactive response for file manager", {
+    operation: "file_totp_full_response",
+    sessionId,
+    userId,
+    totalPrompts: session.prompts?.length || 0,
+    responsesProvided: responses.filter((r) => r !== "").length,
+  });
+
+  let responseSent = false;
+  let responseTimeout: NodeJS.Timeout;
+
+  // Remove old event listeners from /connect endpoint to avoid conflicts
+  session.client.removeAllListeners("ready");
+  session.client.removeAllListeners("error");
+
+  // CRITICAL: Attach event listeners BEFORE calling finish() to avoid race condition
+  session.client.once("ready", () => {
+    if (responseSent) return;
+    responseSent = true;
+    clearTimeout(responseTimeout);
+
+    delete pendingTOTPSessions[sessionId];
+
+    sshSessions[sessionId] = {
+      client: session.client,
+      isConnected: true,
+      lastActive: Date.now(),
+    };
+    scheduleSessionCleanup(sessionId);
+
+    fileLogger.success("TOTP verification successful", {
+      operation: "file_totp_verify",
+      sessionId,
+      userId,
+    });
+
+    res.json({
+      status: "success",
+      message: "TOTP verified, SSH connection established",
+    });
+
+    // Log activity to homepage API
+    if (session.hostId && session.userId) {
+      (async () => {
+        try {
+          const hosts = await SimpleDBOps.select(
+            getDb()
+              .select()
+              .from(sshData)
+              .where(
+                and(
+                  eq(sshData.id, session.hostId!),
+                  eq(sshData.userId, session.userId!),
+                ),
+              ),
+            "ssh_data",
+            session.userId!,
+          );
+
+          const hostName =
+            hosts.length > 0 && hosts[0].name
+              ? hosts[0].name
+              : `${session.username}@${session.ip}:${session.port}`;
+
+          const authManager = AuthManager.getInstance();
+          await axios.post(
+            "http://localhost:30006/activity/log",
+            {
+              type: "file_manager",
+              hostId: session.hostId,
+              hostName,
+            },
+            {
+              headers: {
+                Authorization: `Bearer ${await authManager.generateJWTToken(session.userId!)}`,
+              },
+            },
+          );
+
+          fileLogger.info("File manager activity logged (TOTP)", {
+            operation: "activity_log",
+            userId: session.userId,
+            hostId: session.hostId,
+            hostName,
+          });
+        } catch (error) {
+          fileLogger.warn("Failed to log file manager activity (TOTP)", {
+            operation: "activity_log_error",
+            userId: session.userId,
+            hostId: session.hostId,
+            error: error instanceof Error ? error.message : "Unknown error",
+          });
+        }
+      })();
+    }
+  });
+
+  session.client.once("error", (err) => {
+    if (responseSent) return;
+    responseSent = true;
+    clearTimeout(responseTimeout);
+
+    delete pendingTOTPSessions[sessionId];
+
+    fileLogger.error("TOTP verification failed", {
+      operation: "file_totp_verify",
+      sessionId,
+      userId,
+      error: err.message,
+    });
+
+    res.status(401).json({ status: "error", message: "Invalid TOTP code" });
+  });
+
+  responseTimeout = setTimeout(() => {
+    if (!responseSent) {
+      responseSent = true;
+      delete pendingTOTPSessions[sessionId];
+      fileLogger.warn("TOTP verification timeout", {
+        operation: "file_totp_verify",
+        sessionId,
+        userId,
+      });
+      res.status(408).json({ error: "TOTP verification timeout" });
+    }
+  }, 60000);
+
+  // Now that event listeners are attached, submit the TOTP response
+  session.finish(responses);
+});
+
 app.post("/ssh/file_manager/ssh/disconnect", (req, res) => {
   const { sessionId } = req.body;
   cleanupSession(sessionId);
@@ -455,13 +818,12 @@ app.get("/ssh/file_manager/ssh/listFiles", (req, res) => {
         const parts = line.split(/\s+/);
         if (parts.length >= 9) {
           const permissions = parts[0];
-          const linkCount = parts[1];
           const owner = parts[2];
           const group = parts[3];
           const size = parseInt(parts[4], 10);
 
           let dateStr = "";
-          let nameStartIndex = 8;
+          const nameStartIndex = 8;
 
           if (parts[5] && parts[6] && parts[7]) {
             dateStr = `${parts[5]} ${parts[6]} ${parts[7]}`;
@@ -694,7 +1056,7 @@ app.get("/ssh/file_manager/ssh/readFile", (req, res) => {
 });
 
 app.post("/ssh/file_manager/ssh/writeFile", async (req, res) => {
-  const { sessionId, path: filePath, content, hostId, userId } = req.body;
+  const { sessionId, path: filePath, content } = req.body;
   const sshConn = sshSessions[sessionId];
 
   if (!sessionId) {
@@ -881,14 +1243,7 @@ app.post("/ssh/file_manager/ssh/writeFile", async (req, res) => {
 });
 
 app.post("/ssh/file_manager/ssh/uploadFile", async (req, res) => {
-  const {
+  const { sessionId, path: filePath, content, fileName } = req.body;
-    sessionId,
-    path: filePath,
-    content,
-    fileName,
-    hostId,
-    userId,
-  } = req.body;
   const sshConn = sshSessions[sessionId];
 
   if (!sessionId) {
@@ -1022,8 +1377,6 @@ app.post("/ssh/file_manager/ssh/uploadFile", async (req, res) => {
       }
 
       if (chunks.length === 1) {
-        const tempFile = `/tmp/upload_${Date.now()}_${Math.random().toString(36).substr(2, 9)}`;
-        const escapedTempFile = tempFile.replace(/'/g, "'\"'\"'");
         const escapedPath = fullPath.replace(/'/g, "'\"'\"'");
 
         const writeCommand = `echo '${chunks[0]}' | base64 -d > '${escapedPath}' && echo "SUCCESS"`;
@@ -1088,13 +1441,11 @@ app.post("/ssh/file_manager/ssh/uploadFile", async (req, res) => {
           });
         });
       } else {
-        const tempFile = `/tmp/upload_${Date.now()}_${Math.random().toString(36).substr(2, 9)}`;
-        const escapedTempFile = tempFile.replace(/'/g, "'\"'\"'");
         const escapedPath = fullPath.replace(/'/g, "'\"'\"'");
 
         let writeCommand = `> '${escapedPath}'`;
 
-        chunks.forEach((chunk, index) => {
+        chunks.forEach((chunk) => {
           writeCommand += ` && echo '${chunk}' | base64 -d >> '${escapedPath}'`;
         });
 
@@ -1177,14 +1528,7 @@ app.post("/ssh/file_manager/ssh/uploadFile", async (req, res) => {
 });
 
 app.post("/ssh/file_manager/ssh/createFile", async (req, res) => {
-  const {
+  const { sessionId, path: filePath, fileName } = req.body;
-    sessionId,
-    path: filePath,
-    fileName,
-    content = "",
-    hostId,
-    userId,
-  } = req.body;
   const sshConn = sshSessions[sessionId];
 
   if (!sessionId) {
@@ -1285,7 +1629,7 @@ app.post("/ssh/file_manager/ssh/createFile", async (req, res) => {
 });
 
 app.post("/ssh/file_manager/ssh/createFolder", async (req, res) => {
-  const { sessionId, path: folderPath, folderName, hostId, userId } = req.body;
+  const { sessionId, path: folderPath, folderName } = req.body;
   const sshConn = sshSessions[sessionId];
 
   if (!sessionId) {
@@ -1386,7 +1730,7 @@ app.post("/ssh/file_manager/ssh/createFolder", async (req, res) => {
 });
 
 app.delete("/ssh/file_manager/ssh/deleteItem", async (req, res) => {
-  const { sessionId, path: itemPath, isDirectory, hostId, userId } = req.body;
+  const { sessionId, path: itemPath, isDirectory } = req.body;
   const sshConn = sshSessions[sessionId];
 
   if (!sessionId) {
@@ -1488,7 +1832,7 @@ app.delete("/ssh/file_manager/ssh/deleteItem", async (req, res) => {
 });
 
 app.put("/ssh/file_manager/ssh/renameItem", async (req, res) => {
-  const { sessionId, oldPath, newName, hostId, userId } = req.body;
+  const { sessionId, oldPath, newName } = req.body;
   const sshConn = sshSessions[sessionId];
 
   if (!sessionId) {
@@ -1596,7 +1940,7 @@ app.put("/ssh/file_manager/ssh/renameItem", async (req, res) => {
 });
 
 app.put("/ssh/file_manager/ssh/moveItem", async (req, res) => {
-  const { sessionId, oldPath, newPath, hostId, userId } = req.body;
+  const { sessionId, oldPath, newPath } = req.body;
   const sshConn = sshSessions[sessionId];
 
   if (!sessionId) {
@@ -1985,7 +2329,7 @@ app.post("/ssh/file_manager/ssh/copyItem", async (req, res) => {
 });
 
 app.post("/ssh/file_manager/ssh/executeFile", async (req, res) => {
-  const { sessionId, filePath, hostId, userId } = req.body;
+  const { sessionId, filePath } = req.body;
   const sshConn = sshSessions[sessionId];
 
   if (!sshConn || !sshConn.isConnected) {
@@ -2022,7 +2366,7 @@ app.post("/ssh/file_manager/ssh/executeFile", async (req, res) => {
       checkResult += data.toString();
     });
 
-    checkStream.on("close", (code) => {
+    checkStream.on("close", () => {
       if (!checkResult.includes("EXECUTABLE")) {
         return res.status(400).json({ error: "File is not executable" });
       }

src/backend/ssh/server-stats.ts

@@ -9,6 +9,7 @@ import { eq, and } from "drizzle-orm";
 import { statsLogger } from "../utils/logger.js";
 import { SimpleDBOps } from "../utils/simple-db-ops.js";
 import { AuthManager } from "../utils/auth-manager.js";
+import type { AuthenticatedRequest } from "../../types/index.js";
 
 interface PooledConnection {
   client: Client;
@@ -60,7 +61,7 @@ class SSHConnectionPool {
       return client;
     }
 
-    return new Promise((resolve, reject) => {
+    return new Promise((resolve) => {
       const checkAvailable = () => {
         const available = connections.find((conn) => !conn.inUse);
         if (available) {
@@ -95,6 +96,44 @@ class SSHConnectionPool {
         reject(err);
       });
 
+      client.on(
+        "keyboard-interactive",
+        (
+          name: string,
+          instructions: string,
+          instructionsLang: string,
+          prompts: Array<{ prompt: string; echo: boolean }>,
+          finish: (responses: string[]) => void,
+        ) => {
+          const totpPrompt = prompts.find((p) =>
+            /verification code|verification_code|token|otp|2fa|authenticator|google.*auth/i.test(
+              p.prompt,
+            ),
+          );
+
+          if (totpPrompt) {
+            statsLogger.warn(
+              `Server Stats cannot handle TOTP for host ${host.ip}. Connection will fail.`,
+              {
+                operation: "server_stats_totp_detected",
+                hostId: host.id,
+              },
+            );
+            client.end();
+            reject(
+              new Error(
+                "TOTP authentication required but not supported in Server Stats",
+              ),
+            );
+          } else if (host.password) {
+            const responses = prompts.map(() => host.password || "");
+            finish(responses);
+          } else {
+            finish(prompts.map(() => ""));
+          }
+        },
+      );
+
       try {
         client.connect(buildSshConfig(host));
       } catch (err) {
@@ -123,7 +162,9 @@ class SSHConnectionPool {
         if (!conn.inUse && now - conn.lastUsed > maxAge) {
           try {
             conn.client.end();
-          } catch {}
+          } catch {
+            // Ignore errors when closing stale connections
+          }
           return false;
         }
         return true;
@@ -143,7 +184,9 @@ class SSHConnectionPool {
       for (const conn of connections) {
         try {
           conn.client.end();
-        } catch {}
+        } catch {
+          // Ignore errors when closing connections during cleanup
+        }
       }
     }
     this.connections.clear();
@@ -151,7 +194,7 @@ class SSHConnectionPool {
 }
 
 class RequestQueue {
-  private queues = new Map<number, Array<() => Promise<any>>>();
+  private queues = new Map<number, Array<() => Promise<unknown>>>();
   private processing = new Set<number>();
 
   async queueRequest<T>(hostId: number, request: () => Promise<T>): Promise<T> {
@@ -181,7 +224,9 @@ class RequestQueue {
       if (request) {
         try {
           await request();
-        } catch (error) {}
+        } catch {
+          // Ignore errors from queued requests
+        }
       }
     }
 
@@ -193,7 +238,7 @@ class RequestQueue {
 }
 
 interface CachedMetrics {
-  data: any;
+  data: unknown;
   timestamp: number;
   hostId: number;
 }
@@ -202,7 +247,7 @@ class MetricsCache {
   private cache = new Map<number, CachedMetrics>();
   private ttl = 30000;
 
-  get(hostId: number): any | null {
+  get(hostId: number): unknown | null {
     const cached = this.cache.get(hostId);
     if (cached && Date.now() - cached.timestamp < this.ttl) {
       return cached.data;
@@ -210,7 +255,7 @@ class MetricsCache {
     return null;
   }
 
-  set(hostId: number, data: any): void {
+  set(hostId: number, data: unknown): void {
     this.cache.set(hostId, {
       data,
       timestamp: Date.now(),
@@ -253,7 +298,8 @@ interface SSHHostWithCredentials {
   enableTunnel: boolean;
   enableFileManager: boolean;
   defaultPath: string;
-  tunnelConnections: any[];
+  tunnelConnections: unknown[];
+  statsConfig?: string;
   createdAt: string;
   updatedAt: string;
   userId: string;
@@ -387,11 +433,11 @@ async function fetchHostById(
 }
 
 async function resolveHostCredentials(
-  host: any,
+  host: Record<string, unknown>,
   userId: string,
 ): Promise<SSHHostWithCredentials | undefined> {
   try {
-    const baseHost: any = {
+    const baseHost: Record<string, unknown> = {
       id: host.id,
       name: host.name,
       ip: host.ip,
@@ -411,8 +457,9 @@ async function resolveHostCredentials(
       enableFileManager: !!host.enableFileManager,
       defaultPath: host.defaultPath || "/",
       tunnelConnections: host.tunnelConnections
-        ? JSON.parse(host.tunnelConnections)
+        ? JSON.parse(host.tunnelConnections as string)
         : [],
+      statsConfig: host.statsConfig || undefined,
       createdAt: host.createdAt,
       updatedAt: host.updatedAt,
       userId: host.userId,
@@ -426,7 +473,7 @@ async function resolveHostCredentials(
             .from(sshCredentials)
             .where(
               and(
-                eq(sshCredentials.id, host.credentialId),
+                eq(sshCredentials.id, host.credentialId as number),
                 eq(sshCredentials.userId, userId),
               ),
             ),
@@ -466,7 +513,7 @@ async function resolveHostCredentials(
       addLegacyCredentials(baseHost, host);
     }
 
-    return baseHost;
+    return baseHost as unknown as SSHHostWithCredentials;
   } catch (error) {
     statsLogger.error(
       `Failed to resolve host credentials for host ${host.id}: ${error instanceof Error ? error.message : "Unknown error"}`,
@@ -475,7 +522,10 @@ async function resolveHostCredentials(
   }
 }
 
-function addLegacyCredentials(baseHost: any, host: any): void {
+function addLegacyCredentials(
+  baseHost: Record<string, unknown>,
+  host: Record<string, unknown>,
+): void {
   baseHost.password = host.password || null;
   baseHost.key = host.key || null;
   baseHost.keyPassword = host.key_password || host.keyPassword || null;
@@ -487,6 +537,7 @@ function buildSshConfig(host: SSHHostWithCredentials): ConnectConfig {
     host: host.ip,
     port: host.port || 22,
     username: host.username || "root",
+    tryKeyboard: true,
     readyTimeout: 10_000,
     algorithms: {
       kex: [
@@ -526,7 +577,7 @@ function buildSshConfig(host: SSHHostWithCredentials): ConnectConfig {
     if (!host.password) {
       throw new Error(`No password available for host ${host.ip}`);
     }
-    (base as any).password = host.password;
+    base.password = host.password;
   } else if (host.authType === "key") {
     if (!host.key) {
       throw new Error(`No SSH key available for host ${host.ip}`);
@@ -542,10 +593,13 @@ function buildSshConfig(host: SSHHostWithCredentials): ConnectConfig {
         .replace(/\r\n/g, "\n")
         .replace(/\r/g, "\n");
 
-      (base as any).privateKey = Buffer.from(cleanKey, "utf8");
+      (base as Record<string, unknown>).privateKey = Buffer.from(
+        cleanKey,
+        "utf8",
+      );
 
       if (host.keyPassword) {
-        (base as any).passphrase = host.keyPassword;
+        (base as Record<string, unknown>).passphrase = host.keyPassword;
       }
     } catch (keyError) {
       statsLogger.error(
@@ -643,175 +697,387 @@ async function collectMetrics(host: SSHHostWithCredentials): Promise<{
     percent: number | null;
     usedHuman: string | null;
     totalHuman: string | null;
+    availableHuman: string | null;
+  };
+  network: {
+    interfaces: Array<{
+      name: string;
+      ip: string;
+      state: string;
+      rxBytes: string | null;
+      txBytes: string | null;
+    }>;
+  };
+  uptime: {
+    seconds: number | null;
+    formatted: string | null;
+  };
+  processes: {
+    total: number | null;
+    running: number | null;
+    top: Array<{
+      pid: string;
+      user: string;
+      cpu: string;
+      mem: string;
+      command: string;
+    }>;
+  };
+  system: {
+    hostname: string | null;
+    kernel: string | null;
+    os: string | null;
   };
 }> {
   const cached = metricsCache.get(host.id);
   if (cached) {
-    return cached;
+    return cached as ReturnType<typeof collectMetrics> extends Promise<infer T>
+      ? T
+      : never;
   }
 
   return requestQueue.queueRequest(host.id, async () => {
-    return withSshConnection(host, async (client) => {
+    try {
-      let cpuPercent: number | null = null;
+      return await withSshConnection(host, async (client) => {
-      let cores: number | null = null;
+        let cpuPercent: number | null = null;
-      let loadTriplet: [number, number, number] | null = null;
+        let cores: number | null = null;
+        let loadTriplet: [number, number, number] | null = null;
 
-      try {
+        try {
-        const [stat1, loadAvgOut, coresOut] = await Promise.all([
+          const [stat1, loadAvgOut, coresOut] = await Promise.all([
-          execCommand(client, "cat /proc/stat"),
+            execCommand(client, "cat /proc/stat"),
-          execCommand(client, "cat /proc/loadavg"),
+            execCommand(client, "cat /proc/loadavg"),
-          execCommand(
+            execCommand(
-            client,
+              client,
-            "nproc 2>/dev/null || grep -c ^processor /proc/cpuinfo",
+              "nproc 2>/dev/null || grep -c ^processor /proc/cpuinfo",
-          ),
+            ),
-        ]);
+          ]);
 
-        await new Promise((r) => setTimeout(r, 500));
+          await new Promise((r) => setTimeout(r, 500));
-        const stat2 = await execCommand(client, "cat /proc/stat");
+          const stat2 = await execCommand(client, "cat /proc/stat");
 
-        const cpuLine1 = (
+          const cpuLine1 = (
-          stat1.stdout.split("\n").find((l) => l.startsWith("cpu ")) || ""
+            stat1.stdout.split("\n").find((l) => l.startsWith("cpu ")) || ""
-        ).trim();
+          ).trim();
-        const cpuLine2 = (
+          const cpuLine2 = (
-          stat2.stdout.split("\n").find((l) => l.startsWith("cpu ")) || ""
+            stat2.stdout.split("\n").find((l) => l.startsWith("cpu ")) || ""
-        ).trim();
+          ).trim();
-        const a = parseCpuLine(cpuLine1);
+          const a = parseCpuLine(cpuLine1);
-        const b = parseCpuLine(cpuLine2);
+          const b = parseCpuLine(cpuLine2);
-        if (a && b) {
+          if (a && b) {
-          const totalDiff = b.total - a.total;
+            const totalDiff = b.total - a.total;
-          const idleDiff = b.idle - a.idle;
+            const idleDiff = b.idle - a.idle;
-          const used = totalDiff - idleDiff;
+            const used = totalDiff - idleDiff;
-          if (totalDiff > 0)
+            if (totalDiff > 0)
-            cpuPercent = Math.max(0, Math.min(100, (used / totalDiff) * 100));
+              cpuPercent = Math.max(0, Math.min(100, (used / totalDiff) * 100));
-        }
-
-        const laParts = loadAvgOut.stdout.trim().split(/\s+/);
-        if (laParts.length >= 3) {
-          loadTriplet = [
-            Number(laParts[0]),
-            Number(laParts[1]),
-            Number(laParts[2]),
-          ].map((v) => (Number.isFinite(v) ? Number(v) : 0)) as [
-            number,
-            number,
-            number,
-          ];
-        }
-
-        const coresNum = Number((coresOut.stdout || "").trim());
-        cores = Number.isFinite(coresNum) && coresNum > 0 ? coresNum : null;
-      } catch (e) {
-        statsLogger.warn(
-          `Failed to collect CPU metrics for host ${host.id}`,
-          e,
-        );
-        cpuPercent = null;
-        cores = null;
-        loadTriplet = null;
-      }
-
-      let memPercent: number | null = null;
-      let usedGiB: number | null = null;
-      let totalGiB: number | null = null;
-      try {
-        const memInfo = await execCommand(client, "cat /proc/meminfo");
-        const lines = memInfo.stdout.split("\n");
-        const getVal = (key: string) => {
-          const line = lines.find((l) => l.startsWith(key));
-          if (!line) return null;
-          const m = line.match(/\d+/);
-          return m ? Number(m[0]) : null;
-        };
-        const totalKb = getVal("MemTotal:");
-        const availKb = getVal("MemAvailable:");
-        if (totalKb && availKb && totalKb > 0) {
-          const usedKb = totalKb - availKb;
-          memPercent = Math.max(0, Math.min(100, (usedKb / totalKb) * 100));
-          usedGiB = kibToGiB(usedKb);
-          totalGiB = kibToGiB(totalKb);
-        }
-      } catch (e) {
-        statsLogger.warn(
-          `Failed to collect memory metrics for host ${host.id}`,
-          e,
-        );
-        memPercent = null;
-        usedGiB = null;
-        totalGiB = null;
-      }
-
-      let diskPercent: number | null = null;
-      let usedHuman: string | null = null;
-      let totalHuman: string | null = null;
-      let availableHuman: string | null = null;
-      try {
-        const [diskOutHuman, diskOutBytes] = await Promise.all([
-          execCommand(client, "df -h -P / | tail -n +2"),
-          execCommand(client, "df -B1 -P / | tail -n +2"),
-        ]);
-
-        const humanLine =
-          diskOutHuman.stdout
-            .split("\n")
-            .map((l) => l.trim())
-            .filter(Boolean)[0] || "";
-        const bytesLine =
-          diskOutBytes.stdout
-            .split("\n")
-            .map((l) => l.trim())
-            .filter(Boolean)[0] || "";
-
-        const humanParts = humanLine.split(/\s+/);
-        const bytesParts = bytesLine.split(/\s+/);
-
-        if (humanParts.length >= 6 && bytesParts.length >= 6) {
-          totalHuman = humanParts[1] || null;
-          usedHuman = humanParts[2] || null;
-          availableHuman = humanParts[3] || null;
-
-          const totalBytes = Number(bytesParts[1]);
-          const usedBytes = Number(bytesParts[2]);
-
-          if (
-            Number.isFinite(totalBytes) &&
-            Number.isFinite(usedBytes) &&
-            totalBytes > 0
-          ) {
-            diskPercent = Math.max(
-              0,
-              Math.min(100, (usedBytes / totalBytes) * 100),
-            );
           }
+
+          const laParts = loadAvgOut.stdout.trim().split(/\s+/);
+          if (laParts.length >= 3) {
+            loadTriplet = [
+              Number(laParts[0]),
+              Number(laParts[1]),
+              Number(laParts[2]),
+            ].map((v) => (Number.isFinite(v) ? Number(v) : 0)) as [
+              number,
+              number,
+              number,
+            ];
+          }
+
+          const coresNum = Number((coresOut.stdout || "").trim());
+          cores = Number.isFinite(coresNum) && coresNum > 0 ? coresNum : null;
+        } catch (e) {
+          statsLogger.warn(
+            `Failed to collect CPU metrics for host ${host.id}`,
+            e,
+          );
+          cpuPercent = null;
+          cores = null;
+          loadTriplet = null;
         }
-      } catch (e) {
+
-        statsLogger.warn(
+        let memPercent: number | null = null;
-          `Failed to collect disk metrics for host ${host.id}`,
+        let usedGiB: number | null = null;
-          e,
+        let totalGiB: number | null = null;
-        );
+        try {
-        diskPercent = null;
+          const memInfo = await execCommand(client, "cat /proc/meminfo");
-        usedHuman = null;
+          const lines = memInfo.stdout.split("\n");
-        totalHuman = null;
+          const getVal = (key: string) => {
-        availableHuman = null;
+            const line = lines.find((l) => l.startsWith(key));
+            if (!line) return null;
+            const m = line.match(/\d+/);
+            return m ? Number(m[0]) : null;
+          };
+          const totalKb = getVal("MemTotal:");
+          const availKb = getVal("MemAvailable:");
+          if (totalKb && availKb && totalKb > 0) {
+            const usedKb = totalKb - availKb;
+            memPercent = Math.max(0, Math.min(100, (usedKb / totalKb) * 100));
+            usedGiB = kibToGiB(usedKb);
+            totalGiB = kibToGiB(totalKb);
+          }
+        } catch (e) {
+          statsLogger.warn(
+            `Failed to collect memory metrics for host ${host.id}`,
+            e,
+          );
+          memPercent = null;
+          usedGiB = null;
+          totalGiB = null;
+        }
+
+        let diskPercent: number | null = null;
+        let usedHuman: string | null = null;
+        let totalHuman: string | null = null;
+        let availableHuman: string | null = null;
+        try {
+          const [diskOutHuman, diskOutBytes] = await Promise.all([
+            execCommand(client, "df -h -P / | tail -n +2"),
+            execCommand(client, "df -B1 -P / | tail -n +2"),
+          ]);
+
+          const humanLine =
+            diskOutHuman.stdout
+              .split("\n")
+              .map((l) => l.trim())
+              .filter(Boolean)[0] || "";
+          const bytesLine =
+            diskOutBytes.stdout
+              .split("\n")
+              .map((l) => l.trim())
+              .filter(Boolean)[0] || "";
+
+          const humanParts = humanLine.split(/\s+/);
+          const bytesParts = bytesLine.split(/\s+/);
+
+          if (humanParts.length >= 6 && bytesParts.length >= 6) {
+            totalHuman = humanParts[1] || null;
+            usedHuman = humanParts[2] || null;
+            availableHuman = humanParts[3] || null;
+
+            const totalBytes = Number(bytesParts[1]);
+            const usedBytes = Number(bytesParts[2]);
+
+            if (
+              Number.isFinite(totalBytes) &&
+              Number.isFinite(usedBytes) &&
+              totalBytes > 0
+            ) {
+              diskPercent = Math.max(
+                0,
+                Math.min(100, (usedBytes / totalBytes) * 100),
+              );
+            }
+          }
+        } catch (e) {
+          statsLogger.warn(
+            `Failed to collect disk metrics for host ${host.id}`,
+            e,
+          );
+          diskPercent = null;
+          usedHuman = null;
+          totalHuman = null;
+          availableHuman = null;
+        }
+
+        // Collect network interfaces
+        const interfaces: Array<{
+          name: string;
+          ip: string;
+          state: string;
+          rxBytes: string | null;
+          txBytes: string | null;
+        }> = [];
+        try {
+          const ifconfigOut = await execCommand(
+            client,
+            "ip -o addr show | awk '{print $2,$4}' | grep -v '^lo'",
+          );
+          const netStatOut = await execCommand(
+            client,
+            "ip -o link show | awk '{print $2,$9}' | sed 's/:$//'",
+          );
+
+          const addrs = ifconfigOut.stdout
+            .split("\n")
+            .map((l) => l.trim())
+            .filter(Boolean);
+          const states = netStatOut.stdout
+            .split("\n")
+            .map((l) => l.trim())
+            .filter(Boolean);
+
+          const ifMap = new Map<string, { ip: string; state: string }>();
+          for (const line of addrs) {
+            const parts = line.split(/\s+/);
+            if (parts.length >= 2) {
+              const name = parts[0];
+              const ip = parts[1].split("/")[0];
+              if (!ifMap.has(name)) ifMap.set(name, { ip, state: "UNKNOWN" });
+            }
+          }
+          for (const line of states) {
+            const parts = line.split(/\s+/);
+            if (parts.length >= 2) {
+              const name = parts[0];
+              const state = parts[1];
+              const existing = ifMap.get(name);
+              if (existing) {
+                existing.state = state;
+              }
+            }
+          }
+
+          for (const [name, data] of ifMap.entries()) {
+            interfaces.push({
+              name,
+              ip: data.ip,
+              state: data.state,
+              rxBytes: null,
+              txBytes: null,
+            });
+          }
+        } catch (e) {
+          statsLogger.warn(
+            `Failed to collect network metrics for host ${host.id}`,
+            e,
+          );
+        }
+
+        // Collect uptime
+        let uptimeSeconds: number | null = null;
+        let uptimeFormatted: string | null = null;
+        try {
+          const uptimeOut = await execCommand(client, "cat /proc/uptime");
+          const uptimeParts = uptimeOut.stdout.trim().split(/\s+/);
+          if (uptimeParts.length >= 1) {
+            uptimeSeconds = Number(uptimeParts[0]);
+            if (Number.isFinite(uptimeSeconds)) {
+              const days = Math.floor(uptimeSeconds / 86400);
+              const hours = Math.floor((uptimeSeconds % 86400) / 3600);
+              const minutes = Math.floor((uptimeSeconds % 3600) / 60);
+              uptimeFormatted = `${days}d ${hours}h ${minutes}m`;
+            }
+          }
+        } catch (e) {
+          statsLogger.warn(`Failed to collect uptime for host ${host.id}`, e);
+        }
+
+        // Collect process information
+        let totalProcesses: number | null = null;
+        let runningProcesses: number | null = null;
+        const topProcesses: Array<{
+          pid: string;
+          user: string;
+          cpu: string;
+          mem: string;
+          command: string;
+        }> = [];
+        try {
+          const psOut = await execCommand(
+            client,
+            "ps aux --sort=-%cpu | head -n 11",
+          );
+          const psLines = psOut.stdout
+            .split("\n")
+            .map((l) => l.trim())
+            .filter(Boolean);
+          if (psLines.length > 1) {
+            for (let i = 1; i < Math.min(psLines.length, 11); i++) {
+              const parts = psLines[i].split(/\s+/);
+              if (parts.length >= 11) {
+                topProcesses.push({
+                  pid: parts[1],
+                  user: parts[0],
+                  cpu: parts[2],
+                  mem: parts[3],
+                  command: parts.slice(10).join(" ").substring(0, 50),
+                });
+              }
+            }
+          }
+
+          const procCount = await execCommand(client, "ps aux | wc -l");
+          const runningCount = await execCommand(
+            client,
+            "ps aux | grep -c ' R '",
+          );
+          totalProcesses = Number(procCount.stdout.trim()) - 1;
+          runningProcesses = Number(runningCount.stdout.trim());
+        } catch (e) {
+          statsLogger.warn(
+            `Failed to collect process info for host ${host.id}`,
+            e,
+          );
+        }
+
+        // Collect system information
+        let hostname: string | null = null;
+        let kernel: string | null = null;
+        let os: string | null = null;
+        try {
+          const hostnameOut = await execCommand(client, "hostname");
+          const kernelOut = await execCommand(client, "uname -r");
+          const osOut = await execCommand(
+            client,
+            "cat /etc/os-release | grep '^PRETTY_NAME=' | cut -d'\"' -f2",
+          );
+
+          hostname = hostnameOut.stdout.trim() || null;
+          kernel = kernelOut.stdout.trim() || null;
+          os = osOut.stdout.trim() || null;
+        } catch (e) {
+          statsLogger.warn(
+            `Failed to collect system info for host ${host.id}`,
+            e,
+          );
+        }
+
+        const result = {
+          cpu: { percent: toFixedNum(cpuPercent, 0), cores, load: loadTriplet },
+          memory: {
+            percent: toFixedNum(memPercent, 0),
+            usedGiB: usedGiB ? toFixedNum(usedGiB, 2) : null,
+            totalGiB: totalGiB ? toFixedNum(totalGiB, 2) : null,
+          },
+          disk: {
+            percent: toFixedNum(diskPercent, 0),
+            usedHuman,
+            totalHuman,
+            availableHuman,
+          },
+          network: {
+            interfaces,
+          },
+          uptime: {
+            seconds: uptimeSeconds,
+            formatted: uptimeFormatted,
+          },
+          processes: {
+            total: totalProcesses,
+            running: runningProcesses,
+            top: topProcesses,
+          },
+          system: {
+            hostname,
+            kernel,
+            os,
+          },
+        };
+
+        metricsCache.set(host.id, result);
+        return result;
+      });
+    } catch (error) {
+      if (
+        error instanceof Error &&
+        error.message.includes("TOTP authentication required")
+      ) {
+        throw error;
       }
-
+      throw error;
-      const result = {
+    }
-        cpu: { percent: toFixedNum(cpuPercent, 0), cores, load: loadTriplet },
-        memory: {
-          percent: toFixedNum(memPercent, 0),
-          usedGiB: usedGiB ? toFixedNum(usedGiB, 2) : null,
-          totalGiB: totalGiB ? toFixedNum(totalGiB, 2) : null,
-        },
-        disk: {
-          percent: toFixedNum(diskPercent, 0),
-          usedHuman,
-          totalHuman,
-          availableHuman,
-        },
-      };
-
-      metricsCache.set(host.id, result);
-      return result;
-    });
   });
 }
 
@@ -829,7 +1095,9 @@ function tcpPing(
       settled = true;
       try {
         socket.destroy();
-      } catch {}
+      } catch {
+        // Ignore errors when destroying socket
+      }
       resolve(result);
     };
 
@@ -859,8 +1127,6 @@ async function pollStatusesOnce(userId?: string): Promise<void> {
     return;
   }
 
