增加SSH连接。

backend/pom.xml

@@ -82,6 +82,12 @@
             <artifactId>spring-boot-starter-mail</artifactId>
         </dependency>
 
+        <!-- WebSocket -->
+        <dependency>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-starter-websocket</artifactId>
+        </dependency>
+
         <!-- Database -->
         <dependency>
             <groupId>com.mysql</groupId>

backend/src/main/java/com/qqchen/deploy/backend/deploy/config/ThreadPoolConfig.java

@@ -122,4 +122,40 @@ public class ThreadPoolConfig {
         executor.initialize();
         return executor;
     }
+
+    /**
+     * SSH输出监听线程池
+     * 用于异步读取SSH输出流并推送到WebSocket
+     */
+    @Bean("sshOutputExecutor")
+    public ThreadPoolTaskExecutor sshOutputExecutor() {
+        ThreadPoolTaskExecutor executor = new ThreadPoolTaskExecutor();
+        
+        // 核心线程数：预期同时活跃的SSH连接数
+        executor.setCorePoolSize(10);
+        
+        // 最大线程数：支持的最大SSH连接数
+        executor.setMaxPoolSize(50);
+        
+        // 队列容量：等待处理的SSH输出监听任务
+        executor.setQueueCapacity(100);
+        
+        // 线程名前缀
+        executor.setThreadNamePrefix("ssh-output-");
+        
+        // 线程空闲时间：SSH会话关闭后，线程60秒后回收
+        executor.setKeepAliveSeconds(60);
+        
+        // 拒绝策略：由调用线程处理（确保SSH输出不会丢失）
+        executor.setRejectedExecutionHandler(new ThreadPoolExecutor.CallerRunsPolicy());
+        
+        // 等待所有任务完成再关闭线程池
+        executor.setWaitForTasksToCompleteOnShutdown(true);
+        
+        // 等待时间（秒）
+        executor.setAwaitTerminationSeconds(30);
+        
+        executor.initialize();
+        return executor;
+    }
 } 

backend/src/main/java/com/qqchen/deploy/backend/deploy/config/WebSocketAuthInterceptor.java

@@ -0,0 +1,147 @@
+package com.qqchen.deploy.backend.deploy.config;
+
+import com.qqchen.deploy.backend.framework.security.CustomUserDetails;
+import com.qqchen.deploy.backend.framework.security.util.JwtTokenUtil;
+import jakarta.annotation.Resource;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.http.server.ServerHttpRequest;
+import org.springframework.http.server.ServerHttpResponse;
+import org.springframework.http.server.ServletServerHttpRequest;
+import org.springframework.security.core.userdetails.UserDetails;
+import org.springframework.security.core.userdetails.UserDetailsService;
+import org.springframework.stereotype.Component;
+import org.springframework.web.socket.WebSocketHandler;
+import org.springframework.web.socket.server.HandshakeInterceptor;
+
+import java.util.Map;
+
+/**
+ * WebSocket认证拦截器
+ * 在WebSocket握手时验证JWT Token
+ */
+@Slf4j
+@Component
+public class WebSocketAuthInterceptor implements HandshakeInterceptor {
+
+    @Resource
+    private JwtTokenUtil jwtTokenUtil;
+
+    @Resource
+    private UserDetailsService userDetailsService;
+
+    @Override
+    public boolean beforeHandshake(ServerHttpRequest request, ServerHttpResponse response,
+                                    WebSocketHandler wsHandler, Map<String, Object> attributes) throws Exception {
+        
+        log.debug("WebSocket握手认证开始: {}", request.getURI());
+
+        try {
+            // 1. 从请求中提取Token
+            String token = extractToken(request);
+            if (token == null || token.isEmpty()) {
+                log.warn("WebSocket连接缺少Token");
+                return false;
+            }
+
+            // 2. 解析Token获取用户名
+            String username = jwtTokenUtil.getUsernameFromToken(token);
+            if (username == null) {
+                log.warn("无效的Token");
+                return false;
+            }
+
+            // 3. 加载用户信息
+            UserDetails userDetails = userDetailsService.loadUserByUsername(username);
+            if (userDetails == null) {
+                log.warn("用户不存在: {}", username);
+                return false;
+            }
+
+            // 4. 验证Token
+            if (!jwtTokenUtil.validateToken(token, userDetails)) {
+                log.warn("Token验证失败: {}", username);
+                return false;
+            }
+
+            // 5. 将用户信息存入attributes，供Handler使用
+            if (userDetails instanceof CustomUserDetails) {
+                CustomUserDetails customUserDetails = (CustomUserDetails) userDetails;
+                attributes.put("userId", customUserDetails.getUserId());
+                attributes.put("username", customUserDetails.getUsername());
+                
+                log.info("WebSocket认证成功: userId={}, username={}", 
+                         customUserDetails.getUserId(), customUserDetails.getUsername());
+            }
+
+            // 6. 提取客户端信息
+            if (request instanceof ServletServerHttpRequest) {
+                ServletServerHttpRequest servletRequest = (ServletServerHttpRequest) request;
+                String clientIp = getClientIp(servletRequest);
+                String userAgent = servletRequest.getServletRequest().getHeader("User-Agent");
+                
+                attributes.put("clientIp", clientIp);
+                attributes.put("userAgent", userAgent);
+            }
+
+            return true;
+
+        } catch (Exception e) {
+            log.error("WebSocket认证异常", e);
+            return false;
+        }
+    }
+
+    @Override
+    public void afterHandshake(ServerHttpRequest request, ServerHttpResponse response,
+                                WebSocketHandler wsHandler, Exception exception) {
+        // 握手后处理（可选）
+    }
+
+    /**
+     * 从请求中提取Token
+     * 支持两种方式：
+     * 1. URL参数: ?token=xxx
+     * 2. Header: Authorization: Bearer xxx
+     */
+    private String extractToken(ServerHttpRequest request) {
+        // 1. 尝试从URL参数获取
+        String query = request.getURI().getQuery();
+        if (query != null && query.contains("token=")) {
+            String[] params = query.split("&");
+            for (String param : params) {
+                if (param.startsWith("token=")) {
+                    return param.substring(6);
+                }
+            }
+        }
+
+        // 2. 尝试从Header获取
+        if (request instanceof ServletServerHttpRequest) {
+            ServletServerHttpRequest servletRequest = (ServletServerHttpRequest) request;
+            String authHeader = servletRequest.getServletRequest().getHeader("Authorization");
+            if (authHeader != null && authHeader.startsWith("Bearer ")) {
+                return authHeader.substring(7);
+            }
+        }
+
+        return null;
+    }
+
+    /**
+     * 获取客户端真实IP
+     */
+    private String getClientIp(ServletServerHttpRequest request) {
+        String ip = request.getServletRequest().getHeader("X-Forwarded-For");
+        if (ip == null || ip.isEmpty() || "unknown".equalsIgnoreCase(ip)) {
+            ip = request.getServletRequest().getHeader("X-Real-IP");
+        }
+        if (ip == null || ip.isEmpty() || "unknown".equalsIgnoreCase(ip)) {
+            ip = request.getServletRequest().getRemoteAddr();
+        }
+        // 如果是多级代理，取第一个IP
+        if (ip != null && ip.contains(",")) {
+            ip = ip.split(",")[0].trim();
+        }
+        return ip;
+    }
+}

backend/src/main/java/com/qqchen/deploy/backend/deploy/config/WebSocketConfig.java

