release-2.7.1 (#1296)

* Add Helm and GitOps deployment setup

* fix: build better-sqlite3 from source in Docker (#1267)

* fix: preserve runtime SSL settings (#1268)

* fix: support forwarding from the memory SSH agent (#1269)

* fix: support forwarding from the memory agent

* style: format memory agent test

* fix: prompt for encrypted SFTP key passphrases (#1270)

* fix: prompt for SFTP key passphrases

* style: format SSH key utility test

* fix: include host context in automation notifications (#1271)

* fix: include host context in automation notifications

* style: format automation notification changes

* fix: reserve sidebar height for host tags (#1272)

* fix: keep host action rows stable at large font sizes (#1273)

* fix: honor certificate setting during server probe (#1274)

* fix: package standard Linux icon sizes (#1275)

* fix: avoid duplicate Docker HTTPS listener (#1276)

* Fix host status without metrics collection (#1277)

* fix: allow eight-digit secure auth codes (#1263)

Allow TOTP prompts to accept secure auth codes longer than six digits without blocking valid authentication attempts.

Generated with Codebuff 🤖

Co-authored-by: Chetan <chetan.development@gmail.com>
Co-authored-by: Codebuff <noreply@codebuff.com>

* Harden Helm deployment defaults

* Update Helm workflow action

* Exclude Helm templates from Prettier

* Fix browser RDP file drops (#1279)

* Fix Proxmox guest credential usernames (#1280)

* Add WSL local terminal option (#1281)

* refactor: split the transfer engine into focused modules (#1282)

* refactor: extract SFTP promisify helpers into sftp-promisify module

* refactor: extract transfer timing and rate stats into transfer-stats module

* refactor: extract transfer error classes and recovery checks into transfer-errors module

* refactor: extract host/path utility helpers into transfer-host-utils module

* refactor: extract SFTP directory tree helpers into transfer-sftp-dir module

* refactor: extract segment copy job builder into transfer-segment-copy module

* refactor: extract file scan and sample helpers into transfer-scan module

* refactor: move throttled progress helper into transfer-stats module

* style: format transfer modules

* perf: optimize tmux monitor aggregation (#1283)

* fix: reserve credential tag row height (#1284)

* feat: edit AI provider model settings (#1285)

* fix: clarify click-to-expand host setting (#1286)

* fix: allow portable imports on remote databases (#1287)

* fix: allow HTTPS to share the configured port (#1288)

* fix: resolve synced jump hosts on the server (#1289)

* fix: make terminal clipboard shortcuts layout independent (#1290)

* fix: use compatible fetch dispatcher for Tailscale (#1291)

* fix: add OIDC environment recovery override (#1292)

* fix: coalesce rapid mobile terminal input (#1293)

* fix: coalesce rapid mobile terminal input

* fix: support clean xterm patch installs

* fix: resolve synced remote desktop host IDs (#1295)

* feat: make the SFTP file manager path bar editable (#1294)

Co-authored-by: Maxime Bonillo <257463937+dropafterfree@users.noreply.github.com>
Co-authored-by: ZacharyZcR <zacharyzcr1984@gmail.com>

* feat: add passkey sign in to the login screen

* fix: remove rounded corners from the host list search bar

* fix: stop image storage settings text wrapping to one word per line

* fix: prevent malformed websocket messages from crashing the server

* chore: increment version

* fix: remove gaps between host rows in the sidebar list

Keep sub-pixel row measurements and stop wiping the size cache on hover.

* fix: Failed to connect through jump hosts (#1180)

https://github.com/Termix-SSH/Support/issues/1180

* feat: Progress bar for file downloads in the file manager (#1158)

https://github.com/Termix-SSH/Support/issues/1158

* feat: Allow setting Silent OIDC Login via ENV var (#1174)

https://github.com/Termix-SSH/Support/issues/1174

* feat: `IdentityFile` to limit the number of attempts by agents (#1165)

https://github.com/Termix-SSH/Support/issues/1165

* feat: Credentials clone (#1159)

https://github.com/Termix-SSH/Support/issues/1159

* chore: update release notes

* docs: move helm setup guide to the docs site

* fix: type errors in FilteredAgent agent identity handling

* fix: remove stale better-sqlite3 prebuilds so the source build is used

* fix: actually build better-sqlite3 from source so arm64 docker images work

* fix: credential edit pencil in host editor and add clone action to credential list