-  const now = new Date().toISOString();
-
   const checks = hosts.map(async (h) => {
     const isOnline = await tcpPing(h.ip, h.port, 5000);
     const now = new Date().toISOString();
@@ -886,7 +1152,7 @@ async function pollStatusesOnce(userId?: string): Promise<void> {
 }
 
 app.get("/status", async (req, res) => {
-  const userId = (req as any).userId;
+  const userId = (req as AuthenticatedRequest).userId;
 
   if (!SimpleDBOps.isUserDataUnlocked(userId)) {
     return res.status(401).json({
@@ -907,7 +1173,7 @@ app.get("/status", async (req, res) => {
 
 app.get("/status/:id", validateHostId, async (req, res) => {
   const id = Number(req.params.id);
-  const userId = (req as any).userId;
+  const userId = (req as AuthenticatedRequest).userId;
 
   if (!SimpleDBOps.isUserDataUnlocked(userId)) {
     return res.status(401).json({
@@ -938,7 +1204,7 @@ app.get("/status/:id", validateHostId, async (req, res) => {
 });
 
 app.post("/refresh", async (req, res) => {
-  const userId = (req as any).userId;
+  const userId = (req as AuthenticatedRequest).userId;
 
   if (!SimpleDBOps.isUserDataUnlocked(userId)) {
     return res.status(401).json({
@@ -953,7 +1219,7 @@ app.post("/refresh", async (req, res) => {
 
 app.get("/metrics/:id", validateHostId, async (req, res) => {
   const id = Number(req.params.id);
-  const userId = (req as any).userId;
+  const userId = (req as AuthenticatedRequest).userId;
 
   if (!SimpleDBOps.isUserDataUnlocked(userId)) {
     return res.status(401).json({
@@ -974,7 +1240,16 @@ app.get("/metrics/:id", validateHostId, async (req, res) => {
         error: "Host is offline",
         cpu: { percent: null, cores: null, load: null },
         memory: { percent: null, usedGiB: null, totalGiB: null },
-        disk: { percent: null, usedHuman: null, totalHuman: null },
+        disk: {
+          percent: null,
+          usedHuman: null,
+          totalHuman: null,
+          availableHuman: null,
+        },
+        network: { interfaces: [] },
+        uptime: { seconds: null, formatted: null },
+        processes: { total: null, running: null, top: [] },
+        system: { hostname: null, kernel: null, os: null },
         lastChecked: new Date().toISOString(),
       });
     }
@@ -982,6 +1257,29 @@ app.get("/metrics/:id", validateHostId, async (req, res) => {
     const metrics = await collectMetrics(host);
     res.json({ ...metrics, lastChecked: new Date().toISOString() });
   } catch (err) {
+    if (
+      err instanceof Error &&
+      err.message.includes("TOTP authentication required")
+    ) {
+      return res.status(403).json({
+        error: "TOTP_REQUIRED",
+        message: "Server Stats unavailable for TOTP-enabled servers",
+        cpu: { percent: null, cores: null, load: null },
+        memory: { percent: null, usedGiB: null, totalGiB: null },
+        disk: {
+          percent: null,
+          usedHuman: null,
+          totalHuman: null,
+          availableHuman: null,
+        },
+        network: { interfaces: [] },
+        uptime: { seconds: null, formatted: null },
+        processes: { total: null, running: null, top: [] },
+        system: { hostname: null, kernel: null, os: null },
+        lastChecked: new Date().toISOString(),
+      });
+    }
+
     statsLogger.error("Failed to collect metrics", err);
 
     if (err instanceof Error && err.message.includes("timeout")) {
@@ -989,7 +1287,16 @@ app.get("/metrics/:id", validateHostId, async (req, res) => {
         error: "Metrics collection timeout",
         cpu: { percent: null, cores: null, load: null },
         memory: { percent: null, usedGiB: null, totalGiB: null },
-        disk: { percent: null, usedHuman: null, totalHuman: null },
+        disk: {
+          percent: null,
+          usedHuman: null,
+          totalHuman: null,
+          availableHuman: null,
+        },
+        network: { interfaces: [] },
+        uptime: { seconds: null, formatted: null },
+        processes: { total: null, running: null, top: [] },
+        system: { hostname: null, kernel: null, os: null },
         lastChecked: new Date().toISOString(),
       });
     }
@@ -998,7 +1305,16 @@ app.get("/metrics/:id", validateHostId, async (req, res) => {
       error: "Failed to collect metrics",
       cpu: { percent: null, cores: null, load: null },
       memory: { percent: null, usedGiB: null, totalGiB: null },
-      disk: { percent: null, usedHuman: null, totalHuman: null },
+      disk: {
+        percent: null,
+        usedHuman: null,
+        totalHuman: null,
+        availableHuman: null,
+      },
+      network: { interfaces: [] },
+      uptime: { seconds: null, formatted: null },
+      processes: { total: null, running: null, top: [] },
+      system: { hostname: null, kernel: null, os: null },
       lastChecked: new Date().toISOString(),
     });
   }

src/backend/ssh/terminal.ts

@@ -1,14 +1,56 @@
 import { WebSocketServer, WebSocket, type RawData } from "ws";
-import { Client, type ClientChannel, type PseudoTtyOptions } from "ssh2";
+import {
+  Client,
+  type ClientChannel,
+  type PseudoTtyOptions,
+  type ConnectConfig,
+} from "ssh2";
 import { parse as parseUrl } from "url";
+import axios from "axios";
 import { getDb } from "../database/db/index.js";
-import { sshCredentials } from "../database/db/schema.js";
+import { sshCredentials, sshData } from "../database/db/schema.js";
 import { eq, and } from "drizzle-orm";
 import { sshLogger } from "../utils/logger.js";
 import { SimpleDBOps } from "../utils/simple-db-ops.js";
 import { AuthManager } from "../utils/auth-manager.js";
 import { UserCrypto } from "../utils/user-crypto.js";
 
+interface ConnectToHostData {
+  cols: number;
+  rows: number;
+  hostConfig: {
+    id: number;
+    ip: string;
+    port: number;
+    username: string;
+    password?: string;
+    key?: string;
+    keyPassword?: string;
+    keyType?: string;
+    authType?: string;
+    credentialId?: number;
+    userId?: string;
+  };
+  initialPath?: string;
+  executeCommand?: string;
+}
+
+interface ResizeData {
+  cols: number;
+  rows: number;
+}
+
+interface TOTPResponseData {
+  code?: string;
+}
+
+interface WebSocketMessage {
+  type: string;
+  data?: ConnectToHostData | ResizeData | TOTPResponseData | string | unknown;
+  code?: string;
+  [key: string]: unknown;
+}
+
 const authManager = AuthManager.getInstance();
 const userCrypto = UserCrypto.getInstance();
 
@@ -79,7 +121,6 @@ const wss = new WebSocketServer({
 
 wss.on("connection", async (ws: WebSocket, req) => {
   let userId: string | undefined;
-  let userPayload: any;
 
   try {
     const url = parseUrl(req.url!, true);
@@ -113,7 +154,6 @@ wss.on("connection", async (ws: WebSocket, req) => {
     }
 
     userId = payload.userId;
-    userPayload = payload;
   } catch (error) {
     sshLogger.error(
       "WebSocket JWT verification failed during connection",
@@ -154,6 +194,8 @@ wss.on("connection", async (ws: WebSocket, req) => {
   let sshConn: Client | null = null;
   let sshStream: ClientChannel | null = null;
   let pingInterval: NodeJS.Timeout | null = null;
+  let keyboardInteractiveFinish: ((responses: string[]) => void) | null = null;
+  let totpPromptSent = false;
 
   ws.on("close", () => {
     const userWs = userConnections.get(userId);
@@ -186,9 +228,9 @@ wss.on("connection", async (ws: WebSocket, req) => {
       return;
     }
 
-    let parsed: any;
+    let parsed: WebSocketMessage;
     try {
-      parsed = JSON.parse(msg.toString());
+      parsed = JSON.parse(msg.toString()) as WebSocketMessage;
     } catch (e) {
       sshLogger.error("Invalid JSON received", e, {
         operation: "websocket_message_invalid_json",
@@ -202,16 +244,17 @@ wss.on("connection", async (ws: WebSocket, req) => {
     const { type, data } = parsed;
 
     switch (type) {
-      case "connectToHost":
+      case "connectToHost": {
-        if (data.hostConfig) {
+        const connectData = data as ConnectToHostData;
-          data.hostConfig.userId = userId;
+        if (connectData.hostConfig) {
+          connectData.hostConfig.userId = userId;
         }
-        handleConnectToHost(data).catch((error) => {
+        handleConnectToHost(connectData).catch((error) => {
           sshLogger.error("Failed to connect to host", error, {
             operation: "ssh_connect",
             userId,
-            hostId: data.hostConfig?.id,
+            hostId: connectData.hostConfig?.id,
-            ip: data.hostConfig?.ip,
+            ip: connectData.hostConfig?.ip,
           });
           ws.send(
             JSON.stringify({
@@ -223,40 +266,77 @@ wss.on("connection", async (ws: WebSocket, req) => {
           );
         });
         break;
+      }
 
-      case "resize":
+      case "resize": {
-        handleResize(data);
+        const resizeData = data as ResizeData;
+        handleResize(resizeData);
         break;
+      }
 
       case "disconnect":
         cleanupSSH();
         break;
 
-      case "input":
+      case "input": {
+        const inputData = data as string;
         if (sshStream) {
-          if (data === "\t") {
+          if (inputData === "\t") {
-            sshStream.write(data);
+            sshStream.write(inputData);
-          } else if (data.startsWith("\x1b")) {
+          } else if (
-            sshStream.write(data);
+            typeof inputData === "string" &&
+            inputData.startsWith("\x1b")
+          ) {
+            sshStream.write(inputData);
           } else {
             try {
-              sshStream.write(Buffer.from(data, "utf8"));
+              sshStream.write(Buffer.from(inputData, "utf8"));
             } catch (error) {
               sshLogger.error("Error writing input to SSH stream", error, {
                 operation: "ssh_input_encoding",
                 userId,
-                dataLength: data.length,
+                dataLength: inputData.length,
               });
-              sshStream.write(Buffer.from(data, "latin1"));
+              sshStream.write(Buffer.from(inputData, "latin1"));
             }
           }
         }
         break;
+      }
 
       case "ping":
         ws.send(JSON.stringify({ type: "pong" }));
         break;
 
+      case "totp_response": {
+        const totpData = data as TOTPResponseData;
+        if (keyboardInteractiveFinish && totpData?.code) {
+          const totpCode = totpData.code;
+          sshLogger.info("TOTP code received from user", {
+            operation: "totp_response",
+            userId,
+            codeLength: totpCode.length,
+          });
+
+          keyboardInteractiveFinish([totpCode]);
+          keyboardInteractiveFinish = null;
+        } else {
+          sshLogger.warn("TOTP response received but no callback available", {
+            operation: "totp_response_error",
+            userId,
+            hasCallback: !!keyboardInteractiveFinish,
+            hasCode: !!totpData?.code,
+          });
+          ws.send(
+            JSON.stringify({
+              type: "error",
+              message: "TOTP authentication state lost. Please reconnect.",
+            }),
+          );
+        }
+        break;
+      }
+
       default:
         sshLogger.warn("Unknown message type received", {
           operation: "websocket_message_unknown_type",
@@ -266,26 +346,8 @@ wss.on("connection", async (ws: WebSocket, req) => {
     }
   });
 
-  async function handleConnectToHost(data: {
+  async function handleConnectToHost(data: ConnectToHostData) {
-    cols: number;
+    const { hostConfig, initialPath, executeCommand } = data;
-    rows: number;
-    hostConfig: {
-      id: number;
-      ip: string;
-      port: number;
-      username: string;
-      password?: string;
-      key?: string;
-      keyPassword?: string;
-      keyType?: string;
-      authType?: string;
-      credentialId?: number;
-      userId?: string;
-    };
-    initialPath?: string;
-    executeCommand?: string;
-  }) {
-    const { cols, rows, hostConfig, initialPath, executeCommand } = data;
     const {
       id,
       ip,
@@ -375,12 +437,19 @@ wss.on("connection", async (ws: WebSocket, req) => {
         if (credentials.length > 0) {
           const credential = credentials[0];
           resolvedCredentials = {
-            password: credential.password,
+            password: credential.password as string | undefined,
-            key:
+            key: (credential.private_key ||
-              credential.private_key || credential.privateKey || credential.key,
+              credential.privateKey ||
-            keyPassword: credential.key_password || credential.keyPassword,
+              credential.key) as string | undefined,
-            keyType: credential.key_type || credential.keyType,
+            keyPassword: (credential.key_password || credential.keyPassword) as
-            authType: credential.auth_type || credential.authType,
+              | string
+              | undefined,
+            keyType: (credential.key_type || credential.keyType) as
+              | string
+              | undefined,
+            authType: (credential.auth_type || credential.authType) as
+              | string
+              | undefined,
           };
         } else {
           sshLogger.warn(`No credentials found for host ${id}`, {
@@ -410,95 +479,155 @@ wss.on("connection", async (ws: WebSocket, req) => {
     sshConn.on("ready", () => {
       clearTimeout(connectionTimeout);
 
-      sshConn!.shell(
+      // Small delay to let connection stabilize after keyboard-interactive auth
-        {
+      // This helps prevent "No response from server" errors with TOTP
-          rows: data.rows,
+      setTimeout(() => {
-          cols: data.cols,
+        sshConn!.shell(
-          term: "xterm-256color",
+          {
-        } as PseudoTtyOptions,
+            rows: data.rows,
-        (err, stream) => {
+            cols: data.cols,
-          if (err) {
+            term: "xterm-256color",
-            sshLogger.error("Shell error", err, {
+          } as PseudoTtyOptions,
-              operation: "ssh_shell",
+          (err, stream) => {
-              hostId: id,
+            if (err) {
-              ip,
+              sshLogger.error("Shell error", err, {
-              port,
+                operation: "ssh_shell",
-              username,
-            });
-            ws.send(
-              JSON.stringify({
-                type: "error",
-                message: "Shell error: " + err.message,
-              }),
-            );
-            return;
-          }
-
-          sshStream = stream;
-
-          stream.on("data", (data: Buffer) => {
-            try {
-              const utf8String = data.toString("utf-8");
-              ws.send(JSON.stringify({ type: "data", data: utf8String }));
-            } catch (error) {
-              sshLogger.error("Error encoding terminal data", error, {
-                operation: "terminal_data_encoding",
                 hostId: id,
-                dataLength: data.length,
+                ip,
+                port,
+                username,
               });
               ws.send(
                 JSON.stringify({
-                  type: "data",
+                  type: "error",
-                  data: data.toString("latin1"),
+                  message: "Shell error: " + err.message,
                 }),
               );
+              return;
             }
-          });
 
-          stream.on("close", () => {
+            sshStream = stream;
-            ws.send(
-              JSON.stringify({
-                type: "disconnected",
-                message: "Connection lost",
-              }),
-            );
-          });
 
-          stream.on("error", (err: Error) => {
+            stream.on("data", (data: Buffer) => {
-            sshLogger.error("SSH stream error", err, {
+              try {
-              operation: "ssh_stream",
+                const utf8String = data.toString("utf-8");
-              hostId: id,
+                ws.send(JSON.stringify({ type: "data", data: utf8String }));
-              ip,
+              } catch (error) {
-              port,
+                sshLogger.error("Error encoding terminal data", error, {
-              username,
+                  operation: "terminal_data_encoding",
+                  hostId: id,
+                  dataLength: data.length,
+                });
+                ws.send(
+                  JSON.stringify({
+                    type: "data",
+                    data: data.toString("latin1"),
+                  }),
+                );
+              }
             });
+
+            stream.on("close", () => {
+              ws.send(
+                JSON.stringify({
+                  type: "disconnected",
+                  message: "Connection lost",
+                }),
+              );
+            });
+
+            stream.on("error", (err: Error) => {
+              sshLogger.error("SSH stream error", err, {
+                operation: "ssh_stream",
+                hostId: id,
+                ip,
+                port,
+                username,
+              });
+              ws.send(
+                JSON.stringify({
+                  type: "error",
+                  message: "SSH stream error: " + err.message,
+                }),
+              );
+            });
+
+            setupPingInterval();
+
+            if (initialPath && initialPath.trim() !== "") {
+              const cdCommand = `cd "${initialPath.replace(/"/g, '\\"')}" && pwd\n`;
+              stream.write(cdCommand);
+            }
+
+            if (executeCommand && executeCommand.trim() !== "") {
+              setTimeout(() => {
+                const command = `${executeCommand}\n`;
+                stream.write(command);
+              }, 500);
+            }
+
             ws.send(
-              JSON.stringify({
+              JSON.stringify({ type: "connected", message: "SSH connected" }),
-                type: "error",
-                message: "SSH stream error: " + err.message,
-              }),
             );
-          });
 
-          setupPingInterval();
+            // Log activity to homepage API
+            if (id && hostConfig.userId) {
+              (async () => {
+                try {
+                  // Fetch host name from database
+                  const hosts = await SimpleDBOps.select(
+                    getDb()
+                      .select()
+                      .from(sshData)
+                      .where(
+                        and(
+                          eq(sshData.id, id),
+                          eq(sshData.userId, hostConfig.userId!),
+                        ),
+                      ),
+                    "ssh_data",
+                    hostConfig.userId!,
+                  );
 
-          if (initialPath && initialPath.trim() !== "") {
+                  const hostName =
-            const cdCommand = `cd "${initialPath.replace(/"/g, '\\"')}" && pwd\n`;
+                    hosts.length > 0 && hosts[0].name
-            stream.write(cdCommand);
+                      ? hosts[0].name
-          }
+                      : `${username}@${ip}:${port}`;
 
-          if (executeCommand && executeCommand.trim() !== "") {
+                  await axios.post(
-            setTimeout(() => {
+                    "http://localhost:30006/activity/log",
-              const command = `${executeCommand}\n`;
+                    {
-              stream.write(command);
+                      type: "terminal",
-            }, 500);
+                      hostId: id,
-          }
+                      hostName,
+                    },
+                    {
+                      headers: {
+                        Authorization: `Bearer ${await authManager.generateJWTToken(hostConfig.userId!)}`,
+                      },
+                    },
+                  );
 
-          ws.send(
+                  sshLogger.info("Terminal activity logged", {
-            JSON.stringify({ type: "connected", message: "SSH connected" }),
+                    operation: "activity_log",
-          );
+                    userId: hostConfig.userId,
-        },
+                    hostId: id,
-      );
+                    hostName,
+                  });
+                } catch (error) {
+                  sshLogger.warn("Failed to log terminal activity", {
+                    operation: "activity_log_error",
+                    userId: hostConfig.userId,
+                    hostId: id,
+                    error:
+                      error instanceof Error ? error.message : "Unknown error",
+                  });
+                }
+              })();
+            }
+          },
+        );
+      }, 100); // Small delay to stabilize connection after keyboard-interactive auth
     });
 
     sshConn.on("error", (err: Error) => {
@@ -557,16 +686,101 @@ wss.on("connection", async (ws: WebSocket, req) => {
       cleanupSSH(connectionTimeout);
     });
 
+    sshConn.on(
+      "keyboard-interactive",
+      (
+        name: string,
+        instructions: string,
+        instructionsLang: string,
+        prompts: Array<{ prompt: string; echo: boolean }>,
+        finish: (responses: string[]) => void,
+      ) => {
+        const promptTexts = prompts.map((p) => p.prompt);
+        sshLogger.info("Keyboard-interactive authentication requested", {
+          operation: "ssh_keyboard_interactive",
+          hostId: id,
+          promptsCount: prompts.length,
+          instructions: instructions || "none",
+        });
+        console.log(
+          `[SSH Keyboard-Interactive] Host ${id}: ${prompts.length} prompts:`,
+          promptTexts,
+        );
+
+        const totpPromptIndex = prompts.findIndex((p) =>
+          /verification code|verification_code|token|otp|2fa|authenticator|google.*auth/i.test(
+            p.prompt,
+          ),
+        );
+
+        if (totpPromptIndex !== -1) {
+          if (totpPromptSent) return;
+          totpPromptSent = true;
+
+          keyboardInteractiveFinish = (totpResponses: string[]) => {
+            const totpCode = (totpResponses[0] || "").trim();
+
+            // Respond to ALL prompts, not just TOTP
+            const responses = prompts.map((p, index) => {
+              if (index === totpPromptIndex) {
+                return totpCode;
+              }
+              if (/password/i.test(p.prompt) && resolvedCredentials.password) {
+                return resolvedCredentials.password;
+              }
+              return "";
+            });
+
+            sshLogger.info("TOTP response being sent to SSH server", {
+              operation: "totp_verification",
+              hostId: id,
+              totpCodeLength: totpCode.length,
+              totalPrompts: prompts.length,
+              responsesProvided: responses.filter((r) => r !== "").length,
+            });
+
+            finish(responses);
+          };
+          ws.send(
+            JSON.stringify({
+              type: "totp_required",
+              prompt: prompts[totpPromptIndex].prompt,
+            }),
+          );
+        } else {
+          const responses = prompts.map((p) => {
+            if (/password/i.test(p.prompt) && resolvedCredentials.password) {
+              return resolvedCredentials.password;
+            }
+            return "";
+          });
+
+          sshLogger.info("Responding to keyboard-interactive prompts", {
+            operation: "ssh_keyboard_interactive_response",
+            hostId: id,
+            hasPassword: !!resolvedCredentials.password,
+            responsesProvided: responses.filter((r) => r !== "").length,
+            totalPrompts: prompts.length,
+          });
+
+          console.log(
+            `[SSH Auto Response] Host ${id}: Sending ${responses.length} responses, ${responses.filter((r) => r !== "").length} non-empty`,
+          );
+          finish(responses);
+        }
+      },
+    );
+
     const connectConfig: any = {
       host: ip,
       port,
       username,
+      tryKeyboard: true,
       keepaliveInterval: 30000,
       keepaliveCountMax: 3,
       readyTimeout: 60000,
       tcpKeepAlive: true,
       tcpKeepAliveInitialDelay: 30000,
-
       env: {
         TERM: "xterm-256color",
         LANG: "en_US.UTF-8",
@@ -579,7 +793,6 @@ wss.on("connection", async (ws: WebSocket, req) => {
         LC_COLLATE: "en_US.UTF-8",
         COLORTERM: "truecolor",
       },
-
       algorithms: {
         kex: [
           "diffie-hellman-group14-sha256",
@@ -602,6 +815,15 @@ wss.on("connection", async (ws: WebSocket, req) => {
           "aes256-cbc",
           "3des-cbc",
         ],
+        serverHostKey: [
+          "ssh-rsa",
+          "rsa-sha2-256",
+          "rsa-sha2-512",
+          "ecdsa-sha2-nistp256",
+          "ecdsa-sha2-nistp384",
+          "ecdsa-sha2-nistp521",
+          "ssh-ed25519",
+        ],
         hmac: [
           "hmac-sha2-256-etm@openssh.com",
           "hmac-sha2-512-etm@openssh.com",
@@ -613,15 +835,8 @@ wss.on("connection", async (ws: WebSocket, req) => {
         compress: ["none", "zlib@openssh.com", "zlib"],
       },
     };
-    if (
+
-      resolvedCredentials.authType === "password" &&
+    if (resolvedCredentials.authType === "key" && resolvedCredentials.key) {
-      resolvedCredentials.password
-    ) {
-      connectConfig.password = resolvedCredentials.password;
-    } else if (
-      resolvedCredentials.authType === "key" &&
-      resolvedCredentials.key
-    ) {
       try {
         if (
           !resolvedCredentials.key.includes("-----BEGIN") ||
@@ -640,13 +855,6 @@ wss.on("connection", async (ws: WebSocket, req) => {
         if (resolvedCredentials.keyPassword) {
           connectConfig.passphrase = resolvedCredentials.keyPassword;
         }
-
-        if (
-          resolvedCredentials.keyType &&
-          resolvedCredentials.keyType !== "auto"
-        ) {
-          connectConfig.privateKeyType = resolvedCredentials.keyType;
-        }
       } catch (keyError) {
         sshLogger.error("SSH key format error: " + keyError.message);
         ws.send(
@@ -666,6 +874,22 @@ wss.on("connection", async (ws: WebSocket, req) => {
         }),
       );
       return;
+    } else if (resolvedCredentials.authType === "password") {
+      if (!resolvedCredentials.password) {
+        sshLogger.error(
+          "Password authentication requested but no password provided",
+        );
+        ws.send(
+          JSON.stringify({
+            type: "error",
+            message:
+              "Password authentication requested but no password provided",
+          }),
+        );
+        return;
+      }
+      // Set password to offer both password and keyboard-interactive methods
+      connectConfig.password = resolvedCredentials.password;
     } else {
       sshLogger.error("No valid authentication method provided");
       ws.send(
@@ -680,7 +904,7 @@ wss.on("connection", async (ws: WebSocket, req) => {
     sshConn.connect(connectConfig);
   }
 
-  function handleResize(data: { cols: number; rows: number }) {
+  function handleResize(data: ResizeData) {
     if (sshStream && sshStream.setWindow) {
       sshStream.setWindow(data.rows, data.cols, data.rows, data.cols);
       ws.send(
@@ -702,8 +926,11 @@ wss.on("connection", async (ws: WebSocket, req) => {
     if (sshStream) {
       try {
         sshStream.end();
-      } catch (e: any) {
+      } catch (e: unknown) {
-        sshLogger.error("Error closing stream: " + e.message);
+        sshLogger.error(
+          "Error closing stream: " +
+            (e instanceof Error ? e.message : "Unknown error"),
+        );
       }
       sshStream = null;
     }
@@ -711,11 +938,17 @@ wss.on("connection", async (ws: WebSocket, req) => {
     if (sshConn) {
       try {
         sshConn.end();
-      } catch (e: any) {
+      } catch (e: unknown) {
-        sshLogger.error("Error closing connection: " + e.message);
+        sshLogger.error(
+          "Error closing connection: " +
+            (e instanceof Error ? e.message : "Unknown error"),
+        );
       }
       sshConn = null;
     }
+
+    totpPromptSent = false;
+    keyboardInteractiveFinish = null;
   }
 
   function setupPingInterval() {
@@ -723,8 +956,11 @@ wss.on("connection", async (ws: WebSocket, req) => {
       if (sshConn && sshStream) {
         try {
           sshStream.write("\x00");
-        } catch (e: any) {
+        } catch (e: unknown) {
-          sshLogger.error("SSH keepalive failed: " + e.message);
+          sshLogger.error(
+            "SSH keepalive failed: " +
+              (e instanceof Error ? e.message : "Unknown error"),
+          );
           cleanupSSH();
         }
       }

src/backend/ssh/tunnel.ts

@@ -217,7 +217,9 @@ function cleanupTunnelResources(
     if (verification?.timeout) clearTimeout(verification.timeout);
     try {
       verification?.conn.end();
-    } catch (e) {}
+    } catch {
+      // Ignore errors
+    }
     tunnelVerifications.delete(tunnelName);
   }
 
@@ -282,7 +284,9 @@ function handleDisconnect(
       const verification = tunnelVerifications.get(tunnelName);
       if (verification?.timeout) clearTimeout(verification.timeout);
       verification?.conn.end();
-    } catch (e) {}
+    } catch {
+      // Ignore errors
+    }
     tunnelVerifications.delete(tunnelName);
   }
 
@@ -511,16 +515,19 @@ async function connectSSHTunnel(
         if (credentials.length > 0) {
           const credential = credentials[0];
           resolvedSourceCredentials = {
-            password: credential.password,
+            password: credential.password as string | undefined,
-            sshKey:
+            sshKey: (credential.private_key ||
-              credential.private_key || credential.privateKey || credential.key,
+              credential.privateKey ||
-            keyPassword: credential.key_password || credential.keyPassword,
+              credential.key) as string | undefined,
-            keyType: credential.key_type || credential.keyType,
+            keyPassword: (credential.key_password || credential.keyPassword) as
-            authMethod: credential.auth_type || credential.authType,
+              | string
+              | undefined,
+            keyType: (credential.key_type || credential.keyType) as
+              | string
+              | undefined,
+            authMethod: (credential.auth_type || credential.authType) as string,
           };
-        } else {
         }
-      } else {
       }
     } catch (error) {
       tunnelLogger.warn("Failed to resolve source credentials from database", {
@@ -591,12 +598,17 @@ async function connectSSHTunnel(
         if (credentials.length > 0) {
           const credential = credentials[0];
           resolvedEndpointCredentials = {
-            password: credential.password,
+            password: credential.password as string | undefined,
-            sshKey:
+            sshKey: (credential.private_key ||
-              credential.private_key || credential.privateKey || credential.key,
+              credential.privateKey ||
-            keyPassword: credential.key_password || credential.keyPassword,
+              credential.key) as string | undefined,
-            keyType: credential.key_type || credential.keyType,
+            keyPassword: (credential.key_password || credential.keyPassword) as
-            authMethod: credential.auth_type || credential.authType,
+              | string
+              | undefined,
+            keyType: (credential.key_type || credential.keyType) as
+              | string
+              | undefined,
+            authMethod: (credential.auth_type || credential.authType) as string,
           };
         } else {
           tunnelLogger.warn("No endpoint credentials found in database", {
@@ -605,7 +617,6 @@ async function connectSSHTunnel(
             credentialId: tunnelConfig.endpointCredentialId,
           });
         }
-      } else {
       }
     } catch (error) {
       tunnelLogger.warn(
@@ -631,7 +642,9 @@ async function connectSSHTunnel(
 
       try {
         conn.end();
-      } catch (e) {}
+      } catch {
+        // Ignore errors
+      }
 
       activeTunnels.delete(tunnelName);
 
@@ -771,7 +784,9 @@ async function connectSSHTunnel(
             const verification = tunnelVerifications.get(tunnelName);
             if (verification?.timeout) clearTimeout(verification.timeout);
             verification?.conn.end();
-          } catch (e) {}
+          } catch {
+            // Ignore errors
+          }
           tunnelVerifications.delete(tunnelName);
         }
 
@@ -822,13 +837,13 @@ async function connectSSHTunnel(
         }
       });
 
-      stream.stdout?.on("data", (data: Buffer) => {
+      stream.stdout?.on("data", () => {
-        const output = data.toString().trim();
+        // Silently consume stdout data
-        if (output) {
-        }
       });
 
-      stream.on("error", (err: Error) => {});
+      stream.on("error", () => {
+        // Silently consume stream errors
+      });
 
       stream.stderr.on("data", (data) => {
         const errorMsg = data.toString().trim();
@@ -888,7 +903,7 @@ async function connectSSHTunnel(
     });
   });
 
-  const connOptions: any = {
+  const connOptions: Record<string, unknown> = {
     host: tunnelConfig.sourceIP,
     port: tunnelConfig.sourceSSHPort,
     username: tunnelConfig.sourceUsername,
@@ -1026,15 +1041,19 @@ async function killRemoteTunnelByMarker(
         if (credentials.length > 0) {
           const credential = credentials[0];
           resolvedSourceCredentials = {
-            password: credential.password,
+            password: credential.password as string | undefined,
-            sshKey:
+            sshKey: (credential.private_key ||
-              credential.private_key || credential.privateKey || credential.key,
+              credential.privateKey ||
-            keyPassword: credential.key_password || credential.keyPassword,
+              credential.key) as string | undefined,
-            keyType: credential.key_type || credential.keyType,
+            keyPassword: (credential.key_password || credential.keyPassword) as
-            authMethod: credential.auth_type || credential.authType,
+              | string
+              | undefined,
+            keyType: (credential.key_type || credential.keyType) as
+              | string
+              | undefined,
+            authMethod: (credential.auth_type || credential.authType) as string,
           };
         }
-      } else {
       }
     } catch (error) {
       tunnelLogger.warn("Failed to resolve source credentials for cleanup", {
@@ -1046,7 +1065,7 @@ async function killRemoteTunnelByMarker(
   }
 
   const conn = new Client();
-  const connOptions: any = {
+  const connOptions: Record<string, unknown> = {
     host: tunnelConfig.sourceIP,
     port: tunnelConfig.sourceSSHPort,
     username: tunnelConfig.sourceUsername,
@@ -1122,7 +1141,7 @@ async function killRemoteTunnelByMarker(
   conn.on("ready", () => {
     const checkCmd = `ps aux | grep -E '(${tunnelMarker}|ssh.*-R.*${tunnelConfig.endpointPort}:localhost:${tunnelConfig.sourcePort}.*${tunnelConfig.endpointUsername}@${tunnelConfig.endpointIP}|sshpass.*ssh.*-R.*${tunnelConfig.endpointPort})' | grep -v grep`;
 
-    conn.exec(checkCmd, (err, stream) => {
+    conn.exec(checkCmd, (_err, stream) => {
       let foundProcesses = false;
 
       stream.on("data", (data) => {
@@ -1150,7 +1169,7 @@ async function killRemoteTunnelByMarker(
 
         function executeNextKillCommand() {
           if (commandIndex >= killCmds.length) {
-            conn.exec(checkCmd, (err, verifyStream) => {
+            conn.exec(checkCmd, (_err, verifyStream) => {
               let stillRunning = false;
 
               verifyStream.on("data", (data) => {
@@ -1183,18 +1202,15 @@ async function killRemoteTunnelByMarker(
               tunnelLogger.warn(
                 `Kill command ${commandIndex + 1} failed for '${tunnelName}': ${err.message}`,
               );
-            } else {
             }
 
-            stream.on("close", (code) => {
+            stream.on("close", () => {
               commandIndex++;
               executeNextKillCommand();
             });
 
-            stream.on("data", (data) => {
+            stream.on("data", () => {
-              const output = data.toString().trim();
+              // Silently consume stream data
-              if (output) {
-              }
             });
 
             stream.stderr.on("data", (data) => {
@@ -1423,14 +1439,6 @@ async function initializeAutoStartTunnels(): Promise<void> {
                 isPinned: host.pin,
               };
 
-              const hasSourcePassword = host.autostartPassword;
-              const hasSourceKey = host.autostartKey;
-              const hasEndpointPassword =
-                tunnelConnection.endpointPassword ||
-                endpointHost.autostartPassword;
-              const hasEndpointKey =
-                tunnelConnection.endpointKey || endpointHost.autostartKey;
-
               autoStartTunnels.push(tunnelConfig);
             } else {
               tunnelLogger.error(
@@ -1453,10 +1461,10 @@ async function initializeAutoStartTunnels(): Promise<void> {
         });
       }, 1000);
     }
-  } catch (error: any) {
+  } catch (error) {
     tunnelLogger.error(
       "Failed to initialize auto-start tunnels:",
-      error.message,
+      error instanceof Error ? error.message : "Unknown error",
     );
   }
 }

src/backend/starter.ts

@@ -21,7 +21,9 @@ import { systemLogger, versionLogger } from "./utils/logger.js";
       if (persistentConfig.parsed) {
         Object.assign(process.env, persistentConfig.parsed);
       }
-    } catch {}
+    } catch {
+      // Ignore errors if .env file doesn't exist
+    }
 
     let version = "unknown";
 
@@ -73,7 +75,7 @@ import { systemLogger, versionLogger } from "./utils/logger.js";
           version = foundVersion;
           break;
         }
-      } catch (error) {
+      } catch {
         continue;
       }
     }
@@ -102,6 +104,7 @@ import { systemLogger, versionLogger } from "./utils/logger.js";
     await import("./ssh/tunnel.js");
     await import("./ssh/file-manager.js");
     await import("./ssh/server-stats.js");
+    await import("./homepage.js");
 
     process.on("SIGINT", () => {
       systemLogger.info(
@@ -126,7 +129,7 @@ import { systemLogger, versionLogger } from "./utils/logger.js";
       process.exit(1);
     });
 
