bump to 1.3, document terminal-free run + password + update-in-menu

- build.sh CFBundleShortVersionString 1.2 -> 1.3
- README/README.ru: password field, inline run status, run-in-terminal fallback, updates in the '...' menu; add smoke test to the Tests section
- PRD: current state v1.3.0, Runner.swift + smoke test in architecture

Author: boundlessend

README.md

@@ -38,9 +38,11 @@ copies it to the clipboard, or runs it in a terminal.
 - Preview button: a dry run (`-n`) to see what would transfer before doing it
 - Every toggle has a tooltip explaining what the flag does
 - Live command with shell-safe quoting of paths
-- Copy to clipboard, or run in a separate terminal window (SSH password prompts work there)
+- Optional SSH password field (kept in memory only) so a run needs no terminal; leave empty for key-based login
+- Run and Preview execute inline: a spinner in the button, a brief success check, or an in-panel error banner with the output
+- Copy to clipboard; a "Run in terminal" fallback lives in the "•••" menu for 2FA / host-key confirmation
 - Interface language (English / Русский) switchable in Settings
-- Check for updates in Settings: compares your version against the latest GitHub release
+- Check for updates from the "•••" menu: compares your version against the latest GitHub release
 
 ## Install
 
@@ -68,10 +70,11 @@ With [InjectionIII](https://github.com/johnno1962/InjectionIII) running, method-
 edits are hot-swapped at runtime. There is no `Inject` dependency, so SwiftUI views
 do not auto-refresh - it is a plain debug build plus `-interposable`.
 
-## Logic check
+## Tests
 
 ```sh
-swiftc Sources/rsync-builder/Command.swift tests/main.swift -o /tmp/rsync_check && /tmp/rsync_check
+swiftc Sources/rsync-builder/Command.swift tests/main.swift  -o /tmp/rsync_check && /tmp/rsync_check   # logic
+swiftc Sources/rsync-builder/Command.swift tests/smoke.swift -o /tmp/rsync_smoke && /tmp/rsync_smoke  # smoke: local rsync + SSH_ASKPASS wiring
 ```
 
 ## Dependencies

README.ru.md

@@ -38,9 +38,11 @@
 - Кнопка Preview: пробный прогон (`-n`), чтобы увидеть, что будет перенесено, до реального запуска
 - У каждого переключателя подсказка, за что отвечает флаг
 - Живая команда с безопасным shell-квотингом путей
-- Копирование в буфер или запуск в отдельном окне терминала (там же вводится пароль SSH)
+- Необязательное поле пароля SSH (хранится только в памяти) - запуск без терминала; пусто = вход по ключу
+- Run и Preview выполняются прямо в панели: крутилка в кнопке, короткая галочка успеха либо баннер ошибки с выводом
+- Копирование в буфер; запасной «Запустить в терминале» - в меню «•••» (для 2FA / подтверждения host key)
 - Язык интерфейса (English / Русский) переключается в Настройках
-- Проверка обновлений в Настройках: сверяет твою версию с последним релизом на GitHub
+- Проверка обновлений в меню «•••»: сверяет твою версию с последним релизом на GitHub
 
 ## Установка
 
@@ -68,10 +70,11 @@ open rsync-builder.app
 подхватываются на лету. Зависимости `Inject` нет, поэтому SwiftUI-вью не обновляются
 автоматически - это просто debug-сборка с `-interposable`.
 
-## Проверка логики
+## Тесты
 
 ```sh
-swiftc Sources/rsync-builder/Command.swift tests/main.swift -o /tmp/rsync_check && /tmp/rsync_check
+swiftc Sources/rsync-builder/Command.swift tests/main.swift  -o /tmp/rsync_check && /tmp/rsync_check   # логика
+swiftc Sources/rsync-builder/Command.swift tests/smoke.swift -o /tmp/rsync_smoke && /tmp/rsync_smoke  # смоук: локальный rsync + проводка SSH_ASKPASS
 ```
 
 ## Зависимости

build.sh

@@ -23,7 +23,7 @@ cat > "$APP/Contents/Info.plist" <<'PLIST'
   <key>CFBundleExecutable</key><string>rsync-builder</string>
   <key>CFBundleIconFile</key><string>AppIcon</string>
   <key>CFBundlePackageType</key><string>APPL</string>
-  <key>CFBundleShortVersionString</key><string>1.2</string>
+  <key>CFBundleShortVersionString</key><string>1.3</string>
   <key>LSMinimumSystemVersion</key><string>26.0</string>
   <key>NSHighResolutionCapable</key><true/>
   <key>LSUIElement</key><true/>

docs/PRD.md

@@ -1,7 +1,7 @@
 # rsync builder - PRD
 
-Status: v1.2 shipped (Phases 1-2 of the expansion done). This document records the
-current state and the planned expansion so nothing gets lost.
+Status: v1.3 shipped (Phases 1-2 of the expansion done, plus terminal-free run + password auth).
+This document records the current state and the planned expansion so nothing gets lost.
 