* fix: clear editingHost so the credential pencil actually opens the editor

* chore: run format and lint

* fix: folder drag and drop upload failing in the file manager

* chore: sync Crowdin translations for 2.7.1

---------

Co-authored-by: alex-ctms <alex-ctms@users.noreply.github.com>
Co-authored-by: ZacharyZcR <zacharyzcr1984@gmail.com>
Co-authored-by: Chetan Kumar <74929596+ckloop@users.noreply.github.com>
Co-authored-by: Chetan <chetan.development@gmail.com>
Co-authored-by: Codebuff <noreply@codebuff.com>
Co-authored-by: ZacharyZcR <payasonorahc@protonmail.com>
Co-authored-by: dropafterfree <maxime.bonillo@gmail.com>
Co-authored-by: Maxime Bonillo <257463937+dropafterfree@users.noreply.github.com>

src/ui/locales/translated/zh_CN.json

@@ -111,8 +111,12 @@
     "filterTypeKey": "SSH 密钥",
     "filterTagsGroup": "标签",
     "copyDeployCommand": "复制部署命令",
+    "cloneCredentialAction": "克隆凭证",
+    "clonedCredential": "克隆 {{name}}",
+    "clonedCredentialName": "{{name}} （复制）",
     "deleteCredentialAction": "删除凭据",
     "editCredentialAction": "编辑凭证",
+    "failedToCloneCredential": "克隆凭证失败",
     "failedToDeleteCredential": "删除凭据失败",
     "idBadge": "ID",
     "keyBadge": "钥匙",
@@ -925,6 +929,9 @@
     "agentSocketPathLabel": "代理套接字路径",
     "agentSocketPathPlaceholder": "留空以使用 SSH_AUTH_SOCK",
     "agentSocketPathHint": "留空以从 SSH_AUTH_SOCK 环境变量自动检测，或输入自定义套接字路径（例如 /run/user/1000/gnupg/S.gpg-agent.ssh）。",
+    "agentIdentityLabel": "代理身份（公钥）",
+    "agentIdentityPlaceholder": "留空以尝试代理提供的所有密钥",
+    "agentIdentityHint": "粘贴公钥（例如 ssh-ed25519 AAAA...）以仅允许代理提供该密钥。当代理持有大量密钥时，建议这样做，以避免超出服务器的最大身份验证尝试次数 (MaxAuthTries)。",
     "shareSshAuthLabel": "共享 SSH 身份验证",
     "shareSshAuthDesc": "向收件人提供此主机 SSH 身份验证信息的加密副本。收件人的个人凭证仍然优先。",
     "tailscaleDeviceSelect": "选择 Tailscale 设备",
@@ -1234,6 +1241,12 @@
     "noCredentialsFound": "未找到凭据",
     "addCredentialBtn": "添加凭据",
     "updateCredentialBtn": "更新凭据",
+    "editCredentialAction": "编辑凭证",
+    "backToHost": "返回主机",
+    "saveCredentialAsNewBtn": "另存为新文件",
+    "saveCredentialAsNewDesc": "使用这些更改创建一个新的凭据，并将其分配给此主机。原始凭据保持不变。",
+    "credentialSavedAsNew": "已保存为新凭证",
+    "failedToSaveCredentialAsNew": "保存为新凭据失败",
     "features": "功能",
     "noFolder": "（无文件夹）",
     "deleteSelected": "删除",
@@ -1318,12 +1331,12 @@
     "displayDensityCompact": "袖珍的",
     "displayShowTags": "显示标签",
     "displayTrayOnClick": "点击打开操作（而不是悬停打开）",
-    "actionsVisibility": "主机操作",
-    "actionsVisibilityDesc": "当每台主机上的连接和管理按钮都显示出来时",
+    "actionsVisibility": "主机动作显示",
+    "actionsVisibilityDesc": "选择主机操作何时展开。选择“单击”以恢复以前的单击展开行为。",
     "actionsAlways": "始终可见",
     "actionsOnly": "仅连接，其余操作请点击",
     "actionsHover": "鼠标悬停时显示",
-    "actionsClick": "点击显示",