-    process.on("unhandledRejection", (reason, promise) => {
+    process.on("unhandledRejection", (reason) => {
       systemLogger.error("Unhandled promise rejection", reason, {
         operation: "error_handling",
       });

src/backend/utils/auth-manager.ts

@@ -23,6 +23,18 @@ interface JWTPayload {
   exp?: number;
 }
 
+interface AuthenticatedRequest extends Request {
+  userId?: string;
+  pendingTOTP?: boolean;
+  dataKey?: Buffer;
+}
+
+interface RequestWithHeaders extends Request {
+  headers: Request["headers"] & {
+    "x-forwarded-proto"?: string;
+  };
+}
+
 class AuthManager {
   private static instance: AuthManager;
   private systemCrypto: SystemCrypto;
@@ -108,7 +120,6 @@ class AuthManager {
 
       if (migrationResult.migrated) {
         await saveMemoryDatabaseToFile();
-      } else {
       }
     } catch (error) {
       databaseLogger.error("Lazy encryption migration failed", error, {
@@ -164,7 +175,10 @@ class AuthManager {
     });
   }
 
-  getSecureCookieOptions(req: any, maxAge: number = 24 * 60 * 60 * 1000) {
+  getSecureCookieOptions(
+    req: RequestWithHeaders,
+    maxAge: number = 24 * 60 * 60 * 1000,
+  ) {
     return {
       httpOnly: false,
       secure: req.secure || req.headers["x-forwarded-proto"] === "https",
@@ -176,10 +190,11 @@ class AuthManager {
 
   createAuthMiddleware() {
     return async (req: Request, res: Response, next: NextFunction) => {
-      let token = req.cookies?.jwt;
+      const authReq = req as AuthenticatedRequest;
+      let token = authReq.cookies?.jwt;
 
       if (!token) {
-        const authHeader = req.headers["authorization"];
+        const authHeader = authReq.headers["authorization"];
         if (authHeader?.startsWith("Bearer ")) {
           token = authHeader.split(" ")[1];
         }
@@ -195,15 +210,16 @@ class AuthManager {
         return res.status(401).json({ error: "Invalid token" });
       }
 
-      (req as any).userId = payload.userId;
+      authReq.userId = payload.userId;
-      (req as any).pendingTOTP = payload.pendingTOTP;
+      authReq.pendingTOTP = payload.pendingTOTP;
       next();
     };
   }
 
   createDataAccessMiddleware() {
     return async (req: Request, res: Response, next: NextFunction) => {
-      const userId = (req as any).userId;
+      const authReq = req as AuthenticatedRequest;
+      const userId = authReq.userId;
       if (!userId) {
         return res.status(401).json({ error: "Authentication required" });
       }
@@ -216,19 +232,26 @@ class AuthManager {
         });
       }
 
-      (req as any).dataKey = dataKey;
+      authReq.dataKey = dataKey;
       next();
     };
   }
 
   createAdminMiddleware() {
     return async (req: Request, res: Response, next: NextFunction) => {
-      const authHeader = req.headers["authorization"];
+      let token = req.cookies?.jwt;
-      if (!authHeader?.startsWith("Bearer ")) {
+
-        return res.status(401).json({ error: "Missing Authorization header" });
+      if (!token) {
+        const authHeader = req.headers["authorization"];
+        if (authHeader?.startsWith("Bearer ")) {
+          token = authHeader.split(" ")[1];
+        }
+      }
+
+      if (!token) {
+        return res.status(401).json({ error: "Missing authentication token" });
       }
 
-      const token = authHeader.split(" ")[1];
       const payload = await this.verifyJWTToken(token);
 
       if (!payload) {
@@ -257,8 +280,9 @@ class AuthManager {
           return res.status(403).json({ error: "Admin access required" });
         }
 
-        (req as any).userId = payload.userId;
+        const authReq = req as AuthenticatedRequest;
-        (req as any).pendingTOTP = payload.pendingTOTP;
+        authReq.userId = payload.userId;
+        authReq.pendingTOTP = payload.pendingTOTP;
         next();
       } catch (error) {
         databaseLogger.error("Failed to verify admin privileges", error, {

src/backend/utils/auto-ssl-setup.ts

@@ -1,7 +1,6 @@
 import { execSync } from "child_process";
 import { promises as fs } from "fs";
 import path from "path";
-import crypto from "crypto";
 import { systemLogger } from "./logger.js";
 
 export class AutoSSLSetup {
@@ -102,7 +101,7 @@ export class AutoSSLSetup {
     try {
       try {
         execSync("openssl version", { stdio: "pipe" });
-      } catch (error) {
+      } catch {
         throw new Error(
           "OpenSSL is not installed or not available in PATH. Please install OpenSSL to enable SSL certificate generation.",
         );
@@ -234,7 +233,9 @@ IP.3 = 0.0.0.0
     let envContent = "";
     try {
       envContent = await fs.readFile(this.ENV_FILE, "utf8");
-    } catch {}
+    } catch {
+      // File doesn't exist yet, will create with SSL config
+    }
 
     let updatedContent = envContent;
     let hasChanges = false;

src/backend/utils/data-crypto.ts

@@ -3,6 +3,19 @@ import { LazyFieldEncryption } from "./lazy-field-encryption.js";
 import { UserCrypto } from "./user-crypto.js";
 import { databaseLogger } from "./logger.js";
 
+interface DatabaseInstance {
+  prepare: (sql: string) => {
+    all: (param?: unknown) => DatabaseRecord[];
+    get: (param?: unknown) => DatabaseRecord;
+    run: (...params: unknown[]) => unknown;
+  };
+}
+
+interface DatabaseRecord {
+  id: number | string;
+  [key: string]: unknown;
+}
+
 class DataCrypto {
   private static userCrypto: UserCrypto;
 
@@ -10,13 +23,13 @@ class DataCrypto {
     this.userCrypto = UserCrypto.getInstance();
   }
 
-  static encryptRecord(
+  static encryptRecord<T extends Record<string, unknown>>(
     tableName: string,
-    record: any,
+    record: T,
     userId: string,
     userDataKey: Buffer,
-  ): any {
+  ): T {
-    const encryptedRecord = { ...record };
+    const encryptedRecord: Record<string, unknown> = { ...record };
     const recordId = record.id || "temp-" + Date.now();
 
     for (const [fieldName, value] of Object.entries(record)) {
@@ -24,24 +37,24 @@ class DataCrypto {
         encryptedRecord[fieldName] = FieldCrypto.encryptField(
           value as string,
           userDataKey,
-          recordId,
+          recordId as string,
           fieldName,
         );
       }
     }
 
-    return encryptedRecord;
+    return encryptedRecord as T;
   }
 
-  static decryptRecord(
+  static decryptRecord<T extends Record<string, unknown>>(
     tableName: string,
-    record: any,
+    record: T,
     userId: string,
     userDataKey: Buffer,
-  ): any {
+  ): T {
     if (!record) return record;
 
-    const decryptedRecord = { ...record };
+    const decryptedRecord: Record<string, unknown> = { ...record };
     const recordId = record.id;
 
     for (const [fieldName, value] of Object.entries(record)) {
@@ -49,21 +62,21 @@ class DataCrypto {
         decryptedRecord[fieldName] = LazyFieldEncryption.safeGetFieldValue(
           value as string,
           userDataKey,
-          recordId,
+          recordId as string,
           fieldName,
         );
       }
     }
 
-    return decryptedRecord;
+    return decryptedRecord as T;
   }
 
-  static decryptRecords(
+  static decryptRecords<T extends Record<string, unknown>>(
     tableName: string,
-    records: any[],
+    records: T[],
     userId: string,
     userDataKey: Buffer,
-  ): any[] {
+  ): T[] {
     if (!Array.isArray(records)) return records;
     return records.map((record) =>
       this.decryptRecord(tableName, record, userId, userDataKey),
@@ -73,7 +86,7 @@ class DataCrypto {
   static async migrateUserSensitiveFields(
     userId: string,
     userDataKey: Buffer,
-    db: any,
+    db: DatabaseInstance,
   ): Promise<{
     migrated: boolean;
     migratedTables: string[];
@@ -84,7 +97,7 @@ class DataCrypto {
     let migratedFieldsCount = 0;
 
     try {
-      const { needsMigration, plaintextFields } =
+      const { needsMigration } =
         await LazyFieldEncryption.checkUserNeedsMigration(
           userId,
           userDataKey,
@@ -97,7 +110,7 @@ class DataCrypto {
 
       const sshDataRecords = db
         .prepare("SELECT * FROM ssh_data WHERE user_id = ?")
-        .all(userId);
+        .all(userId) as DatabaseRecord[];
       for (const record of sshDataRecords) {
         const sensitiveFields =
           LazyFieldEncryption.getSensitiveFieldsForTable("ssh_data");
@@ -132,7 +145,7 @@ class DataCrypto {
 
       const sshCredentialsRecords = db
         .prepare("SELECT * FROM ssh_credentials WHERE user_id = ?")
-        .all(userId);
+        .all(userId) as DatabaseRecord[];
       for (const record of sshCredentialsRecords) {
         const sensitiveFields =
           LazyFieldEncryption.getSensitiveFieldsForTable("ssh_credentials");
@@ -169,7 +182,7 @@ class DataCrypto {
 
       const userRecord = db
         .prepare("SELECT * FROM users WHERE id = ?")
-        .get(userId);
+        .get(userId) as DatabaseRecord | undefined;
       if (userRecord) {
         const sensitiveFields =
           LazyFieldEncryption.getSensitiveFieldsForTable("users");
@@ -220,7 +233,7 @@ class DataCrypto {
   static async reencryptUserDataAfterPasswordReset(
     userId: string,
     newUserDataKey: Buffer,
-    db: any,
+    db: DatabaseInstance,
   ): Promise<{
     success: boolean;
     reencryptedTables: string[];
@@ -262,17 +275,21 @@ class DataCrypto {
         try {
           const records = db
             .prepare(`SELECT * FROM ${table} WHERE user_id = ?`)
-            .all(userId);
+            .all(userId) as DatabaseRecord[];
 
           for (const record of records) {
             const recordId = record.id.toString();
+            const updatedRecord: DatabaseRecord = { ...record };
             let needsUpdate = false;
-            const updatedRecord = { ...record };
 
             for (const fieldName of fields) {
               const fieldValue = record[fieldName];
 
-              if (fieldValue && fieldValue.trim() !== "") {
+              if (
+                fieldValue &&
+                typeof fieldValue === "string" &&
+                fieldValue.trim() !== ""
+              ) {
                 try {
                   const reencryptedValue = FieldCrypto.encryptField(
                     fieldValue,
@@ -384,29 +401,29 @@ class DataCrypto {
     return userDataKey;
   }
 
-  static encryptRecordForUser(
+  static encryptRecordForUser<T extends Record<string, unknown>>(
     tableName: string,
-    record: any,
+    record: T,
     userId: string,
-  ): any {
+  ): T {
     const userDataKey = this.validateUserAccess(userId);
     return this.encryptRecord(tableName, record, userId, userDataKey);
   }
 
-  static decryptRecordForUser(
+  static decryptRecordForUser<T extends Record<string, unknown>>(
     tableName: string,
-    record: any,
+    record: T,
     userId: string,
-  ): any {
+  ): T {
     const userDataKey = this.validateUserAccess(userId);
     return this.decryptRecord(tableName, record, userId, userDataKey);
   }
 
-  static decryptRecordsForUser(
+  static decryptRecordsForUser<T extends Record<string, unknown>>(
     tableName: string,
-    records: any[],
+    records: T[],
     userId: string,
-  ): any[] {
+  ): T[] {
     const userDataKey = this.validateUserAccess(userId);
     return this.decryptRecords(tableName, records, userId, userDataKey);
   }
@@ -435,7 +452,7 @@ class DataCrypto {
       );
 
       return decrypted === testData;
-    } catch (error) {
+    } catch {
       return false;
     }
   }

src/backend/utils/database-file-encryption.ts

@@ -30,7 +30,11 @@ class DatabaseFileEncryption {
 
       const iv = crypto.randomBytes(16);
 
-      const cipher = crypto.createCipheriv(this.ALGORITHM, key, iv) as any;
+      const cipher = crypto.createCipheriv(
+        this.ALGORITHM,
+        key,
+        iv,
+      ) as crypto.CipherGCM;
       const encrypted = Buffer.concat([cipher.update(buffer), cipher.final()]);
       const tag = cipher.getAuthTag();
 
@@ -78,7 +82,11 @@ class DatabaseFileEncryption {
 
       const iv = crypto.randomBytes(16);
 
-      const cipher = crypto.createCipheriv(this.ALGORITHM, key, iv) as any;
+      const cipher = crypto.createCipheriv(
+        this.ALGORITHM,
+        key,
+        iv,
+      ) as crypto.CipherGCM;
       const encrypted = Buffer.concat([
         cipher.update(sourceData),
         cipher.final(),
@@ -163,7 +171,7 @@ class DatabaseFileEncryption {
         metadata.algorithm,
         key,
         Buffer.from(metadata.iv, "hex"),
-      ) as any;
+      ) as crypto.DecipherGCM;
       decipher.setAuthTag(Buffer.from(metadata.tag, "hex"));
 
       const decryptedBuffer = Buffer.concat([
@@ -233,7 +241,7 @@ class DatabaseFileEncryption {
         metadata.algorithm,
         key,
         Buffer.from(metadata.iv, "hex"),
-      ) as any;
+      ) as crypto.DecipherGCM;
       decipher.setAuthTag(Buffer.from(metadata.tag, "hex"));
 
       const decrypted = Buffer.concat([
@@ -301,7 +309,6 @@ class DatabaseFileEncryption {
       const metadata: EncryptedFileMetadata = JSON.parse(metadataContent);
 
       const fileStats = fs.statSync(encryptedPath);
-      const currentFingerprint = "termix-v1-file";
 
       return {
         version: metadata.version,

src/backend/utils/database-migration.ts

@@ -55,7 +55,6 @@ export class DatabaseMigration {
 
     if (hasEncryptedDb && hasUnencryptedDb) {
       const unencryptedSize = fs.statSync(this.unencryptedDbPath).size;
-      const encryptedSize = fs.statSync(this.encryptedDbPath).size;
 
       if (unencryptedSize === 0) {
         needsMigration = false;
@@ -168,9 +167,6 @@ export class DatabaseMigration {
         return false;
       }
 
-      let totalOriginalRows = 0;
-      let totalMemoryRows = 0;
-
       for (const table of originalTables) {
         const originalCount = originalDb
           .prepare(`SELECT COUNT(*) as count FROM ${table.name}`)
@@ -179,9 +175,6 @@ export class DatabaseMigration {
           .prepare(`SELECT COUNT(*) as count FROM ${table.name}`)
           .get() as { count: number };
 
-        totalOriginalRows += originalCount.count;
-        totalMemoryRows += memoryCount.count;
-
         if (originalCount.count !== memoryCount.count) {
           databaseLogger.error(
             "Row count mismatch for table during migration verification",
@@ -241,7 +234,9 @@ export class DatabaseMigration {
         memoryDb.exec("PRAGMA foreign_keys = OFF");
 
         for (const table of tables) {
-          const rows = originalDb.prepare(`SELECT * FROM ${table.name}`).all();
+          const rows = originalDb
+            .prepare(`SELECT * FROM ${table.name}`)
+            .all() as Record<string, unknown>[];
 
           if (rows.length > 0) {
             const columns = Object.keys(rows[0]);
@@ -251,7 +246,7 @@ export class DatabaseMigration {
             );
 
             const insertTransaction = memoryDb.transaction(
-              (dataRows: any[]) => {
+              (dataRows: Record<string, unknown>[]) => {
                 for (const row of dataRows) {
                   const values = columns.map((col) => row[col]);
                   insertStmt.run(values);

src/backend/utils/field-crypto.ts

@@ -21,8 +21,9 @@ class FieldCrypto {
       "totp_secret",
       "totp_backup_codes",
       "oidc_identifier",
+      "oidcIdentifier",
     ]),
-    ssh_data: new Set(["password", "key", "key_password"]),
+    ssh_data: new Set(["password", "key", "key_password", "keyPassword"]),
     ssh_credentials: new Set([
       "password",
       "private_key",
@@ -47,7 +48,11 @@ class FieldCrypto {
     );
 
     const iv = crypto.randomBytes(this.IV_LENGTH);
-    const cipher = crypto.createCipheriv(this.ALGORITHM, fieldKey, iv) as any;
+    const cipher = crypto.createCipheriv(
+      this.ALGORITHM,
+      fieldKey,
+      iv,
+    ) as crypto.CipherGCM;
 
     let encrypted = cipher.update(plaintext, "utf8", "hex");
     encrypted += cipher.final("hex");
@@ -89,7 +94,7 @@ class FieldCrypto {
       this.ALGORITHM,
       fieldKey,
       Buffer.from(encrypted.iv, "hex"),
-    ) as any;
+    ) as crypto.DecipherGCM;
     decipher.setAuthTag(Buffer.from(encrypted.tag, "hex"));
 
     let decrypted = decipher.update(encrypted.data, "hex", "utf8");

src/backend/utils/lazy-field-encryption.ts

@@ -1,6 +1,14 @@
 import { FieldCrypto } from "./field-crypto.js";
 import { databaseLogger } from "./logger.js";
 
+interface DatabaseInstance {
+  prepare: (sql: string) => {
+    all: (param?: unknown) => unknown[];
+    get: (param?: unknown) => unknown;
+    run: (...params: unknown[]) => unknown;
+  };
+}
+
 export class LazyFieldEncryption {
   private static readonly LEGACY_FIELD_NAME_MAP: Record<string, string> = {
     key_password: "keyPassword",
@@ -39,7 +47,7 @@ export class LazyFieldEncryption {
         return false;
       }
       return true;
-    } catch (jsonError) {
+    } catch {
       return true;
     }
   }
@@ -74,7 +82,9 @@ export class LazyFieldEncryption {
               legacyFieldName,
             );
             return decrypted;
-          } catch (legacyError) {}
+          } catch {
+            // Ignore legacy format errors
+          }
         }
 
         const sensitiveFields = [
@@ -145,7 +155,7 @@ export class LazyFieldEncryption {
           wasPlaintext: false,
           wasLegacyEncryption: false,
         };
-      } catch (error) {
+      } catch {
         const legacyFieldName = this.LEGACY_FIELD_NAME_MAP[fieldName];
         if (legacyFieldName) {
           try {
@@ -166,7 +176,9 @@ export class LazyFieldEncryption {
               wasPlaintext: false,
               wasLegacyEncryption: true,
             };
-          } catch (legacyError) {}
+          } catch {
+            // Ignore legacy format errors
+          }
         }
         return {
           encrypted: fieldValue,
@@ -178,12 +190,12 @@ export class LazyFieldEncryption {
   }
 
   static migrateRecordSensitiveFields(
-    record: any,
+    record: Record<string, unknown>,
     sensitiveFields: string[],
     userKEK: Buffer,
     recordId: string,
   ): {
-    updatedRecord: any;
+    updatedRecord: Record<string, unknown>;
     migratedFields: string[];
     needsUpdate: boolean;
   } {
@@ -198,7 +210,7 @@ export class LazyFieldEncryption {
         try {
           const { encrypted, wasPlaintext, wasLegacyEncryption } =
             this.migrateFieldToEncrypted(
-              fieldValue,
+              fieldValue as string,
               userKEK,
               recordId,
               fieldName,
@@ -253,7 +265,7 @@ export class LazyFieldEncryption {
     try {
       FieldCrypto.decryptField(fieldValue, userKEK, recordId, fieldName);
       return false;
-    } catch (error) {
+    } catch {
       const legacyFieldName = this.LEGACY_FIELD_NAME_MAP[fieldName];
       if (legacyFieldName) {
         try {
@@ -264,7 +276,7 @@ export class LazyFieldEncryption {
             legacyFieldName,
           );
           return true;
-        } catch (legacyError) {
+        } catch {
           return false;
         }
       }
@@ -275,7 +287,7 @@ export class LazyFieldEncryption {
   static async checkUserNeedsMigration(
     userId: string,
     userKEK: Buffer,
-    db: any,
+    db: DatabaseInstance,
   ): Promise<{
     needsMigration: boolean;
     plaintextFields: Array<{
@@ -294,7 +306,9 @@ export class LazyFieldEncryption {
     try {
       const sshHosts = db
         .prepare("SELECT * FROM ssh_data WHERE user_id = ?")
-        .all(userId);
+        .all(userId) as Array<
+        Record<string, unknown> & { id: string | number }
+      >;
       for (const host of sshHosts) {
         const sensitiveFields = this.getSensitiveFieldsForTable("ssh_data");
         const hostPlaintextFields: string[] = [];
@@ -303,7 +317,7 @@ export class LazyFieldEncryption {
           if (
             host[field] &&
             this.fieldNeedsMigration(
-              host[field],
+              host[field] as string,
               userKEK,
               host.id.toString(),
               field,
@@ -325,7 +339,9 @@ export class LazyFieldEncryption {
 
       const sshCredentials = db
         .prepare("SELECT * FROM ssh_credentials WHERE user_id = ?")
-        .all(userId);
+        .all(userId) as Array<
+        Record<string, unknown> & { id: string | number }
+      >;
       for (const credential of sshCredentials) {
         const sensitiveFields =
           this.getSensitiveFieldsForTable("ssh_credentials");
@@ -335,7 +351,7 @@ export class LazyFieldEncryption {
           if (
             credential[field] &&
             this.fieldNeedsMigration(
-              credential[field],
+              credential[field] as string,
               userKEK,
               credential.id.toString(),
               field,

src/backend/utils/logger.ts

@@ -11,7 +11,7 @@ export interface LogContext {
   sessionId?: string;
   requestId?: string;
   duration?: number;
-  [key: string]: any;
+  [key: string]: unknown;
 }
 
 const SENSITIVE_FIELDS = [
@@ -253,5 +253,6 @@ export const apiLogger = new Logger("API", "🌐", "#3b82f6");
 export const authLogger = new Logger("AUTH", "🔐", "#ef4444");
 export const systemLogger = new Logger("SYSTEM", "🚀", "#14b8a6");
 export const versionLogger = new Logger("VERSION", "📦", "#8b5cf6");
+export const homepageLogger = new Logger("HOMEPAGE", "🏠", "#ec4899");
 
 export const logger = systemLogger;

src/backend/utils/simple-db-ops.ts

@@ -2,10 +2,11 @@ import { getDb, DatabaseSaveTrigger } from "../database/db/index.js";
 import { DataCrypto } from "./data-crypto.js";
 import type { SQLiteTable } from "drizzle-orm/sqlite-core";
 
-type TableName = "users" | "ssh_data" | "ssh_credentials";
+type TableName = "users" | "ssh_data" | "ssh_credentials" | "recent_activity";
 
 class SimpleDBOps {
-  static async insert<T extends Record<string, any>>(
+  static async insert<T extends Record<string, unknown>>(
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
     table: SQLiteTable<any>,
     tableName: TableName,
     data: T,
@@ -44,8 +45,8 @@ class SimpleDBOps {
     return decryptedResult as T;
   }
 
-  static async select<T extends Record<string, any>>(
+  static async select<T extends Record<string, unknown>>(
-    query: any,
+    query: unknown,
     tableName: TableName,
     userId: string,
   ): Promise<T[]> {
@@ -56,9 +57,9 @@ class SimpleDBOps {
 
     const results = await query;
 
-    const decryptedResults = DataCrypto.decryptRecords(
+    const decryptedResults = DataCrypto.decryptRecords<T>(
       tableName,
-      results,
+      results as T[],
       userId,
       userDataKey,
     );
@@ -66,8 +67,8 @@ class SimpleDBOps {
     return decryptedResults;
   }
 
-  static async selectOne<T extends Record<string, any>>(
+  static async selectOne<T extends Record<string, unknown>>(
-    query: any,
+    query: unknown,
     tableName: TableName,
     userId: string,
   ): Promise<T | undefined> {
@@ -79,9 +80,9 @@ class SimpleDBOps {
     const result = await query;
     if (!result) return undefined;
 
-    const decryptedResult = DataCrypto.decryptRecord(
+    const decryptedResult = DataCrypto.decryptRecord<T>(
       tableName,
-      result,
+      result as T,
       userId,
       userDataKey,
     );
@@ -89,10 +90,11 @@ class SimpleDBOps {
     return decryptedResult;
   }
 
-  static async update<T extends Record<string, any>>(
+  static async update<T extends Record<string, unknown>>(
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
     table: SQLiteTable<any>,
     tableName: TableName,
-    where: any,
+    where: unknown,
     data: Partial<T>,
     userId: string,
   ): Promise<T[]> {
@@ -108,7 +110,8 @@ class SimpleDBOps {
     const result = await getDb()
       .update(table)
       .set(encryptedData)
-      .where(where)
+      // eslint-disable-next-line @typescript-eslint/no-explicit-any
+      .where(where as any)
       .returning();
 
     DatabaseSaveTrigger.triggerSave(`update_${tableName}`);
@@ -124,12 +127,16 @@ class SimpleDBOps {
   }
 
   static async delete(
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
     table: SQLiteTable<any>,
     tableName: TableName,
-    where: any,
+    where: unknown,
-    userId: string,
+  ): Promise<unknown[]> {
-  ): Promise<any[]> {
+    const result = await getDb()
-    const result = await getDb().delete(table).where(where).returning();
+      .delete(table)
+      // eslint-disable-next-line @typescript-eslint/no-explicit-any
+      .where(where as any)
+      .returning();
 
     DatabaseSaveTrigger.triggerSave(`delete_${tableName}`);
 
@@ -144,13 +151,10 @@ class SimpleDBOps {
     return DataCrypto.getUserDataKey(userId) !== null;
   }
 
-  static async selectEncrypted(
+  static async selectEncrypted(query: unknown): Promise<unknown[]> {
-    query: any,
-    tableName: TableName,
-  ): Promise<any[]> {
     const results = await query;
 
-    return results;
+    return results as unknown[];
   }
 }
 

src/backend/utils/ssh-key-utils.ts

@@ -49,7 +49,7 @@ function detectKeyTypeFromContent(keyContent: string): string {
       }
 
       return "ssh-rsa";
-    } catch (error) {
+    } catch {
       return "ssh-rsa";
     }
   }
@@ -84,7 +84,9 @@ function detectKeyTypeFromContent(keyContent: string): string {
       } else if (decodedString.includes("1.3.101.112")) {
         return "ssh-ed25519";
       }
-    } catch (error) {}
+    } catch {
+      // Cannot decode key, fallback to length-based detection
+    }
 
     if (content.length < 800) {
       return "ssh-ed25519";
@@ -140,7 +142,9 @@ function detectPublicKeyTypeFromContent(publicKeyContent: string): string {
       } else if (decodedString.includes("1.3.101.112")) {
         return "ssh-ed25519";
       }
-    } catch (error) {}
+    } catch {
+      // Cannot decode key, fallback to length-based detection
+    }
 
     if (content.length < 400) {
       return "ssh-ed25519";
@@ -236,13 +240,15 @@ export function parseSSHKey(
             } else {
               publicKey = "";
             }
-          } catch (error) {
+          } catch {
             publicKey = "";
           }
 
           useSSH2 = true;
         }
-      } catch (error) {}
+      } catch {
+        // SSH2 parsing failed, will use fallback method
+      }
     }
 
     if (!useSSH2) {
@@ -268,7 +274,9 @@ export function parseSSHKey(
           success: true,
         };
       }
-    } catch (fallbackError) {}
+    } catch {
+      // Fallback parsing also failed
+    }
 
     return {
       privateKey: privateKeyData,
@@ -310,7 +318,7 @@ export function detectKeyType(privateKeyData: string): string {
       return "unknown";
     }
     return parsedKey.type || "unknown";
-  } catch (error) {
+  } catch {
     return "unknown";
   }
 }

src/backend/utils/system-crypto.ts

@@ -37,7 +37,9 @@ class SystemCrypto {
           process.env.JWT_SECRET = jwtMatch[1];
           return;
         }
-      } catch {}
+      } catch {
+        // Ignore file read errors, will generate new secret
+      }
 
       await this.generateAndGuideUser();
     } catch (error) {
@@ -74,7 +76,9 @@ class SystemCrypto {
           process.env.DATABASE_KEY = dbKeyMatch[1];
           return;
         }
-      } catch {}
+      } catch {
+        // Ignore file read errors, will generate new key
+      }
 
       await this.generateAndGuideDatabaseKey();
     } catch (error) {
@@ -111,7 +115,9 @@ class SystemCrypto {
           process.env.INTERNAL_AUTH_TOKEN = tokenMatch[1];
           return;
         }
-      } catch {}
+      } catch {
+        // Ignore file read errors, will generate new token
+      }
 
       await this.generateAndGuideInternalAuthToken();
     } catch (error) {

src/backend/utils/user-crypto.ts

@@ -163,9 +163,10 @@ class UserCrypto {
 
   async authenticateOIDCUser(userId: string): Promise<boolean> {
     try {
+      const kekSalt = await this.getKEKSalt(userId);
       const encryptedDEK = await this.getEncryptedDEK(userId);
 
-      if (!encryptedDEK) {
+      if (!kekSalt || !encryptedDEK) {
         await this.setupOIDCUserEncryption(userId);
         return true;
       }
@@ -195,7 +196,7 @@ class UserCrypto {
       DEK.fill(0);
 
       return true;
-    } catch (error) {
+    } catch {
       await this.setupOIDCUserEncryption(userId);
       return true;
     }
@@ -276,21 +277,6 @@ class UserCrypto {
 
       oldKEK.fill(0);
       newKEK.fill(0);
-
-      const dekCopy = Buffer.from(DEK);
-
-      const now = Date.now();
-      const oldSession = this.userSessions.get(userId);
-      if (oldSession) {
-        oldSession.dataKey.fill(0);
-      }
-
-      this.userSessions.set(userId, {
-        dataKey: dekCopy,
-        lastActivity: now,
-        expiresAt: now + UserCrypto.SESSION_DURATION,
-      });
-
       DEK.fill(0);
 
       return true;
@@ -363,7 +349,7 @@ class UserCrypto {
       DEK.fill(0);
 
       return true;
-    } catch (error) {
+    } catch {
       return false;
     }
   }
@@ -482,7 +468,7 @@ class UserCrypto {
       }
 
       return JSON.parse(result[0].value);
-    } catch (error) {
+    } catch {
       return null;
     }
   }
@@ -522,7 +508,7 @@ class UserCrypto {
       }
 
       return JSON.parse(result[0].value);
-    } catch (error) {
+    } catch {
       return null;
     }
   }

src/backend/utils/user-data-export.ts

@@ -18,14 +18,14 @@ interface UserExportData {
   userId: string;
   username: string;
   userData: {
-    sshHosts: any[];
+    sshHosts: unknown[];
-    sshCredentials: any[];
+    sshCredentials: unknown[];
     fileManagerData: {
-      recent: any[];
+      recent: unknown[];
-      pinned: any[];
+      pinned: unknown[];
-      shortcuts: any[];
+      shortcuts: unknown[];
     };
-    dismissedAlerts: any[];
+    dismissedAlerts: unknown[];
   };
   metadata: {
     totalRecords: number;
@@ -83,7 +83,7 @@ class UserDataExport {
             )
           : sshHosts;
 
-      let sshCredentialsData: any[] = [];
+      let sshCredentialsData: unknown[] = [];
       if (includeCredentials) {
         const credentials = await getDb()
           .select()
@@ -185,7 +185,10 @@ class UserDataExport {
     return JSON.stringify(exportData, null, pretty ? 2 : 0);
   }
 
-  static validateExportData(data: any): { valid: boolean; errors: string[] } {
+  static validateExportData(data: unknown): {
+    valid: boolean;
+    errors: string[];
+  } {
     const errors: string[] = [];
 
     if (!data || typeof data !== "object") {
@@ -193,23 +196,26 @@ class UserDataExport {
       return { valid: false, errors };
     }
 
-    if (!data.version) {
+    const dataObj = data as Record<string, unknown>;
+
+    if (!dataObj.version) {
       errors.push("Missing version field");
     }
 
-    if (!data.userId) {
+    if (!dataObj.userId) {
       errors.push("Missing userId field");
     }
 
-    if (!data.userData || typeof data.userData !== "object") {
+    if (!dataObj.userData || typeof dataObj.userData !== "object") {
       errors.push("Missing or invalid userData field");
     }
 
-    if (!data.metadata || typeof data.metadata !== "object") {
+    if (!dataObj.metadata || typeof dataObj.metadata !== "object") {
       errors.push("Missing or invalid metadata field");
     }
 
-    if (data.userData) {
+    if (dataObj.userData) {
+      const userData = dataObj.userData as Record<string, unknown>;
       const requiredFields = [
         "sshHosts",
         "sshCredentials",
@@ -218,23 +224,24 @@ class UserDataExport {
       ];
       for (const field of requiredFields) {
         if (
-          !Array.isArray(data.userData[field]) &&
+          !Array.isArray(userData[field]) &&
-          !(
+          !(field === "fileManagerData" && typeof userData[field] === "object")
-            field === "fileManagerData" &&
-            typeof data.userData[field] === "object"
-          )
         ) {
           errors.push(`Missing or invalid userData.${field} field`);
         }
       }
 
       if (
-        data.userData.fileManagerData &&
+        userData.fileManagerData &&
-        typeof data.userData.fileManagerData === "object"
+        typeof userData.fileManagerData === "object"
       ) {
+        const fileManagerData = userData.fileManagerData as Record<
+          string,
+          unknown
+        >;
         const fmFields = ["recent", "pinned", "shortcuts"];
         for (const field of fmFields) {
-          if (!Array.isArray(data.userData.fileManagerData[field])) {
+          if (!Array.isArray(fileManagerData[field])) {
             errors.push(
               `Missing or invalid userData.fileManagerData.${field} field`,
             );

src/backend/utils/user-data-import.ts

@@ -12,7 +12,6 @@ import { eq, and } from "drizzle-orm";
 import { DataCrypto } from "./data-crypto.js";
 import { UserDataExport, type UserExportData } from "./user-data-export.js";
 import { databaseLogger } from "./logger.js";
-import { nanoid } from "nanoid";
 
 interface ImportOptions {
   replaceExisting?: boolean;
@@ -90,7 +89,7 @@ class UserDataImport {
       ) {
         const importStats = await this.importSshHosts(
           targetUserId,
-          exportData.userData.sshHosts,
+          exportData.userData.sshHosts as Record<string, unknown>[],
           { replaceExisting, dryRun, userDataKey },
         );
         result.summary.sshHostsImported = importStats.imported;
@@ -105,7 +104,7 @@ class UserDataImport {
       ) {
         const importStats = await this.importSshCredentials(
           targetUserId,
-          exportData.userData.sshCredentials,
+          exportData.userData.sshCredentials as Record<string, unknown>[],
           { replaceExisting, dryRun, userDataKey },
         );
         result.summary.sshCredentialsImported = importStats.imported;
@@ -130,7 +129,7 @@ class UserDataImport {
       ) {
         const importStats = await this.importDismissedAlerts(
           targetUserId,
-          exportData.userData.dismissedAlerts,
+          exportData.userData.dismissedAlerts as Record<string, unknown>[],
           { replaceExisting, dryRun },
         );
         result.summary.dismissedAlertsImported = importStats.imported;
@@ -160,7 +159,7 @@ class UserDataImport {
 
   private static async importSshHosts(
     targetUserId: string,
-    sshHosts: any[],
+    sshHosts: Record<string, unknown>[],
     options: {
       replaceExisting: boolean;
       dryRun: boolean;
@@ -199,7 +198,9 @@ class UserDataImport {
 
         delete processedHostData.id;
 
