diff --git a/frontend/src/terminal.ts b/frontend/src/terminal.ts
index 949cd4b..6f6c0bd 100644
--- a/frontend/src/terminal.ts
+++ b/frontend/src/terminal.ts
@@ -152,6 +152,7 @@ export class SSHTerminal {
           password: config.password,
           authMethod: config.authMethod,
           privateKey: config.privateKey,
+          ...this.getTerminalSize(),
         }));
         
         this.startHeartbeat();
@@ -188,9 +189,14 @@ export class SSHTerminal {
 
     ws.onopen = () => {
       this.terminal.writeln('\x1b[32m[+] WebSocket connected, authenticating...\x1b[0m');
+      this.sendResize();
       this.startHeartbeat();
     };
 
+    if (ws.readyState === WebSocket.OPEN) {
+      this.sendResize();
+    }
+
     this.setupWebSocketHandlers();
   }
 
@@ -284,13 +290,7 @@ export class SSHTerminal {
     // Terminal resize: send to server + update trzsz column count
     this.disposables.push(
       this.terminal.onResize(({ cols, rows }) => {
-        if (this.ws?.readyState === WebSocket.OPEN) {
-          this.ws.send(JSON.stringify({
-            type: 'resize',
-            cols,
-            rows,
-          }));
-        }
+        this.sendResize({ cols, rows });
         this.trzszFilter?.setTerminalColumns(cols);
       })
     );
@@ -309,6 +309,22 @@ export class SSHTerminal {
     }, 30000);
   }
 
+  private getTerminalSize(): { cols: number; rows: number } {
+    return {
+      cols: this.terminal.cols,
+      rows: this.terminal.rows,
+    };
+  }
+
+  private sendResize(size = this.getTerminalSize()): void {
+    if (this.ws?.readyState === WebSocket.OPEN) {
+      this.ws.send(JSON.stringify({
+        type: 'resize',
+        ...size,
+      }));
+    }
+  }
+
   private stopHeartbeat(): void {
     if (this.heartbeatInterval) {
       clearInterval(this.heartbeatInterval);
diff --git a/src/types.ts b/src/types.ts
index 2d4ac6f..90f2721 100644
--- a/src/types.ts
+++ b/src/types.ts
@@ -46,6 +46,13 @@ export interface SSHConnectionConfig {
   password: string;
   authMethod?: 'password' | 'publickey';
   privateKey?: string;
+  cols?: number;
+  rows?: number;
+}
+
+export interface TerminalSize {
+  cols: number;
+  rows: number;
 }
 
 export interface Env {
diff --git a/src/worker/durable-object.ts b/src/worker/durable-object.ts
index dcecb9b..c15725c 100644
--- a/src/worker/durable-object.ts
+++ b/src/worker/durable-object.ts
@@ -1,4 +1,4 @@
-import { Env, SSHConnectionConfig } from '../types';
+import { Env, SSHConnectionConfig, TerminalSize } from '../types';
 import { SSHSession } from './ssh-session';
 
 /**
@@ -38,6 +38,7 @@ export class SSHSessionDO {
   private env: Env;
   private sessions: Map<WebSocket, SSHSession> = new Map();
   private _pendingTimeouts: Map<WebSocket, ReturnType<typeof setTimeout>> = new Map();
+  private pendingTerminalSizes: Map<WebSocket, TerminalSize> = new Map();
 
   constructor(state: DurableObjectState, env: Env) {
     this.state = state;
@@ -105,26 +106,43 @@ export class SSHSessionDO {
       return;
     }
 
+    if (typeof message !== 'string') {
+      return;
+    }
+
+    let msg: any;
+    try {
+      msg = JSON.parse(message);
+    } catch {
+      ws.send(JSON.stringify({ type: 'error', message: 'Invalid credentials format' }));
+      ws.close(1011, 'Invalid format');
+      return;
+    }
+
+    if (msg.type === 'resize') {
+      this.rememberTerminalSize(ws, msg.cols, msg.rows);
+      return;
+    }
+    if (msg.type === 'ping') {
+      ws.send(JSON.stringify({ type: 'pong' }));
+      return;
+    }
+
     const timeout = this._pendingTimeouts.get(ws);
     if (timeout) {
       clearTimeout(timeout);
       this._pendingTimeouts.delete(ws);
     }
 
-    try {
-      const config = JSON.parse(message as string) as SSHConnectionConfig;
+    const config = msg as SSHConnectionConfig;
 
-      if (!config.host || !config.username || (!config.password && !config.privateKey)) {
-        ws.send(JSON.stringify({ type: 'error', message: 'Missing credentials' }));
-        ws.close(1011, 'Invalid credentials');
-        return;
-      }
-
-      await this.initSSHSession(ws, config);
-    } catch (e) {
-      ws.send(JSON.stringify({ type: 'error', message: 'Invalid credentials format' }));
-      ws.close(1011, 'Invalid format');
+    if (!config.host || !config.username || (!config.password && !config.privateKey)) {
+      ws.send(JSON.stringify({ type: 'error', message: 'Missing credentials' }));
+      ws.close(1011, 'Invalid credentials');
+      return;
     }
+
+    await this.initSSHSession(ws, config);
   }
 
   async webSocketClose(ws: WebSocket, code: number, reason: string, wasClean: boolean): Promise<void> {
@@ -138,6 +156,7 @@ export class SSHSessionDO {
       clearTimeout(timeout);
       this._pendingTimeouts.delete(ws);
     }
+    this.pendingTerminalSizes.delete(ws);
   }
 
   async webSocketError(ws: WebSocket, error: unknown): Promise<void> {
@@ -165,8 +184,14 @@ export class SSHSessionDO {
       await socket.opened;
 
       const strictVerify = this.env.STRICT_HOST_KEY_VERIFY !== 'false';
+      const pendingSize = this.pendingTerminalSizes.get(ws);
+      if (pendingSize) {
+        config.cols = pendingSize.cols;
+        config.rows = pendingSize.rows;
+      }
       const session = new SSHSession(ws, socket, config, strictVerify);
       this.sessions.set(ws, session);
+      this.pendingTerminalSizes.delete(ws);
 
       await session.startHandshake();
 