 Last updated: 2026-07-04
 
@@ -14,7 +14,7 @@ folders to servers and wants the correct command without memorising flags.
 Non-goals: multi-source lists (decided against), code signing/notarization,
 being a general file manager.
 
-## 2. Current state (shipped, v1.2.0)
+## 2. Current state (shipped, v1.3.0)
 
 ### UX
 - Menu bar only app (`MenuBarExtra`, `.window` style, `LSUIElement`): no Dock icon,
@@ -31,28 +31,38 @@ being a general file manager.
   `--rsync-path="sudo rsync"`) and an upload-only post-sync command appended as
   `rsync … && ssh -p N user@host '<cmd>'`. (v1.2)
 - Live command with shell-safe quoting of every path (`shellQuote`).
-- Copy to clipboard; Run in a separate terminal window (SwiftTerm), where SSH
-  password/passphrase prompts work.
-- Buttons in a top bar (direction + Copy + Run + "•••" menu with Settings / About / Quit).
+- Optional SSH password field (`SecureField`, in-memory only, never persisted). Run/Preview
+  execute inline via `Process` (`/bin/sh -c`) with no terminal; the password is fed to ssh
+  through an `SSH_ASKPASS` helper reading it from the child env (`RSYNC_BUILDER_PASS`), never
+  written to disk. Empty password = key-based login. Host key auto-accepted via
+  `RSYNC_RSH=ssh -o StrictHostKeyChecking=accept-new`. (v1.3)
+- Run state shown inline: a spinner in the Run/Preview button (doubling as cancel), a brief
+  green success check for Run, or an in-panel error banner with the exit code + output.
+  Preview surfaces its dry-run output in that banner. (v1.3)
+- Copy to clipboard; a "Run in terminal" fallback (SwiftTerm) stays in the "•••" menu for
+  2FA / host-key confirmation. (v1.3)
+- Buttons in a top bar (direction + Preview + Copy + Run + "•••" menu).
 - Localization EN / RU, language switch in the Settings window (default EN).
-- "Check for updates" in Settings: queries the GitHub Releases API (native `URLSession`,
+- "Check for updates" in the "•••" menu: queries the GitHub Releases API (native `URLSession`,
   no new dependency) and compares `tag_name` against the app version. A silent auto-check
-  runs at most once a day and surfaces only when an update is available.
+  runs at most once a day and surfaces only when an update is available. (v1.3: moved from Settings)
 - Native Liquid Glass, Pow button effects (gated by Reduce Motion), accessibility
   labels, `@FocusState`, incomplete-command guard (Run disabled until server + both paths).
 - Form state persisted between launches (`@AppStorage`); server profiles and exclude
   list persisted via Defaults; real servers live only in local `UserDefaults`, never in source.
 
 ### Architecture
-- `Command.swift`: pure `buildCommand(...)`, `shellQuote`, `ServerProfile`, `ExcludeItem`,
-  `Direction`, `defaultProfiles` (single `example` profile), `defaultExcludes`.
-- `App.swift`: `ContentView` (the popover) + `RsyncBuilderApp` scene (`MenuBarExtra` + `Settings`).
-- `Terminal.swift`: `TerminalWindow` (SwiftTerm run window).
-- `Persistence.swift`: Defaults key for profiles.
-- `Localization.swift`, `Settings.swift`, `Menu.swift`.
+- `Command.swift`: pure `buildCommand(...)`, `shellQuote`, `runTransport`, `runEnvironment`,
+  `askpassScript`, `ServerProfile`, `ExcludeItem`, `Direction`, defaults.
+- `Runner.swift`: `CommandRunner` (runs rsync via `Process`, publishes state/output; no window).
+- `App.swift`: `ContentView` (the popover, spinner-in-button + result banner) + `RsyncBuilderApp` scene.
+- `Terminal.swift`: `TerminalWindow` (SwiftTerm fallback run window).
+- `Persistence.swift`: Defaults keys for profiles/excludes.
+- `Localization.swift`, `Settings.swift`, `Menu.swift`, `Update.swift`.
 - Deps: SwiftTerm, Pow, Defaults. Requires macOS 26+.
-- Tests: assert-based logic check for `buildCommand` (`tests/main.swift`).
-- CI: `ci` (build + logic test), `lint` (swift-format, non-blocking), `release`
+- Tests: assert-based logic (`tests/main.swift`) + server-free smoke (`tests/smoke.swift`:
+  local rsync run + `SSH_ASKPASS` password delivery).
+- CI: `ci` (build + logic + smoke), `lint` (swift-format, non-blocking), `release`
   (DMG on tag `v*`), `stale`, `dependency-review`. Public repo, BSD-3.
 
 ## 3. Planned expansion