@@ -0,0 +1,34 @@
+package com.qqchen.deploy.backend.deploy.config;
+
+import com.qqchen.deploy.backend.deploy.handler.ServerSSHWebSocketHandler;
+import jakarta.annotation.Resource;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.web.socket.config.annotation.EnableWebSocket;
+import org.springframework.web.socket.config.annotation.WebSocketConfigurer;
+import org.springframework.web.socket.config.annotation.WebSocketHandlerRegistry;
+
+/**
+ * WebSocket配置类
+ */
+@Slf4j
+@Configuration
+@EnableWebSocket
+public class WebSocketConfig implements WebSocketConfigurer {
+
+    @Resource
+    private ServerSSHWebSocketHandler serverSSHWebSocketHandler;
+
+    @Resource
+    private WebSocketAuthInterceptor webSocketAuthInterceptor;
+
+    @Override
+    public void registerWebSocketHandlers(WebSocketHandlerRegistry registry) {
+        log.info("注册WebSocket处理器: /api/v1/server-ssh/connect/*");
+        
+        // 注册SSH终端WebSocket处理器（添加认证拦截器）
+        registry.addHandler(serverSSHWebSocketHandler, "/api/v1/server-ssh/connect/{serverId}")
+                .addInterceptors(webSocketAuthInterceptor)  // 添加认证拦截器
+                .setAllowedOrigins("*");  // 生产环境建议配置具体的域名
+    }
+}

backend/src/main/java/com/qqchen/deploy/backend/deploy/converter/SSHAuditLogConverter.java

@@ -0,0 +1,13 @@
+package com.qqchen.deploy.backend.deploy.converter;
+
+import com.qqchen.deploy.backend.deploy.dto.SSHAuditLogDTO;
+import com.qqchen.deploy.backend.deploy.entity.SSHAuditLog;
+import com.qqchen.deploy.backend.framework.converter.BaseConverter;
+import org.mapstruct.Mapper;
+
+/**
+ * SSH审计日志转换器
+ */
+@Mapper(config = BaseConverter.class)
+public interface SSHAuditLogConverter extends BaseConverter<SSHAuditLog, SSHAuditLogDTO> {
+}

backend/src/main/java/com/qqchen/deploy/backend/deploy/dto/SSHAuditLogDTO.java

@@ -0,0 +1,62 @@
+package com.qqchen.deploy.backend.deploy.dto;
+
+import com.qqchen.deploy.backend.framework.dto.BaseDTO;
+import io.swagger.v3.oas.annotations.media.Schema;
+import lombok.Data;
+import lombok.EqualsAndHashCode;
+
+import java.time.LocalDateTime;
+
+/**
+ * SSH审计日志DTO
+ */
+@Data
+@EqualsAndHashCode(callSuper = true)
+@Schema(description = "SSH审计日志")
+public class SSHAuditLogDTO extends BaseDTO {
+
+    @Schema(description = "用户ID")
+    private Long userId;
+
+    @Schema(description = "用户名")
+    private String username;
+
+    @Schema(description = "服务器ID")
+    private Long serverId;
+
+    @Schema(description = "服务器名称")
+    private String serverName;
+
+    @Schema(description = "服务器IP")
+    private String serverIp;
+
+    @Schema(description = "会话ID")
+    private String sessionId;
+
+    @Schema(description = "连接时间")
+    private LocalDateTime connectTime;
+
+    @Schema(description = "断开时间")
+    private LocalDateTime disconnectTime;
+
+    @Schema(description = "会话时长（秒）")
+    private Integer durationSeconds;
+
+    @Schema(description = "客户端IP")
+    private String clientIp;
+
+    @Schema(description = "浏览器UA")
+    private String userAgent;
+
+    @Schema(description = "执行命令数量")
+    private Integer commandCount;
+
+    @Schema(description = "执行的命令记录（JSON）")
+    private String commands;
+
+    @Schema(description = "状态")
+    private String status;
+
+    @Schema(description = "错误信息")
+    private String errorMessage;
+}

backend/src/main/java/com/qqchen/deploy/backend/deploy/dto/SSHMessage.java

@@ -0,0 +1,83 @@
+package com.qqchen.deploy.backend.deploy.dto;
+
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.qqchen.deploy.backend.deploy.enums.SSHMessageTypeEnum;
+import com.qqchen.deploy.backend.deploy.enums.SSHStatusEnum;
+import lombok.AllArgsConstructor;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+/**
+ * SSH WebSocket消息DTO
+ * 
+ * 消息格式规范：
+ * 1. 状态消息：{"type":"status","status":"connecting"}
+ * 2. SSH输出：{"type":"output","data":"..."}
+ * 3. 错误消息：{"type":"error","message":"..."}
+ */
+@Data
+@NoArgsConstructor
+@AllArgsConstructor
+@JsonInclude(JsonInclude.Include.NON_NULL)  // 只序列化非null字段
+public class SSHMessage {
+    
+    /**
+     * 消息类型
+     */
+    private SSHMessageTypeEnum type;
+    
+    /**
+     * 消息数据（input/output时使用）
+     */
+    private String data;
+    
+    /**
+     * 错误消息（error时使用）
+     */
+    private String message;
+    
+    /**
+     * 连接状态（仅type=STATUS时使用）
+     */
+    private SSHStatusEnum status;
+    
+    /**
+     * 创建input类型消息
+     */
+    public static SSHMessage input(String data) {
+        SSHMessage msg = new SSHMessage();
+        msg.setType(SSHMessageTypeEnum.INPUT);
+        msg.setData(data);
+        return msg;
+    }
+    
+    /**
+     * 创建output类型消息
+     */
+    public static SSHMessage output(String data) {
+        SSHMessage msg = new SSHMessage();
+        msg.setType(SSHMessageTypeEnum.OUTPUT);
+        msg.setData(data);
+        return msg;
+    }
+    
+    /**
+     * 创建error类型消息
+     */
+    public static SSHMessage error(String message) {
+        SSHMessage msg = new SSHMessage();
+        msg.setType(SSHMessageTypeEnum.ERROR);
+        msg.setMessage(message);
+        return msg;
+    }
+    
+    /**
+     * 创建status类型消息
+     */
+    public static SSHMessage status(SSHStatusEnum status) {
+        SSHMessage msg = new SSHMessage();
+        msg.setType(SSHMessageTypeEnum.STATUS);
+        msg.setStatus(status);
+        return msg;
+    }
+}