-        await getDb().insert(sshData).values(processedHostData);
+        await getDb()
+          .insert(sshData)
+          .values(processedHostData as unknown as typeof sshData.$inferInsert);
         imported++;
       } catch (error) {
         errors.push(
@@ -214,7 +215,7 @@ class UserDataImport {
 
   private static async importSshCredentials(
     targetUserId: string,
-    credentials: any[],
+    credentials: Record<string, unknown>[],
     options: {
       replaceExisting: boolean;
       dryRun: boolean;
@@ -255,7 +256,11 @@ class UserDataImport {
 
         delete processedCredentialData.id;
 
-        await getDb().insert(sshCredentials).values(processedCredentialData);
+        await getDb()
+          .insert(sshCredentials)
+          .values(
+            processedCredentialData as unknown as typeof sshCredentials.$inferInsert,
+          );
         imported++;
       } catch (error) {
         errors.push(
@@ -270,7 +275,7 @@ class UserDataImport {
 
   private static async importFileManagerData(
     targetUserId: string,
-    fileManagerData: any,
+    fileManagerData: Record<string, unknown>,
     options: { replaceExisting: boolean; dryRun: boolean },
   ) {
     let imported = 0;
@@ -357,7 +362,7 @@ class UserDataImport {
 
   private static async importDismissedAlerts(
     targetUserId: string,
-    alerts: any[],
+    alerts: Record<string, unknown>[],
     options: { replaceExisting: boolean; dryRun: boolean },
   ) {
     let imported = 0;
@@ -377,7 +382,7 @@ class UserDataImport {
           .where(
             and(
               eq(dismissedAlerts.userId, targetUserId),
-              eq(dismissedAlerts.alertId, alert.alertId),
+              eq(dismissedAlerts.alertId, alert.alertId as string),
             ),
           );
 
@@ -396,10 +401,12 @@ class UserDataImport {
         if (existing.length > 0 && options.replaceExisting) {
           await getDb()
             .update(dismissedAlerts)
-            .set(newAlert)
+            .set(newAlert as typeof dismissedAlerts.$inferInsert)
             .where(eq(dismissedAlerts.id, existing[0].id));
         } else {
-          await getDb().insert(dismissedAlerts).values(newAlert);
+          await getDb()
+            .insert(dismissedAlerts)
+            .values(newAlert as typeof dismissedAlerts.$inferInsert);
         }
 
         imported++;

src/components/theme-provider.tsx

@@ -1,3 +1,4 @@
+/* eslint-disable react-refresh/only-export-components */
 import { createContext, useContext, useEffect, useState } from "react";
 
 type Theme = "dark" | "light" | "system";

src/components/ui/badge.tsx

@@ -1,3 +1,4 @@
+/* eslint-disable react-refresh/only-export-components */
 import * as React from "react";
 import { Slot } from "@radix-ui/react-slot";
 import { cva, type VariantProps } from "class-variance-authority";

src/components/ui/button.tsx

@@ -1,3 +1,4 @@
+/* eslint-disable react-refresh/only-export-components */
 import * as React from "react";
 import { Slot } from "@radix-ui/react-slot";
 import { cva, type VariantProps } from "class-variance-authority";

src/components/ui/chart.tsx

@@ -0,0 +1,24 @@
+import * as React from "react";
+import * as RechartsPrimitive from "recharts";
+
+import { cn } from "@/lib/utils";
+
+// Chart Container
+const ChartContainer = React.forwardRef<
+  HTMLDivElement,
+  React.HTMLAttributes<HTMLDivElement>
+>(({ className, ...props }, ref) => {
+  return (
+    <div
+      ref={ref}
+      className={cn(
+        "flex aspect-video justify-center text-xs [&_.recharts-cartesian-axis-tick_text]:fill-muted-foreground [&_.recharts-cartesian-grid_line[stroke='#ccc']]:stroke-border/50 [&_.recharts-curve.recharts-tooltip-cursor]:stroke-border [&_.recharts-dot[stroke='#fff']]:stroke-transparent [&_.recharts-layer]:outline-none [&_.recharts-polar-grid_[stroke='#ccc']]:stroke-border [&_.recharts-radial-bar-background-sector]:fill-muted [&_.recharts-rectangle.recharts-tooltip-cursor]:fill-muted [&_.recharts-reference-line_[stroke='#ccc']]:stroke-border [&_.recharts-sector[stroke='#fff']]:stroke-transparent [&_.recharts-sector]:outline-none [&_.recharts-surface]:outline-none",
+        className,
+      )}
+      {...props}
+    />
+  );
+});
+ChartContainer.displayName = "ChartContainer";
+
+export { ChartContainer, RechartsPrimitive };

src/components/ui/form.tsx

@@ -1,3 +1,4 @@
+/* eslint-disable react-refresh/only-export-components */
 import * as React from "react";
 import * as LabelPrimitive from "@radix-ui/react-label";
 import { Slot } from "@radix-ui/react-slot";

src/components/ui/password-input.tsx

@@ -5,8 +5,7 @@ import { Eye, EyeOff } from "lucide-react";
 import { Input } from "@/components/ui/input";
 import { cn } from "@/lib/utils";
 
-interface PasswordInputProps
+type PasswordInputProps = React.InputHTMLAttributes<HTMLInputElement>;
-  extends React.InputHTMLAttributes<HTMLInputElement> {}
 
 export const PasswordInput = React.forwardRef<
   HTMLInputElement,

src/components/ui/shadcn-io/status/index.tsx

@@ -17,10 +17,7 @@ export const Status = ({ className, status, ...props }: StatusProps) => (
 
 export type StatusIndicatorProps = HTMLAttributes<HTMLSpanElement>;
 
-export const StatusIndicator = ({
+export const StatusIndicator = ({ ...props }: StatusIndicatorProps) => (
-  className,
-  ...props
-}: StatusIndicatorProps) => (
   <span className="relative flex h-2 w-2" {...props}>
     <span
       className={cn(

src/components/ui/sidebar.tsx

@@ -1,3 +1,4 @@
+/* eslint-disable react-refresh/only-export-components */
 import * as React from "react";
 import { Slot } from "@radix-ui/react-slot";
 import { cva, type VariantProps } from "class-variance-authority";
@@ -8,13 +9,6 @@ import { cn } from "@/lib/utils";
 import { Button } from "@/components/ui/button";
 import { Input } from "@/components/ui/input";
 import { Separator } from "@/components/ui/separator";
-import {
-  Sheet,
-  SheetContent,
-  SheetDescription,
-  SheetHeader,
-  SheetTitle,
-} from "@/components/ui/sheet";
 import { Skeleton } from "@/components/ui/skeleton";
 import {
   Tooltip,
@@ -26,7 +20,6 @@ import {
 const SIDEBAR_COOKIE_NAME = "sidebar_state";
 const SIDEBAR_COOKIE_MAX_AGE = 60 * 60 * 24 * 7;
 const SIDEBAR_WIDTH = "16rem";
-const SIDEBAR_WIDTH_MOBILE = "18rem";
 const SIDEBAR_WIDTH_ICON = "3rem";
 const SIDEBAR_KEYBOARD_SHORTCUT = "b";
 
@@ -161,7 +154,7 @@ function Sidebar({
   variant?: "sidebar" | "floating" | "inset";
   collapsible?: "offcanvas" | "icon" | "none";
 }) {
-  const { isMobile, state, openMobile, setOpenMobile } = useSidebar();
+  const { state } = useSidebar();
 
   if (collapsible === "none") {
     return (

src/components/ui/sonner.tsx

@@ -8,7 +8,10 @@ const Toaster = ({ ...props }: ToasterProps) => {
 
   const originalToast = toast;
 
-  const rateLimitedToast = (message: string, options?: any) => {
+  const rateLimitedToast = (
+    message: string,
+    options?: Record<string, unknown>,
+  ) => {
     const now = Date.now();
     const lastToast = lastToastRef.current;
 
@@ -25,13 +28,13 @@ const Toaster = ({ ...props }: ToasterProps) => {
   };
 
   Object.assign(toast, {
-    success: (message: string, options?: any) =>
+    success: (message: string, options?: Record<string, unknown>) =>
       rateLimitedToast(message, { ...options, type: "success" }),
-    error: (message: string, options?: any) =>
+    error: (message: string, options?: Record<string, unknown>) =>
       rateLimitedToast(message, { ...options, type: "error" }),
-    warning: (message: string, options?: any) =>
+    warning: (message: string, options?: Record<string, unknown>) =>
       rateLimitedToast(message, { ...options, type: "warning" }),
-    info: (message: string, options?: any) =>
+    info: (message: string, options?: Record<string, unknown>) =>
       rateLimitedToast(message, { ...options, type: "info" }),
     message: rateLimitedToast,
   });

src/components/ui/textarea.tsx

@@ -2,8 +2,7 @@ import * as React from "react";
 
 import { cn } from "../../lib/utils";
 
-export interface TextareaProps
+export type TextareaProps = React.TextareaHTMLAttributes<HTMLTextAreaElement>;
-  extends React.TextareaHTMLAttributes<HTMLTextAreaElement> {}
 
 const Textarea = React.forwardRef<HTMLTextAreaElement, TextareaProps>(
   ({ className, ...props }, ref) => {

src/components/ui/version-check-modal.tsx

@@ -1,25 +1,25 @@
 import React, { useState, useEffect } from "react";
 import { Button } from "@/components/ui/button.tsx";
 import { VersionAlert } from "@/components/ui/version-alert.tsx";
-import { RefreshCw, X } from "lucide-react";
 import { useTranslation } from "react-i18next";
 import { checkElectronUpdate, isElectron } from "@/ui/main-axios.ts";
 
 interface VersionCheckModalProps {
-  onDismiss: () => void;
   onContinue: () => void;
   isAuthenticated?: boolean;
 }
 
 export function VersionCheckModal({
-  onDismiss,
   onContinue,
   isAuthenticated = false,
 }: VersionCheckModalProps) {
   const { t } = useTranslation();
-  const [versionInfo, setVersionInfo] = useState<any>(null);
+  const [versionInfo, setVersionInfo] = useState<Record<
+    string,
+    unknown
+  > | null>(null);
   const [versionChecking, setVersionChecking] = useState(false);
-  const [versionDismissed, setVersionDismissed] = useState(false);
+  const [versionDismissed] = useState(false);
 
   useEffect(() => {
     if (isElectron()) {
@@ -47,10 +47,6 @@ export function VersionCheckModal({
     }
   };
 
-  const handleVersionDismiss = () => {
-    setVersionDismissed(true);
-  };
-
   const handleDownloadUpdate = () => {
     if (versionInfo?.latest_release?.html_url) {
       window.open(versionInfo.latest_release.html_url, "_blank");

src/lib/frontend-logger.ts

@@ -17,7 +17,7 @@ export interface LogContext {
   errorCode?: string;
   errorMessage?: string;
 
-  [key: string]: any;
+  [key: string]: unknown;
 }
 
 class FrontendLogger {
@@ -218,7 +218,6 @@ class FrontendLogger {
     context?: LogContext,
   ): void {
     const cleanUrl = this.sanitizeUrl(url);
-    const shortUrl = this.getShortUrl(cleanUrl);
     const statusIcon = this.getStatusIcon(status);
     const performanceIcon = this.getPerformanceIcon(responseTime);
 
@@ -244,7 +243,6 @@ class FrontendLogger {
     context?: LogContext,
   ): void {
     const cleanUrl = this.sanitizeUrl(url);
-    const shortUrl = this.getShortUrl(cleanUrl);
     const statusIcon = this.getStatusIcon(status);
 
     this.error(`← ${statusIcon} ${status} ${errorMessage}`, undefined, {
@@ -265,7 +263,6 @@ class FrontendLogger {
     context?: LogContext,
   ): void {
     const cleanUrl = this.sanitizeUrl(url);
-    const shortUrl = this.getShortUrl(cleanUrl);
 
     this.error(`🌐 Network Error: ${errorMessage}`, undefined, {
       ...context,
@@ -279,7 +276,6 @@ class FrontendLogger {
 
   authError(method: string, url: string, context?: LogContext): void {
     const cleanUrl = this.sanitizeUrl(url);
-    const shortUrl = this.getShortUrl(cleanUrl);
 
     this.security(`🔐 Authentication Required`, {
       ...context,
@@ -298,7 +294,6 @@ class FrontendLogger {
     context?: LogContext,
   ): void {
     const cleanUrl = this.sanitizeUrl(url);
-    const shortUrl = this.getShortUrl(cleanUrl);
 
     this.retry(`🔄 Retry ${attempt}/${maxAttempts}`, {
       ...context,
@@ -384,5 +379,6 @@ export const tunnelLogger = new FrontendLogger("TUNNEL", "📡", "#1e3a8a");
 export const fileLogger = new FrontendLogger("FILE", "📁", "#1e3a8a");
 export const statsLogger = new FrontendLogger("STATS", "📊", "#22c55e");
 export const systemLogger = new FrontendLogger("SYSTEM", "🚀", "#1e3a8a");
+export const homepageLogger = new FrontendLogger("HOMEPAGE", "🏠", "#ec4899");
 
 export const logger = systemLogger;

src/locales/en/translation.json

@@ -191,6 +191,40 @@
     "enableRightClickCopyPaste": "Enable right‑click copy/paste",
     "shareIdeas": "Have ideas for what should come next for ssh tools? Share them on"
   },
+  "snippets": {
+    "title": "Snippets",
+    "new": "New Snippet",
+    "create": "Create Snippet",
+    "edit": "Edit Snippet",
+    "run": "Run",
+    "empty": "No snippets yet",
+    "emptyHint": "Create a snippet to save commonly used commands",
+    "name": "Name",
+    "description": "Description",
+    "content": "Command",
+    "namePlaceholder": "e.g., Restart Nginx",
+    "descriptionPlaceholder": "Optional description",
+    "contentPlaceholder": "e.g., sudo systemctl restart nginx",
+    "nameRequired": "Name is required",
+    "contentRequired": "Command is required",
+    "createDescription": "Create a new command snippet for quick execution",
+    "editDescription": "Edit this command snippet",
+    "deleteConfirmTitle": "Delete Snippet",
+    "deleteConfirmDescription": "Are you sure you want to delete \"{{name}}\"?",
+    "createSuccess": "Snippet created successfully",
+    "updateSuccess": "Snippet updated successfully",
+    "deleteSuccess": "Snippet deleted successfully",
+    "createFailed": "Failed to create snippet",
+    "updateFailed": "Failed to update snippet",
+    "deleteFailed": "Failed to delete snippet",
+    "failedToFetch": "Failed to fetch snippets",
+    "executeSuccess": "Executing: {{name}}",
+    "copySuccess": "Copied \"{{name}}\" to clipboard",
+    "runTooltip": "Execute this snippet in the terminal",
+    "copyTooltip": "Copy snippet to clipboard",
+    "editTooltip": "Edit this snippet",
+    "deleteTooltip": "Delete this snippet"
+  },
   "homepage": {
     "loggedInTitle": "Logged in!",
     "loggedInMessage": "You are logged in! Use the sidebar to access all available tools. To get started, create an SSH Host in the SSH Manager tab. Once created, you can connect to that host using the other apps in the sidebar.",
@@ -357,6 +391,7 @@
     "admin": "Admin",
     "userProfile": "User Profile",
     "tools": "Tools",
+    "snippets": "Snippets",
     "newTab": "New Tab",
     "splitScreen": "Split Screen",
     "closeTab": "Close Tab",
@@ -410,10 +445,12 @@
     "general": "General",
     "userRegistration": "User Registration",
     "allowNewAccountRegistration": "Allow new account registration",
+    "allowPasswordLogin": "Allow username/password login",
     "missingRequiredFields": "Missing required fields: {{fields}}",
     "oidcConfigurationUpdated": "OIDC configuration updated successfully!",
     "failedToFetchOidcConfig": "Failed to fetch OIDC configuration",
     "failedToFetchRegistrationStatus": "Failed to fetch registration status",
+    "failedToFetchPasswordLoginStatus": "Failed to fetch password login status",
     "failedToFetchUsers": "Failed to fetch users",
     "oidcConfigurationDisabled": "OIDC configuration disabled successfully!",
     "failedToUpdateOidcConfig": "Failed to update OIDC configuration",
@@ -669,14 +706,34 @@
     "terminal": "Terminal",
     "tunnel": "Tunnel",
     "fileManager": "File Manager",
+    "serverStats": "Server Stats",
     "hostViewer": "Host Viewer",
+    "enableServerStats": "Enable Server Stats",
+    "enableServerStatsDesc": "Enable/disable server statistics collection for this host",
+    "displayItems": "Display Items",
+    "displayItemsDesc": "Choose which metrics to display on the server stats page",
+    "enableCpu": "CPU Usage",
+    "enableMemory": "Memory Usage",
+    "enableDisk": "Disk Usage",
+    "enableNetwork": "Network Statistics (Coming Soon)",
+    "enableProcesses": "Process Count (Coming Soon)",
+    "enableUptime": "Uptime (Coming Soon)",
+    "enableHostname": "Hostname (Coming Soon)",
+    "enableOs": "Operating System (Coming Soon)",
+    "customCommands": "Custom Commands (Coming Soon)",
+    "customCommandsDesc": "Define custom shutdown and reboot commands for this server",
+    "shutdownCommand": "Shutdown Command",
+    "rebootCommand": "Reboot Command",
     "confirmRemoveFromFolder": "Are you sure you want to remove \"{{name}}\" from folder \"{{folder}}\"? The host will be moved to \"No Folder\".",
     "removedFromFolder": "Host \"{{name}}\" removed from folder successfully",
     "failedToRemoveFromFolder": "Failed to remove host from folder",
     "folderRenamed": "Folder \"{{oldName}}\" renamed to \"{{newName}}\" successfully",
     "failedToRenameFolder": "Failed to rename folder",
     "movedToFolder": "Host \"{{name}}\" moved to \"{{folder}}\" successfully",
-    "failedToMoveToFolder": "Failed to move host to folder"
+    "failedToMoveToFolder": "Failed to move host to folder",
+    "statistics": "Statistics",
+    "enabledWidgets": "Enabled Widgets",
+    "enabledWidgetsDesc": "Select which statistics widgets to display for this host"
   },
   "terminal": {
     "title": "Terminal",
@@ -710,7 +767,11 @@
     "connectionTimeout": "Connection timeout",
     "terminalTitle": "Terminal - {{host}}",
     "terminalWithPath": "Terminal - {{host}}:{{path}}",
-    "runTitle": "Running {{command}} - {{host}}"
+    "runTitle": "Running {{command}} - {{host}}",
+    "totpRequired": "Two-Factor Authentication Required",
+    "totpCodeLabel": "Verification Code",
+    "totpPlaceholder": "000000",
+    "totpVerify": "Verify"
   },
   "fileManager": {
     "title": "File Manager",
@@ -994,7 +1055,9 @@
     "fileComparison": "File Comparison: {{file1}} vs {{file2}}",
     "fileTooLarge": "File too large: {{error}}",
     "sshConnectionFailed": "SSH connection failed. Please check your connection to {{name}} ({{ip}}:{{port}})",
-    "loadFileFailed": "Failed to load file: {{error}}"
+    "loadFileFailed": "Failed to load file: {{error}}",
+    "connectedSuccessfully": "Connected successfully",
+    "totpVerificationFailed": "TOTP verification failed"
   },
   "tunnels": {
     "title": "SSH Tunnels",
@@ -1083,6 +1146,7 @@
     "loadAverageNA": "Avg: N/A",
     "cpuUsage": "CPU Usage",
     "memoryUsage": "Memory Usage",
+    "diskUsage": "Disk Usage",
     "rootStorageSpace": "Root Storage Space",
     "of": "of",
     "feedbackMessage": "Have ideas for what should come next for server management? Share them on",
@@ -1094,9 +1158,29 @@
     "refreshing": "Refreshing...",
     "serverOffline": "Server Offline",
     "cannotFetchMetrics": "Cannot fetch metrics from offline server",
+    "totpRequired": "TOTP Authentication Required",
+    "totpUnavailable": "Server Stats unavailable for TOTP-enabled servers",
     "load": "Load",
     "free": "Free",
-    "available": "Available"
+    "available": "Available",
+    "editLayout": "Edit Layout",
+    "cancelEdit": "Cancel",
+    "addWidget": "Add Widget",
+    "saveLayout": "Save Layout",
+    "unsavedChanges": "Unsaved changes",
+    "layoutSaved": "Layout saved successfully",
+    "failedToSaveLayout": "Failed to save layout",
+    "systemInfo": "System Information",
+    "hostname": "Hostname",
+    "operatingSystem": "Operating System",
+    "kernel": "Kernel",
+    "totalUptime": "Total Uptime",
+    "seconds": "seconds",
+    "networkInterfaces": "Network Interfaces",
+    "noInterfacesFound": "No network interfaces found",
+    "totalProcesses": "Total Processes",
+    "running": "Running",
+    "noProcessesFound": "No processes found"
   },
   "auth": {
     "loginTitle": "Login to Termix",

src/locales/zh/translation.json

@@ -189,6 +189,40 @@
     "enableRightClickCopyPaste": "启用右键复制/粘贴",
     "shareIdeas": "对 SSH 工具有什么想法？在此分享"
   },
+  "snippets": {
+    "title": "代码片段",
+    "new": "新建片段",
+    "create": "创建代码片段",
+    "edit": "编辑代码片段",
+    "run": "运行",
+    "empty": "暂无代码片段",
+    "emptyHint": "创建代码片段以保存常用命令",
+    "name": "名称",
+    "description": "描述",
+    "content": "命令",
+    "namePlaceholder": "例如: 重启 Nginx",
+    "descriptionPlaceholder": "可选描述",
+    "contentPlaceholder": "例如: sudo systemctl restart nginx",
+    "nameRequired": "名称不能为空",
+    "contentRequired": "命令不能为空",
+    "createDescription": "创建新的命令片段以便快速执行",
+    "editDescription": "编辑此命令片段",
+    "deleteConfirmTitle": "删除代码片段",
+    "deleteConfirmDescription": "确定要删除 \"{{name}}\" 吗？",
+    "createSuccess": "代码片段创建成功",
+    "updateSuccess": "代码片段更新成功",
+    "deleteSuccess": "代码片段删除成功",
+    "createFailed": "创建代码片段失败",
+    "updateFailed": "更新代码片段失败",
+    "deleteFailed": "删除代码片段失败",
+    "failedToFetch": "获取代码片段失败",
+    "executeSuccess": "正在执行: {{name}}",
+    "copySuccess": "已复制 \"{{name}}\" 到剪贴板",
+    "runTooltip": "在终端中执行此片段",
+    "copyTooltip": "复制片段到剪贴板",
+    "editTooltip": "编辑此片段",
+    "deleteTooltip": "删除此片段"
+  },
   "homepage": {
     "loggedInTitle": "登录成功！",
     "loggedInMessage": "您已登录！使用侧边栏访问所有可用工具。要开始使用，请在 SSH 管理器选项卡中创建 SSH 主机。创建后，您可以使用侧边栏中的其他应用程序连接到该主机。",
@@ -343,6 +377,7 @@
     "admin": "管理员",
     "userProfile": "用户资料",
     "tools": "工具",
+    "snippets": "代码片段",
     "newTab": "新标签页",
     "splitScreen": "分屏",
     "closeTab": "关闭标签页",
@@ -396,10 +431,12 @@
     "general": "常规",
     "userRegistration": "用户注册",
     "allowNewAccountRegistration": "允许新账户注册",
+    "allowPasswordLogin": "允许用户名/密码登录",
     "missingRequiredFields": "缺少必填字段：{{fields}}",
     "oidcConfigurationUpdated": "OIDC 配置更新成功！",
     "failedToFetchOidcConfig": "获取 OIDC 配置失败",
     "failedToFetchRegistrationStatus": "获取注册状态失败",
+    "failedToFetchPasswordLoginStatus": "获取密码登录状态失败",
     "failedToFetchUsers": "获取用户列表失败",
     "oidcConfigurationDisabled": "OIDC 配置禁用成功！",
     "failedToUpdateOidcConfig": "更新 OIDC 配置失败",
@@ -691,19 +728,44 @@
     "terminal": "终端",
     "tunnel": "隧道",
     "fileManager": "文件管理器",
+    "serverStats": "服务器统计",
+    "hostViewer": "主机查看器",
+    "enableServerStats": "启用服务器统计",
+    "enableServerStatsDesc": "启用/禁用此主机的服务器统计信息收集",
+    "displayItems": "显示项目",
+    "displayItemsDesc": "选择在服务器统计页面上显示哪些指标",
+    "enableCpu": "CPU使用率",
+    "enableMemory": "内存使用率",
+    "enableDisk": "磁盘使用率",
+    "enableNetwork": "网络统计（即将推出）",
+    "enableProcesses": "进程数（即将推出）",
+    "enableUptime": "运行时间（即将推出）",
+    "enableHostname": "主机名（即将推出）",
+    "enableOs": "操作系统（即将推出）",
+    "customCommands": "自定义命令（即将推出）",
+    "customCommandsDesc": "为此服务器定义自定义关机和重启命令",
+    "shutdownCommand": "关机命令",
+    "rebootCommand": "重启命令",
     "confirmRemoveFromFolder": "确定要将\"{{name}}\"从文件夹\"{{folder}}\"中移除吗？主机将被移动到\"无文件夹\"。",
     "removedFromFolder": "主机\"{{name}}\"已成功从文件夹中移除",
     "failedToRemoveFromFolder": "从文件夹中移除主机失败",
     "folderRenamed": "文件夹\"{{oldName}}\"已成功重命名为\"{{newName}}\"",
     "failedToRenameFolder": "重命名文件夹失败",
     "movedToFolder": "主机\"{{name}}\"已成功移动到\"{{folder}}\"",
-    "failedToMoveToFolder": "移动主机到文件夹失败"
+    "failedToMoveToFolder": "移动主机到文件夹失败",
+    "statistics": "统计",
+    "enabledWidgets": "已启用组件",
+    "enabledWidgetsDesc": "选择要为此主机显示的统计组件"
   },
   "terminal": {
     "title": "终端",
     "terminalTitle": "终端 - {{host}}",
     "terminalWithPath": "终端 - {{host}}:{{path}}",
     "runTitle": "运行 {{command}} - {{host}}",
+    "totpRequired": "需要双因素认证",
+    "totpCodeLabel": "验证码",
+    "totpPlaceholder": "000000",
+    "totpVerify": "验证",
     "connect": "连接主机",
     "disconnect": "断开连接",
     "clear": "清屏",
@@ -985,7 +1047,9 @@
     "fileComparison": "文件对比：{{file1}} 与 {{file2}}",
     "fileTooLarge": "文件过大：{{error}}",
     "sshConnectionFailed": "SSH 连接失败。请检查与 {{name}} ({{ip}}:{{port}}) 的连接",
-    "loadFileFailed": "加载文件失败：{{error}}"
+    "loadFileFailed": "加载文件失败：{{error}}",
+    "connectedSuccessfully": "连接成功",
+    "totpVerificationFailed": "TOTP 验证失败"
   },
   "tunnels": {
     "title": "SSH 隧道",
@@ -1063,6 +1127,7 @@
     "loadAverageNA": "平均: N/A",
     "cpuUsage": "CPU 使用率",
     "memoryUsage": "内存使用率",
+    "diskUsage": "磁盘使用率",
     "rootStorageSpace": "根目录存储空间",
     "of": "的",
     "feedbackMessage": "对服务器管理的下一步功能有想法？在这里分享吧",
@@ -1073,7 +1138,29 @@
     "refreshing": "正在刷新...",
     "serverOffline": "服务器离线",
     "cannotFetchMetrics": "无法从离线服务器获取指标",
-    "load": "负载"
+    "totpRequired": "需要 TOTP 认证",
+    "totpUnavailable": "启用了 TOTP 的服务器无法使用服务器统计功能",
+    "load": "负载",
+    "free": "空闲",
+    "available": "可用",
+    "editLayout": "编辑布局",
+    "cancelEdit": "取消",
+    "addWidget": "添加小组件",
+    "saveLayout": "保存布局",
+    "unsavedChanges": "有未保存的更改",
+    "layoutSaved": "布局保存成功",
+    "failedToSaveLayout": "保存布局失败",
+    "systemInfo": "系统信息",
+    "hostname": "主机名",
+    "operatingSystem": "操作系统",
+    "kernel": "内核",
+    "totalUptime": "总运行时间",
+    "seconds": "秒",
+    "networkInterfaces": "网络接口",
+    "noInterfacesFound": "未找到网络接口",
+    "totalProcesses": "总进程数",
+    "running": "运行中",
+    "noProcessesFound": "未找到进程"
   },
   "auth": {
     "loginTitle": "登录 Termix",

src/main.tsx

@@ -1,3 +1,4 @@
+/* eslint-disable react-refresh/only-export-components */
 import { StrictMode, useEffect, useState, useRef } from "react";
 import { createRoot } from "react-dom/client";
 import "./index.css";
@@ -9,7 +10,6 @@ import { isElectron } from "./ui/main-axios.ts";
 
 function useWindowWidth() {
   const [width, setWidth] = useState(window.innerWidth);
-  const [isMobile, setIsMobile] = useState(window.innerWidth < 768);
   const lastSwitchTime = useRef(0);
   const isCurrentlyMobile = useRef(window.innerWidth < 768);
   const hasSwitchedOnce = useRef(false);
@@ -36,7 +36,6 @@ function useWindowWidth() {
           isCurrentlyMobile.current = newIsMobile;
           hasSwitchedOnce.current = true;
           setWidth(newWidth);
-          setIsMobile(newIsMobile);
         } else {
           setWidth(newWidth);
         }

src/types/electron.d.ts

@@ -1,22 +1,49 @@
+interface ServerConfig {
+  serverUrl?: string;
+  [key: string]: unknown;
+}
+
+interface ConnectionTestResult {
+  success: boolean;
+  error?: string;
+  [key: string]: unknown;
+}
+
+interface DialogOptions {
+  title?: string;
+  defaultPath?: string;
+  buttonLabel?: string;
+  filters?: Array<{ name: string; extensions: string[] }>;
+  properties?: string[];
+  [key: string]: unknown;
+}
+
+interface DialogResult {
+  canceled: boolean;
+  filePath?: string;
+  filePaths?: string[];
+  [key: string]: unknown;
+}
+
 export interface ElectronAPI {
   getAppVersion: () => Promise<string>;
   getPlatform: () => Promise<string>;
 
-  getServerConfig: () => Promise<any>;
+  getServerConfig: () => Promise<ServerConfig>;
-  saveServerConfig: (config: any) => Promise<any>;
+  saveServerConfig: (config: ServerConfig) => Promise<{ success: boolean }>;
-  testServerConnection: (serverUrl: string) => Promise<any>;
+  testServerConnection: (serverUrl: string) => Promise<ConnectionTestResult>;
 
-  showSaveDialog: (options: any) => Promise<any>;
+  showSaveDialog: (options: DialogOptions) => Promise<DialogResult>;
-  showOpenDialog: (options: any) => Promise<any>;
+  showOpenDialog: (options: DialogOptions) => Promise<DialogResult>;
 
-  onUpdateAvailable: (callback: Function) => void;
+  onUpdateAvailable: (callback: () => void) => void;
-  onUpdateDownloaded: (callback: Function) => void;
+  onUpdateDownloaded: (callback: () => void) => void;
 
   removeAllListeners: (channel: string) => void;
   isElectron: boolean;
   isDev: boolean;
 
-  invoke: (channel: string, ...args: any[]) => Promise<any>;
+  invoke: (channel: string, ...args: unknown[]) => Promise<unknown>;
 
   createTempFile: (fileData: {
     fileName: string;

src/types/index.ts

@@ -1,9 +1,9 @@
 // ============================================================================
 // CENTRAL TYPE DEFINITIONS
 // ============================================================================
-// This file contains all shared interfaces and types used across the application
 
 import type { Client } from "ssh2";
+import type { Request } from "express";
 
 // ============================================================================
 // SSH HOST TYPES
@@ -35,6 +35,7 @@ export interface SSHHost {
   enableFileManager: boolean;
   defaultPath: string;
   tunnelConnections: TunnelConnection[];
+  statsConfig?: string;
   createdAt: string;
   updatedAt: string;
 }
@@ -57,7 +58,8 @@ export interface SSHHostData {
   enableTunnel?: boolean;
   enableFileManager?: boolean;
   defaultPath?: string;
-  tunnelConnections?: any[];
+  tunnelConnections?: TunnelConnection[];
+  statsConfig?: string;
 }
 
 // ============================================================================
@@ -261,8 +263,9 @@ export interface TabContextTab {
     | "file_manager"
     | "user_profile";
   title: string;
-  hostConfig?: any;
+  hostConfig?: SSHHost;
-  terminalRef?: React.RefObject<any>;
+  terminalRef?: any;
+  initialTab?: string; // For ssh_manager: "host_viewer" | "add_host" | "credentials" | "add_credential"
 }
 
 // ============================================================================
@@ -303,7 +306,7 @@ export type KeyType = "rsa" | "ecdsa" | "ed25519";
 // API RESPONSE TYPES
 // ============================================================================
 
-export interface ApiResponse<T = any> {
+export interface ApiResponse<T = unknown> {
   data?: T;
   error?: string;
   message?: string;
@@ -337,6 +340,7 @@ export interface CredentialSelectorProps {
 export interface HostManagerProps {
   onSelectView?: (view: string) => void;
   isTopbarOpen?: boolean;
+  initialTab?: string;
 }
 
 export interface SSHManagerHostEditorProps {
@@ -366,13 +370,13 @@ export interface SSHTunnelViewerProps {
       action: "connect" | "disconnect" | "cancel",
       host: SSHHost,
       tunnelIndex: number,
-    ) => Promise<any>
+    ) => Promise<void>
   >;
   onTunnelAction?: (
     action: "connect" | "disconnect" | "cancel",
     host: SSHHost,
     tunnelIndex: number,
-  ) => Promise<any>;
+  ) => Promise<void>;
 }
 
 export interface FileManagerProps {
@@ -400,7 +404,7 @@ export interface SSHTunnelObjectProps {
     action: "connect" | "disconnect" | "cancel",
     host: SSHHost,
     tunnelIndex: number,
-  ) => Promise<any>;
+  ) => Promise<void>;
   compact?: boolean;
   bare?: boolean;
 }
@@ -413,6 +417,26 @@ export interface FolderStats {
   }>;
 }
 
