Editor settings, SSH/SSL runtime, data import + table-menu loose ends (#7)

* feat: editor settings model + typed clamped defaults (Task 1)

* feat: carry SSH config + ssh_password to backend DbConfig (Task 2)

* feat: Change enum bulk/drop/empty + type-specific change payload builder (Task 3)

* feat: csv parser + shared export util (Task 4)

* feat: rustls TLS connector factory with modes + client auth (Task 5)

* feat: real SSH tunnel manager (testable backend) + pool eviction hook (Task 6)

* feat: table DDL fetch (sqlite + pg_dump arg builder) (Task 7)

* feat: keychain SSH secrets + connection delete purge + tunnel lifecycle (Task 8)

* feat: real SSH tunnel + TLS connect path for postgres/mysql (Task 9)

* feat: execute_change bulk/drop/empty + get_table_ddl command (Task 10)

* feat: fetch SSH secrets into dbConnect + save on connection form (Task 11)

* feat: Editor settings tab UI (Task 12)

* feat: QueryEditor applies editor settings live (Task 13)

* feat: ImportDialog with CSV/JSON preview + column mapping (Task 14)

* feat: table-menu export/empty/delete/import + queue labels + payload builder (Task 15)

* fix: error sanitization, encrypted-key guard, row-indexed import errors, caps (Task 16)

* docs: mark Editor Settings, SSH/SSL runtime, Data Import, table-menu loose ends shipped (Task 17)

* feat: auto-refresh schema tree after schema-modifying SQL (query + queue drop)

* fix: use theme-consistent red classes for danger menu items (text-error was undefined)

* feat: changes queue as tab-bar popover + amber pending border

* feat: redesign changes popover (visual/SQL toggle, cards, footer actions, Cmd+S)

* refactor: drop per-card status label from changes popover cards

* feat: green completion indicator on committed cards + auto-close tabs of dropped tables

* docs: changes queue popover UX + auto schema refresh statuses

src/components/db-viewer/EditConnectionModal.tsx

@@ -4,7 +4,7 @@ import { Button } from "../ui/Button";
 import { DetailedConnectionForm } from "../connections/DetailedConnectionForm";
 import { useConnectionStore } from "../../stores/connectionStore";
 import { useNotificationStore } from "../../stores/notificationStore";
-import { updateConnection, testConnection, saveConnectionPassword } from "../../lib/commands";
+import { updateConnection, testConnection, saveConnectionPassword, saveConnectionSshPassword, saveConnectionSshPassphrase } from "../../lib/commands";
 import type { Connection, ConnectionInput } from "../../lib/types";
 import type { ConnectionFormData } from "../connections/connectionFormData";
 
@@ -34,6 +34,15 @@ export function EditConnectionModal({
     password: null,
     database: connection.database ?? null,
     use_keychain: false,
+    ssh_host: connection.ssh_host ?? null,
+    ssh_port: connection.ssh_port ?? null,
+    ssh_user: connection.ssh_user ?? null,
+    ssh_auth_method:
+      (connection.ssh_auth_method as "password" | "key" | null | undefined) ??
+      null,
+    ssh_private_key: connection.ssh_private_key_path ?? null,
+    ssh_password: null,
+    ssh_passphrase: null,
   }));
   const [saving, setSaving] = useState(false);
   const [testing, setTesting] = useState(false);
@@ -55,11 +64,25 @@ export function EditConnectionModal({
         folder_id: form.folder_id,
         environment: form.environment,
         tag_ids: form.tag_ids,
+        ssh_host: form.ssh_host ?? null,
+        ssh_port: form.ssh_port ?? null,
+        ssh_user: form.ssh_user ?? null,
+        ssh_auth_method: form.ssh_auth_method ?? null,
+        ssh_private_key_path: form.ssh_private_key ?? null,
+        ssh_password: form.ssh_password ?? null,
+        ssh_passphrase: form.ssh_passphrase ?? null,
       };
       const updated = await updateConnection(connection.id, input);
       if (form.password) {
         await saveConnectionPassword(connection.id, form.password).catch(() => {});
       }
+      // Persist SSH secrets to the OS keychain (not SQLite)
+      if (form.ssh_host && (form.ssh_auth_method ?? "password") === "password" && form.ssh_password) {
+        await saveConnectionSshPassword(connection.id, form.ssh_password).catch(() => {});
+      }
+      if (form.ssh_host && form.ssh_passphrase) {
+        await saveConnectionSshPassphrase(connection.id, form.ssh_passphrase).catch(() => {});
+      }
       notify("Connection updated", "success");
       onSaved(updated);
       onClose();
@@ -91,6 +114,7 @@ export function EditConnectionModal({
         folder_id: form.folder_id,
         environment: form.environment,
         tag_ids: form.tag_ids,
+        ssh_password: form.ssh_password ?? null,
       });
       if (result.ok) {
         notify("Connection successful", "success");