backend/src/main/java/com/qqchen/deploy/backend/deploy/entity/SSHAuditLog.java

@@ -0,0 +1,109 @@
+package com.qqchen.deploy.backend.deploy.entity;
+
+import com.qqchen.deploy.backend.framework.domain.Entity;
+import jakarta.persistence.Column;
+import jakarta.persistence.Table;
+import lombok.Data;
+import lombok.EqualsAndHashCode;
+
+import java.time.LocalDateTime;
+
+/**
+ * SSH终端审计日志实体
+ */
+@Data
+@EqualsAndHashCode(callSuper = true)
+@jakarta.persistence.Entity
+@Table(name = "deploy_ssh_audit_log")
+public class SSHAuditLog extends Entity<Long> {
+
+    /**
+     * 用户ID
+     */
+    @Column(name = "user_id", nullable = false)
+    private Long userId;
+
+    /**
+     * 用户名（冗余）
+     */
+    @Column(name = "username", length = 50)
+    private String username;
+
+    /**
+     * 服务器ID
+     */
+    @Column(name = "server_id", nullable = false)
+    private Long serverId;
+
+    /**
+     * 服务器名称（冗余）
+     */
+    @Column(name = "server_name", length = 100)
+    private String serverName;
+
+    /**
+     * 服务器IP（冗余）
+     */
+    @Column(name = "server_ip", length = 50)
+    private String serverIp;
+
+    /**
+     * WebSocket会话ID
+     */
+    @Column(name = "session_id", nullable = false, length = 100)
+    private String sessionId;
+
+    /**
+     * 连接时间
+     */
+    @Column(name = "connect_time", nullable = false)
+    private LocalDateTime connectTime;
+
+    /**
+     * 断开时间
+     */
+    @Column(name = "disconnect_time")
+    private LocalDateTime disconnectTime;
+
+    /**
+     * 会话时长（秒）
+     */
+    @Column(name = "duration_seconds")
+    private Integer durationSeconds;
+
+    /**
+     * 客户端IP
+     */
+    @Column(name = "client_ip", length = 50)
+    private String clientIp;
+
+    /**
+     * 浏览器UA
+     */
+    @Column(name = "user_agent", length = 500)
+    private String userAgent;
+
+    /**
+     * 执行命令数量
+     */
+    @Column(name = "command_count", nullable = false)
+    private Integer commandCount = 0;
+
+    /**
+     * 执行的命令记录（JSON数组）
+     */
+    @Column(name = "commands", columnDefinition = "LONGTEXT")
+    private String commands;
+
+    /**
+     * 状态：SUCCESS成功, FAILED失败, TIMEOUT超时, INTERRUPTED中断
+     */
+    @Column(name = "status", length = 20)
+    private String status;
+
+    /**
+     * 错误信息
+     */
+    @Column(name = "error_message", length = 500)
+    private String errorMessage;
+}

backend/src/main/java/com/qqchen/deploy/backend/deploy/enums/SSHMessageTypeEnum.java

@@ -0,0 +1,22 @@
+package com.qqchen.deploy.backend.deploy.enums;
+
+import com.fasterxml.jackson.annotation.JsonValue;
+import lombok.AllArgsConstructor;
+import lombok.Getter;
+
+/**
+ * SSH WebSocket消息类型枚举
+ */
+@Getter
+@AllArgsConstructor
+public enum SSHMessageTypeEnum {
+    
+    INPUT("input", "用户输入"),
+    OUTPUT("output", "SSH输出"),
+    ERROR("error", "错误消息"),
+    STATUS("status", "连接状态");
+    
+    @JsonValue  // JSON序列化时使用此字段的值
+    private final String value;
+    private final String description;
+}

backend/src/main/java/com/qqchen/deploy/backend/deploy/enums/SSHStatusEnum.java

@@ -0,0 +1,21 @@
+package com.qqchen.deploy.backend.deploy.enums;
+
+import com.fasterxml.jackson.annotation.JsonValue;
+import lombok.AllArgsConstructor;
+import lombok.Getter;
+
+/**
+ * SSH连接状态枚举
+ */
+@Getter
+@AllArgsConstructor
+public enum SSHStatusEnum {
+    
+    CONNECTING("connecting", "连接中"),
+    CONNECTED("connected", "已连接"),
+    DISCONNECTED("disconnected", "已断开");
+    
+    @JsonValue  // JSON序列化时使用此字段的值
+    private final String value;
+    private final String description;
+}

backend/src/main/java/com/qqchen/deploy/backend/deploy/query/SSHAuditLogQuery.java

@@ -0,0 +1,51 @@
+package com.qqchen.deploy.backend.deploy.query;
+
+import com.qqchen.deploy.backend.framework.annotation.QueryField;
+import com.qqchen.deploy.backend.framework.enums.QueryType;
+import com.qqchen.deploy.backend.framework.query.BaseQuery;
+import io.swagger.v3.oas.annotations.media.Schema;
+import lombok.Data;
+import lombok.EqualsAndHashCode;
+
+import java.time.LocalDateTime;
+
+/**
+ * SSH审计日志查询条件
+ */
+@Data
+@EqualsAndHashCode(callSuper = true)
+@Schema(description = "SSH审计日志查询条件")
+public class SSHAuditLogQuery extends BaseQuery {
+
+    @Schema(description = "用户ID")
+    @QueryField(field = "userId")
+    private Long userId;
+
+    @Schema(description = "用户名")
+    @QueryField(field = "username", type = QueryType.LIKE)
+    private String username;
+
+    @Schema(description = "服务器ID")
+    @QueryField(field = "serverId")
+    private Long serverId;
+
+    @Schema(description = "服务器IP")
+    @QueryField(field = "serverIp", type = QueryType.LIKE)
+    private String serverIp;
+
+    @Schema(description = "会话ID")
+    @QueryField(field = "sessionId")
+    private String sessionId;
+
+    @Schema(description = "状态")
+    @QueryField(field = "status")
+    private String status;
+
+    @Schema(description = "连接开始时间")
+    @QueryField(field = "connectTime", type = QueryType.START_WITH)
+    private LocalDateTime connectTimeStart;
+
+    @Schema(description = "连接结束时间")
+    @QueryField(field = "connectTime", type = QueryType.END_WITH)
+    private LocalDateTime connectTimeEnd;
+}

backend/src/main/java/com/qqchen/deploy/backend/deploy/repository/ISSHAuditLogRepository.java

@@ -0,0 +1,22 @@
+package com.qqchen.deploy.backend.deploy.repository;
+
+import com.qqchen.deploy.backend.deploy.entity.SSHAuditLog;
+import com.qqchen.deploy.backend.framework.repository.IBaseRepository;
+import org.springframework.stereotype.Repository;
+
+/**
+ * SSH审计日志Repository
+ */
+@Repository
+public interface ISSHAuditLogRepository extends IBaseRepository<SSHAuditLog, Long> {
+    
+    /**
+     * 根据会话ID查询审计日志
+     */
+    SSHAuditLog findBySessionId(String sessionId);
+    
+    /**
+     * 统计用户当前活跃的SSH会话数
+     */
+    long countByUserIdAndDisconnectTimeIsNull(Long userId);
+}

backend/src/main/java/com/qqchen/deploy/backend/deploy/service/ISSHAuditLogService.java

