Release: TUI MVVM + DSL, password-based encryption, and S3/database VFS backends

README.md

@@ -44,11 +44,14 @@ it bundles the foundations you reach for again and again behind small, well-defi
   mailboxes), job system, timer/cron scheduler, metrics and health checks.
 - **Messaging & caching** — in-memory, RabbitMQ and AWS SQS/SNS transports; in-memory and Redis caches.
 - **Data & storage** — FreeSql data access, binary persistence (snapshot + WAL), local / S3 / MinIO
-  object storage, and a virtual filesystem (physical / zip / in-memory + an encrypted vault).
+  object storage, and a virtual filesystem (physical / zip / in-memory + an encrypted vault, plus
+  S3-compatible and database-backed backends and composable decorators).
 - **Search, mail & workers** — Elasticsearch indexing with a constrained LINQ provider, IMAP/POP3
   mail polling and an outbound mail queue, and a worker / manager runtime.
 - **Networking, scripting & observability** — TCP/UDP servers with a framing/middleware pipeline,
   Lua scripting and Scriban templating, and OpenTelemetry tracing + metrics export.
+- **Terminal UI** — MVVM for terminal apps via `SquidStd.Tui`: observable ViewModels, a fluent
+  binder (+ `AutoBind` and a declarative DSL), ViewModel-first navigation, DryIoc wiring.
 
 Everything is modular: take only the packages you need, each behind a clean abstraction with an
 in-memory implementation for tests and an external backend for production.
@@ -195,13 +198,15 @@ dotnet new squidstd-manager -n Acme.Manager --messaging inmemory
 | `SquidStd.Storage` | Local file storage backend (`AddFileStorage`). | [![readme](https://img.shields.io/badge/readme-1390A3.svg)](src/SquidStd.Storage/README.md) · [![NuGet](https://img.shields.io/nuget/v/SquidStd.Storage.svg)](https://www.nuget.org/packages/SquidStd.Storage/) |
 | `SquidStd.Storage.S3` | S3/MinIO storage backend (`AddS3Storage`). | [![readme](https://img.shields.io/badge/readme-1390A3.svg)](src/SquidStd.Storage.S3/README.md) · [![NuGet](https://img.shields.io/nuget/v/SquidStd.Storage.S3.svg)](https://www.nuget.org/packages/SquidStd.Storage.S3/) |
 | `SquidStd.Vfs.Abstractions` | Virtual filesystem contracts (`IVirtualFileSystem`, `ILockableFileSystem`, `VfsPath`). | [![readme](https://img.shields.io/badge/readme-1390A3.svg)](src/SquidStd.Vfs.Abstractions/README.md) · [![NuGet](https://img.shields.io/nuget/v/SquidStd.Vfs.Abstractions.svg)](https://www.nuget.org/packages/SquidStd.Vfs.Abstractions/) |
-| `SquidStd.Vfs` | Virtual filesystem providers — physical, in-memory, and zip — plus `VfsDirectories`, a VFS-backed `DirectoriesConfig`. | [![readme](https://img.shields.io/badge/readme-1390A3.svg)](src/SquidStd.Vfs/README.md) · [![NuGet](https://img.shields.io/nuget/v/SquidStd.Vfs.svg)](https://www.nuget.org/packages/SquidStd.Vfs/) |
+| `SquidStd.Vfs` | Virtual filesystem providers — physical, in-memory, and zip — plus composable decorators (`ReadOnlyFileSystem`, `ScopedFileSystem`, `OverlayFileSystem`, `CachingFileSystem`) and `VfsDirectories`. | [![readme](https://img.shields.io/badge/readme-1390A3.svg)](src/SquidStd.Vfs/README.md) · [![NuGet](https://img.shields.io/nuget/v/SquidStd.Vfs.svg)](https://www.nuget.org/packages/SquidStd.Vfs/) |
+| `SquidStd.Vfs.S3` | S3-compatible VFS backend — AWS S3, MinIO, Cloudflare R2, Backblaze B2 — via the MinIO SDK (`RegisterS3FileSystem`). | [![readme](https://img.shields.io/badge/readme-1390A3.svg)](src/SquidStd.Vfs.S3/README.md) · [![NuGet](https://img.shields.io/nuget/v/SquidStd.Vfs.S3.svg)](https://www.nuget.org/packages/SquidStd.Vfs.S3/) |
+| `SquidStd.Vfs.Database` | Database-backed VFS storing files as rows via SquidStd.Database / FreeSql (`RegisterDatabaseFileSystem`). | [![readme](https://img.shields.io/badge/readme-1390A3.svg)](src/SquidStd.Vfs.Database/README.md) · [![NuGet](https://img.shields.io/nuget/v/SquidStd.Vfs.Database.svg)](https://www.nuget.org/packages/SquidStd.Vfs.Database/) |
 