@@ -179,4 +204,31 @@ export class SSHSessionDO {
       } catch {}
     }
   }
+
+  private rememberTerminalSize(ws: WebSocket, cols: unknown, rows: unknown): void {
+    const size = this.normalizeTerminalSize(cols, rows);
+    if (size) this.pendingTerminalSizes.set(ws, size);
+  }
+
+  private normalizeTerminalSize(cols: unknown, rows: unknown): TerminalSize | null {
+    if (
+      typeof cols !== 'number' ||
+      typeof rows !== 'number' ||
+      !Number.isFinite(cols) ||
+      !Number.isFinite(rows)
+    ) {
+      return null;
+    }
+
+    const size = {
+      cols: Math.floor(cols),
+      rows: Math.floor(rows),
+    };
+
+    if (size.cols < 10 || size.cols > 1000 || size.rows < 5 || size.rows > 1000) {
+      return null;
+    }
+
+    return size;
+  }
 }
diff --git a/src/worker/html.ts b/src/worker/html.ts
index 8a15870..442ce27 100644
--- a/src/worker/html.ts
+++ b/src/worker/html.ts
@@ -4,7 +4,7 @@ export const HTML = `<!DOCTYPE html>
 <head>
   <meta charset="UTF-8" />
   <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-  <link rel="icon" type="image/svg+xml" href="data:image/svg+xml;base64,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" />
+  <link rel="icon" type="image/svg+xml" href="data:image/svg+xml;base64,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" />
   <title>CloudSSH</title>
   <script src="https://cdn.tailwindcss.com?plugins=forms,container-queries"></script>
   <link href="https://fonts.googleapis.com/css2?family=JetBrains+Mono:wght@400;600;700&display=swap" rel="stylesheet">
@@ -40,6 +40,7 @@ export const HTML = `<!DOCTYPE html>
     }
   }
   </script>
+
   <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script>
   <script type="module">var ao=Object.defineProperty;var ho=(i,e,t)=>e in i?ao(i,e,{enumerable:!0,configurable:!0,writable:!0,value:t}):i[e]=t;var Q=(i,e,t)=>ho(i,typeof e!="symbol"?e+"":e,t);(function(){const e=document.createElement("link").relList;if(e&&e.supports&&e.supports("modulepreload"))return;for(const n of document.querySelectorAll('link[rel="modulepreload"]'))r(n);new MutationObserver(n=>{for(const o of n)if(o.type==="childList")for(const _ of o.addedNodes)_.tagName==="LINK"&&_.rel==="modulepreload"&&r(_)}).observe(document,{childList:!0,subtree:!0});function t(n){const o={};return n.integrity&&(o.integrity=n.integrity),n.referrerPolicy&&(o.referrerPolicy=n.referrerPolicy),n.crossOrigin==="use-credentials"?o.credentials="include":n.crossOrigin==="anonymous"?o.credentials="omit":o.credentials="same-origin",o}function r(n){if(n.ep)return;n.ep=!0;const o=t(n);fetch(n.href,o)}})();var Hi={exports:{}},$s;function lo(){return $s||($s=1,(function(i,e){(function(t,r){i.exports=r()})(globalThis,(()=>(()=>{var t={4567:function(_,s,h){var a=this&&this.__decorate||function(l,c,v,y){var S,x=arguments.length,b=x<3?c:y===null?y=Object.getOwnPropertyDescriptor(c,v):y;if(typeof Reflect=="object"&&typeof Reflect.decorate=="function")b=Reflect.decorate(l,c,v,y);else for(var E=l.length-1;E>=0;E--)(S=l[E])&&(b=(x<3?S(b):x>3?S(c,v,b):S(c,v))||b);return x>3&&b&&Object.defineProperty(c,v,b),b},d=this&&this.__param||function(l,c){return function(v,y){c(v,y,l)}};Object.defineProperty(s,"__esModule",{value:!0}),s.AccessibilityManager=void 0;const u=h(9042),p=h(9924),m=h(844),C=h(4725),w=h(2585),f=h(3656);let g=s.AccessibilityManager=class extends m.Disposable{constructor(l,c,v,y){super(),this._terminal=l,this._coreBrowserService=v,this._renderService=y,this._rowColumns=new WeakMap,this._liveRegionLineCount=0,this._charsToConsume=[],this._charsToAnnounce="",this._accessibilityContainer=this._coreBrowserService.mainDocument.createElement("div"),this._accessibilityContainer.classList.add("xterm-accessibility"),this._rowContainer=this._coreBrowserService.mainDocument.createElement("div"),this._rowContainer.setAttribute("role","list"),this._rowContainer.classList.add("xterm-accessibility-tree"),this._rowElements=[];for(let S=0;S<this._terminal.rows;S++)this._rowElements[S]=this._createAccessibilityTreeNode(),this._rowContainer.appendChild(this._rowElements[S]);if(this._topBoundaryFocusListener=S=>this._handleBoundaryFocus(S,0),this._bottomBoundaryFocusListener=S=>this._handleBoundaryFocus(S,1),this._rowElements[0].addEventListener("focus",this._topBoundaryFocusListener),this._rowElements[this._rowElements.length-1].addEventListener("focus",this._bottomBoundaryFocusListener),this._refreshRowsDimensions(),this._accessibilityContainer.appendChild(this._rowContainer),this._liveRegion=this._coreBrowserService.mainDocument.createElement("div"),this._liveRegion.classList.add("live-region"),this._liveRegion.setAttribute("aria-live","assertive"),this._accessibilityContainer.appendChild(this._liveRegion),this._liveRegionDebouncer=this.register(new p.TimeBasedDebouncer(this._renderRows.bind(this))),!this._terminal.element)throw new Error("Cannot enable accessibility before Terminal.open");this._terminal.element.insertAdjacentElement("afterbegin",this._accessibilityContainer),this.register(this._terminal.onResize((S=>this._handleResize(S.rows)))),this.register(this._terminal.onRender((S=>this._refreshRows(S.start,S.end)))),this.register(this._terminal.onScroll((()=>this._refreshRows()))),this.register(this._terminal.onA11yChar((S=>this._handleChar(S)))),this.register(this._terminal.onLineFeed((()=>this._handleChar(\`
 \`)))),this.register(this._terminal.onA11yTab((S=>this._handleTab(S)))),this.register(this._terminal.onKey((S=>this._handleKey(S.key)))),this.register(this._terminal.onBlur((()=>this._clearLiveRegion()))),this.register(this._renderService.onDimensionsChange((()=>this._refreshRowsDimensions()))),this.register((0,f.addDisposableDomListener)(document,"selectionchange",(()=>this._handleSelectionChange()))),this.register(this._coreBrowserService.onDprChange((()=>this._refreshRowsDimensions()))),this._refreshRows(),this.register((0,m.toDisposable)((()=>{this._accessibilityContainer.remove(),this._rowElements.length=0})))}_handleTab(l){for(let c=0;c<l;c++)this._handleChar(" ")}_handleChar(l){this._liveRegionLineCount<21&&(this._charsToConsume.length>0?this._charsToConsume.shift()!==l&&(this._charsToAnnounce+=l):this._charsToAnnounce+=l,l===\`
@@ -132,7 +133,7 @@ void main() {
 \`),process.stdout.write("\\x1B[H\\x1B[2J\\x1B[?1049l")):process.stdout.write("\\x1B8\\x1B[0J"),process.stdout.write(e),process.stdout.write(\`\\r
 \`),process.stdout.write("\\x1B[?25h"),this.transferConfig.tmux_output_junk&&(yield(function(){return q(this,void 0,void 0,function*(){yield require("util").promisify(require("child_process").exec)("tmux refresh-client")})})())})}deleteCreatedFiles(){return q(this,void 0,void 0,function*(){const e=[];for(const t of this.createdFiles){const r=yield t.deleteFile();r&&e.push(r)}return e})}clientError(e){return q(this,void 0,void 0,function*(){yield this.cleanInput(this.cleanTimeoutInMilliseconds);const t=X.getErrorMessage(e);let r=!0;if(e instanceof X){if(r=e.isTraceBack(),e.isRemoteExit())return;if(e.isRemoteFail())return void(r&&console.log(t))}yield this.sendString(r?"FAIL":"fail",t),r&&console.log(t)})}serverError(e){return q(this,void 0,void 0,function*(){yield this.cleanInput(this.cleanTimeoutInMilliseconds);const t=X.getErrorMessage(e);let r=!0;if(e instanceof X){if(e.isStopAndDelete()){const n=yield this.deleteCreatedFiles();if(n&&n.length)return void(yield this.serverExit([e.message+":"].concat(n).join(\`\\r