@@ -0,0 +1,50 @@
+package com.qqchen.deploy.backend.deploy.service;
+
+import com.qqchen.deploy.backend.deploy.dto.SSHAuditLogDTO;
+import com.qqchen.deploy.backend.deploy.entity.SSHAuditLog;
+import com.qqchen.deploy.backend.deploy.entity.Server;
+import com.qqchen.deploy.backend.deploy.query.SSHAuditLogQuery;
+import com.qqchen.deploy.backend.framework.service.IBaseService;
+
+/**
+ * SSH审计日志服务接口
+ */
+public interface ISSHAuditLogService extends IBaseService<SSHAuditLog, SSHAuditLogDTO, SSHAuditLogQuery, Long> {
+    
+    /**
+     * 创建审计日志（连接时）
+     *
+     * @param userId    用户ID
+     * @param server    服务器信息
+     * @param sessionId WebSocket会话ID
+     * @param clientIp  客户端IP
+     * @param userAgent 浏览器UA
+     * @return 审计日志ID
+     */
+    Long createAuditLog(Long userId, Server server, String sessionId, String clientIp, String userAgent);
+    
+    /**
+     * 记录命令（每次用户输入）
+     *
+     * @param sessionId WebSocket会话ID
+     * @param command   用户输入的命令
+     */
+    void recordCommand(String sessionId, String command);
+    
+    /**
+     * 关闭审计日志（断开时）
+     *
+     * @param sessionId    WebSocket会话ID
+     * @param status       结束状态
+     * @param errorMessage 错误信息
+     */
+    void closeAuditLog(String sessionId, String status, String errorMessage);
+    
+    /**
+     * 检查用户当前活跃的SSH会话数
+     *
+     * @param userId 用户ID
+     * @return 活跃会话数
+     */
+    long countUserActiveSessions(Long userId);
+}

backend/src/main/java/com/qqchen/deploy/backend/deploy/service/impl/SSHAuditLogServiceImpl.java

@@ -0,0 +1,181 @@
+package com.qqchen.deploy.backend.deploy.service.impl;
+
+import com.fasterxml.jackson.core.type.TypeReference;
+import com.qqchen.deploy.backend.deploy.dto.SSHAuditLogDTO;
+import com.qqchen.deploy.backend.deploy.entity.SSHAuditLog;
+import com.qqchen.deploy.backend.deploy.entity.Server;
+import com.qqchen.deploy.backend.deploy.query.SSHAuditLogQuery;
+import com.qqchen.deploy.backend.deploy.repository.ISSHAuditLogRepository;
+import com.qqchen.deploy.backend.deploy.service.ISSHAuditLogService;
+import com.qqchen.deploy.backend.framework.annotation.ServiceType;
+import com.qqchen.deploy.backend.framework.service.impl.BaseServiceImpl;
+import com.qqchen.deploy.backend.framework.utils.JsonUtils;
+import com.qqchen.deploy.backend.system.entity.User;
+import com.qqchen.deploy.backend.system.service.IUserService;
+import jakarta.annotation.Resource;
+import lombok.Data;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.stereotype.Service;
+import org.springframework.transaction.annotation.Transactional;
+
+import java.time.Duration;
+import java.time.LocalDateTime;
+import java.util.ArrayList;
+import java.util.List;
+
+/**
+ * SSH审计日志服务实现
+ */
+@Slf4j
+@Service
+@ServiceType(ServiceType.Type.DATABASE)
+public class SSHAuditLogServiceImpl 
+    extends BaseServiceImpl<SSHAuditLog, SSHAuditLogDTO, SSHAuditLogQuery, Long>
+    implements ISSHAuditLogService {
+
+    private final ISSHAuditLogRepository auditLogRepository;
+
+    @Resource
+    private IUserService userService;
+
+    public SSHAuditLogServiceImpl(ISSHAuditLogRepository auditLogRepository) {
+        this.auditLogRepository = auditLogRepository;
+    }
+
+    @Override
+    @Transactional(rollbackFor = Exception.class)
+    public Long createAuditLog(Long userId, Server server, String sessionId, String clientIp, String userAgent) {
+        log.info("创建SSH审计日志: userId={}, serverId={}, sessionId={}", userId, server.getId(), sessionId);
+
+        SSHAuditLog auditLog = new SSHAuditLog();
+        
+        // 用户信息
+        auditLog.setUserId(userId);
+        User user = userService.findEntityById(userId);
+        if (user != null) {
+            auditLog.setUsername(user.getUsername());
+        }
+        
+        // 服务器信息
+        auditLog.setServerId(server.getId());
+        auditLog.setServerName(server.getServerName());
+        auditLog.setServerIp(server.getHostIp());
+        
+        // 会话信息
+        auditLog.setSessionId(sessionId);
+        auditLog.setConnectTime(LocalDateTime.now());
+        
+        // 客户端信息
+        auditLog.setClientIp(clientIp);
+        auditLog.setUserAgent(userAgent);
+        
+        // 初始化
+        auditLog.setCommandCount(0);
+        auditLog.setCommands("[]");
+        auditLog.setStatus("CONNECTED");
+        
+        SSHAuditLog saved = auditLogRepository.save(auditLog);
+        log.info("SSH审计日志创建成功: id={}", saved.getId());
+        
+        return saved.getId();
+    }
+
+    @Override
+    @Transactional(rollbackFor = Exception.class)
+    public void recordCommand(String sessionId, String command) {
+        try {
+            SSHAuditLog auditLog = auditLogRepository.findBySessionId(sessionId);
+            if (auditLog == null) {
+                log.warn("未找到审计日志: sessionId={}", sessionId);
+                return;
+            }
+            
+            // 解析现有命令列表
+            List<CommandRecord> commands = parseCommands(auditLog.getCommands());
+            
+            // 添加新命令
+            CommandRecord record = new CommandRecord();
+            record.setTimestamp(LocalDateTime.now());
+            record.setCommand(command);
+            commands.add(record);
+            
+            // 更新
+            auditLog.setCommands(toJson(commands));
+            auditLog.setCommandCount(commands.size());
+            auditLogRepository.save(auditLog);
+            
+            log.debug("记录命令: sessionId={}, commandCount={}", sessionId, commands.size());
+            
+        } catch (Exception e) {
+            log.error("记录命令失败: sessionId={}", sessionId, e);
+        }
+    }
+
+    @Override
+    @Transactional(rollbackFor = Exception.class)
+    public void closeAuditLog(String sessionId, String status, String errorMessage) {
+        try {
+            SSHAuditLog auditLog = auditLogRepository.findBySessionId(sessionId);
+            if (auditLog == null) {
+                log.warn("未找到审计日志: sessionId={}", sessionId);
+                return;
+            }
+            
+            auditLog.setDisconnectTime(LocalDateTime.now());
+            auditLog.setStatus(status);
+            auditLog.setErrorMessage(errorMessage);
+            
+            // 计算会话时长
+            if (auditLog.getConnectTime() != null) {
+                Duration duration = Duration.between(auditLog.getConnectTime(), auditLog.getDisconnectTime());
+                auditLog.setDurationSeconds((int) duration.getSeconds());
+            }
+            
+            auditLogRepository.save(auditLog);
+            
+            log.info("SSH审计日志关闭: sessionId={}, status={}, duration={}秒", 
+                     sessionId, status, auditLog.getDurationSeconds());
+            
+        } catch (Exception e) {
+            log.error("关闭审计日志失败: sessionId={}", sessionId, e);
+        }
+    }
+
+    @Override
+    public long countUserActiveSessions(Long userId) {
+        return auditLogRepository.countByUserIdAndDisconnectTimeIsNull(userId);
+    }
+
+    /**
+     * 解析命令JSON
+     */
+    private List<CommandRecord> parseCommands(String commandsJson) {
+        try {
+            if (commandsJson == null || commandsJson.trim().isEmpty() || "[]".equals(commandsJson.trim())) {
+                return new ArrayList<>();
+            }
+            List<CommandRecord> result = JsonUtils.fromJson(commandsJson, new TypeReference<List<CommandRecord>>() {});
+            return result != null ? result : new ArrayList<>();
+        } catch (Exception e) {
+            log.error("解析命令JSON失败", e);
+            return new ArrayList<>();
+        }
+    }
+
+    /**
+     * 转换为JSON
+     */
+    private String toJson(List<CommandRecord> commands) {
+        String json = JsonUtils.toJson(commands);
+        return json != null ? json : "[]";
+    }
+
+    /**
+     * 命令记录内部类
+     */
+    @Data
+    private static class CommandRecord {
+        private LocalDateTime timestamp;
+        private String command;
+    }
+}