+// ============================================================================
+// SNIPPETS TYPES
+// ============================================================================
+
+export interface Snippet {
+  id: number;
+  userId: string;
+  name: string;
+  content: string;
+  description?: string;
+  createdAt: string;
+  updatedAt: string;
+}
+
+export interface SnippetData {
+  name: string;
+  content: string;
+  description?: string;
+}
+
 // ============================================================================
 // BACKEND TYPES
 // ============================================================================
@@ -439,3 +463,95 @@ export type Optional<T, K extends keyof T> = Omit<T, K> & Partial<Pick<T, K>>;
 export type RequiredFields<T, K extends keyof T> = T & Required<Pick<T, K>>;
 
 export type PartialExcept<T, K extends keyof T> = Partial<T> & Pick<T, K>;
+
+// ============================================================================
+// EXPRESS REQUEST TYPES
+// ============================================================================
+
+export interface AuthenticatedRequest extends Request {
+  userId: string;
+  user?: {
+    id: string;
+    username: string;
+    isAdmin: boolean;
+  };
+}
+
+// ============================================================================
+// GITHUB API TYPES
+// ============================================================================
+
+export interface GitHubAsset {
+  id: number;
+  name: string;
+  size: number;
+  download_count: number;
+  browser_download_url: string;
+}
+
+export interface GitHubRelease {
+  id: number;
+  tag_name: string;
+  name: string;
+  body: string;
+  published_at: string;
+  html_url: string;
+  assets: GitHubAsset[];
+  prerelease: boolean;
+  draft: boolean;
+}
+
+export interface GitHubAPIResponse<T> {
+  data: T;
+  cached: boolean;
+  cache_age?: number;
+  timestamp?: number;
+}
+
+// ============================================================================
+// CACHE TYPES
+// ============================================================================
+
+export interface CacheEntry<T = unknown> {
+  data: T;
+  timestamp: number;
+  expiresAt: number;
+}
+
+// ============================================================================
+// DATABASE EXPORT/IMPORT TYPES
+// ============================================================================
+
+export interface ExportSummary {
+  sshHostsImported: number;
+  sshCredentialsImported: number;
+  fileManagerItemsImported: number;
+  dismissedAlertsImported: number;
+  credentialUsageImported: number;
+  settingsImported: number;
+  skippedItems: number;
+  errors: string[];
+}
+
+export interface ImportResult {
+  success: boolean;
+  summary: ExportSummary;
+}
+
+export interface ExportRequestBody {
+  password: string;
+}
+
+export interface ImportRequestBody {
+  password: string;
+}
+
+export interface ExportPreviewBody {
+  scope?: string;
+  includeCredentials?: boolean;
+}
+
+export interface RestoreRequestBody {
+  backupPath: string;
+  targetPath?: string;
+}

src/types/stats-widgets.ts

@@ -0,0 +1,16 @@
+export type WidgetType =
+  | "cpu"
+  | "memory"
+  | "disk"
+  | "network"
+  | "uptime"
+  | "processes"
+  | "system";
+
+export interface StatsConfig {
+  enabledWidgets: WidgetType[];
+}
+
+export const DEFAULT_STATS_CONFIG: StatsConfig = {
+  enabledWidgets: ["cpu", "memory", "disk", "network", "uptime", "system"],
+};

src/ui/Desktop/Admin/AdminSettings.tsx

@@ -26,7 +26,6 @@ import {
   Trash2,
   Users,
   Database,
-  Key,
   Lock,
   Download,
   Upload,
@@ -37,8 +36,10 @@ import { useConfirmation } from "@/hooks/use-confirmation.ts";
 import {
   getOIDCConfig,
   getRegistrationAllowed,
+  getPasswordLoginAllowed,
   getUserList,
   updateRegistrationAllowed,
+  updatePasswordLoginAllowed,
   updateOIDCConfig,
   disableOIDCConfig,
   makeUserAdmin,
@@ -63,6 +64,9 @@ export function AdminSettings({
   const [allowRegistration, setAllowRegistration] = React.useState(true);
   const [regLoading, setRegLoading] = React.useState(false);
 
+  const [allowPasswordLogin, setAllowPasswordLogin] = React.useState(true);
+  const [passwordLoginLoading, setPasswordLoginLoading] = React.useState(false);
+
   const [oidcConfig, setOidcConfig] = React.useState({
     client_id: "",
     client_secret: "",
@@ -107,7 +111,6 @@ export function AdminSettings({
   const [showPasswordInput, setShowPasswordInput] = React.useState(false);
   const [importPassword, setImportPassword] = React.useState("");
 
-  // Only local accounts need to confirm their password before we post the import request.
   const requiresImportPassword = React.useMemo(
     () => !currentUser?.is_oidc,
     [currentUser?.is_oidc],
@@ -115,7 +118,8 @@ export function AdminSettings({
 
   React.useEffect(() => {
     if (isElectron()) {
-      const serverUrl = (window as any).configuredServerUrl;
+      const serverUrl = (window as { configuredServerUrl?: string })
+        .configuredServerUrl;
       if (!serverUrl) {
         return;
       }
@@ -152,7 +156,8 @@ export function AdminSettings({
 
   React.useEffect(() => {
     if (isElectron()) {
-      const serverUrl = (window as any).configuredServerUrl;
+      const serverUrl = (window as { configuredServerUrl?: string })
+        .configuredServerUrl;
       if (!serverUrl) {
         return;
       }
@@ -171,9 +176,32 @@ export function AdminSettings({
       });
   }, []);
 
+  React.useEffect(() => {
+    if (isElectron()) {
+      const serverUrl = (window as { configuredServerUrl?: string })
+        .configuredServerUrl;
+      if (!serverUrl) {
+        return;
+      }
+    }
+
+    getPasswordLoginAllowed()
+      .then((res) => {
+        if (typeof res?.allowed === "boolean") {
+          setAllowPasswordLogin(res.allowed);
+        }
+      })
+      .catch((err) => {
+        if (err.code !== "NO_SERVER_CONFIGURED") {
+          toast.error(t("admin.failedToFetchPasswordLoginStatus"));
+        }
+      });
+  }, []);
+
   const fetchUsers = async () => {
     if (isElectron()) {
-      const serverUrl = (window as any).configuredServerUrl;
+      const serverUrl = (window as { configuredServerUrl?: string })
+        .configuredServerUrl;
       if (!serverUrl) {
         return;
       }
@@ -202,6 +230,16 @@ export function AdminSettings({
     }
   };
 
+  const handleTogglePasswordLogin = async (checked: boolean) => {
+    setPasswordLoginLoading(true);
+    try {
+      await updatePasswordLoginAllowed(checked);
+      setAllowPasswordLogin(checked);
+    } finally {
+      setPasswordLoginLoading(false);
+    }
+  };
+
   const handleOIDCConfigSubmit = async (e: React.FormEvent) => {
     e.preventDefault();
     setOidcLoading(true);
@@ -228,9 +266,10 @@ export function AdminSettings({
     try {
       await updateOIDCConfig(oidcConfig);
       toast.success(t("admin.oidcConfigurationUpdated"));
-    } catch (err: any) {
+    } catch (err: unknown) {
       setOidcError(
-        err?.response?.data?.error || t("admin.failedToUpdateOidcConfig"),
+        (err as { response?: { data?: { error?: string } } })?.response?.data
+          ?.error || t("admin.failedToUpdateOidcConfig"),
       );
     } finally {
       setOidcLoading(false);
@@ -251,9 +290,10 @@ export function AdminSettings({
       toast.success(t("admin.userIsNowAdmin", { username: newAdminUsername }));
       setNewAdminUsername("");
       fetchUsers();
-    } catch (err: any) {
+    } catch (err: unknown) {
       setMakeAdminError(
-        err?.response?.data?.error || t("admin.failedToMakeUserAdmin"),
+        (err as { response?: { data?: { error?: string } } })?.response?.data
+          ?.error || t("admin.failedToMakeUserAdmin"),
       );
     } finally {
       setMakeAdminLoading(false);
@@ -266,7 +306,7 @@ export function AdminSettings({
         await removeAdminStatus(username);
         toast.success(t("admin.adminStatusRemoved", { username }));
         fetchUsers();
-      } catch (err: any) {
+      } catch {
         toast.error(t("admin.failedToRemoveAdminStatus"));
       }
     });
@@ -280,7 +320,7 @@ export function AdminSettings({
           await deleteUser(username);
           toast.success(t("admin.userDeletedSuccessfully", { username }));
           fetchUsers();
-        } catch (err: any) {
+        } catch {
           toast.error(t("admin.failedToDeleteUser"));
         }
       },
@@ -310,7 +350,7 @@ export function AdminSettings({
           window.location.hostname === "127.0.0.1");
 
       const apiUrl = isElectron()
-        ? `${(window as any).configuredServerUrl}/database/export`
+        ? `${(window as { configuredServerUrl?: string }).configuredServerUrl}/database/export`
         : isDev
           ? `http://localhost:30001/database/export`
           : `${window.location.protocol}//${window.location.host}/database/export`;
@@ -351,7 +391,7 @@ export function AdminSettings({
           toast.error(error.error || t("admin.databaseExportFailed"));
         }
       }
-    } catch (err) {
+    } catch {
       toast.error(t("admin.databaseExportFailed"));
     } finally {
       setExportLoading(false);
@@ -380,7 +420,7 @@ export function AdminSettings({
           window.location.hostname === "127.0.0.1");
 
       const apiUrl = isElectron()
-        ? `${(window as any).configuredServerUrl}/database/import`
+        ? `${(window as { configuredServerUrl?: string }).configuredServerUrl}/database/import`
         : isDev
           ? `http://localhost:30001/database/import`
           : `${window.location.protocol}//${window.location.host}/database/import`;
@@ -446,7 +486,7 @@ export function AdminSettings({
           toast.error(error.error || t("admin.databaseImportFailed"));
         }
       }
-    } catch (err) {
+    } catch {
       toast.error(t("admin.databaseImportFailed"));
     } finally {
       setImportLoading(false);
@@ -516,6 +556,14 @@ export function AdminSettings({
                   />
                   {t("admin.allowNewAccountRegistration")}
                 </label>
+                <label className="flex items-center gap-2">
+                  <Checkbox
+                    checked={allowPasswordLogin}
+                    onCheckedChange={handleTogglePasswordLogin}
+                    disabled={passwordLoginLoading}
+                  />
+                  {t("admin.allowPasswordLogin")}
+                </label>
               </div>
             </TabsContent>
 
@@ -702,9 +750,13 @@ export function AdminSettings({
                         try {
                           await disableOIDCConfig();
                           toast.success(t("admin.oidcConfigurationDisabled"));
-                        } catch (err: any) {
+                        } catch (err: unknown) {
                           setOidcError(
-                            err?.response?.data?.error ||
+                            (
+                              err as {
+                                response?: { data?: { error?: string } };
+                              }
+                            )?.response?.data?.error ||
                               t("admin.failedToDisableOidcConfig"),
                           );
                         } finally {

src/ui/Desktop/Apps/Credentials/CredentialEditor.tsx

@@ -42,9 +42,9 @@ export function CredentialEditor({
   onFormSubmit,
 }: CredentialEditorProps) {
   const { t } = useTranslation();
-  const [credentials, setCredentials] = useState<Credential[]>([]);
+  const [, setCredentials] = useState<Credential[]>([]);
   const [folders, setFolders] = useState<string[]>([]);
-  const [loading, setLoading] = useState(true);
+  const [, setLoading] = useState(true);
   const [fullCredentialDetails, setFullCredentialDetails] =
     useState<Credential | null>(null);
 
@@ -79,7 +79,8 @@ export function CredentialEditor({
         ].sort() as string[];
 
         setFolders(uniqueFolders);
-      } catch (error) {
+      } catch {
+        // Failed to load credentials
       } finally {
         setLoading(false);
       }
@@ -94,7 +95,7 @@ export function CredentialEditor({
         try {
           const fullDetails = await getCredentialDetails(editingCredential.id);
           setFullCredentialDetails(fullDetails);
-        } catch (error) {
+        } catch {
           toast.error(t("credentials.failedToFetchCredentialDetails"));
         }
       } else {
@@ -154,7 +155,9 @@ export function CredentialEditor({
   type FormData = z.infer<typeof formSchema>;
 
   const form = useForm<FormData>({
-    resolver: zodResolver(formSchema) as any,
+    resolver: zodResolver(formSchema) as unknown as Parameters<
+      typeof useForm<FormData>
+    >[0]["resolver"],
     defaultValues: {
       name: "",
       description: "",
@@ -197,7 +200,7 @@ export function CredentialEditor({
           formData.publicKey = fullCredentialDetails.publicKey || "";
           formData.keyPassword = fullCredentialDetails.keyPassword || "";
           formData.keyType =
-            (fullCredentialDetails.keyType as any) || ("auto" as const);
+            (fullCredentialDetails.keyType as string) || ("auto" as const);
         }
 
         form.reset(formData);
@@ -636,10 +639,6 @@ export function CredentialEditor({
                     form.setValue("key", null);
                     form.setValue("keyPassword", "");
                     form.setValue("keyType", "auto");
-
-                    if (newAuthType === "password") {
-                    } else if (newAuthType === "key") {
-                    }
                   }}
                   className="flex-1 flex flex-col h-full min-h-0"
                 >

src/ui/Desktop/Apps/Credentials/CredentialSelector.tsx

@@ -35,7 +35,7 @@ export function CredentialSelector({
           ? data
           : data.credentials || data.data || [];
         setCredentials(credentialsArray);
-      } catch (error) {
+      } catch {
         const { toast } = await import("sonner");
         toast.error(t("credentials.failedToFetchCredentials"));
         setCredentials([]);

src/ui/Desktop/Apps/Credentials/CredentialViewer.tsx

@@ -70,7 +70,7 @@ const CredentialViewer: React.FC<CredentialViewerProps> = ({
     try {
       const response = await getCredentialDetails(credential.id);
       setCredentialDetails(response);
-    } catch (error) {
+    } catch {
       toast.error(t("credentials.failedToFetchCredentialDetails"));
     }
   };
@@ -79,7 +79,7 @@ const CredentialViewer: React.FC<CredentialViewerProps> = ({
     try {
       const response = await getCredentialHosts(credential.id);
       setHostsUsing(response);
-    } catch (error) {
+    } catch {
       toast.error(t("credentials.failedToFetchHostsUsing"));
     } finally {
       setLoading(false);
@@ -97,7 +97,7 @@ const CredentialViewer: React.FC<CredentialViewerProps> = ({
     try {
       await navigator.clipboard.writeText(text);
       toast.success(t("copiedToClipboard", { field: fieldName }));
-    } catch (error) {
+    } catch {
       toast.error(t("credentials.failedToCopy"));
     }
   };

src/ui/Desktop/Apps/Credentials/CredentialsManager.tsx

@@ -9,21 +9,7 @@ import {
   AccordionItem,
   AccordionTrigger,
 } from "@/components/ui/accordion";
-import {
+import { Sheet, SheetContent } from "@/components/ui/sheet";
-  Sheet,
-  SheetContent,
-  SheetDescription,
-  SheetFooter,
-  SheetHeader,
-  SheetTitle,
-} from "@/components/ui/sheet";
-import {
-  Select,
-  SelectContent,
-  SelectItem,
-  SelectTrigger,
-  SelectValue,
-} from "@/components/ui/select";
 import {
   Tooltip,
   TooltipContent,
@@ -37,7 +23,6 @@ import {
   Edit,
   Trash2,
   Shield,
-  Pin,
   Tag,
   Info,
   FolderMinus,
@@ -75,9 +60,7 @@ export function CredentialsManager({
   const [error, setError] = useState<string | null>(null);
   const [searchQuery, setSearchQuery] = useState("");
   const [showViewer, setShowViewer] = useState(false);
-  const [viewingCredential, setViewingCredential] = useState<Credential | null>(
+  const [viewingCredential] = useState<Credential | null>(null);
-    null,
-  );
   const [draggedCredential, setDraggedCredential] = useState<Credential | null>(
     null,
   );
@@ -88,7 +71,15 @@ export function CredentialsManager({
   const [showDeployDialog, setShowDeployDialog] = useState(false);
   const [deployingCredential, setDeployingCredential] =
     useState<Credential | null>(null);
-  const [availableHosts, setAvailableHosts] = useState<any[]>([]);
+  const [availableHosts, setAvailableHosts] = useState<
+    Array<{
+      id: number;
+      name: string;
+      ip: string;
+      port: number;
+      username: string;
+    }>
+  >([]);
   const [selectedHostId, setSelectedHostId] = useState<string>("");
   const [deployLoading, setDeployLoading] = useState(false);
   const [hostSearchQuery, setHostSearchQuery] = useState("");
@@ -153,7 +144,7 @@ export function CredentialsManager({
       const data = await getCredentials();
       setCredentials(data);
       setError(null);
-    } catch (err) {
+    } catch {
       setError(t("credentials.failedToFetchCredentials"));
     } finally {
       setLoading(false);
@@ -224,10 +215,13 @@ export function CredentialsManager({
           );
           await fetchCredentials();
           window.dispatchEvent(new CustomEvent("credentials:changed"));
-        } catch (err: any) {
+        } catch (err: unknown) {
-          if (err.response?.data?.details) {
+          const error = err as {
+            response?: { data?: { error?: string; details?: string } };
+          };
+          if (error.response?.data?.details) {
             toast.error(
-              `${err.response.data.error}\n${err.response.data.details}`,
+              `${error.response.data.error}\n${error.response.data.details}`,
             );
           } else {
             toast.error(t("credentials.failedToDeleteCredential"));
@@ -256,7 +250,7 @@ export function CredentialsManager({
           );
           await fetchCredentials();
           window.dispatchEvent(new CustomEvent("credentials:changed"));
-        } catch (err) {
+        } catch {
           toast.error(t("credentials.failedToRemoveFromFolder"));
         } finally {
           setOperationLoading(false);
@@ -285,7 +279,7 @@ export function CredentialsManager({
       window.dispatchEvent(new CustomEvent("credentials:changed"));
       setEditingFolder(null);
       setEditingFolderName("");
-    } catch (err) {
+    } catch {
       toast.error(t("credentials.failedToRenameFolder"));
     } finally {
       setOperationLoading(false);
@@ -325,7 +319,7 @@ export function CredentialsManager({
     setDragOverFolder(folderName);
   };
 
-  const handleDragLeave = (e: React.DragEvent) => {
+  const handleDragLeave = () => {
     dragCounter.current--;
     if (dragCounter.current === 0) {
       setDragOverFolder(null);
@@ -359,7 +353,7 @@ export function CredentialsManager({
       );
       await fetchCredentials();
       window.dispatchEvent(new CustomEvent("credentials:changed"));
-    } catch (err) {
+    } catch {
       toast.error(t("credentials.failedToMoveToFolder"));
     } finally {
       setOperationLoading(false);

src/ui/Desktop/Apps/Dashboard/Apps/Alerts/AlertCard.tsx

@@ -17,7 +17,7 @@ import {
   AlertCircle,
 } from "lucide-react";
 import { useTranslation } from "react-i18next";
-import type { TermixAlert } from "../../../types/index.js";
+import type { TermixAlert } from "../../../../../../types";
 
 interface AlertCardProps {
   alert: TermixAlert;
@@ -67,7 +67,7 @@ const getTypeBadgeVariant = (type?: string) => {
   }
 };
 
-export function HomepageAlertCard({
+export function AlertCard({
   alert,
   onDismiss,
   onClose,

src/ui/Desktop/Apps/Dashboard/Apps/Alerts/AlertManager.tsx

@@ -1,23 +1,23 @@
 import React, { useEffect, useState } from "react";
-import { HomepageAlertCard } from "./HomepageAlertCard.tsx";
+import { AlertCard } from "./AlertCard.tsx";
 import { Button } from "@/components/ui/button.tsx";
 import { getUserAlerts, dismissAlert } from "@/ui/main-axios.ts";
 import { useTranslation } from "react-i18next";
-import type { TermixAlert } from "../../../types/index.js";
+import type { TermixAlert } from "../../../../../../types";
 
 interface AlertManagerProps {
   userId: string | null;
   loggedIn: boolean;
 }
 
-export function HomepageAlertManager({
+export function AlertManager({
   userId,
   loggedIn,
 }: AlertManagerProps): React.ReactElement {
   const { t } = useTranslation();
   const [alerts, setAlerts] = useState<TermixAlert[]>([]);
   const [currentAlertIndex, setCurrentAlertIndex] = useState(0);
-  const [loading, setLoading] = useState(false);
+  const [, setLoading] = useState(false);
   const [error, setError] = useState<string | null>(null);
 
   useEffect(() => {
@@ -52,7 +52,7 @@ export function HomepageAlertManager({
 
       setAlerts(sortedAlerts);
       setCurrentAlertIndex(0);
-    } catch (err) {
+    } catch {
       const { toast } = await import("sonner");
       toast.error(t("homepage.failedToLoadAlerts"));
       setError(t("homepage.failedToLoadAlerts"));
@@ -77,7 +77,7 @@ export function HomepageAlertManager({
           return Math.max(0, newAlertsLength - 1);
         return prevIndex;
       });
-    } catch (err) {
+    } catch {
       setError(t("homepage.failedToDismissAlert"));
     }
   };
@@ -129,7 +129,7 @@ export function HomepageAlertManager({
   return (
     <div className="fixed inset-0 flex items-center justify-center bg-background/80 backdrop-blur-sm z-[99999]">
       <div className="relative w-full max-w-2xl mx-4">
-        <HomepageAlertCard
+        <AlertCard
           alert={currentAlert}
           onDismiss={handleDismissAlert}
           onClose={handleCloseCurrentAlert}

src/ui/Desktop/Apps/Dashboard/Apps/UpdateLog.tsx

@@ -0,0 +1,215 @@
+import React, { useEffect, useState } from "react";
+import { Alert, AlertDescription, AlertTitle } from "@/components/ui/alert.tsx";
+import { Separator } from "@/components/ui/separator.tsx";
+import { Button } from "@/components/ui/button.tsx";
+import {
+  Sheet,
+  SheetContent,
+  SheetHeader,
+  SheetTitle,
+  SheetDescription,
+} from "@/components/ui/sheet.tsx";
+import { getReleasesRSS, getVersionInfo } from "@/ui/main-axios.ts";
+import { useTranslation } from "react-i18next";
+import { BookOpen, X } from "lucide-react";
+
+interface UpdateLogProps extends React.ComponentProps<"div"> {
+  loggedIn: boolean;
+}
+
+interface ReleaseItem {
+  id: number;
+  title: string;
+  description: string;
+  link: string;
+  pubDate: string;
+  version: string;
+  isPrerelease: boolean;
+  isDraft: boolean;
+  assets: Array<{
+    name: string;
+    size: number;
+    download_count: number;
+    download_url: string;
+  }>;
+}
+
+interface RSSResponse {
+  feed: {
+    title: string;
+    description: string;
+    link: string;
+    updated: string;
+  };
+  items: ReleaseItem[];
+  total_count: number;
+  cached: boolean;
+  cache_age?: number;
+}
+
+interface VersionResponse {
+  status: "up_to_date" | "requires_update";
+  version: string;
+  latest_release: {
+    name: string;
+    published_at: string;
+    html_url: string;
+  };
+  cached: boolean;
+  cache_age?: number;
+}
+
+export function UpdateLog({ loggedIn }: UpdateLogProps) {
+  const { t } = useTranslation();
+  const [releases, setReleases] = useState<RSSResponse | null>(null);
+  const [versionInfo, setVersionInfo] = useState<VersionResponse | null>(null);
+  const [loading, setLoading] = useState(false);
+  const [error, setError] = useState<string | null>(null);
+  const [isOpen, setIsOpen] = useState(false);
+
+  useEffect(() => {
+    if (loggedIn && isOpen) {
+      setLoading(true);
+      Promise.all([getReleasesRSS(100), getVersionInfo()])
+        .then(([releasesRes, versionRes]) => {
+          setReleases(releasesRes);
+          setVersionInfo(versionRes);
+          setError(null);
+        })
+        .catch(() => {
+          setError(t("common.failedToFetchUpdateInfo"));
+        })
+        .finally(() => setLoading(false));
+    }
+  }, [loggedIn, isOpen]);
+
+  if (!loggedIn) {
+    return null;
+  }
+
+  const formatDescription = (description: string) => {
+    const firstLine = description.split("\n")[0];
+    return firstLine.replace(/[#*`]/g, "").replace(/\s+/g, " ").trim();
+  };
+
+  return (
+    <>
+      <Button
+        variant="outline"
+        size="sm"
+        className="ml-2 text-sm border-1 border-dark-border text-muted-foreground"
+        onClick={() => setIsOpen(true)}
+      >
+        {t("common.updatesAndReleases")}
+      </Button>
+
+      <Sheet open={isOpen} onOpenChange={setIsOpen}>
+        <SheetContent
+          side="right"
+          className="w-[500px] bg-dark-bg border-l-2 border-dark-border text-white sm:max-w-[500px] p-0 flex flex-col [&>button]:hidden"
+        >
+          <div className="flex items-center justify-between p-4 border-b border-dark-border">
+            <h2 className="text-lg font-semibold text-white">
+              {t("common.updatesAndReleases")}
+            </h2>
+            <Button
+              variant="outline"
+              size="sm"
+              onClick={() => setIsOpen(false)}
+              className="h-8 w-8 p-0 hover:bg-red-500 hover:text-white transition-colors flex items-center justify-center"
+              title={t("common.close")}
+            >
+              <X />
+            </Button>
+          </div>
+
+          <div className="flex-1 overflow-y-auto p-4">
+            {versionInfo && versionInfo.status === "requires_update" && (
+              <Alert className="bg-dark-bg-darker border-dark-border text-white mb-3">
+                <AlertTitle className="text-white">
+                  {t("common.updateAvailable")}
+                </AlertTitle>
+                <AlertDescription className="text-gray-300">
+                  {t("common.newVersionAvailable", {
+                    version: versionInfo.version,
+                  })}
+                </AlertDescription>
+              </Alert>
+            )}
+
+            {loading && (
+              <div className="flex items-center justify-center h-32">
+                <div className="animate-spin rounded-full h-8 w-8 border-b-2 border-blue-500"></div>
+              </div>
+            )}
+
+            {error && (
+              <Alert
+                variant="destructive"
+                className="bg-red-900/20 border-red-500 text-red-300 mb-3"
+              >
+                <AlertTitle className="text-red-300">
+                  {t("common.error")}
+                </AlertTitle>
+                <AlertDescription className="text-red-300">
+                  {error}
+                </AlertDescription>
+              </Alert>
+            )}
+
+            <div className="space-y-3">
+              {releases?.items.map((release) => (
+                <div
+                  key={release.id}
+                  className="border border-dark-border rounded-lg p-3 hover:bg-dark-bg-darker transition-colors cursor-pointer bg-dark-bg-darker/50"
+                  onClick={() => window.open(release.link, "_blank")}
+                >
+                  <div className="flex items-start justify-between mb-2">
+                    <h4 className="font-semibold text-sm leading-tight flex-1 text-white">
+                      {release.title}
+                    </h4>
+                    {release.isPrerelease && (
+                      <span className="text-xs bg-yellow-600 text-yellow-100 px-2 py-1 rounded ml-2 flex-shrink-0 font-medium">
+                        {t("common.preRelease")}
+                      </span>
+                    )}
+                  </div>
+
+                  <p className="text-xs text-gray-300 mb-2 leading-relaxed">
+                    {formatDescription(release.description)}
+                  </p>
+
+                  <div className="flex items-center text-xs text-gray-400">
+                    <span>
+                      {new Date(release.pubDate).toLocaleDateString()}
+                    </span>
+                    {release.assets.length > 0 && (
+                      <>
+                        <span className="mx-2">•</span>
+                        <span>
+                          {release.assets.length} asset
+                          {release.assets.length !== 1 ? "s" : ""}
+                        </span>
+                      </>
+                    )}
+                  </div>
+                </div>
+              ))}
+            </div>
+
+            {releases && releases.items.length === 0 && !loading && (
+              <Alert className="bg-dark-bg-darker border-dark-border text-gray-300">
+                <AlertTitle className="text-gray-300">
+                  {t("common.noReleases")}
+                </AlertTitle>
+                <AlertDescription className="text-gray-400">
+                  {t("common.noReleasesFound")}
+                </AlertDescription>
+              </Alert>
+            )}
+          </div>
+        </SheetContent>
+      </Sheet>
+    </>
+  );
+}