 - \`)))}if(r=e.isTraceBack(),e.isRemoteExit()||e.isRemoteFail())return void(yield this.serverExit(t))}yield this.sendString(r?"FAIL":"fail",t),yield this.serverExit(t)})}sendFileNum(e,t){return q(this,void 0,void 0,function*(){yield this.sendInteger("NUM",e),yield this.checkInteger(e),t&&t.onNum(e)})}sendFileName(e,t,r){return q(this,void 0,void 0,function*(){const n=e.getRelPath(),o=n[n.length-1];if(t){const s={path_id:e.getPathId(),path_name:n,is_dir:e.isDir()};yield this.sendString("NAME",JSON.stringify(s))}else yield this.sendString("NAME",o);const _=yield this.recvString("SUCC");return r&&r.onName(o),_})}sendFileSize(e,t){return q(this,void 0,void 0,function*(){yield this.sendInteger("SIZE",e),yield this.checkInteger(e),t&&t.onSize(e)})}sendFileData(e,t,r,n,o,_){return q(this,void 0,void 0,function*(){let s=0;_&&_.onStep(s);let h=1024,a=new ArrayBuffer(h);const d=new hi;for(;s<t;){const u=Date.now(),p=yield e.readFile(a);yield this.sendData(p,r,n),d.appendByteArray(p),yield this.checkInteger(p.length),s+=p.length,_&&_.onStep(s);const m=Date.now()-u;p.length==h&&m<500&&h<o?(h=Math.min(2*h,o),a=new ArrayBuffer(h)):m>=2e3&&h>1024&&(h=1024,a=new ArrayBuffer(h)),m>this.maxChunkTimeInMilliseconds&&(this.maxChunkTimeInMilliseconds=m)}return new Uint8Array(d.end(!0).buffer)})}sendFileMD5(e,t){return q(this,void 0,void 0,function*(){yield this.sendBinary("MD5",e),yield this.checkBinary(e),t&&t.onDone()})}sendFiles(e,t){return q(this,void 0,void 0,function*(){this.openedFiles.push(...e);const r=this.transferConfig.binary===!0,n=this.transferConfig.directory===!0,o=this.transferConfig.bufsize?Math.min(this.transferConfig.bufsize,this.maxDataChunkSize):this.maxDataChunkSize,_=this.transferConfig.escape_chars?qr(this.transferConfig.escape_chars):[];yield this.sendFileNum(e.length,t);const s=[];for(const h of e){const a=yield this.sendFileName(h,n,t);if(s.includes(a)||s.push(a),h.isDir())continue;const d=h.getSize();yield this.sendFileSize(d,t);const u=yield this.sendFileData(h,d,r,_,o,t);h.closeFile(),yield this.sendFileMD5(u,t)}return s})}recvFileNum(e){return q(this,void 0,void 0,function*(){const t=yield this.recvInteger("NUM");return yield this.sendInteger("SUCC",t),e&&e.onNum(t),t})}recvFileName(e,t,r,n,o){return q(this,void 0,void 0,function*(){const _=yield this.recvString("NAME"),s=yield t(e,_,r,n);return this.createdFiles.push(s),yield this.sendString("SUCC",s.getLocalName()),o&&o.onName(s.getFileName()),s})}recvFileSize(e){return q(this,void 0,void 0,function*(){const t=yield this.recvInteger("SIZE");return yield this.sendInteger("SUCC",t),e&&e.onSize(t),t})}recvFileData(e,t,r,n,o,_){return q(this,void 0,void 0,function*(){let s=0;_&&_.onStep(s);const h=new hi;for(;s<t;){const a=Date.now(),d=yield this.recvData(r,n,o);yield e.writeFile(d),s+=d.length,_&&_.onStep(s),yield this.sendInteger("SUCC",d.length),h.appendByteArray(d);const u=Date.now()-a;u>this.maxChunkTimeInMilliseconds&&(this.maxChunkTimeInMilliseconds=u)}return new Uint8Array(h.end(!0).buffer)})}recvFileMD5(e,t){return q(this,void 0,void 0,function*(){const r=yield this.recvBinary("MD5");if(e.length!=r.length)throw new X("Check MD5 failed");for(let n=0;n<e.length;n++)if(e[n]!=r[n])throw new X("Check MD5 failed");yield this.sendBinary("SUCC",e),t&&t.onDone()})}recvFiles(e,t,r){return q(this,void 0,void 0,function*(){const n=this.transferConfig.binary===!0,o=this.transferConfig.directory===!0,_=this.transferConfig.overwrite===!0,s=this.transferConfig.timeout?1e3*this.transferConfig.timeout:1e5,h=this.transferConfig.escape_chars?qr(this.transferConfig.escape_chars):[],a=yield this.recvFileNum(r),d=[];for(let u=0;u<a;u++){const p=yield this.recvFileName(e,t,o,_,r);if(d.includes(p.getLocalName())||d.push(p.getLocalName()),p.isDir())continue;this.openedFiles.push(p);const m=yield this.recvFileSize(r),C=yield this.recvFileData(p,m,n,h,s,r);p.closeFile(),yield this.recvFileMD5(C,r)}return d})}}function Ci(i,e){e-=3;let t=0,r="";for(let n=0;n<i.length;n++){if(i.charCodeAt(n)>=19968&&i.charCodeAt(n)<=40869){if(t+2>e)return{sub:r+"...",len:t+3};t+=2}else{if(t+1>e)return{sub:r+"...",len:t+3};t+=1}r+=i[n]}return{sub:r+"...",len:t+3}}function Kr(i){let e="B";do{if(i<1024||(e="KB",(i/=1024)<1024)||(e="MB",(i/=1024)<1024)||(e="GB",(i/=1024)<1024))break;i/=1024,e="TB"}while(!1);return i>=100?\`\${i.toFixed(0)} \${e}\`:i>=10?\`\${i.toFixed(1)} \${e}\`:\`\${i.toFixed(2)} \${e}\`}Oi.MAX_DATA_CHUNK_SIZE=10485760;class ol{constructor(e,t,r=void 0){this.lastUpdateTime=0,this.firstWrite=!0,this.speedCnt=0,this.speedIdx=0,this.timeArray=new Array(30),this.stepArray=new Array(30),this.writer=e,this.tmuxPaneColumns=r||0,this.columns=this.tmuxPaneColumns>1?this.tmuxPaneColumns-1:t}setTerminalColumns(e){this.columns=e,this.tmuxPaneColumns>0&&(this.tmuxPaneColumns=0)}onNum(e){this.fileCount=e,this.fileIdx=0}onName(e){this.fileName=e,this.fileIdx+=1,this.startTime=Date.now(),this.timeArray[0]=this.startTime,this.stepArray[0]=0,this.speedCnt=1,this.speedIdx=1,this.fileStep=-1}onSize(e){this.fileSize=e}onStep(e){e<=this.fileStep||(this.fileStep=e,this.showProgress())}hideCursor(){this.writer("\\x1B[?25l")}showCursor(){this.writer("\\x1B[?25h")}showProgress(){const e=Date.now();if(e-this.lastUpdateTime<200)return;this.lastUpdateTime=e;let t="100%";this.fileSize!=0&&(t=Math.round(100*this.fileStep/this.fileSize).toString()+"%");const r=Kr(this.fileStep),n=this.getSpeed(e);let o="--- B/s",_="--- ETA";n>0&&(o=Kr(n)+"/s",_=(function(h){let a="";h>=3600&&(a+=Math.floor(h/3600).toString()+":",h%=3600);const d=Math.floor(h/60);a+=d>=10?d.toString():"0"+d.toString(),a+=":";const u=Math.round(h%60);return a+=u>=10?u.toString():"0"+u.toString(),a})(Math.round((this.fileSize-this.fileStep)/n))+" ETA");const s=this.getProgressText(t,r,o,_);if(this.firstWrite)return this.firstWrite=!1,void this.writer(s);this.tmuxPaneColumns>0?this.writer(\`\\x1B[\${this.columns}D\${s}\`):this.writer(\`\\r\${s}\`)}getSpeed(e){let t;return this.speedCnt<=30?(this.speedCnt++,t=1e3*(this.fileStep-this.stepArray[0])/(e-this.timeArray[0])):t=1e3*(this.fileStep-this.stepArray[this.speedIdx])/(e-this.timeArray[this.speedIdx]),this.timeArray[this.speedIdx]=e,this.stepArray[this.speedIdx]=this.fileStep,this.speedIdx++,this.speedIdx>=30&&(this.speedIdx%=30),isFinite(t)?t:-1}getProgressText(e,t,r,n){let _=this.fileCount>1?\`(\${this.fileIdx}/\${this.fileCount}) \${this.fileName}\`:this.fileName,s=_.replace(/[\\u4e00-\\u9fa5]/g,"**").length,h=\` \${e} | \${t} | \${r} | \${n}\`;do{if(this.columns-s-h.length>=24||(s>50&&({sub:_,len:s}=Ci(_,50)),this.columns-s-h.length>=24)||(s>40&&({sub:_,len:s}=Ci(_,40)),this.columns-s-h.length>=24)||(h=\` \${e} | \${r} | \${n}\`,this.columns-s-h.length>=24)||(s>30&&({sub:_,len:s}=Ci(_,30)),this.columns-s-h.length>=24)||(h=\` \${e} | \${n}\`,this.columns-s-h.length>=24)||(h=\` \${e}\`,this.columns-s-h.length>=24)||(s>20&&({sub:_,len:s}=Ci(_,20)),this.columns-s-h.length>=24))break;_="",s=0}while(!1);let a=this.columns-h.length;return s>0&&(a-=s+1,_+=" "),(_+this.getProgressBar(a)+h).trim()}getProgressBar(e){if(e<12)return"";const t=e-2;let r=t;return this.fileSize!=0&&(r=Math.round(t*this.fileStep/this.fileSize)),"[\\x1B[36m"+"█".repeat(r)+"░".repeat(t-r)+"\\x1B[0m]"}onDone(){this.fileSize!=0&&(this.fileStep=this.fileSize,this.lastUpdateTime=0,this.showProgress())}}function io(i,e,t,r){return q(this,void 0,void 0,function*(){e.isFile?yield new Promise(n=>{e.file(o=>{t.push(new ai(i,r,o,!1)),n()})}):e.isDirectory&&(t.push(new ai(i,r,null,!0)),yield new Promise(n=>{e.createReader().readEntries(o=>q(this,void 0,void 0,function*(){for(const _ of o)yield io(i,_,t,[...r,_.name]);n()}))}))})}const so="::TRZSZ:TRANSFER:",al=new RegExp(/::TRZSZ:TRANSFER:([SRD]):(\\d+\\.\\d+\\.\\d+)(:\\d+)?/),Vr=new Float64Array(Ti(so).buffer,0,2);class hl{constructor(e){if(this.trzszTransfer=null,this.textProgressBar=null,this.uniqueIdMaps=new Map,this.uploadFilesList=null,this.uploadFilesResolve=null,this.uploadFilesReject=null,this.uploadInterrupting=!1,this.uploadSkipTrzCommand=!1,!e)throw new X("TrzszOptions is required");if(!e.writeToTerminal)throw new X("TrzszOptions.writeToTerminal is required");if(this.writeToTerminal=e.writeToTerminal,!e.sendToServer)throw new X("TrzszOptions.sendToServer is required");if(this.sendToServer=e.sendToServer,!Ut&&!e.chooseSendFiles)throw new X("TrzszOptions.chooseSendFiles is required when having a node runtime environment");if(this.chooseSendFiles=e.chooseSendFiles,!Ut&&!e.chooseSaveDirectory)throw new X("TrzszOptions.chooseSaveDirectory is required when having a node runtime environment");this.chooseSaveDirectory=e.chooseSaveDirectory,this.terminalColumns=e.terminalColumns||80,this.isWindowsShell=!!e.isWindowsShell,this.maxDataChunkSize=e.maxDataChunkSize,this.dragInitTimeout=e.dragInitTimeout||3e3}processServerOutput(e){if(this.isTransferringFiles())this.trzszTransfer.addReceivedData(e);else if(!this.uploadInterrupting){if(this.uploadSkipTrzCommand){this.uploadSkipTrzCommand=!1;const t=(function(r){let n;if(typeof r=="string")n=Ti(r);else if(r instanceof ArrayBuffer)n=new Uint8Array(r);else{if(!(r instanceof Uint8Array))return r;n=r}const o=new Uint8Array(n.length);let _=!1,s=0;for(let a=0;a<n.length;a++){const d=n[a];_?Qn(d)&&(_=!1):d==27?_=!0:o[s++]=d}for(;s>0;){const a=o[s-1];if(a!=13&&a!=10)break;s--}const h=o.subarray(0,s);return h.length>100?r:String.fromCharCode.apply(null,h)})(e);if(t==="trz"||t==="trz -d")return void this.writeToTerminal(\`\\r