backend/src/main/java/com/qqchen/deploy/backend/framework/config/DependencyInjectionPostProcessor.java

@@ -13,6 +13,7 @@ import com.qqchen.deploy.backend.framework.service.IBaseService;
 import com.qqchen.deploy.backend.framework.service.impl.BaseServiceImpl;
 import com.qqchen.deploy.backend.framework.utils.ReflectionUtils;
 import com.querydsl.core.types.EntityPath;
+import java.beans.Introspector;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.beans.BeansException;
 import org.springframework.beans.factory.BeanCreationException;
@@ -206,8 +207,9 @@ public class DependencyInjectionPostProcessor implements BeanPostProcessor, Disp
     @SuppressWarnings("unchecked")
     private <T extends Entity<ID>, D extends BaseDTO, Q extends BaseQuery, ID extends Serializable>
     void injectConverter(BaseServiceImpl<T, D, Q, ID> service, Class<T> entityClass) {
-        String converterBeanName = entityClass.getSimpleName().substring(0, 1).toLowerCase()
-            + entityClass.getSimpleName().substring(1) + "ConverterImpl";
+        // 使用Java Bean规范的decapitalize方法，正确处理连续大写字母的情况
+        // 例如：SSHAuditLog -> sshAuditLog, XMLParser -> xmlParser
+        String converterBeanName = Introspector.decapitalize(entityClass.getSimpleName()) + "ConverterImpl";
         log.debug("正在查找 Converter: {}", converterBeanName);
 
         try {

backend/src/main/java/com/qqchen/deploy/backend/workflow/delegate/BaseNodeDelegate.java

@@ -207,6 +207,8 @@ public abstract class BaseNodeDelegate<I, O> implements JavaDelegate {
     /**
      * 解析Map中的表达式
      * 自动处理纯表达式、模板字符串、纯文本三种情况
+     * 
+     * 重要：如果表达式解析失败（变量不存在），**不会设置该字段**，让JSON反序列化使用类型默认值
      */
     protected Map<String, Object> resolveExpressions(Map<String, Object> inputMap, DelegateExecution execution) {
         Map<String, Object> resolvedMap = new HashMap<>();
@@ -221,11 +223,20 @@ public abstract class BaseNodeDelegate<I, O> implements JavaDelegate {
                 try {
                     // ✅ 使用 SpelExpressionResolver 统一解析方法，支持复杂表达式
                     String resolvedValue = SpelExpressionResolver.resolve(execution, strValue);
+                    
+                    // ⚠️ 关键修复：如果解析后仍然是未解析的占位符（如${targetRepository.systemId}），说明变量不存在
+                    // 这种情况**不设置该字段**，让JSON反序列化时使用类型默认值（null或0等）
+                    // 让具体的节点去校验参数是否有效，并抛出更友好的业务异常
+                    if (isUnresolvedPlaceholder(resolvedValue)) {
+                        log.warn("表达式未解析成功（变量不存在）: {} = {}，跳过该字段", entry.getKey(), strValue);
+                        // 不设置该字段到resolvedMap中
+                    } else {
                         log.debug("解析字段: {} = {} -> {}", entry.getKey(), strValue, resolvedValue);
                         resolvedMap.put(entry.getKey(), resolvedValue);
+                    }
                 } catch (Exception e) {
-                    log.warn("解析失败: {}，使用原始值", strValue, e);
-                    resolvedMap.put(entry.getKey(), value);
+                    log.warn("解析失败: {}，跳过该字段", strValue, e);
+                    // 不设置该字段到resolvedMap中
                 }
             } else {
                 resolvedMap.put(entry.getKey(), value);
@@ -236,6 +247,18 @@ public abstract class BaseNodeDelegate<I, O> implements JavaDelegate {
         return resolvedMap;
     }
     
+    /**
+     * 判断是否为未解析的占位符
+     * 例如：${targetRepository.systemId}、${some.variable}
+     */
+    private boolean isUnresolvedPlaceholder(String value) {
+        if (value == null || value.isEmpty()) {
+            return false;
+        }
+        // 检查是否以 ${ 开头且以 } 结尾，说明SpEL解析失败，保留了原样
+        return value.startsWith("${") && value.endsWith("}");
+    }
+
     protected String getFieldValue(Expression expression, DelegateExecution execution) {
         if (expression == null) return null;
         Object value = expression.getValue(execution);