 ### Security — crypto & secrets
 
 | Package | Description | Links |
 |---------|-------------|-------|
-| `SquidStd.Crypto` | OpenPGP key management/operations over an indexed keyring (`SquidStd.Crypto.Pgp`, `RegisterPgp`) plus the encrypted VFS vault decorator (Argon2id + per-entry AES-GCM). | [![readme](https://img.shields.io/badge/readme-1390A3.svg)](src/SquidStd.Crypto/README.md) · [![NuGet](https://img.shields.io/nuget/v/SquidStd.Crypto.svg)](https://www.nuget.org/packages/SquidStd.Crypto/) |
+| `SquidStd.Crypto` | OpenPGP key management/operations over an indexed keyring (`SquidStd.Crypto.Pgp`, `RegisterPgp`), password-based encryption (`PasswordCipher`, Argon2id + AES-256-GCM with a self-describing envelope), and the encrypted VFS vault decorator. | [![readme](https://img.shields.io/badge/readme-1390A3.svg)](src/SquidStd.Crypto/README.md) · [![NuGet](https://img.shields.io/nuget/v/SquidStd.Crypto.svg)](https://www.nuget.org/packages/SquidStd.Crypto/) |
 | `SquidStd.Secrets.Aws` | AWS adapters for the secret seams — KMS envelope `ISecretProtector` and Secrets Manager `ISecretStore`. | [![readme](https://img.shields.io/badge/readme-1390A3.svg)](src/SquidStd.Secrets.Aws/README.md) · [![NuGet](https://img.shields.io/nuget/v/SquidStd.Secrets.Aws.svg)](https://www.nuget.org/packages/SquidStd.Secrets.Aws/) |
 
 ### Search
@@ -227,6 +232,12 @@ dotnet new squidstd-manager -n Acme.Manager --messaging inmemory
 | `SquidStd.Workers` | Worker runtime: consume jobs, dispatch to `IJobHandler`s, publish heartbeats (`AddWorkers`). | [![readme](https://img.shields.io/badge/readme-1390A3.svg)](src/SquidStd.Workers/README.md) · [![NuGet](https://img.shields.io/nuget/v/SquidStd.Workers.svg)](https://www.nuget.org/packages/SquidStd.Workers/) |
 | `SquidStd.Workers.Manager` | Job enqueue, heartbeat registry, offline sweep, opt-in ASP.NET endpoints (`AddWorkerManager`). | [![readme](https://img.shields.io/badge/readme-1390A3.svg)](src/SquidStd.Workers.Manager/README.md) · [![NuGet](https://img.shields.io/nuget/v/SquidStd.Workers.Manager.svg)](https://www.nuget.org/packages/SquidStd.Workers.Manager/) |
 
+### User interface
+
+| Package | Description | Links |
+|---------|-------------|-------|
+| `SquidStd.Tui` | MVVM for terminal apps on Terminal.Gui v2 — observable ViewModels, a fluent binder (+ `AutoBind` and a declarative DSL), ViewModel-first navigation, DryIoc wiring. | [![readme](https://img.shields.io/badge/readme-1390A3.svg)](src/SquidStd.Tui/README.md) · [![NuGet](https://img.shields.io/nuget/v/SquidStd.Tui.svg)](https://www.nuget.org/packages/SquidStd.Tui/) |
+
 ### Scripting & templating
 