-\`)}setTimeout(()=>this.detectAndHandleTrzsz(e),10),this.writeToTerminal(e)}}processTerminalInput(e){this.isTransferringFiles()?e===""&&this.stopTransferringFiles():this.sendToServer(e)}processBinaryInput(e){this.isTransferringFiles()||this.sendToServer(Ti(e))}setTerminalColumns(e){this.terminalColumns=e,this.textProgressBar!=null&&this.textProgressBar.setTerminalColumns(e)}isTransferringFiles(){return this.trzszTransfer!=null}stopTransferringFiles(){this.isTransferringFiles()&&this.trzszTransfer.stopTransferring()}uploadFiles(e){return q(this,void 0,void 0,function*(){if(this.uploadFilesList||this.isTransferringFiles())throw new Error("The previous upload has not been completed yet");if(!Ut&&(function(r,n){if(!Array.isArray(r))return!1;for(const o of r)if(typeof o!==n)return!1;return!0})(e,"string"))this.uploadFilesList=yield Hr(e,!0);else{if(!(typeof DataTransferItemList<"u"&&e instanceof DataTransferItemList))throw new Error("The upload items type is not supported");this.uploadFilesList=yield(function(r){return q(this,void 0,void 0,function*(){const n=[],o=[];for(const _ of r)o.push(_.webkitGetAsEntry());for(let _=0;_<o.length;_++){const s=o[_];s&&(yield io(_,s,n,[s.name]))}return n})})(e)}if(!this.uploadFilesList||!this.uploadFilesList.length)throw this.uploadFilesList=null,new Error("No files to upload");let t=!1;for(const r of this.uploadFilesList)if(r.isDir()||r.getRelPath().length>1){t=!0;break}return this.uploadInterrupting=!0,this.sendToServer(""),yield new Promise(r=>setTimeout(r,200)),this.uploadInterrupting=!1,this.uploadSkipTrzCommand=!0,this.sendToServer(t?"trz -d\\r":"trz\\r"),setTimeout(()=>{this.uploadFilesList&&(this.uploadFilesList=null,this.uploadFilesResolve=null,this.uploadFilesReject&&(this.uploadFilesReject("Upload does not start"),this.uploadFilesReject=null))},this.dragInitTimeout),new Promise((r,n)=>{this.uploadFilesResolve=r,this.uploadFilesReject=n})})}uniqueIdExists(e){if(e.length<8||!this.isWindowsShell&&e.length==14&&e.endsWith("00"))return!1;if(this.uniqueIdMaps.has(e))return!0;if(this.uniqueIdMaps.size>=100){const t=new Map;for(const[r,n]of this.uniqueIdMaps)n>=50&&t.set(r,n-50);this.uniqueIdMaps=t}return this.uniqueIdMaps.set(e,this.uniqueIdMaps.size),!1}detectAndHandleTrzsz(e){return q(this,void 0,void 0,function*(){const t=yield(function(h){return q(this,void 0,void 0,function*(){if(typeof h=="string"){const p=h.lastIndexOf(so);return p<0?null:h.substring(p)}let a;if(h instanceof ArrayBuffer)a=new Uint8Array(h);else if(h instanceof Uint8Array)a=h;else{if(!(h instanceof Blob))return null;a=new Uint8Array(yield h.arrayBuffer())}if(a.length<26)return null;let d=-1,u=-1;for(;;){if(d=a.indexOf(58,d+1),d<0||a.length-d<26)return u>=0?Di(a.subarray(u)):null;const p=new Float64Array(a.buffer.slice(a.byteOffset+d,a.byteOffset+d+16));p[0]==Vr[0]&&p[1]==Vr[1]&&(u=d,d+=25)}})})(e);if(!t)return;const r=t.match(al);if(!r)return;const n=r.length>3?r[3]:"";if(this.uniqueIdExists(n))return;const o=r[1],_=r[2];let s=!1;(n==":1"||n.length==14&&n.endsWith("10"))&&(s=!0);try{this.trzszTransfer=new Oi(this.sendToServer,this.isWindowsShell,this.maxDataChunkSize),o==="S"?yield this.handleTrzszDownloadFiles(_,s):o==="R"?yield this.handleTrzszUploadFiles(_,!1,s):o==="D"&&(yield this.handleTrzszUploadFiles(_,!0,s)),this.uploadFilesResolve&&this.uploadFilesResolve()}catch(h){yield this.trzszTransfer.clientError(h),this.uploadFilesReject&&this.uploadFilesReject(h)}finally{this.uploadFilesResolve=null,this.uploadFilesReject=null,this.trzszTransfer.cleanup(),this.textProgressBar&&this.textProgressBar.showCursor(),this.textProgressBar=null,this.trzszTransfer=null}})}createProgressBar(e,t){e!==!0?(this.textProgressBar=new ol(this.writeToTerminal,this.terminalColumns,t),this.textProgressBar.hideCursor()):this.textProgressBar=null}handleTrzszDownloadFiles(e,t){return q(this,void 0,void 0,function*(){let r,n,o;if(Ut){const h=yield(function(){return q(this,void 0,void 0,function*(){if(typeof window.showDirectoryPicker!="function")throw Bs();try{return yield window.showDirectoryPicker({id:"trzsz_download",startIn:"downloads",mode:"readwrite"})}catch(a){if(a.name==="AbortError")return;throw a}})})();if(!h)return void(yield this.trzszTransfer.sendAction(!1,t));r=h.name,n={handle:h,maps:new Map},o=il}else{if(r=yield this.chooseSaveDirectory(),!r)return void(yield this.trzszTransfer.sendAction(!1,t));yield(function(h){return q(this,void 0,void 0,function*(){if(!h)return!1;if(!(yield te.accessAsync(h)))throw new X(\`No such directory: \${h}\`);if(!(yield te.statAsync(h)).isDirectory())throw new X(\`Not a directory: \${h}\`);if(!(yield te.accessAsync(h,te.constants.W_OK)))throw new X(\`No permission to write: \${h}\`);return!0})})(r),n={path:r,maps:new Map},o=el}yield this.trzszTransfer.sendAction(!0,t);const _=yield this.trzszTransfer.recvConfig();this.createProgressBar(_.quiet,_.tmux_pane_width);const s=yield this.trzszTransfer.recvFiles(n,o,this.textProgressBar);yield this.trzszTransfer.clientExit(Fr(s,r))})}handleTrzszUploadFiles(e,t,r){return q(this,void 0,void 0,function*(){let n;if(this.uploadFilesList)n=this.uploadFilesList,this.uploadFilesList=null;else if(Ut)n=t?yield tl():yield(function(){return q(this,void 0,void 0,function*(){if(typeof window.showOpenFilePicker!="function")throw Bs();let s;try{s=yield window.showOpenFilePicker({id:"trzsz_upload",startIn:"documents",multiple:!0})}catch(a){if(a.name==="AbortError")return;throw a}if(!s||!s.length)return;const h=[];for(const[a,d]of s.entries()){const u=yield d.getFile();h.push(new ai(a,[u.name],u,!1))}return h})})();else{const s=yield this.chooseSendFiles(t);n=yield Hr(s,t)}if(!n||!n.length)return void(yield this.trzszTransfer.sendAction(!1,r));yield this.trzszTransfer.sendAction(!0,r);const o=yield this.trzszTransfer.recvConfig();o.overwrite===!0&&(function(s){const h=new Set;for(const a of s){const d=a.getRelPath().join("/");if(h.has(d))throw new X(\`Duplicate name: \${d}\`);h.add(d)}})(n),this.createProgressBar(o.quiet,o.tmux_pane_width);const _=yield this.trzszTransfer.sendFiles(n,this.textProgressBar);yield this.trzszTransfer.clientExit(Fr(_,""))})}}const Gr={cyberpunk:{background:"#0a0a0a",foreground:"#4af626",cursor:"#14d1ff",cursorAccent:"#0a0a0a",selectionBackground:"#273747"},glacier:{background:"#0a192f",foreground:"#64ffda",cursor:"#e6f1ff",cursorAccent:"#0a192f",selectionBackground:"#112240"},gruvbox:{background:"#282828",foreground:"#ebdbb2",cursor:"#d3869b",cursorAccent:"#282828",selectionBackground:"#504945"}};class ll{constructor(e){Q(this,"terminal");Q(this,"fitAddon");Q(this,"webglAddon");Q(this,"ws",null);Q(this,"container");Q(this,"disposables",[]);Q(this,"heartbeatInterval",null);Q(this,"trzszFilter",null);Q(this,"reconnectAttempts",0);Q(this,"maxReconnectAttempts",5);Q(this,"reconnectTimeout",null);Q(this,"lastConfig",null);this.container=document.getElementById(e),this.terminal=new co.Terminal({cursorBlink:!0,cursorStyle:"block",fontSize:14,fontFamily:'"JetBrains Mono", "Fira Code", "Cascadia Code", monospace',theme:Gr.cyberpunk,allowProposedApi:!0,scrollback:1e4}),this.fitAddon=new fo.FitAddon,this.terminal.loadAddon(this.fitAddon),this.terminal.loadAddon(new go.WebLinksAddon),window.addEventListener("resize",()=>this.fit()),this.container.addEventListener("contextmenu",async t=>{var r;t.preventDefault();try{const n=await navigator.clipboard.readText();n&&((r=this.ws)==null?void 0:r.readyState)===WebSocket.OPEN&&this.ws.send(n)}catch(n){console.error("Failed to read clipboard",n)}}),this.container.addEventListener("dragover",t=>{t.preventDefault(),t.stopPropagation()}),this.container.addEventListener("drop",t=>{var r;t.preventDefault(),t.stopPropagation(),this.trzszFilter&&((r=t.dataTransfer)!