backend/src/main/resources/db/changelog/changes/v1.0.0-schema.sql

@@ -1187,3 +1187,48 @@ CREATE TABLE sys_notification_template
     KEY idx_channel_type (channel_type),
     KEY idx_enabled (enabled)
 ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci COMMENT='通知模板表';
+
+-- SSH终端审计日志表
+CREATE TABLE deploy_ssh_audit_log
+(
+    id                 BIGINT AUTO_INCREMENT PRIMARY KEY COMMENT '主键ID',
+    create_by          VARCHAR(100) NULL COMMENT '创建人',
+    create_time        DATETIME(6) NULL COMMENT '创建时间',
+    update_by          VARCHAR(100) NULL COMMENT '更新人',
+    update_time        DATETIME(6) NULL COMMENT '更新时间',
+    version            INT    NOT NULL DEFAULT 1 COMMENT '版本号',
+    deleted            BIT    NOT NULL DEFAULT 0 COMMENT '是否删除',
+    
+    -- 基本信息
+    user_id            BIGINT       NOT NULL COMMENT '用户ID',
+    username           VARCHAR(50)  NULL COMMENT '用户名（冗余）',
+    server_id          BIGINT       NOT NULL COMMENT '服务器ID',
+    server_name        VARCHAR(100) NULL COMMENT '服务器名称（冗余）',
+    server_ip          VARCHAR(50)  NULL COMMENT '服务器IP（冗余）',
+    
+    -- 会话信息
+    session_id         VARCHAR(100) NOT NULL COMMENT 'WebSocket会话ID',
+    connect_time       DATETIME(6)  NOT NULL COMMENT '连接时间',
+    disconnect_time    DATETIME(6)  NULL COMMENT '断开时间',
+    duration_seconds   INT          NULL COMMENT '会话时长（秒）',
+    
+    -- 客户端信息
+    client_ip          VARCHAR(50)  NULL COMMENT '客户端IP',
+    user_agent         VARCHAR(500) NULL COMMENT '浏览器UA',
+    
+    -- 操作记录
+    command_count      INT          NOT NULL DEFAULT 0 COMMENT '执行命令数量',
+    commands           LONGTEXT     NULL COMMENT '执行的命令记录（JSON数组）',
+    
+    -- 状态
+    status             VARCHAR(20)  NULL COMMENT 'SUCCESS成功, FAILED失败, TIMEOUT超时, INTERRUPTED中断',
+    error_message      VARCHAR(500) NULL COMMENT '错误信息',
+    
+    KEY idx_user_id (user_id),
+    KEY idx_server_id (server_id),
+    KEY idx_connect_time (connect_time),
+    KEY idx_session_id (session_id),
+    KEY idx_status (status),
+    CONSTRAINT fk_ssh_audit_user FOREIGN KEY (user_id) REFERENCES sys_user (id),
+    CONSTRAINT fk_ssh_audit_server FOREIGN KEY (server_id) REFERENCES deploy_server (id)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci COMMENT='SSH终端审计日志表';