 | Package | Description | Links |

SquidStd.slnx

@@ -1,70 +1,74 @@
 <Solution>
     <Folder Name="/src/">
-        <Project Path="src/SquidStd.Abstractions/SquidStd.Abstractions.csproj" />
-        <Project Path="src/SquidStd.Generators/SquidStd.Generators.csproj" />
-        <Project Path="src/SquidStd.Telemetry.Abstractions/SquidStd.Telemetry.Abstractions.csproj" />
-        <Project Path="src/SquidStd.Telemetry.OpenTelemetry/SquidStd.Telemetry.OpenTelemetry.csproj" />
-        <Project Path="src/SquidStd.Aws.Abstractions/SquidStd.Aws.Abstractions.csproj" />
-        <Project Path="src/SquidStd.Actors/SquidStd.Actors.csproj" />
-        <Project Path="src/SquidStd.AspNetCore/SquidStd.AspNetCore.csproj" />
-        <Project Path="src/SquidStd.Caching.Abstractions/SquidStd.Caching.Abstractions.csproj" />
-        <Project Path="src/SquidStd.Caching.Redis/SquidStd.Caching.Redis.csproj" />
-        <Project Path="src/SquidStd.Caching/SquidStd.Caching.csproj" />
-        <Project Path="src/SquidStd.Core/SquidStd.Core.csproj" />
-        <Project Path="src/SquidStd.Database.Abstractions/SquidStd.Database.Abstractions.csproj" />
-        <Project Path="src/SquidStd.Database/SquidStd.Database.csproj" />
-        <Project Path="src/SquidStd.Messaging.Abstractions/SquidStd.Messaging.Abstractions.csproj" />
-        <Project Path="src/SquidStd.Messaging.RabbitMq/SquidStd.Messaging.RabbitMq.csproj" />
-        <Project Path="src/SquidStd.Messaging.Sqs/SquidStd.Messaging.Sqs.csproj" />
-        <Project Path="src/SquidStd.Messaging/SquidStd.Messaging.csproj" />
-        <Project Path="src/SquidStd.Network/SquidStd.Network.csproj" />
-        <Project Path="src/SquidStd.Persistence.Abstractions/SquidStd.Persistence.Abstractions.csproj" />
-        <Project Path="src/SquidStd.Persistence/SquidStd.Persistence.csproj" />
-        <Project Path="src/SquidStd.Persistence.MessagePack/SquidStd.Persistence.MessagePack.csproj" />
-        <Project Path="src/SquidStd.Plugin.Abstractions/SquidStd.Plugin.Abstractions.csproj" />
-        <Project Path="src/SquidStd.Scripting.Lua/SquidStd.Scripting.Lua.csproj" />
-        <Project Path="src/SquidStd.Services.Core/SquidStd.Services.Core.csproj" />
-        <Project Path="src/SquidStd.Storage.Abstractions/SquidStd.Storage.Abstractions.csproj" />
-        <Project Path="src/SquidStd.Storage.S3/SquidStd.Storage.S3.csproj" />
-        <Project Path="src/SquidStd.Storage/SquidStd.Storage.csproj" />
-        <Project Path="src/SquidStd.Templating/SquidStd.Templating.csproj" />
-        <Project Path="src/SquidStd.Workers.Abstractions/SquidStd.Workers.Abstractions.csproj" />
-        <Project Path="src/SquidStd.Workers/SquidStd.Workers.csproj" />
-        <Project Path="src/SquidStd.Workers.Manager/SquidStd.Workers.Manager.csproj" />
-        <Project Path="src/SquidStd.Templates/SquidStd.Templates.csproj" />
-        <Project Path="src/SquidStd.Search.Abstractions/SquidStd.Search.Abstractions.csproj" />
-        <Project Path="src/SquidStd.Search.Elasticsearch/SquidStd.Search.Elasticsearch.csproj" />
-        <Project Path="src/SquidStd.Mail.Abstractions/SquidStd.Mail.Abstractions.csproj" />
-        <Project Path="src/SquidStd.Mail.MailKit/SquidStd.Mail.MailKit.csproj" />
-        <Project Path="src/SquidStd.Mail.Queue/SquidStd.Mail.Queue.csproj" />
-        <Project Path="src/SquidStd.Crypto/SquidStd.Crypto.csproj" />
-        <Project Path="src/SquidStd.Vfs.Abstractions/SquidStd.Vfs.Abstractions.csproj" />
-        <Project Path="src/SquidStd.Vfs/SquidStd.Vfs.csproj" />
-        <Project Path="src/SquidStd.Secrets.Aws/SquidStd.Secrets.Aws.csproj" />
+        <Project Path="src/SquidStd.Abstractions/SquidStd.Abstractions.csproj"/>
+        <Project Path="src/SquidStd.Generators/SquidStd.Generators.csproj"/>