=null&&r.items)&&this.trzszFilter.uploadFiles(t.dataTransfer.items).then(()=>console.log("[trzsz] Drag-drop upload success")).catch(n=>console.error("[trzsz] Drag-drop upload error:",n))})}setTheme(e){this.terminal.options.theme=Gr[e]}mount(){this.terminal.open(this.container);try{this.webglAddon=new Xa,this.webglAddon.onContextLoss(e=>{console.warn("WebGL context lost",e),this.webglAddon.dispose()}),this.terminal.loadAddon(this.webglAddon)}catch(e){console.warn("WebGL addon failed to load, falling back to canvas/dom",e)}this.fit(),this.terminal.writeln("\\x1B[1;33m╔══════════════════════════════════╗\\x1B[0m"),this.terminal.writeln("\\x1B[1;33m║      Connecting to CloudSSH      ║\\x1B[0m"),this.terminal.writeln("\\x1B[1;33m╚══════════════════════════════════╝\\x1B[0m"),this.terminal.writeln("")}async connect(e){this.resetActiveConnection(),this.lastConfig=e,this.terminal.clear();const t=document.getElementById("term-status");t&&(t.innerHTML='<div class="w-2 h-2 bg-primary-container animate-pulse"></div> Connected');const r=new URL(window.location.href);return r.protocol=r.protocol==="https:"?"wss:":"ws:",r.pathname="/api/ssh",new Promise((n,o)=>{this.ws=new WebSocket(r.toString()),this.ws.binaryType="arraybuffer",this.ws.onopen=()=>{var _;this.terminal.writeln("\\x1B[32m[+] WebSocket connected, sending credentials...\\x1B[0m"),(_=this.ws)==null||_.send(JSON.stringify({host:e.host,port:e.port,username:e.username,password:e.password,authMethod:e.authMethod,privateKey:e.privateKey})),this.startHeartbeat(),n()},this.ws.onerror=()=>{o(new Error("WebSocket connection failed"))},this.ws.onclose=()=>{this.terminal.writeln("\\x1B[31m[-] 连接已关闭\\x1B[0m");const _=document.getElementById("status-text");_&&(_.innerHTML='<span class="w-2 h-2 bg-[#353534] inline-block"></span> STATUS: OFFLINE')},this.setupWebSocketHandlers(o)})}connectWithWebSocket(e){this.resetActiveConnection(),this.lastConfig=null,this.ws=e,e.binaryType="arraybuffer",this.terminal.clear();const t=document.getElementById("term-status");t&&(t.innerHTML='<div class="w-2 h-2 bg-primary-container animate-pulse"></div> Connected'),e.onopen=()=>{this.terminal.writeln("\\x1B[32m[+] WebSocket connected, authenticating...\\x1B[0m"),this.startHeartbeat()},this.setupWebSocketHandlers()}setupWebSocketHandlers(e){this.ws&&(this.trzszFilter=new hl({writeToTerminal:t=>{typeof t=="string"?this.terminal.write(t):t instanceof Uint8Array?this.terminal.write(t):t instanceof ArrayBuffer?this.terminal.write(new Uint8Array(t)):t instanceof Blob&&t.arrayBuffer().then(r=>this.terminal.write(new Uint8Array(r)))},sendToServer:t=>{var r;((r=this.ws)==null?void 0:r.readyState)===WebSocket.OPEN&&this.ws.send(t)},terminalColumns:this.terminal.cols}),this.ws.onmessage=t=>{if(typeof t.data=="string")try{const r=JSON.parse(t.data);switch(r.type){case"status":if(this.terminal.writeln(\`\\x1B[32m[*] \${r.message}\\x1B[0m\`),r.message==="认证成功"){this.reconnectAttempts=0;const n=document.getElementById("status-text");n&&(n.innerHTML='<span class="w-2 h-2 bg-[#4af626] inline-block animate-pulse"></span> STATUS: ONLINE')}break;case"error":this.terminal.writeln(\`\\x1B[31m[!] \${r.message}\\x1B[0m\`);break;case"pong":break}}catch{this.trzszFilter.processServerOutput(t.data)}else this.trzszFilter.processServerOutput(t.data)},this.ws.onclose=t=>{this.stopHeartbeat(),this.terminal.writeln(\`\\x1B[33m[*] Connection closed (code=\${t.code})\\x1B[0m\`);const r=document.getElementById("term-status");r&&(r.innerHTML='<div class="w-2 h-2 bg-red-500"></div> Disconnected');const n=document.getElementById("status-text");n&&(n.innerHTML='<span class="w-2 h-2 bg-[#353534] inline-block"></span> STATUS: OFFLINE'),t.code!==1e3&&this.lastConfig&&this.reconnectAttempts<this.maxReconnectAttempts&&this.scheduleReconnect()},this.ws.onerror=()=>{this.terminal.writeln("\\x1B[31m[!] Connection error\\x1B[0m"),e&&e(new Error("WebSocket connection failed"))},this.disposables.push(this.terminal.onData(t=>{this.trzszFilter.processTerminalInput(t)})),this.disposables.push(this.terminal.onBinary(t=>{this.trzszFilter.processBinaryInput(t)})),this.disposables.push(this.terminal.onResize(({cols:t,rows:r})=>{var n,o;((n=this.ws)==null?void 0:n.readyState)===WebSocket.OPEN&&this.ws.send(JSON.stringify({type:"resize",cols:t,rows:r})),(o=this.trzszFilter)==null||o.setTerminalColumns(t)})))}fit(){this.fitAddon.fit()}startHeartbeat(){this.stopHeartbeat(),this.heartbeatInterval=setInterval(()=>{var e;((e=this.ws)==null?void 0:e.readyState)===WebSocket.OPEN&&this.ws.send(JSON.stringify({type:"ping"}))},3e4)}stopHeartbeat(){this.heartbeatInterval&&(clearInterval(this.heartbeatInterval),this.heartbeatInterval=null)}disposeConnectionDisposables(){this.disposables.forEach(e=>e.dispose()),this.disposables=[]}clearReconnectTimeout(){this.reconnectTimeout&&(clearTimeout(this.reconnectTimeout),this.reconnectTimeout=null)}resetActiveConnection(){this.stopHeartbeat(),this.clearReconnectTimeout(),this.disposeConnectionDisposables(),this.ws&&this.ws.readyState!==WebSocket.CLOSED&&this.ws.readyState!==WebSocket.CLOSING&&this.ws.close(1e3),this.ws=null,this.trzszFilter=null}scheduleReconnect(){this.clearReconnectTimeout(),this.reconnectAttempts++;const e=Math.min(1e3*Math.pow(2,this.reconnectAttempts),3e4);this.terminal.writeln(\`\\x1B[33m[*] Reconnecting in \${e/1e3}s (attempt \${this.reconnectAttempts}/\${this.maxReconnectAttempts})...\\x1B[0m\`),this.reconnectTimeout=setTimeout(async()=>{if(this.reconnectTimeout=null,this.lastConfig){this.terminal.writeln("\\x1B[32m[+] Reconnecting...\\x1B[0m");try{await this.connect(this.lastConfig)}catch{this.terminal.writeln("\\x1B[31m[!] Reconnect failed\\x1B[0m")}}},e)}disconnect(){this.reconnectAttempts=this.maxReconnectAttempts,this.resetActiveConnection(),this.lastConfig=null,this.terminal.clear()}dispose(){this.disconnect(),this.terminal.dispose()}}async function ro(i){const e=new TextEncoder().encode(window.location.origin+":cloudssh"),t=await crypto.subtle.importKey("raw",e,"PBKDF2",!1,["deriveKey"]);return crypto.subtle.deriveKey({name:"PBKDF2",salt:i,iterations:1e5,hash:"SHA-256"},t,{name:"AES-GCM",length:256},!1,["encrypt","decrypt"])}async function cl(i){const e=crypto.getRandomValues(new Uint8Array(16)),t=crypto.getRandomValues(new Uint8Array(12)),r=await ro(e),n=new TextEncoder().encode(JSON.stringify(i)),o=new Uint8Array(await crypto.subtle.encrypt({name:"AES-GCM",iv:t},r,n)),_=new Uint8Array(e.length+t.length+o.length);return _.set(e,0),_.set(t,e.length),_.set(o,e.length+t.length),btoa(String.fromCharCode(..._))}async function dl(i){try{const e=Uint8Array.from(atob(i),s=>s.charCodeAt(0)),t=e.slice(0,16),r=e.slice(16,28),n=e.slice(28),o=await ro(t),_=await crypto.subtle.decrypt({name:"AES-GCM",iv:r},o,n);return JSON.parse(new TextDecoder().decode(_))}catch{return null}}class ul{constructor(e){Q(this,"terminal");Q(this,"turnstileEnabled",!1);Q(this,"turnstileVerified",!1);Q(this,"turnstileWidgetId",null);Q(this,"turnstileSitekey","");Q(this,"authMode","password");this.terminal=e,this.render(),this.loadSavedCredentials(),this.checkTurnstileConfig()}async checkTurnstileConfig(){try{const t=await(await fetch("/api/config")).json();this.turnstileEnabled=t.turnstileEnabled,this.turnstileSitekey=t.sitekey,this.turnstileEnabled&&this.turnstileSitekey&&this.renderTurnstile(),t.githubAuthEnabled&&this.renderGitHubLoginButton()}catch{}}renderGitHubLoginButton(){var t;const e=document.getElementById("github-login-placeholder");e&&(e.innerHTML=\`