+    "actionsClick": "点击展开/收起",
     "openOnDoubleClick": "双击打开",
     "openOnDoubleClickDesc": "打开主机会话需要双击，而不是单击。",
     "deletedHost": "已删除 {{name}}",
@@ -1867,6 +1880,7 @@
       "uploaded": "已上传 {{name}}",
       "uploadFailed": "上传失败 {{name}}",
       "uploadDisabled": "此连接已禁用上传功能",
+      "driveUnavailable": "上传文件前启用 RDP 驱动器重定向",
       "dropToUpload": "拖放文件即可上传"
     },
     "toolbar": {
@@ -2037,6 +2051,9 @@
     "folderName": "文件夹名称",
     "fileUploadedSuccessfully": "文件 \"{{name}}\" 上传成功",
     "failedToUploadFile": "上传文件失败",
+    "uploadingFolderFiles": "正在上传 {{count}} 文件...",
+    "uploadedFolderFiles": "已成功上传 {{count}} 个文件",
+    "uploadedFolderPartial": "上传了 {{uploaded}} 个文件， {{failed}} 个文件失败",
     "fileDownloadedSuccessfully": "文件 \"{{name}}\" 下载成功",
     "failedToDownloadFile": "下载文件失败",
     "fileCreatedSuccessfully": "文件 \"{{name}}\" 创建成功",
@@ -2208,6 +2225,8 @@
     "operationCompleted": "{{operation}}了{{count}}个项目",
     "downloadFileSuccess": "文件 {{name}} 下载成功",
     "downloadFileFailed": "下载失败",
+    "downloadingFile": "正在下载 {{name}}…",
+    "downloadProgressBytes": "{{transferred}} / {{total}}",
     "moveTo": "移动到 {{name}}",
     "diffCompareWith": "与 {{name}} 对比差异",
     "dragOutsideToDownload": "拖到窗口外以下载 ({{count}} 个文件)",
@@ -3254,6 +3273,7 @@
     "oidcAutoProvisionDesc": "首次登录时自动为 OIDC/SSO 用户创建账户（与注册开关无关）",
     "oidcSilentLoginDefault": "默认静默 OIDC 登录",
     "oidcSilentLoginDefaultDesc": "每次访问时自动重定向到 OIDC 登录，完全跳过登录表单",
+    "oidcSilentLoginDefaultLockedDesc": "此设置受 OIDC_SILENT_LOGIN_DEFAULT 环境变量锁定，无法在此处更改。",
     "allowPasswordReset": "允许密码重置",
     "allowPasswordResetDesc": "通过 Docker 日志获取重置码",
     "commandHistoryEnabled": "命令历史",
@@ -3317,11 +3337,11 @@
     "createRole": "创建",
     "creating": "正在创建...",
     "exportDatabase": "导出数据库",
-    "exportDatabaseDesc": "下载包含所有主机、凭据和设置的备份",
+    "exportDatabaseDesc": "下载包含所有主机、凭据和设置的便携式 SQLite 备份",
     "export": "导出",
     "exporting": "正在导出...",
     "importDatabase": "导入数据库",
-    "importDatabaseDesc": "从 .sqlite 备份文件恢复",
+    "importDatabaseDesc": "从任何数据库后端上的便携式 .sqlite 备份进行恢复",
     "importDatabaseSelected": "已选择：{{name}}",
     "selectFile": "选择文件",
     "changeFile": "更改",
@@ -4516,6 +4536,7 @@
     "selectProvider": "选择服务提供商",
     "providerSettings": "提供商设置",
     "addProvider": "添加提供商",
+    "editProvider": "编辑提供者",
     "removeProvider": "移除提供者",
     "providerType": "提供者",
     "providerLabel": "姓名",
@@ -4526,6 +4547,7 @@
     "defaultModelPlaceholder": "例如：llama3.1 或 claude-opus-5",
     "labelRequired": "给这家服务提供商起个名字",
     "providerSaveFailed": "无法保存提供商",
+    "providerUpdated": "提供商已更新",
     "providerDeleteFailed": "无法移除提供商",
     "privateEndpointHint": "您私有网络上的地址需要管理员先允许主机访问。",
     "providerOllama": "奥拉玛",