frontend/src/pages/Resource/Server/List/components/SSHTerminalDialog.tsx

@@ -0,0 +1,492 @@
+import React, { useEffect, useRef, useState, useCallback } from 'react';
+import { Terminal } from 'xterm';
+import { FitAddon } from '@xterm/addon-fit';
+import { WebLinksAddon } from '@xterm/addon-web-links';
+import 'xterm/css/xterm.css';
+import {
+    Dialog,
+    DialogContent,
+    DialogHeader,
+    DialogTitle,
+    DialogDescription,
+} from '@/components/ui/dialog';
+import { Badge } from '@/components/ui/badge';
+import { Button } from '@/components/ui/button';
+import { Loader2, XCircle } from 'lucide-react';
+import { message } from 'antd';
+import type { ServerResponse } from '../types';
+
+// 添加自定义样式
+const customStyles = `
+  /* 自定义滚动条样式 */
+  .terminal-container .xterm-viewport::-webkit-scrollbar {
+    width: 8px;
+  }
+  
+  .terminal-container .xterm-viewport::-webkit-scrollbar-track {
+    background: #2d2d2d;
+    border-radius: 4px;
+  }
+  
+  .terminal-container .xterm-viewport::-webkit-scrollbar-thumb {
+    background: #555;
+    border-radius: 4px;
+  }
+  
+  .terminal-container .xterm-viewport::-webkit-scrollbar-thumb:hover {
+    background: #666;
+  }
+  
+  /* 可调整大小的Dialog */
+  .resizable-dialog {
+    resize: both;
+    overflow: hidden;
+    min-width: 600px;
+    min-height: 400px;
+    max-width: 98vw;
+    max-height: 95vh;
+  }
+`;
+
+interface SSHTerminalDialogProps {
+    open: boolean;
+    onOpenChange: (open: boolean) => void;
+    server: ServerResponse;
+}
+
+type ConnectionStatus = 'initializing' | 'connecting' | 'connected' | 'disconnecting' | 'disconnected' | 'error';
+
+interface WebSocketMessage {
+    type: 'output' | 'error' | 'status';
+    data?: string;
+    message?: string;
+    status?: ConnectionStatus;
+}
+
+export const SSHTerminalDialog: React.FC<SSHTerminalDialogProps> = ({
+    open,
+    onOpenChange,
+    server,
+}) => {
+    const terminalRef = useRef<HTMLDivElement>(null);
+    const terminalInstanceRef = useRef<Terminal | null>(null);
+    const wsRef = useRef<WebSocket | null>(null);
+    const fitAddonRef = useRef<FitAddon | null>(null);
+    const [connectionStatus, setConnectionStatus] = useState<ConnectionStatus>('initializing');
+    const [errorMessage, setErrorMessage] = useState<string>('');
+    const reconnectTimerRef = useRef<NodeJS.Timeout | null>(null);
+    const isClosingRef = useRef<boolean>(false);
+    const dialogContentRef = useRef<HTMLDivElement>(null);
+
+    // 初始化终端和建立连接
+    const initializeTerminalAndConnect = useCallback(() => {
+        console.log('🚀 准备初始化SSH终端, terminalRef.current:', terminalRef.current);
+        
+        if (!terminalRef.current) {
+            console.error('❌ terminalRef.current 为 null，无法初始化');
+            return;
+        }
+
+        console.log('✅ 开始初始化SSH终端');
+        setConnectionStatus('initializing');
+        setErrorMessage('');
+
+        // 1. 初始化终端
+        const terminal = new Terminal({
+            cursorBlink: true,
+            fontSize: 14,
+            fontFamily: 'Consolas, "Courier New", monospace',
+            theme: {
+                background: '#1e1e1e',
+                foreground: '#d4d4d4',
+                cursor: '#d4d4d4',
+                black: '#000000',
+                red: '#cd3131',
+                green: '#0dbc79',
+                yellow: '#e5e510',
+                blue: '#2472c8',
+                magenta: '#bc3fbc',
+                cyan: '#11a8cd',
+                white: '#e5e5e5',
+                brightBlack: '#666666',
+                brightRed: '#f14c4c',
+                brightGreen: '#23d18b',
+                brightYellow: '#f5f543',
+                brightBlue: '#3b8eea',
+                brightMagenta: '#d670d6',
+                brightCyan: '#29b8db',
+                brightWhite: '#e5e5e5',
+            },
+            rows: 30,
+            cols: 100,
+        });
+
+        const fitAddon = new FitAddon();
+        const webLinksAddon = new WebLinksAddon();
+
+        terminal.loadAddon(fitAddon);
+        terminal.loadAddon(webLinksAddon);
+        terminal.open(terminalRef.current);
+        
+        terminalInstanceRef.current = terminal;
+        fitAddonRef.current = fitAddon;
+        
+        // 延迟fit，确保容器已完全渲染
+        setTimeout(() => {
+            fitAddon.fit();
+            console.log('📐 终端尺寸已调整:', terminal.cols, 'x', terminal.rows);
+        }, 100);
+
+        // 2. 监听终端输入
+        terminal.onData((data) => {
+            if (wsRef.current?.readyState === WebSocket.OPEN) {
+                console.log('\u2328\ufe0f \u53d1\u9001\u8f93\u5165:', data.replace(/\r/g, '\\r').replace(/\n/g, '\\n'));
+                wsRef.current.send(JSON.stringify({
+                    type: 'input',
+                    data: data,
+                }));
+            } else {
+                console.warn('\u26a0\ufe0f WebSocket\u672a\u8fde\u63a5\uff0c\u65e0\u6cd5\u53d1\u9001\u8f93\u5165');
+            }
+        });
+
+        // 3. 延迟一点时间再连接，让loading状态显示出来
+        setTimeout(() => {
+            connectWebSocket();
+        }, 300);
+    }, [server.id]);
+
+    useEffect(() => {
+        if (!open) return;
+
+        // 延迟执行，确保 DOM 已经挂载
+        const timer = setTimeout(() => {
+            initializeTerminalAndConnect();
+        }, 50);
+
+        // 窗口大小调整
+        const handleResize = () => {
+            fitAddonRef.current?.fit();
+            console.log('📐 窗口resize触发终端尺寸调整');
+        };
+        window.addEventListener('resize', handleResize);
+
+        // 监听Dialog内容区域大小变化（用户拖动resize）
+        let resizeObserver: ResizeObserver | null = null;
+        if (terminalRef.current) {
+            resizeObserver = new ResizeObserver(() => {
+                fitAddonRef.current?.fit();
+                console.log('📐 Dialog大小变化触发终端尺寸调整');
+            });
+            resizeObserver.observe(terminalRef.current);
+        }
+
+        return () => {
+            clearTimeout(timer);
+            window.removeEventListener('resize', handleResize);
+            if (resizeObserver && terminalRef.current) {
+                resizeObserver.unobserve(terminalRef.current);
+                resizeObserver.disconnect();
+            }
+            // 清理时直接关闭，不显示断开中状态
+            if (wsRef.current) {
+                wsRef.current.close(1000, 'Component unmounted');
+                wsRef.current = null;
+            }
+            if (terminalInstanceRef.current) {
+                terminalInstanceRef.current.dispose();
+                terminalInstanceRef.current = null;
+            }
+            if (reconnectTimerRef.current) {
+                clearTimeout(reconnectTimerRef.current);
+            }
+            isClosingRef.current = false;
+        };
+    }, [open, initializeTerminalAndConnect]);
+
+    const connectWebSocket = () => {
+        if (wsRef.current?.readyState === WebSocket.OPEN) return;
+
+        console.log('\ud83d\udd0c 开始建立WebSocket连接');
+        setConnectionStatus('connecting');
+        setErrorMessage('');
+
+        // 获取token
+        const token = localStorage.getItem('token');
+        if (!token) {
+            const errorMsg = '认证失败：未登录或登录已过期';
+            console.error('❌', errorMsg);
+            setConnectionStatus('error');
+            setErrorMessage(errorMsg);
+            message.error(errorMsg);
+            return;
+        }
+
+        // 获取WebSocket URL - 根据当前协议自动判断，并携带token
+        const protocol = window.location.protocol === 'https:' ? 'wss:' : 'ws:';
+        const wsUrl = `${protocol}//${window.location.host}/api/v1/server-ssh/connect/${server.id}?token=${token}`;
+
+        const ws = new WebSocket(wsUrl);
+        wsRef.current = ws;
+
+        ws.onopen = () => {
+            console.log('\u2705 WebSocket\u8fde\u63a5\u5df2\u5efa\u7acb');
+            // \u6ce8\u610f\uff1a\u8fd9\u91cc\u4e0d\u76f4\u63a5\u8bbe\u7f6e\u4e3aconnected\uff0c\u7b49\u5f85\u540e\u7aef\u53d1\u9001status:connected
+            terminalInstanceRef.current?.writeln('\x1b[32m✓ WebSocket连接已建立\x1b[0m');
+            terminalInstanceRef.current?.writeln('\x1b[36m正在建立SSH会话...\x1b[0m\r\n');
+        };
+
+        ws.onmessage = (event) => {
+            console.log('📥 收到WebSocket消息:', event.data.substring(0, 200));
+            try {
+                const msg: WebSocketMessage = JSON.parse(event.data);
+                console.log('📦 解析后的消息:', msg.type, msg);
+
+                switch (msg.type) {
+                    case 'output':
+                        if (msg.data) {
+                            console.log('📝 输出数据长度:', msg.data.length);
+                            terminalInstanceRef.current?.write(msg.data);
+                        }
+                        break;
+
+                    case 'error':
+                        console.error('❌ SSH错误:', msg.message);
+                        terminalInstanceRef.current?.writeln(`\r\n\x1b[31m错误: ${msg.message}\x1b[0m\r\n`);
+                        message.error(msg.message || '连接错误');
+                        break;
+
+                    case 'status':
+                        console.log('🔄 状态变更:', msg.status);
+                        if (msg.status) {
+                            setConnectionStatus(msg.status);
+                            if (msg.status === 'connected') {
+                                terminalInstanceRef.current?.writeln('\x1b[32m✓ SSH会话已建立\x1b[0m\r\n');
+                                // 连接成功后重新fit，确保尺寸正确
+                                setTimeout(() => {
+                                    fitAddonRef.current?.fit();
+                                    console.log('📐 连接成功后重新调整终端尺寸');
+                                }, 100);