+\`)}setTimeout(()=>this.detectAndHandleTrzsz(e),10),this.writeToTerminal(e)}}processTerminalInput(e){this.isTransferringFiles()?e===""&&this.stopTransferringFiles():this.sendToServer(e)}processBinaryInput(e){this.isTransferringFiles()||this.sendToServer(Ti(e))}setTerminalColumns(e){this.terminalColumns=e,this.textProgressBar!=null&&this.textProgressBar.setTerminalColumns(e)}isTransferringFiles(){return this.trzszTransfer!=null}stopTransferringFiles(){this.isTransferringFiles()&&this.trzszTransfer.stopTransferring()}uploadFiles(e){return q(this,void 0,void 0,function*(){if(this.uploadFilesList||this.isTransferringFiles())throw new Error("The previous upload has not been completed yet");if(!Ut&&(function(r,n){if(!Array.isArray(r))return!1;for(const o of r)if(typeof o!==n)return!1;return!0})(e,"string"))this.uploadFilesList=yield Hr(e,!0);else{if(!(typeof DataTransferItemList<"u"&&e instanceof DataTransferItemList))throw new Error("The upload items type is not supported");this.uploadFilesList=yield(function(r){return q(this,void 0,void 0,function*(){const n=[],o=[];for(const _ of r)o.push(_.webkitGetAsEntry());for(let _=0;_<o.length;_++){const s=o[_];s&&(yield io(_,s,n,[s.name]))}return n})})(e)}if(!this.uploadFilesList||!this.uploadFilesList.length)throw this.uploadFilesList=null,new Error("No files to upload");let t=!1;for(const r of this.uploadFilesList)if(r.isDir()||r.getRelPath().length>1){t=!0;break}return this.uploadInterrupting=!0,this.sendToServer(""),yield new Promise(r=>setTimeout(r,200)),this.uploadInterrupting=!1,this.uploadSkipTrzCommand=!0,this.sendToServer(t?"trz -d\\r":"trz\\r"),setTimeout(()=>{this.uploadFilesList&&(this.uploadFilesList=null,this.uploadFilesResolve=null,this.uploadFilesReject&&(this.uploadFilesReject("Upload does not start"),this.uploadFilesReject=null))},this.dragInitTimeout),new Promise((r,n)=>{this.uploadFilesResolve=r,this.uploadFilesReject=n})})}uniqueIdExists(e){if(e.length<8||!this.isWindowsShell&&e.length==14&&e.endsWith("00"))return!1;if(this.uniqueIdMaps.has(e))return!0;if(this.uniqueIdMaps.size>=100){const t=new Map;for(const[r,n]of this.uniqueIdMaps)n>=50&&t.set(r,n-50);this.uniqueIdMaps=t}return this.uniqueIdMaps.set(e,this.uniqueIdMaps.size),!1}detectAndHandleTrzsz(e){return q(this,void 0,void 0,function*(){const t=yield(function(h){return q(this,void 0,void 0,function*(){if(typeof h=="string"){const p=h.lastIndexOf(so);return p<0?null:h.substring(p)}let a;if(h instanceof ArrayBuffer)a=new Uint8Array(h);else if(h instanceof Uint8Array)a=h;else{if(!(h instanceof Blob))return null;a=new Uint8Array(yield h.arrayBuffer())}if(a.length<26)return null;let d=-1,u=-1;for(;;){if(d=a.indexOf(58,d+1),d<0||a.length-d<26)return u>=0?Di(a.subarray(u)):null;const p=new Float64Array(a.buffer.slice(a.byteOffset+d,a.byteOffset+d+16));p[0]==Vr[0]&&p[1]==Vr[1]&&(u=d,d+=25)}})})(e);if(!t)return;const r=t.match(al);if(!r)return;const n=r.length>3?r[3]:"";if(this.uniqueIdExists(n))return;const o=r[1],_=r[2];let s=!1;(n==":1"||n.length==14&&n.endsWith("10"))&&(s=!0);try{this.trzszTransfer=new Oi(this.sendToServer,this.isWindowsShell,this.maxDataChunkSize),o==="S"?yield this.handleTrzszDownloadFiles(_,s):o==="R"?yield this.handleTrzszUploadFiles(_,!1,s):o==="D"&&(yield this.handleTrzszUploadFiles(_,!0,s)),this.uploadFilesResolve&&this.uploadFilesResolve()}catch(h){yield this.trzszTransfer.clientError(h),this.uploadFilesReject&&this.uploadFilesReject(h)}finally{this.uploadFilesResolve=null,this.uploadFilesReject=null,this.trzszTransfer.cleanup(),this.textProgressBar&&this.textProgressBar.showCursor(),this.textProgressBar=null,this.trzszTransfer=null}})}createProgressBar(e,t){e!==!0?(this.textProgressBar=new ol(this.writeToTerminal,this.terminalColumns,t),this.textProgressBar.hideCursor()):this.textProgressBar=null}handleTrzszDownloadFiles(e,t){return q(this,void 0,void 0,function*(){let r,n,o;if(Ut){const h=yield(function(){return q(this,void 0,void 0,function*(){if(typeof window.showDirectoryPicker!="function")throw Bs();try{return yield window.showDirectoryPicker({id:"trzsz_download",startIn:"downloads",mode:"readwrite"})}catch(a){if(a.name==="AbortError")return;throw a}})})();if(!h)return void(yield this.trzszTransfer.sendAction(!1,t));r=h.name,n={handle:h,maps:new Map},o=il}else{if(r=yield this.chooseSaveDirectory(),!r)return void(yield this.trzszTransfer.sendAction(!1,t));yield(function(h){return q(this,void 0,void 0,function*(){if(!h)return!1;if(!(yield te.accessAsync(h)))throw new X(\`No such directory: \${h}\`);if(!(yield te.statAsync(h)).isDirectory())throw new X(\`Not a directory: \${h}\`);if(!(yield te.accessAsync(h,te.constants.W_OK)))throw new X(\`No permission to write: \${h}\`);return!0})})(r),n={path:r,maps:new Map},o=el}yield this.trzszTransfer.sendAction(!0,t);const _=yield this.trzszTransfer.recvConfig();this.createProgressBar(_.quiet,_.tmux_pane_width);const s=yield this.trzszTransfer.recvFiles(n,o,this.textProgressBar);yield this.trzszTransfer.clientExit(Fr(s,r))})}handleTrzszUploadFiles(e,t,r){return q(this,void 0,void 0,function*(){let n;if(this.uploadFilesList)n=this.uploadFilesList,this.uploadFilesList=null;else if(Ut)n=t?yield tl():yield(function(){return q(this,void 0,void 0,function*(){if(typeof window.showOpenFilePicker!="function")throw Bs();let s;try{s=yield window.showOpenFilePicker({id:"trzsz_upload",startIn:"documents",multiple:!0})}catch(a){if(a.name==="AbortError")return;throw a}if(!s||!s.length)return;const h=[];for(const[a,d]of s.entries()){const u=yield d.getFile();h.push(new ai(a,[u.name],u,!1))}return h})})();else{const s=yield this.chooseSendFiles(t);n=yield Hr(s,t)}if(!n||!n.length)return void(yield this.trzszTransfer.sendAction(!1,r));yield this.trzszTransfer.sendAction(!0,r);const o=yield this.trzszTransfer.recvConfig();o.overwrite===!0&&(function(s){const h=new Set;for(const a of s){const d=a.getRelPath().join("/");if(h.has(d))throw new X(\`Duplicate name: \${d}\`);h.add(d)}})(n),this.createProgressBar(o.quiet,o.tmux_pane_width);const _=yield this.trzszTransfer.sendFiles(n,this.textProgressBar);yield this.trzszTransfer.clientExit(Fr(_,""))})}}const Gr={cyberpunk:{background:"#0a0a0a",foreground:"#4af626",cursor:"#14d1ff",cursorAccent:"#0a0a0a",selectionBackground:"#273747"},glacier:{background:"#0a192f",foreground:"#64ffda",cursor:"#e6f1ff",cursorAccent:"#0a192f",selectionBackground:"#112240"},gruvbox:{background:"#282828",foreground:"#ebdbb2",cursor:"#d3869b",cursorAccent:"#282828",selectionBackground:"#504945"}};class ll{constructor(e){Q(this,"terminal");Q(this,"fitAddon");Q(this,"webglAddon");Q(this,"ws",null);Q(this,"container");Q(this,"disposables",[]);Q(this,"heartbeatInterval",null);Q(this,"trzszFilter",null);Q(this,"reconnectAttempts",0);Q(this,"maxReconnectAttempts",5);Q(this,"reconnectTimeout",null);Q(this,"lastConfig",null);this.container=document.getElementById(e),this.terminal=new co.Terminal({cursorBlink:!0,cursorStyle:"block",fontSize:14,fontFamily:'"JetBrains Mono", "Fira Code", "Cascadia Code", monospace',theme:Gr.cyberpunk,allowProposedApi:!0,scrollback:1e4}),this.fitAddon=new fo.FitAddon,this.terminal.loadAddon(this.fitAddon),this.terminal.loadAddon(new go.WebLinksAddon),window.addEventListener("resize",()=>this.fit()),this.container.addEventListener("contextmenu",async t=>{var r;t.preventDefault();try{const n=await navigator.clipboard.readText();n&&((r=this.ws)==null?void 0:r.readyState)===WebSocket.OPEN&&this.ws.send(n)}catch(n){console.error("Failed to read clipboard",n)}}),this.container.addEventListener("dragover",t=>{t.preventDefault(),t.stopPropagation()}),this.container.addEventListener("drop",t=>{var r;t.preventDefault(),t.stopPropagation(),this.trzszFilter&&((r=t.dataTransfer)!=null&&r.items)&&this.trzszFilter.uploadFiles(t.dataTransfer.items).then(()=>console.log("[trzsz] Drag-drop upload success")).catch(n=>console.error("[trzsz] Drag-drop upload error:",n))})}setTheme(e){this.terminal.options.theme=Gr[e]}mount(){this.terminal.open(this.container);try{this.webglAddon=new Xa,this.webglAddon.onContextLoss(e=>{console.warn("WebGL context lost",e),this.webglAddon.dispose()}),this.terminal.loadAddon(this.webglAddon)}catch(e){console.warn("WebGL addon failed to load, falling back to canvas/dom",e)}this.fit(),this.terminal.writeln("\\x1B[1;33m╔══════════════════════════════════╗\\x1B[0m"),this.terminal.writeln("\\x1B[1;33m║      Connecting to CloudSSH      ║\\x1B[0m"),this.terminal.writeln("\\x1B[1;33m╚══════════════════════════════════╝\\x1B[0m"),this.terminal.writeln("")}async connect(e){this.resetActiveConnection(),this.lastConfig=e,this.terminal.clear();const t=document.getElementById("term-status");t&&(t.innerHTML='<div class="w-2 h-2 bg-primary-container animate-pulse"></div> Connected');const r=new URL(window.location.href);return r.protocol=r.protocol==="https:"?"wss:":"ws:",r.pathname="/api/ssh",new Promise((n,o)=>{this.ws=new WebSocket(r.toString()),this.ws.binaryType="arraybuffer",this.ws.onopen=()=>{var _;this.terminal.writeln("\\x1B[32m[+] WebSocket connected, sending credentials...