+        <Project Path="src/SquidStd.Telemetry.Abstractions/SquidStd.Telemetry.Abstractions.csproj"/>
+        <Project Path="src/SquidStd.Telemetry.OpenTelemetry/SquidStd.Telemetry.OpenTelemetry.csproj"/>
+        <Project Path="src/SquidStd.Aws.Abstractions/SquidStd.Aws.Abstractions.csproj"/>
+        <Project Path="src/SquidStd.Actors/SquidStd.Actors.csproj"/>
+        <Project Path="src/SquidStd.AspNetCore/SquidStd.AspNetCore.csproj"/>
+        <Project Path="src/SquidStd.Caching.Abstractions/SquidStd.Caching.Abstractions.csproj"/>
+        <Project Path="src/SquidStd.Caching.Redis/SquidStd.Caching.Redis.csproj"/>
+        <Project Path="src/SquidStd.Caching/SquidStd.Caching.csproj"/>
+        <Project Path="src/SquidStd.Core/SquidStd.Core.csproj"/>
+        <Project Path="src/SquidStd.Database.Abstractions/SquidStd.Database.Abstractions.csproj"/>
+        <Project Path="src/SquidStd.Database/SquidStd.Database.csproj"/>
+        <Project Path="src/SquidStd.Messaging.Abstractions/SquidStd.Messaging.Abstractions.csproj"/>
+        <Project Path="src/SquidStd.Messaging.RabbitMq/SquidStd.Messaging.RabbitMq.csproj"/>
+        <Project Path="src/SquidStd.Messaging.Sqs/SquidStd.Messaging.Sqs.csproj"/>
+        <Project Path="src/SquidStd.Messaging/SquidStd.Messaging.csproj"/>
+        <Project Path="src/SquidStd.Network/SquidStd.Network.csproj"/>
+        <Project Path="src/SquidStd.Persistence.Abstractions/SquidStd.Persistence.Abstractions.csproj"/>
+        <Project Path="src/SquidStd.Persistence/SquidStd.Persistence.csproj"/>
+        <Project Path="src/SquidStd.Persistence.MessagePack/SquidStd.Persistence.MessagePack.csproj"/>
+        <Project Path="src/SquidStd.Plugin.Abstractions/SquidStd.Plugin.Abstractions.csproj"/>
+        <Project Path="src/SquidStd.Scripting.Lua/SquidStd.Scripting.Lua.csproj"/>
+        <Project Path="src/SquidStd.Services.Core/SquidStd.Services.Core.csproj"/>
+        <Project Path="src/SquidStd.Storage.Abstractions/SquidStd.Storage.Abstractions.csproj"/>
+        <Project Path="src/SquidStd.Storage.S3/SquidStd.Storage.S3.csproj"/>
+        <Project Path="src/SquidStd.Storage/SquidStd.Storage.csproj"/>
+        <Project Path="src/SquidStd.Templating/SquidStd.Templating.csproj"/>
+        <Project Path="src/SquidStd.Workers.Abstractions/SquidStd.Workers.Abstractions.csproj"/>
+        <Project Path="src/SquidStd.Workers/SquidStd.Workers.csproj"/>
+        <Project Path="src/SquidStd.Workers.Manager/SquidStd.Workers.Manager.csproj"/>
+        <Project Path="src/SquidStd.Templates/SquidStd.Templates.csproj"/>
+        <Project Path="src/SquidStd.Search.Abstractions/SquidStd.Search.Abstractions.csproj"/>
+        <Project Path="src/SquidStd.Search.Elasticsearch/SquidStd.Search.Elasticsearch.csproj"/>
+        <Project Path="src/SquidStd.Mail.Abstractions/SquidStd.Mail.Abstractions.csproj"/>
+        <Project Path="src/SquidStd.Mail.MailKit/SquidStd.Mail.MailKit.csproj"/>
+        <Project Path="src/SquidStd.Mail.Queue/SquidStd.Mail.Queue.csproj"/>
+        <Project Path="src/SquidStd.Crypto/SquidStd.Crypto.csproj"/>
+        <Project Path="src/SquidStd.Vfs.Abstractions/SquidStd.Vfs.Abstractions.csproj"/>
+        <Project Path="src/SquidStd.Vfs/SquidStd.Vfs.csproj"/>
+        <Project Path="src/SquidStd.Vfs.S3/SquidStd.Vfs.S3.csproj"/>
+        <Project Path="src/SquidStd.Vfs.Database/SquidStd.Vfs.Database.csproj"/>
+        <Project Path="src/SquidStd.Secrets.Aws/SquidStd.Secrets.Aws.csproj"/>
+        <Project Path="src/SquidStd.Tui/SquidStd.Tui.csproj"/>
     </Folder>
     <Folder Name="/samples/">
-        <Project Path="samples/SquidStd.Samples.WorkerSystem/SquidStd.Samples.WorkerSystem.csproj" />
-        <Project Path="samples/SquidStd.Samples.Templating/SquidStd.Samples.Templating.csproj" />
-        <Project Path="samples/SquidStd.Samples.Storage/SquidStd.Samples.Storage.csproj" />