src/ui/Desktop/Apps/Dashboard/Dashboard.tsx

@@ -0,0 +1,660 @@
+import React, { useEffect, useState } from "react";
+import { Auth } from "@/ui/Desktop/Authentication/Auth.tsx";
+import { UpdateLog } from "@/ui/Desktop/Apps/Dashboard/Apps/UpdateLog.tsx";
+import { AlertManager } from "@/ui/Desktop/Apps/Dashboard/Apps/Alerts/AlertManager.tsx";
+import { Button } from "@/components/ui/button.tsx";
+import {
+  getUserInfo,
+  getDatabaseHealth,
+  getCookie,
+  getUptime,
+  getVersionInfo,
+  getSSHHosts,
+  getTunnelStatuses,
+  getCredentials,
+  getRecentActivity,
+  resetRecentActivity,
+  getServerMetricsById,
+  type RecentActivityItem,
+} from "@/ui/main-axios.ts";
+import { useSidebar } from "@/components/ui/sidebar.tsx";
+import { Separator } from "@/components/ui/separator.tsx";
+import { useTabs } from "@/ui/Desktop/Navigation/Tabs/TabContext.tsx";
+import {
+  ChartLine,
+  Clock,
+  Database,
+  FastForward,
+  History,
+  Key,
+  Network,
+  Server,
+  UserPlus,
+  Settings,
+  User,
+} from "lucide-react";
+import { Status } from "@/components/ui/shadcn-io/status";
+import { BsLightning } from "react-icons/bs";
+
+interface DashboardProps {
+  onSelectView: (view: string) => void;
+  isAuthenticated: boolean;
+  authLoading: boolean;
+  onAuthSuccess: (authData: {
+    isAdmin: boolean;
+    username: string | null;
+    userId: string | null;
+  }) => void;
+  isTopbarOpen: boolean;
+}
+
+export function Dashboard({
+  isAuthenticated,
+  authLoading,
+  onAuthSuccess,
+  isTopbarOpen,
+  onSelectView,
+}: DashboardProps): React.ReactElement {
+  const [loggedIn, setLoggedIn] = useState(isAuthenticated);
+  const [isAdmin, setIsAdmin] = useState(false);
+  const [, setUsername] = useState<string | null>(null);
+  const [userId, setUserId] = useState<string | null>(null);
+  const [dbError, setDbError] = useState<string | null>(null);
+
+  // Dashboard data state
+  const [uptime, setUptime] = useState<string>("0d 0h 0m");
+  const [versionStatus, setVersionStatus] = useState<
+    "up_to_date" | "requires_update"
+  >("up_to_date");
+  const [versionText, setVersionText] = useState<string>("v1.8.0");
+  const [dbHealth, setDbHealth] = useState<"healthy" | "error">("healthy");
+  const [totalServers, setTotalServers] = useState<number>(0);
+  const [totalTunnels, setTotalTunnels] = useState<number>(0);
+  const [totalCredentials, setTotalCredentials] = useState<number>(0);
+  const [recentActivity, setRecentActivity] = useState<RecentActivityItem[]>(
+    [],
+  );
+  const [serverStats, setServerStats] = useState<
+    Array<{ id: number; name: string; cpu: number | null; ram: number | null }>
+  >([]);
+
+  const { addTab, setCurrentTab, tabs: tabList } = useTabs();
+
+  let sidebarState: "expanded" | "collapsed" = "expanded";
+  try {
+    const sidebar = useSidebar();
+    sidebarState = sidebar.state;
+  } catch {}
+
+  const topMarginPx = isTopbarOpen ? 74 : 26;
+  const leftMarginPx = sidebarState === "collapsed" ? 26 : 8;
+  const bottomMarginPx = 8;
+
+  useEffect(() => {
+    setLoggedIn(isAuthenticated);
+  }, [isAuthenticated]);
+
+  useEffect(() => {
+    if (isAuthenticated) {
+      if (getCookie("jwt")) {
+        getUserInfo()
+          .then((meRes) => {
+            setIsAdmin(!!meRes.is_admin);
+            setUsername(meRes.username || null);
+            setUserId(meRes.userId || null);
+            setDbError(null);
+          })
+          .catch((err) => {
+            setIsAdmin(false);
+            setUsername(null);
+            setUserId(null);
+
+            const errorCode = err?.response?.data?.code;
+            if (errorCode === "SESSION_EXPIRED") {
+              console.warn("Session expired - please log in again");
+              setDbError("Session expired - please log in again");
+            } else {
+              setDbError(null);
+            }
+          });
+
+        getDatabaseHealth()
+          .then(() => {
+            setDbError(null);
+          })
+          .catch((err) => {
+            if (err?.response?.data?.error?.includes("Database")) {
+              setDbError(
+                "Could not connect to the database. Please try again later.",
+              );
+            }
+          });
+      }
+    }
+  }, [isAuthenticated]);
+
+  // Fetch dashboard data
+  useEffect(() => {
+    if (!loggedIn) return;
+
+    const fetchDashboardData = async () => {
+      try {
+        // Fetch uptime
+        const uptimeInfo = await getUptime();
+        setUptime(uptimeInfo.formatted);
+
+        // Fetch version info
+        const versionInfo = await getVersionInfo();
+        setVersionText(`v${versionInfo.localVersion}`);
+        setVersionStatus(versionInfo.status || "up_to_date");
+
+        // Fetch database health
+        try {
+          await getDatabaseHealth();
+          setDbHealth("healthy");
+        } catch {
+          setDbHealth("error");
+        }
+
+        // Fetch total counts
+        const hosts = await getSSHHosts();
+        setTotalServers(hosts.length);
+
+        // Count total tunnels across all hosts
+        let totalTunnelsCount = 0;
+        for (const host of hosts) {
+          if (host.tunnelConnections) {
+            try {
+              const tunnelConnections = JSON.parse(host.tunnelConnections);
+              if (Array.isArray(tunnelConnections)) {
+                totalTunnelsCount += tunnelConnections.length;
+              }
+            } catch {
+              // Ignore parse errors
+            }
+          }
+        }
+        setTotalTunnels(totalTunnelsCount);
+
+        const credentials = await getCredentials();
+        setTotalCredentials(credentials.length);
+
+        // Fetch recent activity (35 items)
+        const activity = await getRecentActivity(35);
+        setRecentActivity(activity);
+
+        // Fetch server stats for first 5 servers
+        const serversWithStats = await Promise.all(
+          hosts.slice(0, 5).map(async (host: { id: number; name: string }) => {
+            try {
+              const metrics = await getServerMetricsById(host.id);
+              return {
+                id: host.id,
+                name: host.name || `Host ${host.id}`,
+                cpu: metrics.cpu.percent,
+                ram: metrics.memory.percent,
+              };
+            } catch {
+              return {
+                id: host.id,
+                name: host.name || `Host ${host.id}`,
+                cpu: null,
+                ram: null,
+              };
+            }
+          }),
+        );
+        setServerStats(serversWithStats);
+      } catch (error) {
+        console.error("Failed to fetch dashboard data:", error);
+      }
+    };
+
+    fetchDashboardData();
+
+    // Refresh every 30 seconds
+    const interval = setInterval(fetchDashboardData, 30000);
+    return () => clearInterval(interval);
+  }, [loggedIn]);
+
+  // Handler for resetting recent activity
+  const handleResetActivity = async () => {
+    try {
+      await resetRecentActivity();
+      setRecentActivity([]);
+    } catch (error) {
+      console.error("Failed to reset activity:", error);
+    }
+  };
+
+  // Handler for opening a recent activity item
+  const handleActivityClick = (item: RecentActivityItem) => {
+    // Find the host and open appropriate tab
+    getSSHHosts().then((hosts) => {
+      const host = hosts.find((h: { id: number }) => h.id === item.hostId);
+      if (!host) return;
+
+      if (item.type === "terminal") {
+        addTab({
+          type: "terminal",
+          title: item.hostName,
+          hostConfig: host,
+        });
+      } else if (item.type === "file_manager") {
+        addTab({
+          type: "file_manager",
+          title: item.hostName,
+          hostConfig: host,
+        });
+      }
+    });
+  };
+
+  // Quick Actions handlers
+  const handleAddHost = () => {
+    const sshManagerTab = tabList.find((t) => t.type === "ssh_manager");
+    if (sshManagerTab) {
+      setCurrentTab(sshManagerTab.id);
+    } else {
+      const id = addTab({
+        type: "ssh_manager",
+        title: "Host Manager",
+        initialTab: "add_host",
+      });
+      setCurrentTab(id);
+    }
+  };
+
+  const handleAddCredential = () => {
+    const sshManagerTab = tabList.find((t) => t.type === "ssh_manager");
+    if (sshManagerTab) {
+      setCurrentTab(sshManagerTab.id);
+    } else {
+      const id = addTab({
+        type: "ssh_manager",
+        title: "Host Manager",
+        initialTab: "add_credential",
+      });
+      setCurrentTab(id);
+    }
+  };
+
+  const handleOpenAdminSettings = () => {
+    const adminTab = tabList.find((t) => t.type === "admin");
+    if (adminTab) {
+      setCurrentTab(adminTab.id);
+    } else {
+      const id = addTab({ type: "admin", title: "Admin Settings" });
+      setCurrentTab(id);
+    }
+  };
+
+  const handleOpenUserProfile = () => {
+    const userProfileTab = tabList.find((t) => t.type === "user_profile");
+    if (userProfileTab) {
+      setCurrentTab(userProfileTab.id);
+    } else {
+      const id = addTab({ type: "user_profile", title: "User Profile" });
+      setCurrentTab(id);
+    }
+  };
+
+  return (
+    <>
+      {!loggedIn ? (
+        <div className="w-full h-full flex items-center justify-center">
+          <Auth
+            setLoggedIn={setLoggedIn}
+            setIsAdmin={setIsAdmin}
+            setUsername={setUsername}
+            setUserId={setUserId}
+            loggedIn={loggedIn}
+            authLoading={authLoading}
+            dbError={dbError}
+            setDbError={setDbError}
+            onAuthSuccess={onAuthSuccess}
+          />
+        </div>
+      ) : (
+        <div
+          className="bg-dark-bg text-white rounded-lg border-2 border-dark-border overflow-hidden flex"
+          style={{
+            marginLeft: leftMarginPx,
+            marginRight: 17,
+            marginTop: topMarginPx,
+            marginBottom: bottomMarginPx,
+            height: `calc(100vh - ${topMarginPx + bottomMarginPx}px)`,
+          }}
+        >
+          <div className="flex flex-col relative z-10 w-full h-full">
+            <div className="flex flex-row items-center justify-between w-full px-3 mt-3">
+              <div className="text-2xl text-white font-semibold">Dashboard</div>
+              <div className="flex flex-row gap-3">
+                <Button
+                  className="font-semibold"
+                  variant="outline"
+                  onClick={() =>
+                    window.open(
+                      "https://github.com/Termix-SSH/Termix",
+                      "_blank",
+                    )
+                  }
+                >
+                  GitHub
+                </Button>
+                <Button
+                  className="font-semibold"
+                  variant="outline"
+                  onClick={() =>
+                    window.open(
+                      "https://github.com/Termix-SSH/Support/issues/new",
+                      "_blank",
+                    )
+                  }
+                >
+                  Support
+                </Button>
+                <Button
+                  className="font-semibold"
+                  variant="outline"
+                  onClick={() =>
+                    window.open(
+                      "https://discord.com/invite/jVQGdvHDrf",
+                      "_blank",
+                    )
+                  }
+                >
+                  Discord
+                </Button>
+                <Button
+                  className="font-semibold"
+                  variant="outline"
+                  onClick={() =>
+                    window.open("https://github.com/sponsors/LukeGus", "_blank")
+                  }
+                >
+                  Donate
+                </Button>
+              </div>
+            </div>
+
+            <Separator className="mt-3 p-0.25" />
+
+            <div className="flex flex-col flex-1 my-5 mx-5 gap-4 min-h-0">
+              <div className="flex flex-row flex-1 gap-4 min-h-0">
+                <div className="flex-1 border-2 border-dark-border rounded-md bg-dark-bg-darker flex flex-col overflow-hidden">
+                  <div className="flex flex-col mx-3 my-2 overflow-y-auto overflow-x-hidden">
+                    <p className="text-xl font-semibold mb-3 mt-1 flex flex-row items-center">
+                      <Server className="mr-3" />
+                      Server Overview
+                    </p>
+                    <div className="bg-dark-bg w-full h-auto border-2 border-dark-border rounded-md px-3 py-3">
+                      <div className="flex flex-row items-center justify-between mb-3">
+                        <div className="flex flex-row items-center">
+                          <History
+                            size={20}
+                            color="#FFFFFF"
+                            className="shrink-0"
+                          />
+                          <p className="ml-2 leading-none">Version</p>
+                        </div>
+
+                        <div className="flex flex-row items-center">
+                          <p className="leading-none text-muted-foreground">
+                            {versionText}
+                          </p>
+                          <Button
+                            variant="outline"
+                            size="sm"
+                            className={`ml-2 text-sm border-1 border-dark-border ${versionStatus === "up_to_date" ? "text-green-400" : "text-yellow-400"}`}
+                          >
+                            {versionStatus === "up_to_date"
+                              ? "Up to Date"
+                              : "Update Available"}
+                          </Button>
+                          <UpdateLog loggedIn={loggedIn} />
+                        </div>
+                      </div>
+
+                      <div className="flex flex-row items-center justify-between mb-5">
+                        <div className="flex flex-row items-center">
+                          <Clock
+                            size={20}
+                            color="#FFFFFF"
+                            className="shrink-0"
+                          />
+                          <p className="ml-2 leading-none">Uptime</p>
+                        </div>
+
+                        <div className="flex flex-row items-center">
+                          <p className="leading-none text-muted-foreground">
+                            {uptime}
+                          </p>
+                        </div>
+                      </div>
+
+                      <div className="flex flex-row items-center justify-between">
+                        <div className="flex flex-row items-center">
+                          <Database
+                            size={20}
+                            color="#FFFFFF"
+                            className="shrink-0"
+                          />
+                          <p className="ml-2 leading-none">Database</p>
+                        </div>
+
+                        <div className="flex flex-row items-center">
+                          <p
+                            className={`leading-none ${dbHealth === "healthy" ? "text-green-400" : "text-red-400"}`}
+                          >
+                            {dbHealth}
+                          </p>
+                        </div>
+                      </div>
+                    </div>
+                    <div className="flex flex-col grid grid-cols-2 gap-2 mt-2">
+                      <div className="flex flex-row items-center justify-between bg-dark-bg w-full h-auto mt-3 border-2 border-dark-border rounded-md px-3 py-3">
+                        <div className="flex flex-row items-center">
+                          <Server
+                            size={16}
+                            color="#FFFFFF"
+                            className="mr-3 shrink-0"
+                          />
+                          <p className="m-0 leading-none">Total Servers</p>
+                        </div>
+                        <p className="m-0 leading-none text-muted-foreground font-semibold">
+                          {totalServers}
+                        </p>
+                      </div>
+                      <div className="flex flex-row items-center justify-between bg-dark-bg w-full h-auto mt-3 border-2 border-dark-border rounded-md px-3 py-3">
+                        <div className="flex flex-row items-center">
+                          <Network
+                            size={16}
+                            color="#FFFFFF"
+                            className="mr-3 shrink-0"
+                          />
+                          <p className="m-0 leading-none">Total Tunnels</p>
+                        </div>
+                        <p className="m-0 leading-none text-muted-foreground font-semibold">
+                          {totalTunnels}
+                        </p>
+                      </div>
+                    </div>
+                    <div className="flex flex-col grid grid-cols-2 gap-2 mt-2">
+                      <div className="flex flex-row items-center justify-between bg-dark-bg w-full h-auto mt-3 border-2 border-dark-border rounded-md px-3 py-3">
+                        <div className="flex flex-row items-center">
+                          <Key
+                            size={16}
+                            color="#FFFFFF"
+                            className="mr-3 shrink-0"
+                          />
+                          <p className="m-0 leading-none">Total Credentials</p>
+                        </div>
+                        <p className="m-0 leading-none text-muted-foreground font-semibold">
+                          {totalCredentials}
+                        </p>
+                      </div>
+                    </div>
+                  </div>
+                </div>
+                <div className="flex-1 border-2 border-dark-border rounded-md bg-dark-bg-darker flex flex-col overflow-hidden">
+                  <div className="flex flex-col mx-3 my-2 flex-1 overflow-hidden">
+                    <div className="flex flex-row items-center justify-between mb-3 mt-1">
+                      <p className="text-xl font-semibold flex flex-row items-center">
+                        <Clock className="mr-3" />
+                        Recent Activity
+                      </p>
+                      <Button
+                        variant="outline"
+                        size="sm"
+                        className="border-2 !border-dark-border h-7"
+                        onClick={handleResetActivity}
+                      >
+                        Reset
+                      </Button>
+                    </div>
+                    <div className="grid gap-4 grid-cols-[repeat(auto-fit,minmax(200px,1fr))] auto-rows-min overflow-y-auto overflow-x-hidden">
+                      {recentActivity.length === 0 ? (
+                        <p className="text-muted-foreground text-sm">
+                          No recent activity
+                        </p>
+                      ) : (
+                        recentActivity.map((item) => (
+                          <Button
+                            key={item.id}
+                            variant="outline"
+                            className="border-2 !border-dark-border bg-dark-bg"
+                            onClick={() => handleActivityClick(item)}
+                          >
+                            <Server size={20} className="shrink-0" />
+                            <p className="truncate ml-2 font-semibold">
+                              {item.hostName}
+                            </p>
+                          </Button>
+                        ))
+                      )}
+                    </div>
+                  </div>
+                </div>
+              </div>
+              <div className="flex flex-row flex-1 gap-4 min-h-0">
+                <div className="flex-1 border-2 border-dark-border rounded-md bg-dark-bg-darker flex flex-col overflow-hidden">
+                  <div className="flex flex-col mx-3 my-2 overflow-y-auto overflow-x-hidden">
+                    <p className="text-xl font-semibold mb-3 mt-1 flex flex-row items-center">
+                      <FastForward className="mr-3" />
+                      Quick Actions
+                    </p>
+                    <div className="grid gap-4 grid-cols-[repeat(auto-fit,minmax(200px,1fr))] auto-rows-min overflow-y-auto overflow-x-hidden">
+                      <Button
+                        variant="outline"
+                        className="border-2 !border-dark-border flex flex-col items-center justify-center h-auto p-3"
+                        onClick={handleAddHost}
+                      >
+                        <Server
+                          className="shrink-0"
+                          style={{ width: "40px", height: "40px" }}
+                        />
+                        <span className="font-semibold text-sm mt-2">
+                          Add Host
+                        </span>
+                      </Button>
+                      <Button
+                        variant="outline"
+                        className="border-2 !border-dark-border flex flex-col items-center justify-center h-auto p-3"
+                        onClick={handleAddCredential}
+                      >
+                        <Key
+                          className="shrink-0"
+                          style={{ width: "40px", height: "40px" }}
+                        />
+                        <span className="font-semibold text-sm mt-2">
+                          Add Credential
+                        </span>
+                      </Button>
+                      {isAdmin && (
+                        <Button
+                          variant="outline"
+                          className="border-2 !border-dark-border flex flex-col items-center justify-center h-auto p-3"
+                          onClick={handleOpenAdminSettings}
+                        >
+                          <Settings
+                            className="shrink-0"
+                            style={{ width: "40px", height: "40px" }}
+                          />
+                          <span className="font-semibold text-sm mt-2">
+                            Admin Settings
+                          </span>
+                        </Button>
+                      )}
+                      <Button
+                        variant="outline"
+                        className="border-2 !border-dark-border flex flex-col items-center justify-center h-auto p-3"
+                        onClick={handleOpenUserProfile}
+                      >
+                        <User
+                          className="shrink-0"
+                          style={{ width: "40px", height: "40px" }}
+                        />
+                        <span className="font-semibold text-sm mt-2">
+                          User Profile
+                        </span>
+                      </Button>
+                    </div>
+                  </div>
+                </div>
+                <div className="flex-1 border-2 border-dark-border rounded-md bg-dark-bg-darker flex flex-col overflow-hidden">
+                  <div className="flex flex-col mx-3 my-2 flex-1 overflow-hidden">
+                    <p className="text-xl font-semibold mb-3 mt-1 flex flex-row items-center">
+                      <ChartLine className="mr-3" />
+                      Server Stats
+                    </p>
+                    <div className="grid gap-4 grid-cols-[repeat(auto-fit,minmax(200px,1fr))] auto-rows-min overflow-y-auto overflow-x-hidden">
+                      {serverStats.length === 0 ? (
+                        <p className="text-muted-foreground text-sm">
+                          No server data available
+                        </p>
+                      ) : (
+                        serverStats.map((server) => (
+                          <Button
+                            key={server.id}
+                            variant="outline"
+                            className="border-2 !border-dark-border bg-dark-bg h-auto p-3"
+                          >
+                            <div className="flex flex-col w-full">
+                              <div className="flex flex-row items-center mb-2">
+                                <Server size={20} className="shrink-0" />
+                                <p className="truncate ml-2 font-semibold">
+                                  {server.name}
+                                </p>
+                              </div>
+                              <div className="flex flex-row justify-between text-xs text-muted-foreground">
+                                <span>
+                                  CPU:{" "}
+                                  {server.cpu !== null
+                                    ? `${server.cpu}%`
+                                    : "N/A"}
+                                </span>
+                                <span>
+                                  RAM:{" "}
+                                  {server.ram !== null
+                                    ? `${server.ram}%`
+                                    : "N/A"}
+                                </span>
+                              </div>
+                            </div>
+                          </Button>
+                        ))
+                      )}
+                    </div>
+                  </div>
+                </div>
+              </div>
+            </div>
+          </div>
+        </div>
+      )}
+
+      <AlertManager userId={userId} loggedIn={loggedIn} />
+    </>
+  );
+}

src/ui/Desktop/Apps/File Manager/FileManager.tsx

@@ -14,6 +14,7 @@ import { Button } from "@/components/ui/button";
 import { Input } from "@/components/ui/input";
 import { toast } from "sonner";
 import { useTranslation } from "react-i18next";
+import { TOTPDialog } from "@/ui/components/TOTPDialog";
 import {
   Upload,
   FolderPlus,
@@ -22,8 +23,6 @@ import {
   Search,
   Grid3X3,
   List,
-  Eye,
-  Settings,
 } from "lucide-react";
 import { TerminalWindow } from "./components/TerminalWindow";
 import type { SSHHost, FileItem } from "../../../types/index.js";
@@ -38,6 +37,7 @@ import {
   renameSSHItem,
   moveSSHItem,
   connectSSH,
+  verifySSHTOTP,
   getSSHStatus,
   keepSSHAlive,
   identifySSHSymlink,
@@ -47,6 +47,7 @@ import {
   removeRecentFile,
   addFolderShortcut,
   getPinnedFiles,
+  logActivity,
 } from "@/ui/main-axios.ts";
 import type { SidebarItem } from "./FileManagerSidebar";
 
@@ -85,9 +86,7 @@ function FileManagerContent({ initialHost, onClose }: FileManagerProps) {
   const { t } = useTranslation();
   const { confirmWithToast } = useConfirmation();
 
-  const [currentHost, setCurrentHost] = useState<SSHHost | null>(
+  const [currentHost] = useState<SSHHost | null>(initialHost || null);
-    initialHost || null,
-  );
   const [currentPath, setCurrentPath] = useState(
     initialHost?.defaultPath || "/",
   );
@@ -98,6 +97,9 @@ function FileManagerContent({ initialHost, onClose }: FileManagerProps) {
   const [searchQuery, setSearchQuery] = useState("");
   const [lastRefreshTime, setLastRefreshTime] = useState<number>(0);
   const [viewMode, setViewMode] = useState<"grid" | "list">("grid");
+  const [totpRequired, setTotpRequired] = useState(false);
+  const [totpSessionId, setTotpSessionId] = useState<string | null>(null);
+  const [totpPrompt, setTotpPrompt] = useState<string>("");
   const [pinnedFiles, setPinnedFiles] = useState<Set<string>>(new Set());
   const [sidebarRefreshTrigger, setSidebarRefreshTrigger] = useState(0);
   const [isClosing, setIsClosing] = useState<boolean>(false);
@@ -140,10 +142,9 @@ function FileManagerContent({ initialHost, onClose }: FileManagerProps) {
   const [createIntent, setCreateIntent] = useState<CreateIntent | null>(null);
   const [editingFile, setEditingFile] = useState<FileItem | null>(null);
 
-  const { selectedFiles, selectFile, selectAll, clearSelection, setSelection } =
+  const { selectedFiles, clearSelection, setSelection } = useFileSelection();
-    useFileSelection();
 
-  const { isDragging, dragHandlers } = useDragAndDrop({
+  const { dragHandlers } = useDragAndDrop({
     onFilesDropped: handleFilesDropped,
     onError: (error) => toast.error(error),
     maxFileSize: 5120,
@@ -288,8 +289,25 @@ function FileManagerContent({ initialHost, onClose }: FileManagerProps) {
         userId: currentHost.userId,
       });
 
+      if (result?.requires_totp) {
+        setTotpRequired(true);
+        setTotpSessionId(sessionId);
+        setTotpPrompt(result.prompt || "Verification code:");
+        setIsLoading(false);
+        return;
+      }
+
       setSshSessionId(sessionId);
 
+      // Log activity for recent connections
+      if (currentHost?.id) {
+        const hostName =
+          currentHost.name || `${currentHost.username}@${currentHost.ip}`;
+        logActivity("file_manager", currentHost.id, hostName).catch((err) => {
+          console.warn("Failed to log file manager activity:", err);
+        });
+      }
+
       try {
         const response = await listSSHFiles(sessionId, currentPath);
         const files = Array.isArray(response)
@@ -298,10 +316,10 @@ function FileManagerContent({ initialHost, onClose }: FileManagerProps) {
         setFiles(files);
         clearSelection();
         initialLoadDoneRef.current = true;
-      } catch (dirError: any) {
+      } catch (dirError: unknown) {
         console.error("Failed to load initial directory:", dirError);
       }
-    } catch (error: any) {
+    } catch (error: unknown) {
       console.error("SSH connection failed:", error);
       handleCloseWithError(
         t("fileManager.failedToConnect") + ": " + (error.message || error),
@@ -340,7 +358,7 @@ function FileManagerContent({ initialHost, onClose }: FileManagerProps) {
 
         setFiles(files);
         clearSelection();
-      } catch (error: any) {
+      } catch (error: unknown) {
         if (currentLoadingPathRef.current === path) {
           console.error("Failed to load directory:", error);
 
@@ -522,7 +540,7 @@ function FileManagerContent({ initialHost, onClose }: FileManagerProps) {
         t("fileManager.fileUploadedSuccessfully", { name: file.name }),
       );
       handleRefreshDirectory();
-    } catch (error: any) {
+    } catch (error: unknown) {
       toast.dismiss(progressToast);
 
       if (
@@ -571,7 +589,7 @@ function FileManagerContent({ initialHost, onClose }: FileManagerProps) {
           t("fileManager.fileDownloadedSuccessfully", { name: file.name }),
         );
       }
-    } catch (error: any) {
+    } catch (error: unknown) {
       if (
         error.message?.includes("connection") ||
         error.message?.includes("established")
@@ -652,7 +670,7 @@ function FileManagerContent({ initialHost, onClose }: FileManagerProps) {
           );
           handleRefreshDirectory();
           clearSelection();
-        } catch (error: any) {
+        } catch (error: unknown) {
           if (
             error.message?.includes("connection") ||
             error.message?.includes("established")
@@ -706,28 +724,24 @@ function FileManagerContent({ initialHost, onClose }: FileManagerProps) {
     }
 
     try {
-      let currentSessionId = sshSessionId;
+      const currentSessionId = sshSessionId;
-      try {
+      const status = await getSSHStatus(currentSessionId);
-        const status = await getSSHStatus(currentSessionId);
+      if (!status.connected) {
-        if (!status.connected) {
+        const result = await connectSSH(currentSessionId, {
-          const result = await connectSSH(currentSessionId, {
+          hostId: currentHost.id,
-            hostId: currentHost.id,
+          host: currentHost.ip,
-            host: currentHost.ip,
+          port: currentHost.port,
-            port: currentHost.port,
+          username: currentHost.username,
-            username: currentHost.username,
+          authType: currentHost.authType,
-            authType: currentHost.authType,
+          password: currentHost.password,
-            password: currentHost.password,
+          key: currentHost.key,
-            key: currentHost.key,
+          keyPassword: currentHost.keyPassword,
-            keyPassword: currentHost.keyPassword,
+          credentialId: currentHost.credentialId,
-            credentialId: currentHost.credentialId,
+        });
-          });
 
-          if (!result.success) {
+        if (!result.success) {
-            throw new Error(t("fileManager.failedToReconnectSSH"));
+          throw new Error(t("fileManager.failedToReconnectSSH"));
-          }
         }
-      } catch (sessionErr) {
-        throw sessionErr;
       }
 
       const symlinkInfo = await identifySSHSymlink(currentSessionId, file.path);
@@ -766,7 +780,7 @@ function FileManagerContent({ initialHost, onClose }: FileManagerProps) {
           component: createWindowComponent,
         });
       }
-    } catch (error: any) {
+    } catch (error: unknown) {
       toast.error(
         error?.response?.data?.error ||
           error?.message ||
@@ -775,7 +789,7 @@ function FileManagerContent({ initialHost, onClose }: FileManagerProps) {
     }
   };
 
-  async function handleFileOpen(file: FileItem, editMode: boolean = false) {
+  async function handleFileOpen(file: FileItem) {
     if (file.type === "directory") {
       setCurrentPath(file.path);
     } else if (file.type === "link") {
@@ -825,14 +839,6 @@ function FileManagerContent({ initialHost, onClose }: FileManagerProps) {
     }
   }
 
-  function handleFileEdit(file: FileItem) {
-    handleFileOpen(file, true);
-  }
-
-  function handleFileView(file: FileItem) {
-    handleFileOpen(file, false);
-  }
-
   function handleContextMenu(event: React.MouseEvent, file?: FileItem) {
     event.preventDefault();
 
@@ -905,7 +911,7 @@ function FileManagerContent({ initialHost, onClose }: FileManagerProps) {
               successCount++;
             }
           }
-        } catch (error: any) {
+        } catch (error: unknown) {
           console.error(`Failed to ${operation} file ${file.name}:`, error);
           toast.error(
             t("fileManager.operationFailed", {
@@ -1006,7 +1012,7 @@ function FileManagerContent({ initialHost, onClose }: FileManagerProps) {
       if (operation === "cut") {
         setClipboard(null);
       }
-    } catch (error: any) {
+    } catch (error: unknown) {
       toast.error(
         `${t("fileManager.pasteFailed")}: ${error.message || t("fileManager.unknownError")}`,
       );
@@ -1041,7 +1047,7 @@ function FileManagerContent({ initialHost, onClose }: FileManagerProps) {
                   currentHost?.userId?.toString(),
                 );
                 successCount++;
-              } catch (error: any) {
+              } catch (error: unknown) {
                 console.error(
                   `Failed to delete copied file ${copiedFile.targetName}:`,
                   error,
@@ -1083,7 +1089,7 @@ function FileManagerContent({ initialHost, onClose }: FileManagerProps) {
                   currentHost?.userId?.toString(),
                 );
                 successCount++;
-              } catch (error: any) {
+              } catch (error: unknown) {
                 console.error(
                   `Failed to move back file ${movedFile.targetName}:`,
                   error,
@@ -1123,7 +1129,7 @@ function FileManagerContent({ initialHost, onClose }: FileManagerProps) {
       }
 
       handleRefreshDirectory();
-    } catch (error: any) {
+    } catch (error: unknown) {
       toast.error(
         `${t("fileManager.undoOperationFailed")}: ${error.message || t("fileManager.unknownError")}`,
       );
@@ -1195,7 +1201,7 @@ function FileManagerContent({ initialHost, onClose }: FileManagerProps) {
 
       setCreateIntent(null);
       handleRefreshDirectory();
-    } catch (error: any) {
+    } catch (error: unknown) {
       console.error("Create failed:", error);
       toast.error(t("fileManager.failedToCreateItem"));
     }
@@ -1224,7 +1230,7 @@ function FileManagerContent({ initialHost, onClose }: FileManagerProps) {
       );
       setEditingFile(null);
       handleRefreshDirectory();
-    } catch (error: any) {
+    } catch (error: unknown) {
       console.error("Rename failed:", error);
       toast.error(t("fileManager.failedToRenameItem"));
     }
@@ -1238,6 +1244,56 @@ function FileManagerContent({ initialHost, onClose }: FileManagerProps) {
     setEditingFile(null);
   }
 
+  async function handleTotpSubmit(code: string) {
+    if (!totpSessionId || !code) return;
+
+    try {
+      setIsLoading(true);
+      const result = await verifySSHTOTP(totpSessionId, code);
+
+      if (result?.status === "success") {
+        setTotpRequired(false);
+        setTotpPrompt("");
+        setSshSessionId(totpSessionId);
+        setTotpSessionId(null);
+
+        // Log activity for recent connections
+        if (currentHost?.id) {
+          const hostName =
+            currentHost.name || `${currentHost.username}@${currentHost.ip}`;
+          logActivity("file_manager", currentHost.id, hostName).catch((err) => {
+            console.warn("Failed to log file manager activity:", err);
+          });
+        }
+
+        try {
+          const response = await listSSHFiles(totpSessionId, currentPath);
+          const files = Array.isArray(response)
+            ? response
+            : response?.files || [];
+          setFiles(files);
+          clearSelection();
+          initialLoadDoneRef.current = true;
+          toast.success(t("fileManager.connectedSuccessfully"));
+        } catch (dirError: unknown) {
+          console.error("Failed to load initial directory:", dirError);
+        }
+      }
+    } catch (error: unknown) {
+      console.error("TOTP verification failed:", error);
+      toast.error(t("fileManager.totpVerificationFailed"));
+    } finally {
+      setIsLoading(false);
+    }
+  }
+
+  function handleTotpCancel() {
+    setTotpRequired(false);
+    setTotpPrompt("");
+    setTotpSessionId(null);
+    if (onClose) onClose();
+  }
+
   function generateUniqueName(
     baseName: string,
     type: "file" | "directory",
@@ -1290,7 +1346,7 @@ function FileManagerContent({ initialHost, onClose }: FileManagerProps) {
             movedItems.push(file.name);
             successCount++;
           }
-        } catch (error: any) {
+        } catch (error: unknown) {
           console.error(`Failed to move file ${file.name}:`, error);
           toast.error(
             t("fileManager.moveFileFailed", { name: file.name }) +
@@ -1301,18 +1357,16 @@ function FileManagerContent({ initialHost, onClose }: FileManagerProps) {
       }
 
       if (successCount > 0) {
-        const movedFiles = draggedFiles
+        const movedFiles = draggedFiles.slice(0, successCount).map((file) => {
-          .slice(0, successCount)
+          const targetPath = targetFolder.path.endsWith("/")
-          .map((file, index) => {
+            ? `${targetFolder.path}${file.name}`
-            const targetPath = targetFolder.path.endsWith("/")
+            : `${targetFolder.path}/${file.name}`;
-              ? `${targetFolder.path}${file.name}`
+          return {
-              : `${targetFolder.path}/${file.name}`;
+            originalPath: file.path,
-            return {
+            targetPath: targetPath,
-              originalPath: file.path,
+            targetName: file.name,
-              targetPath: targetPath,
+          };
-              targetName: file.name,
+        });
-            };
-          });
 
         const undoAction: UndoAction = {
           type: "cut",
@@ -1338,7 +1392,7 @@ function FileManagerContent({ initialHost, onClose }: FileManagerProps) {
         handleRefreshDirectory();
         clearSelection();
       }
-    } catch (error: any) {
+    } catch (error: unknown) {
       console.error("Drag move operation failed:", error);
       toast.error(t("fileManager.moveOperationFailed") + ": " + error.message);
     }
@@ -1409,7 +1463,7 @@ function FileManagerContent({ initialHost, onClose }: FileManagerProps) {
           await dragToDesktop.dragFilesToDesktop(files);
         }
       }
-    } catch (error: any) {
+    } catch (error: unknown) {
       console.error("Drag to desktop failed:", error);
       toast.error(
         t("fileManager.dragFailed") +
@@ -1504,7 +1558,9 @@ function FileManagerContent({ initialHost, onClose }: FileManagerProps) {
 
     try {
       const pinnedData = await getPinnedFiles(currentHost.id);
-      const pinnedPaths = new Set(pinnedData.map((item: any) => item.path));
+      const pinnedPaths = new Set(
+        pinnedData.map((item: Record<string, unknown>) => item.path),
+      );
       setPinnedFiles(pinnedPaths);
     } catch (error) {
       console.error("Failed to load pinned files:", error);
@@ -1806,6 +1862,13 @@ function FileManagerContent({ initialHost, onClose }: FileManagerProps) {
           />
         </div>
       </div>
+
+      <TOTPDialog
+        isOpen={totpRequired}
+        prompt={totpPrompt}
+        onSubmit={handleTotpSubmit}
+        onCancel={handleTotpCancel}
+      />
     </div>
   );
 }

src/ui/Desktop/Apps/File Manager/FileManagerContextMenu.tsx

@@ -13,8 +13,6 @@ import {
   RefreshCw,
   Clipboard,
   Eye,
-  Share,
-  ExternalLink,
   Terminal,
   Play,
   Star,
@@ -190,7 +188,6 @@ export function FileManagerContextMenu({
   const isSingleFile = files.length === 1;
   const isMultipleFiles = files.length > 1;
   const hasFiles = files.some((f) => f.type === "file");
-  const hasDirectories = files.some((f) => f.type === "directory");
   const hasExecutableFiles = files.some(
     (f) => f.type === "file" && f.executable,
   );

src/ui/Desktop/Apps/File Manager/FileManagerGrid.tsx

@@ -166,7 +166,6 @@ const getFileIcon = (file: FileItem, viewMode: "grid" | "list" = "grid") => {
 export function FileManagerGrid({
   files,
   selectedFiles,
-  onFileSelect,
   onFileOpen,
   onSelectionChange,
   currentPath,
@@ -188,7 +187,6 @@ export function FileManagerGrid({
   onUndo,
   onFileDrop,
   onFileDiff,
-  onSystemDragStart,
   onSystemDragEnd,
   hasClipboard,
   createIntent,
@@ -327,7 +325,6 @@ export function FileManagerGrid({
       dragState.files[0].type === "file"
     ) {
       onFileDiff?.(dragState.files[0], targetFile);
-    } else {
     }
 
     setDragState({ type: "none", files: [], counter: 0 });
@@ -429,16 +426,6 @@ export function FileManagerGrid({
     setIsEditingPath(false);
   };
 
-  const handlePathInputKeyDown = (e: React.KeyboardEvent) => {
-    if (e.key === "Enter") {
-      e.preventDefault();
-      confirmEditingPath();
-    } else if (e.key === "Escape") {
-      e.preventDefault();
-      cancelEditingPath();
-    }
-  };
-
   useEffect(() => {
     if (!isEditingPath) {
       setEditPathValue(currentPath);
@@ -458,8 +445,6 @@ export function FileManagerGrid({
           type: "external",
           counter: prev.counter + 1,
         }));
-        if (e.dataTransfer.items && e.dataTransfer.items.length > 0) {
-        }
       }
     },
     [dragState.type],
@@ -620,7 +605,7 @@ export function FileManagerGrid({
   );
 
   useEffect(() => {
-    const handleGlobalMouseUp = (e: MouseEvent) => {
+    const handleGlobalMouseUp = () => {
       if (isSelecting) {
         setIsSelecting(false);
         setSelectionStart(null);

src/ui/Desktop/Apps/File Manager/FileManagerSidebar.tsx

@@ -23,6 +23,35 @@ import {
 } from "@/ui/main-axios.ts";
 import { toast } from "sonner";
 
+interface RecentFileData {
+  id: number;
+  name: string;
+  path: string;
+  lastOpened?: string;
+  [key: string]: unknown;
+}
+
+interface PinnedFileData {
+  id: number;
+  name: string;
+  path: string;
+  [key: string]: unknown;
+}
+
+interface ShortcutData {
+  id: number;
+  name: string;
+  path: string;
+  [key: string]: unknown;
+}
+
+interface DirectoryItemData {
+  name: string;
+  path: string;
+  type: string;
+  [key: string]: unknown;
+}
+
 export interface SidebarItem {
   id: string;
   name: string;
@@ -37,7 +66,6 @@ interface FileManagerSidebarProps {
   currentHost: SSHHost;
   currentPath: string;
   onPathChange: (path: string) => void;
-  onLoadDirectory?: (path: string) => void;
   onFileOpen?: (file: SidebarItem) => void;
   sshSessionId?: string;
   refreshTrigger?: number;
@@ -47,7 +75,6 @@ export function FileManagerSidebar({
   currentHost,
   currentPath,
   onPathChange,
-  onLoadDirectory,
   onFileOpen,
   sshSessionId,
   refreshTrigger,
@@ -88,31 +115,37 @@ export function FileManagerSidebar({
 
     try {
       const recentData = await getRecentFiles(currentHost.id);
-      const recentItems = recentData.slice(0, 5).map((item: any) => ({
+      const recentItems = (recentData as RecentFileData[])
-        id: `recent-${item.id}`,
+        .slice(0, 5)
-        name: item.name,
+        .map((item: RecentFileData) => ({
-        path: item.path,
+          id: `recent-${item.id}`,
-        type: "recent" as const,
+          name: item.name,
-        lastAccessed: item.lastOpened,
+          path: item.path,
-      }));
+          type: "recent" as const,
+          lastAccessed: item.lastOpened,
+        }));
       setRecentItems(recentItems);
 
       const pinnedData = await getPinnedFiles(currentHost.id);
-      const pinnedItems = pinnedData.map((item: any) => ({
+      const pinnedItems = (pinnedData as PinnedFileData[]).map(
-        id: `pinned-${item.id}`,
+        (item: PinnedFileData) => ({
-        name: item.name,
+          id: `pinned-${item.id}`,
-        path: item.path,
+          name: item.name,
-        type: "pinned" as const,
+          path: item.path,
-      }));
+          type: "pinned" as const,
+        }),
+      );
       setPinnedItems(pinnedItems);
 
       const shortcutData = await getFolderShortcuts(currentHost.id);
-      const shortcutItems = shortcutData.map((item: any) => ({
+      const shortcutItems = (shortcutData as ShortcutData[]).map(
-        id: `shortcut-${item.id}`,
+        (item: ShortcutData) => ({
-        name: item.name,
+          id: `shortcut-${item.id}`,
-        path: item.path,
+          name: item.name,
-        type: "shortcut" as const,
+          path: item.path,
-      }));
+          type: "shortcut" as const,
+        }),
+      );
       setShortcuts(shortcutItems);
     } catch (error) {
       console.error("Failed to load quick access data:", error);
@@ -230,12 +263,12 @@ export function FileManagerSidebar({
     try {
       const response = await listSSHFiles(sshSessionId, "/");
 