\\x1B[0m"),(_=this.ws)==null||_.send(JSON.stringify({host:e.host,port:e.port,username:e.username,password:e.password,authMethod:e.authMethod,privateKey:e.privateKey,...this.getTerminalSize()})),this.startHeartbeat(),n()},this.ws.onerror=()=>{o(new Error("WebSocket connection failed"))},this.ws.onclose=()=>{this.terminal.writeln("\\x1B[31m[-] 连接已关闭\\x1B[0m");const _=document.getElementById("status-text");_&&(_.innerHTML='<span class="w-2 h-2 bg-[#353534] inline-block"></span> STATUS: OFFLINE')},this.setupWebSocketHandlers(o)})}connectWithWebSocket(e){this.resetActiveConnection(),this.lastConfig=null,this.ws=e,e.binaryType="arraybuffer",this.terminal.clear();const t=document.getElementById("term-status");t&&(t.innerHTML='<div class="w-2 h-2 bg-primary-container animate-pulse"></div> Connected'),e.onopen=()=>{this.terminal.writeln("\\x1B[32m[+] WebSocket connected, authenticating...\\x1B[0m"),this.sendResize(),this.startHeartbeat()},e.readyState===WebSocket.OPEN&&this.sendResize(),this.setupWebSocketHandlers()}setupWebSocketHandlers(e){this.ws&&(this.trzszFilter=new hl({writeToTerminal:t=>{typeof t=="string"?this.terminal.write(t):t instanceof Uint8Array?this.terminal.write(t):t instanceof ArrayBuffer?this.terminal.write(new Uint8Array(t)):t instanceof Blob&&t.arrayBuffer().then(r=>this.terminal.write(new Uint8Array(r)))},sendToServer:t=>{var r;((r=this.ws)==null?void 0:r.readyState)===WebSocket.OPEN&&this.ws.send(t)},terminalColumns:this.terminal.cols}),this.ws.onmessage=t=>{if(typeof t.data=="string")try{const r=JSON.parse(t.data);switch(r.type){case"status":if(this.terminal.writeln(\`\\x1B[32m[*] \${r.message}\\x1B[0m\`),r.message==="认证成功"){this.reconnectAttempts=0;const n=document.getElementById("status-text");n&&(n.innerHTML='<span class="w-2 h-2 bg-[#4af626] inline-block animate-pulse"></span> STATUS: ONLINE')}break;case"error":this.terminal.writeln(\`\\x1B[31m[!] \${r.message}\\x1B[0m\`);break;case"pong":break}}catch{this.trzszFilter.processServerOutput(t.data)}else this.trzszFilter.processServerOutput(t.data)},this.ws.onclose=t=>{this.stopHeartbeat(),this.terminal.writeln(\`\\x1B[33m[*] Connection closed (code=\${t.code})\\x1B[0m\`);const r=document.getElementById("term-status");r&&(r.innerHTML='<div class="w-2 h-2 bg-red-500"></div> Disconnected');const n=document.getElementById("status-text");n&&(n.innerHTML='<span class="w-2 h-2 bg-[#353534] inline-block"></span> STATUS: OFFLINE'),t.code!==1e3&&this.lastConfig&&this.reconnectAttempts<this.maxReconnectAttempts&&this.scheduleReconnect()},this.ws.onerror=()=>{this.terminal.writeln("\\x1B[31m[!] Connection error\\x1B[0m"),e&&e(new Error("WebSocket connection failed"))},this.disposables.push(this.terminal.onData(t=>{this.trzszFilter.processTerminalInput(t)})),this.disposables.push(this.terminal.onBinary(t=>{this.trzszFilter.processBinaryInput(t)})),this.disposables.push(this.terminal.onResize(({cols:t,rows:r})=>{var n;this.sendResize({cols:t,rows:r}),(n=this.trzszFilter)==null||n.setTerminalColumns(t)})))}fit(){this.fitAddon.fit()}startHeartbeat(){this.stopHeartbeat(),this.heartbeatInterval=setInterval(()=>{var e;((e=this.ws)==null?void 0:e.readyState)===WebSocket.OPEN&&this.ws.send(JSON.stringify({type:"ping"}))},3e4)}getTerminalSize(){return{cols:this.terminal.cols,rows:this.terminal.rows}}sendResize(e=this.getTerminalSize()){var t;((t=this.ws)==null?void 0:t.readyState)===WebSocket.OPEN&&this.ws.send(JSON.stringify({type:"resize",...e}))}stopHeartbeat(){this.heartbeatInterval&&(clearInterval(this.heartbeatInterval),this.heartbeatInterval=null)}disposeConnectionDisposables(){this.disposables.forEach(e=>e.dispose()),this.disposables=[]}clearReconnectTimeout(){this.reconnectTimeout&&(clearTimeout(this.reconnectTimeout),this.reconnectTimeout=null)}resetActiveConnection(){this.stopHeartbeat(),this.clearReconnectTimeout(),this.disposeConnectionDisposables(),this.ws&&this.ws.readyState!==WebSocket.CLOSED&&this.ws.readyState!==WebSocket.CLOSING&&this.ws.close(1e3),this.ws=null,this.trzszFilter=null}scheduleReconnect(){this.clearReconnectTimeout(),this.reconnectAttempts++;const e=Math.min(1e3*Math.pow(2,this.reconnectAttempts),3e4);this.terminal.writeln(\`\\x1B[33m[*] Reconnecting in \${e/1e3}s (attempt \${this.reconnectAttempts}/\${this.maxReconnectAttempts})...\\x1B[0m\`),this.reconnectTimeout=setTimeout(async()=>{if(this.reconnectTimeout=null,this.lastConfig){this.terminal.writeln("\\x1B[32m[+] Reconnecting...\\x1B[0m");try{await this.connect(this.lastConfig)}catch{this.terminal.writeln("\\x1B[31m[!] Reconnect failed\\x1B[0m")}}},e)}disconnect(){this.reconnectAttempts=this.maxReconnectAttempts,this.resetActiveConnection(),this.lastConfig=null,this.terminal.clear()}dispose(){this.disconnect(),this.terminal.dispose()}}async function ro(i){const e=new TextEncoder().encode(window.location.origin+":cloudssh"),t=await crypto.subtle.importKey("raw",e,"PBKDF2",!1,["deriveKey"]);return crypto.subtle.deriveKey({name:"PBKDF2",salt:i,iterations:1e5,hash:"SHA-256"},t,{name:"AES-GCM",length:256},!1,["encrypt","decrypt"])}async function cl(i){const e=crypto.getRandomValues(new Uint8Array(16)),t=crypto.getRandomValues(new Uint8Array(12)),r=await ro(e),n=new TextEncoder().encode(JSON.stringify(i)),o=new Uint8Array(await crypto.subtle.encrypt({name:"AES-GCM",iv:t},r,n)),_=new Uint8Array(e.length+t.length+o.length);return _.set(e,0),_.set(t,e.length),_.set(o,e.length+t.length),btoa(String.fromCharCode(..._))}async function dl(i){try{const e=Uint8Array.from(atob(i),s=>s.charCodeAt(0)),t=e.slice(0,16),r=e.slice(16,28),n=e.slice(28),o=await ro(t),_=await crypto.subtle.decrypt({name:"AES-GCM",iv:r},o,n);return JSON.parse(new TextDecoder().decode(_))}catch{return null}}class ul{constructor(e){Q(this,"terminal");Q(this,"turnstileEnabled",!1);Q(this,"turnstileVerified",!1);Q(this,"turnstileWidgetId",null);Q(this,"turnstileSitekey","");Q(this,"authMode","password");this.terminal=e,this.render(),this.loadSavedCredentials(),this.checkTurnstileConfig()}async checkTurnstileConfig(){try{const t=await(await fetch("/api/config")).json();this.turnstileEnabled=t.turnstileEnabled,this.turnstileSitekey=t.sitekey,this.turnstileEnabled&&this.turnstileSitekey&&this.renderTurnstile(),t.githubAuthEnabled&&this.renderGitHubLoginButton()}catch{}}renderGitHubLoginButton(){var t;const e=document.getElementById("github-login-placeholder");e&&(e.innerHTML=\`
       <button type="button" id="github-login-btn" class="github-login-btn text-[11px] font-bold tracking-[0.1em] text-[#bbccb0] hover:text-[#4af626] transition-all cursor-pointer flex items-center gap-1.5 bg-transparent border border-[#3c4b36] px-3 py-1 hover:border-[#4af626]">
         <svg width="14" height="14" viewBox="0 0 16 16" fill="currentColor"><path d="M8 0C3.58 0 0 3.58 0 8c0 3.54 2.29 6.53 5.47 7.59.4.07.55-.17.55-.38 0-.19-.01-.82-.01-1.49-2.01.37-2.53-.49-2.69-.94-.09-.23-.48-.94-.82-1.13-.28-.15-.68-.52-.01-.53.63-.01 1.08.58 1.23.82.72 1.21 1.87.87 2.33.66.07-.52.28-.87.51-1.07-1.78-.2-3.64-.89-3.64-3.95 0-.87.31-1.59.82-2.15-.08-.2-.36-1.02.08-2.12 0 0 .67-.21 2.2.82.64-.18 1.32-.27 2-.27.68 0 1.36.09 2 .27 1.53-1.04 2.2-.82 2.2-.82.44 1.1.16 1.92.08 2.12.51.56.82 1.27.82 2.15 0 3.07-1.87 3.75-3.65 3.95.29.25.54.73.54 1.48 0 1.07-.01 1.93-.01 2.2 0 .21.15.46.55.38A8.013 8.013 0 0016 8c0-4.42-3.58-8-8-8z"/></svg>
         LOGIN
@@ -494,6 +495,7 @@ void main() {
       </footer>
     </div>
   </div>
+
 </body>
 </html>
 `;
diff --git a/src/worker/ssh-session.ts b/src/worker/ssh-session.ts
index 3d4480f..0ab809d 100644
--- a/src/worker/ssh-session.ts
+++ b/src/worker/ssh-session.ts
@@ -1,4 +1,4 @@
-import { SSHConnectionConfig, SessionKeys, SSHPacket } from '../types';
+import { SSHConnectionConfig, SessionKeys, SSHPacket, TerminalSize } from '../types';
 import {
   SSH_MSG_KEXINIT,
   SSH_MSG_NEWKEYS,
@@ -83,6 +83,7 @@ export class SSHSession {
 