-        <Project Path="samples/SquidStd.Samples.Search/SquidStd.Samples.Search.csproj" />
-        <Project Path="samples/SquidStd.Samples.ScriptingLua/SquidStd.Samples.ScriptingLua.csproj" />
-        <Project Path="samples/SquidStd.Samples.Plugins/SquidStd.Samples.Plugins.csproj" />
-        <Project Path="samples/SquidStd.Samples.Networking/SquidStd.Samples.Networking.csproj" />
-        <Project Path="samples/SquidStd.Samples.Persistence/SquidStd.Samples.Persistence.csproj" />
-        <Project Path="samples/SquidStd.Samples.Commands/SquidStd.Samples.Commands.csproj" />
-        <Project Path="samples/SquidStd.Samples.Email/SquidStd.Samples.Email.csproj" />
-        <Project Path="samples/SquidStd.Samples.Database/SquidStd.Samples.Database.csproj" />
-        <Project Path="samples/SquidStd.Samples.AspNetCore/SquidStd.Samples.AspNetCore.csproj" />
-        <Project Path="samples/SquidStd.Samples.Messaging/SquidStd.Samples.Messaging.csproj" />
-        <Project Path="samples/SquidStd.Samples.Caching/SquidStd.Samples.Caching.csproj" />
-        <Project Path="samples/SquidStd.Samples.EventsJobsScheduling/SquidStd.Samples.EventsJobsScheduling.csproj" />
-        <Project Path="samples/SquidStd.Samples.GettingStarted/SquidStd.Samples.GettingStarted.csproj" />
-        <Project Path="samples/SquidStd.Samples.Crypto/SquidStd.Samples.Crypto.csproj" />
-        <Project Path="samples/SquidStd.Samples.Vfs/SquidStd.Samples.Vfs.csproj" />
-        <Project Path="samples/SquidStd.Samples.Secrets/SquidStd.Samples.Secrets.csproj" />
-        <Project Path="samples/SquidStd.Samples.Actors/SquidStd.Samples.Actors.csproj" />
+        <Project Path="samples/SquidStd.Samples.WorkerSystem/SquidStd.Samples.WorkerSystem.csproj"/>
+        <Project Path="samples/SquidStd.Samples.Templating/SquidStd.Samples.Templating.csproj"/>
+        <Project Path="samples/SquidStd.Samples.Storage/SquidStd.Samples.Storage.csproj"/>
+        <Project Path="samples/SquidStd.Samples.Search/SquidStd.Samples.Search.csproj"/>
+        <Project Path="samples/SquidStd.Samples.ScriptingLua/SquidStd.Samples.ScriptingLua.csproj"/>
+        <Project Path="samples/SquidStd.Samples.Plugins/SquidStd.Samples.Plugins.csproj"/>
+        <Project Path="samples/SquidStd.Samples.Networking/SquidStd.Samples.Networking.csproj"/>
+        <Project Path="samples/SquidStd.Samples.Persistence/SquidStd.Samples.Persistence.csproj"/>
+        <Project Path="samples/SquidStd.Samples.Commands/SquidStd.Samples.Commands.csproj"/>
+        <Project Path="samples/SquidStd.Samples.Email/SquidStd.Samples.Email.csproj"/>
+        <Project Path="samples/SquidStd.Samples.Database/SquidStd.Samples.Database.csproj"/>
+        <Project Path="samples/SquidStd.Samples.AspNetCore/SquidStd.Samples.AspNetCore.csproj"/>
+        <Project Path="samples/SquidStd.Samples.Messaging/SquidStd.Samples.Messaging.csproj"/>
+        <Project Path="samples/SquidStd.Samples.Caching/SquidStd.Samples.Caching.csproj"/>
+        <Project Path="samples/SquidStd.Samples.EventsJobsScheduling/SquidStd.Samples.EventsJobsScheduling.csproj"/>
+        <Project Path="samples/SquidStd.Samples.GettingStarted/SquidStd.Samples.GettingStarted.csproj"/>
+        <Project Path="samples/SquidStd.Samples.Crypto/SquidStd.Samples.Crypto.csproj"/>
+        <Project Path="samples/SquidStd.Samples.Vfs/SquidStd.Samples.Vfs.csproj"/>
+        <Project Path="samples/SquidStd.Samples.Secrets/SquidStd.Samples.Secrets.csproj"/>
+        <Project Path="samples/SquidStd.Samples.Actors/SquidStd.Samples.Actors.csproj"/>
+        <Project Path="samples/SquidStd.Samples.Tui/SquidStd.Samples.Tui.csproj"/>
     </Folder>
     <Folder Name="/tests/">
-        <Project Path="tests/SquidStd.Tests/SquidStd.Tests.csproj" />
+        <Project Path="tests/SquidStd.Tests/SquidStd.Tests.csproj"/>
     </Folder>
 </Solution>