-      const rootFiles = response.files || [];
+      const rootFiles = (response.files || []) as DirectoryItemData[];
       const rootFolders = rootFiles.filter(
-        (item: any) => item.type === "directory",
+        (item: DirectoryItemData) => item.type === "directory",
       );
 
-      const rootTreeItems = rootFolders.map((folder: any) => ({
+      const rootTreeItems = rootFolders.map((folder: DirectoryItemData) => ({
         id: `folder-${folder.name}`,
         name: folder.name,
         path: folder.path,
@@ -298,12 +331,12 @@ export function FileManagerSidebar({
         try {
           const subResponse = await listSSHFiles(sshSessionId, folderPath);
 
-          const subFiles = subResponse.files || [];
+          const subFiles = (subResponse.files || []) as DirectoryItemData[];
           const subFolders = subFiles.filter(
-            (item: any) => item.type === "directory",
+            (item: DirectoryItemData) => item.type === "directory",
           );
 
-          const subTreeItems = subFolders.map((folder: any) => ({
+          const subTreeItems = subFolders.map((folder: DirectoryItemData) => ({
             id: `folder-${folder.path.replace(/\//g, "-")}`,
             name: folder.name,
             path: folder.path,

src/ui/Desktop/Apps/File Manager/components/DiffViewer.tsx

@@ -61,23 +61,19 @@ export function DiffViewer({
           userId: sshHost.userId,
         });
       }
-    } catch (error) {
+    } catch {
-      try {
+      await connectSSH(sshSessionId, {
-        await connectSSH(sshSessionId, {
+        hostId: sshHost.id,
-          hostId: sshHost.id,
+        ip: sshHost.ip,
-          ip: sshHost.ip,
+        port: sshHost.port,
-          port: sshHost.port,
+        username: sshHost.username,
-          username: sshHost.username,
+        password: sshHost.password,
-          password: sshHost.password,
+        sshKey: sshHost.key,
-          sshKey: sshHost.key,
+        keyPassword: sshHost.keyPassword,
-          keyPassword: sshHost.keyPassword,
+        authType: sshHost.authType,
-          authType: sshHost.authType,
+        credentialId: sshHost.credentialId,
-          credentialId: sshHost.credentialId,
+        userId: sshHost.userId,
-          userId: sshHost.userId,
+      });
-        });
-      } catch (reconnectError) {
-        throw reconnectError;
-      }
     }
   };
 
@@ -100,15 +96,19 @@ export function DiffViewer({
 
       setContent1(response1.content || "");
       setContent2(response2.content || "");
-    } catch (error: any) {
+    } catch (error: unknown) {
       console.error("Failed to load files for diff:", error);
 
-      const errorData = error?.response?.data;
+      const err = error as {
+        message?: string;
+        response?: { data?: { tooLarge?: boolean; error?: string } };
+      };
+      const errorData = err?.response?.data;
       if (errorData?.tooLarge) {
         setError(t("fileManager.fileTooLarge", { error: errorData.error }));
       } else if (
-        error.message?.includes("connection") ||
+        err.message?.includes("connection") ||
-        error.message?.includes("established")
+        err.message?.includes("established")
       ) {
         setError(
           t("fileManager.sshConnectionFailed", {
@@ -121,9 +121,7 @@ export function DiffViewer({
         setError(
           t("fileManager.loadFileFailed", {
             error:
-              error.message ||
+              err.message || errorData?.error || t("fileManager.unknownError"),
-              errorData?.error ||
-              t("fileManager.unknownError"),
           }),
         );
       }
@@ -161,12 +159,13 @@ export function DiffViewer({
           t("fileManager.downloadFileSuccess", { name: file.name }),
         );
       }
-    } catch (error: any) {
+    } catch (error: unknown) {
       console.error("Failed to download file:", error);
+      const err = error as { message?: string };
       toast.error(
         t("fileManager.downloadFileFailed") +
           ": " +
-          (error.message || t("fileManager.unknownError")),
+          (err.message || t("fileManager.unknownError")),
       );
     }
   };

src/ui/Desktop/Apps/File Manager/components/DraggableWindow.tsx

@@ -1,6 +1,6 @@
 import React, { useState, useRef, useCallback, useEffect } from "react";
 import { cn } from "@/lib/utils";
-import { Minus, Square, X, Maximize2, Minimize2 } from "lucide-react";
+import { Minus, X, Maximize2, Minimize2 } from "lucide-react";
 import { useTranslation } from "react-i18next";
 
 interface DraggableWindowProps {

src/ui/Desktop/Apps/File Manager/components/FileViewer.tsx

@@ -60,7 +60,6 @@ import {
 import { autocompletion, completionKeymap } from "@codemirror/autocomplete";
 import { PhotoProvider, PhotoView } from "react-photo-view";
 import "react-photo-view/dist/react-photo-view.css";
-import ReactPlayer from "react-player";
 import AudioPlayer from "react-h5-audio-player";
 import "react-h5-audio-player/lib/styles.css";
 import ReactMarkdown from "react-markdown";
@@ -290,7 +289,7 @@ function getLanguageExtension(filename: string) {
   return language ? loadLanguage(language) : null;
 }
 
-function formatFileSize(bytes?: number, t?: any): string {
+function formatFileSize(bytes?: number, t?: (key: string) => string): string {
   if (!bytes) return t ? t("fileManager.unknownSize") : "Unknown size";
   const sizes = ["B", "KB", "MB", "GB"];
   const i = Math.floor(Math.log(bytes) / Math.log(1024));
@@ -311,9 +310,7 @@ export function FileViewer({
 }: FileViewerProps) {
   const { t } = useTranslation();
   const [editedContent, setEditedContent] = useState(content);
-  const [originalContent, setOriginalContent] = useState(
+  const [, setOriginalContent] = useState(savedContent || content);
-    savedContent || content,
-  );
   const [hasChanges, setHasChanges] = useState(false);
   const [showLargeFileWarning, setShowLargeFileWarning] = useState(false);
   const [forceShowAsText, setForceShowAsText] = useState(false);
@@ -326,7 +323,9 @@ export function FileViewer({
   const [pdfScale, setPdfScale] = useState(1.2);
   const [pdfError, setPdfError] = useState(false);
   const [markdownEditMode, setMarkdownEditMode] = useState(false);
-  const editorRef = useRef<any>(null);
+  const editorRef = useRef<{
+    view?: { dispatch: (transaction: unknown) => void };
+  } | null>(null);
 
   const fileTypeInfo = getFileType(file.name);
 
@@ -975,13 +974,7 @@ export function FileViewer({
                       <ReactMarkdown
                         remarkPlugins={[remarkGfm]}
                         components={{
-                          code({
+                          code({ inline, className, children, ...props }) {
-                            node,
-                            inline,
-                            className,
-                            children,
-                            ...props
-                          }) {
                             const match = /language-(\w+)/.exec(
                               className || "",
                             );
@@ -1097,7 +1090,7 @@ export function FileViewer({
                     <ReactMarkdown
                       remarkPlugins={[remarkGfm]}
                       components={{
-                        code({ node, inline, className, children, ...props }) {
+                        code({ inline, className, children, ...props }) {
                           const match = /language-(\w+)/.exec(className || "");
                           return !inline && match ? (
                             <SyntaxHighlighter
@@ -1380,8 +1373,7 @@ export function FileViewer({
                     <div className="rounded-lg overflow-hidden">
                       <AudioPlayer
                         src={audioUrl}
-                        onLoadedMetadata={(e) => {
+                        onLoadedMetadata={() => {
-                          const audio = e.currentTarget;
                           if (onMediaDimensionsChange) {
                             onMediaDimensionsChange({
                               width: 600,

src/ui/Desktop/Apps/File Manager/components/FileWindow.tsx

@@ -56,7 +56,7 @@ export function FileWindow({
   initialY = 100,
   onFileNotFound,
 }: FileWindowProps) {
-  const { closeWindow, maximizeWindow, focusWindow, updateWindow, windows } =
+  const { closeWindow, maximizeWindow, focusWindow, windows } =
     useWindowManager();
 
   const { t } = useTranslation();
@@ -157,28 +157,40 @@ export function FileWindow({
 
         const extension = file.name.split(".").pop()?.toLowerCase();
         setIsEditable(!mediaExtensions.includes(extension || ""));
-      } catch (error: any) {
+      } catch (error: unknown) {
         console.error("Failed to load file:", error);
 
-        const errorData = error?.response?.data;
+        const err = error as {
+          message?: string;
+          isFileNotFound?: boolean;
+          response?: {
+            status?: number;
+            data?: {
+              tooLarge?: boolean;
+              error?: string;
+              fileNotFound?: boolean;
+            };
+          };
+        };
+        const errorData = err?.response?.data;
         if (errorData?.tooLarge) {
           toast.error(`File too large: ${errorData.error}`, {
             duration: 10000,
           });
         } else if (
-          error.message?.includes("connection") ||
+          err.message?.includes("connection") ||
-          error.message?.includes("established")
+          err.message?.includes("established")
         ) {
           toast.error(
             `SSH connection failed. Please check your connection to ${sshHost.name} (${sshHost.ip}:${sshHost.port})`,
           );
         } else {
           const errorMessage =
-            errorData?.error || error.message || "Unknown error";
+            errorData?.error || err.message || "Unknown error";
           const isFileNotFound =
-            (error as any).isFileNotFound ||
+            err.isFileNotFound ||
             errorData?.fileNotFound ||
-            error.response?.status === 404 ||
+            err.response?.status === 404 ||
             errorMessage.includes("File not found") ||
             errorMessage.includes("No such file or directory") ||
             errorMessage.includes("cannot access") ||
@@ -229,10 +241,11 @@ export function FileWindow({
           const contentSize = new Blob([fileContent]).size;
           file.size = contentSize;
         }
-      } catch (error: any) {
+      } catch (error: unknown) {
         console.error("Failed to load file content:", error);
+        const err = error as { message?: string };
         toast.error(
-          `${t("fileManager.failedToLoadFile")}: ${error.message || t("fileManager.unknownError")}`,
+          `${t("fileManager.failedToLoadFile")}: ${err.message || t("fileManager.unknownError")}`,
         );
       } finally {
         setIsLoading(false);
@@ -258,19 +271,20 @@ export function FileWindow({
       }
 
       toast.success(t("fileManager.fileSavedSuccessfully"));
-    } catch (error: any) {
+    } catch (error: unknown) {
       console.error("Failed to save file:", error);
 
+      const err = error as { message?: string };
       if (
-        error.message?.includes("connection") ||
+        err.message?.includes("connection") ||
-        error.message?.includes("established")
+        err.message?.includes("established")
       ) {
         toast.error(
           `SSH connection failed. Please check your connection to ${sshHost.name} (${sshHost.ip}:${sshHost.port})`,
         );
       } else {
         toast.error(
-          `${t("fileManager.failedToSaveFile")}: ${error.message || t("fileManager.unknownError")}`,
+          `${t("fileManager.failedToSaveFile")}: ${err.message || t("fileManager.unknownError")}`,
         );
       }
     } finally {
@@ -335,19 +349,20 @@ export function FileWindow({
 
         toast.success(t("fileManager.fileDownloadedSuccessfully"));
       }
-    } catch (error: any) {
+    } catch (error: unknown) {
       console.error("Failed to download file:", error);
 
+      const err = error as { message?: string };
       if (
-        error.message?.includes("connection") ||
+        err.message?.includes("connection") ||
-        error.message?.includes("established")
+        err.message?.includes("established")
       ) {
         toast.error(
           `SSH connection failed. Please check your connection to ${sshHost.name} (${sshHost.ip}:${sshHost.port})`,
         );
       } else {
         toast.error(
-          `Failed to download file: ${error.message || "Unknown error"}`,
+          `Failed to download file: ${err.message || "Unknown error"}`,
         );
       }
     }

src/ui/Desktop/Apps/File Manager/components/TerminalWindow.tsx

@@ -36,11 +36,19 @@ export function TerminalWindow({
   executeCommand,
 }: TerminalWindowProps) {
   const { t } = useTranslation();
-  const { closeWindow, minimizeWindow, maximizeWindow, focusWindow, windows } =
+  const { closeWindow, maximizeWindow, focusWindow, windows } =
     useWindowManager();
-  const terminalRef = React.useRef<any>(null);
+  const terminalRef = React.useRef<{ fit?: () => void } | null>(null);
   const resizeTimeoutRef = React.useRef<NodeJS.Timeout | null>(null);
 
+  React.useEffect(() => {
+    return () => {
+      if (resizeTimeoutRef.current) {
+        clearTimeout(resizeTimeoutRef.current);
+      }
+    };
+  }, []);
+
   const currentWindow = windows.find((w) => w.id === windowId);
   if (!currentWindow) {
     return null;
@@ -50,10 +58,6 @@ export function TerminalWindow({
     closeWindow(windowId);
   };
 
-  const handleMinimize = () => {
-    minimizeWindow(windowId);
-  };
-
   const handleMaximize = () => {
     maximizeWindow(windowId);
   };
@@ -74,14 +78,6 @@ export function TerminalWindow({
     }, 100);
   };
 
-  React.useEffect(() => {
-    return () => {
-      if (resizeTimeoutRef.current) {
-        clearTimeout(resizeTimeoutRef.current);
-      }
-    };
-  }, []);
-
   const terminalTitle = executeCommand
     ? t("terminal.runTitle", { host: hostConfig.name, command: executeCommand })
     : initialPath

src/ui/Desktop/Apps/File Manager/components/WindowManager.tsx

@@ -1,3 +1,4 @@
+/* eslint-disable react-refresh/only-export-components */
 import React, { useState, useCallback, useRef } from "react";
 
 export interface WindowInstance {

src/ui/Desktop/Apps/Host Manager/HostManager.tsx

@@ -15,14 +15,18 @@ import { useTranslation } from "react-i18next";
 import type { SSHHost, HostManagerProps } from "../../../types/index";
 
 export function HostManager({
-  onSelectView,
   isTopbarOpen,
+  initialTab = "host_viewer",
 }: HostManagerProps): React.ReactElement {
   const { t } = useTranslation();
-  const [activeTab, setActiveTab] = useState("host_viewer");
+  const [activeTab, setActiveTab] = useState(initialTab);
   const [editingHost, setEditingHost] = useState<SSHHost | null>(null);
 
-  const [editingCredential, setEditingCredential] = useState<any | null>(null);
+  const [editingCredential, setEditingCredential] = useState<{
+    id: number;
+    name?: string;
+    username: string;
+  } | null>(null);
   const { state: sidebarState } = useSidebar();
 
   const handleEditHost = (host: SSHHost) => {
@@ -30,12 +34,16 @@ export function HostManager({
     setActiveTab("add_host");
   };
 
-  const handleFormSubmit = (updatedHost?: SSHHost) => {
+  const handleFormSubmit = () => {
     setEditingHost(null);
     setActiveTab("host_viewer");
   };
 
-  const handleEditCredential = (credential: any) => {
+  const handleEditCredential = (credential: {
+    id: number;
+    name?: string;
+    username: string;
+  }) => {
     setEditingCredential(credential);
     setActiveTab("add_credential");
   };

src/ui/Desktop/Apps/Host Manager/HostManagerEditor.tsx

@@ -38,6 +38,9 @@ import { CredentialSelector } from "@/ui/Desktop/Apps/Credentials/CredentialSele
 import CodeMirror from "@uiw/react-codemirror";
 import { oneDark } from "@codemirror/theme-one-dark";
 import { EditorView } from "@codemirror/view";
+import type { StatsConfig } from "@/types/stats-widgets";
+import { DEFAULT_STATS_CONFIG } from "@/types/stats-widgets";
+import { Checkbox } from "@/components/ui/checkbox.tsx";
 
 interface SSHHost {
   id: number;
@@ -57,7 +60,15 @@ interface SSHHost {
   enableTunnel: boolean;
   enableFileManager: boolean;
   defaultPath: string;
-  tunnelConnections: any[];
+  tunnelConnections: Array<{
+    sourcePort: number;
+    endpointPort: number;
+    endpointHost: string;
+    maxRetries: number;
+    retryInterval: number;
+    autoStart: boolean;
+  }>;
+  statsConfig?: StatsConfig;
   createdAt: string;
   updatedAt: string;
   credentialId?: number;
@@ -73,11 +84,11 @@ export function HostManagerEditor({
   onFormSubmit,
 }: SSHManagerHostEditorProps) {
   const { t } = useTranslation();
-  const [hosts, setHosts] = useState<SSHHost[]>([]);
   const [folders, setFolders] = useState<string[]>([]);
   const [sshConfigurations, setSshConfigurations] = useState<string[]>([]);
-  const [credentials, setCredentials] = useState<any[]>([]);
+  const [credentials, setCredentials] = useState<
-  const [loading, setLoading] = useState(true);
+    Array<{ id: number; username: string; authType: string }>
+  >([]);
 
   const [authTab, setAuthTab] = useState<"password" | "key" | "credential">(
     "password",
@@ -92,12 +103,10 @@ export function HostManagerEditor({
   useEffect(() => {
     const fetchData = async () => {
       try {
-        setLoading(true);
         const [hostsData, credentialsData] = await Promise.all([
           getSSHHosts(),
           getCredentials(),
         ]);
-        setHosts(hostsData);
         setCredentials(credentialsData);
 
         const uniqueFolders = [
@@ -118,9 +127,8 @@ export function HostManagerEditor({
 
         setFolders(uniqueFolders);
         setSshConfigurations(uniqueConfigurations);
-      } catch (error) {
+      } catch {
-      } finally {
+        // Failed to load hosts data
-        setLoading(false);
       }
     };
 
@@ -130,9 +138,7 @@ export function HostManagerEditor({
   useEffect(() => {
     const handleCredentialChange = async () => {
       try {
-        setLoading(true);
         const hostsData = await getSSHHosts();
-        setHosts(hostsData);
 
         const uniqueFolders = [
           ...new Set(
@@ -152,9 +158,8 @@ export function HostManagerEditor({
 
         setFolders(uniqueFolders);
         setSshConfigurations(uniqueConfigurations);
-      } catch (error) {
+      } catch {
-      } finally {
+        // Failed to reload hosts after credential change
-        setLoading(false);
       }
     };
 
@@ -208,6 +213,32 @@ export function HostManagerEditor({
         .default([]),
       enableFileManager: z.boolean().default(true),
       defaultPath: z.string().optional(),
+      statsConfig: z
+        .object({
+          enabledWidgets: z
+            .array(
+              z.enum([
+                "cpu",
+                "memory",
+                "disk",
+                "network",
+                "uptime",
+                "processes",
+                "system",
+              ]),
+            )
+            .default(["cpu", "memory", "disk", "network", "uptime", "system"]),
+        })
+        .default({
+          enabledWidgets: [
+            "cpu",
+            "memory",
+            "disk",
+            "network",
+            "uptime",
+            "system",
+          ],
+        }),
     })
     .superRefine((data, ctx) => {
       if (data.authType === "password") {
@@ -270,7 +301,7 @@ export function HostManagerEditor({
   type FormData = z.infer<typeof formSchema>;
 
   const form = useForm<FormData>({
-    resolver: zodResolver(formSchema) as any,
+    resolver: zodResolver(formSchema),
     defaultValues: {
       name: "",
       ip: "",
@@ -290,6 +321,7 @@ export function HostManagerEditor({
       enableFileManager: true,
       defaultPath: "/",
       tunnelConnections: [],
+      statsConfig: DEFAULT_STATS_CONFIG,
     },
   });
 
@@ -346,6 +378,7 @@ export function HostManagerEditor({
         enableFileManager: Boolean(cleanedHost.enableFileManager),
         defaultPath: cleanedHost.defaultPath || "/",
         tunnelConnections: cleanedHost.tunnelConnections || [],
+        statsConfig: cleanedHost.statsConfig || DEFAULT_STATS_CONFIG,
       };
 
       if (defaultAuthType === "password") {
@@ -353,7 +386,17 @@ export function HostManagerEditor({
       } else if (defaultAuthType === "key") {
         formData.key = editingHost.id ? "existing_key" : editingHost.key;
         formData.keyPassword = cleanedHost.keyPassword || "";
-        formData.keyType = (cleanedHost.keyType as any) || "auto";
+        formData.keyType =
+          (cleanedHost.keyType as
+            | "auto"
+            | "ssh-rsa"
+            | "ssh-ed25519"
+            | "ecdsa-sha2-nistp256"
+            | "ecdsa-sha2-nistp384"
+            | "ecdsa-sha2-nistp521"
+            | "ssh-dss"
+            | "ssh-rsa-sha2-256"
+            | "ssh-rsa-sha2-512") || "auto";
       } else if (defaultAuthType === "credential") {
         formData.credentialId =
           cleanedHost.credentialId || "existing_credential";
@@ -381,6 +424,7 @@ export function HostManagerEditor({
         enableFileManager: true,
         defaultPath: "/",
         tunnelConnections: [],
+        statsConfig: DEFAULT_STATS_CONFIG,
       };
 
       form.reset(defaultFormData);
@@ -405,7 +449,7 @@ export function HostManagerEditor({
         data.name = `${data.username}@${data.ip}`;
       }
 
-      const submitData: any = {
+      const submitData: Record<string, unknown> = {
         name: data.name,
         ip: data.ip,
         port: data.port,
@@ -419,6 +463,7 @@ export function HostManagerEditor({
         enableFileManager: Boolean(data.enableFileManager),
         defaultPath: data.defaultPath || "/",
         tunnelConnections: data.tunnelConnections || [],
+        statsConfig: data.statsConfig || DEFAULT_STATS_CONFIG,
       };
 
       submitData.credentialId = null;
@@ -497,7 +542,7 @@ export function HostManagerEditor({
       window.dispatchEvent(new CustomEvent("ssh-hosts:changed"));
 
       form.reset();
-    } catch (error) {
+    } catch {
       toast.error(t("hosts.failedToSaveHost"));
     } finally {
       isSubmittingRef.current = false;
@@ -667,6 +712,9 @@ export function HostManagerEditor({
                 <TabsTrigger value="file_manager">
                   {t("hosts.fileManager")}
                 </TabsTrigger>
+                <TabsTrigger value="statistics">
+                  {t("hosts.statistics")}
+                </TabsTrigger>
               </TabsList>
               <TabsContent value="general" className="pt-2">
                 <FormLabel className="mb-3 font-bold">
@@ -1531,6 +1579,65 @@ export function HostManagerEditor({
                   </div>
                 )}
               </TabsContent>
+              <TabsContent value="statistics">
+                <FormField
+                  control={form.control}
+                  name="statsConfig.enabledWidgets"
+                  render={({ field }) => (
+                    <FormItem>
+                      <FormLabel>{t("hosts.enabledWidgets")}</FormLabel>
+                      <FormDescription>
+                        {t("hosts.enabledWidgetsDesc")}
+                      </FormDescription>
+                      <div className="space-y-3 mt-3">
+                        {(
+                          [
+                            "cpu",
+                            "memory",
+                            "disk",
+                            "network",
+                            "uptime",
+                            "processes",
+                            "system",
+                          ] as const
+                        ).map((widget) => (
+                          <div
+                            key={widget}
+                            className="flex items-center space-x-2"
+                          >
+                            <Checkbox
+                              checked={field.value?.includes(widget)}
+                              onCheckedChange={(checked) => {
+                                const currentWidgets = field.value || [];
+                                if (checked) {
+                                  field.onChange([...currentWidgets, widget]);
+                                } else {
+                                  field.onChange(
+                                    currentWidgets.filter((w) => w !== widget),
+                                  );
+                                }
+                              }}
+                            />
+                            <label className="text-sm font-medium leading-none peer-disabled:cursor-not-allowed peer-disabled:opacity-70">
+                              {widget === "cpu" && t("serverStats.cpuUsage")}
+                              {widget === "memory" &&
+                                t("serverStats.memoryUsage")}
+                              {widget === "disk" && t("serverStats.diskUsage")}
+                              {widget === "network" &&
+                                t("serverStats.networkInterfaces")}
+                              {widget === "uptime" && t("serverStats.uptime")}
+                              {widget === "processes" &&
+                                t("serverStats.processes")}
+                              {widget === "system" &&
+                                t("serverStats.systemInfo")}
+                            </label>
+                          </div>
+                        ))}
+                      </div>
+                    </FormItem>
+                  )}
+                />
+              </TabsContent>
             </Tabs>
           </ScrollArea>
           <footer className="shrink-0 w-full pb-0">

src/ui/Desktop/Apps/Host Manager/HostManagerViewer.tsx

@@ -106,7 +106,7 @@ export function HostManagerViewer({ onEditHost }: SSHManagerHostViewerProps) {
 
       setHosts(cleanedHosts);
       setError(null);
-    } catch (err) {
+    } catch {
       setError(t("hosts.failedToLoadHosts"));
     } finally {
       setLoading(false);
@@ -122,7 +122,7 @@ export function HostManagerViewer({ onEditHost }: SSHManagerHostViewerProps) {
           toast.success(t("hosts.hostDeletedSuccessfully", { name: hostName }));
           await fetchHosts();
           window.dispatchEvent(new CustomEvent("ssh-hosts:changed"));
-        } catch (err) {
+        } catch {
           toast.error(t("hosts.failedToDeleteHost"));
         }
       },
@@ -143,7 +143,7 @@ export function HostManagerViewer({ onEditHost }: SSHManagerHostViewerProps) {
       });
 
       confirmWithToast(confirmMessage, () => {
-        performExport(host, actualAuthType);
+        performExport(host);
       });
       return;
     } else if (actualAuthType === "password" || actualAuthType === "key") {
@@ -152,21 +152,21 @@ export function HostManagerViewer({ onEditHost }: SSHManagerHostViewerProps) {
       });
 
       confirmWithToast(confirmMessage, () => {
-        performExport(host, actualAuthType);
+        performExport(host);
       });
       return;
     }
 
-    performExport(host, actualAuthType);
+    performExport(host);
   };
 
-  const performExport = async (host: SSHHost, actualAuthType: string) => {
+  const performExport = async (host: SSHHost) => {
     try {
       const decryptedHost = await exportSSHHostWithCredentials(host.id);
 
       const cleanExportData = Object.fromEntries(
         Object.entries(decryptedHost).filter(
-          ([_, value]) => value !== undefined,
+          ([, value]) => value !== undefined,
         ),
       );
 
@@ -185,7 +185,7 @@ export function HostManagerViewer({ onEditHost }: SSHManagerHostViewerProps) {
       toast.success(
         `Exported host configuration for ${host.name || host.username}@${host.ip}`,
       );
-    } catch (error) {
+    } catch {
       toast.error(t("hosts.failedToExportHost"));
     }
   };
@@ -222,7 +222,7 @@ export function HostManagerViewer({ onEditHost }: SSHManagerHostViewerProps) {
           );
           await fetchHosts();
           window.dispatchEvent(new CustomEvent("ssh-hosts:changed"));
-        } catch (err) {
+        } catch {
           toast.error(t("hosts.failedToRemoveFromFolder"));
         } finally {
           setOperationLoading(false);
@@ -251,7 +251,7 @@ export function HostManagerViewer({ onEditHost }: SSHManagerHostViewerProps) {
       window.dispatchEvent(new CustomEvent("ssh-hosts:changed"));
       setEditingFolder(null);
       setEditingFolderName("");
-    } catch (err) {
+    } catch {
       toast.error(t("hosts.failedToRenameFolder"));
     } finally {
       setOperationLoading(false);
@@ -291,7 +291,7 @@ export function HostManagerViewer({ onEditHost }: SSHManagerHostViewerProps) {
     setDragOverFolder(folderName);
   };
 
-  const handleDragLeave = (e: React.DragEvent) => {
+  const handleDragLeave = () => {
     dragCounter.current--;
     if (dragCounter.current === 0) {
       setDragOverFolder(null);
@@ -325,7 +325,7 @@ export function HostManagerViewer({ onEditHost }: SSHManagerHostViewerProps) {
       );
       await fetchHosts();
       window.dispatchEvent(new CustomEvent("ssh-hosts:changed"));
-    } catch (err) {
+    } catch {
       toast.error(t("hosts.failedToMoveToFolder"));
     } finally {
       setOperationLoading(false);

src/ui/Desktop/Apps/Server/Server.tsx

@@ -3,8 +3,6 @@ import { useSidebar } from "@/components/ui/sidebar.tsx";
 import { Status, StatusIndicator } from "@/components/ui/shadcn-io/status";
 import { Separator } from "@/components/ui/separator.tsx";
 import { Button } from "@/components/ui/button.tsx";
-import { Progress } from "@/components/ui/progress.tsx";
-import { Cpu, HardDrive, MemoryStick } from "lucide-react";
 import { Tunnel } from "@/ui/Desktop/Apps/Tunnel/Tunnel.tsx";
 import {
   getServerStatusById,
@@ -14,9 +12,43 @@ import {
 import { useTabs } from "@/ui/Desktop/Navigation/Tabs/TabContext.tsx";
 import { useTranslation } from "react-i18next";
 import { toast } from "sonner";
+import {
+  type WidgetType,
+  type StatsConfig,
+  DEFAULT_STATS_CONFIG,
+} from "@/types/stats-widgets";
+import {
+  CpuWidget,
+  MemoryWidget,
+  DiskWidget,
+  NetworkWidget,
+  UptimeWidget,
+  ProcessesWidget,
+  SystemWidget,
+} from "./widgets";
+
+interface HostConfig {
+  id: number;
+  name: string;
+  ip: string;
+  username: string;
+  folder?: string;
+  enableFileManager?: boolean;
+  tunnelConnections?: unknown[];
+  statsConfig?: string | StatsConfig;
+  [key: string]: unknown;
+}
+
+interface TabData {
+  id: number;
+  type: string;
+  title?: string;
+  hostConfig?: HostConfig;
+  [key: string]: unknown;
+}
 
 interface ServerProps {
-  hostConfig?: any;
+  hostConfig?: HostConfig;
   title?: string;
   isVisible?: boolean;
   isTopbarOpen?: boolean;
@@ -32,20 +64,80 @@ export function Server({
 }: ServerProps): React.ReactElement {
   const { t } = useTranslation();
   const { state: sidebarState } = useSidebar();
-  const { addTab, tabs } = useTabs() as any;
+  const { addTab, tabs } = useTabs() as {
+    addTab: (tab: { type: string; [key: string]: unknown }) => number;
+    tabs: TabData[];
+  };
   const [serverStatus, setServerStatus] = React.useState<"online" | "offline">(
     "offline",
   );
   const [metrics, setMetrics] = React.useState<ServerMetrics | null>(null);
+  const [metricsHistory, setMetricsHistory] = React.useState<ServerMetrics[]>(
+    [],
+  );
   const [currentHostConfig, setCurrentHostConfig] = React.useState(hostConfig);
   const [isLoadingMetrics, setIsLoadingMetrics] = React.useState(false);
   const [isRefreshing, setIsRefreshing] = React.useState(false);
   const [showStatsUI, setShowStatsUI] = React.useState(true);
 
+  const enabledWidgets = React.useMemo((): WidgetType[] => {
+    if (!currentHostConfig?.statsConfig) {
+      return DEFAULT_STATS_CONFIG.enabledWidgets;
+    }
+    try {
+      const parsed =
+        typeof currentHostConfig.statsConfig === "string"
+          ? JSON.parse(currentHostConfig.statsConfig)
+          : currentHostConfig.statsConfig;
+      return parsed?.enabledWidgets || DEFAULT_STATS_CONFIG.enabledWidgets;
+    } catch (error) {
+      console.error("Failed to parse statsConfig:", error);
+      return DEFAULT_STATS_CONFIG.enabledWidgets;
+    }
+  }, [currentHostConfig?.statsConfig]);
+
   React.useEffect(() => {
     setCurrentHostConfig(hostConfig);
   }, [hostConfig]);
 