   private keepaliveInterval: ReturnType<typeof setInterval> | null = null;
   private shellReadyTimeout: ReturnType<typeof setTimeout> | null = null;
+  private terminalSize: TerminalSize = { cols: 120, rows: 40 };
 
   constructor(
     ws: WebSocket,
@@ -98,6 +99,7 @@ export class SSHSession {
     this.transport = new SSHTransport();
     this.packetParser = new SSHPacketParser();
     this.channel = new SSHChannel();
+    this.updateTerminalSize(config.cols, config.rows);
   }
 
   async startHandshake(): Promise<void> {
@@ -842,7 +844,7 @@ export class SSHSession {
     switch (msgType) {
       case SSH_MSG_CHANNEL_OPEN_CONFIRMATION:
         this.channel.handleOpenConfirmation(payload);
-        const ptyReq = this.channel.buildPTYRequest(120, 40);
+        const ptyReq = this.channel.buildPTYRequest(this.terminalSize.cols, this.terminalSize.rows);
         await this.sendEncrypted(ptyReq);
         break;
 
@@ -922,38 +924,70 @@ export class SSHSession {
   }
 
   async handleWebSocketMessage(data: string | ArrayBuffer): Promise<void> {
-    if (this.state !== 'ready') return;
-
     if (typeof data === 'string') {
-      if (data === '{"type":"ping"}') {
-        this.ws.send(JSON.stringify({ type: 'pong' }));
-        return;
-      }
-      
-      if (data.startsWith('{"type":"resize"')) {
+      if (data.startsWith('{"type"')) {
         try {
           const msg = JSON.parse(data);
+          if (msg.type === 'ping') {
+            this.ws.send(JSON.stringify({ type: 'pong' }));
+            return;
+          }
           if (msg.type === 'resize') {
             await this.handleResize(msg.cols, msg.rows);
             return;
           }
         } catch {}
       }
+
+      if (this.state !== 'ready') return;
       
       const encoded = new TextEncoder().encode(data);
       const channelData = this.channel.buildChannelData(encoded);
       await this.sendEncrypted(channelData);
     } else {
+      if (this.state !== 'ready') return;
+
       const channelData = this.channel.buildChannelData(new Uint8Array(data));
       await this.sendEncrypted(channelData);
     }
   }
 
-  private async handleResize(cols: number, rows: number): Promise<void> {
-    const resizeMsg = this.channel.buildWindowChange(cols, rows);
+  private async handleResize(cols: unknown, rows: unknown): Promise<void> {
+    if (!this.updateTerminalSize(cols, rows)) return;
+    if (this.state !== 'ready') return;
+
+    const resizeMsg = this.channel.buildWindowChange(this.terminalSize.cols, this.terminalSize.rows);
     await this.sendEncrypted(resizeMsg);
   }
 
+  private updateTerminalSize(cols: unknown, rows: unknown): boolean {
+    if (
+      typeof cols !== 'number' ||
+      typeof rows !== 'number' ||
+      !Number.isFinite(cols) ||
+      !Number.isFinite(rows)
+    ) {
+      return false;
+    }
+
+    const nextSize = {
+      cols: Math.floor(cols),
+      rows: Math.floor(rows),
+    };
+
+    if (
+      nextSize.cols < 10 ||
+      nextSize.cols > 1000 ||
+      nextSize.rows < 5 ||
+      nextSize.rows > 1000
+    ) {
+      return false;
+    }
+
+    this.terminalSize = nextSize;
+    return true;
+  }
+
   private async sendEncrypted(payload: Uint8Array): Promise<void> {
     const operation = this.sendMutex.then(async () => {
       const encrypted = await this.buildEncryptedPacket(payload);