docs/articles/toc.yml

@@ -80,6 +80,10 @@
   href: vfs-abstractions.md
 - name: SquidStd.Vfs
   href: vfs.md
+- name: SquidStd.Vfs.S3
+  href: vfs-s3.md
+- name: SquidStd.Vfs.Database
+  href: vfs-database.md
 - name: SquidStd.Scripting.Lua
   href: scripting-lua.md
 - name: SquidStd.Templating
@@ -114,6 +118,8 @@
   href: telemetry-opentelemetry.md
 - name: SquidStd.Aws.Abstractions
   href: aws-abstractions.md
+- name: SquidStd.Tui
+  href: tui.md
 - name: SquidStd.Crypto
   href: crypto.md
 - name: SquidStd.Secrets.Aws

docs/articles/tui.md

@@ -0,0 +1 @@
+[!include[](../../src/SquidStd.Tui/README.md)]

docs/articles/vfs-database.md

@@ -0,0 +1 @@
+[!include[](../../src/SquidStd.Vfs.Database/README.md)]

docs/articles/vfs-s3.md

@@ -0,0 +1 @@
+[!include[](../../src/SquidStd.Vfs.S3/README.md)]

docs/tutorials/crypto.md

@@ -43,6 +43,37 @@ survives a restart.
 
 [!code-csharp[](../../samples/SquidStd.Samples.Crypto/Program.cs#step-4)]
 
+## Password-based encryption
+
+`PasswordCipher` encrypts a payload directly under a password — no key management required. Argon2id
+derives the key, AES-256-GCM seals the data, and the result is a self-describing, versioned envelope
+(salt, nonce, tag and KDF cost are embedded). Decryption needs only the password and the blob.
+
+```csharp
+using SquidStd.Crypto.Password;
+using SquidStd.Crypto.Password.Data;
+
+// Bytes round-trip.
+byte[] blob = PasswordCipher.Encrypt(payloadBytes, "correct horse battery staple");
+byte[] back = PasswordCipher.Decrypt(blob, "correct horse battery staple");
+
+// Text round-trip — the envelope is base64-encoded, safe to store in config or JSON.
+string protectedText = PasswordCipher.EncryptString("a secret", "pw");
+string clear         = PasswordCipher.DecryptString(protectedText, "pw");
+```
+
+The cost of the Argon2id key derivation defaults to `PbkdfCost.Moderate`. Raise it when protecting
+long-lived secrets:
+
+```csharp
+// PbkdfCost.Sensitive — slower derivation, stronger resistance to offline attacks.
+byte[] strong = PasswordCipher.Encrypt(payloadBytes, "pw", PbkdfCost.Sensitive);
+```
+
+A wrong password or tampered data raises `PasswordDecryptionException`. Use `PasswordCipher` for
+user-supplied passwords; for app-key or KMS encryption use `CryptoUtils` / `ISecretProtector`
+instead.
+
 ## Run it
 
 ```bash

docs/tutorials/toc.yml

@@ -44,5 +44,7 @@
   href: vfs.md
 - name: Crypto (PGP)
   href: crypto.md
+- name: Terminal UI (MVVM)
+  href: tui.md
 - name: Secrets (KMS / Secrets Manager)
   href: secrets.md