+  const renderWidget = (widgetType: WidgetType) => {
+    switch (widgetType) {
+      case "cpu":
+        return <CpuWidget metrics={metrics} metricsHistory={metricsHistory} />;
+
+      case "memory":
+        return (
+          <MemoryWidget metrics={metrics} metricsHistory={metricsHistory} />
+        );
+
+      case "disk":
+        return <DiskWidget metrics={metrics} metricsHistory={metricsHistory} />;
+
+      case "network":
+        return (
+          <NetworkWidget metrics={metrics} metricsHistory={metricsHistory} />
+        );
+
+      case "uptime":
+        return (
+          <UptimeWidget metrics={metrics} metricsHistory={metricsHistory} />
+        );
+
+      case "processes":
+        return (
+          <ProcessesWidget metrics={metrics} metricsHistory={metricsHistory} />
+        );
+
+      case "system":
+        return (
+          <SystemWidget metrics={metrics} metricsHistory={metricsHistory} />
+        );
+
+      default:
+        return null;
+    }
+  };
+
   React.useEffect(() => {
     const fetchLatestHostConfig = async () => {
       if (hostConfig?.id) {
@@ -56,7 +148,7 @@ export function Server({
           if (updatedHost) {
             setCurrentHostConfig(updatedHost);
           }
-        } catch (error) {
+        } catch {
           toast.error(t("serverStats.failedToFetchHostConfig"));
         }
       }
@@ -73,7 +165,7 @@ export function Server({
           if (updatedHost) {
             setCurrentHostConfig(updatedHost);
           }
-        } catch (error) {
+        } catch {
           toast.error(t("serverStats.failedToFetchHostConfig"));
         }
       }
@@ -94,13 +186,16 @@ export function Server({
         if (!cancelled) {
           setServerStatus(res?.status === "online" ? "online" : "offline");
         }
-      } catch (error: any) {
+      } catch (error: unknown) {
         if (!cancelled) {
-          if (error?.response?.status === 503) {
+          const err = error as {
+            response?: { status?: number };
+          };
+          if (err?.response?.status === 503) {
             setServerStatus("offline");
-          } else if (error?.response?.status === 504) {
+          } else if (err?.response?.status === 504) {
             setServerStatus("offline");
-          } else if (error?.response?.status === 404) {
+          } else if (err?.response?.status === 404) {
             setServerStatus("offline");
           } else {
             setServerStatus("offline");
@@ -117,13 +212,30 @@ export function Server({
         const data = await getServerMetricsById(currentHostConfig.id);
         if (!cancelled) {
           setMetrics(data);
+          setMetricsHistory((prev) => {
+            const newHistory = [...prev, data];
+            // Keep last 20 data points for chart
+            return newHistory.slice(-20);
+          });
           setShowStatsUI(true);
         }
-      } catch (error) {
+      } catch (error: unknown) {
         if (!cancelled) {
           setMetrics(null);
           setShowStatsUI(false);
-          toast.error(t("serverStats.failedToFetchMetrics"));
+          const err = error as {
+            code?: string;
+            response?: { status?: number; data?: { error?: string } };
+          };
+          if (
+            err?.code === "TOTP_REQUIRED" ||
+            (err?.response?.status === 403 &&
+              err?.response?.data?.error === "TOTP_REQUIRED")
+          ) {
+            toast.error(t("serverStats.totpUnavailable"));
+          } else {
+            toast.error(t("serverStats.failedToFetchMetrics"));
+          }
         }
       } finally {
         if (!cancelled) {
@@ -154,7 +266,7 @@ export function Server({
   const isFileManagerAlreadyOpen = React.useMemo(() => {
     if (!currentHostConfig) return false;
     return tabs.some(
-      (tab: any) =>
+      (tab: TabData) =>
         tab.type === "file_manager" &&
         tab.hostConfig?.id === currentHostConfig.id,
     );
@@ -196,6 +308,7 @@ export function Server({
             <Button
               variant="outline"
               disabled={isRefreshing}
+              className="font-semibold"
               onClick={async () => {
                 if (currentHostConfig?.id) {
                   try {
@@ -209,18 +322,46 @@ export function Server({
                     );
                     setMetrics(data);
                     setShowStatsUI(true);
-                  } catch (error: any) {
+                  } catch (error: unknown) {
-                    if (error?.response?.status === 503) {
+                    const err = error as {
+                      code?: string;
+                      status?: number;
+                      response?: { status?: number; data?: { error?: string } };
+                    };
+                    if (
+                      err?.code === "TOTP_REQUIRED" ||
+                      (err?.response?.status === 403 &&
+                        err?.response?.data?.error === "TOTP_REQUIRED")
+                    ) {
+                      toast.error(t("serverStats.totpUnavailable"));
+                      setMetrics(null);
+                      setShowStatsUI(false);
+                    } else if (
+                      err?.response?.status === 503 ||
+                      err?.status === 503
+                    ) {
                       setServerStatus("offline");
-                    } else if (error?.response?.status === 504) {
+                      setMetrics(null);
+                      setShowStatsUI(false);
+                    } else if (
+                      err?.response?.status === 504 ||
+                      err?.status === 504
+                    ) {
                       setServerStatus("offline");
-                    } else if (error?.response?.status === 404) {
+                      setMetrics(null);
+                      setShowStatsUI(false);
+                    } else if (
+                      err?.response?.status === 404 ||
+                      err?.status === 404
+                    ) {
                       setServerStatus("offline");
+                      setMetrics(null);
+                      setShowStatsUI(false);
                     } else {
                       setServerStatus("offline");
+                      setMetrics(null);
+                      setShowStatsUI(false);
                     }
-                    setMetrics(null);
-                    setShowStatsUI(false);
                   } finally {
                     setIsRefreshing(false);
                   }
@@ -268,200 +409,60 @@ export function Server({
         </div>
         <Separator className="p-0.25 w-full" />
 
-        {showStatsUI && (
+        <div className="flex-1 overflow-y-auto min-h-0">
-          <div className="rounded-lg border-2 border-dark-border m-3 bg-dark-bg-darker p-4">
+          {showStatsUI && (
-            {isLoadingMetrics && !metrics ? (
+            <div className="rounded-lg border-2 border-dark-border m-3 bg-dark-bg-darker p-4 max-h-[50vh] overflow-y-auto">
-              <div className="flex items-center justify-center py-8">
+              {isLoadingMetrics && !metrics ? (
-                <div className="flex items-center gap-3">
+                <div className="flex items-center justify-center py-8">
-                  <div className="w-6 h-6 border-2 border-blue-400 border-t-transparent rounded-full animate-spin"></div>
+                  <div className="flex items-center gap-3">
-                  <span className="text-gray-300">
+                    <div className="w-6 h-6 border-2 border-blue-400 border-t-transparent rounded-full animate-spin"></div>
-                    {t("serverStats.loadingMetrics")}
+                    <span className="text-gray-300">
-                  </span>
+                      {t("serverStats.loadingMetrics")}
-                </div>
+                    </span>
-              </div>
-            ) : !metrics && serverStatus === "offline" ? (
-              <div className="flex items-center justify-center py-8">
-                <div className="text-center">
-                  <div className="w-12 h-12 mx-auto mb-3 rounded-full bg-red-500/20 flex items-center justify-center">
-                    <div className="w-6 h-6 border-2 border-red-400 rounded-full"></div>
-                  </div>
-                  <p className="text-gray-300 mb-1">
-                    {t("serverStats.serverOffline")}
-                  </p>
-                  <p className="text-sm text-gray-500">
-                    {t("serverStats.cannotFetchMetrics")}
-                  </p>
-                </div>
-              </div>
-            ) : (
-              <div className="grid grid-cols-1 md:grid-cols-2 xl:grid-cols-3 gap-4 lg:gap-6">
-                {/* CPU Stats */}
-                <div className="space-y-3 p-4 rounded-lg bg-dark-bg/50 border border-dark-border/50 hover:bg-dark-bg/70 transition-colors duration-200">
-                  <div className="flex items-center gap-2 mb-3">
-                    <Cpu className="h-5 w-5 text-blue-400" />
-                    <h3 className="font-semibold text-lg text-white">
-                      {t("serverStats.cpuUsage")}
-                    </h3>
-                  </div>
-
-                  <div className="space-y-2">
-                    <div className="flex justify-between items-center">
-                      <span className="text-sm text-gray-300">
-                        {(() => {
-                          const pct = metrics?.cpu?.percent;
-                          const cores = metrics?.cpu?.cores;
-                          const pctText =
-                            typeof pct === "number" ? `${pct}%` : "N/A";
-                          const coresText =
-                            typeof cores === "number"
-                              ? t("serverStats.cpuCores", { count: cores })
-                              : t("serverStats.naCpus");
-                          return `${pctText} ${t("serverStats.of")} ${coresText}`;
-                        })()}
-                      </span>
-                    </div>
-
-                    <div className="relative">
-                      <Progress
-                        value={
-                          typeof metrics?.cpu?.percent === "number"
-                            ? metrics!.cpu!.percent!
-                            : 0
-                        }
-                        className="h-2"
-                      />
-                    </div>
-
-                    <div className="text-xs text-gray-500">
-                      {metrics?.cpu?.load
-                        ? `Load: ${metrics.cpu.load[0].toFixed(2)}, ${metrics.cpu.load[1].toFixed(2)}, ${metrics.cpu.load[2].toFixed(2)}`
-                        : "Load: N/A"}
-                    </div>
                   </div>
                 </div>
-
+              ) : !metrics && serverStatus === "offline" ? (
-                {/* Memory Stats */}
+                <div className="flex items-center justify-center py-8">
-                <div className="space-y-3 p-4 rounded-lg bg-dark-bg/50 border border-dark-border/50 hover:bg-dark-bg/70 transition-colors duration-200">
+                  <div className="text-center">
-                  <div className="flex items-center gap-2 mb-3">
+                    <div className="w-12 h-12 mx-auto mb-3 rounded-full bg-red-500/20 flex items-center justify-center">
-                    <MemoryStick className="h-5 w-5 text-green-400" />
+                      <div className="w-6 h-6 border-2 border-red-400 rounded-full"></div>
-                    <h3 className="font-semibold text-lg text-white">
-                      {t("serverStats.memoryUsage")}
-                    </h3>
-                  </div>
-
-                  <div className="space-y-2">
-                    <div className="flex justify-between items-center">
-                      <span className="text-sm text-gray-300">
-                        {(() => {
-                          const pct = metrics?.memory?.percent;
-                          const used = metrics?.memory?.usedGiB;
-                          const total = metrics?.memory?.totalGiB;
-                          const pctText =
-                            typeof pct === "number" ? `${pct}%` : "N/A";
-                          const usedText =
-                            typeof used === "number"
-                              ? `${used.toFixed(1)} GiB`
-                              : "N/A";
-                          const totalText =
-                            typeof total === "number"
-                              ? `${total.toFixed(1)} GiB`
-                              : "N/A";
-                          return `${pctText} (${usedText} ${t("serverStats.of")} ${totalText})`;
-                        })()}
-                      </span>
-                    </div>
-
-                    <div className="relative">
-                      <Progress
-                        value={
-                          typeof metrics?.memory?.percent === "number"
-                            ? metrics!.memory!.percent!
-                            : 0
-                        }
-                        className="h-2"
-                      />
-                    </div>
-
-                    <div className="text-xs text-gray-500">
-                      {(() => {
-                        const used = metrics?.memory?.usedGiB;
-                        const total = metrics?.memory?.totalGiB;
-                        const free =
-                          typeof used === "number" && typeof total === "number"
-                            ? (total - used).toFixed(1)
-                            : "N/A";
-                        return `Free: ${free} GiB`;
-                      })()}
                     </div>
+                    <p className="text-gray-300 mb-1">
+                      {t("serverStats.serverOffline")}
+                    </p>
+                    <p className="text-sm text-gray-500">
+                      {t("serverStats.cannotFetchMetrics")}
+                    </p>
                   </div>
                 </div>
-
+              ) : (
-                {/* Disk Stats */}
+                <div className="grid grid-cols-1 md:grid-cols-2 lg:grid-cols-3 gap-4">
-                <div className="space-y-3 p-4 rounded-lg bg-dark-bg/50 border border-dark-border/50 hover:bg-dark-bg/70 transition-colors duration-200">
+                  {enabledWidgets.map((widgetType) => (
-                  <div className="flex items-center gap-2 mb-3">
+                    <div key={widgetType} className="h-[280px]">
-                    <HardDrive className="h-5 w-5 text-orange-400" />
+                      {renderWidget(widgetType)}
-                    <h3 className="font-semibold text-lg text-white">
-                      {t("serverStats.rootStorageSpace")}
-                    </h3>
-                  </div>
-
-                  <div className="space-y-2">
-                    <div className="flex justify-between items-center">
-                      <span className="text-sm text-gray-300">
-                        {(() => {
-                          const pct = metrics?.disk?.percent;
-                          const used = metrics?.disk?.usedHuman;
-                          const total = metrics?.disk?.totalHuman;
-                          const pctText =
-                            typeof pct === "number" ? `${pct}%` : "N/A";
-                          const usedText = used ?? "N/A";
-                          const totalText = total ?? "N/A";
-                          return `${pctText} (${usedText} ${t("serverStats.of")} ${totalText})`;
-                        })()}
-                      </span>
                     </div>
-
+                  ))}
-                    <div className="relative">
-                      <Progress
-                        value={
-                          typeof metrics?.disk?.percent === "number"
-                            ? metrics!.disk!.percent!
-                            : 0
-                        }
-                        className="h-2"
-                      />
-                    </div>
-
-                    <div className="text-xs text-gray-500">
-                      {(() => {
-                        const available = metrics?.disk?.availableHuman;
-                        return available
-                          ? `Available: ${available}`
-                          : "Available: N/A";
-                      })()}
-                    </div>
-                  </div>
                 </div>
-              </div>
+              )}
-            )}
-          </div>
-        )}
-
-        {/* SSH Tunnels */}
-        {currentHostConfig?.tunnelConnections &&
-          currentHostConfig.tunnelConnections.length > 0 && (
-            <div className="rounded-lg border-2 border-dark-border m-3 bg-dark-bg-darker h-[360px] overflow-hidden flex flex-col min-h-0">
-              <Tunnel
-                filterHostKey={
-                  currentHostConfig?.name &&
-                  currentHostConfig.name.trim() !== ""
-                    ? currentHostConfig.name
-                    : `${currentHostConfig?.username}@${currentHostConfig?.ip}`
-                }
-              />
             </div>
           )}
 
+          {/* SSH Tunnels */}
+          {currentHostConfig?.tunnelConnections &&
+            currentHostConfig.tunnelConnections.length > 0 && (
+              <div className="rounded-lg border-2 border-dark-border m-3 bg-dark-bg-darker h-[360px] overflow-hidden flex flex-col min-h-0">
+                <Tunnel
+                  filterHostKey={
+                    currentHostConfig?.name &&
+                    currentHostConfig.name.trim() !== ""
+                      ? currentHostConfig.name
+                      : `${currentHostConfig?.username}@${currentHostConfig?.ip}`
+                  }
+                />
+              </div>
+            )}
+        </div>
+
         <p className="px-4 pt-2 pb-2 text-sm text-gray-500">
           {t("serverStats.feedbackMessage")}{" "}
           <a

src/ui/Desktop/Apps/Server/widgets/CpuWidget.tsx

@@ -0,0 +1,102 @@
+import React from "react";
+import { Cpu } from "lucide-react";
+import { useTranslation } from "react-i18next";
+import type { ServerMetrics } from "@/ui/main-axios.ts";
+import { RechartsPrimitive } from "@/components/ui/chart.tsx";
+
+const {
+  LineChart,
+  Line,
+  XAxis,
+  YAxis,
+  CartesianGrid,
+  Tooltip,
+  ResponsiveContainer,
+} = RechartsPrimitive;
+
+interface CpuWidgetProps {
+  metrics: ServerMetrics | null;
+  metricsHistory: ServerMetrics[];
+}
+
+export function CpuWidget({ metrics, metricsHistory }: CpuWidgetProps) {
+  const { t } = useTranslation();
+
+  // Prepare chart data
+  const chartData = React.useMemo(() => {
+    return metricsHistory.map((m, index) => ({
+      index,
+      cpu: m.cpu?.percent || 0,
+    }));
+  }, [metricsHistory]);
+
+  return (
+    <div className="h-full w-full p-4 rounded-lg bg-dark-bg/50 border border-dark-border/50 hover:bg-dark-bg/70 transition-colors duration-200 flex flex-col overflow-hidden">
+      <div className="flex items-center gap-2 flex-shrink-0 mb-3">
+        <Cpu className="h-5 w-5 text-blue-400" />
+        <h3 className="font-semibold text-lg text-white">
+          {t("serverStats.cpuUsage")}
+        </h3>
+      </div>
+
+      <div className="flex flex-col flex-1 min-h-0 gap-2">
+        <div className="flex items-baseline gap-3 flex-shrink-0">
+          <div className="text-2xl font-bold text-blue-400">
+            {typeof metrics?.cpu?.percent === "number"
+              ? `${metrics.cpu.percent}%`
+              : "N/A"}
+          </div>
+          <div className="text-xs text-gray-400">
+            {typeof metrics?.cpu?.cores === "number"
+              ? t("serverStats.cpuCores", { count: metrics.cpu.cores })
+              : t("serverStats.naCpus")}
+          </div>
+        </div>
+        <div className="text-xs text-gray-500 flex-shrink-0">
+          {metrics?.cpu?.load
+            ? t("serverStats.loadAverage", {
+                avg1: metrics.cpu.load[0].toFixed(2),
+                avg5: metrics.cpu.load[1].toFixed(2),
+                avg15: metrics.cpu.load[2].toFixed(2),
+              })
+            : t("serverStats.loadAverageNA")}
+        </div>
+        <div className="flex-1 min-h-0">
+          <ResponsiveContainer width="100%" height="100%">
+            <LineChart data={chartData}>
+              <CartesianGrid strokeDasharray="3 3" stroke="#374151" />
+              <XAxis
+                dataKey="index"
+                stroke="#9ca3af"
+                tick={{ fill: "#9ca3af" }}
+                hide
+              />
+              <YAxis
+                domain={[0, 100]}
+                stroke="#9ca3af"
+                tick={{ fill: "#9ca3af" }}
+              />
+              <Tooltip
+                contentStyle={{
+                  backgroundColor: "#1f2937",
+                  border: "1px solid #374151",
+                  borderRadius: "6px",
+                  color: "#fff",
+                }}
+                formatter={(value: number) => [`${value.toFixed(1)}%`, "CPU"]}
+              />
+              <Line
+                type="monotone"
+                dataKey="cpu"
+                stroke="#60a5fa"
+                strokeWidth={2}
+                dot={false}
+                animationDuration={300}
+              />
+            </LineChart>
+          </ResponsiveContainer>
+        </div>
+      </div>
+    </div>
+  );
+}

src/ui/Desktop/Apps/Server/widgets/DiskWidget.tsx

@@ -0,0 +1,100 @@
+import React from "react";
+import { HardDrive } from "lucide-react";
+import { useTranslation } from "react-i18next";
+import type { ServerMetrics } from "@/ui/main-axios.ts";
+import { RechartsPrimitive } from "@/components/ui/chart.tsx";
+
+const { RadialBarChart, RadialBar, PolarAngleAxis, ResponsiveContainer } =
+  RechartsPrimitive;
+
+interface DiskWidgetProps {
+  metrics: ServerMetrics | null;
+  metricsHistory: ServerMetrics[];
+}
+
+export function DiskWidget({ metrics }: DiskWidgetProps) {
+  const { t } = useTranslation();
+
+  // Prepare radial chart data
+  const radialData = React.useMemo(() => {
+    const percent = metrics?.disk?.percent || 0;
+    return [
+      {
+        name: "Disk",
+        value: percent,
+        fill: "#fb923c",
+      },
+    ];
+  }, [metrics]);
+
+  return (
+    <div className="h-full w-full p-4 rounded-lg bg-dark-bg/50 border border-dark-border/50 hover:bg-dark-bg/70 transition-colors duration-200 flex flex-col overflow-hidden">
+      <div className="flex items-center gap-2 flex-shrink-0 mb-3">
+        <HardDrive className="h-5 w-5 text-orange-400" />
+        <h3 className="font-semibold text-lg text-white">
+          {t("serverStats.diskUsage")}
+        </h3>
+      </div>
+
+      <div className="flex flex-col flex-1 min-h-0">
+        <div className="flex-1 min-h-0 flex items-center justify-center">
+          <ResponsiveContainer width="100%" height="100%">
+            <RadialBarChart
+              cx="50%"
+              cy="50%"
+              innerRadius="60%"
+              outerRadius="90%"
+              data={radialData}
+              startAngle={90}
+              endAngle={-270}
+            >
+              <PolarAngleAxis
+                type="number"
+                domain={[0, 100]}
+                angleAxisId={0}
+                tick={false}
+              />
+              <RadialBar
+                background
+                dataKey="value"
+                cornerRadius={10}
+                fill="#fb923c"
+              />
+              <text
+                x="50%"
+                y="50%"
+                textAnchor="middle"
+                dominantBaseline="middle"
+                className="text-2xl font-bold fill-orange-400"
+              >
+                {typeof metrics?.disk?.percent === "number"
+                  ? `${metrics.disk.percent}%`
+                  : "N/A"}
+              </text>
+            </RadialBarChart>
+          </ResponsiveContainer>
+        </div>
+        <div className="flex-shrink-0 space-y-1 text-center pb-2">
+          <div className="text-xs text-gray-400">
+            {(() => {
+              const used = metrics?.disk?.usedHuman;
+              const total = metrics?.disk?.totalHuman;
+              if (used && total) {
+                return `${used} / ${total}`;
+              }
+              return "N/A";
+            })()}
+          </div>
+          <div className="text-xs text-gray-500">
+            {(() => {
+              const available = metrics?.disk?.availableHuman;
+              return available
+                ? `${t("serverStats.available")}: ${available}`
+                : `${t("serverStats.available")}: N/A`;
+            })()}
+          </div>
+        </div>
+      </div>
+    </div>
+  );
+}

src/ui/Desktop/Apps/Server/widgets/MemoryWidget.tsx

@@ -0,0 +1,118 @@
+import React from "react";
+import { MemoryStick } from "lucide-react";
+import { useTranslation } from "react-i18next";
+import type { ServerMetrics } from "@/ui/main-axios.ts";
+import { RechartsPrimitive } from "@/components/ui/chart.tsx";
+
+const {
+  AreaChart,
+  Area,
+  XAxis,
+  YAxis,
+  CartesianGrid,
+  Tooltip,
+  ResponsiveContainer,
+} = RechartsPrimitive;
+
+interface MemoryWidgetProps {
+  metrics: ServerMetrics | null;
+  metricsHistory: ServerMetrics[];
+}
+
+export function MemoryWidget({ metrics, metricsHistory }: MemoryWidgetProps) {
+  const { t } = useTranslation();
+
+  // Prepare chart data
+  const chartData = React.useMemo(() => {
+    return metricsHistory.map((m, index) => ({
+      index,
+      memory: m.memory?.percent || 0,
+    }));
+  }, [metricsHistory]);
+
+  return (
+    <div className="h-full w-full p-4 rounded-lg bg-dark-bg/50 border border-dark-border/50 hover:bg-dark-bg/70 transition-colors duration-200 flex flex-col overflow-hidden">
+      <div className="flex items-center gap-2 flex-shrink-0 mb-3">
+        <MemoryStick className="h-5 w-5 text-green-400" />
+        <h3 className="font-semibold text-lg text-white">
+          {t("serverStats.memoryUsage")}
+        </h3>
+      </div>
+
+      <div className="flex flex-col flex-1 min-h-0 gap-2">
+        <div className="flex items-baseline gap-3 flex-shrink-0">
+          <div className="text-2xl font-bold text-green-400">
+            {typeof metrics?.memory?.percent === "number"
+              ? `${metrics.memory.percent}%`
+              : "N/A"}
+          </div>
+          <div className="text-xs text-gray-400">
+            {(() => {
+              const used = metrics?.memory?.usedGiB;
+              const total = metrics?.memory?.totalGiB;
+              if (typeof used === "number" && typeof total === "number") {
+                return `${used.toFixed(1)} / ${total.toFixed(1)} GiB`;
+              }
+              return "N/A";
+            })()}
+          </div>
+        </div>
+        <div className="text-xs text-gray-500 flex-shrink-0">
+          {(() => {
+            const used = metrics?.memory?.usedGiB;
+            const total = metrics?.memory?.totalGiB;
+            const free =
+              typeof used === "number" && typeof total === "number"
+                ? (total - used).toFixed(1)
+                : "N/A";
+            return `${t("serverStats.free")}: ${free} GiB`;
+          })()}
+        </div>
+        <div className="flex-1 min-h-0">
+          <ResponsiveContainer width="100%" height="100%">
+            <AreaChart data={chartData}>
+              <defs>
+                <linearGradient id="memoryGradient" x1="0" y1="0" x2="0" y2="1">
+                  <stop offset="5%" stopColor="#34d399" stopOpacity={0.8} />
+                  <stop offset="95%" stopColor="#34d399" stopOpacity={0.1} />
+                </linearGradient>
+              </defs>
+              <CartesianGrid strokeDasharray="3 3" stroke="#374151" />
+              <XAxis
+                dataKey="index"
+                stroke="#9ca3af"
+                tick={{ fill: "#9ca3af" }}
+                hide
+              />
+              <YAxis
+                domain={[0, 100]}
+                stroke="#9ca3af"
+                tick={{ fill: "#9ca3af" }}
+              />
+              <Tooltip
+                contentStyle={{
+                  backgroundColor: "#1f2937",
+                  border: "1px solid #374151",
+                  borderRadius: "6px",
+                  color: "#fff",
+                }}
+                formatter={(value: number) => [
+                  `${value.toFixed(1)}%`,
+                  "Memory",
+                ]}
+              />
+              <Area
+                type="monotone"
+                dataKey="memory"
+                stroke="#34d399"
+                strokeWidth={2}
+                fill="url(#memoryGradient)"
+                animationDuration={300}
+              />
+            </AreaChart>
+          </ResponsiveContainer>
+        </div>
+      </div>
+    </div>
+  );
+}

src/ui/Desktop/Apps/Server/widgets/NetworkWidget.tsx

@@ -0,0 +1,75 @@
+import React from "react";
+import { Network, Wifi, WifiOff } from "lucide-react";
+import { useTranslation } from "react-i18next";
+import type { ServerMetrics } from "@/ui/main-axios.ts";
+
+interface NetworkWidgetProps {
+  metrics: ServerMetrics | null;
+  metricsHistory: ServerMetrics[];
+}
+
+export function NetworkWidget({ metrics }: NetworkWidgetProps) {
+  const { t } = useTranslation();
+
+  const metricsWithNetwork = metrics as ServerMetrics & {
+    network?: {
+      interfaces?: Array<{
+        name: string;
+        state: string;
+        ip: string;
+      }>;
+    };
+  };
+  const network = metricsWithNetwork?.network;
+  const interfaces = network?.interfaces || [];
+
+  return (
+    <div className="h-full w-full p-4 rounded-lg bg-dark-bg/50 border border-dark-border/50 hover:bg-dark-bg/70 transition-colors duration-200 flex flex-col overflow-hidden">
+      <div className="flex items-center gap-2 flex-shrink-0 mb-3">
+        <Network className="h-5 w-5 text-indigo-400" />
+        <h3 className="font-semibold text-lg text-white">
+          {t("serverStats.networkInterfaces")}
+        </h3>
+      </div>
+
+      <div className="space-y-2.5 overflow-auto flex-1">
+        {interfaces.length === 0 ? (
+          <div className="flex flex-col items-center justify-center py-12 text-gray-400">
+            <WifiOff className="h-10 w-10 mb-3 opacity-50" />
+            <p className="text-sm">{t("serverStats.noInterfacesFound")}</p>
+          </div>
+        ) : (
+          interfaces.map((iface, index: number) => (
+            <div
+              key={index}
+              className="p-3 rounded-lg bg-dark-bg/50 border border-dark-border/30 hover:bg-dark-bg/60 transition-colors"
+            >
+              <div className="flex items-center justify-between mb-2">
+                <div className="flex items-center gap-2">
+                  <Wifi
+                    className={`h-4 w-4 ${iface.state === "UP" ? "text-green-400" : "text-gray-500"}`}
+                  />
+                  <span className="text-sm font-semibold text-white font-mono">
+                    {iface.name}
+                  </span>
+                </div>
+                <span
+                  className={`text-xs px-2.5 py-0.5 rounded-full font-medium ${
+                    iface.state === "UP"
+                      ? "bg-green-500/20 text-green-400"
+                      : "bg-gray-500/20 text-gray-500"
+                  }`}
+                >
+                  {iface.state}
+                </span>
+              </div>
+              <div className="text-xs text-gray-400 font-mono font-medium">
+                {iface.ip}
+              </div>
+            </div>
+          ))
+        )}
+      </div>
+    </div>
+  );
+}

src/ui/Desktop/Apps/Server/widgets/ProcessesWidget.tsx

@@ -0,0 +1,87 @@
+import React from "react";
+import { List, Activity } from "lucide-react";
+import { useTranslation } from "react-i18next";
+import type { ServerMetrics } from "@/ui/main-axios.ts";
+
+interface ProcessesWidgetProps {
+  metrics: ServerMetrics | null;
+  metricsHistory: ServerMetrics[];
+}
+
+export function ProcessesWidget({ metrics }: ProcessesWidgetProps) {
+  const { t } = useTranslation();
+
+  const metricsWithProcesses = metrics as ServerMetrics & {
+    processes?: {
+      total?: number;
+      running?: number;
+      top?: Array<{
+        pid: number;
+        cpu: number;
+        mem: number;
+        command: string;
+        user: string;
+      }>;
+    };
+  };
+  const processes = metricsWithProcesses?.processes;
+  const topProcesses = processes?.top || [];
+
+  return (
+    <div className="h-full w-full p-4 rounded-lg bg-dark-bg/50 border border-dark-border/50 hover:bg-dark-bg/70 transition-colors duration-200 flex flex-col overflow-hidden">
+      <div className="flex items-center gap-2 flex-shrink-0 mb-3">
+        <List className="h-5 w-5 text-yellow-400" />
+        <h3 className="font-semibold text-lg text-white">
+          {t("serverStats.processes")}
+        </h3>
+      </div>
+
+      <div className="flex items-center justify-between mb-3 pb-2 border-b border-dark-border/30">
+        <div className="text-sm text-gray-400">
+          {t("serverStats.totalProcesses")}:{" "}
+          <span className="text-white font-semibold">
+            {processes?.total ?? "N/A"}
+          </span>
+        </div>
+        <div className="text-sm text-gray-400">
+          {t("serverStats.running")}:{" "}
+          <span className="text-green-400 font-semibold">
+            {processes?.running ?? "N/A"}
+          </span>
+        </div>
+      </div>
+
+      <div className="overflow-auto flex-1">
+        {topProcesses.length === 0 ? (
+          <div className="flex flex-col items-center justify-center py-12 text-gray-400">
+            <Activity className="h-10 w-10 mb-3 opacity-50" />
+            <p className="text-sm">{t("serverStats.noProcessesFound")}</p>
+          </div>
+        ) : (
+          <div className="space-y-2">
+            {topProcesses.map((proc, index: number) => (
+              <div
+                key={index}
+                className="p-2.5 rounded-lg bg-dark-bg/30 hover:bg-dark-bg/50 transition-colors border border-dark-border/20"
+              >
+                <div className="flex items-center justify-between mb-1.5">
+                  <span className="text-xs font-mono text-gray-400 font-medium">
+                    PID: {proc.pid}
+                  </span>
+                  <div className="flex gap-3 text-xs font-medium">
+                    <span className="text-blue-400">CPU: {proc.cpu}%</span>
+                    <span className="text-green-400">MEM: {proc.mem}%</span>
+                  </div>
+                </div>
+                <div className="text-xs text-white font-mono truncate mb-1">
+                  {proc.command}
+                </div>
+                <div className="text-xs text-gray-500">User: {proc.user}</div>
+              </div>
+            ))}
+          </div>
+        )}
+      </div>
+    </div>
+  );
+}

src/ui/Desktop/Apps/Server/widgets/SystemWidget.tsx

@@ -0,0 +1,71 @@
+import React from "react";
+import { Server, Info } from "lucide-react";
+import { useTranslation } from "react-i18next";
+import type { ServerMetrics } from "@/ui/main-axios.ts";
+
+interface SystemWidgetProps {
+  metrics: ServerMetrics | null;
+  metricsHistory: ServerMetrics[];
+}
+
+export function SystemWidget({ metrics }: SystemWidgetProps) {
+  const { t } = useTranslation();
+
+  const metricsWithSystem = metrics as ServerMetrics & {
+    system?: {
+      hostname?: string;
+      os?: string;
+      kernel?: string;
+    };
+  };
+  const system = metricsWithSystem?.system;
+
+  return (
+    <div className="h-full w-full p-4 rounded-lg bg-dark-bg/50 border border-dark-border/50 hover:bg-dark-bg/70 transition-colors duration-200 flex flex-col overflow-hidden">
+      <div className="flex items-center gap-2 flex-shrink-0 mb-3">
+        <Server className="h-5 w-5 text-purple-400" />
+        <h3 className="font-semibold text-lg text-white">
+          {t("serverStats.systemInfo")}
+        </h3>
+      </div>
+
+      <div className="space-y-4">
+        <div className="flex items-start gap-3">
+          <Info className="h-4 w-4 text-purple-400 mt-0.5 flex-shrink-0" />
+          <div className="min-w-0 flex-1">
+            <p className="text-xs text-gray-400 mb-1.5">
+              {t("serverStats.hostname")}
+            </p>
+            <p className="text-sm text-white font-mono truncate font-medium">
+              {system?.hostname || "N/A"}
+            </p>
+          </div>
+        </div>
+
+        <div className="flex items-start gap-3">
+          <Info className="h-4 w-4 text-purple-400 mt-0.5 flex-shrink-0" />
+          <div className="min-w-0 flex-1">
+            <p className="text-xs text-gray-400 mb-1.5">
+              {t("serverStats.operatingSystem")}
+            </p>
+            <p className="text-sm text-white font-mono truncate font-medium">
+              {system?.os || "N/A"}
+            </p>
+          </div>
+        </div>
+
+        <div className="flex items-start gap-3">
+          <Info className="h-4 w-4 text-purple-400 mt-0.5 flex-shrink-0" />
+          <div className="min-w-0 flex-1">
+            <p className="text-xs text-gray-400 mb-1.5">
+              {t("serverStats.kernel")}
+            </p>
+            <p className="text-sm text-white font-mono truncate font-medium">
+              {system?.kernel || "N/A"}
+            </p>
+          </div>
+        </div>
+      </div>
+    </div>
+  );
+}

src/ui/Desktop/Apps/Server/widgets/UptimeWidget.tsx

@@ -0,0 +1,55 @@
+import React from "react";
+import { Clock, Activity } from "lucide-react";
+import { useTranslation } from "react-i18next";
+import type { ServerMetrics } from "@/ui/main-axios.ts";
+
+interface UptimeWidgetProps {
+  metrics: ServerMetrics | null;
+  metricsHistory: ServerMetrics[];
+}
+
+export function UptimeWidget({ metrics }: UptimeWidgetProps) {
+  const { t } = useTranslation();
+
+  const metricsWithUptime = metrics as ServerMetrics & {
+    uptime?: {
+      formatted?: string;
+      seconds?: number;
+    };
+  };
+  const uptime = metricsWithUptime?.uptime;
+
+  return (
+    <div className="h-full w-full p-4 rounded-lg bg-dark-bg/50 border border-dark-border/50 hover:bg-dark-bg/70 transition-colors duration-200 flex flex-col overflow-hidden">
+      <div className="flex items-center gap-2 flex-shrink-0 mb-3">
+        <Clock className="h-5 w-5 text-cyan-400" />
+        <h3 className="font-semibold text-lg text-white">
+          {t("serverStats.uptime")}
+        </h3>
+      </div>
+
+      <div className="flex flex-col items-center justify-center flex-1">
+        <div className="relative mb-4">
+          <div className="w-24 h-24 rounded-full bg-cyan-500/10 flex items-center justify-center">
+            <Activity className="h-12 w-12 text-cyan-400" />
+          </div>
+        </div>
+
+        <div className="text-center">
+          <div className="text-3xl font-bold text-cyan-400 mb-2">
+            {uptime?.formatted || "N/A"}
+          </div>
+          <div className="text-sm text-gray-400">
+            {t("serverStats.totalUptime")}
+          </div>
+          {uptime?.seconds && (
+            <div className="text-xs text-gray-500 mt-2">
+              {Math.floor(uptime.seconds).toLocaleString()}{" "}
+              {t("serverStats.seconds")}
+            </div>
+          )}
+        </div>
+      </div>
+    </div>
+  );
+}