+                            } else if (msg.status === 'disconnected') {
+                                terminalInstanceRef.current?.writeln('\r\n\x1b[33m连接已断开\x1b[0m');
+                            }
+                        }
+                        break;
+                }
+            } catch (error) {
+                console.error('❌ 解析WebSocket消息失败:', error, '原始数据:', event.data);
+            }
+        };
+
+        ws.onerror = (error) => {
+            console.error('❌ WebSocket错误:', error);
+            const errorMsg = 'WebSocket连接失败，请检查后端服务';
+            setConnectionStatus('error');
+            setErrorMessage(errorMsg);
+            terminalInstanceRef.current?.writeln('\r\n\x1b[31m✗ ' + errorMsg + '\x1b[0m');
+            message.error(errorMsg);
+        };
+
+        ws.onclose = (event) => {
+            console.log('🔌 WebSocket连接已关闭, code:', event.code, 'reason:', event.reason);
+            wsRef.current = null;
+            
+            if (isClosingRef.current) {
+                // 用户主动关闭，直接关闭弹窗
+                handleConnectionClosed();
+            } else {
+                // 非主动关闭，显示断开状态
+                setConnectionStatus('disconnected');
+                if (!event.wasClean) {
+                    const errorMsg = event.reason || '连接异常断开';
+                    setErrorMessage(errorMsg);
+                    terminalInstanceRef.current?.writeln('\r\n\x1b[31m✗ ' + errorMsg + '\x1b[0m');
+                } else {
+                    terminalInstanceRef.current?.writeln('\r\n\x1b[33m连接已正常关闭\x1b[0m');
+                }
+            }
+        };
+    };
+
+    const disconnectWebSocket = (showDisconnecting: boolean = false) => {
+        if (wsRef.current) {
+            console.log('🔌 主动关闭WebSocket连接');
+            if (showDisconnecting) {
+                setConnectionStatus('disconnecting');
+                terminalInstanceRef.current?.writeln('\r\n\x1b[33m正在断开连接...\x1b[0m');
+            }
+            if (wsRef.current.readyState === WebSocket.OPEN) {
+                wsRef.current.close(1000, 'User closed');
+            } else {
+                // 如果连接已经断开，直接清理
+                wsRef.current = null;
+                if (isClosingRef.current) {
+                    handleConnectionClosed();
+                }
+            }
+        } else if (isClosingRef.current) {
+            // 没有WebSocket连接，直接关闭
+            handleConnectionClosed();
+        }
+    };
+
+    const handleConnectionClosed = () => {
+        console.log('✅ 连接已完全关闭，关闭弹窗');
+        isClosingRef.current = false;
+        // 延迟一点关闭，让用户看到断开完成
+        setTimeout(() => {
+            // 关闭弹窗并重置所有状态
+            setConnectionStatus('initializing');
+            setErrorMessage('');
+            onOpenChange(false);
+        }, 100);
+    };
+
+    const handleDialogClose = (open: boolean) => {
+        if (!open && connectionStatus !== 'disconnected') {
+            // 用户点击X或ESC关闭，需要先断开连接
+            console.log('🚪 用户关闭弹窗，开始断开连接');
+            isClosingRef.current = true;
+            disconnectWebSocket(true);
+        } else if (!open) {
+            // 已经断开，直接关闭
+            onOpenChange(false);
+        } else {
+            // 打开弹窗
+            onOpenChange(true);
+        }
+    };
+
+    const handleReconnect = () => {
+        console.log('🔄 用户重新连接');
+        isClosingRef.current = false;
+        disconnectWebSocket();
+        if (terminalInstanceRef.current) {
+            terminalInstanceRef.current.clear();
+            terminalInstanceRef.current.dispose();
+            terminalInstanceRef.current = null;
+        }
+        // 重新初始化
+        initializeTerminalAndConnect();
+    };
+
+    const getStatusBadge = () => {
+        switch (connectionStatus) {
+            case 'initializing':
+                return (
+                    <Badge variant="outline" className="bg-blue-100 text-blue-700 dark:bg-blue-500/10 dark:text-blue-300">
+                        <Loader2 className="mr-1 h-3 w-3 animate-spin" />
+                        初始化中
+                    </Badge>
+                );
+            case 'connecting':
+                return (
+                    <Badge variant="outline" className="bg-yellow-100 text-yellow-700 dark:bg-yellow-500/10 dark:text-yellow-300">
+                        <Loader2 className="mr-1 h-3 w-3 animate-spin" />
+                        连接中
+                    </Badge>
+                );
+            case 'connected':
+                return (
+                    <Badge variant="outline" className="bg-emerald-100 text-emerald-700 dark:bg-emerald-500/10 dark:text-emerald-300">
+                        <div className="mr-1 h-2 w-2 rounded-full bg-emerald-500 animate-pulse" />
+                        已连接
+                    </Badge>
+                );
+            case 'error':
+                return (
+                    <Badge variant="outline" className="bg-red-100 text-red-700 dark:bg-red-500/10 dark:text-red-300">
+                        <XCircle className="mr-1 h-3 w-3" />
+                        连接失败
+                    </Badge>
+                );
+            case 'disconnecting':
+                return (
+                    <Badge variant="outline" className="bg-orange-100 text-orange-700 dark:bg-orange-500/10 dark:text-orange-300">
+                        <Loader2 className="mr-1 h-3 w-3 animate-spin" />
+                        断开中
+                    </Badge>
+                );
+            case 'disconnected':
+                return (
+                    <Badge variant="outline" className="bg-gray-100 text-gray-700 dark:bg-gray-500/10 dark:text-gray-300">
+                        <XCircle className="mr-1 h-3 w-3" />
+                        已断开
+                    </Badge>
+                );
+        }
+    };
+
+    return (
+        <>
+            {/* 注入自定义样式 */}
+            <style>{customStyles}</style>
+            
+            <Dialog open={open} onOpenChange={handleDialogClose}>
+                <DialogContent className="resizable-dialog max-w-[95vw] h-[85vh] flex flex-col p-0">
+                    <DialogHeader className="px-6 py-4 border-b">
+                        <div className="flex items-start justify-between pr-8">
+                            <div className="flex-1">
+                                <DialogTitle>SSH终端</DialogTitle>
+                                <DialogDescription className="mt-1">
+                                    {server.serverName} ({server.hostIp})
+                                </DialogDescription>
+                            </div>
+                            <div className="flex items-center gap-2 mt-0.5">
+                                {getStatusBadge()}
+                                {(connectionStatus === 'disconnected' || connectionStatus === 'error') && (
+                                    <Button
+                                        size="sm"
+                                        variant="outline"
+                                        onClick={handleReconnect}
+                                    >
+                                        重新连接
+                                    </Button>
+                                )}
+                            </div>
+                        </div>
+                    </DialogHeader>
+                    <div className="flex-1 bg-[#1e1e1e] overflow-hidden relative">
+                        {/* 终端容器 - 始终渲染，确保fit能正确计算尺寸 */}
+                        <div
+                            ref={terminalRef}
+                            className="w-full h-full p-2 terminal-container"
+                        />
+                        
+                        {/* Loading 状态 - 覆盖在终端上方 */}
+                        {connectionStatus === 'initializing' && (
+                            <div className="absolute inset-0 flex flex-col items-center justify-center text-gray-400 bg-[#1e1e1e]">
+                                <Loader2 className="h-12 w-12 animate-spin mb-4" />
+                                <p className="text-lg">初始化SSH终端...</p>
+                            </div>
+                        )}
+                        
+                        {/* 断开中状态 - 覆盖在终端上方 */}
+                        {connectionStatus === 'disconnecting' && (
+                            <div className="absolute inset-0 flex flex-col items-center justify-center text-orange-400 bg-[#1e1e1e]">
+                                <Loader2 className="h-12 w-12 animate-spin mb-4" />
+                                <p className="text-lg">正在断开连接...</p>
+                            </div>
+                        )}
+                        
+                        {/* 错误状态 - 覆盖在终端上方 */}
+                        {connectionStatus === 'error' && errorMessage && (
+                            <div className="absolute inset-0 flex flex-col items-center justify-center text-red-400 bg-[#1e1e1e]">
+                                <XCircle className="h-12 w-12 mb-4" />
+                                <p className="text-lg font-semibold mb-2">连接失败</p>
+                                <p className="text-sm text-gray-400">{errorMessage}</p>
+                                <Button
+                                    className="mt-6"
+                                    variant="outline"
+                                    onClick={handleReconnect}
+                                >
+                                    重试连接
+                                </Button>
+                            </div>
+                        )}
+                    </div>
+                </DialogContent>
+            </Dialog>
+        </>
+    );
+};